Processes beginning with r

Chinese originated browser hijacker - redirecting to 4199.com Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the RA TROJAN!

Added by the MIMAIL.S WORM!

Related to RaboBank electronic banking software

RaLink wireless LAN configuration utility

Radarsync utility comes from DFI with their latest motherboards, e.g., DFI LanParty Ultra - checks for BIOS and driver updates periodically

RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings

Radio365 - create playlists and broadcast live straight from your PC!

Used to configure wire less networks. Windows automatically detects the Wireless network and it configures the network

IAA Event Monitor User Notification Tool - part of Intel? Application Accelerator - "a performance software package for desktop PCs using select Intel? chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed

VIA V-RAID Tool - hard disk striping/mirroring utility for increased performance and reliability

Rainlendar is a customizable calendar that displays the current month

Rainlendar is a customizable calendar that displays the current month

Rainmeter is a customizable performance meter, which can display the CPU load, memory utilization, etc

RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs

Added by the AKAK TROJAN!

Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

Virtual Hard Drive (Ram Drive) from Farstone - takes a portion of your system memory (RAM) and uses it to simulate a hard disk drive

RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source

Added by the RANDEX.RH WORM!

Added by the DLOADER-KM TROJAN!

Added by the DELBOT-P WORM!

Added by the DELBOT-L WORM!

Added by the XROVE-A WORM!

Added by the SDBOT-DV WORM!

Added by the RBOT-ZB WORM!

Application protection component of BlackICE PC Protection (was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch

Added by the QQPASS-V TROJAN!

Added by the QQPASS-S TROJAN!

Added by the PWS-ACP TROJAN!

XPoint "Rapid Restore PC" - a "Managed Recovery? solution that enables IT Administrators to protect the corporate image, while offloading personal data backup and recovery chores to the end user"

RapidBlaster parasite. Recommended you use RapidBlaster Killer to uninstall - see here

Added by the QQPASS-AA TROJAN!

Added by the QQPASS-AB TROJAN!

Symantec VPN Client used to connect to corporate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking

Added by the SPYBOT.EM WORM!

Hijacker, also detected as the ADWAHECK TROJAN!

PurityScan/Clickspring adware

Added by the BCKDR-QGN TROJAN!

Added by the FEUTEL-H TROJAN!

Added by the BEAGLE.E WORM and variants!

Unidentified adware

RAV anti-virus related

Added by the BDOOR-DIJ TROJAN! Note - this file is located in the %WinDir% directory, and must NOT be confused with the legitimate RAV antivirus file of the same name!

Added by the RJUMPF-F WORM!

Added by the RJUMP.D WORM!

DownloadReceiver parasite - no longer in existence

RAV AntiVirus

Added by the DLOADER.MAR TROJAN!

Added by the PAKES.HZ TROJAN!

Added by the AGENT.URZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)

Added by the AGENT.OKZ TROJAN!

Added by the NSPM.PU TROJAN!

Added by the DLOADER.MJF TROJAN!

Rising antivirus

Added by the DLOADER.IYT TROJAN!

Added by the LINEAG-AIN TROJAN!

Rising antivirus

Added by the WUKILL.A WORM!

RAV AntiVirus

Added by the HOMEY-A TROJAN!

Added by the WULLIK.B WORM!

Added by the CAGER.A WORM!

Added by the WULLIK.B WORM!

Added by the QQPASS-AK TROJAN!

Added by the QQPASS-AJ TROJAN!

Added by the QQPASS-T TROJAN!

??

Added by the DARKIRC.QZ TROJAN!

Added by the MYTOB.KR WORM!

Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead

Added by the RUBBLE-C WORM!

Razer mouse driver

RapidBlaster variant (in a "RapidBlaster" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "RapidBlaster" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "RBEnhance" folder in Program Files) where *** represents random digits. Recommended you use RapidBlaster Killer to uninstall - see here

Added by the VANEBOT-J WORM!

Added by the RANDEX.BLD WORM!

Added by the SDBOT-DHK WORM!

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

Scheduler for VCOM's Recovery Commander - which "can restore your non-booting system back to normal. It only takes a few minutes to get your system back up and running"

PrizeSurfer related. "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware

Related to Creative DLL Module Loader for the Sound Blaster X-Fi (and maybe others). This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems

Remote Disconnection Utility from Twiga. Used for connecting and disconnecting dial up connections on a network - only needed if there is a shared internet connection

Added by the SDBOT.F TROJAN!

Added by the ULTIMAX WORM!

Added by the BOFRA.A WORM!

Added by the BOFRA.D WORM!

Added by the BOFRA.C WORM!

Added by the BOFRA.B WORM!

Added by the BOFRA.E WORM!

Added by the BOFRA.E WORM!

LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "readdb40.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Tray icon to set various configuration settings for Sunkist (and maybe other) media card readers

Real Jukebox - MP3 and music files player

Added by a variant of the SPYBOT WORM!

Added by a variant of the RBOT WORM!

Added by the PARLAY TROJAN!

Added by the CEEGAR TROJAN! Note - this is not associated with the popular RealPlayer media player

Realspy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by a variant of the RBOT WORM!

DownloadWare adware

Added by the CEEGAR TROJAN! Note - this is not associated with the popular RealPlayer media player

Added by the AGOBOT.AFR WORM!

Download manager. Available via Start -> Programs

Advertising spyware

Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs

System Tray icon for RealJukebox

Added by the SNONE.A WORM!

Added by the RPLAY.A TROJAN! Note that the name has a number "1" in place of the second lower case "L"

System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling StartCenter via Preferences

RapidBlaster variant (in a "RealPlay" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not RealPlayer which can have the same executable name

RapidBlaster variant (in a "RealPlay" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not RealPlayer which can have the same executable name

System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling StartCenter via Preferences

Added by the MYTOB.AG WORM!

Added by the AGOBOT-AAD WORM! Note - this is not the legitimate RealOne Player (realsched.exe) application of the same name

Added by the RBOT-NK WORM!

Added by a variant of the RBOT WORM!

Added by the DELF.CNV TROJAN!

RealNetworks RealPlayer related - disabling this application will not affect Real Player in any way

Added by the LOHAV-T TROJAN!

RealPopup - "Replaces old winpopup with a full featured freeware tool which remains stable and simple as its predecessor"

Application Scheduler installed along with RealOne Player. Runs independently of RealOne Player, to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. If it can't be disabled try deleting or renaming realsched.exe and then delete the entry in the registry

RealSPEED - tweaking utility to speed-up your internet connection

Added by a variant of the IRCBOT BACKDOOR!

Associated with ALCATech BPM Studio

Realtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates

Product description in properties is "InternetExplorerCommunicationAgent Module" ?

Chinese originated adware - detected by Panda antivirus as NewWeb. Note - this is not the legitimate RealOne Player (realsched.exe) application of the same name

System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling StartCenter via Preferences

Added by the PARLAY or MITGLIEDER.I TROJANS!

RebateNation adware

MS-DOS/Win3.1 utility use to clean boot a system. Sometimes installed by default from some driver CDs for motherboards

Incorporated on multifunction digital copiers (such as the MX-3500NM), Sharp's innovative PC fax driver enables users to send fax documents right from their desktop

On HP computers, Recguard prevents the deletion or corruption of the WinXP Recovery Partition. Without it enabled, it is possible to knock that completely out and force the customer to send the PC back to HP for a re-image, possibly at the customer's expense

Reclip Popup Clipboard manager

SmartPops search hijacker

Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete

Added by the ANAFTP-01 TROJAN! Note - this is NOT the Windows system file of the same name as described here

Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched, this entry may be left in the registry

Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched, this entry may be left in the registry

Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched, this entry may be left in the registry

Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched, this entry may be left in the registry

Added by a variant of the LINEAGE-AV TROJAN!

Added by a variant of the SDBOT WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! ! This file is located in the "temp" folder

Recording scheduler for WatchTV Capture Card (TV Tuner card)

Added by the SHUCKBOT-A TROJAN!

Added by the HO TROJAN!

Added by the RBOT.DDA WORM!

Added by the RBOT-TC WORM!

PMS prediction program with modes for guys and girls - no longer available

Red_Swoosh distributed networking software - a desktop client that enables users to download and stream files from each other, rather than from webservers

Dotcomtoolbar/Linksummary hijacker installer - where * is a random digit

Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards

Added by the SECDROP.AI TROJAN

Added by the RANDEX.AL WORM!

MediaComm's monitor for file association changes. Stop rogue programs from screwing your settings either on installation or whenever they run

Reflex Vision from Increment Software. "A background application for Windows XP that makes switching windows faster and easier"

(Iomega) Refresh - loads the Iomega desktop icons at startup

Passon homepage hi-jacker

Related to Supanet ISP software - what does it do and is it required?

Added by the BANCOS-BS TROJAN!

Added by a variant of the SPYBOT WORM!

Added by the AGOBOT-SC WORM!

Added by the AGOBOT-SO WORM!

Added by the RBOT.ZW WORM!

Added by the AGOBOT-PF WORM!

Added by the AGOBOT.G TROJAN!

Added by the RBOT.PB WORM!

Added by a variant of the IRCBOT TROJAN!

eSpyNow surveillance software. Uninstall this software unless you put it there yourself. Note - the filename has the digit 0 rather then the uppercase "o"

Hijacker - redirecting to only-virgins.com

Added by the NOUPDATE.B TROJAN!

