PC Review
Startup Files Database
Letter d
Powered By Pac's Startup list
Startup Files Database
Letter d
Startup Files Database
[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]
Yes |
No |
Users Choice |
Warning |
Unknown |
| Normally leave to run at startup | Not Required, often infrequently run tasks that can be run manually. | Depends if the task is deemed necessary | Typically viruses, spyware, adware and resource hogs | An unknown item |
| Required | Process Name / Details | Startup File |
![]() |
Added by the MYTOB-FN WORM! |
dd.exe |
![]() |
D-Link wireless PCI adapter related |
AirCFG.exe |
![]() |
D-Link wireless PCI adapter related |
AirCFG.exe |
![]() |
D-Link Air Plus Wireless PC modem connection monitor |
WLANMON.exe |
![]() |
D-Link Airplus Wireless Router driver |
AirGCFG.exe |
![]() |
D-Link AirPlus G wireless configuration and monitoring utility |
AirPlus.exe |
![]() |
D-Link AirPlus XtremeG wireless configuration utility |
AirPlusCFG.exe |
![]() |
TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software |
D066UUTY.EXE |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
D3**.exe [* = random char] |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
D3**32.exe [* = random char] |
![]() |
Added by the BEAGLE.A WORM! |
bbeagle.exe |
![]() |
Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
D4.exe |
![]() |
SinaUpdateCenter adware |
rundll32.exe [path] dabapi.dll, Rundll32 |
![]() |
3Com NIC Diagnostics. Available via Start -> Programs |
daconfig.exe |
![]() |
DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked - direct from Dell |
dadapp.exe |
![]() |
Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs |
DAEMON32.EXE |
![]() |
Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
Daemon.exe |
![]() |
Added by the SELOTIMA.A WORM! |
daemon.exe c daemon2.exe |
![]() |
Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
daemon.exe |
![]() |
DAEMON Tools Pro converts your computer games CD/DVD discs into virtual discs" or so called "disc image" files, which run directly on your hard drive" |
DTProAgent.exe |
![]() |
Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
Daemon.exe |
![]() |
Added by the PUNYA-A WORM! |
fault.exe |
![]() |
Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them |
dayplan.exe |
![]() |
Added by the DLOADER-IP TROJAN! |
weather.exe |
![]() |
Added by the RBOT-AOJ WORM! |
dwdrce.exe |
![]() |
Added by the VB-NIB WORM! |
DanBtR270414.exe |
![]() |
Part of Microsoft Plus! Digital Media Edition - see here |
DncLE.exe |
![]() |
Added by the DANTON TROJAN! where * = random number |
[random filename] |
![]() |
Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
DAP.exe |
![]() |
Added by the BANCOS.U TROJAN! |
imgst.scr |
![]() |
Added by the BANCBAN-FH TROJAN! |
imgrt.scr |
![]() |
Added by the BANCBAN-GT or BANCBAN-GU TROJANS! |
csrs.scr |
![]() |
Added by the LEMBRA WORM! |
Grasiele.VBS |
![]() |
Added by an unidentified WORM or TROJAN! |
LsasS23.exe |
![]() |
Could be related to "Dash Power Shopping" tool bar in IE? |
N/A |
![]() |
Added by the ONLINEG-J TROJAN! |
dsfids6.exe |
![]() |
Added by the ONLINEG-Q TROJAN! |
dasdsaads15.exe |
![]() |
Added by the GAOBOT.BIQ WORM! |
fsdqd.exe |
![]() |
Added by the BISCUIT.A WORM! |
System.dat.vbs |
![]() |
Added by the RBOT-ADQ WORM! |
msngs.exe |
![]() |
Data LifeGuard diagnostic tools for Western Digital's series of hard drives |
BACKWE~1.EXE |
![]() |
Backweb installer - see here |
DLGLI.EXE |
![]() |
Added by the KELVIR.AI WORM! |
prq8.exe |
![]() |
Homepage hijacker |
Regedit.exe ....data789.tmp |
![]() |
Added by a variant of the RANDON.AN WORM! |
[path] repcale.exe [path] beird.exe |
![]() |
SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon |
FlashKsk.exe |
![]() |
PowerQuest DataKeeper (now owned by Symantec) backup software |
DataKeeper.exe |
![]() |
Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
DataLayer.exe |
![]() |
Installed with DataViz "Documents to Go" software |
DvzIncMsgr.exe |
![]() |
DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts" |
DvzMsgr.exe |
![]() |
Added by the KEYPANIC TROJAN! |
datcheck.exe |
![]() |
Date Manager - calender program. Spyware/adware based provided by The Gator Corporation. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
datemanager.exe |
![]() |
Could be related to this? |
N/A |
![]() |
Premium rate adult content dialler |
DateMakerIntl.exe |
![]() |
NavEnhance adware |
DAupdate.exe |
![]() |
Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required? |
DAW9532.EXE |
![]() |
DayToday from RoboMagic Software Corp. Displays the date on the taskbar |
DAYTODAY.EXE |
![]() |
Control and send documents, etc, to any destination. The Dazel Corporation has now been taken over by HP |
DcDaemon.exe |
![]() |
Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled |
dbserv.exe |
![]() |
Added by the COIDUNG-A WORM! |
dc.exe |
![]() |
Added by the COIDUNG-A WORM! |
SVIQ.EXE |
![]() |
DriveCleaner misleading security program - not recommended, see here |
DC6CW.EXE |
![]() |
WinAntiSpyware 2006 spyware remover - not recommended, see here |
uwasdc.exe |
![]() |
WinAntiVirus 2006 virus software - not recommended, see here |
dc6_startupmon.exe |
![]() |
SystemDoctor is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats |
dcmon.exe |
![]() |
Added by the TUMAG TROJAN! |
dcemgr.exe |
![]() |
Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
dcfssvc.exe |
![]() |
Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
dcfssvc.exe |
![]() |
Added by the RANDEX.MS WORM! |
Microsoft.exe |
![]() |
DriveCleaner is a security assesment tool which gives exaggerated reports of security and privacy risks on a computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported risks |
dcsm.exe |
![]() |
Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
DDCActiveMenu.exe |
![]() |
Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
DDCMan.exe |
![]() |
Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
DDCMan.exe |
![]() |
Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here |
ddeproc.exe |
![]() |
Enuff Parental Control Software by Akrontech |
W815DM.EXE |
![]() |
Adult content dialler |
DDialler.exe |
![]() |
Added by a variant of the SLAPER TROJAN! |
[random filename] |
![]() |
Comcast Desktop Doctor (provided by SupportSoft, Inc) is a free self-help tool for Comcast broadband users. Identifies and automatically fixes typical problems that may occur with your high-speed internet service |
sprtcmd.exe /P ddoctorv2 |
![]() |
Added by the DELF.WG TROJAN! |
windrv.exe |
![]() |
?? |
N/A |
![]() |
Direct Disc Writer Event Monitor from TOSHIBA |
ddwmon.exe |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
de32gen.exe |
![]() |
DeadAIM - feature enhancing product for AOL's Instant Messenger program |
rundll32.exe DeadAIM.ocm, ExportedCheckODLs |
![]() |
Added by the DEADCAT-A WORM! |
DeadKitty.exe |
![]() |
DealHelper adware |
dhbrwsr.exe |
![]() |
DealHelper adware |
download.exe |
![]() |
DealHelper adware |
DHUpdt.exe |
![]() |
Added by the DELF-ERW TROJAN! |
Death.exe |
![]() |
Added by the GUBED TROJAN! |
DebugW32.exe |
![]() |
Added by the MYTOB-FW WORM! |
dbg32.exe |
![]() |
Added by the CWS-M TROJAN! |
explorer32dbg.exe |
![]() |
Added by the CWS-M TROJAN! |
iexplore_dbg.exe |
![]() |
Added by the DELF-DRA WORM! |
help.pif |
![]() |
Added by the MYDOOM.BG WORM! |
debugmonitor.exe |
![]() |
DeeEnEs - automatically updates a dynamic IP address when it changes |
DeeEnEs.exe |
![]() |
Added by the FORBOT-AY WORM! |
forboo.exe |
![]() |
Added by the ALLEM WORM! |
explore.vbs |
![]() |
Added by the ALLEM WORM! |
mtask.vbe |
![]() |
Added by the BINGHE TROJAN! |
shell32.exe |
![]() |
Added by the RUBBLE-C WORM! |
_default.pif |
![]() |
Added by the TARNO.I TROJAN! |
vhchost.exe |
![]() |
Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L" |
IexpIore.exe |
![]() |
Naupoint browser hijacker |
http://find.naupoint.com |
![]() |
Naupoint browser hijacker |
http://find.naupoint.com |
![]() |
DollarRevenue adware |
defender25.exe |
![]() |
DollarRevenue adware |
dfndref_7.exe |
![]() |
Related to IBM Standard Software Installer. What does it do and is it required? |
defergui.exe |
![]() |
CoolWebSearch parasite variant |
defragment.exe |
![]() |
Added by the BIFROSE-TH TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
svchost.exe |
![]() |
Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis |
defwatch.exe |
![]() |
Associated with the Deko550 entry-level SD real-time graphics system from Avid Technology |
Deko550.exe |
![]() |
On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
delayrun.exe |
![]() |
On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
delayrun.exe |
![]() |
?? |
deltreew.exe C:cabs |
![]() |
Added by the DOOMHUNTER WORM! |
worm.exe |
![]() |
Delete History Free - "Privacy protection software for deleting Internet surfing and other computer activity tracks from your PC" |
dhf.exe |
![]() |
Dell AIO Printer A*** related (*** = model). Not Required at Startup |
dlbabmgr.exe |
![]() |
Dell AIO Printer A*** related (*** = model). Not Required at Startup |
dlbfbmgr.exe |
![]() |
Dell AIO Printer A*** related (*** = model). Not Required at Startup |
dlbkbmgr.exe |
![]() |
Dell Alert utility, that's supposed to make interaction with Support easier |
DAMon.exe |
![]() |
Dell Photo AIO Printer 922 Device Monitor. Is it required? |
dlbtbmgr.exe |
![]() |
Dell Photo AIO Printer 942 Device Monitor. Is it required? |
dlbubmgr.exe |
![]() |
Dell Photo AIO Printer 962 Device Monitor. Is it required? |
dlbxmon.exe |
![]() |
Dell taskbar icon allowing you to quickly change settings |
quickset.exe |
![]() |
Installed alongside Dell Wireless WLAN Card and provides additional configuration options for these devices |
WLTRAY |
![]() |
System tray access to wireless LAN card configuration options |
wltray.exe |
![]() |
Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards? |
delldmi.exe |
![]() |
Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
DELLMMKB.EXE |
![]() |
Dell Solution Center - web-based troubleshooting tools and educational offerings |
dellsc.exe |
![]() |
Dell Support Agent offers additional support and update features for your Dell computer or laptop |
DSAgnt.exe |
![]() |
Dell Support Center (provided by SupportSoft, Inc) is a free self-help tool for Dell users. Identifies and automatically fixes typical problems that may occur with your high-speed internet service |
sprtcmd.exe /P DellSupportCenter |
![]() |
Dell multimedia keyboard manager. Required if you use the additional keys |
MMKeybd.exe |
![]() |
Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
DELLMMKB.EXE |
![]() |
NCase adware |
delmsbb.exe |
![]() |
NCase adware |
delsaap.exe |
![]() |
Reportedly part of BT ISP software - what does it do and is it required in startup? |
delstart.exe |
![]() |
CoolWebSearch parasite variant |
rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe |
![]() |
Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete? |
DelTemp.exe |
![]() |
System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel |
deltray.exe |
![]() |
Deluxe Communications, a SurfSideKick adware variant |
Dxc.exe |
![]() |
Added by a variant of the SDBOT WORM! |
delxp.exe |
![]() |
Part of the French Wanadoo ADSL extense pack. What does it do and is it required? |
demon.exe |
![]() |
Added by the DELUZ VIRUS! |
Virus salvado |
![]() |
Deep Freeze from Faronics Coporation. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example |
frzstate.exe |
![]() |
* seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search) |
*.exe |
![]() |
Adult content dialler |
desires.exe |
![]() |
?? |
desk-top-service.exe |
![]() |
DeskAd.Service adware |
DeskAdServ.exe |
![]() |
Provides transparent icon text backgrounds and coloured icon text |
DESKCOLOR.EXE |
![]() |
DeskFlag - animated USA flag on the desktop |
Deskflag.exe |
![]() |
DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related |
DeskMateAutoUpdate.exe |
![]() |
DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center" |
cma.exe |
![]() |
Added by the BOOKMARKER TROJAN! |
rundll32.exe msconfd.dll, Restore ControlPanel |
![]() |
Added by the SDBOT.MD WORM! |
desktop.exe |
![]() |
Added by the VB-DRN WORM! |
Desktop.com |
![]() |
IE-Title malware |
desktop.ini.vbs |
![]() |
Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc |
DATRAY.EXE |
![]() |
Vritual plant from here - this version is an Azalea, there are others so the filename may be different |
AZARE10S.PLT |
![]() |
iSearch "Desktop Search" hijacker |
desktop.exe |
![]() |
OptusNet DSL or Dial-Up connection software |
DSC.exe |
![]() |
Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc |
THE WEATHER CHANNEL.exe |
![]() |
Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
THE WEATHER CHANNEL.exe |
![]() |
Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
THEWEA~1.EXE |
![]() |
Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry" |
desktopmgr.exe |
![]() |
MatrixDialer related |
rundll32.exe MSA64CHK.dll, DllMostrar |
![]() |
A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking |
DESKTOPX.EXE |
![]() |
Adds Iomega Zip drive icons to the desktop |
deskup.exe |
![]() |
Added by the DELF-KO TROJAN! |
destroyb11.exe |
![]() |
iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled |
idetect.exe |
![]() |
?? |
turbodetect.exe |
![]() |
USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software |
detector.exe |
![]() |
Appears to be related to older Creative Soundblaster soundcards |
READREG |
![]() |
Added by the DELBOT-AH WORM! |
devenv.exe |
![]() |
DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this |
eventagt.exe |
![]() |
Added by a variant of the AGOBOT/GAOBOT WORM! |
msdvc32.exe |
![]() |
ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
DevDetect.exe |
![]() |
Installed by various Olympus products, this program detects the active connection of a speech device (voice recorder, etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a "high" priority level which can negatively impact system resources |
DevDtct2.exe |
![]() |
Added by the RBOT.AJU WORM! |
wfxmgr.exe |
![]() |
Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products. "This program is a non-essential process, but should not be terminated unless suspected to be causing problems" |
hpotdd01.exe |
![]() |
Added by the GRUEL WORM! |
Proyecto1.exe |
![]() |
Added by the GRUEL WORM! |
Root.exe |
![]() |
Salfeld Child Control - parental control software |
olesvr.exe |
![]() |
Added by the BANKER-AEV TROJAN! |
[path to trojan] |
![]() |
Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
devldr16.exe |
![]() |
Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
devldr16.exe |
![]() |
?? |
?? |
![]() |
Apparently mainboard/chipset related, by a French company called AS Media - what exactly is it, and is it required |
devlog.exe |
![]() |
Added by the RANKY.CK TROJAN! |
[path to trojan] |
![]() |
Added by the RANKY.CK TROJAN! |
[path to trojan] |
![]() |
?? |
DGJM.exe |
![]() |
DigitalNames.g adware |
dgtstart.exe |
![]() |
eAcceleration Stop-Sign security software related. Previously not recommended, see here |
dguard.exe |
![]() |
Added by the WINSPY.AG TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! |
smss.exe |
![]() |
Added by the RBOT-PR WORM! |
regsvr.exe |
![]() |
Added by the WINSPY.AG TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! |
services.exe |
![]() |
Intel DSL modem driver - leave enabled or you'll have to re-install the drivers |
dhcpagnt.exe |
![]() |
?? |
DHNUXB.exe |
![]() |
System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs |
diagent.exe |
![]() |
Added by the ALPHA-C TROJAN! |
diagnostic.exe |
![]() |
Adult content dialler |
dlm.exe |
![]() |
Adult content dialler |
dlm.exe |
![]() |
Unidentfied malware |
rundll32.exe msa32chk.dll |
![]() |
Dialer-Control. Detects and protects from premium rate p0rn diallers |
dc.exe |
![]() |
DialerDetect detects stealth installed premium rate diallers, and sounds the alarm when such a connection is being installed without you knowing it |
dd.exe |
![]() |
Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" |
PhoneAnswer.exe |
![]() |
Adult content dialler |
mxt32.exe |
![]() |
Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders |
OSDEx.exe |
![]() |
Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs |
PDDLGHLP.EXE |
![]() |
Added by a variant of the SDBOT WORM! |
Rnaap.exe |
![]() |
Added by the SDBOT-DEU WORM! |
oqedrhg.exe |
![]() |
Manulife Financial Insurance program. Is it required at startup? |
Diamondview.exe |
![]() |
Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
csrss.exe |
![]() |
Added by the LAZAR TROJAN! |
Recalculate.exe |
![]() |
Diet Kazaa add-on for Kazaa Media Desktop - "removes all adware and popups, built in Download Accelerator, makes searches faster and helps produce more results" |
DietK.exe |
![]() |
MSI DigiCell - "the most useful and powerful utility that MSI has spent much research and efforts to develop, helps users to monitor and configure all the integrated peripherals of the system, such as audio program, power management, MP3 files management and communication / 802.11g WLAN settings. Moreover, with this unique utility, you will be able to activate the MSI well-known features, Live Update and Core Center" |
DigiCell.exe |
