Windows XP A to Z - http://www.softwaretipsandtricks.com/windowsxp
Start Up Applications I
http://www.softwaretipsandtricks.com/windowsxp/articles/603/1/Start-Up-Applications-I
Super Admin
 
By Super Admin
Published on 03/28/2005
 
Starting with letter I

Start Up Applications I Page 1

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

X I-Worm.GiGu uGiG.eXe Added by the GINK WORM!
X I386 I386.exe Added by the MYPOWER WORM!
? I81SHELL I81SHELL.exe Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard
U i8kfangui i8kfangui.exe Graphical interface for fan speed control
U IAAnotif iaanotif.exe IAA Event Monitor User Notification Tool - part of Intel® Application Accelerator - "a performance software package for desktop PCs using select Intel® chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed
Y iamapp iamapp.exe AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
X Iamnacho On Irc.MusIrc.com Is a Homosexual! XBox64.exe Added by the RANDEX.Y WORM!
? Iap iap.exe Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?
X IASHLPR IASHLPR.EXE Added by the OPASERV.T WORM!
? IBM Warranty Notification ERTS0749.exe IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire?
N ibmmessages ibmmessages.exe Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"
? Ibmmon.exe Ibmmon.exe ??
U Ibmpmsvc ibmpmsvc.exe Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes
U IBMUltraBayHotSwapCPLLoader IBMBAY2N.EXE Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
? IBMUltraBayHotSwapSound IBMBAYSN.EXE Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?
X icdd7ee6 rundll32.exe [path] icdd7ee6.dll, EnableRunDLL32 LZIO.com adware downloader
N ICH Synth eusexe.exe Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices
U iClean iClean.exe IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"
N iCn NAG.EXE iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist
N ICO ICO.EXE Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
N Icon Animation HDE.EXE Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
N Icon Hearit 95 hearit95.exe Audio desktop customization utility from Moon Valley Software. Resource hog
N Icon Hearit 98 hearit98.exe Audio desktop customization utility from Moon Valley Software. Resource hog
X Icon lptt01 icon.exe Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X Icon ml097e icon.exe Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y ICONCLNT iconclnt.exe APC PowerChute Tray Icon. Associated with the UPS listing
U ICONDESK ICONDESK.EXE Small utility which will allow you the option of hiding or showing your desktop icons
N Iconfig.exe Iconfig.exe Icon for LS-120 "Superdisk"
X iConfigLoader DIIhost.exe Added by the GAOBOT.AO WORM!
N Iconoid Iconoid.exe Iconoid is a desktop icon manager
N Iconsaver Iconsaver.exe IconSaver is a desktop icon manager
X ICQ Center [path to worm] Added by the RANDIN WORM!
X ICQ Hacking Pro ICQpro.exe Added by a variant of the NETSPY TROJAN!
N ICQ Lite ICQLite.exe ICQ Lite - compact version of the popular messaging program
X ICQ Lite Messenger [random filename] Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory
X ICQ Net winlogon.exe Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should NOT appear in Msconfig/Startup!
N ICQ Plus vplus.exe ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs
U ICSDCLT rundll32.exe Icsdclt.dll, ICSClient Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines
N ICServer Icserver.exe Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
Y ICSMGR ICSMGR.EXE Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you’re sharing the internet on various computers
N IC_KEY_3 spvic.exe Instant Chess related
N ID Commander IDCom.exe Caller ID utility for identifying incoming telephone numbers
X ID8525 ID8525.exe Added by the ID8525.A TROJAN!
X ID8525 id85255.exe Added by the ID8525.A TROJAN!
? IDA IDA.EXE HP related - in a Program FilesHewlett-PackardPC COE folder
X IDE ide.exe Added by the ASSASIN.F TROJAN!
X IDE Loader IDElibr32.exe Added by the XILON TROJAN! Related to the game "Diablo II"
X idecntl idecntl.exe Added by a variant of the CRYPTER.C TROJAN!
