Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X VBouncer VirtualBouncer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X VbouncerDL VbouncerInner****.exe [* = random char]"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X VbouncerDL VBouncerInner.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X VBS.Ipnuker@mm [worm filename].vbs"Added by the NUKIP WORM!"
X VBS_AUTO_UPDATE 0548656X.vbs"Added by the GORMLEZ-A WORM!"
X VBundleOuterDL BundleOuter.EXE"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X VB_run comctl_32.exeDubious downloader from densmail.com
X VC5MediaPlayer csmss.exe"Added by the DEDLER-B WORM!"
N VC5Play VC5Play.exe"Virtual CD drive emulator - version 5. Available via Start -> Programs"
N VC6play VC6Play.exe"Virtual CD drive emulator - version 6. Available via Start -> Programs"
N VC7Play VC7Play.exe"Virtual CD drive emulator - version 7. Available via Start -> Programs"
N VC7Player VC7Play.exe"Virtual CD drive emulator - version 7. Available via Start -> Programs"
U VC9Player VC9Play.exe"Virtual CD from H H Software GmbH. ""With Virtual CD all your favorite CDs and DVDs are immediately accessible without constantly inserting and ejecting media"""
X VCatch Vcatch.exe"CommonSearch Vcatch - ""antivirus"" software which actually bundles spy/adware itself!"
X VCatch Premium VCatchpre.exe"VCatch antivirus. Considered spyware itself - see here"
N VCDPlayer VCDPlayer.exe"Virtual CD drive emulator. Available via Start -> Programs"
N vcdplayx vcdplayx.exe"CD emulation part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically"
U VCDTower VCDTower.exeGoldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
? VCDWATCH VCDWATCH.EXE"Confirmed as Voyetra CD Watcher as it was found in a Compaq/Voyetra/AS2 directory but what does it do?"
X vcmicrec msccsed.exe"Added by the MAILBOT-CE TROJAN!"
X VCMnet11 VCMnet11.exe"Windows AFA Internet Enhancement - a browser hijacker redirecting to adsourcecorp.com. See here"
X VCS Host vcshost.exe"Added by the RBOT-FKT WORM!"
N VCSPlayer vcsplay.exe"Virtual CD drive emulator. Available via Start -> Programs"
X VCXD Settings phqg.EXE"Added by the RBOT.BRF WORM!"
U VC_Log keylog.exe"PaqKeylog is a surveillance software program that logs keystrokes and can run in stealth mode. Uninstall this software unless you put it there yourself"
X Vdat Update lalaa.exe"Added by a variant of the RBOT WORM!"
? VDI Manager (HP) HPO0VDX05.exe"HP (Hewlett-Packard) related. Now - what does it do?"
U VDrive2 WebLifeDisk.exe"EarthLink WebLife Disk - ""Consumers can quickly save files from their desktop into WebLife Disk and then easily access them from any Internet connection without taking a laptop on the road or keeping up with a USB key"""
N vdtask vdtask.exe"Program part of GameDrive & VirtualDrive virtual CD/DVD drive emulators from Farstone. Not required as starting these programs load this automatically"
N Vegas Palms - Launcher Launcher.exe"Vegas Palms on-line cassino"
X veja_fotos.exe veja_fotos.exe"Added by the MDROP-F TROJAN!"
X Vekio Startups Pnksvc32.exe"Added by the AGOBOT.AJG WORM!"
U VentaDrv vfdrv32.exe"Related to VentaFax Voice - send and receive black-and-white or color faxes and turns your PC's fax modem into a versatile answering machine"
U Veo Velocity Connect stim11.exeSupport software for the Veo Velocity Connect webcam
U Veoh VeohClient.exe"Veoh lets you share your video with other internet users"
U VERBATIM STORE 'N' G verbatim store 'n' go.exe"Loads the driver for the Verbatim Store'n'Go PRO USB Flash Drive - reportedly required only on systems running Windows 98 and Millennium"
X Verif vxst.exe"Added by the NOPIR.B WORM!"
