PC Review
Startup Files Database
Letter b
Powered By Pac's Startup list
Startup Files Database
Letter b
Startup Files Database
[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]
Yes |
No |
Users Choice |
Warning |
Unknown |
| Normally leave to run at startup | Not Required, often infrequently run tasks that can be run manually. | Depends if the task is deemed necessary | Typically viruses, spyware, adware and resource hogs | An unknown item |
| Required | Process Name / Details | Startup File |
![]() |
CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
BSCLIP.exe |
![]() |
Added by the SDBOT.BND WORM! |
b.exe |
![]() |
Birthday Reminder 5.0 - as the name implies |
remin.exe |
![]() |
B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in the "System" directory. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
BDEsecureinstall.exe |
![]() |
Associated with B3d Projector foistware - see here |
Zupdate.exe |
![]() |
FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run" |
B9.exe |
![]() |
ClientMan parasite variant |
msmm.exe |
![]() |
Added by the AGENT.Q TROJAN! |
svchst32.exe |
![]() |
CommonName Toolbar spyware. To uninstall see here |
rundll32 cnbabe.dll, dllstartup |
![]() |
Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on" |
Babylon.exe |
![]() |
Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on |
Babylon.exe |
![]() |
Added by the YPSAN.D WORM! |
Uninstall.log.vbs |
![]() |
Added by the AGENT-DP TROJAN! |
agent.exe |
![]() |
Added by the VB-ZD TROJAN! Note - this file is located in the C:Windowshelp folder, and is not to be confused with the legitimate rundll32.exe file! |
rundll32.exe |
![]() |
Originally included with Microsoft's XP PowerToys (but now withdrawn - see here, Background Switcher allows your desktop background to periodically change |
bgswitch.exe |
![]() |
Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk |
bpudfmon.exe |
![]() |
Added by the AGOBOT-H WORM! |
[path to worm] |
![]() |
Unidentified adware |
backup.svc |
![]() |
Backup4all is an award-winning data backup software for Windows. This backup utility was designed to protect your valuable data from partial or total loss by automating backup tasks, password protecting and compressing it to save storage space |
B4AOTB.exe |
![]() |
Veritas "Back Up My PC" software |
besch.exe |
![]() |
HP Digital Imaging related. What does it do and is it required? |
backupnotify.exe |
![]() |
Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs |
backweb.exe |
![]() |
Backwork trojan detector |
Backwork.exe |
![]() |
Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray |
bacpi10a.exe |
![]() |
Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
BacsTray.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
BADDATE.EXE |
![]() |
Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder |
csrss.exe |
![]() |
Added by the MULTIDR-AH TROJAN! |
IEHost.EXE |
![]() |
Added by the FAKEALERT TROJAN! |
SYSMONMS.EXE |
![]() |
Added by the RANKY.O TROJAN! |
[path to file] |
![]() |
Added by the EXEMAS-B TROJAN! |
ali.exe |
![]() |
Bandwidth Monitor Pro - utililty to track your current download/upload limit that may be set by your ISP |
Bandwidth Monitor Pro.exe |
![]() |
Banpopup - popup killer |
Banpopup.exe |
![]() |
Detected as the VB.PO TROJAN! |
ie_ban.exe |
![]() |
Added by the RBOT-RP WORM! |
Analiz.exe |
![]() |
BargainBuddy foistware |
bargains.exe |
![]() |
BargainBuddy foistware |
bargainbuddy.exe |
![]() |
Related to PeoplePC ISP. May be a dialler for dial-up accounts? |
station.sbrt |
![]() |
Dialer for PeoplePC ISP |
PPCOLink.exe |
![]() |
Added by the AGOBOT-UG WORM! |
bartent32.exe |
![]() |
Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
BascsTray.exe |
![]() |
Added by the ZCREW.C TROJAN! |
secure2.bat |
![]() |
Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here |
N/A |
![]() |
Displays battery status information on an IBM Thinkpad |
rundll32.exe |
![]() |
Detected by Kaspersky as the LOCKSY.M WORM! |
batserv2.exe |
![]() |
Monitors battery levels on a notebook/laptop PC |
batmgr.exe |
![]() |
