Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X AntiVirus Process virprot.exe"Added by a variant of the SDBOT WORM!"
X Antivirus Protection Services ccapp2.exe"Added by the RBOT.EXI WORM!"
X AntiVirus Update updates.exe"Added by the RBOT-JF WORM!"
X AntiVirus Update antivirus.exe"Added by the RBOT-IF WORM!"
X Antivirus-2008.exe Antivirus-2008.exe"Antivirus 2008 rogue security software - not recommended. Detected by Sophos as the FAKEAV-BK TROJAN!"
X antivirus-2008pro.exe antivirus-2008pro.exe"Antivirus 2008 PRO rogue security software - not recommended. Detected by Sophos as the FAKEAV-AW TROJAN!"
X Antivirus-Golden Antivirus-Golden.exe"Antivirus-Golden misleading security software - not recommended see here"
X Antivirus2008y antvrs.exe"Antivirus 2008 rogue security software - not recommended see here"
X antivirus32 antivirus.exe"Added by the SPYBOT.KAI WORM!"
X AntivirusGold AntivirusGold.exe"AntivirusGold malware"
X AntiVirusPro AntiVirusPro.exe"AntiVirusPro misleading security software - not recommended see here"
X AntiVirusProMFC Antivirus Pro.exe"AntiVirusPro misleading security software - not recommended see here"
? AntiVirusProtection qumk.exe"??"
X AntiVituS Base.exe"Added by the BAS.A WORM!"
X antiware elite***32.exe [*** = random char]"Added by the DLOADER-HW TROJAN!"
U AntiWindowsMessenger AntiMsMsg.exe"Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory"
X anti_troj anti_troj.exe"Added by the LODEAR.D TROJAN!"
Y AnVir AnVir.exe"AnVir Task Manager - protects computer against viruses and manages running processes and startup files"
Y AnVir Task Manager AnVir.exe"AnVir Task Manager - protects computer against viruses and manages running processes and startup files"
U anvshell anvshell.exeSystem Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
U Any To-Do List anytodo.exe"Any To-Do List ""the ultimate software solution to keep yourself organized and reminded"""
? anycom bluetooth ftflauncher.exe"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
U AnyDVD AnyDVD.exe"AnyDVD - descrambles DVD-Movies automatically in the background and the DVD appears unprotected and region code free. Also removes prohibited operations from the DVD such as skipping adverts - hence the ""U"" recommendation"
U AnyDVD AnyDVDtray.exe"System Tray access to AnyDVD from SlySoft - which descrambles DVD-Movies automatically in the background and the DVD appears unprotected and region code free. Also removes prohibited operations from the DVD such as skipping adverts"
U AnyTime Atw.exe"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar to-do list and address book are combined in a familiar interface with hundreds of printable calendars detailed expense reports and a full range of programmable alarms"""
U AnyTime Organizer AtDem.exe"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar to-do list and address book are combined in a familiar interface with hundreds of printable calendars detailed expense reports and a full range of programmable alarms"""
U AnyTime Organizer Atw.exe"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar to-do list and address book are combined in a familiar interface with hundreds of printable calendars detailed expense reports and a full range of programmable alarms"""
N AO Tray AOTray.ExeSystem Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Y aol avp.exe"AOL's Active Virus Shield (by Kaspersky) - found in an AOLActive Virus Shield sub-directory"
X AOL 9.0 Optimized AOLClient.exe"Added by the SPYBOTER.A TROJAN!"
U AOL Broadband Check-Up matcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city county etc and gets written to a log file"". The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in ""add/remove programs"" some help menus in help and support will not be available. You decide"
N AOL Companion companion.exePart of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process and is installed for ease of use
X Aol Configuration Loader aimsng.exe"Added by the SDBOT-XE WORM!"
? AOL Fast Start AOL.exe"AOL ISP software related. What does it do and is it required?"
X AOL Instant Messanger aim.exe"Added by the SDBOT-YT WORM! Note - this is not the popular AOL Instant Messenger utility"
X AOL Instant Messengar aol.exe"Added by the AGOBOT-FN WORM!"
