Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Fast start svcnt.exe"Adware - detected by Kaspersky as a variant of the FAVADD TROJAN!"
U FastCache fc.exe"FastCache from AnalogX - speeds up browsing by resolving DNS requests locally"
X fastsmell fastsmell.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X FastStart ntnut32.exe"Added by the STARTPAGE.L TROJAN!"
X FastStart svcnut.exe"Browser hijacker - a variant of the STARTPAGE.L TROJAN!"
X FastStart svcnut32.exe"Browser hijacker - a variant of the STARTPAGE.L TROJAN!"
N FastTrack Accelerator SPEED UP.EXE"FastTrack Accelerator - ""speedup"" utility for programs that use the FastTrack network such as KaZaA Media Desktop Grokster and Morpheus"
X FASTTRACKNETVISION NETVISION.exe"DialCar-Z premium rate dialer"
U FastTVSync FastTVSync.exe"Part of InterVideo (now Corel) DVD Copy - ""fast DVD copying and file conversion software. In just three steps you can copy videos to most DVD formats or convert them for smooth flawless viewing on your PSP® or iPod®. With broad format support and unique CopyLater™ technology DVD Copy saves you time and ensures high-quality output like no other copying software"""
N FastUser fast.exeInstalls as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
N FastUsr fast.exeInstalls as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
U FatPipe DHCPSoftware enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U Fatpipe Dialer fpdialer.exeDailler for Fatpipe - software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U fatrecov fatrecov.exeSCKeyLog.j keystroke logger/monitoring program - remove unless you installed it yourself!
U FavoriteSync FavoriteSync.exe"FavoriteSync keeps the same set of Internet Explorer Favorites on several computers in sync"
U FaxCenterServer fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Incorporated into software by Lexmark MCI Lotus My Software Broderbund Traffic Software and many others"
U FaxCenterServer4_in_1 fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Incorporated into software by Lexmark MCI Lotus My Software Broderbund Traffic Software and many others"
U FaxCtrl.exe ASMediaProxyServer.exe"Part of Avaya's Contact Center Express - ""a multi-channel high-volume software solution from Avaya designed specifically for the intelligent routing and computer telephony integration (CTI) needs of medium-sized contact centers"""
N FaxTalk CallControl 6.0 FTClCtrl.EXEThis allows the software to handle incoming and outgoing communications without requiring the FaxTalk Communicator application to be loaded into memory. Can be started manually
U FBDirect FBDirect.exeSoftware that monitors the status of a Visioneer OneTouch scanner button and allows you to scan fax copy print and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!
? FBI FBISM.exe"Compaq related but what does it do?"
X fc runfc.exe"Added by the CAMPURF WORM!"
X FCEngine FCEngine.exe"CASClient adware"
X FCHelp FCHelp.exe"Added by either FCHelp adware or a variant of it"
X FCMan FCMan.exe"FCHelp adware"
X Fdaemon security fsecur.exe"Added by the SDBOT.KXO WORM!"
X FDD SYSTEM Fdd.exe"Added by the MYTOB-FO WORM!"
X Fdr Command Module sp2.exe"Added by the SDBOT.WP WORM!"
X FDriver windrv.exe"Added by the DELF.WG TROJAN!"
U FD_SAP FD.exeReported to be the autopassword program from the Sony Microvault thumb drive
X FeCPY fecpy.exe"FlashEnhancer adware"
U feedreader.exe feedreader.exe"""Feedreader is a freeware Windows application that reads and displays Internet newsfeeds aka ATOM and RSS feeds based on XML"""
X feelalright mirc.exe"Added by the IRCFLOOD-M WORM!"
U FEELitDeviceManager feelitdm.exeAssociated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
X fegoze SVCH0ST.EXE"Added by the GRAYBIRD.D VIRUS! Note - the filename has the digit 0 rather then the uppercase ""o"""
U Fellowes Proxy R3proxy.exeInstalled with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
X Fen Startups fensvc32.exe"Added by the RANDEX.CCF WORM!"
U FerrariWallPaper FerrariWP.exeCalendar that replaces the default desktop background image. It comes with every Acer Ferrari 3000 laptop. Also downloadable for members of www.ferrari.com
X ffis ffisearch.exe"iSearch adware"
U FG1_00 frntgate.exe"FrontGate MX - e-mail spam blocker"
? fgl23DoubleScreenHooks f23happ.exe"Related to the now discontinued ATI Fire GL3 graphics card. What does it do and is it required?"
X fGQEGqHOME gwwgtp.exe"Added by the RANKY.J TROJAN!"