![]() |
Adware downloader |
DigitalSound.exe |
![]() |
TV guide and reminder |
CLIENT.EXE |
![]() |
TV guide and reminder |
client01.exe |
![]() |
Digisoft AntiDialer |
AntiDialer.exe |
![]() |
Related to camera software from DigitalDreams |
DigiSrv.exe |
![]() |
For Compaq PC's. Loads Digital Dashboard options |
devgulp.exe |
![]() |
Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems |
DLG.exe |
![]() |
Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here |
downlo~1.exe |
![]() |
DigitalNames spyware variant |
DigitalNamesStart.exe |
![]() |
InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content |
ISWizard.exe |
![]() |
InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content |
dwMon.exe |
![]() |
Created by Disney but licensed to ESPN for watching videos |
DIGServices |
![]() |
DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically |
digstream.exe |
![]() |
Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames, personal toast creator, war tools (login flooder), and allows viewing and interacting with the raw MSN protocol |
Dimension.exe |
![]() |
Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
d4.exe |
![]() |
Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result |
dino3.exe |
![]() |
IMIServer/IEPlugin adware |
dinst.exe |
![]() |
Added by the CAKE WORM! |
caKe |
![]() |
Added by the DAEMONI-I TROJAN! |
sdchost.exe |
![]() |
DirectUpdate dynamic DNS updater |
DUControl.exe |
![]() |
Added by a variant of the SDBOT WORM! |
dxd3d.exe |
![]() |
Added by a variant of the RBOT-CJ WORM! |
dxopengl.exe |
![]() |
Added by the CERTIF-F TROJAN! |
direct3d.exe |
![]() |
DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
DirectCD.exe |
![]() |
Directory Opus - an advanced file manager. "Directory Opus goes beyond the simple file manager metaphor, and offers you a complete replacement for Windows Explorer and many other utility programs for handling FTP, ZIP, viewing files and images, running slideshows and more" |
dopusrt.exe |
![]() |
Added by the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T WORMS! |
directs.exe |
![]() |
Starts DirectTV DSL modem at boot up. Can also be started manually |
Directvdsl.exe |
![]() |
Added by the BIONET.318 TROJAN! Note - not the DirectX helper which is ddhelp.exe |
ddhelp32.exe |
![]() |
Added by the SDBOT.D TROJAN! |
Directx.exe |
![]() |
Added by the SDBOT.D TROJAN! |
Sqlexploit.exe |
![]() |
Added by the BLAXE or LOGPOLE WORMS! |
DirectX.exe |
![]() |
Added by the SDBOT.D TROJAN! |
NTCmd.exe |
![]() |
Added by the SDBOT.D TROJAN! |
PipeCmd.exe |
![]() |
Added by a variant of the AGOBOT/GAOBOT WORM! |
directx32.exe |
![]() |
Added by the PROGENT TROJAN! |
dtxservice.exe |
![]() |
Added by the PRORAT TROJAN! |
Fservice.exe |
![]() |
Added by the PRORAT TROJAN! |
Sservice.exe |
![]() |
Added by the PRORAT-P TROJAN! |
fservice.exe |
![]() |
Added by the MARKTMAN-B TROJAN! |
[path to trojan] |
![]() |
Added by the WILAB-A TROJAN! |
dxterm5.exe |
![]() |
Added by the BROWNEY.A WORM! |
DirectXset.exe |
![]() |
Added by the RBOT-ALT WORM! |
dx9diag.exe |
![]() |
Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders |
Dirkey.exe |
![]() |
?? |
nousb20.exe |
![]() |
For Creative sound cards. Detects when you insert a CD, DVD, etc |
CtNotify.exe |
![]() |
?? |
qnetquestnotifty.exe |
![]() |
?? |
discoveg.exe |
![]() |
Related to DISCover Drop from Digital Interactive Systems Corporation. What does it do and is it required? |
DISCover.exe |
![]() |
Discover Deskshop - single use "virtual" credit card |
Deskshop.exe |
![]() |
Disc Update Manager for Digital interactive's DISCover Console. Provider of on-demand video games |
DiscUpdMgr.exe |
![]() |
Added by the SMALL-VE TROJAN! |
[path to trojan] |
![]() |
Daosearch adware |
SECURITY.EXE |
![]() |
Added by the RBOT.AQT WORM! |
diskver.exe |
![]() |
Added by the DISTER TROJAN! - a spam relayer |
[trojan name] |
![]() |
Added by an unidentified WORM or TROJAN! |
msdarkend.exe |
![]() |
DisKeeper defragmentation software - can be started manually |
DkIcon.exe |
![]() |
Added by the CRYPTER.A TROJAN! |
diskinf.exe |
![]() |
?? |
DISKMON.EXE |
![]() |
Dell program that reminds you to make your backup diskettes |
disknag.exe |
![]() |
Adult content dialler |
Code.exe |
![]() |
MS-Connect dialler |
cat.exe |
![]() |
Adult content dialler |
hit.exe |
![]() |
Adult content dialler |
Snt.exe |
![]() |
Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader |
Disk_Monitor.exe |
![]() |
Added by the DLOADR-AS TROJAN! |
dispatcher.exe |
![]() |
ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself |
The_Eye.exe |
![]() |
Added by the AGOBOT.FX WORM! |
cssrs.exe |
![]() |
Allows for the adjustment of the display for LCD screen, CRT Monitor and TV output on HP computers |
hptasks.exe |
![]() |
System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display |
TrayIcon.exe |
![]() |
Disspy spyware detection and removal software |
disspy.exe |
![]() |
From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs |
DISTASST.EXE |
![]() |
Added by the MYFIP.A or MYFIP.K WORMS! |
Dfsvc.exe |
![]() |
Added by the MYFIP-C or MYFIP.K WORMS! |
kernel32dll.exe |
![]() |
Added by the MYFIP.AC WORM! |
blade.exe |
![]() |
Added by the MYFIP.AB WORM! |
win.exe |
![]() |
Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses |
DNETC.EXE |
![]() |
Drive Icon and Label Utility - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found |
dit.exe |
![]() |
Added by the LAZAR-A TROJAN! Note - this is located in the System (9x/Me) or System32 (NT/2K/XP) folder |
dit.exe |
![]() |
Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs |
DiTask.exe |
![]() |
Associated with an Eicon Networks Diva ISDN or ADSL modem - what does it do and is it required? |
Divamon.exe |
![]() |
