Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	PSFree	PSFree.exe	"Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
X	PSGuard	PSGuard.exe	"Variant of the SmitFraud alias FAKEALE-C TROJAN!"
X	PSGuard spyware remover	PSGuard.exe	"Variant of the SmitFraud alias FAKEALE-C TROJAN!"
X	pshower	pshwr.exe	"SafeSurfing adware variant"
Y	PSIMSVC	PSIMSVC.exe	"Panda Titanium Antivirus"
N	PSIWin2.3 Connection Server	Psconsv.exe	Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
U	pskl	keyspy.exe	"KeyboardLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	PSLister	PSLister.exe	"Added by PurityScan C adware"
U	PsMFCard	PsMFCard.exe	"Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue
Y	PSNotify	psnotify.exe	"Pharos SignUp Vx - ""PC reservation and management application that addresses the PC scheduling needs of public libraries and higher education labs and libraries"""
X	PSof1	PSof1.exe	"PacerD Media/Pacimedia.com adware installer"
X	PSoft1	psoft1.exe	"PacerD Media/Pacimedia.com adware installer"
Y	PsPCCard	PsPCCard.EXE	Background Power Saving task found on Toshiba laptops and which handles turning Power Saving ON and OFF on any inserted PC Card (PCMCIA card). Only ever disable if you do not use any power saving or hibernation settings (ie: they are all OFF)
U	PspContr	pspcontr.exe	Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
Y	PSQLLauncher	launcher.exe	"IBM ThinkVantage Fingerprint Software"
U	PsSound	PsSound.exe	"On a Toshiba laptop. Operates your sound in one of 4 modes
U	pst	memaker2.exe	"Added by the SpymodePCSpy surveillance software. Uninstall this software unless you put it there yourself"
?	PSTORES	PSTORES.EXE	"Part of Windows Services Protected Storage?"
N	ptfb	ptfb.exe	"Push the Freakin' Button - "When a dialog causes irritation
?	Ptipbmf	"rundll32.exe ptipbmf.dll	SetWriteCacheMode"
U	PtiuPbmd	"Rundll32.exe ptipbm.dll	SetWriteBack"
X	PTRGMYGK	"rundll32.exe ptmg1v.dll	DllRunMain"
U	ptrun32	ptrun32.exe	"Parent Tools for AIM"
U	PTRUN32	ptr32w.exe	"Added by ParentTools surveillance software. Remove unless you installed it yourself"
N	Ptsnoop	Ptsnoop.exe	"These descriptions I've come across - all valid as far as I can see :- (1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it (2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed) Note: If using AOL and you disable this you may lose your connection or lock up (4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists (5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems (6) Karen Kenworthy's Snooper - ""logs the start and stop time of all programs run under Windows"""
U	pttrun	pttrun.exe	"Transmeta Crusoe processor related. Reduces application launch times and makes the computer ""more responsive"""
N	PtUDFApp	PtUDFApp.exe	"Sony abCD program
U	PUAC v2.0.7	Puac.exe	"""Peter's Ultimate Alarm Clock"""
X	Public Microsoft ODBC	ODBC32.exe [ = random char]	"Added by the MASLAN.D WORM!"
U	pumcfgp	proxycfg.exe	"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
N	Pure Networks Port Magic	PortAOL.exe	"Pure Networks Port Magic
U	Purgative	PURGATIVE100.EXE	AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack
X	Purgatory	Purga.exe	"Added by the PORGORY-B WORM!"
N	Push Client	pull.exe	"Client software from Interwise that MS use for their webcasts"
N	Push The Freakin' Button	ptfb.exe	"Push the Freakin' Button - "When a dialog causes irritation
N	PUSH6599	PUSH6599.EXE	Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software
X	PutA!!	PutA!!.exe	"Added by the OPASERV.L WORM!"
X	PutAS!	PutA!!.com	"Added by the OPASERV.Z WORM!"
X	putil	[filename]	"Added by the LDPINCH TROJAN!"
