PC Review
Startup Files Database
Letter a
Powered By Pac's Startup list
Startup Files Database
Letter a
Startup Files Database
[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]
Yes |
No |
Users Choice |
Warning |
Unknown |
| Normally leave to run at startup | Not Required, often infrequently run tasks that can be run manually. | Depends if the task is deemed necessary | Typically viruses, spyware, adware and resource hogs | An unknown item |
| Required | Process Name / Details | Startup File |
![]() |
Commercials file that registers itself in the system registry and redirects IE to a certain commercial website |
a.exe |
![]() |
Added by the MELO-A WORM! |
jesse.exe |
![]() |
Added by MYTOB.BM WORM! |
w32NTupdt.exe |
![]() |
Part of Verizon Online Support Manager |
VERIZO~1.EXE |
![]() |
a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the aý 'Background Guard' real time protection feature |
a2guard.exe |
![]() |
WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking |
winpppoverethernet.exe |
![]() |
Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features |
cpqa1000.exe |
![]() |
Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites |
A4Proxy.exe |
![]() |
?? |
AAACLEAN.INF |
![]() |
?? |
?? |
![]() |
System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray |
TraySaver.exe |
![]() |
Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere" |
aak.exe |
![]() |
Added by the DELF.LJ TROJAN! |
Avengine.com |
![]() |
Added by the BACKDOOR-CPC TROJAN! |
sys.exe |
![]() |
PurityScan/Clickspring adware |
amee.exe |
![]() |
AdBlaster adware |
adprot.exe |
![]() |
Appears to be related to software from Accenture.com |
ACNUpdater.exe |
![]() |
?? |
ezsched.exe |
![]() |
Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software |
CAGENT.EXE |
![]() |
Keystroke logger/monitoring program - remove unless you installed it yourself! |
keylogger.exe |
![]() |
EPJ TROJAN! |
abcdefgh.exe |
![]() |
ABIT æGuru - on motherboards incorporating the æGuru processor this provides quick access to "hardware monitoring, overclocking, BIOS flashing and audio tweakin |
uGuru.exe |
![]() |
Monitoring utility for ABIT Motherboards. Displays system voltages, temperatures and fan speeds |
abiteq.exe |
![]() |
Added by the DERMON-G TROJAN! |
abrada.exe |
![]() |
Absolute Shield Evidence Eliminator - internet history eraser |
dseraser.exe |
![]() |
Absolute Startup - startup monitor from F-Group Software |
ASMon.exe |
![]() |
AbsoluteShield Internet Eraser - "protects your privacy by cleaning up all the tracks of your Internet and computer activities" |
cseraser.exe |
![]() |
Added by the AUTOUPDER TROJAN! |
absr.exe |
![]() |
SeekSeek search hijacker related - see here |
mwsvm.exe |
![]() |
Loads the executable for Lop.com. mp3serch.exe is the final version |
mp3serch.exe |
![]() |
Loads the executable for Lop.com. lopsearch.exe is the beta version |
lopsearch.exe |
![]() |
Abyss web server |
abyssws.exe |
![]() |
Detected by Sophos as the SILLYFDC-A TROJAN! |
snddrv.exe |
![]() |
Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
AcBtnMgr_Xxx.exe |
![]() |
Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem" |
acc.exe |
![]() |
Added by the DARBY-O WORM! |
[path to worm] |
![]() |
Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection |
accelerate.exe |
![]() |
Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again |
armon32.exe |
![]() |
Added by the PPDOOR-M TROJAN! |
[path to file] |
![]() |
Part of SmartPipes SecureSite software. "SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management, access control management, and key management" |
AccessMgr.exe |
![]() |
My AccessMedia toolbar related, stealth installed! |
amp2pl.exe |
![]() |
Clock Plus, part of Accessories Plus allows you to select from dozens of alternatives for the Windows clock |
clockplus.exe |
![]() |
From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service." |
ARMon32a.exe |
![]() |
Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003 |
ARUpld32.exe |
![]() |
Norton(tm) Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities - all from the safety of your own PC |
AcctMgr.exe |
![]() |
Desktop weather from AccuWeather |
AccuWeatherDesktop.exe |
![]() |
Added by the RULAND.A WORM! |
accwizz.exe |
![]() |
Added by the RULAND.A WORM! |
accwizzz.exe |
![]() |
Added by the MAILBOT-BA TROJAN! |
bcdlmem.exe |
![]() |
ACDSee 8 photo software. Organize, manage, enhance, and share all your valued photo memories |
ACDSee8Pro.exe |
![]() |
?? |
Ace bows.exe |
![]() |
AceGain LiveUpdate can help to automate and optimize product updates. AceGain LiveUpdate will automatically detect new patch updates, driver updates or full product updates and automatically download and install them according to user configuration |
LiveUpdate.exe |
![]() |
Part of Acer Empowering Technology. "Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles, or to create their own customized profiles" |
Acer ePower Management.exe |
![]() |
Acer Computer "Goto Drive" Cold Swap Driver - a swappable second disk drive provides convenient backup of large files, or easy importation of data from user's previous computer |
AcerGoto.exe |
![]() |
System Tray access on some Acer Notebooks to give faster access to system settings |
almxptray.exe |
![]() |
PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3 |
Powerkey.exe |
![]() |
Added by the GAOBOT.PQA WORM! |
access2007a.exe |
![]() |
PurityScan/Clickspring adware |
[random filename] |
![]() |
ActivCard Gold from ActivIdentity, Inc. Smart card-based strong authentication software - for photo IDs, proximity badges for facility access and as digital identification and authentication |
acevtsrv.exe |
![]() |
Altiris AClient Service Windows Tray Icon |
AClntUsr.exe |
![]() |
Used by HP Instant Support |
pchbutton.exe |
![]() |
Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
ACMonitor_Xxx.exe |
![]() |
Adult content dialler |
fastdown.exe |
![]() |
Adult content dialler |
fastdown.exe |
![]() |
Mouse driver - required if you use non-standard Windows driver features |
Acombo3d.exe |
![]() |
Adult content dialler |
aconti.exe |
![]() |
Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained |
acoustic.exe |
![]() |
Program for finding trucks on-line |
agpart11.exe |
![]() |
Added by the SMALL-ECT TROJAN! |
acrmon32.exe |
![]() |
Essential for creating PDF files with Adobe Acrobat and Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation. *.* represents the version |
ACROTRAY.EXE |
![]() |
Added by the VANBOT-BQ TROJAN! |
acroup32.exe |
![]() |
Related to ACROMOUSE Laser mouse control |
ACROMAPP.exe |
![]() |
Part of Acronis Privacy Expert - anti-spyware and security suite |
RunDll32.exe [path] Blocker.dll, Run |
![]() |
Part of Acronis True Image backup software. Co-operates with the "schedul2.exe" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images |
schedhlp.exe |
![]() |
Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images |
schedhlp.exe |
![]() |
Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive |
TimounterMonitor.exe |
![]() |
Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage |
TrueImageMonitor.exe |
![]() |
Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage |
TrueImageMonitor.exe |
![]() |
Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive |
TimounterMonitor.exe |
![]() |
Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage |
TrueImageMonitor.exe |
![]() |
Sage Software's ACT! "enables individuals and small business customers to instantly access key contact and customer information, manage and prioritize activities, and track all contact-related communications so you can grow productive business relationships" |
Act8.exe |
![]() |
Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs |
am32.exe |
![]() |
A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client. Is it required? |
actionagent.exe |
![]() |
Part of Microsoft Money |
Activation.exe |
![]() |
Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys |
MMKeybd.exe |
![]() |
Added by the MYTOB.BZ WORM! |
abs.exe |
![]() |
XemiComputers Active Desktop Calendar |
ADC.EXE |
![]() |
Active Email Monitor checks multiple accounts for email, serves as a SPAM filter and can also protect you from harmful items that can be sent via email |
aem25.exe |
![]() |
Active Shield is "an heuristic screen that actively protects your computer from trojans, spyware, adware, trackware, dialers, keyloggers, and even some special kinds of viruses" |