CoolWebSearch parasite variant - also detected as the STARTPA-M TROJAN!

Added by the CYBRSPY.13A or CYBRSPY.13B TROJANS!

Added by the SERVPAM TROJAN!

"Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry, your system will run faster and error free"

"Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry, your system will run faster and error free"

Added by an unidentified VIRUS, WORM or TROJAN! Note - do not confuse this with the popular RegCleaner registry cleaner freeware

Added by the POLDO.B TROJAN!

Added by the DASMIN-E TROJAN!

Added by the BANCOS-BW TROJAN!

Added by the BANCOS.DK TROJAN! Note that the filename has a leading space, ie, " REGCXMARQ.EXE"

Added by the COIBOA-D TROJAN!

"RegDefend is a configurable, kernel based registry protection system, designed to intercept selected changes before they occur, thus also preventing malicious software like viruses, trojans and worms from using the registry to their advantage"

Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder

Added by the BRID.A WORM! Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the SOUTHGHOST WORM!

Added by a variant of the RBOT WORM!

Added by the HOTWORD.B TROJAN! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Added by the GANBATE.A WORM! Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in a "securityDatabase" subfolder

Added by the VOUMIT-A WORM! Note - this is not the legitimate regedit32.exe application which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "mirc32" folder

Added by the QQPASS-U TROJAN!

Added by the QQPASS-N TROJAN!

RegFreeze anti-spyware software

Added by the SDBOT-MS WORM!

SpyGraphica spy software - "Stealth monitoring of ALL PC or Network Activity with DVD-like playback. EVERY keystroke can be e-mailed in a detailed activity report every 15 minutes...anywhere in the world."

??

Added by the SDBOT.AYH WORM!

If you don't want to register MediaRing and be reminded about it every bootup disable it

??

Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation

Added by the SDBOT-BB WORM!

Added by the SDBOT-HE TROJAN!

Registration for Pinnacle Studio Version 8 home video software from Pinnacle Systems

Added by the VBSWG.AQ WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "ShakiraPics.jpg.vbs" file is located in the Winnt or Windows folder

Blackbox captures emails and chat logs, and monitors Internet activity - remove if you didn't intentionally install it

Added by the SDBOT TROJAN!

Added by an unidentified WORM or TROJAN!

Added by a variant of the SDBOT WORM!

Registry Cleaner misleading security software - not recommended, see here

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the AGOBOT-RF WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the QKH TROJAN!

Added by the RBOT.BMT WORM!

Added by the ARIVER.A WORM!

Added by a variant of the OPTIX TROJAN!

Added by the WEBMONEY-G TROJAN!

Added by the RBOT-GM WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the RBOT WORM!

Added by the DELBOT-I WORM!

Added by the CILE TROJAN!

Added by the REMLOAD-A or DANMEC-B TROJANS!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-AFT WORM!

Added by the RBOT-AHT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.BTZWORM!

Added by a variant of the SDBOT WORM!

Ulubione adult content dialer. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the MERTIAN WORM!

RegistryCleanFix misleading security program - not recommended, see here

Registry Mechanic - "you can safely clean and repair Windows registry problems with a few simple mouse clicks! Problems with the Windows registry are a common cause of Windows crashes and error messages"

Affilred adware

Added by the SYSFADE TROJAN!

Added by the SPAMBOT TROJAN!

Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation

Added by the RBOT-NU WORM!

DVD region killer part of CloneDVD from Elaborate Bytes AG. Copies the main movie, Special Features and/or the original menu onto a DVD Recordable or onto your harddisk

Added by the BEAGLE.DO WORM!

Added by the LOWZONE-AX TROJAN!

Added by the MSNOPT-A TROJAN!

RegistryPowerCleaner misleading secuirty software - not recommended, see here

RegistryProt from Diamond Computer Systems - protects the system registry against changes

Added by the BANCOS-ED TROJAN!

Added by the OKARAG TROJAN!

Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!

Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!

Added by the LOWZONE-AH TROJAN!

Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!

Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!

Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!

Part of RegRun - used to detect unknown viruses. RegRun compares winbait.exe with the original copy called winbait.org and warns if the files are different..

Greatis Software's RegRun security suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, viruses, etc

Added by an unidentified WORM or TROJAN!

Added by the WAYIC-A TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in the Windows folder (98ME) or the System32 folder(NT2000XP). The file is located in C:Windows

Added by the OPTIX-SE TROJAN!

Added by the AGOBOT.AEW WORM!

Added by the TALEX TROJAN!

Related to XGI Technology's Volari graphics cards - what does it do and is it required?

Added by an unidentified VIRUS, WORM or TROJAN!

Part of the USB driver for your Fuji digital cameras - used when uninstalling the USB drivers, erasing all entries from the registry. Only required BEFORE attempting to uninstall the Fuji software or the uninstall may not work correctly

Added by the OPTIXPRO.11 TROJAN!

