Last update :- 9th October, 2003
3507
items listed
If you wish to reproduce or re-use the information provided here by all means do so but please respect the Copyright information at the base of this page and indicate to your visitors or the users of your software as to where you got the information.
If you are a regular visitor, click here to go straight to the SEARCH
If you were directed by another site straight to this page, please also have a look at the main startup page first at Startup Content. It contains very useful information, including how to identify these programs, how to disable them and the information I need to accept new entries to the list. Submissions can be made via E-mail or the Message Board.
This page presents a searchable, comprehensive list of the programs you may find that run when you switch on your PC as typically identified by MSCONFIG or the registry "Run" keys - and whether you need them.
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try AnswersThatWork
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" whereas WinXP lists it as "Poproxy"
There are viruses and other pests that can add any number of different entries to the startups. They make additional entries under the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\ Run and RunOnce keys, allowing them to run at startup:
(1) PE_BISTRO - adds XXXX = "C:\WINDOWS\XXXX.EXE" - where XXXX is
the randomly chosen filename of the dropped file
(2) MAGISTR.A - adds <Virus Name> = "<Path of
Virus>\<Virus Name>.EXE"
(3) BUGBEAR - adds <random string> = %system%\<random
filename>.EXE. %system% is a variable. The worm locates the System folder and
copies itself to that location. By default this is C:\Windows\System (Win9x/Me),
C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
(4) OPTIXPRO.11 - adds <Registry entry> = "<Path of
Virus>\<Filename>"
(5) Lop.com homepage hijacker - creates multiple and random
startup entries
(6) FreeScratchAndWin - creates multiple and random startup
entries as it includes LOP above
(7) nCase (or
n-Case) parasite - creates multiple and random startup entries
(8) LORAC - adds "<four random characters>" =
"%System%\abcdef.exe" - where abcdef is the volume number of the infected hard
drive
(9) MOSUCK - random name and filename
(10) DEBORMS.D - adds one of a number of valid Name/Startup Item
entries but points to the path of the worm file dropped
(11) GIBE.C - random name and filename
(12) SWEN.A - random name and filename
(13) ZOMBAM.B - random name and filename
Check SpywareInfo for information about these types of program. They have a very active forum and a list of programs that may remove them here
If you decide to disable a program and run it manually, and there isn't a shortcut or Start -> Programs entry available you can create your own shortcut.
Updates - recent changes to the entries in this list
Hit CTRL+refresh in your browser to make sure you get the latest version
o-----------------------------o
This search works with IE4+, NS4 and Mozilla/NS7+ but not NS6. Alternatively use your browsers search facility - Ctrl+F for IE users.
Key:
"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
| Name/Startup Item | Command | Comments | |
| ? | %cmpmixtitle% | %cmpmixstr% | Possibly related to C-Media Mixer Control panel? |
| U | $EnterNet | Enternet.exe | Connection manager for the EnterNet ISP. You can also use RASPPOE |
| X | @ | regedit -s ..\win.dll | Added as a result of the SEEKER.K VIRUS! |
| N | @Hoc Toolbar | AtHoc.exe | One-click activated browsing toolbar used by various web-sites. See here for more info |
| N | @loha | reminder.exe | Registration reminder for http://www.pcworld.com/downloads/file_description/0,fid,6581,00.asp E-mail utility |
| X | @tour_ww | @tour_ww[1].exe | Adult content dialler |
| U | !NoLoad | winrecon.exe | WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| X | _x-Finder | _x-Finder.exe | Disconnects and redials an ISP modem to an adult content site |
| X | (*)Run | win32API.exe | Homepage hijacker, see here (* = any digit) |
| X | (*)API Machine | winSOCKS.exe | Homepage hijacker, see here (* = any digit) |
| U | _winadm | winadm.exe | Parents Friend - "Log any activity and protect programs with a password. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC" |
| X | ,main drive Loader | wininfo.exe | Suspected malware as it appears in 3 different registry locations - see here |
| N | /l:eng | N/A | Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup |
| X | *JanisRuckenbrodII | janis.com | Added as a result of the POPS VIRUS! |
| X | *miqpazc | rundll32 miqpazc.dll, Init 1 | Added as a result of the AFCORE.Q VIRUS! |
| Y | *StateMgr | statemgr.exe | Windows default for System Restore. Do NOT disable! |
| X | {2CF0B992-5EEB-4143- 99C0-5297EF71F444} |
rundll32.exe stlbdist.dll, DllRunMain | Browseraid/Startium parasite |
