| Statut | Nom de l'Autorun | Commande | Description |
| ? | M Player Post Installer | postinstallm.exe | ?? |
| X | M S DVD DirectX Dll Drivers | msxdl.exe | Added by the SDBOT-BJN WORM! |
| N | M-Audio Delta Taskbar Icon | DeltTray.exe | M-Audio Delta Control Panel for M-Audio brand Delta series audio cards. System Tray access to audio settings - available through Control Panel |
| U | M-Audio MobilePre Control Panel Launcher | MPTask.exe | Control Panel Launcher for MobilePre USB bus-powered preamp and audio interface from M-Audio |
| U | M-Audio Taskbar Icon | DeltaIITray.exe | System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards |
| X | M-soft Office | M-soft Office.hta | HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! |
| X | M1cr0s0ft S3rcurity | systemconfig.exe | Added by the RBOT.BKB WORM! |
| X | M1cr0s0ft Upd4t4zS | update32.exe | Added by the RBOT-MI WORM! |
| X | m32info | m32info.exe | Added by the CRYPTER.A TROJAN! |
| X | M3Development_WhenUSave_Installer | M3Development_WhenUSave_Installer.exe | WhenU.Save adware |
| N | M3Tray | m3tray.exe | System Tray access to the now defunct Movielink "web-based video on demand (VOD) and electronic sell-through (EST) service offering movies, TV shows and other videos for rental or purchase". Movielink LLC were acquired by Blockbuster in 2008 |
| N | M3Tray | Movielink Tray.exe | System Tray access to the now defunct Movielink "web-based video on demand (VOD) and electronic sell-through (EST) service offering movies, TV shows and other videos for rental or purchase". Movielink LLC were acquired by Blockbuster in 2008 |
| X | m66 | mlr66.exe | Added by the AGENT-ACR TROJAN! |
| U | MAAgent | MAAgent.exe | Related to MarkAny - a solution to prevent is unauthorized distribution of information through Floppy, CD, email, etc |
| X | Mabochine Deybug Malnager | kdm.exe | Added by the SDBOT-SD WORM! |
| U | MacDrive | MacDrive.exe | MacDrive 7& MacDrive 6 CrossStripe Edition from Mediafour Corporation - "a perfect way to share files between Mac OS and Windows." Version 6 is not Vista compatible but doesn "include support for striped Mac arrays created with ATTO ExpressStripe software." |
| U | MacDrive application | MacDrive.exe | MacDrive 7 from Mediafour Corporation - "enables anyone using Windows Vista, XP, and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types, including CDs, DVDs, hard drives, floppy, Zip, Jaz, and more!" |
| ? | MacDrive7.0.4TimeOutPatch | TimeOutPatch.EXE | Part of MacDrive 7 from Mediafour Corporation - "enables anyone using Windows Vista, XP, and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types, including CDs, DVDs, hard drives, floppy, Zip, Jaz, and more!" Interim patch for an older version? Is it no longer required? |
| X | Macfee Security Patch | Mpfsheild.exe | Added by the RBOT-NP WORM! |
| U | Machine Debug Manager | MDM.EXE | Used by developers for debugging and is a component of several MS products including Office and Visual Studio. Those who have encountered it have unchecked it with no degradation in performance. It may cause your computer to "hang" if you have Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendation. For this entry it loads under the "RunServices" key in Me (located in C:\WINDOWS\SYSTEM). It also loads a service in XP/Vista (located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug) |
| X | Machine Debug Manager | msdn.exe | Added by a variant of the RBOT WORM! |
| X | Machine Debug Manager | mdm.exe | Added by the SDBOT-APE WORM! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or %System% (Me only). This one is located in %Windir% |
| X | Machine Debug Manager | mdms.exe | Added by the SDBOT-CH WORM! |
| X | Machine Update Soft | wusas.exe | Added by an unidentified WORM or TROJAN! |
| X | Machine Works, Inc. | aecces.exe | Added by the VB-ELW TROJAN! |
| X | machine-debugger | WMIPRVSW.exe | Added by the AGOBOT.WW WORM! |
| X | machine-debugger | mdmsv.exe | Added by the AGOBOT-BR WORM! |
| X | MachineTest | CMagesta.exe | Added by the SDBOT-NE WORM! |
| X | mackfy.exe | msms.exe | Added by the SDBOT-DID WORM! |
| N | MacLic | MacLic.exe | Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks |
| N | MacLicense | MacLic.exe | Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks |
| N | MacName | MacName.exe | Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks |
| X | Macromedia 8 | Flash Player.exe | Added by the JAMBU-A WORM! |
| X | Macromedia Critical Updater | rarww.exe | Added by a variant of the RBOT WORM! |
| X | Macromedia Dreamweaver XM | macdwXM.exe | Added by the AGOBOT-RI WORM! |
| X | Macromedia Drive | Iexplor32.exe | Added by a variant of the RBOT WORM! |