BatteryBar - displays battery usage, and the current percentage of battery power left |
batterybar.exe |
![]() |
Added by the BACKZAT WORM! |
BatzBack.scr |
![]() |
Boston Acoustics Audio, USB driver |
BAUSB.exe |
![]() |
Added by the BEAGLE.AR or BEAGLE.AU WORMS! |
bawindo.exe |
![]() |
Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices |
DockApp.exe |
![]() |
Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
bayswap.exe |
![]() |
Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
TbUpdate.exe |
![]() |
BBC Alerts - "You can now have all the latest news and sports headlines delivered straight to your desktop with the new BBC Alerts service" |
BBC_Alerts.exe |
![]() |
BBC News Desktop Alerts service - see here. Desktop alert and breaking news e-mail services let you find out about all the latest news as it happens |
skinkers.exe |
![]() |
Part of BT Broandband - is it required? |
BT Broadband.exe |
![]() |
BounceBack Professional - back-up software |
BBLauncher.exe |
![]() |
Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions" |
bbSysTray.exe |
![]() |
AOL DSL status monitor displaying a red/green icon indicating if you have a connection |
bbui.exe |
![]() |
BeClean Agent - registry, history, temp files, etc cleaner |
bca.exe |
![]() |
Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see |
bcdetect.exe |
![]() |
BCM voicemodem driver. Required for dial-up if you have one of these modems |
bcmdmmsg.exe |
![]() |
BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
rundll32.exe bcmhal9x.dll, bcinit |
![]() |
BCM voicemodem driver. Required for dial-up if you have one of these modems |
BCMSMMSG.exe |
![]() |
Broadcom Corporation Wireless Network Tray Applet. Is it required? |
bcmwltry.exe |
![]() |
AWS Weatherbug related. What does it do? |
bcnt.exe |
![]() |
BroadcastPC adware variant |
bcpc.exe |
![]() |
BroadcastPC adware variant |
bcpc_c.exe |
![]() |
BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
bctweak.exe |
![]() |
Added by the GAOBOT.BQJ WORM! |
bcvsrv32.exe |
![]() |
BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed |
bcwipetm.exe |
![]() |
Added by the RASDOOR-A TROJAN! |
dc.exe |
![]() |
BitDefender antivirus |
bdagent.exe |
![]() |
BitDefender antivirus |
Bdmcon.exe |
![]() |
BitDefender antivirus - updater |
bdnagent.exe |
![]() |
Bitdefender 8 antivirus and firewall |
bdoesrv.exe |
![]() |
Bitdefender 8 antivirus and firewall |
bdswitch.exe |
![]() |
BearFlix is optimized for the fast download of video files |
BearFlix.exe |
![]() |
BearShare file sharing client. Versions known to include spyware - see here |
bearshare.exe |
![]() |
BeatNik Internet Clock is a Windows clock add-on that supports 'skins'. It can also synchronize your computer's clock with an atomic clock |
BeatNik.exe |
![]() |
Added by the RANKY.AGA TROJAN! |
saqevre.exe |
![]() |
Added by the SDBOT-ADK WORM! |
beegees.exe |
![]() |
?? |
beei.exe |
![]() |
BeFaster internet connection optimization tool |
befaster3.exe |
![]() |
?? |
BEHL.exe |
![]() |
?? |
BEHLO.exe |
![]() |
Belkin USB Network Adapter Management utility - can be started manually |
monitorbk.exe |
![]() |
Wireles configuration utility for some Belkin cards such as the Wireless G Desktop Card |
Belkinwcui.exe |
![]() |
Related to BellSouth Alert Manager |
BellSouthAlertManager.exe |
![]() |
BelTech from Belarc enables licensees to offer automated, Web-based problem resolution to their end-users. BelTech allows the end-user to simply go to a web page and automatically resolve their problem or point them to the right solution. BelTech Manager allows non-programmers to rapidly and easily deploy and maintain this service |
[path] NPBelv32.dll, RunDll32_BelNotify |
![]() |
?? |
BELORVBI.exe |
![]() |
Configuration tool for Belkin wireless network cards. Required to change the card's configuration. Is it required for correct operation once the confuiguration is changed? |
Belsta.exe |
![]() |
VX2.Transponder parasite updater/installer related |
Belt.exe |
![]() |
Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril |
benadrilalert.exe |
![]() |
