| Status | Autorun name | Aufruf | Beschreibung |
| N | WEATHER | WEATHER.EXE | Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs |
| U | Weather Forecaster (animated) | WEATHE~1.EXE | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "WeatherAni.exe" is shown as "WEATHE~1.EXE" |
| U | Weather Forecaster (animated) | WeatherAni.exe | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits |
| U | Weather Pulse | weatherpulse.exe | Weather Pulse from Tropic Designs. "Display popular Satellite images and video from around the globe, share images with your friends and family, stay updated on current and expected weather conditions, it's just plain fun!" |
| N | WeatherCast | Weather.exe | Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight |
| X | WeatherDPA | Weather.exe | Added by the following adware - Hotbar, Zango Search Assistant, Seekmo Search Assistant and Spam Blocker Utility |
| N | WeatherEye | WeatherEye.exe | WeatherEye - desktop weather from TheWeatherNetwork |
| X | WeatherOnTray | HbtWeatherOnTray.exe | Hotbar adware |
| X | WeatherOnTray | WeatherOnTray.exe | Hotbar adware |
| X | WeatherOnTray | SbWeatherOnTray.exe | Spam Blocker Utility adware by the people who provide the Hotbar adware |
| N | Weatherscope | Weatherscope.exe | WeatherScope - "displays your current local temperature in the system tray of your computer (near the clock) whenever you are online!" Not recommended as it bundles GAIN adware. You can get the adware free version for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
| X | WeatherStudio Desktop | WeatherStudio Desktop.exe | WeatherStudio adware |
| N | WeatherWatcher | ww.exe | WeatherWatcher - weather reporting in the System Tray |
| X | web | ******.exe [* = random char] | Added by a variant of the EASTO.A TROJAN! |
| X | WEB DRIVERS FOR WIN32 | phqgh.exe | Added by a variant of the RBOT WORM! |
| X | Web Offer | ezPopStub.exe | eZula adware |
| X | Web Offer | ezStub.exe | eZula adware |
| X | Web Offer | EZSTUB22.EXE | eZula adware |
| X | Web Offer | vl_ezstub.exe | eZula adware |
| ? | Web Search | ?? | ?? |
| X | Web Service | [random filename].exe | Added by the ADMINCASH TROJAN! |
| X | Web Service | sm.exe | Added by the BUBE-F VIRUS! |
| X | Web Service | MSXMIDI.EXE | CoolWebSearch parasite variant, detected by Kaspersky as the SMALL.CW TROJAN! |
| X | Web-cameinst | [path to trojan] | Added by the RANCK-BP TROJAN! |
| U | Web2Pop | Web2Pop.exe | Web2Pop allows you to retrieve your web-based accounts messages to read them in your favorite e-mail client |
| Y | web3trap | web3trap.exe | PC-Cillin 2000 anti-virus software → ActiveX filter. Guards against malicious ActiveX programs, etc |
| X | webalize | webalize.exe | Searchcentrix hijacker |
| N | WebArmyKnife | WAK.exe | Web Army Knife - a suite of web site developer's tools |
| X | webassist | webassist.exe | Adware popup generator |
| X | WebBuying | webbuying.exe | WebBuying adware |
| N | WebCallDirect | WebCallDirect.exe | WebCallDirect - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| X | webcam | webcam.exe | Added by the MONAD-A TROJAN! Note - this malware actually changes the default value data of the Registry Run and RunServices keys in order to force Windows to launch it at boot. Name field may be empty |
| ? | Webcam Go Sti Service Application | wbcgosvc.exe | Control software for the portable Creative Webcam Go digital camera/PC web cam. What does it do and is it required? |
| N | WebcamRT.exe | WEBCAMRT.exe | For Logitech Web Cams. Not required - camera works fine without it |
| X | Webcelerator | webcel.exe | Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here |
| X | WebCheck | WebCheck.pif | Added by the CONE.C or CONE.F WORMS! |
| X | WebCpr0 | WebCpr0.exe | WebRebates adware |
| X | Webdav.exe | webdav.exe | IRC DDoS bot which gives the hacker full control over your system |
| N | WebDrive | webdrive.exe | System Tray access to WebDrive from South River Technologies, Inc - an FTP client that also "allows you to open and edit server-based files without the additional step of downloading the file" |