| X | Macromedia Flash Update | scvhost.exe | Added by a variant of the RBOT WORM! |
| U | MacroPhone | macrophone.exe | MacroPhone is a network based telephony application that "allows you to handle server based voice mail and fax functions for all users in your company" and "offers many related functions, like caller id display, call logging, call notification, mobil short message sending and flexible user rights management" |
| U | MacroPhone Client | macrophone.exe | MacroPhone is a network based telephony application that "allows you to handle server based voice mail and fax functions for all users in your company" and "offers many related functions, like caller id display, call logging, call notification, mobil short message sending and flexible user rights management" |
| N | Macrovision Update Service | issch.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| N | Macrovision Update Service | ISUSPM.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| U | MACVNTFY | MACVNTFY.EXE | Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - "a perfect way to share files between Mac OS and Windows." Unlike the standard version of MacDrive 7, this version is not Vista compatible but does "include support for striped Mac arrays created with ATTO ExpressStripe software." |
| Y | MAD.EXE | MAD.EXE | MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up? |
| N | MadExe | LaunchRA.exe | Part of Dell Resolution Assistant - "a diagnostic program that allows you to contact Dell. When factory-installed by Dell, it allowed you to perform hardware and software diagnostics that provided alerts to potential problems and enabled real-time communication with Dell RA techs. You can now use RA only to contact Dell by e-mail" |
| U | MAFWTaskbarApp | MAFWTray.exe | Drivers for the M-Audio Firewire Audiophile - Interface |
| N | Magent | MAgent.exe | Associated with Mail.Ru - "the largest free e-mail service of the Runet". "Mail.Ru Agent is the most popular Russian instant messenger" |
| U | Magentic | Magentic.exe | Magentic by Incredimail - wallpaper/screensaver manager |
| N | MagicalUnInstall | MagicalUnInstall.exe | Ashampoo® Magical UnInstall from Ashampoo GmbH & Co. KG - which monitors each new program installation, saving a log of the current configuration and using this as a reference to completely uninstall it if you chose to do so at a later date |
| X | Magicantispy | Magicantispy.exe | Magicantispy rogue spyware remover - not recommended, removal instructions here |
| U | MagicDisc | MagicDisc.exe | MagicISO - "very helpful utility designed for creating and managing virtual CD drives and CD/DVD discs" |
| U | MagicDsk | MAGICDSK.EXE | Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons |
| U | MagicFormation | MagicFormation.exe | MagicFormation from Tokyo Downstairs - a docking program that allows you to group icons in a ring anywhere on the desktop using mouse gestures to access things like My Documents, Notepad and Calculator. This entry appears when you select "Regist to startup" from the options |
| U | MagicFormation.exe | MagicFormation.exe | MagicFormation from Tokyo Downstairs - a docking program that allows you to group icons in a ring anywhere on the desktop using mouse gestures to access things like My Documents, Notepad and Calculator. This entry appears when you select "Regist to startup" from the options |
| U | MagicKeyboard | PreMKBD.exe | Related to Samsung laptops. Provides ability to program keys to perform specific functions |
| U | MagicLinker3 | MagicLnk.exe | ThaiSoftware Thai Dictionary |
| N | Magitime | Magitime.exe | Magitime - connection tracking utility which monitors online time, expense, data transfer |
| U | MagPlayerWatcher_cwzjp | MagPlayer.exe | MagPlayer spyware |
| N | MagUninstall | MagicalUnInstall.exe | Ashampoo® Magical UnInstall from Ashampoo GmbH & Co. KG - which monitors each new program installation, saving a log of the current configuration and using this as a reference to completely uninstall it if you chose to do so at a later date |
| X | mahmud | mahmud.exe | Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example |
| U | Mail.com | mcalert.exe | System Tray notification for new email from the Mail.com free web-mail service |
| X | Mail_Check | Mail_Check.exe | Added by the PANOIL.C WORM! |
| U | MailBell | mailbell.exe | MailBell "notifies you about new email without interrupting you when you type or work with the mouse in other programs" |
| U | mailbell.exe | mailbell.exe | MailBell "notifies you about new email without interrupting you when you type or work with the mouse in other programs" |
| X | MailBlocker | [path to trojan] | Added by the AGENT-LRJ TROJAN! |
