CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

StartupList Index

Currently 16937 startuplist entries and growing...
Last updated on 2008-07-04 18:52:24 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!

For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    Random sampling...
    NameStatusFilenameDescription
    WinNtBBXWinntBB.exeAdded by the DULOAD.C VIRUS!
    Windows BootXwinboot.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Windows Tracking ClientXctwsvc.exeAdded by the Troj/Agent-GMB Trojan. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Win32 SecureXmsconfigsvc.exeAdded by a variant of the W32/SDBOT WORM!
    WTIndicatorUSchedInd.exeWinTask - software that automates a variety of routine tasks quickly and simply
    WinTimerXmsupdate.cmdHijacker, detected by Kaspersky antivirus as Trojan.Win32.StartPage.tj
    winxpdll32.exeXwinxpdll32.exeAdded by a variant of the Win32.SMALL downloader TROJAN!
    WUSB54Gv4YWUSB54Gv4.exeWireless-G USB Wireless Network Adapter related - would appear to be required
    Windows ServicesXscmsg.exeAdded by a variant of the SDBOT WORM!
    Windows SyncroAdXSyncroAd.exe Windupdates adware variant
    Windows Update ManagerXWinlog0n.exeAdded by the TROJ/AGENT-BO TROJAN!
    WINDOWS SYSTEMXexpI0rer.exeAdded by the W32/Mytob-FI WORM! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. Also, please note the spelling of this file as it is different from the Windows system file explorer.exe.
    winupdate.exeXwinupdate.exeAdded by the RADO VIRUS!
    Win32BaseServiceMODXWintask.exeAdded by the NAVIDAD VIRUS!
    word pairXbopotsvr.exeAdded by the TROJ/SHED-A TROJAN!
    Windows Logon ServiceXwinlogon.pifAdded by the W32/Rbot-AOU WORM! Note: This worm\trojan file is found in the System (95/98/Me) or System32 (Nt/2000/XP) folder.
    Web ServiceX[random file,name].exeAdded by the ADMINCASH TROJAN!
    Windows Services LayerXwinl0g0.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    WTF TestXwtftest.exeAdded by the W32/RBOT-ACM WORM!
    Winsock2 driverXSYSTEM32.EXEAdded by the W32/Spybot-EG WORM!
    Windows Hijack Protection SystemXcommngr.exeAdded by a variant of the W32/SDBOT WORM! Note: Located in \%WINDIR%\System32\Com\
    Windows Updating ServiceXupdating.pifAdded by the W32/RBOT-ALW WORM!
    Windows USB v3.2Xwsvc.exeAdded by a variant of the WORM_SDBOT family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\
    winlogin.exeXmspaint.exeAdded by a variant of the WIN32.AGENT.AH TROJAN!
    wuanguardXwuanguard32.exeAdded by the W32/RBOT-AAF WORM!
    winvxd32Xwinvxd32.exeAdded by the W32.Gabloliz.A WORM!
    Windows Registry ScanXregscan23.exeAdded by a variant of the WIN32.RBOT WORM!
    WheelsMouseX(Path to,Trojan)Added by the Troj/SocksPr-D TROJAN!
    WinXPLoadURundll32,LoadDll, LoadExe,WinXPLoad.exeCompaq hotkey related - required if you use the hotkeys
    Windows SP2 UpdateXSp2update.exeAdded by the WOOTBOT.BS WORM!
    winXxwinxrpc32.exeAdded by the W32/Agobot-MV WORM!
    Wifi LoaderXwifiload.exeIdentified as a variant the Backdoor.Win32.IRCBot.byu malware Note: Located in \%WINDIR%\ Note: Use SDFix under supervision.
    Windows Reg ServicesXlncom.exeAdded by the TROJ/PRORAT-O TROJAN!
    Windows UpdateXwinlogin.exeAdded by the Troj/Banker-DV or Troj/Banker-FY or Troj/Banker-GB TROJAN!
    WindowsUpd2.exeWindowsUpd2.exe VirtuMonde adware
    Windows Load?windows.com??
    WinExecXWinExec.exeAdded by the W32/Falus-A WORM!
    Windows Start Server 2000Xtraficy.exeAdded by the W32/Rbot-AHM WORM!
    Windows System TrayXswhost.exeUnidentified worm or trojan
    Windows Updates AgentXwinupdate.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    WinPopXwinpop.exeAdded by Brudevic_A adware Note: Located in %programfiles%\WinPop
    WINDOWS SYSTEMXsmsc.exeAdded by the W32/MYTOB-BR WORM!
    WinBackup SchedulerUWbsched.exeLIUtilities WinBackup scheduler - backup software
    WINDOWS SYSTEM CLEANERXiexplore.exeAdded by the W32.Mytob.ET WORM!
    Win32 Help32 ServiceXwin32help.exeAdded by the W32/Delbot-U WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    WSAConfigurationXwinlogon32.exeAdded by the W32/AGOBOT-WC WORM!
    WinRunXAutoRun.ini W32/Lovelet-AD
    winctlXwinctl.exeAdded by the Troj/IRCBot-YI Trojan Read the link, allows remote access
    Windows Media Player UpdateX[random,filename]Added by the RBOT-ET WORM!
    Wins32 OnlineXcfgpwnz.exeAdded by the W32.Bropia.R WORM!
    WinFXXcssrs.exeAdded by the AGOBOT.FX WORM!
    WintimeXWintime.exeAdded by the Harnig TROJAN!
    WinGate initializeXWinGate.exeAdded by a variant of the LOVGATE WORM!
    Win32 UpdateXdl32.exeAdded by an unidentified variant of the lroffer infection. TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    winenvXwinenv.exeAdded by a variant of the Backdoor:W32/SdBot.BZY family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.

    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    207ppm 0.644s (0.096s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer