Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X olpr olpr.exe"Added by the DWNLDR-GWQ TROJAN!"
N OLPSYNCH OlpSynch.exe"Related to Offline Course Player from Element K Corp. Provider of the Technology Compliance Management and Business training content for effective programs"
X Olympic IE4321.exeAdult content premium rate dialer - also detected as SMALL.CZ
N OM2_Monitor FirstStart.exe"Olympus Master 2 - digital camera management tools"
N OM2_Monitor MMonitor.exe"Olympus Master 2 - digital camera management tools"
X Omf4 OMF4.EXE"Added by the FREEMEGA TROJAN!"
N OmgStartup omgstartup.exeSony program called OpenMG Jukebox - player and music organizer
U OmniHTTPd ohttpd.exe"OmniHTTPd web server from Omnicron"
N OmniPage Opware32.exe"Part of OmniPage from Nuance (was Scansoft) - ""the fastest easiest way to turn paper documents into digital files you can edit"". Links Word via OLE with OmniPage. If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page"". Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs"
U OmniPass scureapp.exe"OmniPass from Softex Inc. - secure password management software"
N OM_Monitor FirstStart.exe"Olympus Master 1 - digital camera management tools"
N OM_Monitor Monitor.exe"Olympus Master 1 - digital camera management tools"
U On Screen Display OSD.EXEBy Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume etc. Nice but not required if you don't adjust things regularly - can also freeze
X once help.exe"Identified as the DELF.LF by Ewido Security Suite"
N One Touch Monitor OneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N One Touch Monitor 1tou~2.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N One Touch Monitor ONETOU~2.EXEFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
Y OneCareUI winssnotify.exe"Related to Windows OneCare Live from Microsoft"
U OneNote 2007 Screen Clipper and Launcher ONENOTEM.EXEONENOTEM.EXE is a part of the note taking program that ships with Microsoft Office 2007. It's required for the side note windows to work
N OneTouch Monitor OneTouchMon.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N OneTouchMonitor OneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N OneTouchMonitor 1tou~2.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N OneTouchMonitor ONETOU~2.EXEFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N ONETOU~2 OneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N ONETOU~2 1tou~2.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N ONETOU~2 ONETOU~2.EXEFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X Onflow onflow.exeOnflow is a internet company that offers an online advertising program. Not required - uninstall
U OnfolioStorage onfserv.exe"""Onfolio is the complete solution for collecting organizing and sharing online content"""
? online cdrom Active acid.exe"??"
X Online Service svchost.exe"Added by the HOSTIDEL.B or HOSTIDEL.C or TARNO.B TROJANS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
Y OnlineArmor GUI oaui.exe"Online_Armor personal firewall"
X OnlineGuard OnlineGuard.exe"OnlineGuard misleading security software - not recommended see here"
X OnlineHelpmate GDC.exeOnlineHelpmate misleading security software - not recommended
U OnlinePCfix SmoothSurfer SS.exe"Smooth-Surfer - blocks banners ads popups and cleans MRU and Recent file lists"
N OnlineTime onlinetime.exe"OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs"
X online_party online_party.exeAdult content dialler
X Onluna Sarvice sachost.exe"Added by the TOFGER-AA TROJAN!"
X Onlune Sarvice sachost.exe"Added by the DAEMONI-J TROJAN!"
X only23 SCVHOST.exe"Added by the BCKDR-PUQ BACKDOOR!"
X OnSrvr OnSrvr.exeOnWebMedia adware
X oo4 RunDLL32.EXE oo4.dll DllRun"BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""oo4.dll"" file is located in the Winnt or Windows folder"
U OODefragTray oodtray.exe"System Tray access to O&O Defrag disk defragmentation software"
? OOLHELPT OOLHELPT.exe"??"
N OP12 Reminder Ereg.exe"Registration reminder for OmniPage from Nuance (was Scansoft)"
U OpAgent OpAgent.exe"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
X Open Service Drivers opiater.exe"Added by a variant of the RBOT WORM!"
X Open Site opnste.exe"OpenSite adware"
X Open Site opensite.exe"OpenSite adware"
X Open2Enter runme.exeAdult content dialler
X Open2Enter runme2.exeAdult content dialler
X OpenApizs zrscbm.exe"Added by the AGENT.RLH TROJAN!"
X OpenGL Drivers 0penGLD.exe"Added by the YIMP-A WORM!"