X AOL Instant Messenger AlM.EXE"Added by unidentified malware. Note - there ia a lower case ""L"" between the A and M in the filename"
X Aol Instant Messenger aolmsg.exe"Added by the KELVIR.AL WORM!"
X AOL Instant Messenger aimsgr.exe"Added by the IRCBOT.N TROJAN!"
X AOL Instant Messenger 7.213 aim9283.exe"Added by the SDBOT-ZF WORM!"
X Aol Instant Messenger Fix aolfix.exe"Added by the SDBOT-ABJ WORM!"
X AOL Messenger [random filename]Added by an unidentified VIRUS WORM or TROJAN!
X AOL Messenger aolmsngr.exe"Added by the SDBOT-JF WORM!"
X AOL Messenger Optimized AOLOpt.exe"Added by the AOLOPT TROJAN!"
X AOL Services Hosts aolserviceshosts.exeAdded by an unidentified WORM or TROJAN!
U AOL Spyware Protection AOLSP Scheduler.exeAOL's spyware protection program
U AOL TopSpeedMonitor aoltsmon.exe"AOL's TopSpeed web acceleration technology supposedly helps to make web browsing faster. Most important for those users who still access AOL via dial-up"
Y AolAcsDaemon1 Acsd.exeAOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
Y AolAcsDaemon1 AOLACSD.EXEAOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
? AOLCC ACCAgnt.exe"AOL ISP software related file located in a ""AOL Computer Check-Up"" folder. What does it do and is it required?"
X AolCon config.com"Added by the TAPLAK WORM!"
N AOLDialer AOLDial.exeAOL ISP software dialer - can be activated through a desktop shortcut
N AolFix AolFix.exeRun on Gateway Astra computers and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once
X AOLRegKey32 AOREGSVR512.EXE"Unidentified malware - see here"
? AOLSAV AOLAgent.exe"AOL ISP related. What does it do and is it required?"
X AOLStart AOLStart.exe"Added by the KRAIMER.12 TROJAN!"
X aolupdater.exe aolupdater.exe"Added by a variant of the IRCBOT TROJAN!"
X Aornum aornum.exe"Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware"
N AOTray AOTray.ExeSystem Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
X aouei sysrtmvs.exe"Chivio dialer"
Y APC UPS Status Display.exe"APC PowerChute® Personal Edition status icon"
U APC_SERVICE mainserv.exe"APC PowerChute® Personal Edition - ""safe system shutdown software with sophisticated power management functions."" Appears as a service in XP/Vista and under the ""RunServices"" registry key in Win98"
Y apc_tray apc_tray.exePart of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
X APD123 APD123.exe"PacerD Media/Pacimedia.com adware"
X Api**.exe [* = random char] Api**.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X Api**32.exe [* = random char] Api**32.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X API32 api32.exe"Added by the IRCBOT-B TROJAN!"
X APIClass lexplore_.exe"Added by the MSNOPT-A TROJAN!"
X APIMon apimonx.exeAdded by the TIBSER.A downloader TROJAN!
X APIMon winapix.exeAdded by a variant of the TIBSER.A downloader TROJAN!
X APIMon msreg.exe"Added by the DROPPER.Z TROJAN!"
X apisvc.exe apisvc.exe"Added by a variant of the LAMEBOT TROJAN!"
U APL APL.exe"Sage Software's ACT! The application pre-loader (apl.exe) is a self contained executable that pre-loads the necessary .NET framework and ACT! 2005 assemblies. This pre-loading of assemblies enhances ACT! startup view load and dialog load times in some areas of the application"
? Apmsrv9x APMSRV9X.EXE"Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required?"
U Apoint Apoint.exeTouchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
X App**32.exe [* = random char] App**32.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X App.EXEName [path to worm].exe"Added by the BODIRU WORM!"
U Appcon vAppCon.exe"Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established"
X appconn appconn.exe"Added by the CARGAO WORM!"
U AppExtender AppExtCB.exe"Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received"
X appis.exe appis.exe"Added by the AGENT-BC TROJAN!"
