| | Name/Startup Item |
Command |
Comments |
| ? |
%cmpmixtitle% |
%cmpmixstr% | ?? |
| U | $EnterNet |
Enternet.exe | Connection manager for the EnterNet ISP. You can also use RASPPOE |
| X | @ |
regedit -s ..\win.dll | Added as a result of the SEEKER.K VIRUS! |
| N | @Hoc Toolbar | AtHoc.exe | One-click activated browsing toolbar used by various web-sites. See here for more info |
| N | @loha | reminder.exe | Registration reminder for @loha@home E-mail utility |
| X | @tour_ww | @tour_ww[1].exe | Adult content dialler |
| U | !NoLoad | winrecon.exe | WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| X | _x-Finder | _x-Finder.exe | Disconnects and redials an ISP modem to an adult content site |
| X | (*)Run | win32API.exe | Homepage hijacker, see here (* = any digit) |
| X | (*)API Machine | winSOCKS.exe | Homepage hijacker, see here (* = any digit) |
| U | _winadm | winadm.exe | Parents Friend - "Log any activity and protect programs with a password. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC" |
| X | ,main drive Loader | wininfo.exe | Suspected malware as it appears in 3 different registry locations - see here |
| N | /l:eng | N/A | Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup |
| X | *JanisRuckenbrodII | janis.com | Added as a result of the POPS VIRUS! |
| Y | *StateMgr | statemgr.exe | Windows default for System Restore. Do NOT disable! |
| X | {2CF0B992-5EEB-4143-
99C0-5297EF71F444} |
rundll32.exe stlbdist.dll, DllRunMain | Browseraid/Startium parasite |
| X | 123456 | rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl | Added as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number |
| X | <random digits>.exe | <random digits>.exe | 8 random digits, example: 77231997.exe = 77231997.exe. Winpup.exe adult content downloader |
| N | 1: | hpdrv.exe | HP utility for monitoring when and how many recoveries have been done |
| U | 12Ghosts Popup-Killer | 12popup.exe | 12Ghosts Popup-Killer |
| ? | 17779Proj2002 | N/A | ?? |
| N | 000StTHK | 000StTHK.exe | Toshiba laptop related but not required. What does it do? |
| U | 00THotkey | 00THotKey.exe | For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev. |
| N | 1A:MacVisionTrayMonitor | TrayMonitor.exe | Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock) |
| Y | 1A:Stardock MCP | mcpserver.exe | Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on |
| Y | 1A:Stardock TrayMonitor | TrayServer.exe | For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX |
| ? | 1CmailS | NETMAIL.EXE | ?? |
| U | 1Srv32 | SpyAgent4.exe | SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC." |
| U | 1Win32Cfg | SpyBuddy.exe | SpyBuddy monitoring software |
| U | 2wSysTray | 2portalmon.exe | 2Wire Homeportal user interface |
| X | 2020Downloader | mssvr.exe | 2020Search Toolbar related. Reported to be auto-installed |
| Y | 3c1807pd | 3cmlink.exe 3cpipe-3c1807pd | 3Com WinModem driver. See here for more WinModem information |
| Y | 3capplnk | 3capplnk.exe | US Robotics Modem driver |
| N | 3cdminic | 3CDMINIC.EXE | 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards |
| ? | 3CM Link | 3cmcnkw.exe | Same as below? |
| Y | 3Cmlink | 3CmlinkW.exe | For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information |
| N | 3ComDMIAgent | 3CDMINIC.EXE | 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards |
| Y | 3cpipe-USRpdA | USRmlnkA.exe | Modem driver files from US Robotics |
| U | 3Deep Control Panel | 3DeepCTL.EXE | From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games |
| X | 3Dfx Acc | GFXACC.EXE | Added as a result of the GIBE VIRUS! |
| Y | 3dfx Tools | 3dfxCmn.dll | Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards |
| N | 3dfx Task Manager | 3dfxMan.exe | System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs |
| Y | 3dfxv2ps.dll | 3dfxv2ps.dll | Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards |
| U | 3DLabsHelperDemon | 3dldemon.exe | Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled |
| ? | 3Dlabs Taskbar Display Manager |
3DLman.exe | 3DLabs graphics driver related. System Tray access to display settings? |
| N | 3D Text | 3D Text.scr | 3D Text screensaver |
| U | 3qdctl.exe | 3qdctl.exe | Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ |
| X | 5-1-61-96 | members-area.exe | Adult content dialler |
| X | 5-2-46-112 | 5-2-46-112.exe | Adult content pop-up dialler. Removal instructions here |
| X | 666 | Ska.exe | Added as a result of the NETBUS VIRUS! |
| |
Name/Startup Item | Command | Comments |
|
U | A1000 Settings Utility | cpqa1000.exe | Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features |
|
U | A4Proxy | A4Proxy.exe | Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites |
|
