Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	ahui32.exe	ahui32.exe	"Added by the CERTIF-M TROJAN!"
X	Aica	tuaa.exe	"PurityScan/Clickspring adware"
X	Aida	ttuh.exe	"PurityScan/Clickspring adware"
X	Aida	eetu.exe	"PurityScan/Clickspring adware"
U	aiepk	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
N	AIM	aim.exe	"AOL Instant Messenger. If connected to the internet
U	AIM	AIM+.exe	AIM plus - a free add-on to AOL's Instant Messenger for Windows from Big-O Software
X	AIM Instant Message Cookies	[random filename]	"Added by the RBOT-AFV WORM!"
X	Aim Plugin	aimplugin.exe	"Added by the GUAP-F WORM!"
X	AIM reminder	AIM reminder.exe	"Added by the BUDDY TROJAN!"
N	Aim6	AOLLaunch.exe	AOL Instant Messenger - start it when you want to use it
X	AIM95 Startup	aim95.exe	"Added by the AGOBOT.AEE WORM!"
X	aimaol lptt01	aimaol.exe	"RapidBlaster variant (in a
X	aimaol ml097e	aimaol.exe	"RapidBlaster variant (in a
U	aimb.exe	aimb.exe	"IMSufSentinel is a spy program which can record IM conversations
N	AimingClick	AimingClick.exe	"AimingClick from AimingTech. Web searching tool. Available via Start -> Programs"
N	AIMster	??	Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N	AIMWDInstall	AIMWDInstall.exe	"Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	aircity	aircity.exe	"Related to ""Prutect"" malware from e2Give"
X	AKEYNAME	WinServ.exe	"Added by the EVILBOT.C TROJAN!"
U	AKiller	akiller.exe	"Advertising Killer - popup stopper"
X	ala.exe	ala.exe	"Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer"
U	Alarm Manager	Alarm.app.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?	AlarmWatcher	AlarmWatcher.exe	"Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?"
N	Album Fast Start	ABMTSR.EXE	"Scanner software
?	AlcFDMonitor	ALCFDRTM.EXE	"RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?"
?	ALCFDRTM16	ALCFDRTM16.com	"RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?"
X	Alchem	Alchem.exe	"VX2.Transponder parasite updater/installer related"
U	Alcmtr	Alcmtr.exe	"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
U	Alcohol	Alcohol.exe	"Alcohol 120% - CD/DVD emulation/writing/copying software"
U	Alcohol Autorun	Alcohol.exe	"Alcohol 120% - CD/DVD emulation/writing/copying software"
?	Alcom PCL Capture	FMW_PCAP.EXE	"??"
N	AlcWzrd	ALCWZRD.EXE	"RealTek High Definition audio driver related - detects new devices when plugged in
U	AlcxMonitor	Alcxmntr.exe	"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
X	aldefr ere service	tay0x.exe	"Added by the RBOT-XS WORM!"
X	Alevir	Alevir.exe	"Added by the OPASERV-A WORM!"
X	AlevirOld	[worm filename]	"Added by the OPASERV WORM!"
N	Alexa	alexa.exe	"Related to Alexa. Note - collects and stores information about the web pages you view
X	AlexaToolbar	alt.exe	"Reported as the DELF.EB hijacker by Ewido Security Suite"
X	AlfaCleaner	AlfaCleaner.exe	"AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware"
U	AlfaClock Classic	AlfaClock.exe	"AlfaClock from AlfaSoft Research Labs - ""enhances your taskbar clock (tray clock) with fully customizable clock display
?	ALFY Accellerator	AlfyAC~1.exe	"??"
X	ALG.EXE	iexplorer .exe	"Added by the DEMOTRY-B WORM!"
X	ALG32	ALG32.EXE	"Added by the STARTPAGE.K hijacker"
X	ALGU	ALGU.EXE	"Added by the CWS-I TROJAN!"
U	ALi5289	ALi5289.exe	"Related to Uli Integrated Drivers from Uli Electronics Inc"
N	Alias SketchBook Snapshot	ALIASS~2.EXE	Screen-capture utility for Alias Sketchbook
N	AlienAutopsy	Test_BS.exe	"Alienware computer technical support software"
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
?	AliUSBfix	GREENMK.exe	"May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?"
X	Alive SYstem	scchost.exe	"Added by the TOFDROP-B TROJAN!"
X	Alive SYstem	scchostc.exe	"Added by the TOFDROP-B TROJAN!"
X	alkasr	��.exe	"Added by the BALKART TROJAN!"
U	All Aboard Status	stswin.exe	"All Aboard! Internet Connection Sharing status icon"
X	All Sea screen saver	TaskTray.exe	"""Free screensaver""
X	All Sea web link	FWLink.exe	"""Free screensaver""
N	AllerCalc	AllerCalc.exe	"AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually"
U	AllSeeingEye	ase.exe	"All-Seeing_Eye security software - ""monitors everything that takes place on your computer
U	allSnap	allSnap.exe	"""allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"""
U	AllToTray	ALLTOTRAY.EXE	"AlltoTray from DNTSoft - minimize any program to your System Tray"
X	Alogrithm Link Queue	alq.exe	"Added by a variant of the SDBOT WORM!"
U	Alogserv	Alogserv.exe	"From McAfee VirusScan for logging scanning activities. In some cases
U	ALPass	ALPass.exe	"ALPass password manager"
Y	Alps Electric USB Server	Monserv.exe	"Alps Electric USB Server - required according to this article"
U	AlpsPoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?	ALServ	ALServ.exe	"Altec Lansing AMS speaker related. What does it do and is it required?"
X	Altnet	points manager.exe	"Altnet TopSearch adware"
X	AltnetPointsManager	points manager.exe	"Altnet TopSearch adware"
U	AltoMB_service	AltoMBsrv.exe	"Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U	ALTOOLS	AccessL.exe	"ALTools family of PC utilities"
X	AltPayments	AltPayments.exe	"WeirdOnTheWeb adware"
U	ALUAlert	ALUNotify.exe	Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
N	Aluria Security Center	SecurityCenter.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	Aluria's Pop-Up Stopper	eps.exe	"Aluria Pop-Stopper"
N	Aluria's Spyware Eliminator	ASE.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	"Always On Top Maker - utilty to enable an application to always be displayed ""on top"" of others on the desktop"
N	AlwaysReady Power Message APP	ARPWRMSG.EXE	"Related to HP and Compaq Desktop PCs. Read this article"
X	AmazingTens	AmazingTens.exe	Premium rate adult content dialler
U	AMD PowerNow!	GemBack.exe	"America Online . Tray Icon	aoltray.exe	Puts AOL icon in System Tray (. denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N	AME_CSA	"rundll32 amecsa.cpl	RUN_DLL"
U	AModemLockDown	ModemLockDown.exe	"ModemLockDown - allows you to supervise internet access by disabling the modem
Y	Amon	AMON.EXE	"Monitoring part of Eset's NOD32 virus-scanner"
Y	Amonitor	amon.exe	"Tiny Personal Firewall"
U	AMP WinOFF	winoff.exe	"WinOFF is "" a utility designed to shut down Windows computers automatically
N	AMSN	amsn.exe	"aMSN Messenger is a multiplatform MSN messenger clone"
X	amsn	amsn.exe	"Added by the BANKER-BNZ TROJAN!"
N	Anapod Manager	anamgr.exe	"Anapod Explorer ""is the most advanced Windows iPod software available
X	anbv32	nabv32.exe	"Added by the TITOG.C WORM!"
Y	ANIWZCS2Service	WZCSLDR2.exe	"ALPHA Networks wireless driver"
?	ANIWZCSService	WZCSLDR.exe	D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
?	AnnotateCheck	AnnCheck.exe	"Genius Wizard Pen Tablet driver related. Is it required?"