X Veritas Patch veritas.exe"Added by the RBOT-XT WORM!"
N Verizon Control Pad cpad.exe"Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience"
U Verizon Online Support Center matcli.exe"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city state etc and gets written to a log file". Verizon Online Support Center is required to run with the Help and Support program. If you uncheck Verizon Online Support Center and and then run help and Support it will add another Verizon Online Support Center in the startup menu. If you remove the Verizon Online Support Center in the add/remove program some help menus in help and support will not be available. You decide
U VerizonServicepoint.exe VerizonServicepoint.exe"Part of Verizon Online Support Manager"
X vern16.dll regsvr32.exe vernn16.dll"DailyWinner adware. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The ""vernn16.dll"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
U versato versato.exe"""Hot"" button (such as volume and browser control) management and a CD player as supplied with QTronix (as possibly Micro Innovations) keyboards"
X verse verse.exe"Added by the STAP-C WORM!"
X Version Version.exe"JRAUN adware variant"
X Version manage.exe"JRAUN adware variant"
X version [random].exe"DealHelper adware"
Y Vet Alert vetmsg9x.exe"Computer Associates "InnoculateIT" and Vet Anti-Virus virus software"
Y Vet Alert VETMSG.EXE"Computer Associates Vet Anti-Virus software"
Y Vet Start Up vet98.exe"Computer Associates "InnoculateIT" and Vet Anti-Virus virus software. This option will slow down your system if set too aggressively. There is no need to scan every file when opened closed etc. Check in InoculateIT PE options"
Y Vet Start Up vet32.exe"Computer Associates "InnoculateIT" and Vet Anti-Virus virus software. This option will slow down your system if set too aggressively. There is no need to scan every file when opened closed etc. Check in InoculateIT PE options"
Y VetAlert VETMSG.EXE"Computer Associates Vet Anti-Virus software"
U VetTray vettray.exe"Computer Associates "InnoculateIT" and Vet Anti-Virus virus software. System Tray quicklaunch access not really necessary but only occupies 36k resources"
X VFW Encoder/Decoder Settings RUNDLL32.exe MSSIGN30.DLL ondll_reg"Added by the LOVGATE-W WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X VGA Startup vgacard.exe"Added by a variant of the RBOT WORM!"
X VgaDriver RsrVga32.exe"Added by the KEYLOG-AH TROJAN!"
X VGATune VGATune.exe"Added by the RBOT-AWM WORM!"
U VGAUtil G-VGA.exeGigabyte VGA Utility - access card options (application needs to be run at startup but is not system critical)
X Vhosts Protection vhosts.exeAdded by an unidentified WORM or TROJAN!
X vid32cntl vid32cntl.Exe"Added by the CRYPTER.A TROJAN!"
N Vidalia Vidalia.exe"Vidalia is a cross-platform GUI controller for the Tor anonymityn package. Using Vidalia you can start and stop Tor view the status of Tor at a glance and monitor Tor's bandwidth usage"
X vidcntl vidcntl.Exe"Added by the CRYPTER.A TROJAN!"
X Vidcompat Vidcompat.exe"Added by the GEMA TROJAN!"
X vidctrl vidctrl.exe"Delfin Promulgate adware variant"
X Video explored.exe"Added by the GAOBOT.RF WORM!"
X Video winamp32.exe"Added by the AGOBOT-NG WORM!"
X Video Camera Frog wcamfrog.exe"Added by a variant of the IRCBOT TROJAN! See here"
X Video Card Driver (do not remove) tsasi.exe"Added by the SPYBOT-EF WORM!"
X Video Driver svchost.exe"Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
X Video Lan Player VideoLanPlayer.exe"Added by the RBOT-MY WORM!"
X Video Manager videomgr.exe"Added by the PANDEM.C WORM!"
X Video Multimedia Driver ndrives32.exe"Added by the RBOT-DK WORM!"
X Video Proces winaps.exe"Added by the AGOBOT.HD WORM!"
X Video Process sysconf.exe"Added by the GAOBOT.GEN!POLY or GAOBOT.UM or GAOBOT.ADX WORMS!"