U iDesktop idesktop.exe Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse
N IDMan IDMan.exe Internet Download Manager - download files faster, schedule and resume
N IDW Logging Tool idwlog.exe Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
U IE Doctor IEDoctor.exe IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"
X IE Menu Extension toolbar rundll32.exe [path] tbextn.dll DllShowTB Topconverting.com/180Search "IEMenuExtension" toolbar
N iecheck iecheck.exe Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2
U IECleanAux Ieboot6.exe IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup
X iedll iedll.exe Homepage hijacker, redirecting to coolwwwsearch.com
X IEDriver IEDriver.exe Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze
X IEDriver xplore.exe IEDriver adware variant
X IEDriver TD.exe IEDriver adware variant
X IEengine IEeng.exe STARTPAG.AI hijacker
X IEFeatures IEFeatures.exe Added by the POPMON.A TROJAN! - also known as PopMonster adware
X IEFeatures Internetfeatures.exe Added by the POPMON.A TROJAN! - also known as PopMonster adware
X Iehelper syslaunch.exe Outwar adware downloader
X iel2cde8 rundll32.exe [path] iel2cde8.dll, EnableRunDLL32 LZIO.com adware downloader
X IELoader32 iexplore32.exe Added by the SPEX or SPEX.B WORMS!
X Iesar Iesar.exe Browser hijacker - redirecting to an adult web page
X Iesearch.exe Iesearch.exe LookNSearch adware
X iestart iexp1orer.exe Added by the NEMOG.C TROJAN!
N ietsr ietsr.exe IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc
X ieupdate MCP****.exe [**** = random char] Added by the ASOXY TROJAN!
X ieupdate mcpdll32.exe Adware downloader trojan
X Iexplore iexplore.exe Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X IEXPLORE iexplore.exe Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X Iexplore Services iexplore.exe Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X iexplorer lptt01 iexplorer.exe Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X iexplorer ml097e iexplorer.exe Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U IFSplash.exe IFSplash.exe I-FORCE driver for force feedback steering wheel
N igfxtray igfxtray.exe Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
X igsex2x igsex2x.exe NewDial premium rate adult content dialler
X iilc IILC.EXE Homepage hijacker
X Iinl iptl.exe PurityScan/Clickspring adware
N iIWiper Systemwiper.exe System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
Y IJ75P2PSERVER IJ75P2PS.EXE Printer utility which is required in order to make the printer work correctly
Y IKE Service 95 IKEService.exe Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything
U iKeyWorks IKEYMAIN.EXE A4Tech wireless keyboard driver and utility
X iLLeGaL Mplayer.exe Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
X iLLeGaL.exe Mplayer.exe Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
? ILO_Office_Manager IntEdReg.exe /OFFMAN Intense Educational Ltd - Language Office Software. Is it required?
U iLyric iLyric.exe iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button
N iM Start Center iM_Tray.exe Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
X Image rundll32 image.dll, Install CoolWebSearch parasite variant


Start Up Applications I Page 2
Y Image & Restore IMAGE32.exe Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
U ImageDrive-{hex numbers} ImageDrive.exe Nero ImageDrive from Ahead - virtual CD/DVD drive software
U Imagefox imagefox.exe ImageFox 2.0 is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes
X Imagemgt32 Imagemgt32.exe Added by the GEMA TROJAN!
X IMClass Svhosl.exe Added by an unidentified WORM or TROJAN!
N imekrig imekrig.exe Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
N IMEKRMIG6.1 IMEKRMIG.EXE Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
N Imesh ?? Imesh is a file sharing system
N Imesh Auto Update ?? Update check for the Imesh file sharing system. Turn the update off under "options"
U ImgIcon ImgIcon.exe Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
N ImgStart ImgStart.exe Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N Imjpmig*.* IMJPMIG.EXE Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese). *.* represents the version number
? immcheck.exe immcheck.exe Related to I-FORCE driver for force feedback steering wheel?
U IMOL IMOLApp.exe IncrediMail for Office Outlook Add-On
N Imonitor Plguni.exe McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
U IMStart IMStart.exe InterMute security software related
X IMwire imwireup.exe SafeSurfing parasite variant
N InCD incd.exe Ahead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk
N IncMail IncMail.exe "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
N InControl Desktop Manager DMHKEY.EXE For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
N Incredimail incredimail.exe "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
U Index Washer WashIdx.exe Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
X Indexindicator Indexindicator.exe Added by the LAZAR TROJAN!