| X | 123456 | rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl | Added as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number |
| X | <random digits>.exe | <random digits>.exe | 8 random digits, example: 77231997.exe = 77231997.exe. Winpup.exe adult content downloader |
| N | 1: | hpdrv.exe | HP utility for monitoring when and how many recoveries have been done |
| U | 12Ghosts Popup-Killer | 12popup.exe | 12Ghosts Popup-Killer |
| ? | 17779Proj2002 | N/A | ?? |
| N | 000StTHK | 000StTHK.exe | Toshiba laptop related but not required. What does it do? |
| U | 00THotkey | 00THotKey.exe | For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev. |
| N | 1A:MacVisionTrayMonitor | TrayMonitor.exe | Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock) |
| Y | 1A:Stardock MCP | mcpserver.exe | Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on |
| Y | 1A:Stardock TrayMonitor | TrayServer.exe | For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX |
| ? | 1CmailS | NETMAIL.EXE | ?? |
| U | 1Srv32 | SpyAgent4.exe | SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC." |
| U | 1Win32Cfg | SpyBuddy.exe | SpyBuddy monitoring software |
| U | 2wSysTray | 2portalmon.exe | 2Wire Homeportal user interface |
| X | 2020Downloader | mssvr.exe | 2020Search Toolbar related. Reported to be auto-installed |
| Y | 3c1807pd | 3cmlink.exe 3cpipe-3c1807pd | 3Com WinModem driver. See here for more WinModem information |
| Y | 3capplnk | 3capplnk.exe | US Robotics Modem driver |
| N | 3cdminic | 3CDMINIC.EXE | 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards |
| ? | 3CM Link | 3cmcnkw.exe | Same as below? |
| Y | 3Cmlink | 3CmlinkW.exe | For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information |
| N | 3ComDMIAgent | 3CDMINIC.EXE | 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards |
| Y | 3cpipe-USRpdA | USRmlnkA.exe | Modem driver files from US Robotics |
| U | 3Deep Control Panel | 3DeepCTL.EXE | From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games |
| X | 3Dfx Acc | GFXACC.EXE | Added as a result of the GIBE VIRUS! |
| Y | 3dfx Tools | 3dfxCmn.dll | Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards |
| N | 3dfx Task Manager | 3dfxMan.exe | System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs |
| Y | 3dfxv2ps.dll | 3dfxv2ps.dll | Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards |
| U | 3DLabsHelperDemon | 3dldemon.exe | Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled |
| ? | 3Dlabs Taskbar Display Manager | 3DLman.exe | 3DLabs graphics driver related. System Tray access to display settings? |
| N | 3D Text | 3D Text.scr | 3D Text screensaver |
| U | 3qdctl.exe | 3qdctl.exe | Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ |
| X | 5-1-61-96 | members-area.exe | Adult content dialler |
| X | 5-2-46-112 | 5-2-46-112.exe | Adult content pop-up dialler. Removal instructions here |
| X | 666 | Ska.exe | Added as a result of the NETBUS VIRUS! |
| Name/Startup Item | Command | Comments | |
| U | A1000 Settings Utility | cpqa1000.exe | Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features |
| U | A4Proxy | A4Proxy.exe | Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites |
| ? | AAACLEAN | AAACLEAN.INF | ?? |
| ? | AAAKeyboard | ?? | ?? |
| N | AAATraySaver | TraySaver.exe | System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray |
| N | ABBYY Community Agent | CAGENT.EXE | Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software |
| X | ABC | keylogger.exe | Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ |
| U | Absolute Shield | dseraser.exe | Absolute Shield/Evidence Eliminator - iternet history eraser |
| X | ABsr | absr.exe | Added as a result of the AUTOUPDER VIRUS! |
| X | abtu | mp3serch.exe lopsearch.exe |
Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version |
| U | AbyssWebServer | abyssws.exe | Abyss web server |
| Y | AcBtnMgr_Xxx | AcBtnMgr_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| U | Accelerate | accelerate.exe | Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection |
| N | Access Ramp Monitor | armon32.exe | Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again |
| N | AccessRamp Monitor01 | ARMon32a.exe | From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service." |
| N | AccessRampLAN01 | ARUpld32.exe | Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003 |
| N | AccuWeather.com® Desktop | ?? | Desktop weather from AccuWeather.com |
| U | AcerNotebookManager | almxptray.exe | System Tray access on some Acer Notebooks to give faster access to system settings |
| ? | AcerPowerkey | Powerkey.exe | PowerKey utility for Acer TravelMate notebook PCs. What does it do and is it needed? |
| Y | ACMonitor_Xxx | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| X | acocash | fastdown.exe fastfown.exe |