X Video Process MS32x16.exe"Added by the RBOT.RH WORM!"
X Video Process netsvcs.exe"Added by the AGOBOT.LH WORM!"
X Video Process MSlti64.exe"Added by the AGOBOT.UE WORM!"
X Video Process [random filename]"Added by the RBOT-LM WORM!"
X Video Process winasp.exe"Added by the AGOBOT-IS WORM!"
X Video Process msn5.exe"Added by the AGOBOT-TW WORM!"
X Video Process MStli32s.exe"Added by the RBOT-GAD WORM!"
X Video Process wincert32.exe"Added by the AGOBOT.JT WORM!"
X Video Services explore.exe"Added by the GAOBOT.GL WORM!"
X Video Services videol_32.exe"Added by the AGOBOT-DM WORM!"
X Video Services sys32.exe"Added by the AGOBOT.PS WORM!"
X Videocntl Videocntl.exe"Added by a variant of the GEMA.D TROJAN!"
X VideoDriver [filename]"Added by the GSPOT20.A TROJAN!"
X VideoDriver videodrv.exe"Added by the MIMAIL.A WORM!"
X VideoDriver gspotbot.exe"Added by the SPIGOT.C TROJAN!"
X VideoDriverHook vmdriver.exe"Added by the BCKDR-PSS BACKDOOR!"
X Videool32 VIDEOL32.EXE"Added by the AGOBOT.EC WORM!"
X videoporno.exe videoporno.exePremium rate adult content dialer
Y Videora Videora.exe"Video Holding personal video downloading program"
X vidmon VIDMON.EXE"Delfin Media Viewer adware related"
N VidSvr vidsvr.exeMS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X vietato.exe vietato.exeAdult content dialler
X VIEW POINT DRIVERS phqghum.exe"Added by the RBOT.BRX WORM!"
X VIEW POINT DRIVERS FOR WIN32 phqghu.exe"Added by a variant of the RBOT WORM!"
U Viewbar Viewbar.exe"Agloco Viewbar is a small toolbar that rests on the bottom of your screen or browser window while you surf the Internet. The Viewbar software is what enables AGLOCO to collect the money you are earning while browsing the Internet"". Get paid for browsing but you must consent to them collecting your personal information"
N ViewMgr ViewMgr.exe"Viewpoint Manager - automatic updates for ViewPoint products such as ViewPoint Media Player (as bundled with AOL AOL Instant Messenger Compuserve etc). Can be run manually via Start -> Settings -> Control Panel by enabling auto-updates temporarily re-booting and then disabling again. Not recommended as Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything ""bad"". This may change in 2006 - read this article"
U ViewpointPhotosDeviceConnect FotomatDeviceConnect.exe"Related to Viewpoint which is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything ""bad"". This will change from what we know in 2006 according to this article. You can remove it via Start -> Settings -> Control Panel -> Add/Remove Programs list..."
U ViivMonitor ViivMonitor.exe"Related to Intel Media Share Software. ""Stream or download media files from your Intel® Core®2 Processor with Viiv® technology-based PC"""
? Vinny ??"??"
X vipantispyware vipantispyware.exe"VipAntiSpyware spyware remover - not recommended see here"
X Virt.exe Virt.exe"Added by the REMADM-C TROJAN!"
U VirtuaGirl Vg.exeVirtuaGirl is a shareware program featuring scantily dressed girls on your desktop. They say hi in the morning remind you of your appointments and dance for you on request...
U VirtuaGirl2 VirtuaGirl2VirtuaGirl is a shareware program featuring scantily dressed girls on your desktop. They say hi in the morning remind you of your appointments and dance for you on request...
X virtual winit.exe"Added by the MUGLY.A or MUGLY.B WORMS!"
X virtual winprotect.exe"Added by the MUGLY.C WORM!"
X virtual wini.exe"Added by the RBOT-YX WORM!"