N IndexSearch IndexSearch.exe Associated with PaperPort scanner software from ScanSoft
X Inet DataBase Inetdbs.exe Added by the QEDS WORM!
X Inet Delivery Intdel.exe Spyware
X Inet Delivery intdel_2.exe Spyware
X Inetapi Netapi.exe Added by the NETDEVIL.14 TROJAN!
U inetcntrl inetcntrl.exe Bsafe Online - internet filter
? InetConf inetconf.exe ??
U Inetd INETD32.EXE Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation
U inetinfo.exe inetinfo.exe Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)
X inetmgr inetmgr.exe Actual Names (AdvSearch) Internet Keywords parasite
X InetMSN msnet.exe Added by a variant of the SDBOT TROJAN!
U Info Select is.exe Info Select from Micro Logic - personal information manager
X Info32x Info32x.exe Added by the GEMA TROJAN!
? Infoplay.exe Infoplay.exe Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?
U Infra-red Monitor IRMON.EXE System Tray access to infra-red devices. Not required unless you use infra-red devices
X infus infus.exe Adult content dialler
U Infuzer Infuzer.exe Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"
X infwin infwin.exe Msview parasite variant
X Initial Page install.exe EasySearch browser hijack installer
Y Initialize8x8 8x8_init.exe Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
N Ink Monitor InkMonitor.exe Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
N InkWatch InkWatch.exe Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
Y InoRPC InoRpc.exe Associated with eTrust Antivirus/InoculateIT
Y InoRT InoRT9x.exe Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here
U InoTask InoTask.exe Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here
? insCOA5 insCOA5.exe ??
? Install Pending Files sifxinst.exe Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?
N InstallAurealDemos InstallAurealDemos.js Used to initialize the Aureal A3D demos InstallShield wizard
U InstallBuddy Ibtna.exe InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync
X Installed shell32.dll Office.exe... Added by a variant of the LOVGATE WORM!
? InstallNAIProduct SETUP.EXE Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?
X Instant Access rundll32.exe EGDHTML_1023.dll, InstantAccess Adult content dialler related
N Instant Update Center reminder.exe From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG.  PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner
U Instant Wireless Configuration Utility WUSB11cfg.exe Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
N InstantAccess INSTAN~1.EXE From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
U InstantDrive InstantDrive.exe Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer’s hard drive. Part of InstantCD/DVD burning software
X InstantPleasure instantpleasure.exe Adult content dialler
X InstantPleasureXXX instantpleasurexxx.exe Adult content dialler
N InstantTray PCLETray.exe Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually
X instit instit.bat Added by the OPASERV.H WORM!
X instit INSTIT.BAT Added by the OPASERV.K WORM!
? InstUtlR.exe InstUtlR.exe ??
X intdctrr idctup20.exe SafeSurfing parasite variant
U Intel Active Monitor imontray.exe System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
U Intel File Transfer xfr.exe Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U Intel PDS pds.exe Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
U Intel Product Number Utility IntelProcNumUtility.exe Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
N Intel PROSet Tray Icon promon.exe System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X Intel system works iis.exe Added by the RBOT.QGA WORM!
X InteliSys smss.exe Advertisingvision adware - file is located in C:Windows or C:Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup!
U IntelliPoint point32.exe Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
U Intellitype type32.exe For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them
U IntelMEM IntelMEM.exe Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line
U IntelProcNumUtility cpunumber.exe Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
N Intel® Common User Interface igfxtray.exe Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
? Intense Registry Service IntEdReg.exe /CHECK Intense Educational Ltd - Language Office Software. Is it required?
X InterceptedSystem [path to worm] Added by the ANACON-B WORM!
Y InterCheck Monitor Icmon.exe Part of Sophos ant-virus sofware
X Interdll Interdll.exe Added by the DELF family of TROJANS!
X Internal [trojan filename] Added by the SMOTHER and TRANSLAT TROJANS!
X Internal regedit.exe /s %windir%c:[month number] Added by the FORTNIGHT.D TROJAN!
X InternalSystray Kazza.exe Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP)
X internat internat.exe Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%
X Internat systray.exe Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process
X Internat Conf bootconf.exe Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
N internat.exe internat.exe Language selection icon in system tray
X Internat.exe internat.exe Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon
X internct WinSocks5.exe Added by the GRAYBIRD.F TROJAN!