Activeshield.exe |
![]() |
Added by the DABOOM WORM! |
systray32.exe |
![]() |
Added by the OPASERV.T WORM! |
ACTIVEDS.EXE |
![]() |
ActiveEyes from TFI Technology is a small utility that you can use to liven up your desktop. It follows your mouse around and can tell you how far your cursor has travelled or point out where the cursor is. It's small, it's free and comes with a range of options and animations. Not needed - if unavailable via Start -> Programs, create your own shortcut |
ActiveEyes.exe |
![]() |
Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action |
akeys.exe |
![]() |
Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
ActiveMenu.exe |
![]() |
Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on) |
activeplus.exe |
![]() |
Added by the RBOT-FKQ WORM! |
ActiveScan.exe |
![]() |
McAfee VirusScan On-line. See also the McAgentExe entry |
MCVSSHLD.EXE |
![]() |
Ascentive ActiveSpeed Internet Optimizer |
AS.exe |
![]() |
Added by the MANCSYN-E TROJAN! |
wcescom32.exe |
![]() |
ActiveWords from ActiveWord Systems, Inc. Like macro programs, ActiveWords sits in the background and watches as you type. When it recognizes that you've typed an ActiveWord, it takes the associated action, such as replacing your keystrokes with the text you've defined |
AWMonitor.exe |
![]() |
Added by the SDBOT.NQ WORM! |
msgfix.exe |
![]() |
Added by a variant of the DEDLER.C TROJAN! |
svcss.exe |
![]() |
ActivityKey Keystroke logger/monitoring program - remove unless you installed it yourself! |
actik.exe |
![]() |
Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates |
backweb*****.exe |
![]() |
ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding, nor are you required to know a lot about the computer |
ActMak25.exe |
![]() |
ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload |
ActMaker25.exe |
![]() |
System Tray icon for ThinkVantage Access Connections - "allowing users to seamlessly switch between wired and wireless environments, managing security settings, printers, home page and other location-specific settings automatically" |
ACTray.exe |
![]() |
Actual Window Minimizer - "allows minimizing any window to task tray notification area or to the edge of the screen" |
ActualWindowMinimizerCenter.exe |
![]() |
Added by the VB.IS TROJAN! |
v1201.exe |
![]() |
Atheros wireless Client Utility |
ACU.exe |
![]() |
Atheros wireless Client Utility |
ACU.exe |
![]() |
Related to IBM ThinkVantage Connectivity Solution |
ACWLIcon.exe |
![]() |
Ad Blocker - blocks popups, and also removes banners, image ads and flash ads |
blocker.exe |
![]() |
Ad Away popup and banner remover |
Ad Blocker Pro.exe |
![]() |
Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications |
AdMunch.exe |
![]() |
?? |
adonlineguide.exe |
![]() |
Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
Ad-aware.exe |
![]() |
Added by the RBOT-ADJ WORM! Note - this is not the popular Ad-aware spware/adware removal tool and is located in the WinntSystem32 or WindowsSystem32 directory |
Ad-Aware.exe |
![]() |
Spyware remover - not recommended, see here |
ad-eliminator.exe |
![]() |
Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications |
ADMUNCH.EXE |
![]() |
Ad-Protect spyware and spam monitoring tool |
ad-protect.exe |
![]() |
Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
Ad-watch.exe |
![]() |
Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip(r) disk. Required if you wish the applications to launch on insertion of a disk |
AD2KClient.exe |
![]() |
DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
Directcd.exe |
![]() |
DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
Directcd.exe |
![]() |
Added by the RBOT-XN WORM! |
wini.exe |
![]() |
Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
ad-aware.exe |
![]() |
RapidBlaster variant (in a "Adaware" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware |
adaware.exe |
![]() |
RapidBlaster variant (in a "Adaware" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware |
adaware.exe |
![]() |
AdBin - "Free and easy solution to managing your Window's hosts file. A fun way to block ads" |
AdBin.exe |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Add**.exe [* = random char] |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Add**32.exe [* = random char] |
![]() |
CoolWebSearch Addclass parasite variant |
AddClass.exe |
![]() |
Added by the STARTPAGE.F hijacker |
[Installation_Path] |
![]() |
Added by the SECDL-A TROJAN! |
[path to trojan] |
![]() |
Banner advertisment blocker |
AdDelete.exe |
![]() |
Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here |
AdDestroyer.exe |
![]() |
Added by a variant of the IRC.BOT TROJAN! |
pkgadd.exe |
![]() |
Related to Adobe Photoshop |
addproxy.exe |
![]() |
SoundBlaster Audigy related? |
ADG.exe |
![]() |
Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection |
ADGJDet.exe |
![]() |
Added by the SPAMSRV-E TROJAN! |
adirss.exe |
![]() |
ADSL USB modem related |
Adiras.exe |
![]() |
Added by the TIBS-QT TROJAN! |
adirka.exe |
![]() |
Part of Advanced Spyware Remover anti-spyware tool |
AD Defender.exe |
![]() |
Added by a variant of the SDBOT TROJAN! |
admlib32.exe |
![]() |
Adware, probably a Windupdates variant |
AdManCtl.exe |
![]() |
Windupdates adware variant |
AdmilliServ.exe |
![]() |
Added by the NOVACAL TROJAN! |
svchost.scr |
![]() |
Added by the RUBBLE-C WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
winlogon.exe |
![]() |
Added by the PUNYA-B WORM! |
Dago.exe |
![]() |
Added by the STARGRUB-A WORM! |
sysfile.vbs |
![]() |
Related to Acer Inc. destop tray |
admtray.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
Adobe.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
sysconfig.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
gam.exe |
![]() |
Added by the LOWZONES.T TROJAN! |
sysbat32.exe |
![]() |
Added by an unidentified TROJAN! |
zteam.exe |
![]() |
Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly |
READER~1.EXE |
![]() |
Added by the RANDEX.DFJ WORM! |
acrotray.exe |
![]() |
Added by a variant of the RBOT WORM! |
[random filename] |
![]() |
Added by the RBOT-OP WORM! |
afilterplatform.exe |
![]() |
Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine |
Adobe Gamma Loader.exe |
![]() |
Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here) |
apdproxy.exe |
![]() |
Speeds up the launch of Adobe (Acrobat) Reader 7 |
reader_sl.exe |
![]() |
Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly |
reader_sl.exe |
![]() |
Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly |
READER~1.EXE |
![]() |
Adobe Synchronizer - installed along with Adobe Reader 8.x. "Synchronizer is a small application that runs in the background, providing synchronization of document reviews and Tracker subscriptions so that your data is available when you need it." See the link for more information |
AdobeCollabSync.exe |
![]() |
File manager that's part of Adobe Creative Suite 2 - "find files fast, track versions across applications, link files together, and share them in creative collaboration without fear of overwriting someone else's work" |
VersionCueCS2Tray.exe |
![]() |
Added by the FLOOD.BA TROJAN! |
adobes.exe |
![]() |
Browser hijacker - redirecting to Hugesearch.net |
fonts.hta |
![]() |
Added by the ADCLICKER TROJAN! |
adobemgr.exe |
![]() |
Added by the RBOT.DAO TROJAN! |
msni.exe |
![]() |
Added by the RBOT-ASK or RBOT-AUS WORMS! |
msnxpsp.exe |
![]() |
Added by the RBOT-ATY WORM! |
ntkernell32.exe |
![]() |
Added by the SDBOT-AKH WORM! |
msnserve.exe |
![]() |
Added by the IRCBOT-VQ WORM! |
updt.exe |
![]() |
Added by the RBOT-GAT WORM! |
msx64.exe |
![]() |
Added by the RBOT-BGH WORM! |
sysmsn.exe |
![]() |
An exclusive feature of the Adobe(r) Creative Suite, Version Cue(tm) helps you find files fast, track multiple versions of your files, and share your files for creative collaboration |
VersionCueTray.exe |
![]() |
Downloader of Korean origin, detected as ADOD.28672 |
adodemaster.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
lsasv.exe |
![]() |
Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc |
adp.exe |
![]() |
Added by the AGENT-FZ TROJAN! |
dcf5678.exe |
![]() |
AdBlaster adware |
adprot.exe |
![]() |
After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95 |
Adtray.exe |
![]() |
Added by the DELF.WG TROJAN! |
windrv.exe |
![]() |
AdRoar adware updater |
ARUpdate.exe |
![]() |
Added by the SMALL-AQ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! |
[path to csrss.exe] |