N AppleSyncNotifier AppleSyncNotifier.exe"From WinPatrol PLUS by BillP Studios - ""This file installs with iTunes and is used when syncing your iPhone iTouch iPod etc."" See here for more information"
X AppletINIT INITIATE.EXE"Added by the AGOBOT.XV TROJAN!"
Y Application mdmsetsp.exe"Aztech Labs modem driver"
X Application Adapter abvsvc.exe"Added by the CHECKOUT WORM! See here"
U Application Explorer Naldesk.exe"Novell Zenworks Application Explorer Executable. ""For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."""
U Application Explorer NalView.exe"Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications"
U Application Launcher Application Launcher.exeApplication launcher from the Sony Ericsson PC Suite for their mobile phones
X Application Layer Browser abgsvc.exe"Added by the ULPM.FX TROJAN!"
X Application Layer Browser apnsvc.exe"Added by the CHECKOUT WORM! See here"
X Application Layer Gateway Service algs.exe"Added by the LINKBOT.M WORM!"
X Application Layer Scheduler agtsvc.exe"Detected by PCTools as the IRCBOT.BJJ TROJAN! See here"
X Application Layer Services avrsvc.exe"Detected by PCTools as the IRCBOT.BJM TROJAN! See here"
X Application Manager acnsvc.exe"Added by a variant of the IRCBOT TROJAN!"
X ApplicationProtocolRun smsbvl32.exe"Added by the IRCBOT-CX TROJAN!"
U AppPlus AppPlus.exe"AppPlus - ""menu bar or tray launcher that docks to your desktop floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs Websites e-mail addresses or folders (which open in the AppPlus Menu System)"""
Y Apvxd APVXDWIN.EXE"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y Apvxdwin APVXDWIN.EXE"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y APVXDWIN ClShield.exe"""Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam spyware dangerous or time-wasting content phishing scams hackers and intruders"""
Y Apwheel Apwheel.exeWheel support for an Alps mouse
X apyginapygin simenu.exe"Added by the SDBOT.BTR WORM!"
U AQ3HelperStartUp AQ3HEL~1.EXE"ScreenScenes ""Aquatica Water Worlds"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X aqadcup.exe aqadcup.exe"Added by the AGENT.BG WORM!"
Y Aqua Dock Aqua Dock.exe"Aqua Dock - 'free program that allows you to have an ""OS X"" style nice animated launchbar/taskbar on your screen that reacts to your mouse when you mouse over it. Users can customize the look of each item on the dock and set various animation options for when the mouse is over an item on the dock. It is very easy to configure'"
X Aqujyjax [path to file]"Added by the RANCK-CQ TROJAN!"
X Aqujyjax aqujyjax.exe"Added by the SDBOT-YC WORM!"
X ara-key [random filename]"Added by the ANTINNY WORM!"
? ArabLionZ Drive ArabLionZ.Drive.exe"ArabLionZ Drive - part of ArabLionZ XP Tools. What does it do and is it required?"
Y ArcaCheck ArcaCheck.exe"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
X arcaderockstar arcaderockstar32.exe"Arcade Rockstar (now Gamevance) - free arcade games and prize tournaments. The program itself is clean but the TOS and privacy statement say that you agree to allow the program to track/report your surfing and put popup advertising on your computer"
X Archive archive.exe"Adware - detected by Kaspersky as the CENTIM.A TROJAN!"
X ARCHIVE CONTROL fixupdattr.exe"Added by the MYTOB.GU WORM!"
N ARCSolo Recovery N/ABackup software by Computer Associates - no longer supported
U Ardamax Keylogger akl.exe"Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!"
N ares ares.exe"""Ares is a free open source file sharing program that enables users to share any digital file including images audio video software documents etc"""
N areslite AresLite.exe"""Ares is a free open source file sharing program that enables users to share any digital file including images audio video software documents etc"""
U Argentum Backup ab.exe"Argentum Backup - a small backup program that lets you easily back up your documents and folders"
X Aritima aritima.exe"Added by the ARITIM WORM!"