U Virtual Access Scheduler VASCHD32.EXEThe scheduler for mail and usenet tool
X Virtual Bouncer VirtualBouncer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X Virtual CD v6 grplscd.exe"Added by the RBOT-AXV WORM!"
X Virtual CD v6 [random].exe"Added by the RBOT-AZV WORM!"
X Virtual CDROM deamon.exe"Added by the RBOT.VP WORM!"
X Virtual Protocol vr32.exe"Added by a variant of the SDBOT WORM!"
X virtual-ie winlogi.exe"Malware - detected by Kaspersky as the WINAD.H TROJAN!"
X virtual-machine svchosts.exe"Added by the RBOT-US WORM!"
X virtual-machine winlogin.exe"Added by the RBOT-VU WORM!"
X virtual-machine wini.exe"Added by the RBOT-WR WORM!"
N VirtualCloneDrive VCDDaemon.exe"Virtual Clone Drive part of CloneCD CD/DVD copying sofware. Discontinued"
N VirtualDrive VDTask.exe"VirtualDrive from Farstone - virtual CD/DVD drive emulator. Available via Start → Programs"
U VirtualExpander VirtualExpander.exe"Micro Vault Virtual Expander from Sony for their range of USB memory sticks. This software will compress your data to virtually store about 3 times as much data"
U VirtuaReminder VirtuaReminder.exe"VirtuaReminder is a tool allowing the user to create reminders for such things as important appointments birthdays etc"
U Virtuele Katja VKatja.exe"Virtuele Katja - have an attractive moviestar parade on your Desktop and help you search the Dutch ""Gouden Gids"" business directory too..."
X Virus Anti.exe"Added by the SEENBOT.O WORM!"
X Virus Protect vrsprtc.exe"Added by the RBOT-APR WORM!"
X Virus Removal Tool [path to trojan]"Added by the TOMETA-B TROJAN!"
X Virus Scan virscana.exeAdded by an unidentified VIRUS WORM or TROJAN!
X Virus-Burst Virus-Burst.exe"Virus-Burst spyware remover - not recommended see here"
X VirusBurst VirusBurst.exe"VirusBurst spyware remover - not recommended see here"
X VirusCheckII AVIRCHK.EXE"Added by the DASMIN TROJAN!"
X VirusHeat 3.9 VirusHeat 3.9.exe"VirusHeat misleading security program - not recommended see here"
X VirusIsolator VirusIsolator.exe"VirusIsolator misleading security software - not recommended see here"
U VirusKeeper VirusKeeper.exe"VirusKeeper uses a powerful real-time threat detection engine"
X VirusProtect 3.* VirusProtect 3.*.exe"VirusProtect misleading antivirus program (where * represents the version number) - not recommend see here"
X VirusProtectPro 3.* VirusProtectPro 3.*.exe"VirusProtect Pro misleading antivirus program (where * represents the version number) - not recommend see here"
X VirusRay 3.8 VirusRay 3.8.exe"VirusRay spyware remover - not recommended see here"
X VirusRescue VirusRescue.exe"Virus program - not recommended see here"
X VirusResponseLab2009 VirusResponseLab2009.exe"VirusResponse Lab 2009 rogue security software - not recommended see here"
X VirusRL2009 VirusRL2009.exe"VirusResponse Lab 2009 rogue security software - not recommended see here"
Y VirusScan Online mcvsshld.exeMcAfee VirusScan On-line. See also the McAgentExe entry
? VirusScanMSC VsStat.exe"Part of McAfee VirusScan. System Tray application as with previous versions (were also VsStat.exe) McAfee SecurityCenter integration or something else? Is it required?"
X VirusScanner mnsys.exe"Added by the SDBOT-AFQ WORM!"
X Virus_Scanner Virus_Cleaner.exe"Added by the PANOL WORM!"
X visin visin.exeLmir.1DB8!pws spyware
N visionGS VISIONGS.EXE"visionGS webcam software"
X VistaDrive VistaDrive.exe"VistaDrive malware"
? Vistadrv vsdrv.exe"Vista Drive - part of ArabLionZ XP Tools. What does it do and is it required?"