![]() |
Added by FakeMessage/AdRotator adware. Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in an "Inetsrv" subfolder |
services.exe |
![]() |
Adware remover - not recommended, see here |
ADS Adware Remover.exe |
![]() |
Reported as DILAER.DW by NOD32 |
stopAds.exe |
![]() |
Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip(r) disk. Required if you wish the applications to launch on insertion of a disk |
ADService.exe |
![]() |
AdsGone - pop-up stopper |
Adsgone.exe |
![]() |
System tray access to ADSL modem diagnostic tools. Available via Start -> Programs |
mapiicon.exe |
![]() |
Apparently Annex A ADSL modem related. What does it do and is it required? |
SystemtrayV100B.exe |
![]() |
ISP software, initializes DSL modem |
rundll32.exe stmctrl.dll, TaskBar |
![]() |
Added by the RBOT-AXZ WORM! |
taskmng.exe |
![]() |
Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required? |
A2Installed |
![]() |
ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied |
ADSS.exe |
![]() |
Adlogix adware variant |
automove.exe |
![]() |
Adlogix adware variant |
Adstartup.exe |
![]() |
WindUpdates AdStatus Service adware |
AdStatServ.exe |
![]() |
AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs. Now superseeded by Trend Micro AntiSpyware |
adsub.exe |
![]() |
Detected by Kaspersky as the STARTPAGE.AW TROJAN! |
adtech2005.exe |
![]() |
Detected by Kaspersky as the VB.KC WORM! |
adtech2006.exe |
![]() |
Windupdates Adware |
AdTools.exe |
![]() |
Related to Cisco Aironet wireless products. What does it do and is it required? |
adu.exe |
![]() |
Adult content dialler and hijacker |
AdultX.exe |
![]() |
Adult content dialler |
Adult_Chat.exe |
![]() |
Adult content dialler |
Adult_Chat1.exe |
![]() |
Unidentified adware downloader/updater |
sysupudt.exe |
![]() |
Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip(r) disk. Required if you wish the applications to launch on insertion of a disk |
ADUserMon.exe |
![]() |
Added by the RANCK-FI TROJAN! |
exo32.exe |
![]() |
Added by a variant of the SPYBOT WORM! |
cerf.exe |
![]() |
Added by a variant of the RBOT WORM! |
advpsys.exe |
![]() |
Advanced Spyware Remover anti spyware tool |
Asr.exe |
![]() |
Added by a variant of the RBOT WORM! |
advchks.exe |
![]() |
Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
ADVCHK.EXE |
![]() |
Innovative Solutions Advanced Uninstaller PRO - "easy-to-use suite for uninstalling applications and keeping your computer fast, clean, and in its best shape" |
monitor.exe |
![]() |
Added by the NETDEVIL.12 WORM! |
Advapi.exe |
![]() |
Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
ADVCHK.EXE |
![]() |
Advertising Killer - popup stopper |
Akiller.exe |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
advmon32.exe |
![]() |
Adware Agent popup blocker |
adware agent.exe |
![]() |
Adware remover - not recommended, see here |
AdwareSpy.exe |
![]() |
Adware program, previously not recommended (see here). It has now been delisted, so make sure you have the latest version |
AdwareAlert.Exe |
![]() |
Adware remover - not recommended, see here |
adwaredelete.exe |
![]() |
IBM High Rate Wireless LAN Adapter driver. Is it required? |
Aeiwlsta.exe |
![]() |
Audio Applications Launcher for the Philips Acoustic Edge soundcard |
AELaunch.exe |
![]() |
Added by the RANDON-AO WORM! |
AERVICESN.exe |
![]() |
Altiris Agent transmits information about your machine for the purpose of asset management and deployment |
AeXAgentActivate.exe |
![]() |
Altiris Express NS Client Manager software. Is it required? |
AeXSWDUsr.exe |
![]() |
IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
aptezbp.exe |
![]() |
AFAFilter - internet filter software |
windefault.exe |
![]() |
Added by the ONLINEG-L TROJAN! |
fsfjasj8.exe |
![]() |
Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs |
Agent.exe |
![]() |
Added by the DREF-V VIRUS! |
alsys.exe |
![]() |
Added by the DREF-U VIRUS! |
ppl.exe |
![]() |
Added by the PPdoor.M-bdr backdoor TROJAN! |
[random filename] |
![]() |
Unidentified adware |
[random filename] |
![]() |
Part of Panda Antivirus . Is this an update reminder (guess because of the name), virus definition update reminder or something similar? |
Remupd.exe |
![]() |
Malware, detected by Kaspersky as AdWare.Monker.a. NOTE: do NOT confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the WindowsMsagent folder |
agentsvr.exe |
![]() |
For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive |
AgfaCLnk.exe |
![]() |
Added by the GAOBOT.SY WORM! |
agp32.exe |
![]() |
IBM AMR modem driver |
AGRSMMSG.exe |
![]() |
Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs |
AGSatellite.exe |
![]() |
Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
ahfp.exe |
![]() |
Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
ahfp.exe |
![]() |
AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis |
AhnSD.exe |
![]() |
?? |
AHNUE.exe |
![]() |
Added by a variant of the SDBOT WORM! |
ahost.exe |
![]() |
Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required |
ahqinit.exe |
![]() |
PurityScan/Clickspring adware |
iebs.exe |
![]() |
Added by the ANACON-B WORM! |
[path to worm] |
![]() |
Added by the CERTIF-M TROJAN! |
ahui32.exe |
![]() |
PurityScan/Clickspring adware |
tuaa.exe |
![]() |
PurityScan/Clickspring adware |
ttuh.exe |
![]() |
PurityScan/Clickspring adware |
eetu.exe |
![]() |
Keyboard related |
DVMAIN.EXE |
![]() |
Keyboard related |
KEYAPP.EXE |
![]() |
Another IE Popup Killer - pop-up stopper |
aiepk2.exe |
![]() |
AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs |
aim.exe |
![]() |
AIM plus - a free add-on to AOL's Instant Messenger for Windows from Big-O Software |
AIM+.exe |
![]() |
Added by the RBOT-AFV WORM! |
[random filename] |
![]() |
Added by the GUAP-F WORM! |
aimplugin.exe |
![]() |
Added by the BUDDY TROJAN! |
AIM reminder.exe |
![]() |
AOL Instant Messenger - start it when you want to use it |
AOLLaunch.exe |
![]() |
AOL Instant Messenger - start it when you want to use it |
aim6.exe |
![]() |
Added by the AGOBOT.AEE WORM! |
aim95.exe |
![]() |
RapidBlaster variant (in a "Aimaol" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
aimaol.exe |
![]() |
RapidBlaster variant (in a "Aimaol" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
aimaol.exe |
![]() |
IMSufSentinel is a spy program which can record IM conversations, log keystrokes, record URLs visited, and take screenshots. If you didn't install this yourself remove it |
aimb.exe |
![]() |
AimingClick from AimingTech. Web searching tool. Available via Start -> Programs |
AimingClick.exe |
![]() |
AIM Pro - secure instant messaging, video conferencing, on-line meetings and desktop and file sharing |
aimpro.exe |
![]() |
Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs |
?? |
![]() |
Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
AIMWDInstall.exe |
![]() |
USB interface for Aiptek Graphics Tablet (USB) |
atwtusb.exe |
![]() |
Related to "Prutect" malware from e2Give |
aircity.exe |
![]() |
Added by the EVILBOT.C TROJAN! |
WinServ.exe |
![]() |
Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action |
akeys.exe |
![]() |
Added by the ONLINEG-M TROJAN! |
fsakfask9.exe |
![]() |
Advertising Killer - popup stopper |
akiller.exe |
![]() |
Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer |
ala.exe |
![]() |
Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop |
Alarm.app.exe |
![]() |
Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required? |
AlarmWatcher.exe |
![]() |
Scanner software, not required for scanner to work |
ABMTSR.EXE |
![]() |
RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
ALCFDRTM.EXE |
![]() |
RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
ALCFDRTM16.com |
![]() |
ClickAlchemy adware |
Alchem.exe |
![]() |
Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to data about the customer. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation |
Alcmtr.exe |
![]() |
Alcohol 120% - CD/DVD emulation/writing/copying software |
Alcohol.exe |
![]() |
Alcohol 120% - CD/DVD emulation/writing/copying software |
Alcohol.exe |
![]() |
Alcohol 120% is a powerful Windows application that makes it easy to create backups of DVDs* and CDs. In addition, the program lets you store your most used CDs as images on your computer, so you can call them up at the click of a button. This part automounts images disc images |
axcmd.exe |
![]() |
?? |
FMW_PCAP.EXE |
![]() |
