Windows XP A to Z - http://www.softwaretipsandtricks.com/windowsxp
Start Up Applications A
http://www.softwaretipsandtricks.com/windowsxp/articles/595/1/Start-Up-Applications-A
Super Admin
 
By Super Admin
Published on 03/28/2005
 
Starting with letter A

Start Up Applications A Page 1

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

Name/Startup Item Command Comments
X system32.exe Added by the AGOBOT-KU WORM! Note - has a blank entry under the Startup Item/Name field
Y !1_pgaccount pgaccount.exe DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks. You will see one instant of pgaccount.exe for every active account on your system, and this is essential for PG to work properly
Y !1_ProcessGuard_Startup procguard.exe DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks
N !NoLoad winrecon.exe WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
? $EnterNet Enternet.exe Connection manager for the EnterNet ISP. You can also use RASPPOE
X $WindowsRegKey%update IEXPLORE.EXE Added by the RBOT-EZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
N %cmpmixtitle% %cmpmixstr% Possibly related to C-Media Mixer Control panel?
? %FP%012-L2TP fts.exe fts.exe 012.Net ISP software - what does it do and is it required?
? %FP%012-L2TP FWPortal.exe FWPortal.exe 012.Net ISP software - what does it do and is it required?
? %FP%1776 Internet fts.exe fts.exe 1776 Internet ISP software - what does it do and is it required?
? %FP%1776 Internet FWPortal.exe FWPortal.exe 1776 Internet ISP software - what does it do and is it required?
? %FP%Barak013 fts.exe fts.exe Barak013 ISP software - what does it do and is it required?
? %FP%Barak013 FWPortal.exe FWPortal.exe Barak013 ISP software - what does it do and is it required?
? %FP%Friendly fts.exe fts.exe Friendly ISP software - what does it do and is it required?
X (*)API Machine winSOCKS.exe Homepage hijacker, see here (* = any digit)
X (*)Run win32API.exe Homepage hijacker, see here (* = any digit)
X (Default) media_driver.exe Added by the TUPEG VIRUS!
X (Default) Shania.vbs Added by the SHANIA TROJAN!
X (Default) NOTEPAD.exe Added by the RUSTY WORM! Note - not to be confused with the valid Windows "NOTEPAD" text editor
X (default) [random filename].exe Added by the BLACKMAL WORM!
X (default) twunk_32.exe Added by the BLACKMAL.C WORM!
X (default) winhelp.exe Added by the BLACKMAL.C WORM!
X (L4r1$$4) (4nt1) (V1ruz) SP00Lsv32.pif Added by the ASSIRAL.B WORM!
X *JanisRuckenbrodII janis.com Added by the POPS WORM!
Y *StateMgr statemgr.exe Windows ME default for System Restore. Do NOT disable!
X *windows update wrauclt.exe Added by the RBOT-QU WORM!
X *windows update wuanclt.exe Added by the RBOT-PG WORM!
X *windows update wuaucrlt.exe Added by the SPYBOT.HUR WORM!
X *windows update wuraclt.exe Added by the RBOT-PO WORM!
X *windows update wurauclt.exe Added by the RBOT-SY WORM!
X *windows update wsctl.exe Added by the SPYBOT.PR WORM!
X *WinLogon [trojan path] ren time:[random number] Added by the VUNDO TROJAN!
X ,main drive Loader wininfo.exe Suspected malware as it appears in 3 different registry locations - see here
X .mscdr lassa.exe Added by the WEBUS.C TROJAN!
X .mscdr lsvchost.exe Added by the WEBUS.D TROJAN!
X .mssecure mssecure.exe Added by the DDOS_BOXED.X TROJAN!
? .NET config sysmon32.exe ??
X .norton rchost.exe Added by a variant of the BOXED-A TROJAN!
X .Prog services.exe Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X .Prog winlogon.exe Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
X .TEXTCONV csrss.exe Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X .TEXTCONV lsass.exe Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
X .WMAudio csrss.exe Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X .WMAudio lsass.exe Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
N /l:eng N/A Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function
X 000hpdllhos hpdllhost.exe LZIO.com adware downloader
U 000StTHK 000StTHK.exe Toshiba Hot key functionality for the function keys (Fn-Esc, Fn-F1 (lock), Fn-F2, Fn-F3, Fn-F4, Fn-F5 (switching between laptop and CRT display output), etc...)
U 00THotkey 00THotKey.exe For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
U 0190 Warner WARN0190.EXE Anti-dialer program (Germany)
U 0900 Warner WARN0900.EXE Anti-dialer program (Germany)
X 123456 rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl Added by the KITRO.C (or DANDI.A) WORM! 123456 can be any random 3 to 6 digit number
U 12Ghosts Popup-Killer 12popup.exe 12Ghosts Popup-Killer
? 17779Proj2002 N/A ??
