| Status | Autorun name | Aufruf | Beschreibung |
| N | IPInSightMonitor 01 | IPMon32.exe | IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. Included with services from BellSouth, Visual Networks and others. If you have more that one such service installed there may be two or more entries - i.e., IPInSightMonitor 02, etc |
| Y | IPinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| X | IPLog Security | iplogsec.exe | Added by the IRCBOT.GP BACKDOOR! |
| ? | iPlusAgent2 | iAgent2.exe | Related to iriver portable media products. What does it do and is it required? |
| X | ipmon.exe | ipmon.exe | Added by the RECERV or R3C.B TROJANS! |
| X | IpNetwork | ipnetwork.exe | Maxifiles adware |
| X | Ipnuker | Ipnuker.vbs | Added by the INKER.B WORM! |
| N | IPO3 | IP Operator 2005.exe | IP Operator 2005 - found on LG Electronics Notebook. The applet makes network connections easier to view and manage than does the standard Windows Network Connections tool. The WLAN module is easy to turn on or off with the press of a single button |
| X | Ipod Help | [9 random letters].exe | Added by a variant of the RBOT WORM! |
| X | iPOD USB Driver | IPODUSB.EXE | Added by a variant of the RBOT WORM! |
| X | iPod USB Service | iPODService.exe | Added by a variant of the RBOT WORM! Do not confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the %ProgramFiles%\iPod\bin folder and is implemented as a system service, thus not listed in Msconfig/Startup! |
| N | iPodder | iPodder.exe | iPodder (now known as Juice) - a free utility that "allows you to select and download audio files from anywhere on the Internet to your desktop". This entry is present if you choose the option to add it to the startup group during installation |
| U | iPodManager | iPodManager.exe | Apple iPod® management software for the iPod® player - updates, formating, restoring and other functions associated with the iPod® |
| ? | iPodWatcher | iPodWatcher.exe | Associated with Apple's iPod® player. Detects when the iPod® is connected? |
| U | ipoint | ipoint.exe | Microsoft IntelliPoint utility (from version 5.5) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported |
| X | IPOT Service Drivers | compaq.exe | Added by a variant of the FUROOTKIT TROJAN! |
| X | IPOT USB Service DRIVER | hpsebc087.exe | Added by the SDBOT-WA WORM! |
| X | IPOT USB Service DRV32 | hpsebc08.exe | Added by the SDBOT-WH WORM! |
| N | IPPDetect | IPP4Detect.exe | Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos" |
| X | ipreg | ipreg.exe | Added by the ZAGABAN-H TROJAN! |
| ? | iPrint LPT Redirector | nipplpte.exe | Related to Novell iPrint - "a printing solution that enables you to send documents to printers located throughout the Net." Is it required? |
| N | iPrint Tray | iprntctl.exe | Novell® iPrint - based on Novell Distributed Print Services - enables you to send documents to printers located throughout the Net |
| U | iProtectYou | ip.exe | iProtectYou - internet filtering/parental control and network monitoring software |
| X | iprun | iPY.exe | iProtectYou spyware |
| X | IPSEC Configuration | wsupdate.exe | Added by the AGOBOT-IQ WORM! |
| X | iPSec7 | ipsec7.exe | Added by the AGENT.AHVR TROJAN! |
| U | ipsecdialer | IPSECD~1.EXE | Cisco VPN Client - lets local users gain Administrator privileges on the operating system |
| U | ipsecdialer | ipsecdialer.exe | Cisco VPN Client - lets local users gain Administrator privileges on the operating system |
| Y | IPSecMon | IPSecMon.exe | Microsoft L2TP/IPSec VPN Client that loads via HKLM\RunServices on Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| X | IPSecMon | IPSecMon.exe | Added by the LAZAR.B TROJAN! Note - this is not the legitimate MS L2TP/IPSec file with the same name which is located in a %Program Files%\Microsoft IPSec VPN. This one is located in %ProgramFiles%\Common files\VPN Network |
| X | IPTable Configuration | Winipcfgs.exe | Added by a variant of the RBOT WORM! |
| N | iptray | iptray.exe | System Tray access to Intel Desktop Utilities - "provides you with the means to monitor system temperatures, voltages, fan speeds, and hard drive health; view detailed system information, and test your system hardware for common errors" |
| X | IPv6 Helper Driver | csass.exe | Added by the AGOBOT.TC WORM! |
| X | IPv6 STUN Service | netstun.exe | Added by a variant of the SDBOT WORM! |
| N | IPW | IPW.exe | Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone" |
| N | ipw | usbipw.exe | Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone" |
| X | ipwf | ipwf.exe | Added by the SCHOEBERL TROJAN! |
| X | IpWins | ipwins.exe | IPWins adware |
| X | ipxwshel | ipxwshel.exe | Added by the WAREZOV.DG WORM! |
| X | ipyjy | woniz.exe | Added by the SDBOT.BQD WORM! |
| ? | IQES.exe | iqes.exe | ?? |
| X | iqmanager.exe | iqmanager.exe | IQ-Manager ransomware copyright scanner - not recommended, removal instructions here |
| X | ir_ftp | ir_ftp.exe | Added by the IRFTP TROJAN! |
| X | ir_ftp | irwftp.exe | Added by the BANCOS.H TROJAN! |
| U | Ir41_32.ax | regsvr32.exe Ir41_32.ax | Intel® Indeo® video 4.4 Decompression Filter related. The "Ir41_32.ax" file is located in %System% |
| X | irassync | irasyncd.exe | IRASSync adware |
| X | IRBMe Sucks!! | IRBMe.exe | Added by the RANDEX-Y WORM! |