Added to the SPBOT.B TROJAN! |
divxenc.exe |
![]() |
Added by the GRAVEBOT-A TROJAN! |
codll.exe |
![]() |
Added by the ALADINZ.G TROJAN! |
Dr.DivX.exe |
![]() |
Added by a variant of the RBOT WORM! |
DivXPlayer.exe |
![]() |
Added by the NALDEM TROJAN or MASTAK VIRUS! |
DivX.Exe |
![]() |
Added by an unidentified WORM or TROJAN! |
DIVXPloyer.exe |
![]() |
Added by an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file |
devldr32.exe |
![]() |
DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers |
regedit /s c:hpdjregfix.reg |
![]() |
Symantec Licensing Detect Internet Connection, part of Norton Antivirus. What does it do and is it required? |
DJSNetCN.exe |
![]() |
WebRebates adware |
djtopr1150.exe |
![]() |
Added by the DECOY-A WORM! |
dKernel.exe |
![]() |
From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. It's recommended to leave this enabled, otherwise you could have problems starting it manually. |
DkService.exe |
![]() |
Added by the LUNII TROJAN! |
dktime.exe |
![]() |
RapidBlaster variant (in a "DonkeySoft" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
dkware.exe |
![]() |
RapidBlaster variant (in a "DonkeySoft" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
dkware.exe |
![]() |
?? |
dkzzixm.exe |
![]() |
Drive letter access to a UDF packet writer for CD-RW - from HP, Veritas an others. Similar to Roxio's DirectCD and does the same thing. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones" |
tfswctrl.exe |
![]() |
Sonic CD/DVD burning applications |
DLACTRLW.EXE |
![]() |
System Tray access to DLA - Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones" |
Dlatray.exe |
![]() |
Related to Dell Photo Printers and provides additional configuration options for these devices |
dlbcserv.exe |
![]() |
Dell printer software - reports back on printer and cartridge useage |
rundll32 [path] DLBUtime.dll, _RunDLLEntry@16 |
![]() |
Related to the Dell AIO A964 printer/scanner/copier which comes bundled with many Dell computers. Required for the Dell Ink Management System. If you use the 964 printer, Dell recommends leaving dlcctime.dll in place as it fixes compatibility issues on some Dell systems. If you receive an error message on system startup that reads: "Error in C:WINDOWSSystem32spooldriversW32x863DLCCtime.dll Missing entry: RunDLLEntry" Dell offers help here |
rundll32 [path] DLCCtime.dll, _RunDLLEntry@16 |
![]() |
Dell Photo AIO Printer 924 device monitor |
dlccmon.exe |
![]() |
Dell printer software - reports back on printer and cartridge useage |
rundll32 [path] DLCDtime.dll, _RunDLLEntry@16 |
![]() |
Dell Photo AIO Printer 944 device monitor |
dlcdmon.exe |
![]() |
Dell printer software - reports back on printer and cartridge useage |
rundll32 [path] DLCFtime.dll, _RunDLLEntry@16 |
![]() |
Dell Photo AIO Printer 810 device monitor |
dlcgmon.exe |
![]() |
Added by the MAILBOT-CB TROJAN! |
dcpavss.exe |
![]() |
Dell printer software - reports back on printer and cartridge useage |
rundll32 [path] DLCJtime.dll, _RunDLLEntry@16 |
![]() |
Dell Photo AIO Printer 964 device monitor |
dlcjmon.exe |
![]() |
rundll32 [path] DLCXtime.dll, _RunDLLEntry@16 | |
![]() |
Dell printer software - reports back on printer and cartridge useage |
dlcxmon.exe |
![]() |
Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus |
dlder.exe |
![]() |
Added by the CAKE WORM! |
caKe |
![]() |
?? |
DLForcerEXE.exe |
![]() |
Known to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown |
Vcdlf.exe |
![]() |
Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates |
DLGCHBW.exe |
![]() |
Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished |
WATCH.exe |
![]() |
Downloader for Microgaming/Casino software - stealth installed |
N/A |
![]() |
Added by the EXPHOOK-A TROJAN! |
dlhost.exe |
![]() |
Added by the RANDEX.AK WORM! |
windfe.exe |
![]() |
Related to D-Link DGE-530T PCI card for servers and workstations |
dlnetst.exe |
![]() |
Added by the WOOTBOT.DN WORM! |
dllmanager.exe |
![]() |
Added by an unidentified TROJAN! |
[various filenames] |
![]() |
Added by the AUTOSKY WORM! |
svchoist.exe |
![]() |
Added by the AUTOSKY WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Documents and SettingsFavourites folder |
svchost.exe |
![]() |
Added by a variant of the RBOT WORM! |
dllmngr32.exe |
![]() |
Added by the RPCBOT.F TROJAN! |
[path to worm] |
![]() |
Added by a variant of the SDBOT WORM! |
[random filename].exe |
![]() |
Added by the KWBOT.E WORM! |
dllmem32.exe |
![]() |
Added by the SUCLOVE.A WORM! |
dllhost.dll |
![]() |
Added by the LATEDA TROJAN! |
dllcachev2.exe |
![]() |
Added by a variant of the SLAPER TROJAN! |
[random filename] |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
dlldmt.exe |
![]() |
Added by the VB-SP WORM! |
[path to file] |
![]() |
Added by the STARTPAGE.DQ hijacker |
dllhelp.exe |
![]() |
Added by the Downloader-HI TROJAN! |
dllhlp.exe |
![]() |
Added by the DELBOT-AC WORM! |
dllhst.exe |
![]() |
Browser hijacker and adware downloader |
dllhostxp.exe |
![]() |
Added by the JE WORM! Note - this is not the legitimate lsass.exe process |
lssas.exe |
![]() |
Added by the KILLAV-FK TROJAN! |
killer.exe |
![]() |
Added by the CRYPTER.A TROJAN! |
dllreg.exe |
![]() |
Added by the AGOBOT.VX WORM! |
dllsvc32.exe |
![]() |
IGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be has to be initialized through that browser |
DLM.exe |
![]() |
Adobe Download Manager - "can prevent you from having to start from the beginning should your download process be interrupted, and it offers a level of service not possible |
AdobeDownloadManager.exe |
![]() |
Dell laser printer status monitor |
DLPSP.EXE |
![]() |
Added by the MPB-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "dlsp2mx" |
dlsp2mx.exe |
![]() |
?? |
dlt.exe |
![]() |
Adult content dialler - see here |
