| Statut | Nom de l'Autorun | Commande | Description |
| N | IsReminder | ISPopup.exe | Related to GuardWare iShield - this is the registration reminder for the trial version, so not required in startup |
| X | ISRHelper.exe | ISRHelper.exe | Instant Spyware Removal rogue security software - not recommended, removal instructions here |
| Y | ISS_Certtool | certtool.exe | Part of Client Security Software for IBM\Lenovo notebooks. If you have configured the software via the associated wizard this will need to be running if you want to mount password protected areas of the disk (created with SafeGuard PrivateDisk), use the password manager or file/folder encryption options |
| N | issch | issch.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| X | issearch.exe | issearch.exe | Added by the ZLOB-QF TROJAN! |
| X | issEnc32Svr | issEnc32.exe | Added by a variant of the RBOT WORM! |
| N | ISSI EZUpdate Service | issimsvc.exe | Part of IBM Global Services - used internally by IBM for automatic updating of software and Microsoft patching |
| U | ISStart | ISStart.exe | Installed with Logitech's QuickSmart, ImageStudio and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos |
| Y | ISSVC | ISSVC.exe | Common process for older versions of Symantec's Norton Internet Security and the now discontinued Norton Personal Firewall security products. The exact purpose is unknown at present but neither program can function properly if this process is disabled. Loads via a registry "RunServices" key in 98/Me and as a service in XP |
| X | IST Service | istsvc.exe | ISTBar adware |
| X | ist service uninstall | [random filename] | ISTBar adware related |
| X | istinstall zazzer.exe | istinstall zazzer.exe | Unidentified adware downloader/installer |
| Y | ISTray | pctsTray.exe | System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools |
| N | ISUSPM | ISUSPM.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| N | ISUSPM Startup | ISUSPM.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| N | ISUSScheduler | issch.exe | InstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis |
| Y | ISW.exe | ISW.exe | AT&T Internet Security Wizard tool installed when you choose to install their internet security suite - sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled |
| X | isxa | isxa.exe | Added by the SMALL-EIV TROJAN! |
| ? | ISXAgent | ISXAgent.exe | Related to Imprivata IT security products. What does it do and is it required? |
| N | iSysCleaner | iSysCleaner.exe | iSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user |
| X | isystem | isystem.exe | Added by the CHORUS-A TROJAN! Searchforfree browser hijacker |
| X | ItalU | italfds.exe | Added by a TROJAN - see here |
| X | iTbaMgqSlSQqG | iTbaMgqSlSQqG.exe | Added by the FAKEAV-DVN TROJAN! |
| U | Itk | Itk.exe | In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| U | itk.exe | itk.exe | Insert ToggleKey by Mike Lin. ITK sounds a tone whenever you press Insert |
| U | iTouch | iTouch.exe | Loads the iTouch configuration settings for supported Logitech keyboards. It's required if your keyboard has shortcut buttons and you use them or have reconfigured them for different functions. It's also required if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen display indications for these |
| N | ItsDeductiblePopUp | ItsDeductible.exe | ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip |
| ? | ITSecMng | ItSecMng.exe | Related to Bluetooth wireless support on Toshiba notebooks. What does it do and is it required? |
| X | ITUNES | itune.exe | Added by the RBOT-ZU WORM! |
| X | ITUNES | itunes.exe | Added by a variant of the RBOT WORM! Note - do not confuse with the legitimate Apple iTunes process with the same filename which is always located in %ProgramFiles%\iTunes. This one is located in %System% |
| X | Itunes | dials.exe | Detected by Kaspersky as the AGENT.MM TROJAN! |
| X | Itunes | itunes.exe | Added by the OSCABOT-L WORM! Note - do not confuse with the legitimate Apple iTunes process with the same filename which is always located in %ProgramFiles%\iTunes. This one is located in %Windir% |
| U | iTunes | iTunesHelper.exe | Installed with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times |
| U | iTunes Helper | iTunesHelper.exe | Installed with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times |
| X | iTunes Music | iTunesHelper32.exe | Added by the SDBOT.CHK WORM! |
| X | iTunesAgent | ita.exe | Added by the TACTSLAY.U TROJAN! |
| X | itunesff | itunesff.exe | Added by the EB adult premium dialer |
| U | iTunesHelper | iTunesHelper.exe | Installed with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times |
| U | itype | itype.exe | Microsoft IntelliType Pro utility (from version 5.5) - required to support the multimedia keys, programmed keys and key macros on Microsoft's range of keyboards. If this entry is disabled, any keys or key combinations that are changed by the user to perform functions other than default settings, defer back to their default settings and supported keys will not function in applications with advanced text services enabled |
| X | iudymosj | mrgviurtssd.exe | Added by the AGENT-OEM TROJAN! |