Added by the AGOBOT.E WORM!

Added by the WINKO.AO WORM!

Added by the STOPED-A TROJAN!

Search hijacker - redirecting to scheo.com

Added by an unidentified TROJAN!

Homepage hijacker that changes your homepage to an adult content site

Added by the WEBMONEY-G TROJAN!

ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality

Added by the ZLOB.B TROJAN!

SafeSurfing adware

??

Rage3d Tweak - ATI Radeon tweaker which allows access to registry tweak options, custom display modes, refresh rates and overclocking all through an easy to use interface

Added by the LATINUS.16 TROJAN!

Added by the SYGYP.A WORM!

Added by the SOKACAPS TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%Media

ATI Remote Wonder? - PC wireless remote control driver. Required if you use it

Added by the BEAGLE.AH WORM!

Added by the BEAGLE.Y or BEAGLE.Z or BEAGLE.AA WORMS!

Added by the WILSEF VIRUS!

Added by the SENNASPY-F TROJAN!

"Release RAM allows your computer to run faster and uses your computer's RAM more efficiently". MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

Added by the DROPPER-PS TROJAN!

Added by the LOVELETTER.AS VIRUS!

Added by the LAZAR TROJAN!

BT Voyager ADSL Modem Help related

From MS Money. Reminds you of your bills

HP-specific program that reminds users to create System Recovery CDs. Once they use the Recovery CD Creator (Start -> PC Help & Tools -> Recovery CD Creator) to make the recovery CDs the entry will remove itself from the startup list

Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2

Compaq printer Registration

HP CD-Writer Registration

Registration reminder widget for Rand Mcnally maps

Registration reminder for ScanSoft products such as PaperPort

Remind-Me - calendar software

HP-specific program that reminds users to create System Recovery CDs. Once they use the Recovery CD Creator (Start -> PC Help & Tools -> Recovery CD Creator) to make the recovery CDs the entry will remove itself from the startup list

CasinoOnline foistware

Remote Control driver for LifeView internal and external TV products

Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie, analogue 56K modem) and terminates after the connection is closed

Detected by PCTools as the IRCBOT.BIF TROJAN! See here

Added by the IRCBOT.BFA TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by the AGOBOT.KU WORM!

Added by the RIPJAC TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Hinet Hi-Five ISP software

ProLink PlayTVpro TV tuner software

System Tray access to Remote Data Backups online system/data backup utility

Remote Data Backups online system/data backup utility

System Tray access to Remote Data Backups online system/data backup utility

Marspc Remote Desktop Computing

Added by a variant of the SDBOT WORM!

Detected by Trend Micro as the IRCBOT.YF TROJAN! See here

Part of Novell's ZENworks - "Complete End-to-End Directory-enabled Network Management". Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation

Required if you want your ASUS Remote control to work at all. Available via Start -> Programs

Added by the RBOT-KM WORM!

Added by the SDBOT-PS WORM!

Added by the RBOT-MD WORM!

Added by the LOVGATE.F WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the RBOT.KJ WORM!

Added by the RBOT-IT WORM!

Added by the SDBOT-QI WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the IRCBOT.AUZ TROJAN! See here

Sophos Antivirus Remote Update utility - provides an easy way for remote workers to keep up to date with their virus protection via a website or network connection provided by their employer

Trend Micro's Office Scan Client, see here - "Its Web-based management console gives administrators transparent access to desktop and mobile clients to coordinate automatic deployment of security policies and software updates"

Remote control for Creative MediaSource - plays back music in DVD-Audio, MP3, WMA, WAV and other media formats

Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one

Remote Control background application for Cyberlink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one

Remote Control background application for Cyberlink's PowerDVD version 8. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one

Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs

Added by the SDBOT.EE WORM!

Related to a Belkin 54Mbps Wireless Utility Control Panel applet

GatorCheat - adware downloader

RemoveIT Pro from InCode Solutions - spyware, virus and malware removal tool

Part of McAfee's Remote Desktop 32 Agent application. What does it do and is it required?

Detected by Kaspersky as the BANKER.GAX TROJAN! See here. Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the "Help" sub-folder of the Winnt or Windows folder

??

Added by the YABE.CD TROJAN!

Replay Radio - "makes it easy to automatically record your favorite radio shows, so you can listen wherever and whenever you like"

Replicator from Karen's powertools. "Automatically backup files, directories, even entire drives!"

Cerience RepliGo software - "any document you have on your PC can be transferred to your mobile device"

Thrustmaster Corporation Presets application - a game controller driver, presumably necessary for certain functions to work

Added by a variant of the MUQUEST.A trojan - NOTE: the * stands for a digit, examples: requester.5.exe, requester.10.exe

Added by the MUQUEST TROJAN!