dluca.exe |
![]() |
Added by the DLUCA.C TROJAN! |
dluca.exe |
![]() |
All-In-One-Telcom (adult content dialler) variant |
dluxde.exe |
![]() |
Added by the DLUCA.D TROJAN! |
cnfrm.exe |
![]() |
Added by the IRCBOT.WORM.61673 WORM! |
lpns.exe |
![]() |
Added by the JITTAR TROJAN! |
dm_mgr.exe |
![]() |
Wareout - malware masquerading as a spyware and dialer remover |
dm***.exe [* = random char] |
![]() |
Related to DigitalMedia Plus Archiver. This program is non-essential process to the running of the program, but should not be terminated unless suspected to be causing problems |
DMAScheduler.exe |
![]() |
Added by Trojan-Downloader.Win32.Dluca.bv TROJAN! |
dmc.exe |
![]() |
HotKey access to the Samsung Display Manager on laptops and ultra-mobiles that support it - such as the M55 and Q1 |
DMLoader.exe |
![]() |
Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs |
dmildr.exe |
![]() |
DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
DMISL.EXE |
![]() |
DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
DMISLAPP.exe |
![]() |
?? |
dmjay.exe |
![]() |
Added by a variant of the RBOT WORM! |
dmloader.exe |
![]() |
Added by the AGOBOT.ABU WORM! |
Dmsvc32.exe |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
dmtdll.exe |
![]() |
DMW "anti-cheating" software for online gaming |
dmwclient.exe |
![]() |
Part of Dell's Media Experience, a multimedia suite which offers the user functionality to organise and play music and digital video files |
DMXLauncher.exe |
![]() |
Added by the RUINDEM TROJAN! |
dm[3 random letters].exe |
![]() |
Comet Cursor adware |
dmserver.exe |
![]() |
Added by the MITGLIEDER.P TROJAN! |
[path to file] |
![]() |
Added by the STUB_A TROJAN! |
d140113.a.Stub.EXE |
![]() |
Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here |
Dnar.exe |
![]() |
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
rundll dnes.dll, DnDneCheckBindings |
![]() |
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
rundll dnes.dll, DnDneCheckDUN13 |
![]() |
Added by an unidentified WORM or TROJAN! |
DNHlp32.exe |
![]() |
Shorty adware - also detected as the AGENT.FD TROJAN! |
mc-58-12-0000080.exe |
![]() |
Shorty adware - also detected as the AGENT.FD TROJAN! |
mc-58-12-0000093.exe |
![]() |
Shorty adware - also detected as the AGENT.FD TROJAN! |
mc-110-12-0000079.exe |
![]() |
Shorty adware - also detected as the AGENT.FD TROJAN! |
mc-58-12-0000120.exe |
![]() |
Shorty adware - also detected as the AGENT.FD TROJAN! |
mc-58-12-0000140.exe |
![]() |
Added by the CQG WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Common Files folder |
[worm filename] |
![]() |
Added by the RBOT-WS WORM! |
dnsrslve.exe |
![]() |
Added by the RBOT-PQ WORM! |
dnsresolver.exe |
![]() |
Added by the DELBOT-Z WORM! |
dnssvc.exe |
![]() |
DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required? |
dns2goclient.exe |
![]() |
ScanSoft (Nuance) Dragon NaturallySpeaking registration reminder. Version 7 |
Ereg.exe Ereg.ini |
![]() |
Added by the DNSBUST-A TROJAN! |
dnsping.exe |
![]() |
CoolWebSearch parasite variant |
dnscleaner.exe |
![]() |
WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended, see here |
dnse.exe |
![]() |
?? |
dnxvc.exe |
![]() |
Added by the DOTOR.A WORM! |
Doctor.exe |
![]() |
PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed |
PWATCH.EXE |
![]() |
Wave Systems Corp. Document Manager - "provides secure storage and management capabilities for file and folder level encryption" |
docmgr.exe |
![]() |
Added by the SDBOT-AAP WORM! |
MsPMSPSd.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS |
GSDOGST.EXE |
![]() |
?? |
doing.exe |
![]() |
Added by the FORBOT-EK WORM! |
doit.exe |
![]() |
Added by the KIMAN.A WORM! |
dnsresolver.exe |
![]() |
30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite." |
dontpanicdemodp.exe |
![]() |
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
dpps2.exe |
![]() |
Don't Panic! privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite" |
DP.EXE |
![]() |
Directory Opus - a file manager from GPSoft |
dopus.exe |
![]() |
Adware downloader trojan |
dos64.exe |
![]() |
Added by the SDBOT-VV WORM! |
cygwin.exe |
![]() |
?? |
?? |
![]() |
DoubleDesktop is a smart and elegant system tray utility that effectively doubles the width of your Windows desktop |
dd.exe |
![]() |
DoUWantIt - online shopping assistant. Start it manually |
duwi.exe |
![]() |
Added by the SOLOW-E WORM! |
Dowmingzu.dll.vbs |
![]() |
Added by the DLOADER.BG TROJAN! |
hlp32.exe |
![]() |
Added by the Small-QJ TROJAN! |
[trojan filename] |
![]() |
Down2Home - "monitors your ADSL/Cablemodem/Dialup traffic and provides you with usefull statistics about the amount of data your PC has transferred" |
Down2Home.exe |
![]() |
Download Accelerator Manager Free Edition from Tensons Corp |
dam.exe |
![]() |
Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
DAP.exe |
![]() |
DownloadPlus adware |
DownloadPlus.exe |
![]() |
Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features |
DownloadWonder.exe |
![]() |
Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
DAP.EXE |
![]() |
MatrixDialer related |
rundll32.exe MSA64CHK.dll, DllMostrar |
![]() |
DownloadWare adware |
dw.exe |
![]() |
DownloadWare adware |
Dwe.exe |
![]() |
Added by the MYDOOM.W WORM |
Downxz.bat |
![]() |
digitalPersona fingerprint scanner |
DPAgnt.exe |
![]() |
DefenderPro AntiSpy - spyware remover |
DPASNT.exe |
![]() |
Automatic updates for DefenderPro AntiSpy - spyware remover |
DPASAutUpdate.exe |
![]() |
Defender Pro Antispy |
DPASAutoUpdate.exe |
![]() |
DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
dpcnav.exe |
![]() |
Compuware DevPartner Studio Configuration Utility, a tool for software developers - System Tray access to configure the utility's analysis. Not required at startup, can be launched from the Start Menu programs group when needed |