RealTek High Definition audio driver related - detects new devices when plugged in, then pops up a dialog box. If everything works as expected you should be able to disable this one |
ALCWZRD.EXE |
![]() |
Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation |
Alcxmntr.exe |
![]() |
Added by the RBOT-XS WORM! |
tay0x.exe |
![]() |
Added by the MAHA.F TROJAN! |
alerter.exe |
![]() |
Added by the OPASERV-A WORM! |
Alevir.exe |
![]() |
Added by the OPASERV WORM! |
[worm filename] |
![]() |
Related to Alexa. Note - collects and stores information about the web pages you view, the data you enter in online forms and search programs and, with versions 5.0 and higher, the products you purchase online whilst using the toolbar. Although Alexa state's they do not attempt to analyze the data it may collect about you to determine who you are, some of your information collected by the software is personally identifiable. Please read the Privacy Policy. Not Recommended |
alexa.exe |
![]() |
Reported as the DELF.EB hijacker by Ewido Security Suite |
alt.exe |
![]() |
AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware |
AlfaCleaner.exe |
![]() |
AlfaClock from AlfaSoft Research Labs - "enhances your taskbar clock (tray clock) with fully customizable clock display, alarms, time synchronization and more" |
AlfaClock.exe |
![]() |
AlfaClock2 - tray/desktop clock and time synchronization software |
AlfaClock2.exe |
![]() |
?? |
AlfyAC~1.exe |
![]() |
Added by the DEMOTRY-B WORM! |
iexplorer .exe |
![]() |
Added by the STARTPAGE.K hijacker |
ALG32.EXE |
![]() |
Detected by Kaspersky as the VB.ATE TROJAN! |
algchk.exe |
![]() |
Added by the CWS-I TROJAN! |
ALGU.EXE |
![]() |
Related to Uli Integrated Drivers from Uli Electronics Inc |
ALi5289.exe |
![]() |
Screen-capture utility for Alias Sketchbook |
ALIASS~2.EXE |
![]() |
Alienware computer technical support software |
Test_BS.exe |
![]() |
ALi AC97 Sound driver |
ALiSndMg.exe |
![]() |
May be realted to a USB 2.0 PCI card - the IOgear GIC220OU? |
GREENMK.exe |
![]() |
Added by the TOFDROP-B TROJAN! |
scchost.exe |
![]() |
Added by the TOFDROP-B TROJAN! |
scchostc.exe |
![]() |
Added by the BALKART TROJAN! |
ׄ㡥.exe |
![]() |
All Aboard! Internet Connection Sharing status icon |
stswin.exe |
![]() |
Free screensaver, installs lots of foistware. See here. Get rid of it |
TaskTray.exe |
![]() |
Free screensaver, installs lots of foistware. See here. Get rid of it |
FWLink.exe |
![]() |
AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually |
AllerCalc.exe |
![]() |
Added by the RANKY.CU TROJAN! |
[path to trojan] |
![]() |
Added by the RANKY.CU TROJAN! |
[path to trojan] |
![]() |
All-Seeing_Eye security software - "monitors everything that takes place on your computer, and alerts the user as soon as anything suspicious or out-of-the-ordinary is happening, providing the user with alternatives for possible actions" |
ase.exe |
![]() |
allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop |
allSnap.exe |
![]() |
AlltoTray from DNTSoft - minimize any program to your System Tray |
ALLTOTRAY.EXE |
![]() |
Added by a variant of the SDBOT WORM! |
alq.exe |
![]() |
From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
Alogserv.exe |
![]() |
ALPass password manager |
ALPass.exe |
![]() |
Alps Electric USB Server - required according to this article |
Monserv.exe |
![]() |
Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
Apoint.exe |
![]() |
Altec Lansing AMS speaker related. What does it do and is it required? |
ALServ.exe |
![]() |
Altnet TopSearch adware |
points manager.exe |
![]() |
Altnet TopSearch adware |
points manager.exe |
![]() |
Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
AltoMBsrv.exe |
![]() |
ALTools family of PC utilities |
AccessL.exe |
![]() |
WeirdOnTheWeb adware |
AltPayments.exe |
![]() |
Symantec LiveUpdate scheduler for programs such as Norton AV or Internet Security |
ALUSchedulerSvc.exe |
![]() |
Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
ALUNotify.exe |
![]() |
Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
SecurityCenter.exe |
![]() |
Aluria Pop-Stopper |
eps.exe |
![]() |
Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
ASE.exe |
![]() |
Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
AlwaysOnTopMaker.exe |
![]() |
Related to HP and Compaq Desktop PCs. Read this article |
ARPWRMSG.EXE |
![]() |
Premium rate adult content dialler |
AmazingTens.exe |
![]() |
AMD PowerNow! - "an innovative solution available on all AMD mobile processor-based notebooks that can effectively increase notebook battery life, while delivering performance on demand" |
GemBack.exe |
![]() |
AMD Dual-Core Optimizer - "can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction" |
amd_dc_opt.exe |
![]() |
Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs |
aoltray.exe |
![]() |
Loads ADSL modem Control Panel applet |
rundll32 amecsa.cpl, RUN_DLL |
![]() |
ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc |
ModemLockDown.exe |
![]() |
Monitoring part of Eset's NOD32 virus-scanner |
AMON.EXE |
![]() |
Tiny Personal Firewall |
amon.exe |
![]() |
WinOFF is " a utility designed to shut down Windows computers automatically, in a fully configurable way" |
winoff.exe |
![]() |
Part of the IBM ThinkVantage Productivity Center. "The Message Center sends automatic notification on ThinkVantage Technologies integrated with your system. Once you're online" |
Amsg.exe |
![]() |
aMSN Messenger is a multiplatform MSN messenger clone |
amsn.exe |
![]() |
Added by the BANKER-BNZ TROJAN! |
amsn.exe |
![]() |
Anapod Explorer "is the most advanced Windows iPod software available, offering iPod management through full Windows Explorer integration under My Computer" |
anamgr.exe |
![]() |
Added by the TITOG.C WORM! |
nabv32.exe |
![]() |
ALPHA Networks wireless driver |
WZCSLDR2.exe |
![]() |
D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity |
WZCSLDR.exe |
![]() |
Genius Wizard Pen Tablet driver related. Is it required? |
AnnCheck.exe |
![]() |
MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
Annclist.exe |
![]() |
Caere Pagekeeper text annotation server |
Anntext.exe |
![]() |
Anonymizer Total Net Shield - ID protection and privacy software |
AnonTns.exe |
![]() |
Anonymizer Spyware Killer - now Anti-Spyware |
SpyWareKiller.exe |
![]() |
Anonymizer Spyware Killer - now Anti-Spyware |
AnonAntiSpyware.exe |
![]() |
Another IE Popup Killer - pop-up stopper |
aiepk2.exe |
![]() |
Added by the RANDON-AN WORM! |
[path to worm] |
![]() |
Added by the DLOADER-MW TROJAN! |
PYSKY.NET.exe |
![]() |
Added by the SDBOT-SC WORM! |
dSAFsqs.exe |
![]() |
AnswerTool - save your E-mail replies in AnswerTool, then reuse them again and again |
AnswerTool.exe |
![]() |
Added by the MYTOB-BK WORM! |
spamsvc.exe |
![]() |
Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives |
Anti-Blaxx.exe |
![]() |
Anti-keylogger - protects against keylogger programs monitoring your keystrokes |
antikey.exe |
![]() |
Anti-Trojan Watch - trojan detector |
ATWatch.exe |
![]() |
Added by the SDBOT.GV WORM! |
vpms.exe |
![]() |
Added by the CAPROBAD-A TROJAN! |
[random filename].exe |
![]() |
Added by the KEDEBE.D WORM! |
[unprintable character][3 characters]log.exe |
![]() |
Added by the SPAMMIT-A TROJAN! |
[path to trojan] |
![]() |
Malware - detected by Kaspersky as the AGENT.FP TROJAN! |
winsp3.exe |
![]() |
Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe, kaspersky.exe, nrton.exe, wins.exe, gah32.exe, 1.tmp, syste.exe, alg.exe, socks.exe, winxpsp2.exe, tek9.exe, sks.exe, hihi.exe, s.exe, xps2.exe, dns2.exe, ikav32.exe and more... |
[path to trojan] |
![]() |
Added by the CBH TROJAN! |
SVCHST32.EXE |
![]() |
Dialer_Watcher is an application that allows you to detect dialers on your computer |
Dialer_Watcher.exe |
![]() |
Added by the BANCBAN-QJ TROJAN! |
ahr.exe |
![]() |
AntiPopUp for IE - pop-up stopper |
AntiPopUp.exe |
![]() |
AntiSpywareBot misleading spyware remover - not recommended, see here |
AntiSpywareBot.exe |
![]() |
Spyware remover - not recommended, see here |
AntiVerminser.exe |
![]() |
Added by the RAGRUK-A TROJAN! |
svchst.exe |
![]() |
Added by the AGENT-DSF TROJAN! |
scvhost.exe |
![]() |
Added by the IRCBOT-TJ TROJAN! |
winlog.exe |
![]() |
AntiVir(r) PersonalEdition Classic - antivirus |
AVwin.exe |
![]() |
Added by the SINKIN TROJAN! Resets IE start page to realphx.com |
av.exe |
![]() |
Added by the NETSKY.H WORM! |
maja.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
iexpl0res.exe |
![]() |
Added by a variant of the RBOT WORM! |