U Internet Answering Machine IAMNET~1.EXE From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
U Internet Answering Machine IAM.exe From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
X Internet Config svchosts.exe Added by the SDBOT TROJAN!
X Internet Connection Wizard stisvsq.exe EasySearch adware
U Internet Download Accelerator ida.exe Internet Download Accelerator download manager
X Internet Exploere Services urlmon32.dll.exe Added by the EVIAN.C WORM!
X Internet Explorer iexplorer.exe Added by the LORSIS WORM! Note - the legitimate IE (iexplore.exe) does not figure in Msconfig/Startup unless added manually and this loads from the "RunServices" key

Start Up Applications I Page 3
X Internet Explorer IEXPLORE.EXE Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X Internet Explorer Updater lexbac.exe Added by the DOWNLOAD TROJAN!
X Internet Explorer Updater iexplorer.exe Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)
U Internet History Eraser HERASER.exe Internet History Eraser - deletes your browsing tracks
X Internet Loader1 MSInstall61.exe Added by the KWBOT.B WORM!
X Internet Mail and News msqdevl.exe EasySearch adware
U Internet Optimizer optimize.exe Internet connection optimizer. Leave this enabled if you find it improves your connection
X Internet Optimizer optimize.exe Internet_Optimizer parasite
X Internet Send More log.exe Unidentfied adware
X Internet Service intersvc.exe Added by the SPYBOT-DE WORM!
X internet service syscfg32.exe Added by the RBOT-QS WORM!
X Internet Services systemdev.exe Added by the SDBOT-PW WORM!
X INTERNET SERVISES winz32.exe Added by the KWBOT.Z WORM!
Y Internet Sharing Server iss_srvr.exe Intel AnyPoint internet sharing software
N Internet Sweeper Sweeper.exe Internet Sweeper - removes unnecessart left over files after browsing the internet
U Internet Timer ITIMER.exe Shareware dial-up connection call cost calculator from Ratsoft
X Internet Washer Pro iw.exe Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
X Internet.exe Internet.exe Added by the MAGICCALL VIRUS!
X InternetWasherPro iw.exe Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
X INTERNET_SERVISES winz32.exe Added by the SDBOT.Q TROJAN!
X Internt Internt.exe Added by the PEEPER or CARUFAX.A TROJANS!
N InterTrust Quick Start it_cpq~1.exe InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business
X InterU WINDRV.EXE Added by the IRCINTER.A TROJAN!
N Intervideo Win Cinema Manager WinCinemaMgr.exe WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N Intervideo Win Cinema Manager WINCIN~1.EXE WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N Intervideo WinCinema Manager WinCinemaMgr.exe WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N Intervideo WinCinema Manager WINCIN~1.EXE WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N Intervideo WinScheduler WinScheduler.exe WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
N Intervideo WinScheduler SchSvr.exe WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
U InterWARN interwarn.exe InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs
X Intmgr Intmgr.exe Added by the GEMA TROJAN!
X Intrenat Intrenat.exe Added by the LEMIR.E TROJAN!
N Introducing Media Manager SPLASHA.EXE MS Media Manager tour. Not required
N Introduction-Registration ?? For Compaq PC's. Should only run first time, PC Introduction & Compaq registration
X IntruderAlert ia99.exe Intruder Alert '99 from Bonzi - spyware
X Ioadqm Media Player.exe Added by the HAWAWI WORM!
U iolo Task Agent Task_Agent.exe iOlo System Mechanic Task Agent. Scheduled maintenance
U Iomega Automatic Backup ibackup.exe Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
U Iomega Automatic Backup 1.0.1 ibackup.exe Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
N Iomega Backup Scheduler dtiom98.exe Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
U Iomega Disk Icons IMGICON.EXE Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
U Iomega Drive Icons IMGICON.EXE Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
U Iomega ImIconXP imiconxp.exe Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system, and provides drag-and-drop file access, access and write protection, and formatting of the disks
? Iomega QuickSync Quicksync.exe ??