X OpenMstart [path to dialler]"""Switch-E"" premium rate adult content dialer"
N OpenOffice.org *.*.* quickstart.exe"OpenOffice.org office suite quick start (where ""*.*.*"" is the version number)"
N OpenOffice.org x QUICKS~1.EXE"Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number"
U openvpn-gui openvpn-gui.exe"""OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations including remote access site-to-site VPNs WiFi security and enterprise-scale remote access solutions with load balancing failover and fine-grained access-controls"""
U Openwares LiveUpdate LiveUpdate.exe"Web-update utility as used by various types of software - see here"
N Operations Typhoon Rising Registration NOVG.EXE"Joint Operations registration reminder"
N Operator ??Media Pilot operator in Win.ini. Locks port open
U Operator xtmop.exeFax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported
X OpiStat OpiStat.exe"NetRatings Premeter spyware"
X OPQFile regedit.exe /s ...rad03FA6.tmpUnsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit
X opr opr.exe"MediaMotor adware"
U OpScheduler OpScheduler.exe"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
N OPSE reminder Ereg.exe"Registration reminder for OmniPage from Nuance (was Scansoft)"
X opsql update check opsql.exe"Added by the RBOT-ACJ WORM!"
X OPTIMIZER iexplore.exe"Added by the EVEVINC TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X OPTIMIZER iexplore.exe"Added by the EVIVINC BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X Optimum Online Netsurf.exeOptimumOnline ISP software related spyware - displays advertising popups and collects information about user activity
X Optional Web Drivers For WIN32 phqghume.exe"Added by a variant of the RBOT WORM!"
U OPTMOUSEMOUSE optmouse.exe"Related to a Samsung optical mouse"
U Optus Cable Data Monitor datamonitor.exe"Allows Optus customers to monitor their actual data usage against Optus' ""data allowance limits"""
N OptusNet Desktop Service Centre DSC.exeOptusNet DSL or Dial-Up connection software
U OptusNetUsage OptusNet Usage Meter.exeDesigned specifically for OptusNet users who wish to have their connection monitored on a frequent basis. It can also estimate when you are going to hit your usage limit and how far over your suggested limit you should be
N Opware12 Opware12.exe"OmniPage from Nuance (was Scansoft) - version 12. If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page."" Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs"
N Opware14 Opware14.exe"OmniPage from Nuance (was Scansoft) - version 14. If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page."" Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs"
N Opware15 Opware15.exe"OmniPage from Nuance (was Scansoft) - version 15. If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page."" Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs"
N OpwareSE2 OpwareSE2.exe"Hardware bundled version of OmniPage from Nuance (was Scansoft). If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page."" Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs"
N OpwareSE4 OpwareSE4.exe"Hardware bundled version of OmniPage from Nuance (was Scansoft). If running a user can call up OmniPage from inside of Word and ask it to scan something via ""File Acquire Page."" Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs"
U Oracle Web-to-Go webtogo.exe"""Oracle Web-to-go a component of Oracle9i Lite consists of a collection of modules and services that facilitate development deployment and management of mobile Web applications"""
N OrangeShark OSharkUpdater.exe"Orange Shark updater - online games for all ages"
U Orb OrbTray.exe"Related to Orb Tray from InstallShield Software Corporation now owned by Macrovision"
X OrbitUpdate update.exe"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
X OrbitView view.exe"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
N OrderReminder OrderReminder.exeThe HP Order Reminder utility is installed with the HP LaserJet printer software and allows you to set specific times for reminders to check the current level of toner in the print cartridge - it also contains an Order Now link to a Web page that helps you order supplies online from a reseller of your choice
X orderShell order****.exe [* = random char]"Added by the DLOADR-UN TROJAN!"
X order_Shell order_smey.exe"Added by the BANKSNIF-H TROJAN!"
? org5.exe org5.exe"Lotus Organizer 5 application file Lotus Organizer software. What does it do and is it required?"
X OrgyCam OrgyCam.exeAdult content dialler
U OrigRage128Tweaker RAGE128TWEAK.EXEThird party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com
U ORiNOCO Cmluc.exe"Client Manager software for a Proxim ORiNOCO 11a/b/g wireless LAN PCI card"
X OS Boot Configuration bootconfig.exe"Added by the IRCBOT.HJ WORM!"
X OS Boot Configuration! bootconf.exe"CoolWebSearch BootConf adware"
X OS Boot Load bootload.exe"Added by a variant of the IRCBOT TROJAN!"
X OS Security mswind32.pif"Added by the RBOT-ASU WORM!"
