Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
Y FoolProof fpwinldr.exe"FoolProof Security PC security software from SmartStuff"
Y FoolProofSweep ??"Part of FoolProof Security PC security software from SmartStuff"
N Forbes ForbesAlerts.exeForbes Business News Alerts - displays business news headlines in a little window on the screen
X ForceShow rundll32.exe QaBar.dll ForceShowBar"AdultLinks.QBar parasite related! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""QaBar.dll"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
N Forget Me Not AGRemind.exe"Calendar reminder part of Broderbund's American Greetings? CreataCard?"
Y FortiClient FortiClient.exe"Fortinet security systems are the new generation of real time network protection systems"
U Fortis Secure Layer Config cseinst.exeFortis Bank Home Banking part. Installed during the installation of the software necessary to run the Home Banking. According to Fortis Bank this will not in any way be harmful to the system or relay system information
N FotoStation Easy AutoLaunch FotoStation Easy AutoLaunch.exeInstalled with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either
U Foul PX FoulPX.exeFoul PX Optusnet usage stat checker
U FourthDay FourthDay.exe"The Fourth Day - ""astronomical clock and almanac for your system tray"""
X FoWilCo fowilco.exe"Added by the WOOTBOT.CR WORM!"
X foxdh foxdhend.exe"Added by the MENGHUAN TROJAN!"
X foxdh foxdh.exe"Added by the GWGHOST-Q TROJAN!"
X foxrxjh foxrxjh.exe"Added by the GWGHOST-T TROJAN!"
X foxwudy9912 service.exe"Added by the BANCOS-BT TROJAN!"
Y FP Loader loadfp.exe"FoolProof Security - PC security software from SmartStuff"
? FPWGMWZD FPWGMWZD.exe"??"
N Fpx mnmsrvc.exeRemote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations
X fqor stub_113_4_0_4_0.exe"TargetSaver adware"
X FrameWork 2.5 FrameWork.exe"Added by the RBOT-FMW WORM! Note - can terminate AV related processes"
X France svchost.exe"Added by the MIMAIL.L WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
U Fraps fraps.exeFraps Real-Time Video Capture software
N Free Download Manager fdm.exe"""Free Download Manager"" - see here"
? Free Downloads Monitor fdcmon.exe"??"
N Free DVD Direct FreeDVDDirect.exe"Free DVD Direct - provides a program to access a peer–to–peer (P2P) file–sharing network (see here)"
U Free Ram Optimizer fro.exe"Free Ram Optimizer monitors your memory and frees up ram if it falls below a certain minimum. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/ME. See this article and make up your own mind"
N Freebie Notes FreebieNotes.exe"Freebie Notes by Power Soft - create electronic notes (stickers)"
N FreeCall FreeCall.exe"FreeCall - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
Y Freedom Freedom.exe"Freedom Internet Security & Privacy - anti-virus personal firewall and parental control. It also blocks ads safeguards your personal information encrypts your passwords and much more. No longer available for sale"
U FreeMem Pro FMEMPRO.EXE"FreeMem Pro - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U FreeMemVn2 FreeMem.exe"FreeMem - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X FreeMP3download rundll32.exe MSA64CHK.dll DllMostrar"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
U FreeRAM XP FreeRAM XP Pro *.exe"FreeRAM XP Pro - memory optimizer where * represents the version. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U FreeRAM XP FreeRAM XP Pro.exe"FreeRAM XP Pro - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X freestyle lockx.exe"Added by the RBOT-ATH WORM!"
U freesurfer fs20.exe"EMS Free Surfer mk II - pop-up stopper"
X freexstyle lockbar.exe"Added by the LOXBOT.D WORM!"
X freexstyle lockbr.exe"Added by the LOXBOT.C WORM!"
X freinst pgs.exe"WinSpyControl spyware remover - not recommended see here"
U Fresh Desktop freshdesktop.exe"Fresh Desktop is a utility that lets you manage vast collections of wallpapers for your desktop with ease. When run on bootup it changes the desktop wallpaper at startup or at specified intervals"
N freshclam freshclam.exe"Auto update agent of the open source Clamwin virus scanner"
? frguk shdrkmck.exe"??"
? FridaysInHellInstaller FridaysInHellInstaller.exe"??"
X FriendlyType lsass.exe"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
X FriendlyTypeName services.exe"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process which should not appear in Msconfig/Startup!"
X FriendlyTypeName winlogon.exe"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
N FriendlyWebQuick-Launch SELFCERT.EXEselfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
U FRISK FP-Scheduler F-Sched.exe"Scheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis"
? FRITZ!DSL Startcenter StCenter.exe"FRITZ! ISP software ""StartCenter"" User interface that allows you to manage tweak and diagnose many aspects of your internet connection - is it required?"