Adult content dialler |
| U | Acombo3dmouse | Acombo3d.exe | Mouse driver - required if you use non-standard Windows driver features |
| X | Aconti | aconti.exe | Adult content dialler |
| U | acoustic | acoustic.exe | Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained |
| N | acpart | agpart11.exe | Program for finding trucks on-line |
| N | Acrobat Assistant | ACROTRAY.EXE | If you want to create a PDF using Acrobat Distiller, you can execute this program manually just before doing so |
| ? | ActionAgent | actionagent.exe | ?? |
| N | Action Manager 32 | am32.exe | Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs |
| N | Activation | Activation.exe | Part of Microsoft Money |
| U | Activboard | MMKeybd.exe | Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys |
| X | ActiveDesktop | systray32.exe | Added as a result of the DABOOM VIRUS! |
| N | ActiveEyes | ActiveEyes.exe | ActiveEyes from TFI Technology |
| U | ActiveMenu | ActiveMenu.exe | Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally |
| U | ActivePlus | activeplus.exe | Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on) |
| Y | ActiveShield | MCVSSHLD.EXE | McAfee VirusScan On-line. See also McAgentExe |
| N | ActivSurf | backweb*****.exe | Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates |
| U | AD2KClient | AD2KClient.exe | Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
| N | AdaptecDirectCD | Directcd.exe | DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
| N | Ad-aware | Ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
| N | Adaware Bootup | ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
| X | Adaware lptt01 | adaware.exe | New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware |
| U | Ad Blocker | blocker.exe | Ad Blocker - blocks popups, and also removes banners, image ads and flash ads |
| ? | ADG | ADG.exe | SoundBlaster Audigy related? |
| N | ADGJdet | ADGJDet.exe | Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection |
| X | ADM Library Loader | admlib32.exe | Added as a result of a variant of the SDBOT VIRUS! |
| U | Ad-Muncher | ADMUNCH.EXE | Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications |
| X | AdobeA | adobes.exe | Added as a result of the FLOOD.BA VIRUS! |
| U | Adobe Gamma Loader | Adobe Gamma Loader.exe | Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine |
| ? | Ad Online Guide | adonlineguide.exe | ?? |
| X | adp | adp.exe | Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc |
| N | ADQuickAccess | Adtray.exe | After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95 |
| U | ADService | ADService.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
| U | AdsGone | Adsgone.exe | AdsGone - pop-up stopper |
| N | ADSL Diagnostic Tools | mapiicon.exe | System tray access to ADSL modem diagnostic tools. Available via Start -> Programs |
| Y | ADSS | ADSS.exe | ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied |
| U | AdSubtract | adsub.exe | AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs |
| U | ADUserMon | ADUserMon.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
| X | Adult_Chat | Adult_Chat.exe | Adult content dialler |
| X | Adult_Chat1 | Adult_Chat1.exe | Adult content dialler |
| N | Advanced Tools Check | ADVCHK.EXE | Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
| X | Advapi | Advapi.exe | Added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS! |
| U | Advertising Killer | Akiller.exe | AKiller - pop-up stopper |
| U | Ad-watch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| ? | Aeiwlsta.exe | Aeiwlsta.exe | IBM High Rate Wireless LAN Adapter driver. Is it required? |
| N | AELaunch | AELaunch.exe | Audio Applications Launcher for the Philips Acoustic Edge soundcard |
| ? | AeXSWDUsr | AeXSWDUsr.exe | Altiris Express NS Client Manager software. Is it required? |
| U | AEZBProc | aptezbp.exe | IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
| U | AFAFilter | windefault.exe | AFAFilter - internet filter software |
| N | Agent | Agent.exe | Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs |
| ? | Agente | Remupd.exe | Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar? |
| U | AgfaCLnk | AgfaCLnk.exe | For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive |
| Y | AGRSMMSG | AGRSMMSG.exe | IBM AMR modem driver |
| N | AGSatellite | AGSatellite.exe | Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs |
| U | ahfp or ahfprog |
ahfp.exe | Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
| U | AHNSD | AhnSD.exe | AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis |
| ? | AHNUE | AHNUE.exe | ?? |
| N | AHQInit | ahqinit.exe | Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required |
| U | aiepk | aiepk2.exe | Another IE Popup Killer - pop-up stopper |
| N | AIM | aim.exe | AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs |
| X | aimaol lptt01 | aimaol.exe | New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | AimingClick | AimingClick.exe | AimingClick from AimingTech. Web searching tool. Available via Start -> Programs |
| X | AIM reminder | AIM reminder.exe | Added as a result of the BUDDY VIRUS! |
| N | AIMster | ?? | Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs |
| Y | Aiptek Graphics Tablet (USB) | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| U | AKiller | akiller.exe | BuyPin Advertising Killer - popup killer |
| U | Alarm Manager | Alarm.app.exe | Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop |
| ? | AlarmWatcher | AlarmWatcher.exe | Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required? |
| N | Album Fast Start | ABMTSR.EXE | Scanner software, not required for scanner to work |
| ? | Alcom PCL Capture | FMW_PCAP.EXE | ?? |
| ? | AlcxMonitor | Alcxmntr.exe | Realtek AC97 Audio - Event Monitor. What does it do and is it required? |
| X | Alevir | Alevir.exe | Added as a result of the OPASERV.A VIRUS! |
| N | Alexa | Alexa.exe? | Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs |
| ? | ALFY Accellerator | AlfyAC~1.exe | ?? |
| Y | ALiSndMgr | ALiSndMg.exe | ALi AC97 Sound driver |
| ? | AliUSBfix | GREENMK.exe | May be realted to a USB 2.0 PCI card - the IOgear GIC220OU? |
| U | All Aboard Status | stswin.exe | All Aboard! Internet Connection Sharing status icon |
| X | All Sea screen saver | TaskTray.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
| X | All Sea web link | FWLink.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
| U | allSnap | allSnap.exe | "allSnap is a small system tray app that makes all top
level windows automatically align like they do in programs such as Winamp
or Photoshop" |
| U | Alogserv | Alogserv.exe | From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
| ? | Alps Electric USB Server | Monserv.exe | Alps Electric USB Server. What does it do and is it required? |
| U | AlpsPoint or Apoint |
Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
| ? | ALServ | ALServ.exe | Altec Lansing AMS speaker related. What does it do and is it required? |
| N | Altnet or AltnetPointsManager |
points manager.exe | Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required |
| U | ALUAlert | ALUNotify.exe | Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
| U | AlwaysOnTopMaker | AlwaysOnTopMaker.exe | Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
| N | AME_CSA | rundll32 amecsa.cpl, RUN_DLL | Loads ADSL modem Control Panel applet |
| N | America Online *.* Tray Icon | aoltray.exe | Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs |
| Y | Amon | AMON.EXE | Monitoring part of Eset's NOD32 virus-scanner |
| Y | Amonitor | amon.exe | Tiny Personal Firewall |
| X | anbv32 | nabv32.exe | Added as a result of the TITOG.C VIRUS! |
| N | Announcements | Annclist.exe | MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| N | Anntext | Anntext.exe | Caere Pagekeeper text annotation server |
| U | Another Internet Explorer Popup Killer | aiepk.exe | Another IE Popup Killer - pop-up stopper |
| U | Anti-keylogger check | antikey.exe | Anti-keylogger - protects against keylogger programs monitoring your keystrokes |
| U | AntiPopUp | AntiPopUp.exe | AntiPopUp for IE - pop-up stopper |
| ? | AntiVirusProtection | qumk.exe | ?? |
| Y | AnVir | AnVir.exe | AnVir virus destroyer |
| U | anvshell | anvshell.exe | System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar |
| ? | anycom bluetooth | ftflauncher.exe | Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
| U | AolAcsDaemon1 | Acsd.exe | AOL Connectivity Service - starts an automatic function
that restores the connection should you lose it while online. Negates
having to go through the procedure of signing back on manually |
| N | AolFix | AolFix.exe | Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once |
| X | Aornum | aornum.exe | Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware |
| N | AO Tray or AOTray |
AOTray.Exe | System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel |
| Y | apc_tray | apc_tray.exe | Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure |
| Y | APC UPS Status | Display.exe | APC PowerChute Personal Edition status icon |
| ? | Apmsrv9x | APMSRV9X.EXE | Intel AnyPoint Wireless II Home Network related. What does it do and is it required? |
| X | <filename> | App.exe | Added as a result of the WAXPOW VIRUS! |
| U | Appcon | vAppCon.exe | Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established |
| U | AppExtender | AppExtCB.exe | Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received |
| Y | Application | mdmsetsp.exe | Aztech Labs modem driver |
| Y | Apwheel | Apwheel.exe | Wheel support for an Alps mouse |
