Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
U Auto EPSON Stylus Photo R300 Series on X E_S4I2F1.EXE"Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo R300 Series on X E_S4I0F2.EXE"Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo R320 Series on X E_FATI9FA.EXE"Epson Status Monitor 3 for the Stylus Photo R320 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo R800 on X E_FATI9YE.EXE"Epson Status Monitor 3 for the Stylus Photo R800 printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo RX420 Series on X E_FATI9CE.EXE"Epson Status Monitor 3 for the Stylus Photo RX420 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo RX500 on X E_S4I2K1.EXE"Epson Status Monitor 3 for the Stylus Photo RX500 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Photo RX600 on X E_S4I2M1.EXE"Epson Status Monitor 3 for the Stylus Photo RX600 Series printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
U Auto EPSON Stylus Pro 7600 on X E_S10IC2.EXE"Epson Status Monitor 3 for the Stylus Pro 7600 printer - for monitoring printer status checking ink levels etc. ""X"" represents the computer's network name ie PAULS-PC PETES-LAPTOP etc"
X Auto File System Conversion Utility scricon.exe"Added by the SDBOT.EYB WORM!"
X auto repair system qualityx.exe"Added by an unidentified WORM or TROJAN - probably a SPYBOT variant"
U Auto Run Software for Photo Frame PhotoManager.exe"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
U Auto Switch TASKBAR.exeRelated to 2-port Bitronics AutoSwitch kit from Belkin
N Auto T Bar autotbar.exeIf you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
X Auto Updat WindowsSys32.exe"Added by a variant of the FORBOT WORM!"
X Auto updat crcss.exe"Added by the SDBOT.AAG WORM!"
X Auto Update AUP.exeAdded by an unididentified WORM or TROJAN!
X Auto Update dma.exe"Added by the RBOT-AVO WORM!"
X Auto Update svchost.exe"Added by the DUMARDI-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X Auto Updates svchost.exe"Added by the CHEUKO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X Auto WinUpdate taskmrg.exe"Added by the RBOT-AFA WORM!"
X AutoAdministrator SERVICES.EXE"Added by the PUNYA-A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
U Autobar autobar.exeConnect buttons on the keyboard for internet direct access etc. on HP computers
U AutoCAD Startup Accelerator acstart16.exe"Preloads some libraries that are used by AutoCAD in order to make the software load faster"
U autoclk autoclk.exe"Autoclik is a Windows utility ""that allows you to perform all mouse activity with absolutely no clicking"""
X AutoDiscovery/AutoPurge (ADAP) Service wmiadapi.exe"Added by the RBOT.FLT WORM!"
N AutoEA Ahqrun.exeFor Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
X AUTOEXE AUTOEXE.exe"Added by the SEMAPI-A WORM!"
X autoload cftmon.exe"Detected by Symantec as the SILLYFDC WORM! See here"
X autoload spooll.exe"Detected by Symantec as the SILLYFDC WORM! See here"
X autoload windowsupdate.exe"Detected by Trend Micro as the POLYCRYP.DY TROJAN! See here"
X Autoloaderaproposclient Apropos_Client_Loader.exe"AproposMedia adware"
X Autoloaderaproposclient cxtpls_loader.exe"AproposMedia adware"
X AutoLoaderEnvoloAutoUpdater auto_update_loader.exe"Envolo/AproposMedia adware updater"
N AutoMate Task Service automate.exe"Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs"
U AutoMate5 Am5HkWnd.exe"""Automate is the Leading Software for Automation of front and back-office business processes.It provides all the tools necessary to completely automate business processes regardless of their complexity"""
U AutoMate6 AMEM.exe"AutoMate 6 for automating repetitive tasks"
X Automated Windows Updates wauclt.exe"Added by the GAOBOT.AJD WORM!"
X Automatic Defrag Manager defrag.exe"Added by the RBOT-AKE WORM!"
X Automatic Media Update CACHE.RVDAdded by an unidentified WORM/TROJAN!
X Automatic Media Update HPLNT32.RVDAdded by an unidentified WORM/TROJAN!
X Automatic Microsoft Windows Updater suchost.exe"Added by the RBOT-EQ WORM!"
X Automatic Updates algs.exe"Added by the IRCBOT-AAM TROJAN!"
X Automatic Windows Updater Update.exe"Added by the GAOBOT.AO WORM!"