U FRITZ!webProtect FwebProt.exeFirewall included in FRITZ! ISP DSL software
N Fromine WinPopup winpopup.exeInstant Messenger program
X froody timoty.exeAdded by an unidentified malware
X Frsk frsk.exeUnidentified adware downloader trojan
X frun derc32xz.exeAdded by an unidentified TROJAN!
Y FRW_EXE FRW.EXE"ConSeal Signal9 firewall - now McAfee Personal firewall"
Y frxmxins frxmxins.exeATI 3D Studio MAX/VIZ driver
X FS Agent fagent.exe"Added by the VOLVER-B TROJAN!"
X FS6519 FS6519.dll.vbs"Added by the SOLOW.B WORM!"
Y fsaa fsaa.exe"F-Secure antivirus Authentication Agent - creates and stores private keys used by a client to access servers"
N FSCBoss FSCBoss.exeFree Store Club shop online software
? FSDPSRV FSDPSRV.exe"??"
X FSH svcnva.exe"Malware detected by Ewido Security Suite as TrojanDownloader.Delf.ks"
U fsp fsp.exe"Folder Shield - hide entire directories and thus prevent access by anyone else to your personal files and documents"
Y fspr FolderShield.exe"Folder Shield - hide personal files and folders"
N FSScrCtl FSScrCtl.exeScreen saver control applet used by the "Stardust Screen Saver Toolkit" and "SolidWorks Screen Saver"
U fsserv fserv.exe"Farsighter Server - monitors a remote computer invisibly by streaming video to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time"
X fstsvc rundll32.exe fstsvc.dllstart"Added by the AKBOT-AA WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""fstsvc.dll"" file is found in %System%"
X FSW FSW.exe"FreeScratchAndWin parasite"
U FSWebServer fsws.exe"Easy File Sharing Web Server is a Windows program that allows you to host a secure peer-to-peer and web-based file sharing system without any additional software or services"
X ftk ftkclean.exe"FlashEnhancer adware"
X FtkCPY ftkcpy.exe"FlashEnhancer adware"
U FtLnSOP_setup FtLnSOP.exeFujitsu scanner utility
U FTMSFLT(USB) FTMSFLTU.EXEFujitsu's Touch Panel Message Notifier
X FTP FOR WINDOWS ftpwin32.exe"Added by a variant of the RBOT WORM!"
X FTPGraber FTPGraber.exe"Added by the DLOADER-DT TROJAN!"
N FTPManager FTPDM.exe"""Robust FTP is a Windows-based file transfer client application that transfers files between a user's local PC and another remote computer system connected via a modem and telephone lines or by a local-area network (with upload transfer resume and download transfer resume)"". Can be started manually"
U Ftpqueue Ftpsched.exe"Part of WS_FTP Pro from Ipswitch. Queueing facility for scheduling FTP transfers"
? FtpServer.exe FtpServer.exe"Part of Sharpdesk from Sharp Electronics Corp. ""An easy to use desktop-based personal document management application that lets users browse edit search compose process and forward both scanned and native electronic documents"". Is it required?"
U ftutil2 rundll32.exe ftutil2.dll SetWriteCacheMode"Related to Promise Technology's FastTrak SX4030/4060 PCI ATA Raid 5 controller (and possibly others)"
X FuckD3w4 FuckD3w4.exe"Added by the BRONTOK-DI WORM!"
X Fucker fucker.vbs"Added by the CATCHER-A WORM!"
U Fujitsu Hotkey Utility IndicatorUty.exeFujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook eg when you press the hotkey for muting the sound a loudspeaker icon with a cross on it is displayed
U Fujitsu Menu FjMnuIco.exe"From the ""Fujitsu Menu"" tray icon you have instant access to the Control Panel Tablet pc keyboard Tablet and pen settings Fujitsu display controls brightness control sounds and audio devices capture screen capture window organize favorites power options printers and faxes LCD brightness MIN LCD brightness MAX Enable/disable Button Panel and the Fujitsu menu settings which are customizable"
X fukerservice fukerz.exe"Added by a variant of the RBOT WORM!"
X FUKLBAR bar.exe"PurityScan/Clickspring adware"
X Fun Fun.exe"Added by the COIDUNG-A WORM!"