X 180adsolution 180adsolution.exe 180Solutions/N-Case adware variant
X 180ax 180ax.exe 180Solutions/N-Case adware variant
N 1: hpdrv.exe HP utility for monitoring when and how many recoveries have been done
N 1A:MacVisionTrayMonitor TrayMonitor.exe Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y 1A:Stardock MCP mcpserver.exe Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications
Y 1A:Stardock TrayMonitor TrayServer.exe For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
? 1CmailS NETMAIL.EXE ??
X 1on1 1on1.exe Adult content dialler
U 1Srv32 SpyAgent4.exe SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."
U 1Win32Cfg SpyBuddy.exe SpyBuddy monitoring software
U 1Win32Cfg Keyloggerpro.exe KeyloggerPro - monitoring software
X 1WinCfg32 WebMailSpy.exe WebMailSpy spyware
X 2020Downloader mssvr.exe 2020Search Toolbar related. Reported to be auto-installed
X 2thousandbuck [path to file] Added by the RANKY.L TROJAN!
U 2wSysTray 2portalmon.exe 2Wire Homeportal user interface
X 32-bit Thunking service thunk32.exe Added by the DERDERO.A WORM!
? 39ELTFH25Z8SKF Ezg1q5.exe Seems to be associated with software by Resplendence SP ?
Y 3c1807pd 3cmlink.exe 3cpipe-3c1807pd 3Com WinModem driver. See here for more WinModem information
Y 3capplnk 3capplnk.exe US Robotics Modem driver
N 3cdminic 3CDMINIC.EXE 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
? 3CM Link 3cmcnkw.exe ??
Y 3Cmlink 3CmlinkW.exe For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
N 3ComDMIAgent 3CDMINIC.EXE 3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y 3cpipe-USRpdA USRmlnkA.exe Modem driver files from US Robotics
X 3D Text 3D Text.scr Added by the JERMY.A WORM!
U 3Deep Control Panel 3DeepCTL.EXE From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X 3Dfx Acc GFXACC.EXE Added by the GIBE WORM!
N 3dfx Task Manager 3dfxMan.exe System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y 3dfx Tools 3dfxCmn.dll Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
Y 3dfxv2ps.dll 3dfxv2ps.dll Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
? 3Dlabs Taskbar Display Manager 3DLman.exe 3DLabs graphics driver related. System Tray access to display settings?
U 3DLabsHelperDemon 3dldemon.exe Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled
U 3qdctl.exe 3qdctl.exe Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
Y 3ware 3DM 3dm.exe Monitors status of the disk array on 3ware IDE RAID controllers
X 4wd!!! Natal!.pif Added by the OPASERV.AI WORM!
X 5-1-61-96 members-area.exe Adult content dialler
X 5-2-46-112 5-2-46-112.exe Adult content pop-up dialler. Removal instructions here
X 666 Ska.exe Added by the PIPES TROJAN!
X 9xHtProtect AVprotect9x.exe Added by the NETSKY.M WORM!
X ;Rundll [filename] Added by the PWSLEGMIR.E TROJAN!
X @ regedit -s ..win.dll Added by the SEEKER.K TROJAN!
N @Hoc Toolbar AtHoc.exe One-click activated browsing toolbar used by various web-sites. See here for more info
N @loha reminder.exe Registration reminder for @loha@home E-mail utility
X @tour_ww @tour_ww[1].exe Adult content dialler
X a a.exe Commercials file that registers itself in the system registry and redirects IE to a certain commercial website
U a-squared a2guard.exe a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a² 'Background Guard' real time protection feature
Y a-winpoet-service winpppoverethernet.exe WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
U A1000 Settings Utility cpqa1000.exe Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
U A4Proxy A4Proxy.exe Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
? AAACLEAN AAACLEAN.INF ??
? AAAKeyboard ?? ??
N AAATraySaver TraySaver.exe System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
U AAK aak.exe Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere"
X Aaou amee.exe PurityScan/Clickspring adware
? ab EazyScheduler ezsched.exe ??
N ABBYY Community Agent CAGENT.EXE Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software
X ABC keylogger.exe Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
U ABIT uGuru uGuru.exe Provides quick access to several Abit motherboard utilities - such as monitoring cpu temperature, fan speeds, overclocking, flashing of BIOS
U Absolute Shield dseraser.exe Absolute Shield/Evidence Eliminator - iternet history eraser
U Absolute StartUp monitor ASMon.exe Absolute Startup - startup monitor from F-Group Software
X ABsr absr.exe Added by the AUTOUPDER TROJAN!
X absr mwsvm.exe SeekSeek search hijacker related - as seen here
X abtu mp3serch.exe Loads the executable for Lop.com. mp3serch.exe is the final version
X abtu lopsearch.exe Loads the executable for Lop.com. lopsearch.exe is the beta version
U AbyssWebServer abyssws.exe Abyss web server
Y AcBtnMgr_Xxx AcBtnMgr_Xxx.exe Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
U acc acc.exe Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"
X ACCDEFRAGINFO [path to worm] Added by the DARBY-O WORM!
