| Status | Autorun name | Aufruf | Beschreibung |
| U | Logitech Hardware Abstraction Layer | KHALMNPR.EXE | Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). When using SetPoint to adjust the mouse sensitivity it is maintained separately from the Windows setting, but is combined with the Windows setting to determine the final sensitivity. For this reason, this entry sets the Windows setting to 0 so it doesn't affect the one you set in SetPoint and then unloads. A separate instance of KHALMNPR.EXE loads via the main Setpoint.exe program to control communication between your radio/bluetooth wireless mouse/keyboard and SetPoint |
| U | Logitech Harmony Remote | HarmonyClient.exe | Logitech Harmony advanced universal remote |
| U | Logitech Harmony Remote Software 7 | HARMON~1.EXE | Logitech Harmony Advanced Universal Remote controller software |
| U | Logitech ImageStudio | ISStart.exe | Installed with Logitech's ImageStudio webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos |
| U | Logitech ImageStudio | LogiTray.exe | System Tray access to ImageStudio, Camera Settings and other features for Logitech's ImageStudio webcam software. Create your own shortcut and run it manually when required unless you use it all the time |
| U | Logitech ImageStudio | LVCOMS.EXE | Entry added when you install Logitech ImageStudio webcam software. It allows the camera to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| U | Logitech QuickCam | CameraAssistant.exe | Entry added when you install versions of the Logitech QuickCam webcam software and used to configure and tweak your webcam settings. Includes support for the Quick Assistant - which launches when a video application (such as video conferencing in an instant messaging client) accesses to camera so you can quickly fine tune face tracking and zoom, for example. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| U | Logitech QuickCam | ISStart.exe | Installed with older versions of Logitech's QuickCam webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos |
| U | Logitech QuickCam | LogiTray.exe | System Tray access to My Logitech Pictures, Camera Settings and other features for older versions of Logitech's QuickCam webcam software. Create your own shortcut and run it manually when required unless you use it all the time |
| U | Logitech QuickCam | LVCOMS.EXE | Entry added when you install older versions of Logitech QuickCam webcam software. It allows the camera to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| U | Logitech QuickCam | LVComSX.exe | Entry added when you install versions of the Logitech QuickCam webcam software - allows the full camera features (such as face tracking) to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| N | Logitech QuickCam | ManifestEngine.exe | Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry |
| U | Logitech SetPoint | KEM.exe | Keyboard and mouse drivers and utilities for Logitech's latest products - supersedes iTouch and MouseWare on their older products. Required if you use special features such as multimedia keys |
| U | Logitech SetPoint | KHALMNPR.EXE | Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). When using SetPoint to adjust the mouse sensitivity it is maintained separately from the Windows setting, but is combined with the Windows setting to determine the final sensitivity. For this reason, this entry sets the Windows setting to 0 so it doesn't affect the one you set in SetPoint and then unloads. A separate instance of KHALMNPR.EXE loads via the main Setpoint.exe program to control communication between your radio/bluetooth wireless mouse/keyboard and SetPoint |
| U | Logitech SetPoint | Setpoint.exe | Logitech SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). Required if you want to use the advanced features or modify the default settings of these devices and located in %ProgramFiles%\Logitech\Setpoint |
| U | Logitech Utility | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | Logitech Vid | Vid.exe | "Logitech Vid™ is the fast, free and easy way to make a video call." Available as part of the Logitech Webcam Software or as a separate download. Run it manually when required unless you use it all the time |
| N | Logitech Wakeup | lgwakeup.exe | Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images |
| X | Logitech Wireless | logitechwls.exe | Added by the MYTOB-BS WORM! |
| U | LogitechCameraAssistant | CameraAssistant.exe | Entry added when you install versions of the Logitech QuickCam webcam software and used to configure and tweak your webcam settings. Includes support for the Quick Assistant - which launches when a video application (such as video conferencing in an instant messaging client) accesses to camera so you can quickly fine tune face tracking and zoom, for example. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| ? | LogitechCameraService(E) | ElkCtrl.exe | Entry added when you install versions of the Logitech QuickCam webcam software. It's exact purpose is unknown at the present time |