| X | irc session | sessionmgr.exe | Added by the SDBOT-ACE WORM! |
| Y | IREIKE | IreIKE.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| N | IridiumTimeWizard | iridium.exe | Iridium TimeWizard - a small program for finding out the time in different parts of the world |
| N | iRis Active Monitor | winmon32.exe | Iris Antivirus - discontinued, replace with good alternative |
| N | iRiS AntiVirus Active Monitor | WIMMUN32.exe | Iris Antivirus - discontinued, replace with good alternative |
| U | IRIS_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Samsung CLX-3160 Series multifunction laser printer |
| U | IRIS_XRX_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Xerox Phaser 6110MFP multifunction laser printer |
| ? | iRiver AutoDB | MLService.exe | Part of the iRiver AutoDB music management utility for some of their music players which appears to be based upon (or is a rebranded version of) MoodLogic - which has now been discontinued. some users claim it is worthless, prone to lock-ups, and slow as a turtle but what does it do and is it required? |
| N | iRiver Updater | Updater.exe | Updater for the iRiver AutoDB music management utility for some of their music players which appears to be based upon (or is a rebranded version of) MoodLogic |
| U | IrMon | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| ? | IRPMonitor | itcnmon.exe | ?? |
| X | IRQ Assigning Agent | IRQconf.exe | Added by the SDBOT-CSV WORM! |
| X | irssyncd | irssyncd.exe | SafeSurfing adware variant |
| X | Irwftp | [path to trojan] | Added by the BANCOS-AP TROJAN! |
| X | irwftp | iexplorer.exe | Added by the BANKER-AN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) |
| X | irwftp | ftpmon.exe | Added by the BANCBAN-BO TROJAN! |
| U | IrXfer | IrXfer.exe | Microsoft Infrared Transfer application |
| U | IS CfgWiz | cfgwiz.exe | Configuration wizard for older versions of Symantec's Norton Internet Security (and the now discontinued Norton Personal Firewall). On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton Internet Security is launched via the Start Menu |
| U | IS360tray | IS360tray.exe | System Tray access to and notifications for Security 360 anti-malware from Iobit - which has now been discontinued. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up |
| X | iSafeAV | iSafeAV.exe | iSafe AntiVirus rogue security software - not recommended, removal instructions here |
| X | isamini.exe | isamonitor.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details. The most popular for this example appears to be "Video ActiveX Object" |
| X | isamonitor.exe | isamonitor.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details |
| X | Isass | Isass.exe | Added by the FUTRO TROJAN! |
| X | isass.exe | isass.exe | Added by the SPY-VL TROJAN! |
| X | IsassRenascimento | Issas.exe | Added by the BANKER.GAX TROJAN! |
| U | ISBMgr.exe | ISBMgr.exe | Sony ISB Utility - supports the battery management on some Sony laptops |
| X | iscch | iscch.exe | Added by the LCPRANK-A WORM! |
| N | isdbdc | isdbdc.exe | For Compaq PC's. May install properties in dial-up networking when you register with an ISP |
| U | isDeleteMe | isDel.bat | Used by Norton Internet Security to remove certain files and directories on reboot when uninstalling their product |
| N | ISDN Monitor | Linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| U | ISDNwatch | IWatch.exe | FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks" |
| X | iSecurity applet | rundll32.exe iSecurity.cpl,SecurityMonitor | Added by the DLOADER.UZO TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | ish-b.exe | ish-b.exe | Added by the IRCBOT-ACZ TROJAN! |
| U | ISHelp | help.exe | ISpy is a security risk that logs keystrokes and captures screenshots. If you didn't install this yourself uninstall it |
| U | iShield | iShield.exe | "GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser" |
| X | ishost.exe | ishost.exe | Added by the DLOADR-XJ TROJAN! |
| Y | ISLP2STA | ISLP2STA.EXE | A process from Cisco Systems Inc associated with Windows Update for wireless NIC drivers |
| X | ISMModule | ISMModule.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMModule2 | ISMModule2.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMModule3 | ISMModule3.exe | Internet Speed Monitor C adware |
| X | ISMModule4 | ISMModule4.exe | Internet Speed Monitor A adware related |
| X | ISMModule6 | ISMModule6.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMModule7 | ISMModule7.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMModule8 | ISMModule8.exe | Internet Speed Monitor C adware related |
| X | ISMPack5 | ISMPack5.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMPack6 | ISMPack6.exe | Internet Speed Monitor C adware related - see example here |
| X | ISMPack7 | ISMPack7.exe | Internet Speed Monitor C adware |
| X | ISMPack8 | ISMPack8.exe | Internet Speed Monitor C adware related - see example here |
| Y | ISP.COM High Speed | slipgui.exe | User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server |
| X | ISPSERVICE | psycho.exe | Added by the IRCFLOOD-O TROJAN! |
| X | ISPSERVICE | wintmp.exe | Added by the IRCBOT.GP BACKDOOR! |
| U | iSpyNOW | ispynow.exe | iSpyNOW - remote monitoring and surveillance software |
| X | Israfel | Israfel.vbs | Added by the GAGGLE.D or GAGGLE.E WORMS! |