X FHPage shdochp.exe"Added by the WINHOUND TROJAN!"
X FHStart shdocsvc.exe"Added by the WINHOUND TROJAN!"
U Fhtisxk fhtisxk.exeXtraKeys keystroke logger/monitoring program - remove unless you installed it yourself!
U FieldForms Sync SyncService.exe"Resco FieldForms. A solution for building of mobile forms that can be viewed or filled in on the run on a wide range of mobile devices. Supports Microsoft Access databases and provides for synchronization of other data as well"
X FiendlyType csrss.exe"Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X FILE abcdefg.exe"Added by the KELVIR.DD WORM!"
? file indexing service msfindfile.exe"New version of MS FindFast and still a resource hog?"
X file laoder configuration rnd32.exe"Added by the RBOT.BQJ WORM!"
X File Mapping Services hp-1003.exe"Added by the RBOT.FAN WORM!"
X File Protection Monitor filemon.exe"Added by a variant of the RBOT WORM!"
X File System taskmqrs.exe"Added by a variant of the TOXBOT/CODBOT WORM!"
X File System taskmqr.exe"Added by the RBOT.BWQ WORM!"
X File System Service wmiprvsc.exe"Added by the AGOBOT-HZ TROJAN!"
X File-Sharing Wizard shwizard.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X File0_0 MD1.exe"Added by the DLOADER-OR TROJAN!"
X File1 Dia Claro.htm"Added by the DLOADER-OR TROJAN!"
X FileFreedom_Plugin wtm.exe"FileFreedom peer-to-peer sharing program"
X FileManager32 Wscript.exe ChkMgr32.vbs"Added by the NOTUP.A WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""ChkMgr32.vbs"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
X FileSoft Wscript.exe UpdataFiles.vbs"Added by the SST.B WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""UpdataFiles.vbs"" file is located in the Winnt or Windows folder"
U FilmLoop FilmLoopService.exe"Related to FilmLoop - a photocasting network. Share your pictures with your family and friends"
U FilterGate filtergate.exe"Filtergate internet filtering software - filters sounds popup ads background sound and other unnecessary website items"
U Filterguard Filtrgrd.exe"An icon located in the lower left of the screen and looks like a lifesaver. This icon is a ""short-cut"" to access the basic features of SOS-Guardian SOS-KidProof Lite SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by ""right-clicking"" on the icon"
X Find find.exe"Added by the OPANKI WORM!"
N Find Fast Findfast.exeResource hog from older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
Y Find Virus Launch Program fvlaunch.exe"Part of Dr. Solomon's Antivirus"
X findfast findfast.exe"Added by the DLOADER.PFR TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office"
X findfast.exe findfast.exeIdentified as the RUNDIS.A TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office
X FindHack [path to worm]"Added by the KELVIR-BA WORM!"
U FinePrint Dispatcher v4 fpdisp4.exe"FinePrint Dispatcher - handles the spooling of print jobs to the FinePrint printer. Version 4.x of the software. ""FinePrint saves ink paper time and money by controlling and enhancing printed output"""
U FinePrint Dispatcher v4 fpdisp4a.exe"FinePrint Dispatcher - handles the spooling of print jobs to the FinePrint printer. Version 4.x of the software. ""FinePrint saves ink paper time and money by controlling and enhancing printed output"""
U FinePrint Dispatcher v5 fpdisp5a.exe"FinePrint Dispatcher - handles the spooling of print jobs to the FinePrint printer. Version 5.x of the software. ""FinePrint saves ink paper time and money by controlling and enhancing printed output"""
N FineReader7NewsReaderPro AbbyyNewsReader.exe"ABBYY FineReader OCR software - version 7"
X Fire Wall services [random filename]"Added by the IRCBOT-QY WORM!"
? FireBox Control Panel FireBox.exe"Control panel for the Presonus FireBox firewire based music recording system. Is it required?"
X FireExplore Update FireExplore.exe"Added by a variant of the RBOT WORM!"
X FireFox firefox.exe"Added by the RBOT-ATP WORM! Note - this is not the popular FireFox web browser and is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X Firefox Plugin Manager firefoxpgm.exeAdded by the MSNPHOTO.E WORM!
X FireFox Service Drivers ssmss.exe"Added by a variant of the SDBOT WORM!"
X FireFox Startup Drivers wuaclt.exe"Added by the RBOT.BYX WORM!"
X firefox.exe firefox.exe"Added by the BANKER-EBO TROJAN! Note - this is not the popular FireFox web browser and is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X Firewall wmlaunch .exe"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X Firewall wmlaunch .exe"Added by the ELIPTER.D WORM!"
