Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
? PowerS PowerS.exe"ProlinkTest for either their AGP graphics card or TV/FM capture card. Is it required?"
? PowerSet Regedit.exe /s ...PowerSet_8100_CU.REG"Appears to be Toshiba power management related"
N PowerStrip powerstrip.exe"PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings"
N PowerStrip PSTRIP.EXE"PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings"
U PowerTools Tray Icon pttray.exe"PowerTools - add-on for AOL"
U Powertweak PT2.EXE""Powertweak is designed to configure your system in the best way. A processor the core of the system or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Use predefined settings' is enabled in the programs options"
U Powertweak PTCTRL.EXE""Powertweak is designed to configure your system in the best way. A processor the core of the system or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Configure system at logon' is enabled in the programs options"
U Power_Gear BatteryLife.exePower management for all Asus notebook. Useful but not critical
U PP Gamma ppgamma.exe"Profile Prism software that allows monitor calibration and can generate ICC profiles for digital cameras"
N PP****usb FBDirect.exeSoftware that monitors the status of a Visioneer OneTouch scanner button and allows you to scan fax copy print and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model 5300 7600 etc. Available via Start -> Programs
U PP2000 Instaupdate PPInupdt.exeProtector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually
Y PP2000 Real Time Scan PPVstop.exeProtector Plus anti-virus software - real time scanner
Y PP2000 Taskbar Control PPTbc.exeProtector Plus anti-virus software - system tray access
N PP3100b flatbed.exeTwain driver for the Visioneer PaperPort 3100b scanner that allows you to scan fax copy print and easily communicate by simply dragging and dropping scans on your PaperPort Desktop
U ppass Antispy.exe"AntiSpy firewall - "program designed to combat against various types of intrusion and monitoring programs currently in use or presently being developed worldwide""
U PPControl PPControl.exe"PestPatrol Control Terminal - utility that launched PestPatrol features such as PPMemCheck and CookiePatrol before CA's acquisition"
U PPCRunonce PPCRunOnce.exe"Related to PeoplePC ISP software - may display advertising see here"
U PPHIDPAD pphidpad.exe"PenPower Chinese handwriting recognition software"
U PPK Setup(Server) SEServe.exeProgrammable Power Key on Sony Vaio laptops. "Using the Programmable Power Key (PPK) button collect your e-mail automatically with one key stroke. You can also program your PPK to turn on your SuperSlim Notebook at a predetermined time and perform simple tasks - completely unattended"
N ppmate ppmate.exe"PPMate - free tool for streaming online TV via P2P (peer-to-peer)"
U PPMemCheck ppmemcheck.exe"PPMemCheck - used to be part of PestPatrol before CA's acquisition"
X PPPOEO pingppac.exe"Added by the SPYBOT.KHC WORM!"
N PProTray pprotray.exePart of the power professional program. Loads the System Tray control
? PPScheduler PPScheduler.exe"Nuance (was ScanSoft) PaperPort Scheduler - what does it do and is it required?"
U PPSVC [path to file]"PC Police surveillance software that logs keystrokes files looked at applications used and chats on either MSN Yahoo ICQ or AOL. This information can then be transmitted to a remote user. Uninstall this software if you did not install it yourself"
U PPSYS ppsys.exe"PC Police commercial keystroke logger. Uninstall this software if you did not install it yourself"
N pptd40nt pptd40nt.exe"PaperPort" software associated with scanners
U PPUpdate ppupdater.exe"PPUpdater - updater that used to be part of PestPatrol before CA's acquisition"
N PPWWebCap PPWebCap.exe"PaperPort" software associated with scanners
X pqhelper pqhelper.exe"Searchcentrix hijacker"
U PractiSearch PSearch.exe"PractiSearch web search software"
U Praize Messenger itLoad.exe"Praize IM Christian chat instant messenger"
U Prayer PTW.EXE"Islamic Adhan program (call fpr daily prayers)"
X PrdMgr.exe PrdMgr.exe"Added by a variant of the IRCBOT BACKDOOR!"
X prdtect prdtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
? PreAnnotate PreAnntt.exe"Genius Wizard Pen Tablet driver related. Is it required?"
N Precision Time Clock Checker PrecisionTime.exePrecision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
X PrecisionTime PrecisionTime.exe"PrecisionTime - clock synchronizing software containg spyware by Claria/GAIN. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X precpop2 starter.exe"PrecisionPop adware"
X Prein APP****.tmp [* = random char or digit]Unidentified adware
Y Preload Preload.exeMillenium Multi-Function Keyboard driver
N preload RUNXMLPL.exeSoftware found on Acer computers from Wistron. Information suggests it maps keyboard buttons to operating system functions
? PreloadApp hphprld.exe"HP PhotoSmart printers related. What does it do and is it required?"
