Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AOL 9.0 Optimized	AOLClient.exe	"Added by the SPYBOTER.A TROJAN!"
U	AOL Broadband Check-Up	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
N	AOL Companion	companion.exe	"Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process
X	Aol Configuration Loader	aimsng.exe	"Added by the SDBOT-XE WORM!"
?	AOL Fast Start	AOL.exe	"AOL ISP software related. What does it do and is it required?"
X	AOL Instant Messanger	aim.exe	"Added by the SDBOT-YT WORM!"
X	AOL Instant Messengar	aol.exe	"Added by the AGOBOT-FN WORM!"
?	AOL Instant Messenger	AlM.EXE	"That is an L between the A and M
X	Aol Instant Messenger	aolmsg.exe	"Added by the KELVIR.AL WORM!"
X	AOL Instant Messenger 7.213	aim9283.exe	"Added by the SDBOT-ZF WORM!"
X	Aol Instant Messenger Fix	aolfix.exe	"Added by the SDBOT-ABJ WORM!"
X	AOL Messenger	[random filename]	"Added by an unidentified VIRUS
X	AOL Messenger	aolmsngr.exe	"Added by the SDBOT-JF WORM!"
X	AOL Messenger Optimized	AOLOpt.exe	"Added by the AOLOPT TROJAN!"
X	AOL Services Hosts	aolserviceshosts.exe	Added by an unidentified WORM or TROJAN!
U	AOL Spyware Protection	AOLSP Scheduler.exe	AOL's spyware protection program
U	AOL TopSpeedMonitor	aoltsmon.exe	"AOL's TopSpeed web acceleration technology supposedly helps to make web browsing faster. Most important for those users who still access AOL via dial-up"
Y	AolAcsDaemon1	Acsd.exe	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
Y	AolAcsDaemon1	AOLACSD.EXE	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
?	AOLCC	ACCAgnt.exe	"AOL ISP software related
X	AolCon	config.com	"Added by the TAPLAK WORM!"
N	AOLDialer	AOLDial.exe	AOL ISP software dialer - can be activated through a desktop shortcut
N	AolFix	AolFix.exe	"Run on Gateway Astra computers
X	AOLRegKey32	AOREGSVR512.EXE	"Unidentified malware - see here"
X	Aornum	aornum.exe	"Installed along with AOTray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	APC UPS Status	Display.exe	"APC PowerChute Personal Edition status icon"
U	APC_SERVICE	mainserv.exe	"PowerChute� Personal Edition - ""safe system shutdown software with sophisticated power management functions"""
Y	apc_tray	apc_tray.exe	Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
X	APD123	APD123.exe	"PacerD Media/Pacimedia.com adware"
X	Api*.exe [ = random char]	Api*.exe [ = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	Api*32.exe [ = random char]	Api*32.exe [ = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	API32	api32.exe	"Added by the IRCBOT-B TROJAN!"
X	APIClass	lexplore_.exe	"Added by the MSNOPT-A TROJAN!"
X	APIMon	apimonx.exe	Added by the TIBSER.A downloader TROJAN!
X	APIMon	winapix.exe	Added by a variant of the TIBSER.A downloader TROJAN!
X	APIMon	msreg.exe	"Added by the DROPPER.Z TROJAN!"
X	apisvc.exe	apisvc.exe	"Added by a variant of the LAMEBOT TROJAN!"
U	APL	APL.exe	"Sage Software's ACT! The application pre-loader (apl.exe) is a self contained executable that pre-loads the necessary .NET framework and ACT! 2005 assemblies. This pre-loading of assemblies enhances ACT! startup
?	Apmsrv9x	APMSRV9X.EXE	"Intel AnyPoint Wireless II Home Network related. What does it do and is it required?"
U	Apoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
X	App*32.exe [ = random char]	App*32.exe [ = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	App.EXEName	[path to worm].exe	"Added by the BODIRU WORM!"
U	Appcon	vAppCon.exe	"Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established"
X	appconn	appconn.exe	"Added by the CARGAO WORM!"
U	AppExtender	AppExtCB.exe	"Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received"
X	appis.exe	appis.exe	"Added by the AGENT-BC TROJAN!"
Y	Application	mdmsetsp.exe	Aztech Labs modem driver
U	Application Explorer	Naldesk.exe	"Novell Zenworks Application Explorer Executable. ""For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."""
U	Application Explorer	NalView.exe	"Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications"
X	Application Layer Gateway Service	algs.exe	"Added by the LINKBOT.M WORM!"
U	AppPlus	AppPlus.exe	"AppPlus - ""menu bar or tray launcher that docks to your desktop
Y	Apvxd	APVXDWIN.EXE	"Part of Panda Anti-Virus. Required to enable permanent virus protection"
Y	Apvxdwin	APVXDWIN.EXE	"Part of Panda Anti-Virus. Required to enable permanent virus protection"
Y	Apwheel	Apwheel.exe	Wheel support for an Alps mouse
X	apyginapygin	simenu.exe	"Added by the SDBOT.BTR WORM!"
U	AQ3HelperStartUp	AQ3HEL~1.EXE	"ScreenScenes ""Aquatica Water Worlds"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."
