Filenames that start with Z

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> Filenames that start with Z

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List

· Submit a Startup

· Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Name	Filename	Status	Description
(default)	Zykheptd.dll	X	Added by the Backdoor.Hesive.B backdoor.
(default)	Zrwchrhu.dll	X	Added by the Backdoor.Hesive.C backdoor Trojan.
adobe	zteam.exe	X	Added by an unidentified TROJAN!
b3dUpdate	Zupdate.exe	X	B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2 ... Read More
blah service	zlpkwj.exe	X	A variant of the IRCBot family of worms and IRC backdoors.
CHotKey	zHotkey.exe	U	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol , vol-, mute, etc. Only required for extended features ... Read More
dsd	zz.exe	X	Added by the W32/Rbot-FOX worm and IRC backdoor. W32/Rbot-FOX spreads to other network computers by networks protected by weak passwords. ... Read More
edgers	zcwlnic.dll	X	Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your compute ... Read More
f3444Adm	zh59[RANDOM].exe	X	Added by the W32.Rontokbro.X@mm mass-mailing worm.
frowardness	zfaiqwr.dll	X	Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More
gshp	zzgshp.vbs	X	Homepage hi-jacker
icrosoft Visual InterDevc	zvslmqb.exe	X	Added by the W32/Rbot-AYP worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
ksrlnhm	zxatgso.exe	X	Added by the Troj/Dloader-LI downloader trojan.
LoadingAgent	ZipLoader32.exe	X	Added by the OBLIVION TROJAN! This executable is one of the most common but there are more ... Read More
Messenger	zone-h.ddo.jp.exe	X	Added by the Trojan.Esteems.C Trojan.
Microsoft Autorun14	ztinetzt.exe	X	Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More
Microsoft Security Panagers	zzoboony.exe	X	Added by the W32/Rbot-AOI worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More
Microsoft Update Machine	zonealarm.exe	X	Added by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program! ... Read More
MSMSGNER	zzgf.exe	X	Added by the Troj/PWS-CCB password-stealing Trojan.
mulut_besar	Z76V90L86L.exe	X	Added by the W32.Fishinflu@mm worm. W32.Fishinflu@mm is a mass-mailing worm that spreads through removable drives and by sending messages to mIRC user ... Read More
Norman ZANDA	ZLH.EXE	U	System Tray icon for Norman Antivirus
NORTON ANTIVIRUS HACKER-EDITION	zsqwx.exe	X	Added by the W32/Rbot-BAK worm and IRC backdoor.
Novell ZfD Remote Management	ZenRem32.exe	Y	Part of the Novell Windows client. It has a service name of Remote Management Agent and is found in the C:\Program Files\Novell\ZENworks\RemoteManage ... Read More
OPENSSL cryptoapi	zopenssld.sys	X	Added by the Trojan.Goldun.K rootkit.
otak_udang	Z82Y90M89R.exe	X	Added by the W32.Fishinflu@mm worm. W32.Fishinflu@mm is a mass-mailing worm that spreads through removable drives and by sending messages to mIRC user ... Read More
Remote Management Agent	zenrc32.exe	U	Part of Novell's ZENworks - "Complete End-to-End Directory-enabled Network Management". Installed on a managed workstation fo an administrator to remo ... Read More
streamzap remote	zremote.exe	U	StreamZap_PC_Remote - Control Windows Media Player, iTunes, RealPlayer, Winamp, PowerPoint, MusicMatch Jukebox, and many other multimedia applications ... Read More
System	Zap.exe	X	Added by the W32/Culler-A worm.
SystemSecurity	zprot32.exe	X	Added by the Troj/Agent-FK Trojan.
Terminate Popup	ZPU.exe	X	Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here ... Read More
test	zistro.exe	X	Added by the Troj/Kimat-C Trojan.
topat	zlip.exe	X	Added by the Troj/Flood-IG backdoor Trojan.
Update	Zupdate.exe	X	B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2 ... Read More