Popup killer by Swanksoft - not recommended, see here |
BestPopupKiller.exe |
![]() |
BeSys adware |
[path to file] |
![]() |
Added by the IRCBOT.GEN WORM! |
bf4p.exe |
![]() |
Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster |
bullguard.exe |
![]() |
BGinfo automatically displays relevant information about a Windows computer on the desktop's background, such as the computer name, IP address, service pack version, and more |
Bginfo.exe |
![]() |
Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here |
NMBgMonitor.exe |
![]() |
BullGuard antivirus updater |
bgnewsag.exe |
![]() |
Printer driver to generate PDF files from any program |
bgsmsnd.exe |
![]() |
PC Magazine's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware |
BHOCop.exe |
![]() |
BHODemon "protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. When running, it also monitors your Registry and alerts you when a BHO is installed. Best of all, BHODemon knows about the most common BHOs - the good ones, and the not-so-good ones!". If you prefer forgoing resident protection, the application can also be run on demand |
BHODemon.exe |
![]() |
Browser Hijack Retaliator - recovers your browser after it has been hijacked by spyware, adware, etc |
BHR.exe |
![]() |
ScreenScenes "Beach Islands" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
BI1HEL~1.EXE |
![]() |
BDplugin parasite |
Rundll32.exe BDSrHook.dll, Rundll32 |
![]() |
Added by the DELBOT-AG WORM! |
biggy.exe |
![]() |
Related to VIMICRO USB for PC Camera |
VM303_STI.EXE |
![]() |
Bundled with some software for digital cameras that use a USB connection - what does it do and is it required? |
VM_STI.EXE |
![]() |
BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet(r) Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog |
BIGFIX.EXE |
![]() |
Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier" |
bpumTray.exe |
![]() |
Telstra Bigpond Cable login software - can be started manually |
bpcable.exe |
![]() |
Added by the LOWZONE-CX TROJAN! |
bikini.exe |
![]() |
Added by the AGENT-FZO TROJAN! |
BillGatesLoh.exe |
![]() |
Can be setup in Quicken to remind user of due payments. Available via Start -> Programs |
Billmind.exe |
![]() |
PrecisionPop adware |
ppstub.exe |
![]() |
Added by the BINGD WORM! |
Bingdian.vbs |
![]() |
Some kind of screen icon kind of like desk flag, but it gives you a choice of icons? |
charms.exe |
![]() |
Related to Sony VAIO - passwords, encryption, and a biometric fingerprint sensor |
menusw.exe |
![]() |
Added by an unidentified VIRUS, WORM or TROJAN! |
Bios32.exe |
![]() |
Added by the BANCBAN-PW TROJAN! |
bios.exe |
![]() |
Added by the RBOT-IC WORM! |
[random filename] |
![]() |
Added by the OPASERV.T WORM! |
BIOS1.EXE |
![]() |
?? |
BIOVCIP.exe |
![]() |
BitComet P2P client - can be launched from Start -> Programs |
BitComet.exe |
![]() |
Added by a variant of the SPYBOT WORM! |
BITDEFENDERX.EXE |
![]() |
BitDefender antivirus |
xcommsvr.exe |
![]() |
Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website |
msnmon.exe |
![]() |
Bitdefender anti-virus for Yahoo! Messenger - no longer supported at the BitDefender website |
yahmon.exe |
![]() |
BitDefender antivirus |
bdinit.exe |
![]() |
BitDefender antivirus |
bdss.exe |
![]() |
BitDefender antivirus |
vsserv.exe |
![]() |
Main program of BitDefender virus scanner/firewall |
avxlive.exe |
![]() |
Bitdefender anti-virus for P2P clients - no longer supported at the BitDefender website |
BitDefender_P2P_Startup.exe |
![]() |
FaxServe network fax software |
bwprnmon.exe |
![]() |
Canon BJ printer status monitor |
Cjstsr.exe |
![]() |
Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers |
CJSTRxx.EXE |
![]() |
BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs |
cdf.exe |
![]() |
Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
blackice.exe |
![]() |
Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
blackice.exe |
![]() |
A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
blads.exe |
![]() |
Added by the GAOBOT.BIA WORM! |
winupdate.exe |
![]() |
Added by the RBOT-KI WORM! |