U Accelerate accelerate.exe Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N Access Ramp Monitor armon32.exe Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
N AccessRamp Monitor01 ARMon32a.exe From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."
N AccessRampLAN01 ARUpld32.exe Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
U AcctMgr AcctMgr.exe Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities—all from the safety of your own PC
N AccuWeather.com® Desktop ?? Desktop weather from AccuWeather.com
? Ace bows Ace bows.exe ??
N AceGain LiveUpdate LiveUpdate.exe AceGain_LiveUpdate. "AceGain LiveUpdate provides a fully managed and customizable LiveUpdate platform that seamlessly integrates with a game. As soon as an update is made available, AceGain manages the alert, download and installation as well as version control and user network preferences."
U AcerNotebookManager almxptray.exe System Tray access on some Acer Notebooks to give faster access to system settings
U AcerPowerkey Powerkey.exe PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
N Acme.PCHButton pchbutton.exe Used by HP Instant Support
Y ACMonitor_Xxx ACMonitor_Xxx.exe Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
X acocash fastdown.exe Adult content dialler
X acocash fastdown.exe Adult content dialler
U Acombo3dmouse Acombo3d.exe Mouse driver - required if you use non-standard Windows driver features
X Aconti aconti.exe Adult content dialler
U acoustic acoustic.exe Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
N acpart agpart11.exe Program for finding trucks on-line
U Acrobat Assistant *.* ACROTRAY.EXE Used to create PDF files with Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation. *.* represents the version
U Acronis Scheduler2 Service schedhlp.exe Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images
N Acronis TrueImage Monitor TrueImageMonitor.exe Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N AcronisTrueImage Monitor TrueImageMonitor.exe Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N Acronis True Image Monitor TrueImageMonitor.exe Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N Action Manager 32 am32.exe Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
? ActionAgent actionagent.exe "A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required?
N Activation Activation.exe Part of Microsoft Money
U Activboard MMKeybd.exe Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
U Active shield Activeshield.exe Active Shield is "an heuristic screen that actively protects your computer from trojans, spyware, adware, trackware, dialers, keyloggers, and even some special kinds of viruses"
X ActiveDesktop systray32.exe Added by the DABOOM WORM!
X ACTIVEDS ACTIVEDS.EXE Added by the OPASERV.T WORM!
N ActiveEyes ActiveEyes.exe ActiveEyes from TFI Technology
U ActiveMenu ActiveMenu.exe WildTangent games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
U ActivePlus activeplus.exe Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
Y ActiveShield MCVSSHLD.EXE McAfee VirusScan On-line. See also the McAgentExe entry
N ActivSurf backweb*****.exe Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U ActMaker ActMak25.exe "ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding, nor are you required to know a lot about the computer"
U ACU ACU.exe Atheros wireless Client Utility For HP Compaq
U Ad Blocker blocker.exe Ad Blocker - blocks popups, and also removes banners, image ads and flash ads
U Ad Blocker Pro Ad Blocker Pro.exe Ad Away popup and banner remover
U Ad Muncher AdMunch.exe Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
? Ad Online Guide adonlineguide.exe ??
N Ad-aware Ad-aware.exe Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
U Ad-Muncher ADMUNCH.EXE Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
U Ad-watch Ad-watch.exe Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
U AD2KClient AD2KClient.exe Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N Adaptec DirectCD Directcd.exe DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later

 


Start Up Applications A Page 2
N AdaptecDirectCD Directcd.exe DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N Adaware Bootup ad-aware.exe Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
X Adaware lptt01 adaware.exe Variant of the RapidBlaster parasite (in a "Adaware" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware
X Adaware ml097e adaware.exe Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X AddClass AddClass.exe CoolWebSearch parasite variant
X AddClass [Installation_Path] Added by the Startpage.F hijacker
U AdDelete AdDelete.exe Banner advertisment blocker
X AdDestroyer AdDestroyer.exe Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code
? ADG ADG.exe SoundBlaster Audigy related?
N ADGJdet ADGJDet.exe Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
Y Adiras Adiras.exe ADSL USB modem related
X ADM Library Loader admlib32.exe Added by a variant of the SDBOT TROJAN!
X Admanager Controller AdManCtl.exe Adware, probably a Windupdates variant
X Admilli Service AdmilliServ.exe Windupdates adware variant
X Adobe Adobe.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Adobe sysconfig.exe Added by an unidentified WORM or TROJAN!
X adobe gam.exe Added by an unidentified WORM or TROJAN!
X Adobe sysbat32.exe Added by the LOWZONES.T TROJAN!
X Adobe Filter Platform afilterplatform.exe Added by the RBOT-OP WORM!
U Adobe Gamma Loader Adobe Gamma Loader.exe Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
N Adobe Reader Speed Launch reader_sl.exe Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly
X AdobeA adobes.exe Added by the FLOOD.BA TROJAN!