| U | Mailbox Verifier | mboxvrfy.exe | Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance) |
| U | MailCleaner | MAILCLEANER.EXE | MailCleaner "protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all incoming files downloaded by Internet Explorer, Netscape Navigator, ICQ and iMesh". Not recommended as it bundles GAIN adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
| X | mailman.exe | mailman.exe | Added by the CERTIF-E TROJAN! |
| Y | MailScan Dispatcher | Launch.exe | MicroWorld MailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned |
| X | MailSkinner | mailskinner.exe | MailSkinner - an application by Electronic Group , notorious for its premium rate "drive by" installed adult content dialers (see here) |
| U | MailWasherPro | MAILWA~1.EXE | MailWasher Pro anti-spam from FireTrust |
| U | MailWasherPro | MailWasherPro.exe | MailWasher Pro anti-spam from FireTrust |
| U | MailWasherPro | MailWasher.exe | MailWasher Pro anti-spam from FireTrust |
| U | MAIN | main.exe | SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan |
| ? | Main Executable (HP) | HP05T0R5.exe | HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do? |
| X | main_module | drvmmx32.exe | Added by the DILA TROJAN! |
| X | main16 | main16.exe | Added by the CRYPTER.A TROJAN! |
| X | main32 | main32.exe | Added by the CRYPTER.A TROJAN! |
| X | MainDownloads | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | MainStart | svcmfte32.exe | Added by the STINX-A TROJAN! |
| X | mainviewex | mainviewex.exe | Added by the GEMA.D TROJAN! |
| X | Major Microsoft Windows Driver Boot loader | bpool.exe | Added by the MYTOB.AJ WORM! |
| X | Malware Catcher 2009 | MCatcher.exe | Malware Catcher 2009 rogue security software - not recommended, removal instructions here |
| X | Malware Cleaner | [random numbers].exe | Malware Cleaner rogue security software - not recommended, removal instructions here |
| X | Malware Defense | mdefense.exe | Malware Defense rogue security software - not recommended, removal instructions here |
| X | Malware Destructor | KB1883574.exe | Malware Destructor 2011 rogue security software - not recommended, removal instructions here |
| X | Malware Destructor 2009 | MD345d.exe | Malware Destructor 2009 rogue security software - not recommended, removal instructions here |
| X | Malware Scanner | MalScr.exe | Malware Scanner rogue security software - not recommended, removal instructions here |
| U | Malware Sweeper | MalSwep.exe | Malware Sweeper - "Protects the user from malicious malware and monitors the sanity of the running programs" |
| X | Malware-Wipe | Malware-Wipe.exe | MalwareWipe rogue security software variant - not recommended, removal instructions here |
| X | Malware-Wiped | Malware-Wiped.exe | MalwareWipe rogue security software variant - not recommended, removal instructions here |
| X | MalwareAlarm | MalwareAlarm.exe | MalwareAlarm rogue security software - not recommended, removal instructions here |
| X | MalwareBot | MalwareBot.exe | MalwareBot rogue security software - not recommended, removal instructions here |
| X | MalwareBurn 6.9 | MalwareBurn 6.9.exe | MalwareBurn rogue security software - not recommended, removal instructions here |
| X | MalwareBurn 7.0 | MalwareBurn 7.0.exe | MalwareBurn rogue security software - not recommended, removal instructions here |
| X | MalwareBurn 7.1 | MalwareBurn 7.1.exe | MalwareBurn rogue security software - not recommended, removal instructions here |
| X | MalwareBurn 7.2 | MalwareBurn 7.2.exe | MalwareBurn rogue security software - not recommended, removal instructions here |
| X | MalwareBurn 7.3 | MalwareBurn 7.3.exe | MalwareBurn rogue security software - not recommended, removal instructions here |
| Y | Malwarebytes Anti-Malware (reboot) | mbam.exe | Part of MalwareBytes' Anti-Malware - which is "considered to be the next step in the detection and removal of malware. This entry appears if MBAM detects malware that needs removing on a reboot if the associated files are locked |
| Y | Malwarebytes Anti-Malware (rootkit-scan) | mbam.exe | Part of MalwareBytes' Anti-Malware - which is "considered to be the next step in the detection and removal of malware. This entry appears if MBAM is scheduled to perform a root-kit scan on a reboot |
| Y | Malwarebytes' Anti-Malware | mbamgui.exe | System tray access to and realtime protection agent for the registered version of MalwareBytes' Anti-Malware - which is "considered to be the next step in the detection and removal of malware. In our product we have compiled a number of new technologies that are designed to quickly detect, destroy, and prevent malware." This entry also appears under the HKLM\RunOnce registry key during installation |