X Premeter nrpr.exe"NetRatings Premeter spyware"
X Premeter prmt.exe"NetRatings Premeter spyware"
X PremierOpinion pmropn.exe"PremierOpinion adware"
X present .exe"Added by the RUBBLE-C WORM!"
N PrestoNotes PrestoNotes.exe"PrestoNotes lets you create virtual notes on your desktop that can be hidden or shown as needed"
X Preview AdService PrevAdServ.exeWindupdates adware variant
X PrevX prevx.exe"Added by the IRCBOT-TF WORM! Note - this worm is located in the System (Win9x/Me) or System32 (XP/WinNT/2K) directory and is not the PrevX Home intrusion prevention software"
Y PrevxHome SAGUI.exe"PrevX Home intrusion prevention software"
Y PrevxOne PXConsole.exe"Prevx intrusion prevention software"
Y PrevxPro SAGUI.exe"PrevX Home intrusion prevention software"
X prgtect prgtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
X Pribi.exe Pribi.exe"FastFind adware variant"
N Price Patrol neo.exe"Price Patrol by Half.com - internet shopping companion for finding the best on-line prices"
? PrimaLauncher Launcher.exe"Associated with PrimaScan scanners. Is it required?"
U Primax 3D Mouse 3dmoused.exeEnables the scroll button on the Primax 3-D Scroll mouse
? Primsta Primsta.exe"Linksys Wireless CompactFlash Card driver related. Is it required?"
X Print Driver Helper Service crsrr.exe"Added by the AGENT-BC TROJAN!"
X Print Hp Tray hpprint.exe"Added by the RBOT-GWE WORM!"
N Print Master Event Reminder PMremind.exePrint Master Gold - calander feature that pops up reminders such as birthdays
X Print Scheduler usnsvc.exe"Added by a variant of the KOBOT-C WORM!"
N Print Screen Deluxe psdeluxe.exeUtility allows "Print Scrn" or "Print Screen" key to capture print or save the current window
X Print Services spolserv32.exe"Added by the RBOT.ZP WORM!"
X print sharing start.bat"Added by the ZCREW TROJAN!"
X print sharing [path] hidden32.exe [path] explorer.exe"Added by the ZCREW.B BACKDOOR! Note - the legitimate Windows Explorer (explorer.exe) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
X Print Spooler Spoolsv.exe"Added by the CIADOOR.B TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%"
X Print Spooler spoolsvc32.exe"Added by the SDBOT.BB TROJAN!"
X Print Spooler spools.exe"Added by the RBOT-LD WORM!"
X Print Spooler spool.exe"Added by the BDOOR-IS BACKDOOR!"
X Print Spooler spoolsv32.exe"Added by the RBOT.SW WORM!"
X Printer Spyassault.exe"SpyAssault spyware remover - not recommended see here"
X Printer [path to file]"Added by the LOWTAPER TROJAN!"
X Printer dipset.exe"Added by a variant of the FBSR TROJAN!"
X printer SpyAssaultScanner.exe"SpyAssault spyware remover - not recommended see here"
X Printer vmmon32.exe"Added by the RBOT-CSB WORM!"
X printer printer.exe"WinIFixer spyware remover - not recommended see here"
X printer sysprinter.exe"Added by the SMALL.ZY TROJAN!"
X Printer Monitor webprinter.exe"Added by the IRCBOT-Z TROJAN!"
X Printer Spool updater.exe"Added by a variant of the RBOT WORM!"
X Printer spool Service spool.exe"Added by the RBOT-ACP WORM!"
X printer spooler commonaccess.exe"Added by the DELF-LB TROJAN!"
X Printer Spooler spooler.exe"Added by the DELF-JJ TROJAN!"
X Printer Spooler Subsystem spoolss.exe"Added by a variant of the RBOT WORM! - Note - this is NOT the legitimate Windows spoolss.exe process located in the Winnt/System32 or WindowsSystem32 folder and which should NOT figure in Msconfig/Startup!"
? Printer Update CFGREG.EXE"Maybe a registration reminder or automatically updates drivers or application software for a printer?"
X printerdrv vdms.exe"Added by the OPTIXKIL.30 TROJAN!"
X PrinterSpool [path] RESTORE.EXE [path] SPOOL.EXE"Added by the ALADINZ.K TROJAN!"
X Printing Driver msprint.exe"Added by the RBOT.JH WORM!"