update" -s setup	Zupdate.exe	X	B3d Projector foistware - periodically tries to access the internet. (1) Uninstall via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) ... Read More
VasddwDg	zxXZwd.exe	X	Added by the W32/Sdbot-SN WORM/IRC backdoor Trojan. Running in the background as a service, it will allow unauthorised remote access to the infected c ... Read More
Win32	zaq.exe	X	Added by the W32/Rbot-GCE worm and IRC backdoor.
windatea	zod32.exe	X	Added by the W32/Dozic-A AOL Instant Messenger worm.
Windows	Zser.exe	X	Added by the W32/Culler-D worm.
Windows Config	ZANBOR.EXE	X	Added by the W32/Spybot-MH worm and IRC backdoor. The worm may attempt to steal passwords from the following programs/services: ... Read More
Windows Recylinder Check	zwdomsgemw.exe	X	Added by the W32/Rbot-EGJ worm and IRC backdoor.
WindowsFZ	zloader3.exe	X	Added as part of the Smitfraud infection.
winndata	zod32.exe	X	Added by the W32/Dozic-A AOL Instant Messenger worm.
winnet	zod32.exe	X	Added by the W32/Dozic-A AOL Instant Messenger worm.
Winsock2 driver	ZONEALARM.EXE	X	Added by the SDBOT.T TROJAN! Note - ZONEALARM.EXE is not the valid Zone Labs firewall program ... Read More
Winsock2 driver	Zonealarmupdate.exe	X	Added by a variant of the SPYBOT WORM!
Winsock32driver	ZoneAlarmPr0.exe	X	Added by the HACKARMY-B TROJAN!
Winsock32driver	ZoneLockup.exe	X	Added by the HACARMY.D TROJAN!
winui	z.exe	X	Added by the Kondeli ... Read More
winup	zod32.exe	X	Added by the W32/Dozic-A AOL Instant Messenger worm.
Winupd	zod32.exe	X	Added by the W32/Dozic-A AOL Instant Messenger worm.
yscpsdfh	zscpsdfh.sys	X	Added by the Troj/RKPort-Fam Trojan rootkit.
yvaeypeb	zvaeypeb.sys	X	Added by the Troj/Bckdr-QJB rootkit.
yxwituxh	zxwituxh.sys	X	Added by the Troj/Dropper-QV rootkit.
Z	zmon.exe	X	Added by the W32/Delbot-AE worm.
Zacker	Zacker.exe	X	Added by the GEMEL WORM!
zalpqbj	zalpqbj.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
zango	zango.exe	X	180Solutions/N-Case adware variant
zango sitefinder	ZangoSiteFinder.exe	X	180Solutions ZangoSearch adware variant ... Read More
zango tvtimes	ZANGOT~1.EXE	X	ZangoSearch adware ... Read More
zanu	zanu.exe	X	180Solutions/N-Case adware variant ... Read More
Zapro	Zapro.exe	Y	Firewall program from Zonelabs - paid for version
zcb	zcb.exe	?	??
zcfgsvc	ZCfgSvc.exe	U	Zero Config MFC Application, part of Intel’s ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the ... Read More
Zcjflmoj	Zcjflmoj.sys	X	Added by the Troj/Bckdr-GPJ backdoor Trojan with rootkit capabilities.
zdconfig	ZDConfig.exe	?	Related to various brands of Wireless USB LAN Adapter - what does it do and is it required? ... Read More
zdegpig	zdegpig.ini	X	Added by the Backdoor.Rustock backdoor rootkit.
Zekio Startups	znksvc32.exe	X	Added by WORM_AGOBOT.AFN
ZENRC	zenrc32.exe	Y	The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Leave well alone ... Read More
ZENRC Tray Icon	zentray.exe	Y	Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Best left alone ... Read More
ZENworks Imaging Service	ZISWin.exe	Y	Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management" ... Read More
zeqbqwp	zeqbqwp.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
zeqwur	zeqwur.chm	X	Added by the Backdoor.Rustock backdoor rootkit.
zero popup killer xp.lnk	zpk_xp.exe	U	Intelligent anti-pop-up software product by Ax-Soft ... Read More
ZeroSpyware	ZeroSpyware.exe	U	FBM Software ZeroSpyware 2004 spyware detector and remover
ZESOFT	zeta.exe	X	This file is associated with adware. It is known to download and install other spware and adware on to your computer. This service should definitely ... Read More
ZGNUBI	ZGNUBI.exe	?	??
Zinaps7	Zinaps7.exe	X	Added by the Zinaps Anti-Spyware 2008 rogue anti-spyware program.
ZingSpooler	ZingSpooler.exe	U	Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload pho ... Read More
Zinio DLM	ZDLM.EXE	N	Zinio - used to read magazines in digital rather than paper format
zip	zip.dll	X	Added by the Trojan-Downloader.Win32.Agent.ipp malware.
Zip Driver Loader	ZipLoader32.exe	X	Added by the OBLIVION TROJAN! This executable is one of the most common but there are more ... Read More
zip driver loader	ZipLoader.exe	X	Added by the OBLIVION TROJAN! ... Read More
ZipGenius Clean	zg.exe	N	ZipGenius file compression utility
ziphelp	ziphelp.exe	X	CoolWebSearch parasite related
ZipMagic	zm32.exe	N	Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first ... Read More
zlclient	zlclient.exe	Y	Firewall program from Zonelabs. This startup can appear in other version of Zone Alarm products such as their antivirus and anti-spyware products. ... Read More
zlclient	zlclient.exe	X	Added by the Trojan.Syginre Trojan. Trojan.Syginre is a Trojan horse that disables the Windows Firewall and may delete some files from the compromised ... Read More
ZLH	ZLH.EXE	U	System Tray icon for Norman Antivirus
ZNN	znnsvc.exe	X	Added by the W32.Rinbot.D worm and IRC backdoor.
ZNN	znnsvc.exe	X	Added by the W32/Sdbot-DAA worm and IRC backdoor.
Zone Alarm Security	zlclint.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Zone Labs Client	zlclient.exe	Y	Firewall program from Zonelabs. This startup can appear in other version of Zone Alarm products such as their antivirus and anti-spyware products. ... Read More
ZoneAlarm	zonealarm.exe	Y	Firewall program from Zonelabs - free version
ZoneAlarm Client	zlclient.exe	Y	Firewall program from Zonelabs. This startup can appear in other version of Zone Alarm products such as their antivirus and anti-spyware products. ... Read More
ZoneAlarm Plus	zaplus.exe	Y	Firewall program from Zonelabs - paid for version
ZoneAlarm Pro	Zapro.exe	Y	Firewall program from Zonelabs - paid for version
Zoom	zoom.exe	U	Zoom - speeds up Windows startup and manages startup applications
Zooming	ZoomingHook.exe	?	Related to the Toshiba Zooming Utility for Tablet PC.
ZoomingHook	ZoomingHook.exe	?	Related to the Toshiba Zooming Utility for Tablet PC. What does it do and is it required? ... Read More
Zopenssl	zopenssl.dll	X	Added by the Trojan.Goldun.K rootkit. This program is used by the infection to stealth C:\Windows\System32\zopenssld.sys and its related service. ... Read More
ZPMODEMSYSNTDRVNT	zpmodemnt.sys	X	Added by the Troj/AdClick-BM Trojan.
ZPOINT32	ZPOINT32.exe	Y	USB graphics/writing tablet driver
Zrfkupza	Zrfkupza.sys	X	Added by the Troj/PcClient-N backdoor Trojan.
Zrwchrhu	Zrwchrhu.sys	X	Added by the Backdoor.Hesive.C backdoor Trojan. This particular part of the infection acts as a rootkit to hide and files or registry entries it crea ... Read More
zscpsdfh	zscpsdfh.dll	X	Added by the Troj/PcClien-KT Trojan. This infection is hidden by the zscpsdfh.sys rootkit. ... Read More
zSearch	Zstb.exe	X	TotalVelocity zSearch parasite
ZSMCSnap211	ZSMCSnap211.exe	?	Related to ZSMC USB cameras.
zsmscc	zsmscc071001.dll	X	Identified as a variant of the Trojan-Spy.Win32.Agent.adq malware.
zsqalpdt	zsqalpdt.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
zsscheduler	zsscheduler.dll	Y	Related to ZeroSpyware from FBM Software.
zsydll	zsydll.dll	X	Added by the BKDR_GINWUI.B backdoor.
Zsys	Zsys.exe	X	Added by the PWSteal.Rivarts password-stealing Trojan.
ztx86	ztx86.sys	X	Identified as a variant of the Backdoor:Win32/Rustock.gen!C backdoor Trojan.
Zune Launcher	ZuneLauncher.exe	U	Launches the Zune software when you have a Microsoft Zune connected to your computer. ... Read More
Zune Network Sharing Service	ZuneNss.exe	U	Allows you to share the media in your Zune library with other Microsoft devices such as the XBOX 360. ... Read More
zupacha.exe	zupacha.exe	X	Added by the Troj/Dropper-QL Trojan.
Zupdate	Zupdate.exe	X	B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2 ... Read More
zvaeypeb	zvaeypeb.dll	X	Added by the Troj/Bckdr-QJB Trojan. This infection is hidden by the zvaeypeb.sys rootkit. ... Read More
zwqcplsp	zwqcplsp.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
Zxbnredm	Zxbnredm.sys	X	Added by the Backdoor.Hesive.E rootkit driver. This driver will attempt to stealth certain registry keys and files so they are not detectable or vis ... Read More
Zxftajzo	Zxftajzo.sys	X	Added by the Backdoor.Darkmoon.D backdoor.
Zykheptd	Zykheptd.sys	X	Added by the Backdoor.Hesive.B backdoor.
zzb	zzb.exe	X	IAGold adware downloader
zzb	zzb.exe	X	IAGold adware downloader
zzb2	zzb2.exe	X	IAGold_adware downloader ... Read More
zzz	zzz.sys	X	Added by the Hacktool.Rootkit rootkit.
zzzxIPSPEC_1	zzzx[random characters].exe	X	Added by the Trojan.Netdepix.B Trojan.
zzzxSYSTEM_32	zzzxt2ve.exe	X	Added by the W32/Oddbot-D WORM!
zzzzDeMe	zzzx*.exe	X	Added by the Troj/Socksrv-A backdoor trojan.
[not used]	zlibc.exe	X	Added by the Troj/Chorus-A browser hijacker.
[not used]	zsyhide.dll	X	Added by the Backdoor.Ginwui.B backdoor Trojan.
[Various Names]	zxc.exe	X	Part of the Wareout infection as described here.
[Various Names]	zantu.exe	X	Part of the Wareout infection as described here.
{2F164B78-F15F-49B0-11AB-4EA9BE8E14BD}	zyli.dll	X	Added by the Troj/LegMir-ARJ password-stealing Trojan for the online game The Legend of Mir. ... Read More
{2fdde73c-273e-4e55-84dc-455de06e4866}	zdwii.dll	X	Zlob Trojan that installs VirusProtectPro 3.7 and shows fake security alerts from your Windows taskbar. ... Read More
{4688f900-0d0c-4788-b297-59cc10e70ccc}	zpeolvh.dll	X	Zlob Trojan that installs VirusProtectPro 3.3 and shows fake security alerts from your Windows taskbar. ... Read More
{52AD3225-EC12-BAA3-E2A2-D012A4B6011D}	zz33.exe	X	Added by the Troj/Delf-DLJ Trojan.
{547aaa89-7e6b-42b4-b112-a64955f86a2a}	zpuwriz.dll	X	Zlob Trojan that installs VirusProtectPro 3.5 and shows fake security alerts from your Windows taskbar. ... Read More
{70305bc2-b289-4209-a344-be21f22bc930}	zphnok.dll	X	A Trojan used by the rogue anti-spyware program VirusBurst. This Trojan, when installed, will display fake security alerts on your taskbar and install ... Read More
{89e4aaba-3b21-49b3-b922-8ca35193c68e}	zlara.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar. ... Read More
{8A5849C4-93F3-429D-FF34-660A2068897C}	zsPoCrypt.dll	X	Detected by BitDefender as Generic.Malware.dld.
{9A65498A-7653-9801-1647-987114AB7F49}	zxipri.dll	X	Identified by Kaspersky as the Trojan-Spy.Win32.Delf.xc password-stealing Trojan. ... Read More
{cc25189b-1b13-4abe-900e-65e08bd961af}	zdhgsp.dll	X	Added by a Zlob Trojan which installs AntiVirgear 3.7 and display fake security alerts in your Windows taskbar. ... Read More
{D1351752-5628-1547-FFAB-BADC13512AFD}	ztmpri.dll	X	Added by the Troj/QQPass-APA Trojan.
{d1e5ca97-235e-4ff0-9b92-7543c9d61ff4}	zkpssqa.dll	X	Zlob Trojan that installs VirusProtectPro 3.6 and shows fake security alerts from your Windows taskbar. ... Read More

Status Key

Each entry in the database will have a Status assigned to it. The key to this status is the following:

Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware but could also be programs that are not desirable to run on your computer.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

If you require assistance in removing one of these files you can ask us in the Startup Database Forum.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.