DPConfig.exe |
![]() |
Added by the GOLDENP-A TROJAN! |
dpcproxy.exe |
![]() |
DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
dpcstart.exe |
![]() |
DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
dpcstart.exe |
![]() |
Delfin Media Viewer or "Promulgate" adware |
dpi.exe |
![]() |
Added by the AOLPASS-B TROJAN! |
dpnsvr32.exe |
![]() |
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
dpps2.exe |
![]() |
SmartestSearch parasite - poses as a foistware, bogus adware/spyware remover called "scumware-remover" |
dps.exe |
![]() |
CamTrack webcam software that enhances the way people video chat |
dptracker.exe |
![]() |
Main executable for TOSHIBA DualPoint Utility Main Module. It is a system tray icon program that provides configuration options for dual pointing device |
TEDTray.exe |
![]() |
Iomega HotBurn - CD-RW burning software |
Autolaunch.exe |
![]() |
?? |
DragDrop.exe |
![]() |
Iomega HotBurn - CD-RW burning software |
Autolaunch.exe |
![]() |
Added by a variant of the RBOT WORM! |
tskman3.exe |
![]() |
Added by the RBOT.CSG WORM! |
[random filename] |
![]() |
Added by the SPYBOT.EE WORM! |
[random filename] |
![]() |
Added by the RBOT.CSG WORM! |
[random filename] |
![]() |
Added by the RBOT.CYA WORM! |
plscd.exe |
![]() |
Added by a variant of the RBOT WORM! Note - this is not the McAfee HackerWatch process which has the same filename |
HWAPI.exe |
![]() |
Added by a variant of the IRC.BOT TROJAN! |
winupdaterar.exe |
![]() |
Added by the RBOT-GQW WORM! |
updaterarwin.exe |
![]() |
Added by a variant of the SDBOT WORM! |
DAP.exe |
![]() |
Added by the JM TROJAN! |
MSTDC.EXE |
![]() |
Added by a variant of the SDBOT WORM! |
server.exe |
![]() |
Added by the DREF-C WORM! |
SysDrefIWv2.exe |
![]() |
Added by the DREF-D WORM! |
SysDref.exe |
![]() |
?? |
ph_finder.exe |
![]() |
Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly |
DrgToDsc.exe |
![]() |
?? |
dried.exe |
![]() |
DriveCleaner is a security assesment tool which gives exaggerated reports of security and privacy risks on a computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported risks |
UDC2006.exe |
![]() |
DriveCleaner misleading security program - not recommended, see here |
UDC.exe |
![]() |
Drive Icons from Realtek - shows a specific icon for each card type for their card reader controllers |
DriveIcon.exe |
![]() |
O&O DriveLED - hard disk monitoring and crash prevention |
OODLed.exe |
![]() |
Added by the JUNTADOR.K TROJAN! |
gbot.exe |
![]() |
Added by the SIRCAM WORM! |
Scam32.exe |
![]() |
Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder |
svchost.exe |
![]() |
Added by the BERPI TROJAN! |
svcmdx32.exe |
![]() |
Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder |
svchost.exe |
![]() |
Part of DriverMagic - "the easiest way to locate device drivers" |
dmschedule.exe |
![]() |
Added by the IRCBOT.I TROJAN! |
csrnvrt.exe |
![]() |
Added by the PRORAT-S TROJAN! |
system32.exe |
![]() |
Added by freewebs.com hijacker! |
accesweb.exe |
![]() |
DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs |
driveselect.exe |
![]() |
KidsWatch Time Control parental control software |
rundll32.exe drkly16j.dll, ServiceCheck |
![]() |
Part of the network monitoring program group for 3Com NIC cards. See here for more info |
SmartAgt.exe |
![]() |
Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise |
W95Mm.exe |
![]() |
Adult content dialler |
d.exe |
![]() |
Dropspam adware |
dslifestyle.exe |
![]() |
Added by the BEAGLE.AP WORM! |
drvddll.exe |
![]() |
Added by the BEAGLE.X WORM! |
drvddll.exe |
![]() |
Analog Devices SoundMAX soundcard related. What does it do and is it required? |
DrvListnr.exe |
![]() |
Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly |
drvlsnr.exe |
![]() |
Alcor drive monitor software |
DrvMon.exe |
![]() |
Added by the BROGGER-B TROJAN! |
drvnetw.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
drvr32h.exe |
![]() |
Added by the BOOHOO WORM! |
drvrquery32.exe |
![]() |
Added by the BEAGLE.W WORM! |
drvsys.exe |
![]() |
Added by the BAGLE.HR WORM! |
hidr.exe |
![]() |
Hijacker - drvupd.inf file installs a "searchforge.com" hijack |
rundll32 ..drvupd.inf |
![]() |
Added by the BEAGLE.FF WORM! |
hidn.exe |
![]() |
Added by the LOHAV-S TROJAN! |
drwatson_.exe |
![]() |
Added by the LOHAV-S TROJAN! |
drwatson_32.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
DRWEBAV.EXE |
![]() |
DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem |
Drwebscd.exe |
![]() |
AdShooter adware |
DR_S.exe |
![]() |
Added by the SPYMON TROJAN! |
ds.exe |
![]() |
Digital desktop clock including synchronization with atomic servers - see here |
dsclock.exe |
![]() |
Homepage hijacker - redirecting to downseek.com |
dsa.exe |
![]() |
Added by the RANKY.M TROJAN! |
[path to file] |
![]() |
Added by the ONLINEG-P TROJAN! |
dsakfsak14.exe |
![]() |
EnergyPlugin adware |
DSB.exe |
![]() |
Added by the RBOT-FOX WORM! |
zz.exe |
![]() |
Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
DSentry.exe |
![]() |
Added by an unidentified adware where ****** are random characters |
dp-******.exe |
![]() |
Added by the MULTIDR-AH TROJAN! |
dp-him.exe |
![]() |
Added by the GEMA TROJAN! |
Dskcompat.exe |
![]() |
Part of PC PhoneHome - "secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection". Security software from Brigadoon Security Group for tracking down lost/stolen computers |
DsKey.exe |
![]() |
Added by the STARTER-G TROJAN! |
[path to trojan] |
![]() |
Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
spdstrm.exe |
![]() |
Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection |
DSLagent.exe |
![]() |
Sagem DSL modem related. Apparently needed to detect the modem |