U ARMOR2NET Armor2net.exe"Related to Armor2net personal firewall (possibly contains or is related to a product known as ArmorWall - which is a known rogue see here - hence the ""U"" recommendation)"
X aromis aromis.exe"Added by the NUWAR.JQ WORM!"
N AROReminder aro.exe"Advanced Registry Optimizer - ""scan identify clean and repair errors in your Windows registry with a single click"". Reminder that states that you are in trial mode"
N ARPWRMSG ARPWRMSG.EXE"Related to HP and Compaq Desktop PCs. Read this article"
U Artera arteraui.exe"Artera Turbo Internet Accelerator - ""surf faster boost download speed"". Only required if you find it helps improve your performance"
? AS00 Gear511 Gear511.exe"Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?"
N AS00_Gear511 Gear511.exeNetgear wireless LAN configuration utility
U AS00_WN511B WN511B.exe"Netgear RangeMax NEXT wireless adapter configuration utility"
? AS00_WPN511 WPN511.exe"NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup?"
X ASDPLUGIN dsldbaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN canada.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN france.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN fullgames.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN 100171be.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN 100176br.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN adult1.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Austria.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN belgium_nm.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN czech.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN dbaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN dslgeaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Finland.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN geaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN mexico.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN netherlands.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN turkey.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN uk_nm.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Xadult1.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN temp532.exe"AsdPlug premium rate adult content dialer"
X asdsaxcxz13 dasxcsx13.exe"Added by the LEGMIR-ARF TROJAN!"
X asdx xwinrpc32.exe"Added by the AGOBOT.VO WORM!"
N ASE Scheduler ASE Scheduler.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU the well known adware company see here and here"
Y Ashampoo FireWall FireWall.exe"Ashampoo FireWall Free version"
Y Ashampoo FireWall PRO FireWall.exe"Ashampoo FireWall PRO version"
U Ashampoo PopUpBlocker PopUpKiller.exe"Ashampoo popup blocker part of Magical Security (was Privacy Protector Plus)"
Y ashAvast ashAvast.exe"Part of Avast antivirus"
Y ashDisp ashDisp.exe"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner right-click access to other options and event notifications"
X ashDsp.exe ashDsp.exe"Added by a variant of the SDBOT WORM!"
X ASHLT Ashlt.exe"Ashlt adware"
Y ashMaiSv ashmaisv.exe"Part of Avast! anti-virus software - E-mail scanner"
X Asicfc icfca.exe"Added by the AGENT.AAJE WORM!"
U AsioReg regsvr32.exe ctasio.dll"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
U AsioThk32Reg rregsvr32.exe ctasio.dll"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
U ASK rundll32.exe [path] ASK.dll rdl"Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X asl Aslru.exe"Added by the BANCOS-CU TROJAN!"
U ASM ASMonitor.exe"Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses spyware and other dangers and learn what steps you can take to improve your protection"
U Asmw Soft Popups Burner popups burner.exe"Popup blocker part of Asmw Soft PC Optimizer"
X asnconsole msasn.exe"Added by the RBOT.EVU TROJAN!"
X ASocksrv SocksA.exe"Added by the VB.CBW WORM!"
X asp-srvc asp-srvc.exe"Added by the AGOBOT-KG WORM!"
X ASP.NET State Service csrss.exe"Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X ASP.NET State Service crsass.exe"Added by the BANLOAD-M TROJAN!"
X ASP.NET State Service servicos..exe"Added by the DADOBRA-I TROJAN!"
N asp4tray asp4tray.exeSystem Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y AspireTimeMachine acertmb.exeSystem recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP allowing you to restore a PC back to a working state with minimal re-entry
X asrupdate.exe asrupdate.exe"Added by the VB.ATZ TROJAN!"
X assistse ASSISTSE.EXE"CnsMin (Chinese Keywords) hijacker related"
X AST AST"Added by the VB.AH TROJAN!"
X AST AST.exe"AutoStarter parasite"
U ASTART astart.exeASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X AStart AStart"Added by the VB.AH TROJAN!"
N asTray Astray.exe"Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list