| N | Iusage | netdet.exe | Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up |
| X | iut75 | uzcx.exe | Added by the DLOADER-AXV TROJAN! |
| X | iv | iv.exe | Part of the Internet Antivirus and Internet Antivirus Pro rogue security software - not recommended, removal instructions here |
| X | ivHost | taskManager.exe | Added by a variant of the SPYBOT WORM! See here |
| X | ivHost | [6 random letters].exe | Added by a variant of the SPYBOT WORM! See examples here and here |
| N | IVPServiceMgr | ivpsvmgr.exe | Toshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as, whenever you are connected to the Internet, it will check for Windows updates and Toshiba updates |
| X | ivy.exe | ivy.exe | Added by the AGENT-ENZ TROJAN! |
| N | IW ControlCenter | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| U | IW_Drop_Icon | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| U | iwctrl | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| U | IWL | rundll32.exe [path] IWL.dll | IKL surveillance software. Uninstall this software unless you put it there yourself |
| X | ixplore | ixplore.exe | Added by the SDBOT-CY TROJAN! |
| X | ixplores | ixplores.exe | Added by the SDBOT-CE WORM! |
| X | ixproxy | [path to trojan] | Added by the XORPIX-A TROJAN! |
| X | ixsso | ixsso.exe | Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark" |
| X | iyelejiv | yujixit.exe | Added by the SDBOT.BJK WORM! |
| ? | IZE | N/A | ?? |
| N | j2 Tray Menu | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here |
| X | j6GgCXwtFM | control.exe [path] j6ggcxwtfm.cpl | Added by the SEFNIT.K TROJAN! The "j6ggcxwtfm.cpl" file is located in %ProgramFile%\anouicgfwkkv1v |
| X | JA Cfg Util v2 | jacfg2.exe | Added by the RBOT-AL WORM! |
| X | JA Config 32 | Awesome32.exe | Added by a variant of the SDBOT WORM! |
| U | Jammer | jammer.exe | Jammer by Agnitum - "Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web" |
| X | Jammer2nd | Jammer2nd.exe | Added by the NETSKY.Z WORM! |
| X | java | remote.cmd | Added by the BANKER-EHG TROJAN! |
| X | java | system.exe | Added by a variant of the IRCBOT BACKDOOR! |
| X | Java (VM) v6.9 | jav.bat | Added by the AGENT-GZK TROJAN! |
| X | Java applet | javaup.exe | Added by the SDBOT-ACF WORM! |
| X | Java Application | vssmf32.exe | Added by the SPIGOT BACKDOOR! |
| X | Java Auto Update | ujm.exe | Added by the SDBOT-ADH WORM! |
| X | Java Configuration Loader | spoolsvfix.exe | Added by the SDBOT.CA WORM! |
| X | Java developer Script Browse | jusched.exe | Added by the VB-ESK TROJAN! Note that this is not the legitimate Oracle (was Sun Microsystems) file (of the same name) which is usually located in %Program Files%\Java\version number\bin. This one is located in %Windir% |
| X | Java Express | sjehost.exe | Added by the SDBOT-DNJ WORM! |
| X | Java Runtime Environment | jbuild.exe | Added by the DELBOT-J WORM! |
| X | Java Runtime Value | runjava.exe | Added by the RBOT-DDJ WORM! |
| X | Java Runtimes | iexplore.exe | Added by the KILLAV.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This file is located in a %Windir%\Java\Java folder |
| X | Java Softe | Java32.com | Added by the RBOT.ECN WORM! |
| X | Java update | javaqs.exe | Added by the SWARLEY.A WORM! |
| X | Java Update | keeper.exe | Added by the AGENT-DIS TROJAN! |
| X | Java Update | svchost.exe.exe | Added by the AGENT-LBS TROJAN! |
| X | Java Update | hostwww.exe.exe | Added by the AGENT-MFH TROJAN! |
| X | Java Update Checker | JavaUpdate.jar | Added by the INCRAT HACKTOOL! |
| X | Java Update Manager | jutched.exe | Added by the VB.AJYQ TROJAN! |
| X | Java Update Manager | jstchde.exe | Added by the SMALL.AWBM TROJAN! |
| X | Java Update Manager | jusched.exe | Added by the FKFLDR-C MALWARE! Note that this is not the legitimate Oracle (was Sun Microsystems) file (of the same name) which is usually located in %Program Files%\Java\version number\bin. This one is located in %AppData%\HEX-5823-6893-6818 |
| X | Java Virtual Machine | javaw.exe | Added by a variant of the RBOT WORM! |
| X | Java VM v6.9.2 | jav.bat | Added by the DWNLDR-HLM TROJAN! |
| X | Java VM v6.91 | jav.bat | Added by the DWNLDR-HLL TROJAN! |
| N | Java(TM) Platform SE 6 | jusched.exe | Checks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now |
| N | Java(TM) Platform SE 6 U* | jusched.exe | Checks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now |
| N | Java(TM) Platform SE Auto Updater 2 0 | jusched.exe | Checks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now |
| X | Java**.exe [* = random char] | Java**.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| X | Java**32.exe [* = random char] | Java**32.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| X | java-plugin | javasctp.exe | Added by the VB.AMX TROJAN! |
| X | Java32 Configuration Loader | msnmesgr.exe | Added by a variant of the RBOT WORM! |
| X | JavaCore | JavaCore.exe | Added by the MATCASH TROJAN! |
| X | javadoc | javadoc.exe | Added by the AGENT.CE BACKDOOR! |
| X | Javascript | jscript.exe | Added by the DELBOT-AD WORM! |
| X | JavaScript Debugging Service | JsDbgMan.exe | Added by the DERDERO.E WORM! |
| X | JavaScriptMs | Mwsx.exe | Added by the BANCOS.CNH TROJAN! |
| X | JavaScriptMsxrs | Msxrs.exe | Added by the VB.BL WORM! |