? | AAACLEAN | AAACLEAN.INF | ?? |
|
? | AAAKeyboard | ?? | ?? |
|
N | AAATraySaver | TraySaver.exe | System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray |
|
N | ABBYY Community Agent | CAGENT.EXE | Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software |
|
X | ABC | keylogger.exe | Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ |
|
U | Absolute Shield | dseraser.exe | Absolute Shield/Evidence Eliminator - iternet history eraser |
|
X | ABsr | absr.exe | Added as a result of the AUTOUPDER VIRUS! |
|
X | abtu | mp3serch.exe
lopsearch.exe | Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version |
|
U | AbyssWebServer | abyssws.exe | Abyss web server |
|
Y | AcBtnMgr_Xxx | AcBtnMgr_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
|
U | Accelerate | accelerate.exe | Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection |
|
N | Access Ramp Monitor | armon32.exe | Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again |
|
N | AccessRamp Monitor01 | ARMon32a.exe | From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service." |
|
N | AccessRampLAN01 | ARUpld32.exe | Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003 |
|
N | AccuWeather.com® Desktop | ?? | Desktop weather from AccuWeather.com |
|
U | AcerNotebookManager | almxptray.exe | System Tray access on some Acer Notebooks to give faster access to system settings |
|
? | AcerPowerkey | Powerkey.exe | PowerKey utility for Acer TravelMate notebook PCs. What does it do and is it needed? |
|
Y | ACMonitor_Xxx | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
|
X | acocash | fastdown.exe
fastfown.exe | Adult content dialler |
|
U | Acombo3dmouse | Acombo3d.exe | Mouse driver - required if you use non-standard Windows driver features |
|
X | Aconti | aconti.exe | Adult content dialler |
|
U | acoustic | acoustic.exe | Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained |
|
N | acpart | agpart11.exe | Program for finding trucks on-line |
|
N | Acrobat Assistant | ACROTRAY.EXE | If you want to create a PDF using Acrobat Distiller, you can execute this program manually just before doing so |
|
? | ActionAgent | actionagent.exe | ?? |
|
N | Action Manager 32 | am32.exe | Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs |
|
N | Activation | Activation.exe | Part of Microsoft Money |
|
U | Activboard | MMKeybd.exe | Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys |
|
X | ActiveDesktop | systray32.exe | Added as a result of the DABOOM VIRUS! |
|
N | ActiveEyes | ActiveEyes.exe | ActiveEyes from TFI Technology |
|
U | ActiveMenu | ActiveMenu.exe | Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally |
|
U | ActivePlus | activeplus.exe | Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on) |
|
Y | ActiveShield | MCVSSHLD.EXE | McAfee VirusScan On-line. See also McAgentExe |
|
N | ActivSurf | backweb*****.exe | Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates |
|
U | AD2KClient | AD2KClient.exe | Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
|
N | AdaptecDirectCD | Directcd.exe | DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
|
N | Ad-aware | Ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
|
N | Adaware Bootup | ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
|
X | Adaware lptt01 | adaware.exe | New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware |
|
U | Ad Blocker | blocker.exe | Ad Blocker - blocks popups, and also removes banners, image ads and flash ads |
|
? | ADG | ADG.exe | SoundBlaster Audigy related? |
|
N | ADGJdet | ADGJDet.exe | Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection |
|
X | ADM Library Loader | admlib32.exe | Added as a result of a variant of the SDBOT VIRUS! |
|
U | Ad-Muncher | ADMUNCH.EXE | Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications |
|
X | AdobeA | adobes.exe | Added as a result of the FLOOD.BA VIRUS! |
|
U | Adobe Gamma Loader | Adobe Gamma Loader.exe | Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine |
|
? | Ad Online Guide | adonlineguide.exe | ?? |
|
X | adp | adp.exe | Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc |
|
N | ADQuickAccess | Adtray.exe | After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95 |
|
U | ADService | ADService.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
|
U | AdsGone | Adsgone.exe | AdsGone - pop-up stopper |
|
N | ADSL Diagnostic Tools | mapiicon.exe | System tray access to ADSL modem diagnostic tools. Available via Start -> Programs |
|
Y | ADSS | ADSS.exe | ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied |
|
U | AdSubtract | adsub.exe | AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs |
|
U | ADUserMon | ADUserMon.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk |
|
X | Adult_Chat | Adult_Chat.exe | Adult content dialler |
|
X | Adult_Chat1 | Adult_Chat1.exe | Adult content dialler |
|
N | Advanced Tools Check | ADVCHK.EXE | Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
|
X | Advapi | Advapi.exe | Added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS! |
|
U | Advertising Killer | Akiller.exe | AKiller - pop-up stopper |
|
U | Ad-watch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
|
? | Aeiwlsta.exe | Aeiwlsta.exe | IBM High Rate Wireless LAN Adapter driver. Is it required? |
|
N | AELaunch | AELaunch.exe | Audio Applications Launcher for the Philips Acoustic Edge soundcard |
|
? | AeXSWDUsr | AeXSWDUsr.exe | Altiris Express NS Client Manager software. Is it required? |
|
U | AEZBProc | aptezbp.exe | IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
|
U | AFAFilter | windefault.exe | AFAFilter - internet filter software |
|
N | Agent | Agent.exe | Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs |
|
? | Agente | Remupd.exe | Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar? |
|
U | AgfaCLnk | AgfaCLnk.exe | For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive |
|
Y | AGRSMMSG | AGRSMMSG.exe | IBM AMR modem driver |
|
N | AGSatellite | AGSatellite.exe | Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs |
|
U | ahfp
or
ahfprog | ahfp.exe | Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
|
U | AHNSD | AhnSD.exe | AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis |
|
? | AHNUE | AHNUE.exe | ?? |
|
N | AHQInit | ahqinit.exe | Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required |
|
U | aiepk | aiepk2.exe | Another IE Popup Killer - pop-up stopper |
|
N | AIM | aim.exe | AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs |
|
X | aimaol lptt01 | aimaol.exe | New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
|
N | AimingClick | AimingClick.exe | AimingClick from AimingTech. Web searching tool. Available via Start -> Programs |
|
X | AIM reminder | AIM reminder.exe | Added as a result of the BUDDY VIRUS! |
|
N | AIMster | ?? | Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs |
|
Y | Aiptek Graphics Tablet (USB) |
atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
|
U | AKiller | akiller.exe | BuyPin Advertising Killer - popup killer |
|
U | Alarm Manager | Alarm.app.exe | Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop |
|
? | AlarmWatcher | AlarmWatcher.exe | Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required? |
|
N | Album Fast Start | ABMTSR.EXE | Scanner software, not required for scanner to work |
|
? | Alcom PCL Capture | FMW_PCAP.EXE | ?? |
|
? | AlcxMonitor | Alcxmntr.exe | Realtek AC97 Audio - Event Monitor. What does it do and is it required? |
|
X | Alevir | Alevir.exe | Added as a result of the OPASERV.A VIRUS! |
|
N | Alexa | Alexa.exe? | Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs |
|
? | ALFY Accellerator | AlfyAC~1.exe | ?? |
|
Y | ALiSndMgr | ALiSndMg.exe | ALi AC97 Sound driver |
|
? | AliUSBfix | GREENMK.exe | May be realted to a USB 2.0 PCI card - the IOgear GIC220OU? |
|
U | All Aboard Status | stswin.exe | All Aboard! Internet Connection Sharing status icon |
|
X | All Sea screen saver | TaskTray.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
|
X | All Sea web link | FWLink.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
|
U | allSnap | allSnap.exe | "allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or
Photoshop" |
|
U | Alogserv | Alogserv.exe | From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
|
? | Alps Electric USB Server |
Monserv.exe | Alps Electric USB Server. What does it do and is it required? |
|
U | AlpsPoint
or
Apoint | Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
|
? | ALServ | ALServ.exe | Altec Lansing AMS speaker related. What does it do and is it required? |
|
N | Altnet
or
AltnetPointsManager |
points manager.exe | Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required |
|
U | ALUAlert | ALUNotify.exe | Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
|
U | AlwaysOnTopMaker | AlwaysOnTopMaker.exe | Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
|
N | AME_CSA | rundll32 amecsa.cpl, RUN_DLL | Loads ADSL modem Control Panel applet |
|
N | America Online *.* Tray Icon | aoltray.exe | Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs |
|
Y | Amon | AMON.EXE | Monitoring part of Eset's NOD32 virus-scanner |
|
Y | Amonitor | amon.exe | Tiny Personal Firewall |
|
X | anbv32 | nabv32.exe | Added as a result of the TITOG.C VIRUS! |
|
N | Announcements | Annclist.exe | MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
|
N | Anntext | Anntext.exe | Caere Pagekeeper text annotation server |
|
< |