X	aqadcup.exe	aqadcup.exe	"Added by the AGENT.BG WORM!"
X	Aqujyjax	[path to file]	"Added by the RANCK-CQ TROJAN!"
X	Aqujyjax	aqujyjax.exe	"Added by the SDBOT-YC WORM!"
X	ara-key	[random filename]	"Added by the ANTINNY WORM!"
X	Archive	archive.exe	"Adware - recognized by Kaspersky antivirus as Trojan-Downloader.Centim.a"
X	ARCHIVE CONTROL	fixupdattr.exe	"Added by the MYTOB.GU WORM!"
N	ARCSolo Recovery	N/A	Backup software by Computer Associates - no longer supported
U	Ardamax Keylogger	akl.exe	"Ardakey B keystroke logger/monitoring program - remove unless you installed it yourself!"
N	ares	ares.exe	"""Ares is a free open source file sharing program that enables users to share any digital file including images
N	areslite	AresLite.exe	"""Ares is a free open source file sharing program that enables users to share any digital file including images
U	Argentum Backup	ab.exe	"Argentum Backup - a small backup program that lets you easily back up your documents and folders"
X	Aritima	aritima.exe	"Added by the ARITIM WORM!"
N	ARMOR2NET	Armor2net.exe	"Related to Armor2net personal firewall (possibly contains or is related to an anti-spyware product known as ArmorWall
N	ARPWRMSG	ARPWRMSG.EXE	"Related to HP and Compaq Desktop PCs. Read this article"
U	Artera	arteraui.exe	"Artera Turbo Internet Accelerator - ""surf faster
?	AS00 Gear511	Gear511.exe	"Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?"
U	AS00_WN511B	WN511B.exe	"Netgear RangeMax NEXT wireless adapter configuration utility"
?	AS00_WPN511	WPN511.exe	"NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup?"
X	ASDPLUGIN	dsldbaccess.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	canada.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	france.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	fullgames.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	100171be.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	100176br.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	adult1.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	Austria.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	belgium nm.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	czech.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	dbaccess.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	dslgeaccess.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	Finland.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	geaccess.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	mexico.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	netherlands.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	turkey.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	uk nm.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	Xadult1.exe	"AsdPlug premium rate adult content dialer variant"
X	ASDPLUGIN	temp532.exe	"AsdPlug premium rate adult content dialer variant"
X	asdx	xwinrpc32.exe	"Added by the AGOBOT.VO WORM!"
N	ASE Scheduler	ASE Scheduler.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	Ashampoo PopUpBlocker	PopUpKiller.exe	"Ashampoo popup blocker
Y	ashAvast	ashAvast.exe	"Part of Avast antivirus"
X	ASHLT	Ashlt.exe	"Ashlt adware"
Y	ashMaiSv	ashmaisv.exe	"Part of Avast! anti-virus software - E-mail scanner"
U	AsioReg	regsvr32.exe ctasio.dll	"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
U	ASK	rundll32.exe [path] ASK.dll rdl	"Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	asl	Aslru.exe	"Added by the BANCOS-CU TROJAN!"
U	Asmw Soft Popups Burner	popups burner.exe	"Popup blocker
X	asnconsole	msasn.exe	"Added by the RBOT.EVU TROJAN!"
X	ASP.NET State Service	csrss.exe	"Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
X	ASP.NET State Service	crsass.exe	"Added by the BANLOAD-M TROJAN!"
X	ASP.NET State Service	servicos..exe	"Added by the DADOBRA-I TROJAN!"
N	asp4tray	asp4tray.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	AspireTimeMachine	acertmb.exe	"System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP
X	assistse	ASSISTSE.EXE	"CnsMin (Chinese Keywords) hijacker related"
X	AST	AST	Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
X	AST	AST	"Added by the VB.AH TROJAN!"
X	AST	AST.exe	"AutoStarter parasite"
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	AStart	AStart	"Added by the VB.AH TROJAN!"
N	asTray	Astray.exe	"Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer"
N	Astro	Astro.exe	Checks for updates to Quicken on a system reboot
N	ASUS Live Update	ALU.exe	ASUS Live Update utility for their motherboards
N	ASUS Probe	AsusProb.exe	ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U	ASUS SmartDoctor	VGAProbe.exe	ASUS video card fan/thermal monitor
U	ASUS TweakEnable	astart.exe	Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N	ASUSKey	V38SHELL.EXE	System tray Icon for quickly changing video modes
U	asustweakenable	ATweak.exe	Asus tweaking utility - for fine tuning the settings of your ASUS display card
N	ASWDP	ASWDP.exe	"MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market"
X	ASWnk	aswnk.exe	Adult content dialler
U	AT-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
X	atapidrv	atapidrv.exe	"Added by the AGOBOT-SL WORM!"
U	Athan	Athan.exe	"Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world"
X	ATI AS Filter	msnse.exe	"Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending the following lines
N	ATI CATALYST System Tray	CLI.exe SystemTray	"System Tray access to ATI's CATALYST� CONTROL CENTER. Note that this has ""SystemTray"" appended to CLI.exe in the ""Command"" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop"
N	ATI DeviceDetect	ATIDtct.EXE	Utility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.