kaspery.exe |
![]() |
Added by the BANKER-EHB TROJAN! |
AntiVirus.exe |
![]() |
Added by the BADGENT-A TROJAN! |
[path to trojan] |
![]() |
Added by the RBOT.EXI WORM! |
ccapp2.exe |
![]() |
Added by the RBOT-JF WORM! |
updates.exe |
![]() |
Spyware remover - not recommended, see here |
Antivirus-Golden.exe |
![]() |
Added by the SPYBOT.KAI WORM! |
antivirus.exe |
![]() |
AntivirusGold malware |
AntivirusGold.exe |
![]() |
?? |
qumk.exe |
![]() |
Added by the DLOADER-HW TROJAN! |
elite***32.exe [*** = random char] |
![]() |
Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory |
AntiMsMsg.exe |
![]() |
Added by the LODEAR.D TROJAN! |
anti_troj.exe |
![]() |
AnVir Task Manager - protects computer against viruses and manages running processes and startup files |
AnVir.exe |
![]() |
AnVir Task Manager - protects computer against viruses and manages running processes and startup files |
AnVir.exe |
![]() |
System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar |
anvshell.exe |
![]() |
Any To-Do List "the ultimate software solution to keep yourself organized and reminded" |
anytodo.exe |
![]() |
Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
ftflauncher.exe |
![]() |
AnyDVD - descrambles DVD-Movies automatically in the background and the DVD appears unprotected and region code free. Also removes prohibited operations from the DVD such as skipping adverts - hence the "U" recommendation |
AnyDVD.exe |
![]() |
System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel |
AOTray.Exe |
![]() |
AOL's Active Virus Shield |
avp.exe |
![]() |
Added by the SPYBOTER.A TROJAN! |
AOLClient.exe |
![]() |
matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
matcli.exe |
![]() |
Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process, and is installed for ease of use |
companion.exe |
![]() |
Added by the SDBOT-XE WORM! |
aimsng.exe |
![]() |
AOL ISP software related. What does it do and is it required? |
AOL.exe |
![]() |
Added by the SDBOT-YT WORM! Note - this is not the popular AOL Instant Messenger utility |
aim.exe |
![]() |
Added by the AGOBOT-FN WORM! |
aol.exe |
![]() |
That is an L between the A and M, the start up location is wrong for AIM. What does this relate to? |
AlM.EXE |
![]() |
Added by the KELVIR.AL WORM! |
aolmsg.exe |
![]() |
Added by the IRCBOT.N TROJAN! |
aimsgr.exe |
![]() |
Added by the SDBOT-ZF WORM! |
aim9283.exe |
![]() |
Added by the SDBOT-ABJ WORM! |
aolfix.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
[random filename] |
![]() |
Added by the SDBOT-JF WORM! |
aolmsngr.exe |
![]() |
Added by the AOLOPT TROJAN! |
AOLOpt.exe |
![]() |
Added by an unidentified WORM or TROJAN! |
aolserviceshosts.exe |
![]() |
AOL's spyware protection program |
AOLSP Scheduler.exe |
![]() |
AOL's TopSpeed web acceleration technology supposedly helps to make web browsing faster. Most important for those users who still access AOL via dial-up |
aoltsmon.exe |
![]() |
AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually |
Acsd.exe |
![]() |
AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually |
AOLACSD.EXE |
![]() |
AOL ISP software related, file located in a "AOL Computer Check-Up" folder. What does it do and is it required? |
ACCAgnt.exe |
![]() |
Added by the TAPLAK WORM! |
config.com |
![]() |
AOL ISP software dialer - can be activated through a desktop shortcut |
AOLDial.exe |
![]() |
Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once |
AolFix.exe |
![]() |
Unidentified malware - see here |
AOREGSVR512.EXE |
![]() |
AOL ISP related. What does it do and is it required? |
AOLAgent.exe |
![]() |
Added by the KRAIMER.12 TROJAN! |
AOLStart.exe |
![]() |
Added by a variant of the IRCBOT TROJAN! |
aolupdater.exe |
![]() |
Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware |
aornum.exe |
![]() |
System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel |
AOTray.Exe |
![]() |
Chivio dialer |
sysrtmvs.exe |
![]() |
APC PowerChute Personal Edition status icon |
Display.exe |
![]() |
PowerChute(r) Personal Edition - "safe system shutdown software with sophisticated power management functions" |
mainserv.exe |
![]() |
Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure |
apc_tray.exe |
![]() |
PacerD Media/Pacimedia.com adware |
APD123.exe |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Api**.exe [* = random char] |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Api**32.exe [* = random char] |
![]() |
Added by the IRCBOT-B TROJAN! |
api32.exe |
![]() |
Added by the MSNOPT-A TROJAN! |
lexplore_.exe |
![]() |
Added by the TIBSER.A downloader TROJAN! |
apimonx.exe |
![]() |
Added by a variant of the TIBSER.A downloader TROJAN! |
winapix.exe |
![]() |
Added by the DROPPER.Z TROJAN! |
msreg.exe |
![]() |
Added by a variant of the LAMEBOT TROJAN! |
apisvc.exe |
![]() |
Sage Software's ACT! The application pre-loader (apl.exe) is a self contained executable that pre-loads the necessary .NET framework and ACT! 2005 assemblies. This pre-loading of assemblies enhances ACT! startup, view load and dialog load times in some areas of the application |
APL.exe |
![]() |
Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required? |
APMSRV9X.EXE |
![]() |
Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
Apoint.exe |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
App**32.exe [* = random char] |
![]() |
Added by the BODIRU WORM! |
[path to worm].exe |
![]() |
Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established |
vAppCon.exe |
![]() |
Added by the CARGAO WORM! |
appconn.exe |
![]() |
Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received |
AppExtCB.exe |
![]() |
Added by the AGENT-BC TROJAN! |
appis.exe |
![]() |
Aztech Labs modem driver |
mdmsetsp.exe |
![]() |
Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components." |
Naldesk.exe |
![]() |
Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications |
NalView.exe |
![]() |
Added by the LINKBOT.M WORM! |
algs.exe |
![]() |
Added by the IRCBOT-CX TROJAN! |
smsbvl32.exe |
![]() |
AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)" |
AppPlus.exe |
![]() |
Part of Panda Antivirus . Required to enable permanent virus protection |
APVXDWIN.EXE |
![]() |
Part of Panda Antivirus . Required to enable permanent virus protection |
APVXDWIN.EXE |
![]() |
Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam, spyware, dangerous or time-wasting content, phishing scams, hackers and intruders |
ClShield.exe |
![]() |
Wheel support for an Alps mouse |
Apwheel.exe |
![]() |
Added by the SDBOT.BTR WORM! |
simenu.exe |
![]() |
ScreenScenes "Aquatica Water Worlds" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
AQ3HEL~1.EXE |
![]() |
Added by the AGENT.BG WORM! |
aqadcup.exe |
![]() |
Added by the RANCK-CQ TROJAN! |
[path to file] |
![]() |
Added by the SDBOT-YC WORM! |
aqujyjax.exe |
![]() |
Added by the ANTINNY WORM! |
[random filename] |
![]() |
Arcade Rockstar (now Gamevance) - free arcade games and prize tournaments. The program itself is clean, but the TOS and privacy statement say that you agree to allow the program to track/report your surfing and put popup advertising on your computer |
arcaderockstar32.exe |
![]() |
Adware - detected by Kaspersky as the CENTIM.A TROJAN! |
archive.exe |
![]() |
Added by the MYTOB.GU WORM! |
fixupdattr.exe |
![]() |
Backup software by Computer Associates - no longer supported |
N/A |
![]() |
Ardakey B keystroke logger/monitoring program - remove unless you installed it yourself! |
akl.exe |
![]() |
Ares is a free open source file sharing program that enables users to share any digital file including images, audio, video, software, documents, etc |
ares.exe |
![]() |
Ares is a free open source file sharing program that enables users to share any digital file including images, audio, video, software, documents, etc |
AresLite.exe |
![]() |
Argentum Backup - a small backup program that lets you easily back up your documents and folders |
ab.exe |
![]() |
Added by the ARITIM WORM! |
aritima.exe |
![]() |
Related to Armor2net personal firewall (possibly contains or is related to an anti-spyware product known as ArmorWall, which is a spyware remover - not recommended, see here |
Armor2net.exe |
![]() |
Advanced Registry Optimizer - "scan, identify, clean and repair errors in your Windows registry with a single click". Reminder that states that you are in trial mode |
aro.exe |
![]() |
Related to HP and Compaq Desktop PCs. Read this article |
ARPWRMSG.EXE |
![]() |
Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance |
arteraui.exe |
![]() |
Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required? |
Gear511.exe |
![]() |
Netgear RangeMax NEXT wireless adapter configuration utility |
WN511B.exe |
![]() |
NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup? |
WPN511.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
dsldbaccess.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
canada.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
france.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
fullgames.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
100171be.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
100176br.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
adult1.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
Austria.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
belgium nm.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
czech.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
dbaccess.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
dslgeaccess.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
Finland.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
geaccess.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
mexico.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
netherlands.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
turkey.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
uk nm.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
Xadult1.exe |
![]() |
AsdPlug premium rate adult content dialer variant |
temp532.exe |
![]() |
Added by the LEGMIR-ARF TROJAN! |
dasxcsx13.exe |
![]() |
Added by the AGOBOT.VO WORM! |
xwinrpc32.exe |
![]() |
Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here |
ASE Scheduler.exe |
![]() |
Ashampoo popup blocker, part of Magical Security (was Privacy Protector Plus) |
PopUpKiller.exe |
![]() |
Part of Avast antivirus |
ashAvast.exe |
![]() |
Ashlt adware |
Ashlt.exe |
![]() |
Part of Avast! anti-virus software - E-mail scanner |
ashmaisv.exe |
![]() |
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
regsvr32.exe ctasio.dll |
![]() |
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
rregsvr32.exe ctasio.dll |
![]() |
Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
rundll32.exe [path] ASK.dll rdl |
![]() |
Added by the BANCOS-CU TROJAN! |
Aslru.exe |
![]() |
Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses, spyware and other dangers and learn what steps you can take to improve your protection |
ASMonitor.exe |
![]() |
Popup blocker, part of Asmw Soft PC Optimizer |
popups burner.exe |
![]() |
Added by the RBOT.EVU TROJAN! |
msasn.exe |
![]() |
Added by the VB.CBW WORM! |
SocksA.exe |
![]() |
Added by the AGOBOT-KE WORM! |
asp-srvc.exe |
![]() |
Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder |
csrss.exe |
![]() |
Added by the BANLOAD-M TROJAN! |
crsass.exe |
![]() |
Added by the DADOBRA-I TROJAN! |
servicos..exe |
![]() |
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
asp4tray.exe |
![]() |
System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry |
acertmb.exe |
![]() |
Added by the VB.ATZ TROJAN! |
asrupdate.exe |
![]() |
CnsMin (Chinese Keywords) hijacker related |
ASSISTSE.EXE |
![]() |
Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS! |
AST |
![]() |
Added by the VB.AH TROJAN! |
AST |
![]() |
AutoStarter parasite |
AST.exe |
![]() |
ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
astart.exe |
![]() |
Added by the VB.AH TROJAN! |
AStart |
![]() |
Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer |
Astray.exe |
![]() |
Checks for updates to Quicken on a system reboot |
Astro.exe |
![]() |
ASUS Live Update utility for their motherboards |
ALU.exe |
![]() |
ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area |
AsusProb.exe |
![]() |
ASUS video card fan/thermal monitor |
VGAProbe.exe |
![]() |
Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
astart.exe |
![]() |
System tray Icon for quickly changing video modes |
V38SHELL.EXE |
![]() |
Asus tweaking utility - for fine tuning the settings of your ASUS display card |
ATweak.exe |
![]() |
MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market |
ASWDP.exe |
![]() |
Adult content dialler |
aswnk.exe |
![]() |
Anti-Trojan Watch - trojan detector |
ATWatch.exe |
![]() |
Added by the AGOBOT-SL WORM! |
atapidrv.exe |
![]() |
Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world |
Athan.exe |
![]() |
Added by the IRCBOT-TL WORM! |
atievx.exe |
![]() |
Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines, preventing access to the virus cleaning websites |
msnse.exe |
![]() |
System Tray access to ATI's CATALYST(tm) CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop |
CLI.exe SystemTray |
![]() |
Utility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled |
ATIDtct.EXE |
![]() |
Added by the BDOOR-AFH TROJAN! |
ATIDisplay.exe |
![]() |
Added by the RBOT-FOV WORM! |
atixd.exe |
![]() |
Added by the RBOT-GAS WORM! |
atividx.exe |
![]() |
Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed |
Atigart.exe |
![]() |
Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu |
launchpd.exe |
![]() |
Added by the AGOBOT-OG WORM! |
AtiRage4dPro.exe |
![]() |
Driver for the ATI REMOTE WONDER(tm) RF remote control for ATI's All-In-Wonder graphic cards and other products. Required if you use it |
ATIRW.exe |
![]() |
ATI Remote Wonder(tm) - PC wireless remote control driver. Required if you use it |
ATIX10.exe |
![]() |
Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see |
Atisched.exe |
![]() |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
Atitkad.exe |
![]() |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
Atitask.exe |
![]() |
Added by the RBOT-AEU WORM! |
techstart.exe |
![]() |
Added by the RBOT-FWL WORM! |
atigfx.exe |
![]() |
Added by a variant of the IRC.BOT TROJAN! |
btorrent.exe |
![]() |
Added by the SDBOT-DDS WORM! |
[path to worm] |
![]() |
Added by the SDBOT.UR WORM! |
ati2vid.exe |
![]() |
For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it |
Ati2cwxx.exe |
![]() |
Added by the BACKDOOR-CPC TROJAN! |
Ati2evxx.com |
![]() |
Added by the DLOADR-BBW TROJAN! |
ati2f104.exe |
![]() |
System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager |
Ati2mdxx.exe |
![]() |
ATI's CATALYST(tm) CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. Recommend that start the program manually via Start -> Programs -> ATI Catalyst Control Center -> Advanced -> Restart Runtime as it can casue problems when starting Windows |
cli.exe runtime |
![]() |
Puts the ATI Catalyst(tm) Control Center Icon/Shortcut on the System Tray - available via Start -> Programs |
CLIStart.exe |
![]() |
Added by the RBOT-XP WORM! |
aticpaxx.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
AtiCwd.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
AtiCwd32.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
Ati2cwad.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
AtiCwd.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
AtiCwd32.exe |
![]() |
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
Ati2cwad.exe |
![]() |
Added by the RBOT-VZ WORM! |
atidrvxx.exe |
![]() |
Added by the WARPIGS-E WORM! Note the uppercase "I" in the filename, rather than a lower case "L" |
reaIplayer.exe |
![]() |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
AtiKey32.exe |
![]() |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
atiptkad.exe |
![]() |
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
Atitask.exe |
![]() |
ATI Technologies Control Centre - installed alongside ATI graphics hardware and provides additional configuration options for these devices in the Managed Access to Catalyst Environment (MACE) component |
MACE.exe |
![]() |
System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager |
Ati2mdxx.exe |
![]() |
Added by the TACTSLAY.U TROJAN! |
atip.exe |
![]() |
Added by the SMALL-ED TROJAN! |
atipatxx.exe |
![]() |
ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources |
ati2evxx.exe |
![]() |
ATI Polling Program - part of the ATI graphics driver e.g. on some Fujitsu-Siemens Notebooks |
ati2evae.exe |
![]() |
ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources |
ati2evxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Ati2ptxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Atiptaxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Ati2ptxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Atiptaxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Ati2ptxx.exe |
