Newest 50 Entries

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Name	Filename	Status	Description
WinSATRestorePower	powercfg.exe	Y	Restores a saved power configuration after performing a test via the Windows System Assessment Tool.
AllShareAgent	AllShareAgent.exe	U	Part of Samsung's AllShare service.
PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver	pcdsrvc_x64.pkms	Y	PC Doctor driver that is part of the Dell Support Center for hardware diagnostics.
FastAccess	FALogNot.dll	Y	Added by the AlienSense facial recognition software commonly bundled on AlienWare laptops.
Vista Session Launcher Service	Service1.exe	U	Added by the Sensible Vision face recognition software.
RapportEI64	RapportEI64.sys	Y	A driver used by Trusteer Rapport. Trusteer Rapport is a security program that protects web communication between enterprises, such as banks, and their customers and employees.
RapportPG64	RapportPG64.sys	Y	A driver used by Trusteer Rapport. Trusteer Rapport is a security program that protects web communication between enterprises, such as banks, and their customers and employees.
RapportKE64	RapportKE64.sys	Y	A driver used by Trusteer Rapport. Trusteer Rapport is a security program that protects web communication between enterprises, such as banks, and their customers and employees.
AVG WatchDog	avgwdsvc.exe	Y	Windows service used by AVG anti-virus.
Wacom Professional Touch Service	Wacom_TouchService.exe	?	Legitimate Windows service related to Wacom Tablets.
TabletServiceWacom	Wacom_Tablet.exe	?	Legitimate Windows service related to Wacom Tablets.
System Health Monitoring Service Pro	<random>.exe	X	Added by the Troj/Bckdr-RPS Ransomware.
BrowserChoice	browserchoice.exe	N	Related to the BrowserChoice web site results from the European Union Microsoft competition case.
CheckRun22find_uninstaller	CheckRun22find.exe	X	Added by the 22Find browser hijacker. This hijacker will also change the shortcuts associated with your browsers to automatically open up the 22find.com web site.
afpa	afpa.sys	Y	This driver is installed by the IBM HTTP Server which in turn is based on the technology for Apache Web server.
HelpInfo	HelpInfo.exe	X	Korean rogue anti-spyware program.
Microsoft Corp Update	winsvrn32.exe	X	Added by the Backdoor:Win32/IRCbot.gen!AA IRC backdoor.
MSN Messenger	SVCHOST32.EXE	X	Added by the W32.Seswol.B worm.
vaccinespeedstart	vaccinespeedstart.exe	X	Korean rogue anti-spyware program named Vaccine Speed.
windoguideopt	windopt.exe	X	Korean adware identified by Ahnlab as PUP/Win32.Addenbar.
windoguideagent	windoguideagent.exe	X	Korean adware identified by Ahnlab as PUP/Win32.Addenbar.
windoguide	windoguide.exe	X	Korean adware identified by Ahnlab as PUP/Win32.Addenbar.
WebConfig	WebConfig.exe	X	An adware detected by ESET Anti-virus as a variant of the Win32/Adware.Smarthink.A malware.
Fontcore	Fontcore.exe	X	Trojan identified by Malwarebytes as a variant of the Trojan.Ransom.ED malware.
WinPcapInst	WinPcapInst.pif	X	A Trojan identified by Avira as a variant of the TR/Stoberox.B.13 malware.
atitool	pwrwin.exe	X	Added by the W32.Yazz worm.
WindowMessenger	WinSysApp.exe	X	Added by the Win32/Wecykler removable media worm.
Windows Common Files Manager	Commgr.exe	X	Added by the Win32/Wecykler removable media worm.
Windows Alerter	WinAlert.exe	X	Added by the Win32/Wecykler removable media worm.
infocover main	infocoveru.exe	X	A Korean rogue anti-spyware program.
speedguarderstart.exe	speedguarderstart.exe	X	A Korean rogue anti-spyware program.
speedguarder main	speedguarderu.exe	X	A Korean rogue anti-spyware program.
VaccineSeven	Vaccine7.exe	X	Korean rogue anti-spyware program.
Tutorials	tutorials.exe	X	Adware program that is commonly detected as Adware.Tuto4PC.
pcguarderstart.exe	pcguarderstart.exe	X	Korean rogue anti-spyware program.
SearchProtectAll	cltmng.exe	X	Part of the Conduit adware program.
IntelSBA	SBALaunchDelay.exe	?	Part of Intel's Small Business Advantage program. Does anyone know what this program actually does?
WinKey	WinKey.exe	X	Korean malware that is identified by Ahnlab as a variant of the Win-PUP/Helper.Winkey malware.
anysecuS	anysecuU.exe	X	A Korean rogue anti-spyware program.
anysecu main	anysecuu.exe	X	A Korean rogue anti-spyware program.
windowstatus	windowstatus.exe	X	A Korean malware called Stickads. Identified by Kaspersky Anti-virus as a variant of the Trojan.Win32.Scar.hhna malware.
stickads	stickads.exe	X	A Korean malware called Stickads. Identified by Kaspersky Anti-virus as a variant of the Trojan.Win32.Scar.hhna malware.
Symantec SymSnap VSS Provider	dllhost.exe	Y	Services used to create system snapshots in Ghost and Backup Exec. If this service is not running it could cause certain functionality to be disabled from these programs.
WudfPf	WudfPf.sys	Y	Windows driver that provides communciation services for UMDF components.
WUDFWpdMtp	WUDFRd.sys	Y	Windows driver that reflects device requests to user-mode driver drivers.
HTCMonitorService	HSMServiceEntry.exe	N	Added by the HTC Sync Manager synchronization software for HTC phones.
PrivitizeVPN	PrivitizeVPN.exe	N	Free VPN server that is bundled with numerous adware programs. Not malicious in itself, but you need to be careful you do not install any of the bundled programs.
bcbtums	bcbtums.sys	Y	Broadcom BlueTooth driver.
Update	googleupdate.exe	X	Added by the Backdoor.Boda backdoor.
PCScan Antispyware	pcsp.exe	X	Korean rogue identified by Malwarebytes as Rogue.PCAntiSpyware.

Status Key

Each entry in the database will have a Status assigned to it. The key to this status is the following:

Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware but could also be programs that are not desirable to run on your computer.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

If you require assistance in removing one of these files you can ask us in the Startup Database Forum.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search for a Startup

Advanced Search

Startup Database Navigation

HijackThis Startup Categories

F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23