X AdobeFonts fonts.hta Browser hijacker - redirecting to Hugesearch.net
N AdobeVersionCue VersionCueTray.exe "An exclusive feature of the Adobe® Creative Suite, Version Cue™ helps you find files fast, track multiple versions of your files, and share your files for creative collaboration"
X Adope File Manager lsasv.exe Added by an unidentified WORM or TROJAN!
X adp adp.exe Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
N ADQuickAccess Adtray.exe After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
X AdRoarUpdate ARUpdate.exe AdRoar adware updater
X AdRotator.Application [path to csrss.exe] Added by the SMALL-AQ TROJAN!
U ADService ADService.exe Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
U AdsGone Adsgone.exe AdsGone - pop-up stopper
N ADSL Diagnostic Tools mapiicon.exe System tray access to ADSL modem diagnostic tools. Available via Start -> Programs
Y AdslTaskBar rundll32.exe stmctrl.dll, TaskBar ISP software, initializes DSL modem
? ADSL_A2 A2Installed Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required?
Y ADSS ADSS.exe ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
X adstartup automove.exe Adlogix adware variant
X adstartup Adstartup.exe Adlogix adware variant
X AdStatus Service AdStatServ.exe Unidentified adware
U AdSubtract adsub.exe AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
X Adtools Service AdTools.exe Windupdates adware variant
X AdultX AdultX.exe Adult content dialler and hijacker
X Adult_Chat Adult_Chat.exe Adult content dialler
X Adult_Chat1 Adult_Chat1.exe Adult content dialler
U ADUserMon ADUserMon.exe Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
X Advanced Internet Protocol cerf.exe Added by a variant of the SPYBOT WORM!
N Advanced Tools Check ADVCHK.EXE Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
X Advapi Advapi.exe Added by the NETDEVIL.12 WORM!
N ADVCHK ADVCHK.EXE Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
U Advertising Killer Akiller.exe AKiller - pop-up stopper
X advmon32 advmon32.exe Added by a variant of the CRYPTER.C TROJAN!
U Adware Agent adware agent.exe Adware Agent popup blocker
N Adware Spy AdwareSpy.exe Bogus adware remover, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites
? Aeiwlsta.exe Aeiwlsta.exe IBM High Rate Wireless LAN Adapter driver. Is it required?
N AELaunch AELaunch.exe Audio Applications Launcher for the Philips Acoustic Edge soundcard
? AeXSWDUsr AeXSWDUsr.exe Altiris Express NS Client Manager software. Is it required?
U AEZBProc aptezbp.exe IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
U AFAFilter windefault.exe AFAFilter - internet filter software
N Agent Agent.exe Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
? Agente Remupd.exe Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar?
U AgfaCLnk AgfaCLnk.exe For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
X agp agp32.exe Added by the GAOBOT.SY WORM!
Y AGRSMMSG AGRSMMSG.exe IBM AMR modem driver
N AGSatellite AGSatellite.exe Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U ahfp ahfp.exe Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U ahfprog ahfp.exe Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U AHNSD AhnSD.exe AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
? AHNUE AHNUE.exe ??
N AHQInit ahqinit.exe Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
X Ahst iebs.exe PurityScan/Clickspring adware
X AHU [path to worm] Added by the ANACON-B WORM!
X Aica tuaa.exe PurityScan/Clickspring adware
X Aida ttuh.exe PurityScan/Clickspring adware
U aiepk aiepk2.exe Another IE Popup Killer - pop-up stopper
N AIM aim.exe AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
X AIM reminder AIM reminder.exe Added by the BUDDY TROJAN!
X aimaol lptt01 aimaol.exe Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X aimaol ml097e aimaol.exe Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N AimingClick AimingClick.exe AimingClick from AimingTech. Web searching tool. Available via Start -> Programs
N AIMster ?? Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N AIMWDInstall AIMWDInstall.exe Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
Y Aiptek Graphics Tablet (USB) atwtusb.exe USB interface for Aiptek Graphics Tablet (USB)
X AKEYNAME WinServ.exe Added by the EVILBOT.C TROJAN!
U AKiller akiller.exe BuyPin Advertising Killer - popup killer
X ala.exe ala.exe Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer
U Alarm Manager Alarm.app.exe Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
? AlarmWatcher AlarmWatcher.exe Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?
N Album Fast Start ABMTSR.EXE Scanner software, not required for scanner to work
X Alchem Alchem.exe Transponder parasite updater/installer
X alcmtr ALCMTR.EXE Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers
U Alcohol Alcohol.exe Alcohol 120% - CD/DVD emulation/writing/copying software
U Alcohol Autorun Alcohol.exe Alcohol 120% - CD/DVD emulation/writing/copying software
? Alcom PCL Capture FMW_PCAP.EXE ??