winsysengine.exe |
![]() |
Added by a variant of the RBOT WORM! |
internet.exe |
![]() |
Added by the RBOT.IZ WORM! |
smnp.exe |
![]() |
Added by the RBOT.PZ WORM! |
msnmsgrr.exe |
![]() |
Added by the RBOT.UA WORM! |
tazkmgr.exe |
![]() |
Added by the RBOT-AES WORM! |
FaLeH.exe |
![]() |
Added by a variant of the RBOT WORM! |
microsoft.exe |
![]() |
Added by a variant of the RBOT WORM! |
evosys.exe |
![]() |
Added by the RBOT-AXO WORM! |
win32.exe |
![]() |
Added by the RBOT.TV WORM! |
CCAPPS32.EXE |
![]() |
Added by the RBOT-GMP WORM! |
iczw.exe |
![]() |
Added by a variant of the RBOT WORM! |
msengine.exe |
![]() |
Added by the SDBOT.AML WORM! |
msnjompa.exe |
![]() |
Ember graphic file viewer, manager, and touch-up system |
FBZPaper.exe |
![]() |
Part of Dell Alerts which provides customers with an update on latest updates for his/her system |
bldbubg.exe |
![]() |
Added by the DELBOT-M WORM! |
blf.exe |
![]() |
Blinkx Desktop "Smart Folders" software |
blinkx.exe |
![]() |
BuddyLinks adware |
blengine.exe |
![]() |
A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
blads.exe |
![]() |
BlockChecker adware |
Block-checker.exe |
![]() |
Added by the RBOT.BLJ WORM! |
PopUpBlocker611.exe |
![]() |
If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file |
BlockTracker.exe |
![]() |
IBM Thinkpad battery management utility that logs changes in battery conditions such as charging, discharging, etc |
rundll32 [path] BatLogEx.DLL, StartBattLog |
![]() |
BellSouth ISP Internet Tools |
blsloader.exe |
![]() |
Added by the BLARUL TROJAN! |
blss.exe |
![]() |
Puts access to Creative's BlasterControl in the System Tray |
blstapp.exe |
![]() |
Related to Blubster Music sharing service |
Blubster.exe |
![]() |
Blue Frog by Blue Security Inc. - actively fights spam by posting complaints on the sites advertised by the spam you receive |
bluefrog.exe |
![]() |
Added by the BANCOS-BCW TROJAN! |
[path to trojan] |
![]() |
Related to BlueLight Internet. What does it do and is it required? |
exec.exe |
![]() |
BlueSoleil Bluetooth wireless manager from IVT Corporation |
BLUESO~1.EXE |
![]() |
BlueSpace NE is a utility program used to run the Bluetooth function on VAIO computers that support the Bluetooth function or on VAIO computers connected to the Bluetooth USB adapter. Shortcut available via Start -> Programs |
BlueSpaceNE.exe |
![]() |
Added by the SDBOT-DFN WORM! |
btwindin32.exe |
![]() |
Associated with BlueTooth software, designed to allow bluetooth mobile devices to authenticate to the computer, when connecting a PDA to your computer - necessary for the computer and the PDA to communicate. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup |
RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent |
![]() |
matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file. Blueyonder Instant Support is required to run with the Help and Support program. If you uncheck it and and then run Help and Support it will add another Blueyonder Instant Support in the startup menu. If you remove Blueyonder Instant Support in add/remove programs some help menus in help and support will not be available. You decide |
matcli.exe |
![]() |
Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not |
FTP_back.exe |
![]() |
Abcsearch.com/DealHelper adware variant |
BMan1.exe |
![]() |
Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window |
Rundll32 PWRMONIT.DLL, StartPwrMonitor |
![]() |
Battery Manager for IBM ThinkPad laptops |
BMMLREF.EXE |
![]() |
Battery power management utility for Lenovo (IBM) ThinkPad laptops |
rundll32.exe [path] BatInfEx.dll, BMMAutonomicMonitor |
![]() |
The wallet conveniently stores billing, shipping and payment information on your PC |
EWALLET.EXE |
![]() |
Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install |
BMupdate.exe |
![]() |
NCase adware |
bmz.exe |
![]() |
Added by the LACON WORM! |
Bndt32.exe |
![]() |
Added by the KITRO.D (or ARGEN.A) WORM! |
[random filename] |
![]() |
ScreenScenes "Butterfly Oasis" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
BO1HEL~1.EXE |
![]() |
