| Statut | Nom de l'Autorun | Commande | Description |
| X | Classes | int1.exe | "Switch" premium rate adult content dialler variant |
| X | Classes | intl.exe | "Switch" premium rate adult content dialler variant |
| X | Classes | run_21.exe | "Switch" premium rate adult content dialler variant |
| X | Classes | srv.exe | "Switch" premium rate adult content dialler variant |
| X | Classes | srv2.exe | "Switch" premium rate adult content dialler variant |
| X | Classes | MSTAR2.EXE | "Switch" premium rate adult content dialler variant |
| X | Classes | mstart.exe | "Switch" premium rate adult content dialler variant |
| U | ClauerUpdate | ClUpdate.exe | Automatic updates for the software supporting the Clau-ACCV and Clauer-idCAT digital certificate USB keys |
| X | clcbt.exe | clcbt.exe | Added by the AGENT.CBA TROJAN! |
| X | clcl3 | clcl3.exe | Added by the AGENT.ES TROJAN! |
| X | clcl7 | clcl7.exe | Added by a variant of the Covert Sys Exec TROJAN! |
| U | CLCLSet | CLCL.exe | CLCL clipboard caching utility |
| N | Clean Access Agent | CCAAgent.exe | Cisco Clean Access Agent from Cisco Systems, Inc |
| X | Clean Mgr | cleanmg.exe | Added by the IRCBOT.BBO BACKDOOR! |
| X | Clean up | service.exe | Added by the AGENT-FPY TROJAN! |
| X | clean_service | clean_service.cmd | Added by the REFAZ WORM! |
| X | Cleanator | Cleanator.exe | Cleanator rogue privacy program - not recommended, removal instructions here |
| ? | CleanEasyImg | cleanall.exe | ?? |
| X | Cleaner2009 Freeware | UCLN.exe | Cleaner2009 rogue privacy program - not recommended, removal instructions here |
| X | CleanPCTool | SysRep.exe | CleanPCTool rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| ? | CleanRegPath | CleanReg.exe | Apparently Annex A ADSL modem related. What does it do and is it required? |
| U | CleanSweep Smart Sweep-Internet Sweep | Csinsm32.exe | Smart Sweep and Internet Sweep keep track of all files added and any changes made to existing configuration files when you install a program using the now discontinued Norton Cleansweep uninstaller/file cleaning utility. "Smart Sweep tracks all file additions and changes that originate from floppies, CDs, or network drives. Internet Sweep tracks all ActiveX control file and Plug-in installations that originate from a Web site. CleanSweep uses this information later to ensure safe and thorough uninstallations" |
| U | CleanSweep Smart Sweep-Internet Sweep | CsinsmNT.exe | Smart Sweep and Internet Sweep keep track of all files added and any changes made to existing configuration files when you install a program using the now discontinued Norton Cleansweep uninstaller/file cleaning utility. "Smart Sweep tracks all file additions and changes that originate from floppies, CDs, or network drives. Internet Sweep tracks all ActiveX control file and Plug-in installations that originate from a Web site. CleanSweep uses this information later to ensure safe and thorough uninstallations" |
| N | CleanSweep Useage Watch | CSUSEM32.EXE | Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time |
| X | cleansweep.exe | cleansweep.exe | Added by the AGENT-NEU TROJAN! |
| U | CleanTemp | CLEANT~1.EXE | CleanTemp - automatically deletes the contents of the %Temp% folder that is used to store temporary files at Windows startup and uses no memory or processing power |
| U | CleanTemp | CleanTemp.exe | CleanTemp - automatically deletes the contents of the %Temp% folder that is used to store temporary files at Windows startup and uses no memory or processing power |
| U | CleanTemp 1.5 | CLEANT~1.EXE | Version 1.5 of CleanTemp - which automatically deletes the contents of the %Temp% folder that is used to store temporary files at Windows startup and uses no memory or processing power |
| U | CleanTemp 1.5 | CleanTemp.exe | Version 1.5 of CleanTemp - which automatically deletes the contents of the %Temp% folder that is used to store temporary files at Windows startup and uses no memory or processing power |
| N | Cleanup | ONICTASK.EXE | Internet Cleanup from Allume Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet |
| Y | CleanUp | mcappins.exe | Used by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted |
| Y | CleanUp | CleanUp.exe | Utility that only runs once after installing the drivers for Analog Devices SoundMax integrated soundcards to clean-up the files no longer required once the installation is complete. Other programs/drivers may use the same filename for the same purpose. In this case, the file is located in %System% and is listed under the HKLM\RunOnce registry key |
| X | CleanUp Antivirus | CU[random characters].exe | Cleanup Antivirus rogue security software - not recommended, removal instructions here |
| X | CleanUp3 | launcher.exe CleanUp3Up.exe | CleanUp3 rogue security software - not recommended, removal instructions here. Both files are located in %ProgramFiles%\CleanUp3 |
| ? | CleanupProgram | cleanup.exe | Sony Vaio related - what does it do and is it required? Located in a C:\Sonysys folder |
| X | CleanupTool | SysRep.exe | CleanupTool rogue system error and cleaning utility - not recommended. A member of the ErrClean family |
| X | CleanVMain | CleanV.exe | CleanV rogue security software - not recommended, removal instructions here |
| U | Clear meter bar | Clear meter bar .exe | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits |
| U | Clear meter bar | CLEARM~1.EXE | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Clear meter bar .exe" is shown as "CLEARM~1.EXE" |
| U | CleverKeys | CK.exe | CleverKeys - "is free software that provides instant access to definitions at Dictionary.com, synonyms at Thesaurus.com, facts at Reference.com and more - from almost all Windows programs, including word processors, Web browsers and most e-mail programs" |
| U | CleverKeys | ClvrKeys.exe | Older version of CleverKeys - which "is free software that provides instant access to definitions at Dictionary.com, synonyms at Thesaurus.com, facts at Reference.com and more - from almost all Windows programs, including word processors, Web browsers and most e-mail programs" |
| X | clfmon | clfmon.exe | Added by the TACTSLAY.E TROJAN! |
| X | clfmon | nvsvca32.exe | Added by the TACTSLAY.E TROJAN! |
| X | clfmon.exe | clfmon.exe | Added by the AGENT-BJ TROJAN! |
| N | CLHomeMediaServer | CLHomeMediaServer.exe | System Tray access to the CyberLink Live remote media access service |
| X | Cli Confg | cliconfig.exe | Added by a variant of the SPYBOT WORM! See here |
| X | CLI Services | clisrv.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| N | Click Radio Tuner | clickr~1.exe | ClickRadio - subscription service playing radio music via the internet |
| N | Click Tray Calendar | ClickT~1.EXE | ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc |
| N | ClickMe | ClickMe.exe | ClickM "JOKE" program |
| U | Clickoff | Clickoff.exe | Clickoff automatically dismisses annoying dialog boxes |
| X | ClickPotatoLiteSA | ClickPotatoLiteSA.exe | ClickPotato adware |
| N | ClickSight Launcher | cs.exe | Launcher for the ClickSight® marketing tool from ClickStream Technologies - which "is a patented data-collection technology that helps independent software vendors understand the current and future usage of their product" |
| X | ClickTheButton | CTB.EXE | ClickTheButton adware |
| X | ClickTheButton | csrss.exe | ClickTheButton adware. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder |
| X | ClickTheButton | cd_load.exe | Added by the DOWNLOADER-MY TROJAN! |
| X | CLICONFG | CLICONFG.EXE | Added by the OPASERV.T WORM! |
| ? | Client Access API Daemon | cwbappcd.exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required? |
| N | Client Access Check Version | cwbckver.exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources |
| ? | Client Access Express Welcome | cwbwlwiz.exe | Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required? |
| N | Client Access Help Update | cwbinhlp.exe | Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries |
| ? | Client Access PC5250 Sound | pcssnd.exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. "The Client Access Express PC5250 emulator provides desktop users with a graphical user interface for existing iSeries applications" - see here. What does it do and is it required? |