X OSA winword.exe"Added by the KANGAROO-A TROJAN!"
X Osa32 NTOSA32.exe"Added by the ANIG WORM!"
U osCheck osCheck.exe"Part of Norton Antivirus. Initiates a quick scan (at startup) of the portions of the OS Symantec currently (as defined by the most recent updates downloaded onto the host computer) thinks are most susceptible to infection. This scan is not necessary for proper operation of Norton Antivirus"
U OSD OSD.exeBy Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume etc. Nice but not required if you don't adjust things regularly - can also freeze
X OSD ALG.exe"Added by the STARTPAGE-ID TROJAN!"
U OsdMaestro OSD.exe"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a ""hot key"" on such a keyboard brings a corresponding panel on the screen for volume etc. Nice but not required if you don't adjust things regularly - can also freeze"
U OsdMaestroOSD.exe OSD.EXE"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a ""hot key"" on such a keyboard brings a corresponding panel on the screen for volume etc. Nice but not required if you don't adjust things regularly - can also freeze"
X OSS ossproxy.exe"MarketScore parasite - ActiveX control used to download premium-rate dialers"
X OSS rk.exe"MarketScore parasite - ActiveX control used to download premium-rate dialers"
X OSS rlvknlg.exe"MarketScore parasite - ActiveX control used to download premium-rate dialers"
U OSSelectorReinstall oss_reinstall.exe"Related to Acronis Disk Director Suite"
X OSSProxy OSSPROXY.EXE"MarketScore parasite - ActiveX control used to download premium-rate dialers"
U OStivityInvAgt ostivity.exe"OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network a complete inventory (software and hardware) is taken of the system""
X Osus acao.exe"PurityScan/Clickspring adware"
X Osus rrup.exe"PurityScan/Clickspring adware. The executable is located in the user's ""Application Data"" folder or the Program Fileshtwu folder"
X otcx otcxxh.exe"Added by the CAROOL TROJAN!"
N OurPictures OurPictures.exe"Related to RitzPix Online Photo Print services"
X Outerinfo Outerinfo.exe"PurityScan/Clickspring adware"
X OuterinfoUpdate OuterinfoUpdate.exe"PurityScan/Clickspring adware"
X outlook outlook.exe"Added by the SDBOT-RU WORM!"
X outlook outlook.exe"Added by the ALCRA.F WORM! Note - this is not the valid MS Office program which is found in Program FilesMicrosoft OfficeOffice. This file is found in Program FilesOutlook"
X Outlook Express msinm.exe"Added by a variant of the RBOT WORM!"
X Outlook Express Config *****.exe [* = random char]"Added by a variant of the RBOT WORM!"
X Outlook Express Protocol look.exe"Added by the RBOT-ACS WORM!"
X Outlook Mail Services express.exe"Added by the RBOT.CJN WORM!"
X Outlook Mail Services outlook.exe"Added by the RBOT-BKA TROJAN! Note that the valid MS Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office directory whereas this one is located in %System%"
U OutlookOnDesktop OutlookDesktop.exe"""Outlook On the Desktop is a program that displays Outlook as a transparent interactive object embedded in your desktop"""
X OutLooks InSane.exe"Added by the SWOOP TROJAN!"
Y Outpost Firewall outpost.exe"Outpost personal firewall"
Y OutpostFeedBack feedback.exe"Part of Outpost firewall by Agnitum. The feedback service is for reporting issues directly to Agnitum from within OP"
Y OutpostMonitor op_mon.exe"Monitor for Outpost Firewall PRO (and Free) from Agnitum"
X outpostupdate outpostupdate.exe"Added by the COSIAM-C TROJAN!"
X Outwar syslaunch.exeOutwar adware downloader
? OVCJ ovcj.exe"??"
X overinstall pgs.exe"WinSecureAv spyware remover - not recommended see here"
N Overnet Overnet.exe"Overnet peer-to-peer (P2P) file sharing program"
X ovyriwi telace.exe"Added by the SDBOT.BVS WORM!"
U OWCCardbusTray ocbtray.exeIcon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface
U OWCWebCamDV wcdvtray.exe"WebCamDV from Orange Micro Inc - enables the user to use a DV camera connected via Firewire as a Webcam"
X OWMngr OWMngr.exe"OnWebMedia/SearchSeekFind advertising foistware"
X oxbvpen gwthtis.exe"Added by the SILLYFDC-AH WORM!"
