Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X ACTIVEDS ACTIVEDS.EXE"Added by the OPASERV.T WORM!"
N ActiveEyes ActiveEyes.exeActiveEyes from TFI Technology is a small utility that you can use to liven up your desktop. It follows your mouse around and can tell you how far your cursor has travelled or point out where the cursor is. It's small it's free and comes with a range of options and animations. Not needed - if unavailable via Start -> Programs create your own shortcut
U ActiveKeys.AAB635BD7D054a37A576 akeys.exe"""Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"""
U ActiveMenu ActiveMenu.exeWild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
U ActivePlus activeplus.exe"Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)"
X ActiveScan Antivirus ActiveScan.exe"Added by the RBOT-FKQ WORM!"
X ActiveScript32 nod.exe"Added by the SOHANA-AJ WORM!"
Y ActiveShield MCVSSHLD.EXEMcAfee VirusScan On-line. See also the McAgentExe entry
N ActiveSpeed AS.exe"Ascentive ActiveSpeed internet optimizer - not recommended see here and here"
X ActiveSync wcescom32.exe"Added by the MANCSYN-E TROJAN!"
N ActiveWords AWMonitor.exe"ActiveWords from ActiveWord Systems Inc. Like macro programs ActiveWords sits in the background and watches as you type. When it recognizes that you?ve typed an ActiveWord it takes the associated action such as replacing your keystrokes with the text you?ve defined"
X ActiveX File Registration Service filereg.exe"Added by the RBOT-DVD WORM!"
X ActiveX Streamer msgfix.exe"Added by the SDBOT.NQ WORM!"
X ActiveXUpdate svcss.exe"Added by a variant of the DEDLER.C TROJAN!"
U Activity actik.exe"ActivityKey keystroke logger/monitoring program - remove unless you installed it yourself!"
N ActivSurf backweb*****.exePackard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U ActMaker ActMak25.exe"""ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding nor are you required to know a lot about the computer"""
U ActMaker ActMaker25.exe"ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload"
U ACTray ACTray.exe"System Tray icon for ThinkVantage Access Connections - ""allowing users to seamlessly switch between wired and wireless environments managing security settings printers home page and other location-specific settings automatically"""
U Actual Window Manager ActualWindowManagerCenter.exe"Actual Window Manager from Actual Tools - ""an innovative desktop organization application which introduces unconventional window controls and also automatic general window operations making your work more productive convenient and enjoyable"""
U Actual Window Minimizer ActualWindowMinimizerCenter.exe"Actual Window Minimizer - ""allows minimizing any window to task tray notification area or to the edge of the screen"""
X ACTX1 v1201.exe"Added by the VB.IS TROJAN!"
U ACU ACU.exe"Atheros wireless Client Utility"
U ACU_QSB ACU.exe"Atheros wireless Client Utility"
U ACWLIcon ACWLIcon.exeRelated to IBM ThinkVantage Connectivity Solution
U Ad Arrest adarrest.exe"Ad Arrest IE popup killer from GameFools"
U Ad Blocker blocker.exe"Ad Blocker - blocks popups and also removes banners image ads and flash ads"
U Ad Blocker Pro Ad Blocker Pro.exeAd Away popup and banner remover
U Ad Muncher AdMunch.exe"Ad Muncher removes adverts pop-ups and general annoyances in your browser file-sharing and messenger programs. Causes conflicts with Outlook game sites and web-building applications"
? Ad Online Guide adonlineguide.exe"??"
U Ad-Aware Ad-Aware.exe"Ad-Aware from Lavasoft - popular spyware/adware removal tool"
X Ad-Aware Ad-Aware.exe"Added by the RBOT-ADJ WORM! Note - this is not the popular Ad-Aware spware/adware removal tool and is located in %System%"
X Ad-Eliminator ad-eliminator.exe"Ad-Eliminator spyware remover - not recommended see here"
U Ad-Muncher ADMUNCH.EXE"Ad Muncher removes adverts pop-ups and general annoyances in your browser file-sharing and messenger programs. Causes conflicts with Outlook game sites and web-building applications"
U Ad-Protect ad-protect.exe"Ad-Protect spyware and spam monitoring tool"
U Ad-watch Ad-watch.exe"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
U AD2KClient AD2KClient.exe"Executable for Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk"
N Adaptec DirectCD Directcd.exeDirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N AdaptecDirectCD Directcd.exeDirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X AdAware wini.exe"Added by the RBOT-XN WORM!"