| N | Client Access Service | CwbSvStr.Exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources |
| ? | Client Access Taskbar | cwbuitsk.exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required? |
| X | Client Agent | ipxwping.exe | Added by the PPDOOR-N TROJAN! |
| X | Client Agent | photes.exe | Added by the PPDOOR-P TROJAN! |
| X | Client Agent | [path to file] | Added by the PPDOOR-J TROJAN! |
| ? | Client agent for ARCserve | W95AGENT.EXE | Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required? |
| Y | Client and Host Security Platform | ccApp.exe | Part of older versions of Symantec's security products including Norton 360, Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Effectively the "master" process which calls the different program features and makes sure they are running. Auto-protect and E-mail check will not function without this |
| X | Client for Microsoft Networks | msclient32.exe | Added by the SDBOT-BXQ WORM! |
| N | Client Security Solution | cssauth.exe | Part of Thinkvantage Client Security Solution for Lenovo ThinkPad notebooks and ThinkCentre desktops. Once configured via the associated setup screens this loads via winlogon.exe (and loads the password manager) and therefore disabling this entry has no effect |
| X | Client Server Control Process | [path to trojan] | Added by the AGENT-HR TROJAN! |
| X | Client Server Run Time Proccess | csrsrv.exe | Added by a variant of the SDBOT WORM! |
| X | Client Server Runtime | [path to worm] | Added by the POEBOT-KR WORM! |
| X | Client Server Runtime Process | csrsss.exe | Added by the SDBOT-LD WORM! |
| X | Client Server Runtime Process | csrs.exe | Added by the LINKBOT.M WORM! |
| X | Client Server Runtime Process | smmss.exe | Backdoor TROJAN! Possible SDBOT-GEN variant |
| X | Client Update | wup.exe | Added by the OPANKI.O WORM! |
| Y | Cliente DLO | DLOClientu.exe | Part of the backup suites from VERITAS - Backup Exec and NetBackup. Both have now been replaced by their Symantec equivalents since they acquired VERITAS in 2005 |
| X | ClientMan1 | mscman.exe | ClientMan parasite variant |
| N | Clik Status Monitor | toolsclickstat.exe | Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed |
| X | Clip Service Manager | clipmg.exe | Added by the DELF.DXJ TROJAN! |
| X | Clip Servicer | clipsrvc.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Clip Srv | clipsv.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | clipboard.exe | clipboard.exe | Added by an unidentified WORM or TROJAN! |
| N | Clipbook Service | Clipsrv.exe | Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks |
| U | clipdiary | clipdiary.exe | Clipdiary from Softvoile - "Free Clipboard Manager for keeping the clipboard history" |
| N | ClipMate5x | ClipMt5x.exe | Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs |
| N | Clipmate6 | CLIPMT60.EXE | Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs |
| N | ClipMate7 | ClipMate.exe | Clip Mate 7 by Thornsoft - utility that allows you to store more than one item in the clipboard |
| N | Clipomatic | Clipomatic.exe | Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data |
| N | Clipsrv | Clipsrv.exe | Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks |
| X | ClipSrv | clipserv.exe | Added by the SDBOT-AAV and SDBOT-AFE WORMS! |
| X | ClipSrv | CLIPBRD3D.EXE | Added by the MOFEI-D WORM! |
| X | ClipSrv | clipservr.exe | Added by the SDBOT-AFE WORM! |
| X | ClipSrv | clipsrv.exe /waitservice | Added by the HORST.Q TROJAN! Note - this is not the legitimate clipsrv.exe which is always located in %System%. This one is located in either %Windir%, %Windir%\System, %Temp%, %AppData%, %AppData%\Microsoft or %System%\drivers |
| X | Clipsvc | clipsv.exe | Added by the BLACKHOLE.F BACKDOOR! |
| N | ClipTrak | ClipTrak.exe | ClipTrak - clipboard extender |
| N | ClipTrakker | ClipTrakker.exe | Cliptrakker - clipboard extender |
| N | CLIStart | CLIStart.exe | Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs |
