Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Alert!  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
Stop!  Do you have popups or other malware infecting your computer? If so, Start Here!
Question?  Are you having trouble using this site? Then you should visit the New User Orientation Center!



A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other   
HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23
Rootkit List · Submit a Startup · Top Submitters
 Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:
Advanced Search

Name Filename Status Description
!1_pgaccount pgaccount.exe
Y
DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of o ... Read More
!1_ProcessGuard_Startup procguard.exe
Y
DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of o ... Read More
(8E3526E3-F160-437B-9095-46A011877CBE) pKerme12.dll
X
Added by the Troj/Ermeto-A Trojan.
000 pit.exe
U
Added by the Spyware.PrivateEye surveillance software. If you did not install this software, then uninstall it immediately. ... Read More
1290a33c-85f5-4164-a1be-7dd299d4986a PBKScheduler.exe
U
Scheduler for CyberLink PowerBackup - archiving/backup utility ... Read More
360Safe.exe pnvifj.exe
X
Added by the Troj/QQRob-ADM Trojan.
<not used> ppa.exe
N
Added by the PPAuditor password-recovery program. Though listed as a security risk by Symantec, we feel that this program has legitimate uses and thu ... Read More
<not used> pushow[RANDOM].dll
X
Added by the Adware.Advertmen adware.
<not used> perfc000.dat
X
Added by the Trojan.Perfcoo Trojan.
<not used> perfsm.dat
X
Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007. ... Read More
<not used> perfc000.dat
X
Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007. ... Read More
<not used> PGPmapih.dll
Y
Used by a PGP to encrypt/decrypt emails. Reports state that there are compatibility problems with Office 2007. ... Read More
<not used> printer.exe
X
Malware related to and installed with different rogue anti-spyware programs including WinAntiSpyware 2006 or WinAntiSpyware 2007. This Trojan is respo ... Read More
<not used> proper.exe
X
Fakealert Trojan which shows fake security alerts on your computer.
<random CLSID> PREFX.DLL
X
Added by the TROJ_DROPPER.EI Trojan dropper.
<unknown> prt21sks.sys
X
Added by a variant of the Goldun.Fam rootkit.
<unknown> pnpdrv.sys
X
Added by the Troj/RKProc-Fam rootkit. Can be installed with SmitFraud related Trojans. ... Read More
<unknown> ppdriver.sys
X
Added by the Troj/RKProc-Fam rootkit. More info here.
AcerPowerkey Powerkey.exe
U
PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3 ... Read More
Acme.PCHButton pchbutton.exe
N
Used by HP Instant Support
ADDITIONAL Services pkgadd.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
adlhidp psncc32.exe
X
Identified as the TrojanProxy.Slaper malware.
Adobe Photoshop photoshop.exe
X
Added by the W32/Tilebot-KT worm.
Advanced DHTML Enable prkc.exe
X
Added by the Backdoor.Ranky backdoor Trojan.
Advanced Power Management powermgmt.sys
X
Identified as a variant of the Rootkit.Agent.X rootkit.
advap32 psyche.exe
X
Identified as a variant of the Trojan.Kobcka.DF malware.
agent ppl.exe
X
Added by the W32/Dref-U virus with mass-mailing capability.
Altnet points manager.exe
N
Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than sim ... Read More
altnet points manager points manager.exe
N
Altnet TopSearch adware ... Read More
AltnetPointsManager points manager.exe
N
Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than sim ... Read More
Anskya PYSKY.NET.exe
X
Added by the Troj/Dloader-MW. While running as a background process, this trojan attempts to download and run a file and reduce the Windows firewal ... Read More
AntiSpywareControl pgs.exe
X
Added by the AntiSpywareControl rogue anti-spyware application.
AntiSpywareSuite pgs.exe
X
Added by the AntiSpywareSuite rogue anti-spyware program. AntiSpywareSuite is a security risk that may give exaggerated reports of threats on the comp ... Read More
Antivirus PC Pluton.exe
X
Added by an Unknown malware.
AntivirusFiable pgs.exe
X
Added by a French rogue anti-spyware program called AntivirusFiable.
AntivirusForAll pgs.exe
X
Added by the AntivirusForAll rogue anti-spyware application.
AntivirusPCSuite pgs.exe
X
Added by the AntivirusPCSuite rogue anti-spyware program.
AntiWorm2008 pgs.exe
X
Added by the AntiWorm2008 rogue anti-spyware program. AntiWorm 2008 is a Security Risk that may give exaggerated reports of threats on the computer. T ... Read More
APC Power Management powerio.sys
X
Identified as a variant of the RKit/Agent.X.5 rootkit.
Application Layer Gateway Services psure.exe
X
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Ashampoo PopUpBlocker PopUpKiller.exe
U
Ashampoo popup blocker, part of Privacy Protector Plus - see here
asmw soft popups burner popups burner.exe
U
Popup blocker, part of Asmw Soft PC_Optimizer ... Read More
ATI Video Driver Control pixman.exe
X
A variant of the IRCBot family of worms and IRC backdoors.
AutoShutdown pssvc.exe
?
Utility to fix vCard Export in MS Outlook 2000 - although why are these together? ... Read More
AV Client patch31345.exe
X
Added by the MYDOOM.AD WORM!
AV Industry patch31345.exe
X
Added by the MYDOOM.AD WORM!
AVSystemCare pgs.exe
X
Added by the AVSystemCare rogue anti-spyware program. AVSystemCare is a security risk that may give exaggerated reports of threats on the computer. ... Read More
Bart Station PPCOLink.exe
U
Software distrbibuted by the ISP PeoplePC.
BestsellerAntivirus pgs.exe
X
Added by the BestsellerAntivirus rogue anti-spyware program.
bin32hpu ppstub.exe
X
PrecisionPop adware
blocker system611 monitoring PopUpBlocker611.exe
X
Added by the RBOT.BLJ WORM! ... Read More
BM PSA Access Driver Control PsaSrv.exe
U
Related to IBM's Professional Services Automation products.
BUFFALO PC-MDVD/U2 WDM Encoder p2usbwdm.sys
Y
Driver for the BUFFALO PC-MDVD mpeg video capture box.
chaplin psqnuvo.dll
X
Zlob Trojan which installs the AntiSpyCheck rogue anti-spyware program. This program displays fake security alerts stating that your computer has a s ... Read More
CheckWinPerf perfinfo.exe
X
Identified by AntiVir antivirus as TR/Crypt.XPACK.Gen.
CheckWinPerf perfm32.exe
X
Unidentified malware.
Client Agent photes.exe
X
Added by the Troj/PPdoor-P Trojan.
Clotusorgreg0 prtStart.exe Orgprt.exe
?
Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does? ... Read More
CLSID plugin.exe
X
Adult content dialler
cmonitor pasmon.exe
X
Part of the rogue anti-spyware application SystemDoctor 2006. This application is known to install with malware that issues fake security warnings in ... Read More
CompaqPrinTray printray.exe
N
Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly ... Read More
Configuration L0ader picorulez.exe
X
Added by the W32/SdBot-IN worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
ControlPanel popcorn64.exe rundll.dll,LoadMouseProfile
X
Added by the Troj/Dloader-OI downloader trojan. When removing this infection, you only want to remove the popcorn64.exe file. ... Read More
ControlPanel popcorn.exe
X
Added by the Troj/Bizves-B downloader trojan.
ControlPanel popcorn72.exe
X
Added by the Troj/Dloader-RA Trojan.
ControlPanel priva.exe
X
Added by the Troj/Clicker-AZ Trojan.
controlpanel private.exe
X
Reported by Norman Virus Control as W32/Downloader.
ControlPanel per.exe
X
Added by the Troj/DwnLdr-FDP Trojan. When removing this infection, you only want to remove the per.exe file. ... Read More
Country Select pctptt.exe
N
Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as ... Read More
CountrySelection pctptt.exe
N
Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as ... Read More
CSIScanner prevxcsi.exe
Y
Related to Prevx CSI.
data restore service prq8.exe
X
Added by the W32.Kelvir.AI WORM! ... Read More
data restore service prq8.exe
X
Added by the W32.Kelvir.AI WORM! ... Read More
DevicePath Proyecto1.exe
X
Added by the GRUEL WORM!
DF PHVGKEDD.exe
X
Added by the Troj/OnlineG-AK information-stealing Trojan for online games.
DhcpCep PYJJKIME.exe
X
Added by the Troj/Agent-BXQ downloading Trojan.
Dialgo SDK PhoneAnswer.exe
U
Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Feature ... Read More
Dialog Helper PDDLGHLP.EXE
N
Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Availab ... Read More
direct parallel link driver ptilink.sys
U
Direct Parallel Link Driver from Microsoft. Bundled with the operating system.
directx PipeCmd.exe
X
Added by the SDBOT.D TROJAN!
Disk Defragmentation Loader pmsvcr.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
DocuMagix Init PWATCH.EXE
N
PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start ma ... Read More
DRam prosessor plsccd.exe
X
Identified as a variant of Backdoor.Win32.Rbot.gen worm and IRC backdoor.
DRam prosessor plscd.exe
X
Added by the WORM_RBOT.CYA worm and IRC backdoor.
dregfix ph_finder.exe
?
??
dstiosys plsitctl.exe
X
Added by the Troj/Mailbot-BX IRC backdoor Trojan.
DXM6Patch_981116 p_981116.exe
N
Win32 cabinet self extractor. More info here
eTrust PestPatrol Active Protection PPActiveDetection.exe
U
PestPatrol real-time protection feature. "Stops spyware before it infects your system" ... Read More
Event Planner Reminders PLNRnote.exe
N
Sierra Event Planner tray icon
Event Reminder pmremind.exe
N
A calendar/alarm program that installs with Brøderbund Printmaster
explorer.exe perfmnt.exe
X
Added by the Troj/Agent-FJ Trojan.
ExploreUpdSched pwinsndt.exe
X
Added by a variant of the Zenosearch adware. Adware.ZenoSearch is an adware that displays pop-up ads based on searches the user performs on popular we ... Read More
FASTTRACKPassepartout Passepartout.exe
X
Added by the Dial/DialCar-X dialer.
firstRabbit PurpleHaze.vbs
X
Added by the Troj/Tibba-A Trojan.
freinst pgs.exe
X
Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infec ... Read More
FullSystemProtection pgs.exe
X
Rogue anti-spyware program is installed and advertised through the use of malware and deceptive advertising. ... Read More
Gadwin PrintScreen PrintScreen.exe
N
Gadwin PrintScreen - utility to capture, print or save the current window
game patcher.scr
X
Added by the Troj/PWS-ED password-stealing Trojan.
GoldenAntiSpy pgs.exe
X
Added by the GoldenAntiSpy rogue anti-spyware program. GoldenAntiSpy is a Security Risk that may give exaggerated reports of threats on the computer. ... Read More
guardian pc security tools Pfft.exe
U
Related to PeerGuardian PC Security Tools. An Open Source Program. Note: located in C:\Program Files\Boomerang Software\Guardian PC Security Tools\ ... Read More
gw port controller PORTCT95.EXE
Y
From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file p ... Read More
HP Presentation Ready PresRdy.exe
N
HP Omnibook related:  "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen ... Read More
HPU ProvenTactics.exe
N
Proven Internet Marketing software
ibm_pwmgr pwmgr.exe
Y
Related to IBM_Password_Manager Note: located in C:\Program Files\IBM\Password Manager\ ... Read More
icrosoft Visual plscx.exe
X
Added by the W32/Rbot-AYO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
IE6 porn.pif
X
Added by the W32/Rbot-ATF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Imonitor Plguni.exe
N
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
InstantTray PCLETray.exe
N
Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Ca ... Read More
Intel PDS pds.exe
U
Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the co ... Read More
Intel PROSet Tray Icon promon.exe
N
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features ... Read More
intellectual_property PRODUCT.exe
X
Added by the Troj/Feutel-R Trojan.
IntelliPoint point32.exe
Y
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features. ... Read More
Interlinking Memory Support param32.dll
X
Added by the Troj/Warspy-D Trojan. This will hijack Internet Explorer to the following domains: hotoffers.info and newgenlook.info among others. ... Read More
ISPSERVICE psycho.exe
X
Added by the Troj/IRCFlood-O Trojan.
karen\'s once-a-day ii.lnk PTOAD.exe
Y
Karen's_Once_a_Day_II ... Read More
kebodohan P84K80W75T.exe
X
Added by the W32.Fishinflu@mm worm. W32.Fishinflu@mm is a mass-mailing worm that spreads through removable drives and by sending messages to mIRC user ... Read More
KernelFaultCheck ptool32.exe
X
Added by the Troj/LegMir-BN Trojan.
Keyboard Preload Check Preload.exe
Y
Millenium Multi-Function Keyboard driver
kiss pingy.exe
X
Identified as a variant of the W32/Cult.worm.gen malware.
Kodak Batch Transfer pezdow1.exe
N
Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC ... Read More
kodak picture easy *.* batch transfer PezDownload.exe
N
Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* ... Read More
Kodak Picture Transfer Software pts.exe
N
Looks for Kodak camera connection and media insertion. Available via Start -> Programs ... Read More
kym control settings phqghum.exe
X
Added by the RBOT.BQD WORM! ... Read More
LexmarkPrinTray printray.exe
N
Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as ... Read More
lidpolicy pwrschem.exe
U
A utility for configuring certain HP notebook models to enter Standby mode when the lid is closed only when running on battery. ... Read More
LifeScape Media Detector PicasaMediaDetector.exe
N
Media detector for Picasa's automatic photo organizer
local internet web drivers for win32 phqghume.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
localproxy proxy4free.exe
U
Related to ProxyTools ProxyTools is a package of Perl network utilities designed mainly to assist those whose Internet access is censored, unreliable ... Read More
M Player Post Installer postinstallm.exe
?
??
magickeyboard PreMKBD.exe
U
Related to Samsung laptops. Provides ability to program keys to perform specific functions. ... Read More
martini pinmart.exe
X
Added by a variant of the W32/SDBOT WORM! ... Read More
MasterBoot Switch popupkill.exe
X
A variant of the Rbot family of worms and IRC backdoor Trojans.
Matrox Powerdesk PDesk.exe
N
For Matrox video cards. Quick access to tweak your card to your liking
McAfee QuickClean Imonitor Plguni.exe
N
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
MediaPath Proyecto1.exe
X
Added by the GRUEL WORM!
MenaceRescue pgs.exe
X
Added by the MenaceRescue rogue anti-spyware program. MenaceRescue is a Security Risk that may give exaggerated reports of threats on the computer. Th ... Read More
microoft timing pupdate.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
Microsoft prefinal.exe
X
A variant of the RBot.get family of worms and IRC backdoor Trojans.
Microsoft DirectX PDSched.exe
X
Added by the SDBOT.CN WORM!
Microsoft Mouse Driver Ver 3.0 pointer32.exe
X
Added by the W32/Randex-AA worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More
Microsoft Plug and Play plugnplay32.exe
X
Added by the W32/Mytob-HF mass-mailing worm and IRC backdoor.
Microsoft Process Manager process32.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Profile Manager profile.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft proxysys proxysys.exe
X
Added by the W32/Tilebot-JC worm and IRC backdoor.
Microsoft PSTCP32 Data pstcp32.exe
X
Added by a variant of the WIN32.RBOT WORM!
Microsoft Svchost local services pr1nc.exe
X
Added by the W32/Rbot-GWW worm and IRC backdoor.
Microsoft Update prowind32.exe
X
Added by a variant of the AGOBOT/GAOBOT WORM!
Microsoft Update Machine ppabvg.exe
X
Added by the Troj/Ciadoor-DR Trojan.
microsoft update service phqghum.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
Microsoft Visual Studio plscdksxg.exe
X
Added by the W32/Rbot-AWV worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Microsoft Windows pwjbvphi.exe
X
Added by the W32/Rbot-GQK worm and IRC backdoor.
Microsoft Windows DLL Services Configuration proxy.exe
X
Added by the W32/Sdbot-ZL worm. When started, this infection connects to a remote IRC server and waits for commands to execute. ... Read More
Microsoft Windows DLL Services Configuration poker.exe
X
Added by the W32/Sdbot-ZY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Microsoft Windows DLL Services Configuration poker3.exe
X
Added by the W32/Sdbot-AAH worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More
MICROSOFT Windows update pdate.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Xp pdate.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft© PID Lex PIDLex.exe
X
Added by the NIOVADOOR TROJAN!
mmusrstp procrun.exe
?
??
MMX2 virtualization service pptp24.sys
X
Added as variant of the Troj/Haxdor-Gen family of rootkits.
Mouse Suite 98 Daemon pelmiced.exe
N
Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games ... Read More
MS Domain Name Server Deamon p.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Ms System Config pcedit.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
msconfig.exe proxy.exe
X
Added by a variant of the AGENT.AH downloader TROJAN!
msgmsgs peremption.exe
X
Added by the W32/Sdbot-KU worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
MSN Messenger PIC1324.exe
X
Added by the W32.Annoying.Worm msn messenger Worm.
MSNPluginSrvcs p6.exe
X
Added by the RBOT-VJ worm with backdoor functionality via IRC.
MSNSysRestore pc32.exe
X
Added by a variant of the MASTAK VIRUS!
MSPetServ PET32.EXE
X
Added by the W32/IRCBot-VE worm and IRC backdoor.
MSPluginSrvc p3.exe
X
Added by W32/Rbot-WV, a WORM!
msptlg ptlg.exe
X
This malware is identified as the Hoax.Win32.SpyWare.d adware. When you are infected with this malware, you will receive popups for a variety of ser ... Read More
mspwr pupstman.exe
U
"Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me)  ... Read More
mspwr pupxpman.exe
U
Related to Ashampoo's PowerUp_XP ... Read More
mspwr pwrupst.exe
U
Ashampoo PowerUp_XP is a tool for fine-tuning your Windows® NT4, 2000, 2003 Server and XP configuration. ... Read More
mspwr PuXpMan2.exe
U
Related to Ashampoo Magic Defrag Utility.
MStask p2sys.dll
X
Added by the Troj/LdPinch-UE Trojan.
Net Monitor DDE plscd.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
NetCom3 Service PscMonitor.exe
X
Added by the Netcom3 Cleaner adware. Netcom3 Cleaner claims to be a spyware scanner for the Windows platform. It is known to report clean systems as u ... Read More
NETVISIONPasse-partout Passe-partout.exe
X
Added by the Dial/DialCar-M premium rate dialler.
Network Provision Managing Service provsvc.exe
X
Added by the W32/Sdbot-CRS worm and IRC backdoor.

W32/Sdbot-CRS spreads by copying itself to network shares protected by weak passwords ... Read More
Newman