N AlcWzrd ALCWZRD.EXE RealTek High Definition audio driver related - detects new devices when plugged in, then pops up a dialog box. If everything works as expected you should be able to disable this one
X AlcxMonitor Alcxmntr.exe Realtek AC97 Audio - Event Monitor. Sypware file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but is being used by Realtek to gather data about customers
X Alevir Alevir.exe Added by the OPASERV.A or OPASERV.F or OPASERV.G WORMS!
X AlevirOld [worm filename] Added by the OPASERV.G WORM!
N Alexa Alexa.exe? Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs
? ALFY Accellerator AlfyAC~1.exe ??
X ALG32 ALG32.EXE Added by the Startpage.K hijacker
N Alias SketchBook Snapshot ALIASS~2.EXE Screen-capture utility for Alias Sketchbook
N AlienAutopsy Test_BS.exe Alienware computer technical support software
Y ALiSndMgr ALiSndMg.exe ALi AC97 Sound driver
? AliUSBfix GREENMK.exe May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?
X alkasr ÎäÒíÑ.exe Added by the BALKART TROJAN!
U All Aboard Status stswin.exe All Aboard! Internet Connection Sharing status icon
X All Sea screen saver TaskTray.exe "Free screensaver", installs lots of foistware. See here. Get rid of it
X All Sea web link FWLink.exe "Free screensaver", installs lots of foistware. See here. Get rid of it
U allSnap allSnap.exe "allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"
U Alogserv Alogserv.exe From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
Y Alps Electric USB Server Monserv.exe Alps Electric USB Server - required according to this article
U AlpsPoint Apoint.exe Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
? ALServ ALServ.exe Altec Lansing AMS speaker related. What does it do and is it required?
N Altnet points manager.exe Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
N AltnetPointsManager points manager.exe Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required

Start Up Applications A Page 3
U AltoMB_service AltoMBsrv.exe Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management
U ALUAlert ALUNotify.exe Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
U AlwaysOnTopMaker AlwaysOnTopMaker.exe Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop
X AmazingTens AmazingTens.exe Premium rate adult content dialler
N America Online *.* Tray Icon aoltray.exe Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N AME_CSA rundll32 amecsa.cpl, RUN_DLL Loads ADSL modem Control Panel applet
Y Amon AMON.EXE Monitoring part of Eset's NOD32 virus-scanner
Y Amonitor amon.exe Tiny Personal Firewall
X anbv32 nabv32.exe Added by the TITOG.C WORM!
? ANIWZCSService WZCSLDR.exe D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
? AnnotateCheck AnnCheck.exe Genius Wizard Pen Tablet driver related. Is it required?
N Announcements Annclist.exe MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N Anntext Anntext.exe Caere Pagekeeper text annotation server
U ANONYMIZER_SPYWAREKILLER SpyWareKiller.exe Anonymizer Spyware Killer
U Another Internet Explorer Popup Killer aiepk.exe Another IE Popup Killer - pop-up stopper
U Anti-keylogger check antikey.exe Anti-keylogger - protects against keylogger programs monitoring your keystrokes
U Anti-Trojan-Watch ATWatch.exe Anti-Trojan Watch - trojan detector
U AntiPopUp AntiPopUp.exe AntiPopUp for IE - pop-up stopper
Y AntiVir XP AVwin.exe AntiVir antivirus
X Antivirus av.exe Added by the SINKIN TROJAN! Resets IE start page to realphx.com
X Antivirus maja.exe Added by the NETSKY.H WORM!
X Antivirus iexpl0res.exe Added by an unidentified WORM or TROJAN!
X antivirus32 antivirus.exe Added by the SPYBOT.KAI WORM!
? AntiVirusProtection qumk.exe ??
X antiware elite***32.exe [*** = random char] Added by the DLOADER-HW TROJAN!
U AntiWindowsMessenger AntiMsMsg.exe Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory
Y AnVir AnVir.exe AnVir Task Manager - protects computer against viruses and manages running processes and startup files
Y AnVir Task Manager AnVir.exe AnVir Task Manager - protects computer against viruses and manages running processes and startup files
U anvshell anvshell.exe System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
? anycom bluetooth ftflauncher.exe Associated with an Anycom bluetooth wireless card. What does it do and is it required?
N AnyDVD AnyDVD.exe "AnyDVD is a driver, which descrambles DVD-Movies automatically in the background. This DVD appears unprotected and region code free for all applications and the Windows operating system as well"
N AO Tray AOTray.Exe System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
X AOL 9.0 Optimized AOLClient.exe Added by the SPYBOTER.A TROJAN!
U AOL Broadband Check-Up matcli.exe "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide
N AOL Companion companion.exe Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process, and is installed for ease of use
? AOL Instant Messenger AlM.EXE That is an L between the A and M, the start up location is wrong for AIM. What does this relate to?
X AOL Messenger [random filename] Added by an unidentified VIRUS, WORM or TROJAN!