| N | WebDriveTray | webdrive.exe | System Tray access to WebDrive from South River Technologies, Inc - an FTP client that also "allows you to open and edit server-based files without the additional step of downloading the file" |
| U | WebExRemoteAccessAgent | raagtapp.exe | Related to Web Meetings from WebEx Communications, Inc. Share and present online with anyone, anywhere |
| X | WebHancer Agent | whagent.exe | System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here |
| X | webHancer Survey Companion | whSurvey.exe | WebHancer trackware - traffic measurement service that uses a client agent that is stealth installed on user machines, gathering detailed data about sites visited, their performance and, most important, what the user actually does while there |
| X | WebInstall | WebInstall.exe | ClipGenie adware downloader |
| X | WebInstall2 | WebInstall.exe | ClipGenie adware downloader |
| N | WebKey | WebKey.exe | WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet |
| N | WebLink | WebLink.exe | Softex is a "cost-effective way to provide software updates, technical support or new product information to specific end-users - it can silently provide end-users with software updates, technical support and new product information customized to their specific needs through a persistent link" |
| X | weboqacuc | firitirol.exe | Added by the SDBOT-UC WORM! |
| N | WebOutfitterTray | sttray.exe | Intel WebOutfitter service System Tray icon |
| N | Webposition Gold 2 | wpsche~1.exe | Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines |
| X | webrebates | webrebates.exe | WebRebates adware |
| X | WebRebates0 | WebRebates0.exe | WebRebates adware |
| Y | Webroot Desktop Firewall | WDF.exe | Webroot Desktop Firewall |
| X | WebRun | [random filename] | Added by the ADWARELOADER TROJAN! |
| U | websaverlive | websaverlive.exe | WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle |
| X | WebSavingsfromEbates | WebSavingsfromEbatesrun.exe | Ebates "Web Savings" adware - aka TopMoxie adware |
| X | WebSavingsFromEbates | javaw [path to code] | Ebates "Web Savings" adware - aka TopMoxie adware. "javaw.exe" is an Oracle (was Sun Microsystems) file located in %ProgramFiles%\Java used to view Java applications. The associated "Web Savings" files are located in %ProgramFiles%\WebSavingsFromEbates |
| X | WebSavingsFromEbates0 | WebSavingsFromEbates0.exe | Ebates "Web Savings" adware - aka TopMoxie adware |
| U | WebScan | DEFSCANGUI.EXE | Web scanner function of eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | webscan | stopsignav.exe | Web scanner function of eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation. Still detected as WREN.D by Trend |
| U | WebScan | DEFSCA~1.EXE | Web scanner function of eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| Y | WebScanX | WebScanX.exe | From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc |
| X | websearch | wjview [path to code] | Ebates "Web Savings" adware - aka TopMoxie adware. "wjview.exe" is an MS file located in %System% and is used to view window-based Java applications from the command line. The associated "Web Savings" files are located in %ProgramFiles%\websearch |
| N | WebSecureAlert | WebSecureAlert.exe | WebSecureAlert - "helps to protect your browser security by monitoring for unauthorized tampering with Internet Explorer's security settings, and can help to protect your privacy by deleting your web surfing history on a regular basis". Not recommended as it bundles GAIN adware. You can get the adware free version for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
| ? | WebServer | VBI_SE~1.EXE | Related to a Pinnacle sound card. What does it do and is it needed? |
| U | Webshots | Webshots Tray.exe | Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web |
| U | Webshots | websho~1.exe | Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web |
| U | Webshots | Launcher.exe | Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web |
| U | Webshots | WebshotsTray.exe | Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web |