ScreenScenes "Butterfly Oasis" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here |
Bo1helper.exe |
![]() |
Added by a variant of the RANDON.AN WORM! |
[path] repcale.exe [path] palsp.exe |
![]() |
Added by a variant of the RBOT WORM! |
boat32.exe |
![]() |
Added by the BANCBAN-PC TROJAN! |
csrs.scr |
![]() |
NSClean BOClean (now Comodo) anti-malware software - "Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely". Version 4.23 |
BOC423.exe |
![]() |
NSClean BOClean (now Comodo) anti-malware software - "Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely". Version 4.24 |
BOC424.exe |
![]() |
Comodo BOClean anti-malware software - "Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely". Version 4.25 |
BOC425.exe |
![]() |
Version 4.12 of NSClean's BOClean anti-trojan software |
BOC412.exe |
![]() |
NSClean's BOClean anti-trojan software |
Boclean.exe |
![]() |
BOINC manager - "controls the use of your computer's disk, network, and processor resources" |
boincmgr.exe |
![]() |
Starts the Boingo Wireless utility, used to detect and login into Boingo wireless hotspots. The filename may be autogenerated when installing, two different variations along the lines listed here, where # is a number and X is a letter. Shortcut available via Start -> Programs |
Icon###XXX#X#.exe |
![]() |
Added by the RBOT-AYS WORM! |
syser.exe |
![]() |
Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems |
BOMB32.EXE |
![]() |
Bonzi Buddy adware - see here for removal instructions |
?? |
![]() |
Adware downloader - detected by Kaspersky as the FAVADD.O TROJAN! |
boo.exe |
![]() |
BookedSpace parasite |
RunDLL32.EXE [path] bs2.dll, DllRun |
![]() |
Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use" |
BMLauncher.exe |
![]() |
Bookmark synchronization utility |
syncit.exe |
![]() |
Sync2IT BookMarkSync - "real-time automatic synchronization service that allows you to access your bookmarks, favorites and favorite files from any computer or any browser". Only installed with the users explicit permission and generally only remains running if the user decides to subscribe to the service. If it is no longer required it should be uninstalled to prevent a large number of clients 'checking in' to the server that have no chance of synchronizing |
syncit.exe |
![]() |
Sync2IT BookMarkSync - "real-time automatic synchronization service that allows you to access your bookmarks, favorites and favorite files from any computer or any browser". Only installed with the users explicit permission and generally only remains running if the user decides to subscribe to the service. If it is no longer required it should be uninstalled to prevent a large number of clients 'checking in' to the server that have no chance of synchronizing |
sync2it.exe |
![]() |
Boost XP from Systweak - WinXP tweaking utility |
bxservice.exe |
![]() |
Added by the PUPPET-A TROJAN! Located in the System (9x/Me) or System32 (NT/2K/XP) folder |
boot.exe |
![]() |
Part of Acer Empowering Technology. "Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles, or to create their own customized profiles". Located in the "AcerEmpowering TechnologyePower" directory |
Boot.exe |
![]() |
Added by the DELBOT-AB WORM! |
bootchk.exe |
![]() |
Added by the KILO TROJAN! |
Njgal.exe |
![]() |
Added by a variant of the SPYBOT WORM! |
bootmng.exe |
![]() |
Added by the YPSAN.D WORM! |
Install.log.vbs |
![]() |
Added by an unidentified WORM or TROJAN! |
bootctrl.exe |
![]() |
Added by the WATERWORKS WORM! |
BootLoader.exe.vbs |
![]() |
Added by the AGENT-DT TROJAN! |
bootpd.exe |
![]() |
Added by the KUULLIO WORM! |
Date.POP.vbs |
![]() |
Added by the SPILTRON WORM! |
wscript.exe [path] All Users.vbs |
![]() |
Added by the SPILTRON WORM! |
wscript.exe [path] All Users.vbe |
![]() |
Added by the YPSAN.E WORM! |
wscript.exe [path] Install.log.vbs |
![]() |
Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources |
BOOTST~1.EXE |
![]() |
From here: "Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from "Start Programs Norton AntiVirus". If Norton AntiVirus comes up without problems, then fix this entry from the Msconfig Startup tab - it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages" |