N Automatically launches the United Devices Agent when you start your computer UD.EXEThe United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start > Programs
X Autopdate Autopdate.exe"Added by the RBOT-AGL WORM!"
N AUTOPROP REGPROP.EXE WMPADDIN.DLLBoth the files are in the MS Office/Bots/FP_WMP directory. Apparently it registers the FrontPage WiMP extension
X AUTOPROTECTU navapq32.exeAdded by an unidentified WORM or TROJAN!
X autorepair dexs.exe"Added by a variant of the SDBOT WORM!"
U Autoroute SMTP AutoSmtp.exe"Autoroute SMTP - ""automatic switching between SMTP servers depending on what network you are currently working in."" You need to have two Internet service providers"
X autorun autorun.exe"Added by the AUTOM-B WORM!"
X autorun sxs.exe"Added by the SMALLVBS-A WORM!"
X autorun winmain.exeAdded by a variant of the DELF.CNS TROJAN!
X autorundemo [path to trojan]"Added by the AGENT-FPX TROJAN!"
? AutoShutdown pssvc.exe"Utility to fix vCard Export in MS Outlook 2000 - although why are these together?"
U AutoSizer AUTOSIZER.EXE"AutoSizer - utility that automatically maximizes windows when they're opened"
N AutoSpell autospel.exe"AutoSpell - spell checker (version 6.*)"
N AutoSpell 5 ASWATC32.EXE"AutoSpell - spell checker"
U AutoSys autosys.exe"Winguardian surveillance software. Uninstall this software unless you put it there yourself"
N autotbar autotbar.exeIf you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
N AutoTKit AUTOTKIT.EXEOn HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N autoupd autoupd.exe"Raxco Software Auto Update utility."Used to keep your software up-to-date""
X autoupd autoupd.exeAdded by an unidentified VIRUS WORM or TROJAN! - found in a folder of the same name
X autoupdate rundll32 DATADX.DLLSHStart"Added by a variant of the QOOLOGIC TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""DATADX.DLL"" file is found in %System%"
X autoupdate rundll32 SUPDATE.DLLSHStart"Added by a variant of the QOOLOGIC TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""SUPDATE.DLL"" file is found in %System%"
X AutoUpdate smss.exe"Added by a variant of the WINSPY.AA TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""debug64"" subfolder of the Winnt or Windows folder"
X Autoupdate Service kaka.exe"Added by the SYMPE-B TROJAN!"
X AutoUpdater aupdate.exe"Tinybar variant"
X AutoUpdater AutoUpdate.exe"PeopleonPage foistware"
X autoupdatev2 [path to file]"Added by the DROPPER-BM TROJAN!"
X autoupdatev2 autoupdatev2.exe"Detected by Kaspersky as the AGENT.FQ TROJAN!"
X AutoVirusProtection ciscv.exe"Added by a variant of the RBOT WORM!"
X auto__antiav__key antiav_exe.exe"Added by the BAGLEDI-AA TROJAN!"
X auto__hloader__key hloader_exe.exe"Added by the BAGLE.AB TROJAN!"
X aux.exe aux.exe"Added by the ZINS TROJAN!"
X auxAudioDevice aux32.exe"Added by the AIZU WORM!"
N AUXXTRAY au30setp.exeSystem Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
X AV UPDATE-28062004.exe[25 blank spaces].vbs"Added by the MIDFIN WORM!"
X AV Client patch31345.exe"Added by the MYDOOM.AD WORM!"
X AV Industry patch31345.exe"Added by the MYDOOM.AD WORM!"
X AV UpDate Update.exe"Added by the FUROOT-A TROJAN!"
N AvaFind AvaFind.exe"AvaFind file search utility"
X AVantivirus Avconsol.exe"Added by the MSNVB-D WORM!"
X avast troyan.exe"Added by the SMALL.CZ TROJAN!"
Y Avast! ashserv.exe"Part of Avast! anti-virus software"
Y avast! ashDisp.exe"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner right-click access to other options and event notifications"
Y avast! Antivirus ashDisp.exe"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner right-click access to other options and event notifications"
Y avast! Web Scanner Ashwebsv.exe"Part of Avast! anti-virus software"
Y Avast32 Astart32.exe"Part of Avast! anti-virus software"
X avc avmon.exeAdded by an unidentified TROJAN!
U AvconsoleEXE Avconsol.exeFrom McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X Avengine Avengine.com"Added by the DELF.LJ TROJAN!"