U Adaware Bootup Ad-aware.exe"Ad-Aware from Lavasoft - popular spyware/adware removal tool"
X Adaware lptt01 adaware.exe"RapidBlaster variant (in a ""Adaware"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware"
X Adaware ml097e adaware.exe"RapidBlaster variant (in a ""Adaware"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware"
U AdBin AdBin.exe"AdBin - ""Free and easy solution to managing your Window's hosts file. A fun way to block ads"""
X Add**.exe [* = random char] Add**.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X Add**32.exe [* = random char] Add**32.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X AddClass AddClass.exe"CoolWebSearch Addclass parasite variant"
X AddClass [Installation_Path]"Added by the STARTPAGE.F hijacker"
X AddClass [path to trojan]"Added by the SECDL-A TROJAN!"
U AdDelete AdDelete.exeBanner advertisment blocker
X AdDestroyer AdDestroyer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X ADDITIONAL Services pkgadd.exe"Added by a variant of the IRCBOT TROJAN!"
? addproxy addproxy.exeRelated to Adobe Photoshop
? ADG ADG.exe" SoundBlaster Audigy related?"
N ADGJdet ADGJDet.exeAdded with SoundBlaster Live! or Audigy soundcards for headphone autodetection
X aDir adirss.exe"Added by the SPAMSRV-E TROJAN!"
Y Adiras Adiras.exeADSL USB modem related
X adirka adirka.exe"Added by the TIBS-QT TROJAN!"
U AdKiller AD Defender.exe"Part of Advanced Spyware Remover anti-spyware tool"
X adlhidp psncc32.exe"Detected by Kaspersky as the SLAPER.AI TROJAN! See here"
X ADM Library Loader admlib32.exe"Added by a variant of the SDBOT TROJAN!"
X Admanager Controller AdManCtl.exeAdware probably a Windupdates variant
X Admilli Service AdmilliServ.exeWindupdates adware variant
X Administrator svchost.scr"Added by the NOVACAL TROJAN!"
X Administrator winlogon.exe"Added by the RUBBLE-C WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
X Administrator di Dago Dago.exe"Added by the PUNYA-B WORM!"
X AdminSoft sysfile.vbs"Added by the STARGRUB-A WORM!"
U admtray.exe admtray.exe"Related to Acer Inc. destop tray"
X Adobe Adobe.exeAdded by an unidentified VIRUS WORM or TROJAN!
X Adobe sysconfig.exeAdded by an unidentified WORM or TROJAN!
X adobe gam.exeAdded by an unidentified WORM or TROJAN!
X Adobe sysbat32.exe"Added by the LOWZONES.T TROJAN!"
X Adobe zteam.exeAdded by an unidentified TROJAN!
N Adobe Acrobat READER~1.EXE"Speeds up the time it takes to load the Adobe Reader application. Your choice but not required for Adobe Reader to function properly"
X Adobe Acrobat Distiller Application acrotray.exe"Added by the RANDEX.DFJ WORM!"
X Adobe Acrobat Reader CFG [random filename]"Added by a variant of the RBOT WORM!"
N Adobe Acrobat Speed Launcher acrobat_sl.exe"Speeds up the time it takes to load Adobe's Acrobat PDF creation and management tool. From version 7.0 onwards"
X Adobe Filter Platform afilterplatform.exe"Added by the RBOT-OP WORM!"
U Adobe Gamma Loader Adobe Gamma Loader.exeAdjusts monitor colours across all programs including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
N Adobe Photo Downloader apdproxy.exe"Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here)"
N Adobe Reader Speed Launch READER~1.EXE"Speeds up the time it takes to load the Adobe Reader application. Your choice but not required for Adobe Reader to function properly"
N Adobe Reader Speed Launch Reader_sl.exe"Speeds up the time it takes to load the Adobe Reader application. Your choice but not required for Adobe Reader to function properly"
N Adobe Reader Speed Launcher Reader_sl.exe"Speeds up the time it takes to load the Adobe Reader application. Your choice but not required for Adobe Reader to function properly"
U Adobe Reader Synchronizer AdobeCollabSync.exe"Adobe Synchronizer - installed along with Adobe Reader 8.x. ""Synchronizer is a small application that runs in the background providing synchronization of document reviews and Tracker subscriptions so that your data is available when you need it."" See the link for more information"
U Adobe Version Cue CS2 VersionCueCS2Tray.exe"File manager that's part of Adobe Creative Suite 2 - ""find files fast track versions across applications link files together and share them in creative collaboration without fear of overwriting someone else's work"""
X AdobeA adobes.exe"Added by the FLOOD.BA TROJAN!"
