CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

StartupList Index

Currently 17175 startuplist entries and growing...
Last updated on 2008-08-21 15:41:23 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!


For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    Random sampling...
    NameStatusFilenameDescription
    Services AdministratorXlocalsvc.exeAdded by the Troj/Dloader-NY Trojan!
    SrchfstUpdateXsrchupdt.exeSearchFast adware downloader
    SemanticInsightXSemanticInsight.exeRelated to RXToolbar ADAWARE! Software that displays pop-up/pop-under advertisements when the primary user interface is not visible.
    sp2updateXsp2update.exe ADWARE! Adware.SP2Update Tracks URLs visited and search terms entered into Internet Explorer.
    SystemsXspoolsvc.exeAdded by the DLOADR-SW TROJAN!
    Start UppingXtaksmgr.exeAdded by the W32/RBOT-QK WORM!
    ShadowYShadow.exe" NTI Shadow 3 is an award-winning easy-to-use backup application that automatically protects your photo, music, video, and various data files. It makes data restoration as easy as dragging and dropping files from one place to another"
    ScrSvrOldX(worm filename)Added by the OPASERV VIRUS!
    SP TimeSyncUSP TimeSync.exeSP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server).
    SetIconNSetIcon.exeInstalled by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog
    SynTPLprYsyntplpr.exeSynaptics touchpad driver helper. Required for touchpad features to work
    SystemXkernels32.exeAdded by the VICSFRAM TROJAN!
    system32.dllXsysteminit.exe CoolWebSearch parasite related.
    Screen GuardUlaunch.exePart of Access Denied security and privacy software
    SPntXSPnt.exePremium rate adult material dialer
    STOPzilla ServiceUSZNTSVC.EXE STOPzilla popup blocker
    Srvce Pack UpdteXsvcpack.exeAdded by a variant of the WIN32.RBOT WORM!
    SmileboxTrayNSmileboxTray.exeRelated to the Smilebox photo sharing/printing service
    SndPnpMixXwauctlxp4.exeAdded by the WIN32.MUDROP.N TROJAN!
    SDK Core Function2Xsdkimprovment2.exeAdded by the W32.SPYBOT.OGX WORM!
    sp2fwxpXsp2fwxp.exeAdded by the WIN32.SMALL.ABW TROJAN!
    SfWinStartInfoUsfWinStartupInfo.exe

    SFIRM32 Online Banking software

    StrokeItUstrokeit.exe StrokeIt is an "advanced mouse gesture recognition engine and command processor".
    System ProcessXlsass.exeAdded by the TROJ/ADCLICK-AG TROJAN! - Note - this is NOT the legitimate Windows lsass.exe process, located in the Winnt/System32 or Windows\System32 folder, and which should NOT figure in Msconfig/Startup!
    Symantec Antivirus professionalXdfrgfrat.exeAdded by a variant of the WIN32.RBOT WORM!
    SetCacheModeYptipbmf.dllPromise RAID controller
    Security Service ProcessXsvhost.exeAdded by the AGOBOT-LC WORM!
    SystemToolsXkernels88.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More here
    smcservXwinsrv.exeAdded by the W32/AGOBOT-OU WORM!
    SystemTraySDUSDSystemTray.exeSpyware Detector, Adware/Spyware remover - initially considerered a "rogue" program. The latest version has since apparently mended its ways: see note
    svchostXying.exeAdded by Constructor VC2000 MALWARE!
    SsAAD.exeUSsAAD.exeRelated to Sony_SonicStage A process associated with Sonic Stage from Sony. Sonic Stage is an advanced music management software. Note: Located in \%Program Files%\Sony\sonicstage\
    Shell API32Xsvcnet.exeAdded by the WIN32.TIBICK.C WORM!
    Start Network Scanner ToolUsdFTP.exeRelated to Sharpdesk from Sharp Electronics. A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents. Note: Located in C:\Program Files\Sharp\Sharpdesk\
    SystemXdcomx.exeAdded by the CIREBOT VIRUS!
    syswin32Xsyswin32.exeAdded by the SDBOT TROJAN!
    Sex TerisXst01b.exeAdded by the REPAD VIRUS!
    SicomXSicom.exeAdded by the NETLIP VIRUS!
    sixtysixXsixtypopsix.exe MediaMotor/Popuppers adware downloader
    scrssXscrss.exeAdded by Troj/HacDef-R TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    startkeyXRunWinRaR.exeAdded by a variant of Bifrose-LV as reported by VirusTotal. TROJAN! Note: Located in C:\Windows\
    spc_wNnzspc.exe NetZero Search Enhancement related
    sstataXdwdas.exeAdded by the Dasda trojan
    securwXNctrup.exeAdded by the W32.NOPIR.A WORM!
    Security Antivirus Xp 1Xinetfor.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: Located in \%WINDIR%\System32\
    SysDesktopXfswan.exeAdded by the Troj/QQPass-AF TROJAN! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
    snpstd3Yvsnpstd3.exeRelated to Sonix Inc. Camera Monitor MFC Application Note: located C:\%WINDIR%\
    StarSkinUstarskin.exe StarSkin allows you to change the view and appearance of your Windows XP box with the use of publically available themes.
    SuNotificationUsuatshut.exe ShadowSurfer - "provides a safe computing environment by creating a virtual twin of your PC. Restore the pre-ShadowMode™ system state no matter what changes have occurred to your PC."
    System TerminalXSYSTEM2.EXEAdded by a Troj/Spybot-BZ trojan infection
    Spruce - Auto UpdateXSpruce.exeInstalled without notice. A Rabio "Search Enhancer" adware variant. Note: Located in \%Program Files%\Spruce\
    Service DriversXMSNMEssenger.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Shield32 SecurityXshield32.exeAdded by the Backdoor.Rizo.A Note: Located in \%WINDIR%\System32\Com\
    Sygate Personal PortXcrss.exeAdded by the W32/RBOT-PX WORM!
    strtoX(Path to trojan,executable)Added by the Troj/KillAv-AP TROJAN!

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.


    Engine Version 2.0 by CastleCops

    spacer spacer