| X | Website Administrator Info | webadmin.exe | Added by the FORBOT-FY WORM! |
| X | WebSpecials | rundll32 [path] webspec.dll | WebSpecials spyware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | WebSpyShield | WebSpyShield.exe | WebSpyShield rogue security software - not recommended |
| X | WebSUpdater | wupda.exe | Added by the STARTPAGE.C TROJAN! |
| X | Websx | Int*****.exe | Adult content dialler - where ***** are random |
| Y | WebTrap.exe | WebTrap.exe | Part of Trend Micro web-security products - PC-cillin 2000 and Virus Buster 2001. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating |
| Y | WebTrapNT.exe | WebTrapNT.exe | Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating |
| X | WebVaccineMain | WebVaccine.exe | WebVaccine rogue security software - not recommended, removal instructions here |
| U | WebWasher | wwasher.exe | Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs |
| X | WegVonViren | pgs.exe | WegVonViren, Swedish rogue security software - not recommended. A member of the AVSystemCare family |
| X | WeirdOnTheWeb | WeirdOnTheWeb.exe | WeirdOnTheWeb adware |
| N | Welcome | Welcome.exe | Launches the "Welcome to Windows" tutorial on a Windows 98 boot up |
| X | Welcome | winconfig.exe | Added by the GIP.113.B1 TROJAN! |
| X | Welcome | CONFIG.EXE | Added by the PSWGIP.B TROJAN! |
| ? | WEPstat | Wepstat.exe | Cisco Aironet 340 Series PC Card driver. If it can be started manually it shouldn't be required if you don't use the PC card facility regularily - hence the status could be "U". Can anybody confirm this? |
| X | wersds | doriot.exe | Added by the JECT.C TROJAN! |
| X | wersds.exe | doriot.exe | Added by the BAGLEDI-A TROJAN! |
| X | wescmv | [random filename] | Added by a variant of the SLAPER TROJAN! |
| X | wesumu | wiustv.exe | Added by the QQPASS-L TROJAN! |
| N | WetSock | wetsock.exe | RoboMagic Wetsock - weather reporting in the System Tray |
| N | wextract_cleanup0 | advpack.dll, DelNodeRunDLL32 [path] [filename].TMP | Wextract Cleanup0 is valid and legal software included or sold to help clean up temporary or cab files created by the installer software for a wide variety of software. It should disapear after a restart of the system. If not fix it |
| U | WF2K | WF2K.EXE | System Tray application that starts up the Winfox utility for a Leadtek Winfast graphics card to restore settings. Can be started manually via Start → Control Panel → Display. Only needed if you wish to run things like the hardware monitor or overclock your card |
| N | WFGStartup | WFGStartup.exe | WorldFlash news ticker which "proactively delivers your news and information about the latest global events" |
| N | WFGStartup | WFGStartupU.exe | WorldFlash news ticker which "proactively delivers your news and information about the latest global events" |
| U | wfips | iphider.exe | ICQ (messaging/chat program) anti-bomb software. "WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed." For more information about ICQ bombs see here |
| N | WFXCTL32.EXE | WFXCTL32.EXE | From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs |
| U | wfxload | wfxload.exe | WindowFX from Stardock Corporation - "a special effects program for Windows that allows users to add a variety of opening and closing, transition and other visual effects to the user interface" such as shadows, transparency and menu animations. Required for the selected special effects to work. Also part of the Object Desktop suite |
| Y | wfxsnt40 | wfxsnt40.exe | WinFax 10.0 and maybe earlier versions. Used to initiate the WinFax port to enable printing to the WinFax printer (send a fax) from any application |
| ? | WFXSwtch | WFXSWTCH.exe | Related to WinFax. What does it do and is it required? |
| U | WG111v2 Smart Wizard Wireless Setting | RtlWake.exe | Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that "provides wireless access to your desktop or notebook PC through the computer's USB port" |
| Y | WG511WLU | WG511WLU.exe | Netgear configuration programme for the 54g wireless lan card - required to monitor and manage the lan card |