BootWarn.exe |
![]() |
Added by the BANCBAN-CA TROJAN! |
[path to file] |
![]() |
System Tray access for this system (more info on the system here). Available via Start -> Programs |
wavepcmonitor.exe |
![]() |
Added by the LINEAGE-I TROJAN! |
winlogin.exe |
![]() |
Part of the Boston Acoustics USB speaker systems. What does it do and is it required? |
Boston.exe |
![]() |
Added by the GAOBOT.ALV WORM! |
svchostt.exe |
![]() |
Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here |
bouncer.exe |
![]() |
Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here |
LiveUpdate.exe |
![]() |
Added by the MYTOB.LY WORM! |
ilikeboys.exe |
![]() |
MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
bpcpost.exe |
![]() |
BroadcastPC adware variant |
bpc2 re inst.exe |
![]() |
Blazing Tools Perfect Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
bpk.exe |
![]() |
BulletProof FTP Server |
G6FTPSrv.exe |
![]() |
System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
BQTray.exe |
![]() |
Added by the OPASERV.E WORM! |
Brasil.exe |
![]() |
Added by the OPASERV.E WORM! |
BRASIL.PIF |
![]() |
Added by the OPASERV.P WORM! |
[worm filename] |
![]() |
Spyware remover - not recommended, see here |
BraveSentry.exe |
![]() |
Detected by Kaspersky as the PURITYSCAN.Y TROJAN! |
trdb.exe |
![]() |
Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here |
BREAK REMINDER.exe |
![]() |
Related to the Brebband Swedish Broadband provider |
servicecenter.exe |
![]() |
BroadcastPC adware variant |
bcre.exe |
![]() |
BroadcastPC adware variant |
bptre.exe |
![]() |
BroadcastPC adware variant |
breg.exe |
![]() |
Flingstone.com browser hijacker |
rundll32.exe ...Bridge.dll |
![]() |
Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired |
BRITRAY.EXE |
![]() |
Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate |
BrmfRmPA.exe |
![]() |
Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs |
bbwiz.exe |
![]() |
Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems |
bcmntray.exe |
![]() |
System tray access to wireless LAN card configuration options |
wltray.exe |
![]() |
Added by the RONTOKBRO WORM! |
CVT.exe |
![]() |
Added by the RONTOKBRO.B WORM! |
norBtok.exe |
![]() |
Added by the BRONTOK-F WORM! |
[path to file] |
![]() |
Added by the RONTOKBRO.C WORM! |
bronstab.exe |
![]() |
Added by the RONTOKBRO.J WORM! |
eksplorasi.exe |
![]() |
Added by the RONTOKBRO.D WORM! |
ElnorB.exe |
![]() |
Added by the BRONTOK-E WORM! |
sempalong.exe |
![]() |
Added by the BRONTOK-J or BRONTOK-L WORMS! |
RakyatKelaparan.exe |
![]() |
Added by the BRONTOK-R WORM! |
komodo-6321422.exe |
![]() |
Added by the BRONTOK-M WORM! |
bbm-qotkmgfc.exe |
![]() |
Added by the BRONTOK-N WORM! |
bbm-urnmmgfc.exe |
![]() |
Actual Names (AdvSearch) Internet Keywords parasite |
FindService.exe |
![]() |
Added by the TACTSLAY.C TROJAN! |
msgaol.exe |
![]() |
Added by the TACTSLAY.C TROJAN! |
s_menu.exe |
![]() |
Added by the TACTSLAY.C TROJAN! |
browse.exe |
![]() |
Added by the TACTSLAY.C TROJAN! |
deamon.exe |
![]() |
Added by the TACTSLAY.C TROJAN! |
msgaol.exe |
![]() |
BrowserAid/BrowserPal foistware |
browseraid.exe |
![]() |
Added by the RBOT-AVQ WORM! |
BHSV.EXE |
![]() |
Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard |
bhblaster.exe |
![]() |
Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys |
Commandr.exe |
![]() |
BrowserAid/BrowserPal foistware |
adblck.exe |
![]() |
Browser Sentinel - notifies you if a program wants to penetrate into Internet explorer, add itself to the Windows auto-run list or change your home page |
BrowserSentinel.exe |
![]() |
ZenoSearch adware |
[random filename] |
![]() |
Checks to make sure that IE is still your default browser |
loadwc.exe |
![]() |
Added by the SILLYFDC-D WORM! |
BrO-AcT.exe |
![]() |
Added by the STRATIO-BN WORM! |
[path to worm] |
![]() |
BSplayer - A video player used to play avi, mpg, wmv and other multimedia files |
bsplayer.exe |
![]() |
CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