N Vistascan vistascan.exeIncluded in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users you'll see a scanner icon in the Windows Tray of the Taskbar. Click this icon and a menu opens
X VistaUpgrade vistaupgrade.exe"Added by the STRATION-AX WORM!"
X Visual Element FX5 [various filenames]"ClearStream Accelerator adware"
X VisualStudio msorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
U VisualTaskTips VisualTaskTips.exe"""Visual Task Tips is a lightweight shell enhancement utility. It provides thumbnail preview image for each task in the Windows Taskbar"""
U VisualTooltip VisualToolTip.exe"Related to VisualTooltip. Shows a thumbnail of a window by placing the mouse cursor over a button on the taskbar"
X ViSulaBaCis lsass.exe"Detected by Kaspersky as the AUTORUN.DIB WORM! See here. Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
X VITAL BOOT PROCESS taskmngr.exe"Added by a variant of the RBOT WORM!"
X VITAL BOOT PROCESS taskmnsgr.exe"Added by the Rbot-VY WORM!"
X Vital Load Process Spoolsvr.exe"Added by the RBOT.AIF WORM!"
X VividGalut VividGalut.exeAdult content related web downloader
X vlc vlc.exeDetected as the BUZUS.DVE TROJAN!
X vmcleaner gxlib.exe"Added by the SMALL-HS TROJAN!"
? VMConsole.exe VMConsole.exe"Sony VAIO Media Console - installed on the VAIO Media Integrated Server PCs. What does it do and is it required?"
Y VMDFW vmdfw.exe"VirusMD Personal Firewall. Vendor's Note: ""VirusMD Personal Firewall is a micro-firewall and should not be use as your primary virus scanner or as your primary firewall. It does not pan-block incoming or outgoing data. Rather is a diagnostic and therapeutic utility designed to help professionals save time and effort in eradicating Trojan horses"""
X vmlib vmlib.exe"Added by the LOWZONE-AQ TROJAN!"
X Vmlist apphelps.dll"Added by the ALAMNAHE.A VIRUS!"
X Vmmon32 vmmon32.exeBrowser hijacker
X vmnetdhcp vmnetdhcp.exe"Added by the DWNLDR-GTC TROJAN!"
X VMount drive vmount.exe"Added by the RIZO.A TROJAN!"
X vmsnGraber VMSNGRABER.EXE"Added by the ENVID.B WORM!"
X vmss vmss.exe"Delfin Media Viewer or ""Promulgate"" adware variant"
X vmtuner gclib.exe"Hijacker - detected by Kaspersky as the SMALL.FH TROJAN!"
X vmtuner gglib.exe"Added by the QLOWZON-D TROJAN!"
N VMware hqtray hqtray.exe"VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to ""run multiple operating systems simultaneously on a single PC."" It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product"
U VMware Workstation vmware-tray.exe"System Tray access to virtual machines (VMs) currently in a ""powered on"" state in VMware Workstation - which ""makes it simple to create and run multiple virtual machines on your desktop or laptop computer"". Can be helpful if VMs are configured to run ""headless"" at Windows startup in which case it can help you interact with the headless VMs. In that case VMs could be powered on headless without ever starting up Workstation. If VMs aren't configured to run headless it isn't really required"
N VMware Workstation hqtray.exe"VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to ""run multiple operating systems simultaneously on a single PC."" It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product"
U vmware-tray vmware-tray.exe"System Tray access to virtual machines (VMs) currently in a ""powered on"" state in VMware Workstation - which ""makes it simple to create and run multiple virtual machines on your desktop or laptop computer"". Can be helpful if VMs are configured to run ""headless"" at Windows startup in which case it can help you interact with the headless VMs. In that case VMs could be powered on headless without ever starting up Workstation. If VMs aren't configured to run headless it isn't really required"
X VnCplUpdate msdm.exe"Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory"
X vnmispoisn downloader vnmispoisn downloader.exeSearchBarCash adware variant
X VnrBlock20 VnrBlock20.exe"Berlinads adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list