N Iomega Startup Options IMGSTART.EXE Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N Iomega Watch IOWATCH.EXE Used by Iomega drives. Available via Start -> Programs
N IomegaWare COMMANDER.EXE Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
U Iomon98.exe Iomon98.exe PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
X IP Stack ipstack.exe Added by the AGOBOT.CW WORM!
N iPalm mon.exe Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
X ipcfg.exe ipcfg.exe Adware - recognized by McAfee antivirus as a variant of the AdClicker-BM trojan
X IPConfig svcxnv32.exe Added by the HACARMY.E TROJAN!
X IpCtrl ipcon32.exe Added by an unidentified VIRUS, WORM or TROJAN!
X IPInSightLAN 01 ipclient.exe Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resource - hence the "X" status
N IPInSightMonitor 01 ipmon32.exe Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information
Y IPinst N/A For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X ipmon.exe ipmon.exe Added by the RECERV or R3C.B TROJANS!
U iPodManager iPodManager.exe Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods
? iPodWatcher iPodWatcher.exe Associated with Apple's iPod MP3 player. Detects when the iPod is connected?
U iProtectYou ip.exe iProtectYou - internet filtering/parental control and network monitoring software
X iprun iPY.exe iProtectYou spyware
Y IPSecMon IPSecMon.exe Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
X IPTable Configuration Winipcfgs.exe Added by a variant of the RBOT WORM!
X IPv6 Helper Driver csass.exe Added by the AGOBOT.TC WORM!
X IPv6 STUN Service netstun.exe Added by a variant of the SDBOT WORM!
N IPW IPW.exe Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone"
? IQES.exe iqes.exe ??
X irc session sessionmgr.exe Added by the SDBOT-ACE WORM!
Y IREIKE IreIKE.exe Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
N iRis Active Monitor winmon32.exe Iris Antivirus - discontinued, replace with good alternative
N iRiS AntiVirus Active Monitor WIMMUN32.exe Iris Antivirus - discontinued, replace with good alternative
N iRiver Updater Updater.exe Updates for the iRiver Music Manager - used with their digital music players
U IrMon IRMON.EXE System Tray access to infra-red devices. Not required unless you use infra-red devices
? IRPMonitor itcnmon.exe ??
X Irwftp [path to trojan] Added by the BANCOS.CR TROJAN!
X irwftp iexplorer.exe Added by the BANKER-AN TROJAN!
U IrXfer IrXfer.exe Microsoft Infrared Transfer application
X ir_ftp ir_ftp.exe Added by the IRFTP TROJAN!
X ir_ftp irwftp.exe Added by the BANCOS.H TROJAN!
N IS CfgWiz cfgwiz.exe Norton Internet Security configuration wizard
X Isass Isass.exe Added by the FUTRO TROJAN!
N isdbdc isdbdc.exe For Compaq PC's. May install properties in dial-up networking when you register with an ISP
N ISDN Monitor Linksts.exe Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
U ISDNwatch IWatch.exe FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"
N ISLP2STA ISLP2STA.EXE Possibly a left over from Windows Update for wireless NIC (maybe Linksys) drivers? Not required though
U iSpyNOW ispynow.exe iSpyNOW - remote monitoring and surveillance software
X Israfel Israfel.vbs Added by the GAGGLE.D or GAGGLE.E WORMS!
U ISStart ISStart.exe LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
Y ISSVC ISSVC.exe Part of Norton Internet Security Suite
X IST Service istsvc.exe ISTBar foistware
X ist service uninstall [random filename] ISTBar parasite related
N ISUSPM Startup ISUSPM.exe InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you’re always working with the most current version
N ISUSScheduler issch.exe InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you’re always working with the most current version
U Itk Itk.exe In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U iTouch iTouch.exe iTouch loads the iTouch configuration program for Logitech keyboards. It’s needed if your keyboard has shortcut buttons and if you use them. It’s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock
N ItsDeductiblePopUp ItsDeductible.exe ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
Y iTunes Helper iTunesHelper.exe Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
Y iTunesHelper iTunesHelper.exe Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
N Iusage netdet.exe Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
N IW ControlCenter iwctrl.exe Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
U iwctrl iwctrl.exe Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
X ixplore ixplore.exe Added by the SDBOT-CY TROJAN!
? IZE N/A ??