X AOL Messenger aolmsngr.exe Added by the SDBOT-JF WORM!
U AOL Spyware Protection AOLSP Scheduler.exe AOL's spyware protection program
Y AolAcsDaemon1 Acsd.exe AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
Y AolAcsDaemon1 AOLACSD.EXE AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
X AolCon config.com Added by the TAPLAK WORM!
N AOLDialer AOLDial.exe AOL ISP software dialer - can be activated through a desktop shortcut
N AolFix AolFix.exe Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL  to run correctly. Not seen much any more and should only run once
X Aornum aornum.exe Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
N AOTray AOTray.Exe System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Y APC UPS Status Display.exe APC PowerChute Personal Edition status icon
U APC_SERVICE mainserv.exe PowerChute® Personal Edition - "safe system shutdown software with sophisticated power management functions"
Y apc_tray apc_tray.exe Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
X API32 api32.exe Added by the IRCBOT-B TROJAN!
X APIMon apimonx.exe Added by the TIBSER.A downloader TROJAN!
X APIMon winapix.exe Added by a variant of the TIBSER.A downloader TROJAN!
? Apmsrv9x APMSRV9X.EXE Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
U Apoint Apoint.exe Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
X App.EXEName [path to worm].exe Added by the BODIRU WORM!
U Appcon vAppCon.exe Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established
X appconn appconn.exe Added by the CARGAO WORM!
U AppExtender AppExtCB.exe Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
X appis.exe appis.exe Added by the AGENT-BC TROJAN!
Y Application mdmsetsp.exe Aztech Labs modem driver
U Application Explorer Naldesk.exe Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."
U AppPlus AppPlus.exe AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"
Y Apvxd APVXDWIN.EXE Part of Panda Anti-Virus. Required to enable permanent virus protection
Y Apvxdwin APVXDWIN.EXE Part of Panda Anti-Virus. Required to enable permanent virus protection
Y Apwheel Apwheel.exe Wheel support for an Alps mouse 
X aqadcup.exe aqadcup.exe Added by the AGENT.BG WORM!
X ara-key [random filename] Added by the ANTINNY WORM!
X Archive archive.exe Adware, recognized by Kaspersky antivirus as Trojan-Downloader.Centim.a
N ARCSolo Recovery N/A Backup software by Computer Associates - no longer supported
N ares ares.exe Ares is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download"
N areslite AresLite.exe Ares Lite Edition is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download"
X Aritima aritima.exe Added by the ARITIM WORM!
U Artera arteraui.exe Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance
X ASDPLUGIN dsldbaccess.exe ClickYes2Enter premium rate adult content dialler
X asdx xwinrpc32.exe Added by the AGOBOT.VO WORM!
N ASE Scheduler ASE Scheduler.exe Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here
U Ashampoo PopUpBlocker PopUpKiller.exe Ashampoo popup blocker, part of Privacy Protector Plus - see here
X ASHLT Ashlt.exe Adware - leads back to an ad server
Y ashMaiSv ashmaisv.exe Part of Avast! anti-virus software - E-mail scanner
U AsioReg regsvr32.exe ctasio.dll ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
N asp4tray asp4tray.exe System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y AspireTimeMachine acertmb.exe System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
X assistse ASSISTSE.EXE CnsMin (Chinese_Keywords) related
X AST AST Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
X AST AST Added by the VB.AH TROJAN!
U ASTART astart.exe ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X AStart AStart Added by the VB.AH TROJAN!
N asTray Astray.exe Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
N Astro Astro.exe Checks for updates to Quicken on a system reboot
N ASUS Probe AsusProb.exe ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U ASUS SmartDoctor VGAProbe.exe ASUS video card fan/thermal monitor
U ASUS TweakEnable astart.exe Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N ASUSKey V38SHELL.EXE System tray Icon for quickly changing video modes
N ASWDP ASWDP.exe MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
X ASWnk aswnk.exe Adult content dialler
U AT-Watch ATWatch.exe Anti-Trojan Watch - trojan detector
U Athan Athan.exe Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world
N ATI CATALYST System Tray CLI.exe SystemTray System Tray access to ATI's CATALYST™ CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop
N ATI DeviceDetect ATIDtct.EXE Utility meant for future use of the ATI TV WONDER™ USB 2.0 video driver and can be disabled
N ATI GART Set-up Utility Atigart.exe Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
U ATI Launchpad launchpd.exe Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
Y ATI Remote Control ATIRW.exe Driver for the ATI REMOTE WONDER™ RF remote control for ATI's All-In-Wonder graphic cards and other products. Required if you use it
N ATI Scheduler Atisched.exe Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N ATI Task Application Atitkad.exe System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
N ATI Task Application (Atikey) Atitask.exe System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
X ATI VIDEO REGKEY ati2vid.exe Added by the SDBOT.UR WORM!
? Ati2cwxx Ati2cwxx.exe For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it 
N Ati2mdxx Ati2mdxx.exe For ATI video cards. System Tray access to display mode changing
N ATICCC cli.exe runtime ATI's CATALYST™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. Recommend that start the program manually via Start -> Programs -> ATI Catalyst Control Center -> Advanced -> Restart Runtime as it can casue problems when starting Windows
U AtiCwd AtiCwd.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd AtiCwd32.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd Ati2cwad.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd32 AtiCwd.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd32 AtiCwd32.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd32 Ati2cwad.exe This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
N AtiKey AtiKey32.exe System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
? AtiKey atiptkad.exe System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

Start Up Applications A Page 4
U ATIModeChange Ati2mdxx.exe System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
U ATIPOLAB ati2evxx.exe ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces  on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U ATIPOLL ati2evxx.exe ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces  on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U AtiPTA Ati2ptxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U AtiPTA Atiptaxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U AtiPTAAA Ati2ptxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U AtiPTAAA Atiptaxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U atiptaxx Ati2ptxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U atiptaxx Atiptaxx.exe Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U AtiQiPcl AtiQiPcl.exe Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
U ATISmart ati2s9ag.exe ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
X atisrc2 windfind.exe Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
U atitray atitray.exe ATI Tray Tools - allows quick access to ATI graphics card settings
U AtiTrayTools atitray.exe ATI Tray Tools - allows quick access to ATI graphics card settings
X atiupdate ATIUPDATE5.EXE Added by the DEBESKI.A TROJAN!
X atiupdate msshed32.exe Added by the DELF.EP downloader TROJAN!
X ativopen ativopen.exe Premium rate adult content dialler
U ATIX10 atix10.exe ATI Remote Wonder - PC wireless remote control
X ATM Control adpn.exe Added by the MMS.A WORM!
N ATnotes atnotes.exe Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
U Atomic.exe Atomic.exe Atomic Clock Sync - synchronizes your computer's time with the NIST time server
N Atomica atomica.exe Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
U AtomicTime ATOMICTIME.EXE AtomicTime - utility that synchronizes your PC clock to an atomic clock
U Atrack atrack.exe New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
U Atray Atray.exe Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons
U ATTBroadbandUpdate SAUpdate.exe Big Brother from Quest Software. System and network monitor
U ATTRedUpdate AutoUpdate.exe Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X AttuneClientEngine attune_ce.exe Spyware - part of an automated helpdesk software called Aveo Attune
X AttuneContentUpdater attune_cu.exe Spyware - part of an automated helpdesk software called Aveo Attune
X AttuneDiscovery attune_di.exe Spyware - part of an automated helpdesk software called Aveo Attune
X Attunel Attunel.exe Spyware - part of an automated helpdesk software called Aveo Attune
X AttuneSystray attune_st.exe Spyware - part of an automated helpdesk software called Aveo Attune
N aTuner atuner.exe aTuner - tweak tool for GeForce based graphics cards
Y atwtusb atwtusb.exe USB interface for Aiptek Graphics Tablet (USB)
U AU Agent AUagent.exe Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
X au.exe au.exe Added by the BEAGLE.B WORM!
Y AUCBPNP aucbnpn.exe Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
X Aucompat Aucompat.exe Added by the GEMA TROJAN!
? AudCtrl RunDll32 AudCtrl.dll, RCMonitor Audio control panel?
X Audiocntl audiocntl.exe Added by a variant of the CRYPTER.C TROJAN!
N AudioHQ Ahqtb.exe For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
X audioinf audioinf.exe Added by a variant of the CRYPTER.C TROJAN!
Y Aureal A3D Interactive Audio sa3dsrv.exe For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y Aureal A3D Interactive Audio Init A3dInit.exe For Aureal based 3D soundcards. A3D sound features won't work with this disabled
X ausvc ausvc.exe Added by the AUTOUPDER TROJAN!
X authz authz.exe Added by an unidentified VIRUS, WORM or TROJAN!
X auto repair system qualityx.exe Added by an unidentified WORM or TROJAN - probably a SPYBOT variant
N Auto T Bar autotbar.exe If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
X Auto updat crsrs.exe Added by the FORBOT-AK WORM!
X Auto Updat WindowsSys32.exe Added by a variant of the FORBOT WORM!
X Auto Update AUP.exe Added by an unididentified WORM or TROJAN!
U Autobar autobar.exe Connect buttons on the keyboard for internet direct access, etc. on HP computers
N AutoEA Ahqrun.exe For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
X Autoloaderaproposclient Apropos_Client_Loader.exe AproposMedia adware
N AutoMate Task Service  automate.exe Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
X Automatic Microsoft Windows Updater suchost.exe Added by the RBOT-EQ WORM!
X Automatic Windows Updater Update.exe Added by the GAOBOT.AO WORM!
N Automatically launches the United Devices Agent when you start your computer UD.EXE The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
N AUTOPROP REGPROP.EXE WMPADDIN.DLL Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
? AutoShutdown pssvc.exe Utility to fix vCard Export in MS Outlook 2000 - although why are these together?