X Firewall SP2 UPDATE.exe"Added by the ELITPER.E WORM!"
X Firewall Firewall.bat"Added by the YPSAN.G WORM!"
X firewall fw_304.exe"Added by the BDOOR-JQ BACKDOOR!"
X Firewall ctfmon.exe"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %Windir%"
X Firewall auto setup winlogon.exe"Added by a TROJAN - see here. Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
X Firewall Controls sys32.exe"Added by the SDBOT-DGI WORM!"
X Firewall Policy MidiDef32.exe"Added by the PIEBOT-A TROJAN!"
X Firewall Sp2 system sys32Conf.exe"Added by the RBOT-ABT WORM!"
X Firewall Update System1 WinedowsUpdater1.exe"Added by the RBOT-ARU WORM!"
X Firewall Updater msnupdateit.exe"Added by the RBOT-AAQ WORM!"
X Firewall.exe Firewall.exeAdded by the AGENT.AGL WORM!
X FirewallActivies csrss.exe"Added by the BANKER-AQ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""3041"" subfolder"
U FirewallStartup Firewallstartup.exe"Innovative Startup Firewall - ""designed to protect your computer from programs that install themselves in the StartUp area of your Windows without asking for your approval. Innovative StartUp Firewall will help you keep your computer clean fast and in it's best shape"""
X FirewallSvr FirewallSvr.exe"Added by the NETSKY.X or NETSKY.Y WORMS!"
X firewall_anti firewall_anti.exe"Added by the NETDENY-B TROJAN!"
X FireWire Driver samx.exe"Added by the SDBOT.AE WORM!"
X FireWire Service nvscv32.exe"Added by a variant of the SDBOT WORM!"
X FireWire Services nvcsv32.exe"Added by a variant of the SPYBOT WORM!"
X First Home Page http://find.naupoint.com"Naupoint browser hijacker"
X FIX WinFIX1.0.vbs"Added by the GORMLEZ-A WORM!"
Y Fix-it mxtask.exePart of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard intellicluster anti-virus or autoupdater. Otherwise not required
Y Fix-it AV memcheck.exePart of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
X Fixnice vcvw.exe"Added by the SDBOT TROJAN!"
X fjdslssdfd mat2.exe"Added by the SLAPEW.C TROJAN!"
U FjMenu FjMenu.exe"From the ""Fujitsu Menu"" tray icon you have instant access to the Control Panel Tablet pc keyboard Tablet and pen settings Fujitsu display controls brightness control sounds and audio devices capture screen capture window organize favorites power options printers and faxes LCD brightness MIN LCD brightness MAX Enable/disable Button Panel and the Fujitsu menu settings which are customizable"
U FJTWAIN Setup FjtwSetup.exeFujitsu scanner utility
N FJUPDNV_Chitose fjdvrupd.exeDriver update for a Fujitsu Siemens Lifebook laptop
X FKS v2.0 msngr.exeAdded by an unidentified WORM or TROJAN!
N fkSysMon fksysmon.exe"fkWrae SysMon - system monitor - ""displays the current memory consumption CPU and resource usage date time Windows uptime IP address and a lot more"""
X FlaCPY flacpy.exe"FlashEnhancer adware"
X Flash Driver [path to trojan]"Detected by PCTools as the AGENT.CWVT TROJAN! See here"
X Flash Media %%%%%.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media %%%.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media [path to trojan]"Detected by Trend Micro as the IRCBOT.AUR TROJAN! See here"
X Flash Media ^ ^^^ %% % ^% ^%%^ %^ .exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media ^^% ^ %%% %^%%%^%%^%^% % ^^%% % %^^^^ ^%%^%% .exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media ^^^^^.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media ^^^^^^.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Media services.exe"Added by a variant of the IRCBOT TROJAN! See here. Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
X Flash Media zrpk??'?'%''msn'?%'fix''.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Flash Player2 [path to worm]"Detected by Trend Micro as the IRCBOT.PD WORM! See here"
? FLASH32 -flash32.exe"??"
X Flash32 FLASH32.COM"Added by the STARTER-F TROJAN!"
U FlashEnc FlashEnc.exeSupplied with EasyDisk USB pen devices. The utility manages the encryption and compressed folders options. It will create these folders if running on the USB key without permission which is a pain. No need for it if you do not want these features
N Flashget FlashGet.exe"FlashGet download manager"
X Flashget Download Manager Flashget.exe"Added by the RBOT-AGZ WORM!"
X FlashGuard FlashGuard.exe"Added by the AUTOIT.AL WORM!"