![]() |
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
Atiptaxx.exe |
![]() |
Added by the COSIAM-A TROJAN! |
atiptext.exe |
![]() |
Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's |
AtiQiPcl.exe |
![]() |
ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings |
ati2s9ag.exe |
![]() |
WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the "ComRoot" subfolder |
csrss.exe |
![]() |
Added by the WINDFIND-A TROJAN! |
windfind.exe |
![]() |
Added by the ROAMER-A TROJAN! |
Active.exe |
![]() |
ATI Tray Tools - allows quick access to ATI graphics card settings |
atitray.exe |
![]() |
ATI Tray Tools - allows quick access to ATI graphics card settings |
atitray.exe |
![]() |
Added by the DEBESKI.A TROJAN! |
ATIUPDATE5.EXE |
![]() |
Added by the DELF.EP downloader TROJAN! |
msshed32.exe |
![]() |
Added by the RBOT-ABX WORM! |
atiupdxx.exe |
![]() |
Added by the SMALL.AOS TROJAN! |
atiupdpl.exe |
![]() |
Premium rate adult content dialler |
ativopen.exe |
![]() |
ATI Remote Wonder(tm) - PC wireless remote control driver. Required if you use it |
atix10.exe |
![]() |
ATK Media utility for ASUS laptops - what does it do and is it required? |
DMEDIA.EXE |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Atl**.exe [* = random char] |
![]() |
CoolWebSearch/HomeSearch adware - for examples, see this log |
Atl**32.exe [* = random char] |
![]() |
Added by the MMS.A WORM! |
adpn.exe |
![]() |
Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs |
atnotes.exe |
![]() |
TimeSync - lets you synchronize your computer's clock with any internet atomic clock |
TimeSync.exe |
![]() |
Added by the KATOMIK-A WORM! |
Atomic-x27.exe |
![]() |
Added by the KATOMIK-A WORM! |
AtomicpartC.exe |
![]() |
Atomic Clock Sync - synchronizes your computer's time with the NIST time server |
Atomic.exe |
![]() |
Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key |
atomica.exe |
![]() |
AtomicTime - utility that synchronizes your PC clock to an atomic clock |
ATOMICTIME.EXE |
![]() |
New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert |
atrack.exe |
![]() |
Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons |
Atray.exe |
![]() |
DeskTopScout keystroke logger/monitoring program - remove unless you installed it yourself! |
AppsTraka.exe |
![]() |
Big Brother from Quest Software. System and network monitor |
SAUpdate.exe |
![]() |
Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates |
AutoUpdate.exe |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
attune_ce.exe |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
attune_cu.exe |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
attune_di.exe |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
Attunel.exe |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
attune_st.exe |
![]() |
aTuner - tweak tool for GeForce based graphics cards |
atuner.exe |
![]() |
USB interface for Aiptek Graphics Tablet (USB) |
atwtusb.exe |
![]() |
Pop Marketing adware |
Iexplor.exe |
![]() |
Dealio Toolbar is a free shopping comparison toolbar that allows users to search for a wide range of consumer products |
DealioAu.exe |
![]() |
Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon |
AUagent.exe |
![]() |
Added by the BEAGLE.B WORM! |
au.exe |
![]() |
Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot |
aucbnpn.exe |
![]() |
Added by the GEMA TROJAN! |
Aucompat.exe |
![]() |
Added by the GEMA TROJAN! |
audcntr.exe |
![]() |
Audio control panel? |
RunDll32 AudCtrl.dll, RCMonitor |
![]() |
Added by the RANCK-FL TROJAN! |
audi32.exe |
![]() |
Added by the PLOYB-A TROJAN! |
SOUND.exe |
![]() |
Added by the VB.ATE WORM! |
audiocfg.exe |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
audiocntl.exe |
![]() |
ADeck.exe is a system tray application for VIA's sound cards which offers quick access to a number of sound card related items |
ADeck.exe |
![]() |
Added by the CRYPTER-C TROJAN! |
audiodrv.exe |
![]() |
Related to Creative DLL Module Loader for the Sound Blaster X-Fi (and maybe others). This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems |
DLLML.exe AudDrvEm.dll |
![]() |
For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs |
Ahqtb.exe |
![]() |
Added by the BANKER-EHK TROJAN! |
audiohq.exe |
![]() |
System Tray application installed with the drivers for Creative Labs SoundBlaster Live! Can be run from Start -> Programs |
AHQTBU.EXE |
![]() |
Added by a variant of the CRYPTER.C TROJAN! |
audioinf.exe |
![]() |
Added by the MAILBOT-CF TROJAN! |
dcmsxe.exe |
![]() |
Added by the SLAPER.K TROJAN! |
mplprogsm.exe |
![]() |
AUNPS adware |
RUNDLL32 AUNPS2.DLL, _Run@16 |
![]() |
Added by the ABWIZ.D TROJAN! |
symcsvc.exe |
![]() |
Added by the ABWIZ.C TROJAN! |
sysvcs.exe |
![]() |
Added by the ORSE-M TROJAN! |
sywsvcs.exe |
![]() |
For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
sa3dsrv.exe |
![]() |
For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
A3dInit.exe |
![]() |
Added by the AUTOUPDER TROJAN! |
ausvc.exe |
![]() |
Added by the RBOT-WP WORM! |
startauth.exe |
![]() |
System Tray access to Child Control parental control software by Salfield |
wintmr.exe |
![]() |
Authentic-ID Toolbar - website authentication utility. Warns you when a site is recognized for phishing or isn't authentic, for example |
rundll32.exe [path] ToolbarATL.dll, LoadTrayIcon |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
authz.exe |
![]() |
Added by the SPYBOT.BLA WORM! |
cdaccess.exe |
![]() |
Related to Epson Stylus CX6400 Series printer |
E_S4I2L1.EXE |
![]() |
Added by a variant of the SDBOT WORM! |
scricon.exe |
![]() |
Added by an unidentified WORM or TROJAN - probably a SPYBOT variant |
qualityx.exe |
![]() |
Related to 2-port Bitronics AutoSwitch kit from Belkin |
TASKBAR.exe |
![]() |
If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled |
autotbar.exe |
![]() |
Added by a variant of the FORBOT WORM! |
WindowsSys32.exe |
![]() |
Added by the SDBOT.AAG WORM! |
crcss.exe |
![]() |
Added by an unididentified WORM or TROJAN! |
AUP.exe |
![]() |
Added by the RBOT-AVO WORM! |
dma.exe |
![]() |
Added by the DUMARDI-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
svchost.exe |
![]() |
Added by the CHEUKO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
svchost.exe |
![]() |
Added by the RBOT-AFA WORM! |
taskmrg.exe |
![]() |
Added by the PUNYA-A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! |
SERVICES.EXE |
![]() |
Connect buttons on the keyboard for internet direct access, etc. on HP computers |
autobar.exe |
![]() |
Preloads some libraries that are used by AutoCAD in order to make the software load faster |
acstart16.exe |
![]() |
Autoclik is a Windows utility "that allows you to perform all mouse activity with absolutely no clicking" |
autoclk.exe |
![]() |
For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ |
Ahqrun.exe |
![]() |
Added by the SEMAPI-A WORM! |
AUTOEXE.exe |
![]() |
AproposMedia adware |
Apropos_Client_Loader.exe |
![]() |
AproposMedia adware |
cxtpls_loader.exe |
![]() |
Envolo/AproposMedia adware updater |
auto_update_loader.exe |
![]() |
Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs |
automate.exe |
![]() |
Automate is the Leading Software for Automation of front and back-office business processes.It provides all the tools necessary to completely automate business processes, regardless of their complexity |
Am5HkWnd.exe |
![]() |
AutoMate 6 for automating repetitive tasks |
AMEM.exe |
![]() |
Added by the RBOT-AKE WORM! |
defrag.exe |
![]() |
Added by an unidentified WORM/TROJAN! |
CACHE.RVD |
![]() |
Added by an unidentified WORM/TROJAN! |
HPLNT32.RVD |
![]() |
Added by the RBOT-EQ WORM! |
suchost.exe |
![]() |
Added by the GAOBOT.AO WORM! |
Update.exe |
![]() |
The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start > Programs |
UD.EXE |
![]() |
Added by the RBOT-AGL WORM! |
Autopdate.exe |
![]() |
Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension |
REGPROP.EXE WMPADDIN.DLL |
![]() |
Added by an unidentified WORM or TROJAN! |
navapq32.exe |
![]() |
Added by a variant of the SDBOT WORM! |
dexs.exe |
![]() |
Autoroute SMTP - "automatic switching between SMTP servers depending on what network you are currently working in." You need to have two Internet service providers |
AutoSmtp.exe |
![]() |
Added by the AUTOM-B WORM! |
autorun.exe |
![]() |
Added by the SMALLVBS-A WORM! |
sxs.exe |
![]() |
Added by the AGENT-FPX TROJAN! |
[path to trojan] |
![]() |