N Printkey2000 printkey2000.exeScreen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
X PrintMngr system.exeAdded by an unidentified TROJAN!
N printnow printnow.exe"PrintNow - a utility that primarily allows "Print Srceen" or "Alt+Print Screen" screenshots to be sent directly to a printer"
N PrinTray Printray.exeLexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
N PrintScreen UNWISE.EXE"Gadwin PrintScreen - utility to capture print or save the current window"
N Printscreen 95 PRT95MIN.EXE"Printscreen 95 - utility to capture print or save the current window"
U PrintSpooler lass.exe"Win-Spy keystroke logger/monitoring program - remove unless you installed it yourself!"
X PrintSpoolSv System.exe"Added by the BDOOR-S BACKDOOR!"
U PRISMSTA.EXE PRISMSTA.EXECreates a system tray icon for accessing information about Intersil Prism Wireless Settings. Intersil silicon is used by Trendware/Trendnet for example
U PRISMSVR PRISMSVR.EXEConfiguration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
U PRISMSVR.EXE PRISMSVR.EXEConfiguration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
N Privacy Eraser Pro PrivacyEraser.exe"Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities"
U PrivacyKeyboard PrivacyKeyboard.exe"PrivacyKeyboard is a product ""that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices both known and unknown currently in use or presently being developed worldwide"""
X PrivacyProtector Free UPRP.exe"PrivacyProtector misleading security software - not recommended see here"
X PrivacyScanner pscan.exe"Privacy Champion a stealth installed 'Privacy Scanner'. It purportedly scans your PC for links to adult content websites and then offers to ""clean"" them. Produces loads of False Positives as goad to purchase"
X PrivateNet [various filenames]Premium rate adult content dialler
U Privoxy privoxy.exe"Privoxy - web proxy with advanced filtering capabilities for protecting privacy filtering web page content managing cookies controlling access and removing ads banners pop-ups and other obnoxious Internet junk"
X PrizeSurfer prizesurfer.exe"""PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!"" Stealth installed malware"
X prjtect prjtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
X prktect prktect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
X prltect prltect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
X prmt prmt.exe"NetRatings Premeter spyware"
X prmtect prmtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
U PrnSys Executable PrnSys.exePrint screen utility bundled with some HP printer software - not required but your choice if you like that feature
X pro [path to file]"Added by the SPYWAD-F TROJAN!"
X pro SpySheriff.exe"Added by the SPYWAD-I TROJAN!"
U Pro PCL Status Monitor PENGSS.EXEXerox printer/fax/copier status monitor (PCL = printer control language)
X ProAntiVirus ProAntiVirus.exe"Added by the RBOT-FTP WORM!"
? ProArt ProArt.exe"??"
X Proc aprocess.exe"Added by the MOVINGMOUSE.475811 TROJAN!"
X Proc992 [path to file]"Added by the IXBOT-C WORM!"
X Proc993 wqxfne.exe"Added by the IXBOT-D WORM!"
X process.exe process.exe"Added by the BANCOS.P TROJAN!"
U ProcessGovernor processgovernor.exe"Core engine for Process Lasso from Bitsum Technologies - ""a state-of-the-art highly optimized automated Windows process (program) management tool. Through managing the programs running on your computer Process Lasso increases system responsiveness"""
U ProcessSupervisorGUI ProcessSupervisor.exe"Graphical user interface (GUI) for Process Lasso from Bitsum Technologies - ""a state-of-the-art highly optimized automated Windows process (program) management tool. Through managing the programs running on your computer Process Lasso increases system responsiveness"""
U ProcessTamer ProcessTamerTray.exe"Mouser's Software Process Tamer ""is a tiny (140k) and super efficient utility for Microsoft Windows XP/2K/NT that runs in your system tray and constantly monitors the cpu usage of other processes"""
X procmon procmon.exe"Added by the BIONET.40A TROJAN!"
? Prodigy DSL EnterNetDUN.Exe"Prodigy EnterNet DUN PPPoE Client - is it required?"
N ProdikeysAutorun Prodload.exe"Creative Prodikeys software. ""an interactive music entertainment device which not only functions as a full-featured ergonomic ?QWERTY? keyboard but also comes equipped with 37 touch-sensitive music keys and accessible music controls for endless entertainment at your desktop. Coupled with the Sound Blaster audio card you can explore a wide array of realistic instrument sounds and have non-stop fun making music right at your desktop"""
N ProDsl ProDsl.exeIntel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
X Profile Profile.vbs"Added by the WHITEHO VIRUS or TRAPPY WORM!"