Added by the RBOT-ABD WORM!

Adware downloader, identified by Panda antivirus as Trojan.Downloader.ALQ

EVGA graphic card utility providing easy access to display settings

Added by the LINEAGE-AI TROJAN!

Added by the LINEAGE-FV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Dell Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Resolution Assistant is required to run with the Help and Support program. If you uncheck Resolution Assistant and and then run Help and Support it will add another Resolution Assistant in the startup menu. If you remove the Resolution Assistant in the add/remove program some help menus in help and support will not be available. You decide

Windows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes

Associated with an Eicon Networks Diva ISDN or ADSL modem. What does it do and is it required?

WinStart Commander - part of Ultra WinCleaner Utility Suite. Starts Windows faster and controls hidden programs to boost performance and prevent system slow downs and crashes

Could be a left-over from the installation of a Viewsonic flat panel display

Added by a variant of the RBOT WORM!

Softwarium Restore Desktop "is a Windows Context Menu addition that automatically saves and restores the icons' positions on the Windows desktop after a resolution change"

RestoreIT! from FarStone "allows you to recover instantly your files, system configuration, and even your operating system, to any point in time prior to the data loss or system failure"

Added by the RETSAM TROJAN!

Part of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut down. Not required if your not using the program or don't care about that function

Part of the RadeonTweaker utility for overclocking ATI Radeon graphics cards

Added by a variant of the SDBOT WORM! See here

Added by the GIPMA TROJAN!

80-20 Retriever from 80-20 - "80-20 Retriever is a powerful personal search tool that encompasses email folders, archived email, and local or network file systems, giving users one point of fast, accurate search for all personal information". Real-time scheduler - shortcut available

EMC (was Dantz) Retrospect Express - backup software for external hardware storage devices

Control Application for M-Audio Revolution 7.1 sound card. The sound card will function without it - but changes to speaker setup and sound modification (Bass/Treble etc) will not be available

Intellisync for REX sychronization software for Xircom REX MicroPDAs for sharing information between the PDA and PC

Added by the LINEAGE-U TROJAN!

Registry First Aid - scans the Windows registry for orphan file/folder references, finds these files or folders on your drives that may have been moved from their initial locations, and then corrects your registry entries to match the located files or folders

Added by the DROPPER.KN TROJAN! Note the number "1" in the filename rather than letter "L". It also drops another file named DEVICEMAP.SYS which is the ROOTKIT.O TROJAN!

Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs

RAV AntiVirus

Rising antivirus

??

A browser plugin called the RichFX player. Here is a link to download RichFX's solution to removing the auto upgrade

Added by a variant of the BANLOAD family of TROJANS!

EuroFonts - adds Euro symbols to pre-Euro computers

Added by the BOFRA.A WORM!

RhinoBlocker - pop-up stopper

System tray access to Red Hot Pawn - online chess

Rogers Hi-Speed Internet software. "Should you ever lose access to your Rogers Hi-Speed Internet connection or e-mail, the Self-Healing Software (SHS.exe) will automatically repair your settings to get you up and running in a flash"

HenBang adware

Henbang adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

SafeSurfing adware

Part of RightFAX from Captaris - "the proven market leader in fax server and document delivery software"

Only needed if you want a PC to answer faxes automatically

Added by the RIOSYS MACRO!

"Riorad Explorer is hands-down the most advanced Windows software companion for your Rio MP3 player"

RivaTuner for tweaking nVidia graphics cards. Required if you make any changes

RivaTuner for tweaking nVidia graphics cards. Required if you make any changes

??

RK Launcher by RaduKing - "is a free application that will allow the user to have a visually pleasing bar at the side of the screen that is used to quickly launch shortcuts"

Added by the CLICKER-CS TROJAN! Filenames spotted inlcude Setup.exe, Keygen.exe, Keygen-Serial.exe, Photoshop.CS2.KeyGen.exe and more

Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one

Added by the DLOADR-ANM TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "rmdrfje.dll" file is located in the Winnt or Windows folder

Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card

A module that contains COM components for media playback used by both RealPlayer and Windows Media Player - see here. The "rmoc3260.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Remote control driver for REALmagic Xcard. Is it required?

Added by the MAROON.A TROJAN!

Naomi internet filtering software

Added by the RBOT-AGR WORM!

Added by the RBOT-AJF WORM!

Program used to initialise the VxD virtual driver for Sentinel drivers associated with Rainbow H/W keys that plug-in to the parallel port. These are usually supplied with workplace design tools and restrict the use of the software only to the machine to which the H/W key is connected. Required if you have such tools

Added by the RBOT-AEY WORM!

Added by a variant of the SDBOT WORM!