BSCLIP.exe |
![]() |
RapidBlaster variant (in a "BelmontSoft" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
Bsoft.exe |
![]() |
BSplayer - a video player used to play avi, mpg, wmv and other multimedia files |
bsplayer.exe |
![]() |
Added by the VB.CBW WORM! |
FileKan.exe |
![]() |
Added by the VOXOM TROJAN! |
SVCH0ST.EXE |
![]() |
BookedSpace parasite |
RunDLL32.EXE [path] bs3.dll, DllRun |
![]() |
Added by the LITEBOT-B TROJAN! |
[path to trojan] |
![]() |
matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide |
matcli.exe |
![]() |
Added by the VB-VT TROJAN where * = 5,6 or 7! |
abcdefg23.exe |
![]() |
Added by the VB-VT TROJAN where * = 2,3 or 4! |
hiklmnop27.exe |
![]() |
System tray access to Motive's Broadband 2.0 configuration and repair utility |
McciTrayApp.exe |
![]() |
Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
btinst.exe |
![]() |
BT Privacy Online modem protection software, see here |
BTModemProtection.exe |
![]() |
BT Yahoo! internet connection manager |
DialBTYahoo.exe |
![]() |
Related to a USB Bluetooth adaptor. What does it do and is it required? |
BTSetBootKey.exe |
![]() |
Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software |
btstart.exe |
![]() |
System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device |
bttray.exe |
![]() |
Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
BtUsrBdg.exe |
![]() |
Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
BtUsrBdg.exe |
![]() |
BroadcastPC adware variant |
btv.exe |
![]() |
Added by Windows SteadyState which "helps make it easy for you to keep your computers running the way you want them to, no matter who uses them." Bubble allows notification messages to appear on a computer managed by Windows SteadyState |
Bubble.exe |
![]() |
Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network |
Buddyizer.exe |
![]() |
Power Save utility for Buffalo backup hard discs |
HDManage.exe |
![]() |
Bug Eliminator - "performs a complete health check on your computer safely, securely, and silently!" |
Bug_Elim.exe |
![]() |
Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures |
bugwatcher.exe |
![]() |
Part of Dell Alerts which provides customers with an update on latest updates for his/her system |
bldbubg.exe |
![]() |
Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
services.exe |
![]() |
Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
winlogon.exe |
![]() |
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
csrss.exe |
![]() |
Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder |
lsass.exe |
![]() |
Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link |
upsd.exe |
![]() |
BulletProof FTP Server |
bpftpserver.exe |
![]() |
Part of Bullguard antivirus |
mgui.exe |
![]() |
Part of BullGuard antivirus |
BullGuard.exe |
![]() |
Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions |
avxlive.exe |
![]() |
Part of Bullguard antivirus |
XCOMMSVR.EXE |
![]() |
Part of Bullguard antivirus |
AVXINIT.EXE |
![]() |
Part of Bullguard antivirus |
bulldownload.exe |
![]() |
BargainBuddy adware |
bargains.exe |
![]() |
BargainBuddy adware |
bargains.exe |
![]() |
Bullseye - intelligent research assistant |
BeTrack.exe |
![]() |
Added by the LEBREAT-E WORM! |
beagle.exe |
![]() |
System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
BQTray.exe |
![]() |
Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required |
bttnserv.exe |
![]() |
CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut |
ButtonKey.exe |
![]() |
Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem |
Bmui.exe |
![]() |
Display Client for the BuzMe Internet Call Waiting Service |
RCUI.exe |
![]() |
Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes" |
buzof.exe |
![]() |
FaxServe network fax software |
bwprnmon.exe |
![]() |
Added by the BXPROXY TROJAN! |
bxproxy.exe |
![]() |
BookedSpace parasite |
RunDLL32.EXE [path] bsx5.dll, DllRun |
![]() |
BookedSpace parasite |
RunDLL32.EXE [path] bxxs5.dll, dllrun |
![]() |
Added by the BYMER WORM! |
Wininit.exe |
![]() |
Added by the BYMER WORM! |
Msinit.exe |

Main Page 