Utility to fix vCard Export in MS Outlook 2000 - although why are these together? |
pssvc.exe |
![]() |
AutoSizer - utility that automatically maximizes windows when they're opened |
AUTOSIZER.EXE |
![]() |
AutoSpell - spell checker (version 6.*) |
autospel.exe |
![]() |
AutoSpell - spell checker |
ASWATC32.EXE |
![]() |
Winguardian surveillance software. Uninstall this software unless you put it there yourself |
autosys.exe |
![]() |
If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled |
autotbar.exe |
![]() |
On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled |
AUTOTKIT.EXE |
![]() |
Raxco Software Auto Update utility."Used to keep your software up-to-date" |
autoupd.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! - found in a folder of the same name |
autoupd.exe |
![]() |
Unidentified adware - detected by Panda antivirus as the CLICKER.CY TROJAN! |
WINUP2DATE.DLL, SHStart |
![]() |
Added by a variant of the QOOLOGIC TROJAN! |
rundll32 [path] DATADX.DLL, SHStart |
![]() |
Added by a variant of the QOOLOGIC TROJAN! |
rundll32 [path] SUPDATE.DLL, SHStart |
![]() |
Added by the SYMPE-B TROJAN! |
kaka.exe |
![]() |
Tinybar variant |
aupdate.exe |
![]() |
PeopleonPage foistware |
AutoUpdate.exe |
![]() |
Added by the DROPPER-BM TROJAN! |
[path to file] |
![]() |
Detected by Kaspersky as the AGENT.FQ TROJAN! |
autoupdatev2.exe |
![]() |
Added by a variant of the RBOT WORM! |
ciscv.exe |
![]() |
Added by the BAGLEDI-AA TROJAN! |
antiav_exe.exe |
![]() |
Added by the BAGLE.AB TROJAN! |
hloader_exe.exe |
![]() |
Added by the ZINS TROJAN! |
aux.exe |
![]() |
Added by the AIZU WORM! |
aux32.exe |
![]() |
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
au30setp.exe |
![]() |
Added by the MIDFIN WORM! |
UPDATE-28062004.exe[25 blank spaces].vbs |
![]() |
Added by the MYDOOM.AD WORM! |
patch31345.exe |
![]() |
Added by the MYDOOM.AD WORM! |
patch31345.exe |
![]() |
Added by the FUROOT-A TROJAN! |
Update.exe |
![]() |
AvaFind file search utility |
AvaFind.exe |
![]() |
Added by the MSNVB-D WORM! |
Avconsol.exe |
![]() |
Added by the SMALL.CZ TROJAN! |
troyan.exe |
![]() |
Part of Avast! anti-virus software |
ashserv.exe |
![]() |
Part of Avast! anti-virus software |
ashDisp.exe |
![]() |
Part of Avast! anti-virus software |
Ashwebsv.exe |
![]() |
Part of Avast! anti-virus software |
Astart32.exe |
![]() |
Added by an unidentified TROJAN! |
avmon.exe |
![]() |
From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it |
Avconsol.exe |
![]() |
Added by the DELF.LJ TROJAN! |
Avengine.com |
![]() |
Aveo Attune automated helpdesk software - adware/spyware |
atmdlusr.exe |
![]() |
Advanced Video FX - supported by a number of Creative Web Cameras. "Have more fun by adding a wide range of special effects and backgrounds to your video chat with Advanced Video FX" |
StartFX.exe |
![]() |
Added by the RBOT-ZA WORM! |
svchost323.exe |
![]() |
AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates |
avgcc.exe |
![]() |
Added by the BANKER.BYU TROJAN! |
icpldrvx.exe |
![]() |
Added by the AGOBOT-OT WORM! |
updater.exe |
![]() |
AVG antivirus related |
Avgamsvr.exe |
![]() |
AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates |
AVGCC.exe |
![]() |
AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates |
avgcc.exe |
![]() |
AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses |
AVGEMC.exe |
![]() |
AVG Anti-Virus 7.0 related |
avgw.exe |
![]() |
AVG antivirus related |
Avgamsvr.exe |
![]() |
AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
avgcc32.exe |
![]() |
Part of AntiVir(r) PersonalEdition Classic antivirus |
AVGCtrl.exe |
![]() |
Firewall part of the AVG Plus Firewall Edition |
AVGFWSRV.EXE |
![]() |
AVG Anti-Virus 7.0 related |
avgmsvr.exe |
![]() |
AntiVir(r) PersonalEdition Classic antivirus. System Tray icon and control program |
AVGnt.exe |
![]() |
AVG antivirus background monitoring |
Avgserv9.exe |
![]() |
AntiVir(r) PersonalEdition Classic antivirus. Background task which scans files transparently |
AVGuard.exe |
![]() |
AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
avgcc32.exe |
![]() |
AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses |
AVGEMC.exe |
![]() |
AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems |
AVGREGCL.exe |
![]() |
Detected by Kaspersky as the AGENT.PH TROJAN! |
drvsc.exe |
![]() |
Added by the GEMA TROJAN! |
Avimgt.exe |
![]() |
Added by the GEMA TROJAN! |
Avimgt32.exe |
![]() |
Command Antivirus related |
AVINIT9X.EXE |
![]() |
eXtendia AVK AntiVirus email checker |
AVKPop.exe |
![]() |
GData AntiVirusKit Anti-virus |
AVKBar.exe |
![]() |
Part of Avast! anti-virus software - E-mail scanner |
Avmaisrv.exe |
![]() |
Related to broadband products from avm.de |
wlangui.exe |
![]() |
Added by the SERFLOG.A WORM! |
formatsys.exe |
![]() |
Added by the SERFLOG.A WORM! |
msmbw.exe |
![]() |
Added by the SERFLOG.A WORM! |
serbw.exe |
![]() |
AOL's Active Virus Shield |
avp.exe |
![]() |
Added by the MUTBO-A TROJAN! |
[path to trojan] |
![]() |
Detected by Kaspersky as the ALPHABET.B TROJAN! |
avp.exe |
![]() |
Added by a variant of the ALPHABET TROJAN! |
win*.tmp.exe [* is a number] |
![]() |
Detected by Kaspersky as the ALPHABET.B TROJAN! |
xar6000v7.exe |
![]() |
Added by the AGOBOT.FS WORM! |
avp-32.exe |
![]() |
Added by the LEGMIR-ARK TROJAN! |
avpo.exe |
![]() |
Kaspersky Labs anti-virus |
avpcc.exe |
![]() |
Kaspersky anti-virus |
avpm.exe |
![]() |
Added by the STARTPAGE-ID TROJAN! Note - this is not the popular Kaspersky antivirus and this file is located in the WINDOWSpchealthUploadLBConfig directory |
AvpM.exe |
![]() |
Added by the MYDOOM.AF WORM! |
avpr.exe |
![]() |
Added by the ONLINE-GEN TROJAN! |
AVPSrv.exe |
![]() |
Added by the NOFERE-G TROJAN! |
[path to trojan] |
![]() |
Added by the AGENT.JJO TROJAN! |
expl0rer.exe |
![]() |
Added by the AGENT.PKZ TROJAN! |
rund1132.exe |
![]() |
Added by the AVRIL-A WORM! |
[random filename] |
![]() |
AntiVir(r) PersonalEdition Classic - antivirus |
AVSched32.exe |
![]() |
Command Antivirus related |
SCHSC9X.EXE |
![]() |
Added by the SERFLOG.B WORM! |
dsm.exe |
![]() |
Added by the SERFLOG.B WORM! |
msmpatch.exe |
![]() |
Added by the SERFLOG.B WORM! |
svosm.exe |
![]() |
Added by the SERFLOG.B WORM! |
sysup.exe |
![]() |
Added by the SASSER WORM! |
avserve.exe |
![]() |
Added by the SASSER.B or SASSER.C WORMS! |
avserve2.exe |
![]() |
Added by the SASSER.G WORM! |
avserve3.exe |
![]() |
Related to Samsung AV Station - instant playback of music, photos, videos |
AVStation agent.exe |
![]() |
Command Antivirus tray icon |
Avtray.exe |
![]() |
Added by the RBOT.CNI TROJAN! |
AVupdate32.exe |
![]() |
PRISM Status Tray Applet - but what is it for and is it required? |
AVWLPSTA.exe |
![]() |
AntiVir(r) PersonalEdition Classic - updater |
AVWUPD32.EXE |
![]() |
Anti-virus part of BitDefender virus scanner/firewall |
xcommsur.exe |
![]() |
Bullguard or BitDefender antivirus |
avxlive.exe |
![]() |
Anti-virus part of BitDefender virus scanner/firewall |
avxinit.exe |
![]() |
?? |
?? |
![]() |
Diagnosis tool that monitors DSL connections, installed alongside DSL drivers from AVM Fritz's range of modem products |
Awatch.exe |
![]() |
Part of the IBM ThinkVantage Productivity Center. "The Away Manager application allows you preselect and run routine tasks to maintain your system's performance" |
AwaySch.EXE |
![]() |
Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended |
awhost32.exe |
![]() |
Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
Ad-Watch.exe |
![]() |
F-Secure Anti-Spyware |
Ad-Monitor.exe |
![]() |
Reportedly related to a USB Wifi Adapter - is it required at startup? |
AWUSGSTA.exe |
![]() |
AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: *.cue, *.iso, *.ccd ...) |
awxDTools.dll, awxRegisterDll |
![]() |
?? |
Rundll32 AXFILTER.DLL, Rundll32 |
![]() |
Added by an unidentified TROJAN - see here |
AXVenore.exe |
![]() |
Related to Realtek_Azalia Mixer Selector |
AzMixerSel.exe |
![]() |
Aztech Labs modem driver |
azexe.exe |
![]() |
Located in the IBMTOOLSVPD sub-directory. What does it do and is it required? |
vpd.exe |
![]() |
a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the aý 'Background Guard' real time protection feature |
a2guard.exe |
![]() |
æTorrent - BitTorrent client for Windows sporting a very small footprint. It was designed to use as little cpu, memory and space as possible while offering all the functionality expected from advanced clients |
utorrent.exe |

Main Page 