May be related to the DivX program as a *.dat file in the same directory had "DivXPro505Bundle.exe" mentioned within?

Added by the RANKY.C TROJAN!

Added by the QQPASS-O TROJAN!

??

Added by the ROAMER-A TROJAN!

Roboform - password manager and web form filler. Will work without this startup entry, as the "active" component is an integrated Internet Explorer browser plugin

Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs

Rocket.Time - time synchronization software from Rocket Software

"RocketDock is a smoothly animated, alpha blended application launcher. It provides a nice clean interface to drop shortcuts on for easy access and organization"

Added by an unidentified WORM or TROJAN!

Rogue Remover PRO - utility to detect and remove misleading security programs masqerading as virus scanners, spyware removers, etc that lure people into buying them with false positives

??

Added by the RollBack Rx system restore program

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

SuperSpider hijacker - a CoolWebSearch parasite variant

SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as the KREPPER-AE TROJAN!

SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as the KREPPER-AE TROJAN!

Added by the BANCBAN-DI TROJAN!

Added by the BANKER-FI TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This worm file is placed in the Windowsinf or Winntinf folder

??

Detected by Kaspersky as the AGENT.FJN TROJAN! See here

Roxio Assistant is designed to correct Engine Initialization errors. If Easy CD & DVD Creator's Engine does not initialize, the applications in Easy CD & DVD Creator will not recognize your recorder. After running this program you should receive the message "Engine initialized successfully with full recorder support". If you do not receive the message, update your Virus software and then check and clean your system for viruses. After the removal of any viruses, uninstall and then reinstall Easy CD & DVD Creator (use "Add Remove Programs" in "Control Panel"). Can be run manually

Not believed to be a valid Roxio program - more likely a variant on the WOMANIZ.A TROJAN!

Part of Roxio EasyCD Creator 6.0 - places the Roxio AudioCentral icon in you system tray. "Includes a player, media manager, ripper, tag and sound editor - integrated in a single application". Not required for Roxio to work properly.

Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly

Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking

System Tray icon installed by Roxio Easy Media Creator 8 and which allows you to configure your watched folders or to turn the ?Watched Folders? feature of Roxio ON or OFF

Unicenter Remote Control (was Remotely Possible) from Enterprise International for remote control and access to Win9x/NT systems

Added by a variant of the GAOBOT/AGOBOT WORM!

Detected by Trend Micro as the SDBOT.FLY WORM! See here

Added by the BOLGI WORM!

Added by the AAD TROJAN!

Added by the RBOT-ABL WORM!

Added by a variant of the RBOT WORM!

Added by the BHARAT.A WORM!

Added by the REDPLUT-B TROJAN!

Added by the SPAMMIT-E TROJAN!

Added by the RBOT-AE WORM!

Added by the RITDOOR-C WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the PREXOT.D TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the PREXOT.D TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the PREXOT.E TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the RITDOOR-B WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder

Added by the MYDOOM.AL WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the BOBAX.AA WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the BOBAX.AD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by the BOBAX.AD WORM!

Added by the BOBAX.AD WORM!

Added by the BOBAX.AD WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder

Remote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se, a program may need it to communicate with other components of itself. You could delete the program but if any abnormalities occur soon after then reinstall. Under NT, deleting this critical system component will disable the OS. For a more detailed explanation see here

Added by the RBOT.ACP WORM!

Added by the LINEAG-ADI TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in the Windows folder (98ME) or the System32 folder(NT2000XP). This file is located in an "addins" sub-folder

Troubleshooting utility for the RoadRunner cable internet service. Not required and you are advised to completely uninstall it. Provides a lot of false alarms and gets a lot of people panicking about there internet connection

Required on the GeFroce 64 meg MX card to show the full 64 meg memory and appears to be a software memory emulator running under the Win2K - see here. High CPU useage results - hence the U status

Added by the WAREZOV.C WORM!

Synchronizes a Casio PDA with MS Outlook

Added by the RBOT-SN WORM!

Added by a variant of the RBOT WORM!

??

Detected by Kaspersky as the AGENT.NY TROJAN! See here

"Related Sites" toolbar - SearchAndClick hijacker variant

RssReader - a free RSS reader able to display any RSS and Atom news feed (XML)

Added by the SILLY.BR WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "4350" sub-folder

SafeSurfing adware

Misleading security software such as AntiSpywareSuite, AntivirusPCSuite, SpyGuardPro, WinAntiVirus Pro 2006 - not recommended, see here

RTCDLL is "Real Time Communication" and is associated with Windows Messenger (the IM application, not messenger service). It is only necessary if you use Windows Messenger. Most people use MSN Messenger instead, so it is not required in those cases

Realtek HD Audio Sound Effect Manager

High definition audio codec driver from Realtek Semiconductor

Added by a variant of the SLAPER TROJAN!

