| Status | Autorun name | Aufruf | Beschreibung |
| X | Z | zmon.exe | Added by the DELBOT-AO WORM! |
| U | z-WrDialer | WrDialer.exe | WinPoet DSL dialer |
| N | Z_acamucli wizard | csecwiz.exe | Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once, after the software has been installed and the notebook rebooted for the first time. If the wizard isn't completed a shortcut is available via the Start menu until it is |
| X | Z_Start | [random filename] | ZenoSearch adware variant |
| X | ZaCker | [filename].PIF | Added by the HOLAR.A WORM! |
| X | Zacker | Zacker.exe | Added by the GEMEL WORM! |
| X | ZagrebLand | [trojan filename] | Added by the RENOS-EH TROJAN! |
| X | zango | zango.exe | 180solutions adware |
| X | Zango SiteFinder | ZangoSiteFinder.exe | ZangoSearch adware variant |
| X | Zango TvTimes | ZANGOT~1.EXE | ZangoSearch adware |
| X | ZangoOE | OEAddOn.exe | Zango Search Assistant adware |
| X | ZangoSA | ZangoSA.exe | Zango Search Assistant adware |
| X | zanu | zanu.exe | ZangoSearch adware |
| Y | Zapro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| U | Zboard | Zboard.exe | Ideazon Zboard gaming software |
| U | ZboardTray | ZboardTray.exe | Ideazon Zboard gaming keyboard driver - allows you to customise keyboard functions |
| U | zBrowser Launcher | iTouch.exe | Loads the iTouch configuration settings for supported Logitech keyboards. It's required if your keyboard has shortcut buttons and you use them or have reconfigured them for different functions. It's also required if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen display indications for these |
| U | zBrowser Launcher | Commandr.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn't have them |
| ? | zcb | zcb.exe | ?? |
| U | Zcfgsvc | ZCfgSvc.exe | Zero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled |
| U | ZCfgSvc.exe | ZCfgSvc.exe | Zero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled |
| X | zcproo | qssstiej.exe | Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise |
| X | zcseacrt | [random filename] | Added by a variant of the SLAPER TROJAN! |
| ? | ZDConfig | ZDConfig.exe | Related to various brands of Wireless USB LAN Adapter - what does it do and is it required? |
| N | zdnet | kontiki.exe | Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops |
| N | Zebus | msdc32.exe | Runs a HTML tutorial on the Zebus web-site |
| X | Zekio Startups | znksvc32.exe | Added by the AGOBOT-AGI WORM! |
| X | Zekio Startups | condll.exe | Added by the AGOBOT-AGD WORM! |
| X | Zen.A | [path to trojan] | Added by the ZOOMEN-A TROJAN! |
| X | Zenet | rundll32 CNBabe.dll, DllStartup | CommonName Toolbar spyware. To uninstall see here |
| X | Zeno | [random filename] | ZenoSearch adware variant |
| X | Zeno | nwinrqez.exe | Added by the QEXREZ family of TROJANS! |
| Y | ZENRC | zenrc32.exe | The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management".Leave well alone |
| Y | ZENRC Tray Icon | zentray.exe | Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management".Best left alone |
| Y | ZENworks Imaging Service | ZISWin.exe | Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management" |
| U | Zero PoPup Killer XP | zpk_xp.exe | Intelligent anti-pop-up software product by Ax-Soft |
| U | ZeroAds | 0 | ZeroAds - culls ads, cookies and pop-ups. Tells ZeroAds not to run at startup - needed to start it manually |
| U | ZeroAds | LAS0Ads.exe | ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work |
| U | ZeroAds | Zeroads.exe | ZeroAds - a popular Internet accelerator and anti-adware application |
| U | ZeroSpyware | ZeroSpyware.exe | FBM Software ZeroSpyware 2004 spyware detector and remover |
| X | zervpack2 | update2.exe | Added by the SDBOT.WD WORM! |
| X | zerzvpack2 | uzpdate2.exe | Added by the RBOT-KA WORM! |
| X | zggjmyd | zggjmyd.exe | Added by the AFCORE.O BACKDOOR! |
| ? | ZGNUBI | ZGNUBI.exe | ?? |
| X | Zi5 | AntiVirus Update.exe | Added by the ERKEZ.G WORM! |
| U | ZIBMACC | rundll.exe ZIBMACC.INF | ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435) |
| X | Zinaps7 | Zinaps7.exe | Zinaps Anti-Spyware 2008 rogue security software - not recommended, removal instructions here |
| X | ZincgrubInc | Lsass.exe | Added by the VOUMIT-A WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Root%\mirc32 |
| U | ZingSpooler | ZingSpooler.exe | Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums |
| N | Zinio DLM | ZDLM.EXE | Zinio - used to read magazines in digital rather than paper format |
| N | Zinio DLM | ZinioDeliveryManager.exe | Related to Zinio used to read magazines in digital rather than paper format |
| X | Zip Driver Loader | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | Zip Driver Loader | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| U | ZipDisk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | ZipGenius Clean | zg.exe | ZipGenius file compression utility |
| X | ziphelp | ziphelp.exe | CoolWebSearch parasite variant |
| N | ZipMagic | zm32.exe | Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first |
| Y | zlclient | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| U | ZLH | ZLH.EXE | System Tray icon for Norman Antivirus |
| U | ZMatrix | matrix.exe | ZMatrix - "an animated desktop background which displays streaming characters in a style similar to what was used in the movie 'The Matrix'" |
| X | ZNN | znnsvc.exe | Added by the SDBOT-DAA WORM! |
| X | Zolero Translator | ZoleroTranslator.exe | Zolero Translator - added by Clickspring, the makers of Purityscan, products and are bundled with the Outer Info Network Client, or OIN client |
| X | Zonavirus | 0 | Added by the KITRO.D (or ARGEN.A) WORM! |
| X | Zone Alarm | vsmon.exe | Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector |
| X | zone alarm security | zlclint.exe | Added by the NIRBOT WORM! |
| Y | Zone Labs Client | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| X | Zone Labs Client Ex | svchost.exe | Added by the NETSKY.F WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Zone system | szchost.exe | Added by the MULTIDR-AC TROJAN! |
| Y | ZoneAlarm | zonealarm.exe | Firewall program from Zonelabs - free version |
| X | zonealarm | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! The only exception is if you have an older version of the ZoneAlarm firewall running |
| X | Zonealarm | Removeme.exe | Added by the FORBOT-BG WORM! |
| X | Zonealarm | iexplore.exe | Added by the FORBOT-CP WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System% |
| Y | ZoneAlarm Plus | zaplus.exe | Firewall program from Zonelabs - paid for version |
| Y | ZoneAlarm Pro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| X | Zonesoft Cleaner | rnsys.exe | Added by a variant of the SDBOT WORM! |
| U | ZoneUpdate | csrss.exe | WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "ComRoot" subfolder |
| U | Zoom | zoom.exe | Zoom - speeds up Windows startup and manages startup applications |
| U | Zooming | ZoomingHook.exe | Toshiba Zooming Utility - found on Toshiba laptops and Tablet PCs. It allows users to zoom in (or magnify) text |
| U | ZoomingHook | ZoomingHook.exe | Toshiba Zooming Utility - found on Toshiba laptops and Tablet PCs. It allows users to zoom in (or magnify) text |
| ? | zOSD | HotKey.exe | Located in a LG Software\LG OSD directory. Related to function keys on and LG Electronics system? |
| Y | ZPLED | ZPKBDLED.exe | Driver for the Advent ADE-AD2 Wireless Keyboard |
| X | ZPoint | winmuse.exe | Added by the DLOADR-VJ TROJAN! |
| Y | ZPOINT32 | ZPOINT32.exe | USB graphics/writing tablet driver |
| X | zSearch | Zstb.exe | TotalVelocity zSearch parasite |
| X | zSecurity Service | szsvc.exe | Added by the SDBOT-DAB WORM! |
| X | zsms | smss.exe | Added by the BANCOS-CK TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | zsmscc | rundll32.exe zsmscc071001.dll mymain | Added by the GENETIK.KQ TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "zsmscc071001.dll" file is found in %System% |
| X | zsmscc | rundll32.exe mycc071208.dll mymain | Added by the AGENT.FZK TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "mycc071208.dll" file is found in %System% |
| X | zsmsgs | iservice.exe | Added by the BANCOS-BU TROJAN! |
| X | zsmss | smss.exe | Added by the BANCOS-DD TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| U | zSPGuard | Spguard.exe | "StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'." |
| U | ZSScheduler | zsscheduler.dll | ZeroSpyware from FBM Software |
| N | ZSSnp211 | ZSSnp211.exe | Vmicro webcam USB utility - allows the webcam to initiate data transfer to a program. Create a shortcut and start it manually when needed |
| X | ZStart | [various filenames] | VX2.Transponder parasite updater/installer related |
| X | Zstart | [random filename] | ZenoSearch adware variant |
| X | zt | rundll32.exe | Added by the LINEAG-ABA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Intel |
| X | ZtgServerSwitch | server.vbs | ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware |
| N | Zune Launcher | ZuneLauncher.exe | Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media, rip and burn CDs/DVDs, create playlists, sync your player to your computer, etc |
| N | Zune® | ZuneLauncher.exe | Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media, rip and burn CDs/DVDs, create playlists, sync your player to your computer, etc |
| N | ZuneLauncher | ZuneLauncher.exe | Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media, rip and burn CDs/DVDs, create playlists, sync your player to your computer, etc |