| Y | LogitechCommunicationsManager | Communications_Helper.exe | Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also, if it's disabled the camera will not work - at least not in the QuickCapture mode |
| N | LogitechDesktopMessenger | LogitechDesktopMessenger.exe | Installed with the software for Logitech products. Automatically checks for software upgrades and new products, services and special offers from Logitech |
| U | LogitechGalleryRepair | ISStart.exe | Installed with Logitech's ImageStudio webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos |
| U | LogitechImageStudioTray | LogiTray.exe | System Tray access to ImageStudio, Camera Settings and other features for Logitech's ImageStudio webcam software. Create your own shortcut and run it manually when required unless you use it all the time |
| N | LogitechQuickCamRibbon | QuickCam10.exe | Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time |
| N | LogitechQuickCamRibbon | LWS.exe | Loads versions of the Logitech Webcam Software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time |
| N | LogitechQuickCamRibbon | Quickcam.exe | Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time |
| Y | LogitechRegisterVideoApplications | InstallHelper.exe | Entry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software |
| X | Logitechs | Logitechs.exe | Added by the SDBOT.BWE WORM! |
| N | LogitechSoftwareUpdate | ManifestEngine.exe | Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry |
| U | LogitechVideo[inspector] | InstallHelper.exe | Entry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications |
| U | LogitechVideoRepair | ISStart.exe | Installed with Logitech's QuickSmart and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos |
| U | LogitechVideoTray | LogiTray.exe | System Tray access to My Logitech Pictures, Camera Settings and other features for Logitech's QuickSmart and QuickCam (older versions) webcam software. Create your own shortcut and run it manually when required unless you use it all the time |
| U | LogiTray | LogiTray.exe | System Tray access to My Logitech Pictures, Camera Settings and other features for Logitech's QuickSmart, ImageStudio and QuickCam (older versions) webcam software. Create your own shortcut and run it manually when required unless you use it all the time |
| X | Logman | logman.exe /waitservice | Added by the HORST.Q TROJAN! Note - this is not the legitimate logman.exe which is always located in %System%. This one is located in either %Windir%, %Windir%\System, %Temp%, %AppData%, %AppData%\Microsoft or %System%\drivers |
| U | LogMeIn GUI | LogMeInSystray.exe | RemotelyAnywhere is a remote administration and remote control solution for Windows. It allows access to the host computer via the network (the LAN, an intranet or the Internet) - and on the client side all you need is a web browser, a terminal emulator or a WAP-enabled phone |
| U | LogMeIn GUI | ragui.exe | LogMeIn remote access and management software which allows you to connect to a computer or device at any time, from anywhere there is an Internet connection and configure, monitor, diagnose and support multiple remote computers |
| X | Logo | [path to trojan] | Added by the DLOADER-RH TROJAN! |
| Y | Logoff | SCTUINotify.exe | Part of Windows SteadyState, which is designed to make life easier for people who set up and maintain shared computers - enabling the system administrator to prevent users from making changes to the system configuration, windows desktop, restricting program access, etc. It's intended for shared user environments such as internet cafés, libraries and schools but can be used in any environment. This entry displays the timeout messages on the restricted computer/account - which warns users how long they have until automatic log-off when they log-in and when there are only 2 minutes left |
| U | Logon Loader | LogonLoader.exe | Logon Loader - customize boot & login screens |
| U | Logon Loader Random | LogonLoader.exe | Logon Loader - customize boot & login screens |
| X | Logon.exe | logon.exe | Added by the ZINS.A BACKDOOR! |
| X | Logon | CSRSS.EXE | Added by the BRONTOK-BH WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS |
| X | LogonAdministrator | imoet.exe | Added by the RAHIWI.A WORM! |
| X | LogonAdministrator | CSRSS.EXE | Added by the KORRON.B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS |
| U | LogOnHook | LogOnHook.exe | Part of McAfee Data Backup (now Online Backup) - which "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup |
| X | Logonrepclient1 | CSRSS.EXE | Added by the BRONTOK-BT WORM and variants! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS |
| X | Logonsara | csrss.exe | Added by the BRONTOK-BS WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS |
| U | LogonStudio | logonstudio.exe | Part of an older version of LogonStudio from Stardock Corporation - a free program that allows users to change their XP logon screens. Changes the logon/logoff screens to random one each time a user logs on or off and then exits. Still currently available to download from the downloads page under the "LogonStudio For XP Download" heading |
| X | logonUiInit | Rundll32.exe rgtndz.dll | Identified as a variant of the Trojan-Clicker.Win32.Agent.bqy malware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "rgtndz.dll" file is found in %System% |
| X | LogoVista | Vistalogo[7.0.jpg].exe | Added by the AUTORUN-IG WORM! |
| X | LogService | wincalc.exe | Added by the PAPROXY TROJAN! |
| X | LogService | lsass.exe | Added by the BDOOR-IU BACKDOOR! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | LogService | lsrss.exe | Added by the PAPROXY-D TROJAN! |
| U | LogService | LogService.exe | SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
| U | LogWatch | logwat95.exe | Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll. Not required if you already have a newer version or the patch has been applied |
| X | lololol | _hideme_imhiddenlololol.exe | Added by the HIDEME-A TROJAN! |
| X | longos | WIWT.EXE | Added by the BANKER-CD TROJAN! |
| Y | Look 'n' Stop | looknstop.exe | Look 'n' Stop personal firewall |
| N | LookNMeet | Agent.exe | LooknMeet dating service |
| X | Lookup_Sys | lookupsys.exe | P04n trojan |
| X | loopsos | xiaosos.exe | Added by the GENOME.ANTS TROJAN! |
| X | LosMejoresMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | LotsOfGames | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | LotsOfJokes | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| N | Lotus Organizer EasyClip | easyclip.exe | Part of Lotus Organizer. "The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start → Programs |
| N | Lotus QuickStart | ltsstart.exe | Quickstart for Lotus SmartSuite which enables any program in the suite to load faster |
| N | Lotus SmartCenter | smartctr.exe | Lotus SmartSuite central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start → Programs |
| U | Lotus SuiteStart | suitest.exe | Puts the individual Lotus SmartSuite components in the System Tray when you start Windows. All individual components available via Start → Programs |
| X | LotusHlp | LotusHlp.exe | Added by the WINKO.AO WORM! |
| X | LOVE | LOVE.EXE | Added by the VB-ZQ TROJAN! |
| X | LoveHebeA | vistaAA.exe | Added by the LOZAVITA TROJAN! |
| N | LowRateVoip | LowRateVoip.exe | LowRateVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| X | LowRiskFileTypes | sysguard.exe | Added by the FAKEAV-UY TROJAN! |
| X | LowVersionSupport | [filename] | Added by the LASTRAS TROJAN! |
| X | LP | LP.exe | Optserve adware |
| X | lpc | rundll32.exe [path] kwbn45.dll | Added by the BANKSUN TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "kwbn45.dll" file is located in %AppData%\Sun |
| X | lpc | rundll32.exe [path] zxvd32.dll | Added by the BANKSUN TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "zxvd32.dll" file is located in %AppData%\Sun |
| X | lphcjgvj0enf1 | lphcjgvj0enf1.exe | Added by the MDROP-BUL TROJAN! |
| U | LPMailChecker | LPMLCHK.exe | Part of Lenovo's ThinkVantage® Productivity Center on their ThinkPad notebooks or ThinkCentre desktops. Checks for incoming e-mail and blinks the ThinkVantage button LED |
| U | LPManager | LPMGR.exe | Part of Lenovo's (was IBM) ThinkVantage Productivity Center - "guides you to a host of information and tools to help you set up, understand, maintain, and enhance your ThinkPad® notebook or ThinkCentre® desktop" |
| X | Lpr | Lpr123.exe | Added by the REMPSTEAL password stealer TROJAN! |
| X | Lpr123 | Lpr123.exe | Added by the REMPSTEAL password stealer TROJAN! |
| U | LPS | Lps.exe | Local Port Scanner - "With LPS you're able to check your computer for open or listening ports" |
| U | LPtask | lptask.exe | Program Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted |
| X | LRBZ Utility 32 | lrbz32.exe | Added by the AGOBOT-JQ WORM! |
| N | LS120 Superdisk | ?? | Supposed to accelerate transfer rate on LS-120, contributes to system lockups |
| X | LSA | wfdmgr.exe | Added by the MYTOB.C WORM! |
| X | LSA | lsa.exe | Added by the SDBOT-YV WORM! |
| X | LSA | msdn.exe | Added by an unidentified malware |
| X | LSA Service | LSASS.exe | Added by the AHKER.G WORM! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup! |
| X | lsa Services | lsa2srv.exe | Added by the TAME-C WORM! |
| X | LSA Shell (Export Version) | LSASS.exe | Added by the AHKER.K WORM and variants. Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | LSA Shellu | lsass.exe | Added by the AUTORUN-CW WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile% |
| X | LSAgent | lsass.exe | Added by the AUTORUN-APL WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | LsaManager | lsamgr.exe | Added by the BEAGLE.DR WORM! |
| X | lsas | lsas.exe | Added by the BIGFAIRY-C WORM! |
| X | LSAShell | lsass.exe | Added by the DAPROSY WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Lsass | woekd.exe | Added by an unidentified WORM or TROJAN! |