X AveoAttune atmdlusr.exe"Aveo Attune automated helpdesk software - adware/spyware"
U AVFX Engine StartFX.exe"Advanced Video FX - supported by a number of Creative Web Cameras. ""Have more fun by adding a wide range of special effects and backgrounds to your video chat with Advanced Video FX"""
X AvG svchost323.exe"Added by the RBOT-ZA WORM!"
Y AVG Anti-Virus system avgcc.exe"AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components settings and updates"
X Avg Antivirus icpldrvx.exe"Added by the BANKER.BYU TROJAN!"
X AVG Grisoft Updater updater.exe"Added by the AGOBOT-OT WORM!"
Y AVG7_AMSVR Avgamsvr.exe"AVG antivirus related"
Y AVG7_CC avgcc.exe"AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components settings and updates"
Y AVG7_EMC AVGEMC.exe"AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses"
Y AVG7_Run avgw.exe"AVG Anti-Virus 7.0 related"
U AVG8_TRAY avgtray.exe"System Tray access to AVG internet security software"
Y avgamsvr.exe Avgamsvr.exe"AVG antivirus related"
Y avgcc32 avgcc32.exe"AVG anti-virus control center. Also enables scheduled tests Outlook E-mail plug-in and automatic updates"
Y AVGCtrl AVGCtrl.exe"Part of AntiVir? PersonalEdition Classic antivirus"
Y avgfwsrv AVGFWSRV.EXE"Firewall part of the AVG Plus Firewall Edition"
Y avgmsvr.exe avgmsvr.exe"AVG Anti-Virus 7.0 related"
Y AVGnt AVGnt.exe"AntiVir® PersonalEdition Classic antivirus. System Tray icon and control program"
Y Avgserv9.exe Avgserv9.exe"AVG antivirus background monitoring"
Y AVGuard AVGuard.exe"AntiVir® PersonalEdition Classic antivirus. Background task which scans files transparently"
Y AVG_CC avgcc32.exe"AVG anti-virus control center. Also enables scheduled tests Outlook E-mail plug-in and automatic updates"
Y AVG_EMC AVGEMC.exe"AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses"
Y AVG_RegCleaner AVGREGCL.exe"AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems"
X avidrv drvsc.exe"Detected by Kaspersky as the AGENT.PH TROJAN!"
X Avimgt Avimgt.exe"Added by the GEMA TROJAN!"
X Avimgt32 Avimgt32.exe"Added by the GEMA TROJAN!"
Y avinit AVINIT9X.EXE"Command Antivirus related"
X Avira Anti-Virus Pro 2008 explorear.exeAdded by an unidentified WORM or TROJAN!
Y AVK Mail Checker AVKPop.exe"eXtendia AVK AntiVirus email checker"
Y AVKBar AVKBar.exe"GData AntiVirusKit Anti-virus"
U AVKTray AVKTray.exe"System Tray access to AntiVirenKit InternetSecurity from G DATA Software AG"
Y AvMaiSrv Avmaisrv.exe"Part of Avast! anti-virus software - E-mail scanner"
X AVManager csrss.exe"Added by the AUTORUN-DV WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
? AvMenu AVMenu.exe"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do and is it required?"
Y AVMWlanClient wlangui.exeRelated to broadband products from avm.de
X avnort formatsys.exe"Added by the SERFLOG.A WORM!"
X avnort msmbw.exe"Added by the SERFLOG.A WORM!"
X avnort serbw.exe"Added by the SERFLOG.A WORM!"
X AVP [path to trojan]"Added by the MUTBO-A TROJAN!"
Y avp avp.exe"Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory"
X avp avp.exe"Detected by Kaspersky as the ALPHABET.B TROJAN!"
X avp win*.tmp.exe [* is a number]Added by a variant of the ALPHABET TROJAN!
X avp xar6000v7.exe"Detected by Kaspersky as the ALPHABET.B TROJAN!"
X AVP-SE avp-32.exe"Added by the AGOBOT.FS WORM!"
X avpa avpo.exe"Added by the LEGMIR-ARK TROJAN!"
Y avpcc avpcc.exe"Kaspersky Labs anti-virus"
Y avpm avpm.exe"Kaspersky anti-virus"
X AvpM AvpM.exe"Added by the STARTPAGE-ID TROJAN! Note - this is not the popular Kaspersky antivirus and this file is located in the WINDOWSpchealthUploadLBConfig directory"
X avpms avpms.exe"Detected by Kaspersky as the ONLINEGAMES.CPV TROJAN! See here"
X Avpr avpr.exe"Added by the MYDOOM.AF WORM!"