| ? | Apvxd | APVXDWIN.EXE | Part of Panda Anti-Virus. What is this part and is it required? |
| Y | Apvxdwin | APVXDWIN.EXE | Part of Panda Anti-Virus. Required to enable permanent virus protection |
| X | ara-key | <random> | Added as a result of the ANTINNY VIRUS! where <random> is a random program name with random characters |
| N | ARCSolo Recovery | N/A | Backup software by Computer Associates - no longer supported |
| X | Aritima | aritima.exe | Added as a result of the ARITIMA VIRUS! |
| Y | ashMaiSv | ashmaisv.exe | Avast! anti-virus software - probably E-mail protection based upon the name? |
| U | AsioReg | regsvr32.exe ctasio.dll | ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
| N | asp4tray | asp4tray.exe | System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
| Y | AspireTimeMachine | acertmb.exe | System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry |
| N | asTray | Astray.exe | Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer |
| N | Astro | Astro.exe | Checks for updates to Quicken on a system reboot |
| N | ASUSKey | V38SHELL.EXE | System tray Icon for quickly changing video modes |
| U | ASUS SmartDoctor | VGAProbe.exe | ASUS video card fan/thermal monitor |
| U | ASUS TweakEnable | astart.exe | Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| N | ASWDP | ASWDP.exe | MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market |
| X | ASWnk | aswnk.exe | Adult content dialler |
| ? | Ati2cwxx | Ati2cwxx.exe | For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it |
| N | Ati2mdxx | Ati2mdxx.exe | For ATI video cards. System Tray access to display mode changing |
| U | AtiCwd or AtiCwd32 |
AtiCwd.exe AtiCwd32.exe Ati2cwad.exe |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| N | ATI GART Set-up Utility | Atigart.exe | Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed |
| N | AtiKey | AtiKey32.exe atiptkad.exe |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display |
| U | ATI Launchpad | launchpd.exe | Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu |
| U | ATIModeChange | Ati2mdxx.exe | System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager |
| U | ATIPOLAB or ATIPOLL |
ati2evxx.exe | ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources |
| U | AtiPTA or AtiPTAAA or atiptaxx |
Ati2ptxx.exe Atiptaxx.exe |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | AtiQiPcl | AtiQiPcl.exe | Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's |
| N | ATI Scheduler | Atisched.exe | Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see |
| U | ATISmart | ati2s9ag.exe | ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings |
| X | atisrc2 | windfind.exe | Adult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return |
| N | ATI Task Application | Atitkad.exe | System Tray access to common display functions on ATI video cards. As above |
| N | ATI Task Application (Atikey) | Atitask.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display |
| U | ATIX10 | atix10.exe | ATI Remote Wonder - PC wireless remote control |
| X | ATM Control | adpn.exe | Added as a result of the MMS.A VIRUS! |
| N | ATnotes | atnotes.exe | Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs |
| N | Atomica | atomica.exe | Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key |
| U | AtomicTime | ATOMICTIME.EXE | AtomicTime - utility that synchronizes your PC clock to an atomic clock |
| U | Atrack | atrack.exe | New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert |
| U | ATTBroadbandUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| U | ATTRedUpdate | AutoUpdate.exe | Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates |
| X | AttuneClientEngine | attune_ce.exe | "Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer". Not required - treated as adware |
| X | AttuneContentUpdater | attune_cu.exe | Related to the above. All needed for the program to do its job properly |
| X | AttuneDiscovery | attune_di.exe | Related to the above. All needed for the program to do its job properly |
| X | AttuneSystray | attune_st.exe | Related to the above. All needed for the program to do its job properly |
| N | aTuner | atuner.exe | aTuner - tweak tool for GeForce based graphics cards |
| Y | atwtusb | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| U | AU Agent | AUagent.exe | Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon |
| Y | AUCBPNP | aucbnpn.exe | Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot |
| ? | AudCtrl | RunDll32 AudCtrl.dll, RCMonitor | Audio control panel? |
| N | AudioHQ | Ahqtb.exe | For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs |
| U | Autobar | autobar.exe | Connect buttons on the keyboard for internet direct access, etc. on HP computers |
| N | AutoEA | Ahqrun.exe | For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ |
| N | AutoMate Task Service | automate.exe | Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs |
| N | Automatically launches the United Devices Agent when you start your computer | UD.EXE | The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs |
| U | AutoSizer | AUTOSIZER.EXE | AutoSizer - utility that automatically maximizes windows when they're opened |
| X | AutoUpdater | aupdate.exe | Aupdate, Tinybar variant. Spyware |
| Y | Aureal A3D Interactive Audio | sa3dsrv.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| Y | Aureal A3D Interactive Audio Init | A3dInit.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| X | ausvc | ausvc.exe | Added as a result of the AUTOUPDER VIRUS! |
| N | AUTOPROP | REGPROP.EXE WMPADDIN.DLL |
Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension |
| N | AutoSpell 5 | ASWATC32.EXE | AutoSpell - spell checker |
| ? | Auto T Bar or autotbar |
autotbar.exe | Found in the /hp/bin directory on a HP PC? |
| N | autoupd (1) | autoupd.exe | Raxco Software Auto Update utility."Used to keep your software up-to-date" |
| X | autoupd (2) | autoupd.exe | VIRUS! - found in a folder of the same name |
| N | AUXXTRAY | au30setp.exe | System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
| ? | AutoShutdown | pssvc.exe | Utility to fix vCard Export in MS Outlook 2000 - although why are these together? |
| Y | Avast32 | Astart32.exe | Avast32 anti-virus - scanner |
| Y | Avast! | ashserv.exe | Avast! anti-virus software - probably the main scanner? |
| U | AvconsoleEXE | Avconsol.exe | From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it |
| X | AveoAttune | atmdlusr.exe | Related to AttuneClientEngine above |
| Y | AVG_CC or avgcc32 |
avgcc32.exe | AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
| Y | AVG7_CC | AVGCC.exe | AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates |
| Y | AVGCtrl | AVGCTRL.EXE | Background task of the AntiVir antivirus program which scans files transparently in the background |
| Y | AVG_EMC | AVGEMC.exe | AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses |
| Y | avgmsvr.exe | avgmsvr.exe | Required for AVG Anti-Virus 7.0 to function |
| Y | AVG_RegCleaner | AVGREGCL.exe | AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems |
| Y | Avgserv9.exe | Avgserv9.exe | Background monitoring program for AVG anti-virus |
| Y | AvMaiSrv | Avmaisrv.exe | Avast32 anti-virus - E-mail scanner |
| Y | avpcc | avpcc.exe | Kaspersky Labs anti-virus |
| X | Avril Lavigne - Muse | <random filename> | Added as a result of the AVRIL-A VIRUS! |
| Y | AVSCHED32 | AVSched32.exe | AntiVir anti-virus from H+BDEV |
| N | Avtray | Avtray.exe | Command Antivirus tray icon |
| U | AVWUpd32 | AVWUPD32.EXE | AntiVir updater. Useful, but can be run manually |
| Y | avx communicator | xcommsur.exe | Anti-virus part of BitDefender virus scanner/firewall |
| Y | Avxlive | avxlive.exe | Bullguard or BitDefender antivirus |
| Y | avxlni | avxinit.exe | Anti-virus part of BitDefender virus scanner/firewall |
| ? | Avxnews | ?? | ?? |
| N | awhost32 | awhost32.exe | Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended |
| Y | a-winpoet-service | winpppoverethernet.exe | WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking |
| ? | AxFilter | Rundll32 AXFILTER.DLL, Rundll32 |
?? |
| Name/Startup Item | Command | Comments | |
| X | b3d | BDEsecureinstall.exe | B3d Projector - installed along with the KaZaA file sharing utility. Causes a program called "ZUPDATE.EXE" to periodically try to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | b3dUpdate | Zupdate.exe | Same as above but not installed via KaZaA |
| X | b9 | B9.exe | FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run" |
| X | babeie | rundll32 cnbabe.dll, dllstartup |
CommonName Toolbar spyware. To uninstall see here |
| N | Babylon Translator | Babylon.exe | "Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on" |
| U | BackgroundSwitcher | bgswitch.exe | Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here |
| N | Backpack UDF | bpudfmon.exe | Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk |
| U | BackupExecScheduler | besch.exe | Veritas "Back Up My PC" software |
| N | BackWeb | backweb.exe | Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs |
| N | Backwork | Backwork.exe | Backwork trojan detector |
| U | BACPI10 | bacpi10a.exe | Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray |
| N | bacstray | bacstray.exe | Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
| X | BADDATE | BADDATE.EXE | Added as a result of an unidentified VIRUS! |
| X | bargains | bargains.exe bargainbuddy.exe |
Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here |
| ? | Bart Station | station.sbrt | Related to PeoplePC ISP. May be a dialler for dial-up accounts? |
| N | Batchreg1 | N/A | Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See |