dslmon.exe |
![]() |
System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example) |
dslstat.exe |
![]() |
Added by the SERFLOG.B WORM! |
dsm.exe |
![]() |
Added by the SERFLOG.B WORM! |
msmpatch.exe |
![]() |
Added by the SERFLOG.B WORM! |
svosm.exe |
![]() |
Added by the SERFLOG.B WORM! |
sysup.exe |
![]() |
Added by the BEAGLE.DN WORM! |
windspl.exe |
![]() |
DSSAgent by Br›derbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info |
dssagent.exe |
![]() |
Added by the DSSDOOR-C TROJAN! |
[path to trojan] |
![]() |
Added by the AGOBOT-XX WORM! |
dmrss.exe |
![]() |
?? |
dssagens.exe |
![]() |
Added by the MAILBOT-BX TROJAN! |
plsitctl.exe |
![]() |
Added by the DELF.WG TROJAN! |
windrv.exe |
![]() |
Hagel Technologies internet bandwidth monitor |
DUMETER.EXE |
![]() |
Unified control center for overclocking both the graphics card and the CPU, but for the program to have its full functionality you must have an MSI mainboard with a CoreCell chip |
StartUpDualCoreCenter.exe |
![]() |
Added by the AGOBOT-AVG WORM! |
duck.exe |
![]() |
Dulux WeatherShield WeatherDesk - latest weather information from across Australia |
weather.exe |
![]() |
Added by the SDBOT-AEQ WORM! |
dumeter.exe |
![]() |
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
dumprep 0 -k |
![]() |
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
dumprep 0 -u |
![]() |
Added by the SOKIRON TROJAN! |
dun3.exe |
![]() |
Added by the SDBOT.BRP WORM! |
yujixit.exe |
![]() |
DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies" |
DVD43_Tray.exe |
![]() |
DVD43 is a small tool that overrides CSS copy-protection found on DVD movies |
DVD43.exe |
![]() |
Added by the CULT.P WORM! |
windvd98.exe |
![]() |
DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used |
DVDBitSet.exe |
![]() |
Related to an Intervideo program. What does it do and is it required in startup? |
DVDCheck.exe |
![]() |
Added by the GEMA TROJAN! |
Dvdcompat.exe |
![]() |
Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion |
DVDLauncher.exe |
![]() |
Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
DSentry.exe |
![]() |
HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware |
DVDTray.exe |
![]() |
Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs |
DVDUpgrd.exe |
![]() |
DVD Ghost - "utility to make your software DVD players and DVD copy/backup softwares restriction-free, and copy/backup DVD to hard disk" |
DVDGhost.EXE |
![]() |
Related to PureSight PC - designed to offer maximum flexibility and choice as families manage their internet use |
cfgmng32.exe |
![]() |
Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine |
Dvp95.exe |
![]() |
Command AntiVirus for Windows 95/98/Me |
DVPAPI9X.exe |
![]() |
Command Antivirus related |
Dvpinit.exe |
![]() |
Command Antivirus related |
Dvprpt.exe |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
dvraudio.exe |
![]() |
Added by the SDBOT-QA WORM! |
fbsfsdrs.exe |
![]() |
DVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC |
dvsync.exe |
![]() |
Delfin Media Viewer or "Promulgate" adware variant |
wsxsvc.exe |
![]() |
DownloadWare adware |
dw.exe |
![]() |
Desktop Weather |
Weather.exe |
![]() |
Desktop Weather 4 by The Weather Channel - provides current temperature, conditions, alerts, etc |
DesktopWeather.exe |
![]() |
DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference |
DWHeartbeatMonitor.exe |
![]() |
Download manager for Dell support alerts |
support.exe |
![]() |
Related to System Event Notification Services from Microsoft. Required for Efficient Mobile Network Computing |
dwtrig20.exe |
![]() |
The Shield firewall |
FireWall.exe |
![]() |
Added by the DEXTER.A WORM! |
sys*.exe [* = random number] |
![]() |
Added by the GEMA TROJAN! |
Dx8compat.exe |
![]() |
Added by the CERTIF-G TROJAN! |
dxdiags.exe |
![]() |
Added by the VB-CXT TROJAN! |
dxdlg32.exe |
![]() |
Added by the GAOBOT.CPX WORM! |
ntxdll.exe |
![]() |
Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it |
dxdllreg.exe |
![]() |
Added by the GIBE.B WORM! |
DX3DRndr.exe |
![]() |
Win32 cabinet self extractor. More info here |
p_981116.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
dxmsrv.exe |
![]() |
Added by the GEMA TROJAN! |
Dxsty.exe |
![]() |
Added by the MAFEG WORM! |
Dxupdate.exe |
![]() |
Added by Trojan-Downloader.Win32.Dluca.by TROJAN! |
dxvid.exe |
![]() |
Adult content dialler - see here |
optimize.exe |
![]() |
Adult content dialler - see here |
actalert.exe |
![]() |
Added by the RINBOT.B TROJAN! |
dydhcp.exe |
![]() |
Added by the RBOT-WT WORM! |
dynitora.exe |
![]() |
Added by the RBOT-XM WORM! |
CMD16.EXE |
![]() |
Added by a variant of the RBOT WORM! |
winxp34.exe |
![]() |
Added by a variant of the RBOT WORM! |
WinHelpcfn.exe |
![]() |
Added by the KOL TROJAN! |
Loader32.exe |
![]() |
Dynamic DNS IP address updater tool, used as a client for Dynamic DNS service providers such as http://www.DynDNS.org |
DynDNS.exe |
![]() |
DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually |
ddutray.exe |
![]() |
Added by a variant of the RBOT WORM! |
dynizari.exe |
![]() |
DynSite - dynamic DNS client, also called an automatic IP updater |
DynSite.exe |
![]() |
Dynu online dynamic IP update client. Useful when using a dial up modem |
dynubas.exe |
![]() |
?? |
DZSAVEME.EXE |
![]() |
DICOM Validation Tool - "DICOM is increasingly being used as the standard communication mechanism when integrating various medical products in a hospital environment" |
dvt.exe |
![]() |
Installation could be a crack/hack to NOD32 here. Seen and removed in many logs. Investigate it further and if this file is present C:d_v_t.reg then it should be fixed. Not to be confused with the DICOM entry here. Both files are located in the Windows/Windir directory |
dvt.exe |

Main Page 