X AVPSrv AVPSrv.exe"Added by the ONLINE-GEN TROJAN!"
X avptask [path to trojan]"Added by the NOFERE-G TROJAN!"
X avptask expl0rer.exe"Added by the AGENT.JJO TROJAN!"
X Avptask rund1132.exe"Added by the AGENT.PKZ TROJAN!"
X AvpWx WErcx.exe"Detected by Kaspersky as a variant of the AGENT.A TROJAN!"
X Avril Lavigne - Muse [random filename]"Added by the AVRIL-A WORM!"
Y AVSCHED32 AVSched32.exe"AntiVir® PersonalEdition Classic - antivirus"
Y AVSchedScan SCHSC9X.EXE"Command Antivirus related"
X AvSer dsm.exe"Added by the SERFLOG.B WORM!"
X AvSer msmpatch.exe"Added by the SERFLOG.B WORM!"
X AvSer svosm.exe"Added by the SERFLOG.B WORM!"
X AvSer sysup.exe"Added by the SERFLOG.B WORM!"
X avserve.exe avserve.exe"Added by the SASSER WORM!"
X avserve2.exe avserve2.exe"Added by the SASSER.B or SASSER.C WORMS!"
X avserve3.exe avserve3.exe"Added by the SASSER.G WORM!"
U AVStation premium AVStation agent.exe"Related to Samsung AV Station - instant playback of music photos videos"
X avtapi avtapi.exe"Added by the AGENT.AM TROJAN! Note - example names include ""XviD"" ""Winamp Remote"" ""Windows Media Player"" and ""Futuremark"""
N Avtray Avtray.exe"Command Antivirus tray icon"
X AVupdate32 Update AVupdate32.exe"Added by the RBOT.CNI TROJAN!"
? AVWLPSTA AVWLPSTA.exe"PRISM Status Tray Applet - but what is it for and is it required?"
Y AVWUpd32 AVWUPD32.EXE"AntiVir® PersonalEdition Classic - updater"
Y avx communicator xcommsur.exe"Anti-virus part of BitDefender virus scanner/firewall"
Y Avxlive avxlive.exe"Bullguard or BitDefender antivirus"
Y avxlni avxinit.exe"Anti-virus part of BitDefender virus scanner/firewall"
? Avxnews ??"??"
U Awatch Awatch.exeDiagnosis tool that monitors DSL connections installed alongside DSL drivers from AVM Fritz's range of modem products
U AwaySch AwaySch.EXE"Part of the IBM ThinkVantage Productivity Center. ""The Away Manager application allows you preselect and run routine tasks to maintain your system's performance"""
U AWC AWC.exe"Advanced SystemCare from IObit - ""helps protect optimize clean and repair your computer and Registry."" The PRO version adds automation anti-spyware privacy protection and performance tune-ups"
N awhost32 awhost32.exe"Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended"
U AWMON Ad-Watch.exe"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
U AWMON Ad-Monitor.exe"F-Secure Anti-Spyware"
U awplite awplite.exe"AllWallpapers Lite desktop wallpaper changer"
? AWUSGSTA AWUSGSTA.exe"Reportedly related to a USB Wifi Adapter - is it required at startup?"
U awxDTools awxDTools.dll awxRegisterDll"AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: *.cue *.iso *.ccd ...)"
? AxFilter Rundll32 AXFILTER.DLL Rundll32"??"
U AXIS Print System DriverScanner DriverScanner.exe"Part of AXIS Print System from AXIS Communications - ""adds printer discovery printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor which is one of the components. Another component in AXIS Print System is AXIS IP Installer."" Now discontinued"
U AXIS Print System DriverServer DriverServer.exe"Part of AXIS Print System from AXIS Communications - ""adds printer discovery printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor which is one of the components. Another component in AXIS Print System is AXIS IP Installer."" Now discontinued"
U AXIS Print System TrayIcon TrayIcon.exe"System Tray access to AXIS Print System from AXIS Communications - ""adds printer discovery printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor which is one of the components. Another component in AXIS Print System is AXIS IP Installer."" Now discontinued"
X AXPFixer AXPFixer.exe"AdvancedXPFixer rogue security software - not recommended see here"
X AXVenore AXVenore.exe"Added by an unidentified TROJAN - see here"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list