N FusionHdtvTray FusionHdtvTray.exe"FusionTrayAgent - main executable for DVICO FusionHDTV software. It adds an icon to system tray that allows you to easily access Fusion HDTV software"
U FusionRC FusionRC.exe"Remote control manager for DVICO FusionHDTV"
U FusionRemote FusionRc.exe"Remote control manager for DVICO FusionHDTV"
N FusionTrayAgent FusionHdtvTray.exe"FusionTrayAgent - main executable for DVICO FusionHDTV software. It adds an icon to system tray that allows you to easily access Fusion HDTV software"
X fvek fvek.exe"Added by the DRIVOL-A TROJAN!"
Y FveNotify fveNotify.exe"Windows Vista - BitLocker Drive Encryption Notification Utility. Available with Enterprise and Ultimate versions of Vista ""BitLocker prevents a thief who boots another operating system or runs a software hacking tool from breaking Windows Vista file and system protections or performing offline viewing of the files stored on the protected drive"" - see here"
X FW Manager fwcheck.exe"Added by the DELBOT-H WORM!"
X FWDMON.EXE fwdmon.exe"Added by the PROXY-S TROJAN!"
Y fwenc.exe fwenc.exe"Check Point SecuRemote VPN client - ""dynamic and fixed IP addressing for all ISP services - dial-up cable modem or DSL - the ideal solution for telecommuters and mobile workers"""
X Fwr Command Module fwr.exe"Added by the SDBOT-PP WORM!"
N fwrastrc fwrastrc.exeDial-up software for Friendly Technologies/1NationOnLine free ISP
U fwservice fwservice"eAcceleration Stop-Sign security software related. Previously not recommended see here"
X FX ieloader.exeAdded by the SMALL.RR TROJAN!
U fxredir fxredir.exeCanon MultiPASS fax redirector
X fzg svhost32.exe"Added by the DLOADER.BDK TROJAN!"
X f~a ra32.exe"Added by the CAY TROJAN!"
X g.exe g.exe"Added by the GRAYBIRD.Q TROJAN!"
X G00123 [worm filename]"Added by the BUGBROS WORM!"
X G0mez G0mez.vbs"Added by the GORMLEZ-A WORM!"
X G3 GSMedia3.exe"Malware downloader - detected by Kaspersky as the VB.UX TROJAN!"
? g3dctl g3dctl.exe"??"
X G4G [random filename]Detected as Trojan-Downloader.Win32.VB.fki
U G6FTP Server Tray Monitor G6FTPTray.exe"System Tray monitoring tool for Gene6 FTP Server - ""an advanced FTP server software for Windows developed specifically for security and high performance requirements"""
? GACService GACService.exe"Related to a Gemplus product. What does it do and is it required?"
X gadkgak12 fsafsakx12.exe"Added by the ONLINEG-N TROJAN!"
N Gadu-Gadu gg.exePolish language Instant Messaging client
N Gadwin PrintScreen PrintScreen.exe"Gadwin PrintScreen - utility to capture print or save the current window"
X GAELICUM.EXE GAELICUM.EXE"Added by the PENTA-A TROJAN!"
X gah95on6 gah95on6.exe"ShopAtHome/SAHagent adware"
U gaim gaim.exe"Gaim is an instant messenger client with capability to connect to AIM ICQ MSN Messenger Yahoo IRC Jabber Gadu-Gadu and Zephyr networks"
U Gainward TBPanel.exeConfiguration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
X game shit.exeAdded by the Netclap Gold backdoor TROJAN!
X game patcher.scr"Added by the PSW-ED TROJAN!"
N Game Device JOYUPDRV.EXEGenius game controller profile activator
X Game House GameHouse.exe"Added by the DELF-DRA WORM!"
N GameDrive GDTask.exe"GameDrive from FarStone - virtual CD/DVD drive emulator that allows you to run your PC games without the disc. Available via Start → Programs"
X Games Acceleration svshost.exe"EasySearch adware"
X Games Acceleration [path to trojan]"Added by the SMUTSRCH-A TROJAN!"
X Games Acceleration svshost1.exe"Added by the DLOADR-AWD TROJAN!"