X AdobeFonts fonts.htaBrowser hijacker - redirecting to Hugesearch.net
X AdobeManager rundtl.exe"Detected by Trend Micro as the INJECT.IB TROJAN! See here"
X adobemgr adobemgr.exe"Added by the ADCLICKER TROJAN!"
X AdobeReader msni.exe"Added by the RBOT.DAO TROJAN!"
X AdobeReaderPro msnxpsp.exe"Added by the RBOT-ASK or RBOT-AUS WORMS!"
X AdobeReaderPro ntkernell32.exe"Added by the RBOT-ATY WORM!"
X AdobeReaderPro msnserve.exe"Added by the SDBOT-AKH WORM!"
X AdobeReaderPro updt.exe"Added by the IRCBOT-VQ WORM!"
X AdobeReaderProfessional msx64.exe"Added by the RBOT-GAT WORM!"
X AdobeReaderPros sysmsn.exe"Added by the RBOT-BGH WORM!"
N AdobeUpdater AdobeUpdater.exeAutomatic updater for Adobe software - run manually
N AdobeVersionCue VersionCueTray.exe"""An exclusive feature of the Adobe? Creative Suite Version Cue? helps you find files fast track multiple versions of your files and share your files for creative collaboration"""
? Adobe_ID0EYTHM VERSIO~2.EXE"Part of an Adobe product. What does it do and is it required?"
X adodemaster adodemaster.exe"Downloader of Korean origin detected as ADOD.28672"
X Adope File Manager lsasv.exeAdded by an unidentified WORM or TROJAN!
X adp adp.exeSpyware installed by Net2Phone Limewire Cydoor Grokster KaZaa etc
X AdPopup dcf5678.exe"Added by the AGENT-FZ TROJAN!"
X adprot adprot.exe"AdBlaster adware"
N ADQuickAccess Adtray.exeAfter Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
X ADriver windrv.exe"Added by the DELF.WG TROJAN!"
X AdRoarUpdate ARUpdate.exe"AdRoar adware updater"
X AdRotator.Application [path to csrss.exe]"Added by the SMALL-AQ TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X AdRotator.Application services.exe"FakeMessage/AdRotator adware. Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in an ""Inetsrv"" subfolder"
X ADS Adware Remover ADS Adware Remover.exe"ADS Adware Remover - not recommended see here"
X AdsBlocker stopAds.exe"AdsBlocker - detected by NOD32 as DIALER.DW!"
U AdsCleaner AdsCleaner.exe"""AdsCleaner is a powerful ad blocking software designed to stop ads (block banners ad kill popup) guard your online privacy"""
U ADService ADService.exe"Part of Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk. Appears as a service in XP/Vista and under the ""RunServices"" registry key in Win98/ME"
U AdsGone Adsgone.exe"AdsGone - pop-up stopper"
N ADSL Diagnostic Tools mapiicon.exeSystem tray access to ADSL modem diagnostic tools. Available via Start -> Programs
? ADSLSYSTEMTRAY SystemtrayV100B.exe"Apparently Annex A ADSL modem related. What does it do and is it required?"
Y AdslTaskBar rundll32.exe stmctrl.dll TaskBarISP software initializes DSL modem
X AdslTaskBars taskmng.exe"Added by the RBOT-AXZ WORM!"
? ADSL_A2 A2Installed"Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required?"
Y ADSS ADSS.exe"ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied"
X adstartup automove.exe"Adlogix adware variant"
X Adstartup Adstartup.exe"Adlogix adware"
X AdStatus Service AdStatServ.exe"WindUpdates AdStatus Service adware"
U AdSubtract adsub.exe"AdSubtract blocks ads cookies pop-up windows animations music and more. Can be disabled from within AdSubtract. Available via Start -> Programs. Now superseded by
X adtech2005 adtech2005.exe"Detected by Kaspersky as the STARTPAGE.AW TROJAN!"
X adtech2006 adtech2006.exe"Detected by Kaspersky as the VB.KC WORM!"
X Adtools Service AdTools.exe"Windupdates Adware"
? ADU adu.exe"Related to Cisco Aironet wireless products. What does it do and is it required?"
X AdultX AdultX.exeAdult content dialler and hijacker
X Adult_Chat Adult_Chat.exeAdult content dialler
X Adult_Chat1 Adult_Chat1.exeAdult content dialler
X AdUpdater sysupudt.exeUnidentified adware downloader/updater
U ADUserMon ADUserMon.exe"Part of Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk"
X Advanced DHTML Enable exo32.exe"Added by the RANCK-FI TROJAN!"
X Advanced DHTML Enable [path to trojan]"Added by the AGENT.GLQ TROJAN!"