N Profiler Profiler.exe"Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
X profiler liteout.exe"Added by the ZAPCHAS-G WORM!"
X profiler prof.exe"Added by the ZAPCHAS-G WORM!"
N Profiler ProfilerU.exe"Enables the ""Profiler"" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
N ProfilerU ProfilerU.exe"Saitek SST (Saitek Smart Technolgy) Profile Launcher - allows System Tray access to the ""Profiler"" and ""Control Panel"" for Saitek's game controllers. Start manually via Start -> Programs -> Saitek SD6 Programming Software -> Profiler"
X Prog csrss.exe"Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X Prog lsass.exe"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
X Program Access Service [10 random letters].exe"Detected by Trend Micro as the RBOT.GJJ WORM! See here"
X Program File Progmon.exe"Added by the PEEPER TROJAN!"
X Program in Windows IEXPLORE.exe"Added by the LOVGATE.AB WORM!"
U Program Neighborhood Agent pnagent.exe"Citrix Program Neighborhood Agent"
X ProgramControl ProgramControl.exe"Added by the DLOADR-BAG TROJAN!"
? ProgramWindow more comp.exe"??"
U ProjectWhois ProjectWhois.exe"""Project Whois loads the domain names from all open Firefox and Internet Explorer windows into the one-click menu and gives easy access to the whois records from the System Tray"""
N projselector projselector.exeRoxio Project Selector - can be started manually
N Promon.exe promon.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X PromoReg alt.exe.exeAdded by a variant of the AGENT.DOM TROJAN!
X prompt drive [random filename]"Added by the SDBOT.AMF WORM!"
X PromulGate PgMonitr.exe"Delfin Promulgate adware variant"
N PRONoMgr.exe PRONoMgr.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U PRONoMgrWired PRONoMgr.exeIntel's Pro 100 Ethernet card manager
U Propel Accelerator PropelAC.exe"Propel Internet Accelerator"
U ProPort Startup ProPort.exe"Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill and IP resolving"
X proses [5 random letters].exe"Added by a variant of the RBOT WORM!"
X ProSiteFinder prositefinder.exe"180Solutions adware related"
X Prote??o de tela ssmaze.scr"Added by the BANCBAN-FB TROJAN!"
U Protect SHVRTF.EXE"PC Angel takes a 5-second snapshot of the current system registry each time the PC boots up. In the event of a crash PC ANGEL will retrieve everything up to the minute before the crash or the last known stable registry"
X protect protect.scr"Added by the DLOADER-TQ TROJAN!"
X Protected Storage RUNDLL32.EXE MSSIGN30.DLL ondll_reg"Added by the LOVGATE-W WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X Protection [path] runtask.exe [path] protection.exeAdded by a variant of the AGENT.3.AU TROJAN!
X Protection Protection.exe"Added by the FEBELNECK-A WORM!"
X Protection Firewall.exe"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X Protection IExplore .exe"Added by the ELIPTER.D WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process as there is a space before the "".exe"""
X Protection Norton Internet Security.exe"Added by the ELITPER.E WORM!"
X Protections ProtEX32.exe"Ultimate SecuritySuite misleading malware remover - not recommended see here"
X Protector GB protectgb.exe"Added by the BANKER.EIE TROJAN!"
X Protocol Settings kav.exe"Added by a variant of the RBOT WORM!"
X ProtocolDiskChk ssrms.exe"Added by the BDOOR-ML BACKDOOR!"
X ProtocolDiskChk svcvlw32.exe"Added by the STINX-Y TROJAN!"
X ProtocolEventTsk csrwjd.exe"Added by the STINX-N TROJAN!"
X prov prov.exe"Added by a variant of the IRCBOT TROJAN!"
X Provan Security psecure.exe"Added by the RBOT.BRV WORM!"
Y proxim_orinoco_11abg orinoco.exe"Proxim ORiNOCO 11a/b/g PCI Card wireless configuration utility"
N PROXOMITRON PROXOM~1.EXE"A free highly flexible user-configurable small but very powerful local HTTP web-filtering proxy - see here"
N PROXOMITRON PROXOMITRON.EXE"A free highly flexible user-configurable small but very powerful local HTTP web-filtering proxy - see here"
Y ProxyCap ProxyCap.exe"""ProxyCap enables you to tunnel Internet applications through HTTP SOCKS v4 and SOCKS v5 Proxy Servers"""
U ProxyWay proxyway.exe"ProxyWay anonymous proxy surfing software"
U PRPCMonitor PRPCUI.exeIntel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%
X prqtect prqtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"
X prrtect prrtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe prmtect.exe and so forth!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list