U	PV92TRAY	PV92Tray.exe	"PCtel HSP V.92 modem configuration utility"
X	PVModule	pvmodule.exe	"Adperform.com/adoptim.com adware
N	PVR	PVR.exe	"Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card"
U	PVUnInst1	PVUnInst1.exe	"Privacy View - privacy software that ensures that all your private computer files
X	Pwr32ctr	Pwr32ctr.exe	"Added by the GEMA TROJAN!"
X	Pwr32ctrl	Pwr32ctrl.exe	"Added by the GEMA TROJAN!"
X	Pwr32mgt	Pwr32mgt.exe	"Added by the GEMA TROJAN!"
N	PWRISOVM.EXE	PWRISOVM.EXE	"PowerISO - a powerful CD/DVD image file processing tool"
Y	PWRMGRTR	PWRMGRTR.DLL	"Power Manager - background monitor module for IBM ThinkPad laptops. Leave it alone to ensure proper power management functions"
Y	Pwrmonit	Rundll32 PwrMonit.dll	IBM's proprietary 'battery maximiser' and power monitoring software for laptops
X	Pwroff	Pwroff.exe	"Added by the GEMA TROJAN!"
U	Pwrsave	Pwrsave.exe	Toshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power
?	Pwruplogin	pulogin.exe	"??"
U	PwrupTweakMe	PUPXPTWK.EXE	""Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows NT4
U	PWS Tray	PwsTray.exe	"Microsoft's Personal Web Server
N	p_981116	p_981116.exe	"Win32 cabinet self extractor. More info here"
N	Q152404	wsript.exe Q152404.VBS	Appears to run Scandisk at bootup on NEC PCs
X	q36i36O	lms2cenu.exe	Added by the SECONDTHOUGHT VIRUS!
N	QAGENT	qagent.exe	"Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled
X	qappsrvc32.exe	qappsrvc32.exe	"Recognized by Kaspersky antivirus as Trojan-Proxy.Win32.Webber.m"
N	QBCD autorun	autorun.exe	Quick Books CD
X	qbkupdbs	mqbkup.exe	"Added by the OPASERV.K WORM!"
X	qbotd	[random filename]	"Added by the BOTTEN TROJAN!"
?	qBrowse	qbrowse.exe	"??"
X	QBRSR	QuickBrowser.exe	top-banners.com adware
U	Qchex Tray Icon	Qchex.exe	"Related to G7 Productivity Systems Check Software"
U	QCTRAY	Qctray.exe	"System Tray icon providing access to the ""IBM Access Connections"" wizard on ThinkPad laptops and also allows to change the network environment. Not the same as QCWLIcon
U	QCWLICON	Qcwlicon.exe	"Used by IBM Thinkpad laptops with built-in wireless card (802.11). System Tray icon that provides a shortcut to ""Wireless Connection Status"" and allows to turn WL on and off"
N	QD FastAndSafe	QDCSFS.exe	Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
U	QDM	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
U	QDMStart	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
?	Qdsafe	??	"??"
?	Qexplo	Qexplo.exe	"??"
X	qgqqft	[path to Trojan]	"Added by the RANKY.T TROJAN!"
Y	QH Live Update Scheduler	UPSCHD.EXE	"Quick Heal Anti-Virus"
Y	QH Office 2K Check	O2KCHECK.EXE	"Quick Heal Anti-Virus MS Office documents virus checker"
?	QMusic	QMAgent.exe	"??"
N	QNPlus	QNPlus.exe	"Quick Notes Plus by Conceptworld - sticky notes tool"
U	Qoeloader	Qoeloader.exe	"Qurb 2.0 anti-spam tool for Outlook/Outlook Express. Required when supporting OE but not for Outlook. Shortcut available via Start -> Programs"
U	QPService	QPService.exe	"HP QuickPlay - ""brings your favorite music and movies to life with the touch of a button"""
X	QQ	sendmess.exe	"Added by the SEMES TROJAN!"
X	QQServer	QQ.exe	"Added by the DOWNLDR-AN TROJAN!"
X	qservices	qservice.exe	"Added by the PROGENT-A TROJAN!"
