CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

StartupList Index

Currently 17175 startuplist entries and growing...
Last updated on 2008-08-21 15:41:23 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!


For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    Random sampling...
    NameStatusFilenameDescription
    MicroedSoft ToolbarXSmoked.exeAdded by the W32/RBOT-ALN WORM!
    MSNPluginSrvcsXp6.exeAdded by the SDBOT.AKJ or W32/Rbot-VJ WORM!
    mskjXmskj.exeAdded by the Kaemon TROJAN!
    Modem Driverz UpdatesXmdmdrv.exeAdded by a variant of the W32/SDBOT WORM!
    Microsoft WindowsXpwjbvphi.exe W32/Rbot-GQK Read the link, allows remote access
    Microsoft ExplorerXexplorer.scrAdded by the W32/Rbot-ADH Worm!
    Microsoft UpdateXwebm.exeAdded by the SDBOT.WK WORM!
    Microsoft Windows UpdateXsvchos.exeAdded by a Backdoor.Sdbot.AC worm infection.
    MSN serviceXNTDKRN.EXEAdded by the RBOT.UJ WORM!
    MessengerXmessenger.exeAdded by the KUTEX VIRUS!
    Microsoft WinSoundX[random file,name]Added by a variant of the WIN32.RBOT WORM!
    msmcX ms****.exe (*,= random char) ClientMan parasite variant
    MixghostNmixghost.exeManagement software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu
    MSIEXECXMSIEXEC32.exeAdded by the AINESEY.A VIRUS!
    MS Security Update 993Xmsident.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    mvsyswinaXacsysiom.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More here
    MsnarratorXmsnarrator.exeAdded by the NARAT.A VIRUS! - also identified as MPGCOM Toolbar adware
    Microsoft Internet Explorer UpdateXieupdate.exeA variant of the IRCBot family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Microsoft Crs Fix ServXwincrs.exeAdded by the SDBOT.BWF WORM!
    Microsoft Setup InitializazionXlocalhost.exeA variant of the IRCBot family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\
    MS Windows Local DirectoryXMSWLD32.exeAdded by a variant of the RBOT family of IRC Backdoor trojan. Note: Located in \%WINDIR%\System32\
    Microsoft System NTXsvhost.exeAdded by the IRC/SDBOT.COU WORM!
    Microsoft Broadband NetworkingUMSBNTray.exeMicrosoft Broadband Networking Tray Application
    MicrosoftNetwork Daemon for Win32XNETD32.EXEAdded by the RANDEX.F VIRUS!
    Mozila FirefoxXfirebox.exeAdded by the W32/RBOT-AIP WORM!
    MS Windows TASK ServiceXMSWTASK32.exeAdded by a variant of the Rbot family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ [Use SDFix under supervision]
    msnntXwinampb.exeadware downloader of Chinese origin, detected by Kaspersky antivirus as Trojan.Win32.Agent.tl
    mmxp2passion.exeXmmxp2passion.exe MediaMotor/Popuppers adware component
    Microsoft NT DriversXntdrv.exeAdded by the Backdoor.SdBot.ajn reported by ewido, TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    MustafxXmustafx.exeIdentified as a variant of the Trojan.Virantix.B malware. Note: Located in \%WINDIR%\System32\
    myhuyXhuy.exeAdded by the W32/Blaster-C WORM! Note: This worm file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
    Microsoft Sidewinder Game Controller SoftwareNSWTRAY.EXEMS SideWinder game controller system tray icon. Available via Start -> Programs
    Microsoft UpdateXwinsys.exeAdded by the W32/RBOT-GV WORM!
    Microsoft WindowsXKernel.vbsAdded by the VBS/Edibara-A visual basic script virus Read the link, steals information
    MS lsass6 StartupXlsass1356.exeAdded by a variant of the W32/SDBOT WORM!
    MSConfigReminderNmsconfig.exeThis is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
    MS FIREWALLXmsfrewall.exeAdded by the W32/SDBOT-PU WORM!
    msadp32Xmsadp32.exeAdded by a Octa-B trojan infection
    Microsoftf DDEs ControlXwees.exeAdded by a variant of the the RBOT.BOF WORM!
    MicrosoftUpdateXWinUp32.exeunidentified worm
    MSWinlogonXwinlogon.exeAdded by the Troj/Agent-FZM Trojan
    Microsoft UpdateXwin32.exeAdded by a variant of the W32/SDBOT WORM!
    MicroSoft IE SasserXISASS.EXEAdded by the SDBOT.MX WORM!
    MS Java Applets for Windows NT, ME & XPXjavaapplets.exeAdded by the W32/Vanebot-B WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Microsoft Update MachineXwuamgard.exeAdded by the SPYBOT.CS WORM!
    MSN MessengerXmsnmsngr.exeAdded by a variant of the WIN32.RBOT WORM!
    Microsoft Synchronization ManagerXslhost.exeAdded by a SDBOT.YH worm infection
    MSN Live MessangerXmsnlivegs.exeAdded by the W32/Rbot-FSG WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Disable anti-virus and firewall applications
    MS-HTMLX(random,filename)Added by the LATINUS.15 VIRUS!
    MHDOGStartXmhdogst.EXEAdded by an unidentified VIRUS! A possibility is a trojan known as PENIS
    Microsofts UpdatezXexploirez.exeAdded by a variant of the WIN32.RBOT WORM!
    Microsoft LSA layerXMSLSA32.exeAdded by the W32/Rbot-AKZ WORM!
    Microsoft Debug ServiceXdbgbgr.exeAdded by a variant of the WIN32.RBOT WORM!
    Microsoft Visual SourceSafeXwinlogon.exeAdded by the W32.Neveg.B worm
    MyVBAppXinstall.exeDetected as Generic Downloader.s by McAfee, probable variant of ReferAd Adware!

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.


    Engine Version 2.0 by CastleCops

    spacer spacer