U FlashMute FlashMute.exe"""FlashMute is a tool which allows you to mute/unmute Flash Movies loaded in a browser exclusively or alternatively all sounds produced by the browser"""
N FlashPath Monitor SDSTAT.EXESystem Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
N FlashPath Monitor FLSHSTAT.EXESystem Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
N FlashPath Status SDSTAT.EXESystem Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
N FlashPath Status FLSHSTAT.EXESystem Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
X Flashy Bot Flashy.exe"Added by the GLUPZY.A WORM!"
X Flash_Player_Install ying.exe"Constructor VC2000 malware"
X FlenCPY flencpy.exe"FlashEnhancer adware"
U Flexicd Flexicd.exe"CD player - part of the Win95 Power Toys"
U FlingRun fling.exe"Fling - free FTP software from NCH Software"
U FLMBROWSERMOUSE mouse32A.exeMouse utility for a Trust brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
U FLMK08KB MMKEYBD.EXEMultimedia keyboard manager. Required if you use the additional keys
U FLMK08KB KbdAp32A.exeKeyboard utility for a Medion brand (and possibly others) keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
U FLMLABTECMOUSE mouse32A.exeMouse utility for a Labtec brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
U FLMMEDIONMOUSE mouse32a.exeMouse utility for a Medion branded Fellowes mouse
U FLMOFFICE4DMOUSE moffice.exeMouse utility for a Labtec brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
U FLMOFFICE4DMOUSE mouse32a.exeMouse utility for a Micro Innovations brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
U FLMTRUSTKB KbdAp32A.exeKeyboard utility for a Trust brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
U FLMTRUSTMOUSE mouse32a.exeMouse utility for a Trust brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
X FlnCPY flncpy.exe"FlashEnhancer adware"
X FLooDNeT FLooDeR.exe"Added by the ENDOOL TROJAN!"
X Floppy Master [path to trojan]"Added by the ZONIT-F TROJAN!"
? Flow Go TV flogotv.exe"??"
X flps flps.vbs"Added by the BYRON WORM!"
X flpycntl flpycntl.exe"Added by the CRYPTER.C TROJAN!"
? FLSVCI FLSVCI.exe"??"
Y FltProcess msinet.exe"Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done"
X FlyswatDesktop flydesk.exeAdvertising spyware
U FmctrlTray Fmctrl.EXEGenius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)
X fmnwebassist fmnwebassist.exeAdware popup generator
U FMStart Fmstart.exe"GFI FAXmaker - native fax connector for Microsoft Exchange Server or for networks allows all users to send and receive faxes right from their desktop"
X FMSZ fmsz.exe"Added by the FMSZ TROJAN!"
X fnmwebassist fnmwebassist.exe"WinPL adware"
? Focus Focus.exe"ISDN configuration wizard?"
X Folder Service wssdtu.exe"Added by the MANIFEST TROJAN!"
U Folder View folderview.exe"Folder View enhances the Windows file Explorer by making all folders you need available in a single click"
U FolderClone v*.*.* folderclone.exe"Folderclone backup and synchronization software"
X FolderRaper [path to worm]"Added by the VB.GOZ WORM!"
U FolderShare FolderShare.exe"""FolderShare allows you to create a private peer-to-peer network that will help you to synchronize files across multiple devices and access or share files with colleagues and friends"""
N Folding@home WINFAH.EXEFolding@Home is a distributed computing project which studies protein folding misfolding aggregation and related diseases - must be running in order to access the internet to upload to the servers. Available via Start -> Programs
N FoneSyncSystemTray FoneSyncSystemTray.exeSystem Tray icon for Nokia FoneSync utility for the 7160/7190 mobiles. Useful to send data from/to the cell phone and the computer. You can use it to backup data or even to input data through the computer keyboard (which naturally is much more comfortable). Run manually when required
X Font Viewer fontviewer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X FontFix fontfix.exeAdded by an unidentified VIRUS WORM or TROJAN!
N fontnav FontNav.exe"Font Navigator from Bitstream Inc. - a font management utility"
X FontsLoader ldfnt32.htaUnidentified malware
X FONTVIEW FONTVIEW.EXE"Added by the OPASERV.T WORM!"
U FooBar 1.0 FooBar.exe"FooBar - ""combines fifteen high-quality productivity tools in a single toolbar that floats on your desktop or runs in the Windows task bar"""
X foobin lptt01 adaware.exe"RapidBlaster variant (in a ""foo1"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X foobin ml097e adaware.exe"RapidBlaster variant (in a ""foo1"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list