N	QSort2000	QSORT.EXE	Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"
U	QT4HPOT	OneTouch.exe	Hewlett Packard One Touch keyboard driver. Required if you use the additional keys
U	QTaskStartup	qtask.exe	"Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly
X	QTime	nrchk.exe	Premium rate adult content dialler
N	QTSTUB.EXE	Qtstub.exe	Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
X	QTSvc	msocfg.exe	Premium rate adult content dialler
X	QTSvc	navchk.exe	Premium rate adult content dialler
X	QTSvc	shman.exe	Premium rate adult content dialler
X	QTSvc	ssvr.exe	Premium rate adult content dialler
N	qttask	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
U	QtVprMtx	QTVPRMTX.EXE	"Multimedia keyboard driver from Dritek System Inc"
X	Quantifier Security	qsecue.exe	"Added by the SPYBOT.UOL WORM!"
?	QUBCity	qtp.exe	"??"
?	Queensla	Queensla.exe	"??"
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
U	Quick Heal Messenger	QHM32.EXE	"Quick Heal Anti-Virus Messenger - keeps you informed about the latest threats
Y	Quick Heal On-Line Protection	Cateye.exe	"Quick Heal - virus scanner"
Y	Quick Heal Startup Scan	QHSTRT32.EXE	"Quick Heal - virus scanner"
N	Quick Shelf xx	qushelfxx.exe	"Places an icon in the system tray for launching MS Bookshelf. Available via Start -> Programs"xx" represents the version number - ie
Y	Quick Startup	Fquick32.exe	"For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone"
N	Quick Time Task	qttask.exe	"System Tray access to Apple's ""Quick Time"" viewer from version 5 onwards"
N	Quick View Plus	QVP32.EXE	Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start -> Programs
N	QuickBooks Delivery Agent	QBDAGENT.EXE	As far QAGENT but for QuickBooks. Can also have the version number in the name
N	Quickbooks Update Agent	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not
U	QuickCamPro	QuickCamPro.exe	"System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example
X	quicken	quicken.exe	"CoolWebSearch Therealsearch parasite variant"
X	quicken	Winrar.exe	"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
X	quicken	Waol.exe	"CoolWebSearch Therealsearch parasite variant"
N	Quicken Scheduled Updates	bagent.exe	Quicken background downloading module
N	Quicken Startup	QWDLLS.EXE	Quicken option to load DLLs at startup
N	QuickenSEMessage	Qsemsg.exe	Quicken option
N	QuickFinder Scheduler	QFSCHD100.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
N	QuickFinder Scheduler	QFSched.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
Y	QuickLaunchEr	QuickLaunchEr.Exe	"QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray"
N	Quicklink III	QL.EXE	"HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode
N	Quicknote	quicknote.exe	"JC&MB Quicknote Virtual Scrapbook"
U	QuickPassword	agquickp.exe	Smart card-based authentication and digital signature client software
N	QuickRes	QUICKRES.EXE	Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel -> Display. Not required unless you have to change resolutions on a regular basis
N	quickset	quickset.exe	Dell taskbar icon allowing you to quickly change settings
X	Quicktime	qttasks.exe	"Added by the ADCLICK-AK TROJAN!"
X	Quicktime	shch.exe	"Added by a variant of the EB TROJAN!"
X	Quicktime Mediaplayer	winmplyer32.exe	"Added by the RBOT-PM WORM!"
X	Quicktime Mediaplayr	wnmplyr.exe	"Added by a variant of the RBOT WORM!"
X	Quicktime Pro 3.0	winuodps.exe	"Added by the GAOBOT.BH WORM!"
N	QuickTime Task	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
X	QuickTime Task	qttasks.exe	"CoolWebSearch parasite variant"
X	Quicktime Task	[random filename]	"Trafficadvance dialer"
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	"Different numbers caused by number of launches. So if 3 updates are made separately
X	QuicktimeMngr	QUICKTIMEMNGR.EXE	"Added by the WOOTBOT.AW WORM!"
X	QuickTimeUpdate	QuickUpdate.exe	"Added by the BIFROSE-CW TROJAN!"
X	Quicktlme	ru.exe	Adult content dialler

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.