X Games toolbar rundll32.exe [path] tbGame.dll DllShowTB"Topconverting.com180Search ""Games Toolbar"" adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
N GameSpot kontiki.exe"Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops"
U gameutil.exe gameutil.exePart of Redline RegTweak as supplied with Sapphire ATI graphics cards. You can configure different overlclocking settings on a per game basis and this sets those conditions following a re-boot
X gamma svchost.exe"Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
U GammaHotKeys setgamma.exe"Part of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop"
X gangsta gangsta.exe"Detected by Kaspersky as the RIMA.A BACKDOOR! See here"
U GARO Status Monitor cnwism.exePrint monitor for certain Canon printers
X gaSrv gaSrv.exe"Detected by Panda as the DOWNLOADER.ALQ TROJAN! Adware downloader"
X gaSrve gaSrve.exe"Detected by Panda as the DOWNLOADER.ALQ TROJAN! Adware downloader"
X Gate Personal Firewall Systpl.exe"Added by the RBOT.ADC WORM"
N Gateway Extended Warranty GWCares.exeGateway Extended Warranty reminder
X Gator gator.exe"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X Gator eWallet gator.exe"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X Gay_Sexy_** Gay_Sexy_**.exePremium rate adult content dialler (where * is a random char)
U GazelDisplay gsyno.exe"BT Digital Access USB - Gazel ISDN installation System Tray icon"
Y GBMHome7Agent GBMAgent.exe"Genie Backup Manager Home 7 - backup software"
Y GBMLite7Agent GBMAgent.exe"Genie Backup Manager Lite 7 - backup software"
Y GBMPro7Agent GBMAgent.exe"Genie Backup Manager Pro 7 - backup software"
Y GBSpaceMan SpaceMan.exe"GreenBorder - secure your browsing activities on the internet"
U GBTray GBTray.exe"System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users recommended for Win9x/NT/2K users"
X gCac gcac.exe"Added by the TACTSLAY.U TROJAN!"
X gcasDtServ gcasDtServ.exeAdded by an unidentified WORM or TROJAN. Note - this is not related to Microsoft Antispyware which has a process bearing the same name which doesn't appear as a startup
U gcasServ gcasServ.exe"Giant Antipsyware - now superseded by Microsoft's Windows Defender"
X gcasServ realsched.exe"Added by a variant of the TACTSLAY.A TROJAN! Note - this is not the legitimate RealOne Player (realsched.exe) application of the same name"
? GCC Reminder gccrem.exe"Associated with AcraMax Greeting Card Creator. Is it a registration reminder?"
N GCS GrabClipSave.exe"GrabClipSave screen capture tool"
X GDAX [path to backdoor]"Added by the RANKY.K TROJAN!"
X gdcw GDCW.exe"WinAnonymous spyware remover - not recommended see here"
X Gddlib rundll32.exe gddlib.dllstart"Added by the AKBOT.EG WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""gddlib.dll"" file is found in %System%"
X gdien32 gdien32.exe"Added by the SINGU-P TROJAN!"
X gdimx gdimx.exe"MPB-D dialer. Note - provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""gdimx"""
U GDMgr.exe gdmgr.exe"GuardMon is a commercial surveillance software program designed to monitor all forms of user activity on a computer"
N GDrive GDriver.exeFound on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
N Gearbox confsvr.exe"NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here"
N GEARsec gearsec.exeInstalled by Apple Quicktime package - iPod®/iTunes® CDRW support. Can be disabled if you only require Quicktime player
X GEDZAC GEDZAC.exe"Added by the GEMEL WORM!"
X Gekio Startups gnksvc32.exe"Added by the AGOBOT.AFJ WORM!"
N GemStRmW GemStRmW.exeFor a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card start it manually
X gencroot gencroot.exe"Added by the SDBOT-AED WORM!"
U Gene USB Monitor USBMonit.exeMonitors USB ports for insertion of Sandisk USB flashdrives
X general lptt01 general.exe"RapidBlaster variant (in a ""General"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X general ml097e general.exe"RapidBlaster variant (in a ""General"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X Generic host proccess for windows SVCHOSTS.EXE"Added by the SPYBOT-GQ WORM!"
X Generic Host Process SCHOST.EXE"Added by the RBOT-NC WORM!"
X Generic Host Process svchost.exe"Added by the DLOADER-NX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X Generic Host Process camacttiv.exe"Detected by AVG as the CIADOOR.13 TROJAN!"
X Generic Host Process for Win Services mscvs.exe"Added by a variant of the SDBOT WORM!"
X Generic Host Process for Win32 Service svlhost.exe"Added by the WOOTBOT.EX WORM!"
X Generic Host Process for Win32 Service svchost.exe"Added by the SPYBOT.NC WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X Generic Host Process for Win32 Services ntspcv.exe"Added by the SDBOT.S TROJAN!"
X Generic Host Process for Win32 Services intspvc.exe"Added by the DINFOR.D WORM!"
X Generic Host Process for Win32 Services winsvc.exe"Added by the SDBOT-O WORM!"
X Generic Host Process for Win32 Services bazzi.exe"Added by the AHKER.E WORM!"
X Generic Host Process for Win32 Services winsvc32.exe"Added by the SDBOT-P WORM!"
X Generic Host Process for Win32 Services lspsvc.exe"Added by the MUMU.C WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list