Added by the TIOTUA-J TROJAN!

Monitor for RealTek network card

Cheyenne (now eTrust) antivirus

IRC trojan

??

Real-time virus scanner component of Norton Anti-Virus Corporate Edition

Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that "provides wireless access to your desktop or notebook PC through the computer's USB port"

Added by the RUBY-B TROJAN!

Added by the MEXER.E WORM!

Added by the FIGHTRUB-A WORM!

Added by the DELF-JM TROJAN!

Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis

Added by the LOVGATE.E WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)

Added by the HOLCAS.A WORM!

Added by the BINGHE TROJAN!

Identified as the DELF.LF by Ewido Security Suite

Chinese originated browser hijacker - redirecting to 4199.com Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the SQUATBOT-C TROJAN!

Added by the IMONI-E TROJAN!

Added by the BCKDR-QHR TROJAN!

Google Web Accelerator

Added by the AGOBOT.HA WORM!

Added by the CASER WORM!

Related to Wi-Fi USB Connector from Nintendo

POPFile - E-mail spam blocker

POPFile - E-mail spam blocker

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu

Added by the REBOOT-AP TROJAN!

Added by the SDBOT.AQA WORM!

Added by the BANCOS-DT TROJAN!

Added by the SDBOT-CWB WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

MIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as part of the software for a Guillemot Maxi Muse sound card (PCI)

HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature

Lexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS

pcfix2k splash screen

PhoenixNet BIOS adware. See here

Advanced Startup Manager from Rays Lab

Desktop wallpaper changer?

CoolWebSearch parasite variant

CoolWebSearch Tapicfg parasite variant

Microsoft Systems Management Server (SMS) related - program that reads SMSRUN16.INI on clients running Win 3.1, Windows for Workgroups, Win95, or OS/2 to create program groups on the client and then launch SMS client programs

??

Added by the LOVGATE-F WORM!

Added by the ATAK.F WORM!

Reportedly part of Lexmark printer software - what does it do and is it required?

FMedia FaxWorks related - can be run manually

Used with some models of Panasonic, Epson and NEC printers - required for printer to work

Unidentified malware

CoolWebSearch Tapicfg parasite variant

Added by the GAGGLE.E WORM!

Added by the APSTROJAN.OB TROJAN!

Added by the ATAK.G WORM!

CoolWebSearch Smartsearch parasite variant

Added by the HOLCAS.A WORM!

Searchforfree.info browser hijacker

Added by the ADWARELOADER TROJAN! Note - do not confuse with the legitimate Microsoft Office file, which would typically be located in the Program FilesMicrosoft OfficeOffice folder!

Added by the SEMAPI-A WORM!

Added by the ADMINCASH.B TROJAN!

Added by the DUMARU-L TROJAN!

Added by the PROXY-GG TROJAN!

Added by the CELINE-A TROJAN!

Added by the KREPPER-N TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "inet10066" subfolder of the Windows or Winnt folder

MSI MOtherboard PC Alert III - MSI motherboard monitoring software. Only required if you "overclock" your system

Not required but what is it?

Added by the BOMKA TROJAN!

Added by the NEODURK TROJAN!

Wireless-G USB Wireless Network Adapter related - would appear to be required

Added by the MARIO-C WORM!

Added by the DOPBOT-A WORM!

Added by the STARTPA-HS TROJAN!

Added by the MERTIAN WORM!

Added by the DELF.D TROJAN!

Added by the QQPASS-U TROJAN!

Added by the QQPASS-N TROJAN!

Added by the DOOMJUICE WORM!

Added by the LADE WORM!

Flingstone.com browser hijacker. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "qkoszvd.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the DELF-KT TROJAN!

Added by the MYTOB.IG WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The random DLL file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the QQPASS-AH TROJAN! Note - this is NOT the Windows system file of the same name as described here

Added by a variant of the SLAPER TROJAN!

Added by the SUMTAX TROJAN! where *** is 134, 569, 777 or 946

Added by the SUMTAX TROJAN! where *** is 134, 569, 777 or 946

Added by the SUMTAX TROJAN! where *** is 134, 569, 777 or 946

Added by the SUMTAX TROJAN! where *** is 134, 569, 777 or 946

Added by a number of VIRUSES, WORMS and TROJANS!

Added by the DVLDR TROJAN! Note - this is not the valid "Rundll32.exe" as it's in the WindowsFonts directory

System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here)

System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties

Loads default settings for Leadtek Winfast graphics cards

Added by an unidentified TROJAN! - possibly a BMBOT variant

Added by the QQPASS.E TROJAN!

Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. Tells the drivers that the connected Drives should use the "Write Back" Caching. You can disable this if you don't want to use "Write Back" Caching or if you have not connected any driver to your Promise Controller

Added by the AUTEX WORM!

Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller

Added by the SANKER WORM! Note - this is not the legitimate rundll32.exe process, which is found in the Windows folder (98ME) or the System32 folder(NT2000XP). This one is is located in the Winnt or Windows folder

Added by the GUTTA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup

Added by the DEMOTRY-A WORM!

Added by the AGENT-EZ TROJAN! Note - the real rundll32.exe resides in the System (9x/Me) or System32 (NT/2K/XP) folder whereas this file is found in a "SHELLEXT" subfolder

Added by the STARTPAGE.AXH TROJAN!

Added by the STAP-C WORM!

Added by the STAP-D WORM!

Added by the STAP-E WORM!

Added by the ROOKIE-A TROJAN!

Added by the DELF.BKC TROJAN!

System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel

Associated with a Logitech mouse - required for proper operation

ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality

Added by the GRUEL WORM!

Added by the GRUEL WORM!

BrowserAid/BrowserPal foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

BrowserAid/BrowserPal foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

BrowserAid/BrowserPal foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the AUTEX WORM!

Added by the HUAYU WORM! Note - this is NOT the Windows system file of the same name as described here

Added by the NETDEVIL.B TROJAN!

Added by the DELF-HA TROJAN!

GoGoTools adware

GoGoTools adware

PurityScan/Clickspring adware

Added by the DELF-LC TROJAN!

PurityScan/Clickspring adware

PurityScan/Clickspring adware

MARC Sound System Manager for the Marc 8 MIDI sound card - allows for easy adjustment of the settings

Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech

Added by the DROWSY-B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located the Winnt or Windows folder

Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the CRYPT.ULPM.GEN TROJAN!

Added by the AGENT.SLZ TROJAN!

Added by the AGENT.CZC TROJAN!

Added by the SMALL.CTV TROJAN!

Added by the AGENT.ABFQ TROJAN!

Part of MS Data Access Components - only required if you use these

Added by the CHIR-B WORM!

Identified as the DELF.LF by Ewido Security Suite

Added by the OPTIX.04.A TROJAN!

Added by the OPTIX.04.D TROJAN!

Added by the REPER.A VIRUS!

Added by the RBOT-BWF WORM!

Identified as the DELF.LF by Ewido Security Suite

Added by the AGOBOT.QJ WORM!

Identified as a variant of the SMALL.QO TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Detected by PCTools as the DELF.ZWK TROJAN! See here

Added by the DLOADER-QY TROJAN!

Added by the SMALL-CF TROJAN!

DesktopShield2000 by St?phane Groleau. Locks the desktop at bootup so that users cannot bypass the Windows screensaver password. Only essential if using the program and is an optional setting. It can be disabled from within

Added by the CIADOOR-J BACKDOOR! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by a variant of the Tibs malware

Added by the LINEAGE-R TROJAN!

Added by the LINEAGE-Q TROJAN!

Added by the BANKER-ES TROJAN!

Added by the ESEARCH-A TROJAN!

Added by the VB-AET TROJAN!

BrowserAid/BrowserPal foistware

Detected by Trend Micro as the AGENT.TQY TROJAN! See here. Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside

Added by the GHOST.23 TROJAN!

PBNext is virtual phone system which offers the same functionality as expensive PBX hardware

MegaTec Rups, UPS monitoring software - monitor and control DB9 UPS running on either Windows & Novell NetWare (with RUPS 2000) or Unix (with RUPS for Unix / Plus) operating systems

??

Added by the ZAPCHAS-M TROJAN!

Related to li-speed****

Spyware included with the latest version of Grokster

Added by the LOOPAD.A TROJAN!

Added by the LINEAGE-BP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in the Windows folder (98ME) or the System32 folder(NT2000XP). This file is found in the Windows or Winnt folder

Added by the ZHENGTU-A TROJAN!

Part of Dell Resolution Assistant - "a diagnostic program that allows you to contact Dell. When factory-installed by Dell, it allowed you to perform hardware and software diagnostics that provided alerts to potential problems and enabled real-time communication with Dell RA techs. You can now use RA only to contact Dell by e-mail"

Part of Dell Resolution Assistant - "a diagnostic program that allows you to contact Dell. When factory-installed by Dell, it allowed you to perform hardware and software diagnostics that provided alerts to potential problems and enabled real-time communication with Dell RA techs. You can now use RA only to contact Dell by e-mail"

Added by the RBOT-GVR WORM!

Added by the DLOADR-AZZ TROJAN!

Added by the PWS-ANA TROJAN!

Added by the LINEAGE.BDP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in the Windows folder (98ME) or the System32 folder(NT2000XP). This file is found in an "Intel" sub-folder of the Windows or Winnt folder

Radmin - remote admistrator server

Added by the MULTIDR-CP TROJAN!