N	Announcements	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N	Anntext	Anntext.exe	Caere Pagekeeper text annotation server
U	Anonymizer Total Net Shield	AnonTns.exe	"Anonymizer Total Net Shield"
U	ANONYMIZER_SPYWAREKILLER	SpyWareKiller.exe	"Anonymizer Spyware Killer"
U	ANONYMIZER_SPYWAREKILLER	AnonAntiSpyware.exe	"Anonymizer Spyware Killer"
U	Another Internet Explorer Popup Killer	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
X	ansjava	[path to worm]	"Added by the RANDON-AN WORM!"
X	Anskya	PYSKY.NET.exe	"Added by the DLOADER-MW TROJAN!"
X	Answer Problem	dSAFsqs.exe	"Added by the SDBOT-SC WORM!"
U	AnswerTool	AnswerTool.exe	"AnswerTool - save your E-mail replies in AnswerTool
X	Anti Spam Service	spamsvc.exe	"Added by the MYTOB-BK WORM!"
N	Anti-Blaxx Manager	Anti-Blaxx.exe	"Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives"
U	Anti-keylogger check	antikey.exe	"Anti-keylogger - protects against keylogger programs monitoring your keystrokes"
U	Anti-Trojan-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
X	Anti-Virus Product Sync	[unprintable character][3 characters]log.exe	"Added by the KEDEBE.D WORM!"
X	Anti-Virus Update Scheduler	[path to trojan]	"Added by the SPAMMIT-A TROJAN!"
X	Anti-Virus Update Scheduler	winsp3.exe	"Malware - recognized by Kaspersky antivirus as TrojanProxy.Agent.fp - A Proxy Trojan is a backdoor which allows a remote hacker to connect to other systems via the compromised system"
X	Anti-Virus Update Scheduler V1.39.12R	[path to trojan]	"Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe
U	antidialer.co.uk	Dialer_Watcher.exe	"Dialer_Watcher is an application that allows you to detect Dialers on your computer"
U	AntiPopUp	AntiPopUp.exe	"AntiPopUp for IE - pop-up stopper"
X	Antivir	svchst.exe	"Added by the RAGRUK-A TROJAN!"
Y	AntiVir XP	AVwin.exe	"AntiVir� PersonalEdition Classic - antivirus"
X	Antivirus	av.exe	"Added by the SINKIN TROJAN! Resets IE start page to realphx.com"
X	Antivirus	maja.exe	"Added by the NETSKY.H WORM!"
X	Antivirus	iexpl0res.exe	Added by an unidentified WORM or TROJAN!
X	AntiVirus	kaspery.exe	"Added by a variant of the RBOT WORM!"
X	Antivirus Installer	[path to trojan]	"Added by the BADGENT-A TROJAN!"
X	antivirus32	antivirus.exe	"Added by the SPYBOT.KAI WORM!"
X	AntivirusGold	AntivirusGold.exe	"AntivirusGold malware"
?	AntiVirusProtection	qumk.exe	"??"
X	antiware	elite*32.exe [* = random char]	"Added by the DLOADER-HW TROJAN!"
U	AntiWindowsMessenger	AntiMsMsg.exe	"Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory"
X	anti_troj	anti_troj.exe	"Added by the LODEAR.D TROJAN!"
Y	AnVir	AnVir.exe	"AnVir Task Manager - protects computer against viruses and manages running processes and startup files"
Y	AnVir Task Manager	AnVir.exe	"AnVir Task Manager - protects computer against viruses and manages running processes and startup files"
U	anvshell	anvshell.exe	System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
U	Any To-Do List	anytodo.exe	"Any To-Do List ""the ultimate software solution to keep yourself organized and reminded"""
?	anycom bluetooth	ftflauncher.exe	"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
U	AnyDVD	AnyDVD.exe	"AnyDVD - descrambles DVD-Movies automatically in the background and the DVD appears unprotected and region code free. Also removes prohibited operations from the DVD such as skipping adverts - hence the ""U"" recommendation"
N	AO Tray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.