U AutoSizer AUTOSIZER.EXE AutoSizer - utility that automatically maximizes windows when they're opened
N AutoSpell 5 ASWATC32.EXE AutoSpell - spell checker
N autotbar autotbar.exe If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
N AutoTKit AUTOTKIT.EXE On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N autoupd autoupd.exe Raxco Software Auto Update utility."Used to keep your software up-to-date"
X autoupd autoupd.exe Added by an unidentified VIRUS, WORM or TROJAN! - found in a folder of the same name
X AutoUpdater aupdate.exe Aupdate, Tinybar variant. Spyware
X AutoUpdater AutoUpdate.exe PeopleonPage foistware
X aux.exe aux.exe Added by the ZINS TROJAN!
X auxAudioDevice aux32.exe Added by the AIZU WORM!
N AUXXTRAY au30setp.exe System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
X AV UPDATE-28062004.exe[25 blank spaces].vbs Added by the MIDFIN WORM!
X AV Client patch31345.exe Added by the MYDOOM.AD WORM!
X AV Industry patch31345.exe Added by the MYDOOM.AD WORM!
Y Avast! ashserv.exe Avast! anti-virus software
Y avast! ashDisp.exe Part of Avast! anti-virus software
Y Avast32 Astart32.exe Part of Avast! anti-virus software
X avc avmon.exe Added by an unidentified TROJAN!
U AvconsoleEXE Avconsol.exe From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X AveoAttune atmdlusr.exe Spyware - part of an automated helpdesk software
X AVG Grisoft Updater updater.exe Added by the AGOBOT-OT WORM!
Y AVG7_AMSVR Avgamsvr.exe AVG antivirus related
Y AVG7_CC AVGCC.exe AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Y AVG7_EMC AVGEMC.exe AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y AVG7_Run avgw.exe AVG Anti-Virus 7.0 related
Y avgamsvr.exe Avgamsvr.exe AVG antivirus related
Y avgcc32 avgcc32.exe AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y AVGCtrl AVGCTRL.EXE Background task of the AntiVir antivirus program which scans files transparently in the background
Y avgmsvr.exe avgmsvr.exe AVG Anti-Virus 7.0 related
Y Avgserv9.exe Avgserv9.exe AVG antivirus background monitoring
Y AVG_CC avgcc32.exe AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y AVG_EMC AVGEMC.exe AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y AVG_RegCleaner AVGREGCL.exe AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
X Avimgt Avimgt.exe Added by the GEMA TROJAN!
X Avimgt32 Avimgt32.exe Added by the GEMA TROJAN!
Y AvMaiSrv Avmaisrv.exe Part of Avast! anti-virus software - E-mail scanner
X avnort formatsys.exe Added by the SERFLOG.A WORM!
X avnort msmbw.exe Added by the SERFLOG.A WORM!
X avnort serbw.exe Added by the SERFLOG.A WORM!
Y avpcc avpcc.exe Kaspersky Labs anti-virus
Y avpm avpm.exe Kaspersky antivirus
X Avpr avpr.exe Added by the MYDOOM.AF WORM!
X Avril Lavigne - Muse [random filename] Added by the AVRIL-A WORM!
Y AVSCHED32 AVSched32.exe AntiVir anti-virus from H+BDEV
X AvSer dsm.exe Added by the SERFLOG.B WORM!
X AvSer msmpatch.exe Added by the SERFLOG.B WORM!
X AvSer svosm.exe Added by the SERFLOG.B WORM!
X AvSer sysup.exe Added by the SERFLOG.B WORM!
X avserve.exe avserve.exe Added by the SASSER WORM!
X avserve2.exe avserve2.exe Added by the SASSER.B or SASSER.C WORMS!
X avserve3.exe avserve3.exe Added by the SASSER.G WORM!
N Avtray Avtray.exe Command Antivirus tray icon
? AVWLPSTA AVWLPSTA.exe PRISM Status Tray Applet - but what is it for and is it required?
U AVWUpd32 AVWUPD32.EXE AntiVir updater. Useful, but can be run manually
Y avx communicator xcommsur.exe Anti-virus part of BitDefender virus scanner/firewall
Y Avxlive avxlive.exe Bullguard or BitDefender antivirus
Y avxlni avxinit.exe Anti-virus part of BitDefender virus scanner/firewall
? Avxnews ?? ??
X Awatch Awatch.exe Fritz!_DSL ISP software related. What does it do and is it required?
N awhost32 awhost32.exe Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
U AWMON Ad-Watch.exe Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
? AxFilter Rundll32 AXFILTER.DLL, Rundll32 ??
? a_vpd vpd.exe Located in the IBMTOOLSVPD sub-directory. What does it do and is it required?"
U a2guard.exe a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a² 'Background Guard' real time protection feature