X Advanced Internet Protocol cerf.exe"Added by a variant of the SPYBOT WORM!"
X Advanced Protection System advpsys.exe"Added by a variant of the RBOT WORM!"
U Advanced Spyware Remover Asr.exe"Advanced Spyware Remover anti spyware tool"
U Advanced SystemCare 3 AWC.exe"Advanced SystemCare from IObit - ""helps protect optimize clean and repair your computer and Registry."" The PRO version adds automation anti-spyware privacy protection and performance tune-ups"
X Advanced Tool Checks advchks.exe"Added by a variant of the RBOT WORM!"
N Advanced Tools Check ADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
U Advanced Uninstaller PRO Installation Monitor monitor.exe"Innovative Solutions Advanced Uninstaller PRO - ""easy-to-use suite for uninstalling applications and keeping your computer fast clean and in its best shape"""
X AdvancedCleaner Free UADC.exe"AdvancedCleaner misleading security software - not recommended see here"
X AdVantage AdVantage.exe"MediaAdVantage adware"
X advap32 [path to trojan]"Detected by Trend Micro as the MUTANT.AT TROJAN! See here"
X Advapi Advapi.exe"Added by the NETDEVIL.12 WORM!"
N ADVCHK ADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
U Advertising Killer Akiller.exe"Advertising Killer - popup stopper"
X advmon32 advmon32.exe"Added by a variant of the CRYPTER.C TROJAN!"
U Adware Agent adware agent.exe"Adware Agent popup blocker"
X Adware Spy AdwareSpy.exe"Adware Spy adware remover - not recommended see here"
U AdwareAlert AdwareAlert.Exe"Adware program previously not recommended (see here). It has now been delisted so make sure you have the latest version"
X AdwareDelete adwaredelete.exe"AdwareDelete adware remover - not recommended see here"
X AdwareKiller_schedules schedules.exe"EAdwareKiller spyware remover - not recommended see here"
X AdwareKiller_tray tray.exe"EAdwareKiller spyware remover - not recommended see here"
X AdwareProMFC Ad-Ware Pro.exe"Ad-Ware Pro rogue security software - not recommended see here"
X AdwareProMFC AntiTrojan Pro.exeAntiTrojan Pro rogue security software - not recommended. Variant of Ad-Ware Pro
X AdwareRemover2007 AdwareRemover2007.exe"AdwareRemover2007 spyware remover - not recommended see here"
? Aeiwlsta.exe Aeiwlsta.exe"IBM High Rate Wireless LAN Adapter driver. Is it required?"
N AELaunch AELaunch.exe"Audio Applications Launcher for the Philips Acoustic Edge soundcard"
X AERVICESN AERVICESN.exe"Added by the RANDON-AO WORM!"
N AeXAgentLogon AeXAgentActivate.exe"Altiris Agent transmits information about your machine for the purpose of asset management and deployment"
? AeXSWDUsr AeXSWDUsr.exe"Altiris Express NS Client Manager software. Is it required?"
U AEZBProc aptezbp.exeIBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation volume control and few quickstart buttons. Keyboard will work without it but you lose the special functions
U AFAFilter windefault.exe"AFAFilter - internet filter software"
X afskfask8 fsfjasj8.exe"Added by the ONLINEG-L TROJAN!"
N AGEIA PhysX SysTray TrayIcon.exe"System Tray access to display properties for AGEIA PhysX graphics cards. Unless you change your desktop resolution etc regularily use Control Panel -> Display Properties or right-click on the desktop"
N Agent Agent.exe"Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this otherwise can be disabled. Available via Start -> Programs"
X Agent alsys.exe"Added by the DREF-V VIRUS!"
X agent ppl.exe"Added by the DREF-U VIRUS!"
X Agent Browser [random filename]Added by the PPdoor.M-bdr backdoor TROJAN!
X Agent Explorer [random filename]Unidentified adware
? Agente Remupd.exe"Part of an older version of Panda Antivirus. Is this an update reminder (guess because of the name) virus definition update reminder or something similar?"
X agentsvr agentsvr.exe"Detected by Kaspersky as Monker.A adware. Note - do not confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the Windows\Msagent folder"
U AgfaCLnk AgfaCLnk.exeFor Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
X agp agp32.exe"Added by the GAOBOT.SY WORM!"
Y AGRSMMSG AGRSMMSG.exeIBM AMR modem driver
N AGSatellite AGSatellite.exeProgram from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U ahfp ahfp.exe"Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view delete or modify them either""
U ahfprog ahfp.exe"Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view delete or modify them either""

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list