U OxigenClientAdmin Oxigen.exeOpen University Oxigen screensaver admin client. Downloads the latest information from the net to display in the screen saver
X oz2 oz2.exe"Added by the MYDOOM.W WORM!"
X P0w3rF1Y svchost.exe"Added by the BDOOR-MM BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally fi"
U P17Helper Rundll32 P17.dll P17Helper"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
? P17Helper Rundll32 SPIRun.dll RunDLLEntry"Related to Creative audio products. What does it do and is it required?"
U P2kAutostart P2kAutostart.exe"P2kCommander a filemanager application for Motorola p2k mobile phones"
N P2P NETWORKING P2P Networking.exePeer to Peer (P2P) sharing of files on the internet
N P2P Networking P2PPeer to Peer (P2P) sharing of files on the internet
X p2p networking p2pnetworking.exe"Added by the RBOT-ECP WORM!"
X P2P Networking2 P2P Networking2.exeP2P Networking2.exe is an advertising program by Joltid. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately
N P2P Networking3 P2P Networking3.exe"P2P Networking a component bundled with Kazaa that enables other applications to use Peer-to-Peer functionality. Not required - see here"
X p2pnetwork p2pnetwork.exe"Added by the ALCAN.A WORM!"
X p2pnetworking p2pnetworking.exe"Added by the RBOT-AFL WORM!"
X p2snetis comippwa.exe"Added by the SPAMTOO-AL TROJAN!"
U P3000x_S2P ScanToPc.exeDell Laser MFP 1600N network application for scanning files to the PC
X P3p4chk P3p4chk.exe"Added by the GEMA TROJAN!"
X p4mx4 p4mx4.exe"Added by the CRYPTER.A TROJAN!"
U PAC7302_Monitor Monitor.exe"Related to PixArt CMOS image sensors from PixArt Imaging Inc"
X PaciSoft pacis.exe"PacerD Media/Pacimedia.com adware installer"
? Packard Bell EverSafe Tray Control TrayControl.exe"Packard Bell EverSafe software. What does it do and is it required?"
N PadTouch PadExe.exeToshiba Touch and Launch - offers easy movement and freedom of programs navigation with TouchPad
X Pag Windows Monitor pag.exe"Added by the AGENT-EOT TROJAN!"
U Pagekeeper Jobs pkjobs.exePageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP Microtek etc
U Pagekeeper Lite pkjobs.exePageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP Microtek etc
X PAgent PAgent.exe"Scans your hard drive for the popular P2P file-sharing applications BearShare Grokster Kazaa Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what if anything is found"
U Pagis Schedule Monitor Monitor.exeScheduler for the Pagis scanning suite from Scansoft (now Nuance)
N Pagis Scheduler Monitor.exeScheduler for the Pagis scanning suite from Scansoft (now Nuance)
? pagmstart client.exe"??"
N Pagoo PAGOO.EXE"Pagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem"
X paint.exe shnlog.exe"Added by the PUPER-A TROJAN!"
X PaintingRoom evidence monitor paintingroom.exePaintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
X PaintingRoom smile monitor paintingroom.exePaintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
N PAL Evidence Eliminator Cleaner.exe"PAL Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis"
N Palm Desktop Palm.exe"Palm Desktop Software for use with Palm handheld devices. Available via Start -> Programs"
? Palm MultiUser Config Configtool.exe"MultiUser configuration for a Palm PDA device?. Is it required?"
N palmOne Registration register.exe"Registration reminder for Palm products"
X PalNetaware pnetaware.exePalTalk adware - as included in Morpheus
N PaltalkNetaware.exe PALNETAW~1.EXEVoice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start → Programs. Delete the shortcut in Start → Programs → StartUp as well otherwise it will be reinstated
U pamela.exe pamela.exe"Pamela is a plug-in or add-on that adds features to Skype peer to peer voice service"
U Panasonic Communications Utility Mfpscdl.exe"Port manager for Panasonic Panafax fax_machines"
U Panasonic HotKey Manager HKEYAPP.EXEHotKey management for Panasonic rugged mobile PCs
U Panda Antispam Server Service PasSrv.exe"AntiSpam part of an older version of Panda Internet Security"
Y Panda Cleaner pavdr.exe"Panda internet security software related. Possibly the ActiveScan on-line scanner?"
Y Panda Preventium+ Service PREVSRV.EXE"Part of the 2004 & 2005 versions of Panda Antivirus and Internet Security"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list