Start-Up Applications - All

Last update :- 25th September, 2003
3420 items listed

Introduction

This page presents a searchable, comprehensive list of the programs you may find that run when you switch on your PC as typically identified by MSCONFIG or the registry "Run" keys - and whether you need them.

Close Program/Task Manager

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try AnswersThatWork

Operating System Differences

A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" whereas WinXP lists it as "Poproxy"

Random startup entry/filename viruses

There are viruses and other pests that can add any number of different entries to the startups. They make additional entries under the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\ Run and RunOnce keys, allowing them to run at startup:

(1) PE_BISTRO - adds XXXX = "C:\WINDOWS\XXXX.EXE" - where XXXX is the randomly chosen filename of the dropped file
(2) MAGISTR.A - adds <Virus Name> = "<Path of Virus>\<Virus Name>.EXE"
(3) BUGBEAR - adds <random string> = %system%\<random filename>.EXE. %system% is a variable. The worm locates the System folder and copies itself to that location. By default this is C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
(4) OPTIXPRO.11 - adds <Registry entry> = "<Path of Virus>\<Filename>"
(5) Lop.com homepage hijacker - creates multiple and random startup entries
(6) FreeScratchAndWin - creates multiple and random startup entries as it includes LOP above
(7) nCase (or n-Case) parasite - creates multiple and random startup entries
(8) LORAC - adds "<four random characters>" = "%System%\abcdef.exe" - where abcdef is the volume number of the infected hard drive
(9) MOSUCK - random name and filename
(10) DEBORMS.D - adds one of a number of valid Name/Startup Item entries but points to the path of the worm file dropped
(11) GIBE.C - random name and filename
(12) SWEN.A - random name and filename

Spyware/Adware/Malware/Foistware & Hijackers

Check SpywareInfo for information about these types of program. They have a very active forum and a list of programs that may remove them here

o-----------------------------o

Search Query Courtesy of Dynamic Drive
Press Alt+S if an entry is found to continue searching

This search works with IE4+, NS4 and Mozilla/NS7+ but not NS6. Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

Alphanumeric index

 Name/Startup ItemCommandComments
?%cmpmixtitle%%cmpmixstr%??
U$EnterNetEnternet.exeConnection manager for the EnterNet ISP. You can also use RASPPOE
N@Hoc ToolbarAtHoc.exeOne-click activated browsing toolbar used by various web-sites. See here for more info
N@lohareminder.exeRegistration reminder for @loha@home E-mail utility
X@tour_ww@tour_ww[1].exeAdult content dialler
U!NoLoadwinrecon.exeWinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
X_x-Finder_x-Finder.exeDisconnects and redials an ISP modem to an adult content site
X(*)Runwin32API.exeHomepage hijacker, see here (* = any digit)
X(*)API MachinewinSOCKS.exeHomepage hijacker, see here (* = any digit)
U_winadmwinadm.exeParents Friend - "Log any activity and protect programs with a password. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC"
X,main drive Loaderwininfo.exeSuspected malware as it appears in 3 different registry locations - see here
N/l:engN/ARelated to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
X*JanisRuckenbrodIIjanis.comAdded as a result of the POPS VIRUS!
Y*StateMgrstatemgr.exeWindows default for System Restore. Do NOT disable!
X{2CF0B992-5EEB-4143-
99C0-5297EF71F444}
rundll32.exe stlbdist.dll, DllRunMainBrowseraid/Startium parasite
X123456rundll32.exe shell32.dll, Control_RunDLL ...123456.cplAdded as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number
X<random digits>.exe<random digits>.exe8 random digits, example: 77231997.exe = 77231997.exe. Winpup.exe adult content downloader
N1:hpdrv.exeHP utility for monitoring when and how many recoveries have been done
U12Ghosts Popup-Killer12popup.exe12Ghosts Popup-Killer
?17779Proj2002N/A??
N000StTHK000StTHK.exeToshiba laptop related but not required. What does it do?
U00THotkey00THotKey.exeFor Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
N1A:MacVisionTrayMonitorTrayMonitor.exeComes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y1A:Stardock MCPmcpserver.exeMaster Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on
Y1A:Stardock TrayMonitorTrayServer.exeFor monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
?1CmailSNETMAIL.EXE??
U1Srv32SpyAgent4.exeSpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."
U1Win32CfgSpyBuddy.exeSpyBuddy monitoring software
U2wSysTray2portalmon.exe2Wire Homeportal user interface
X2020Downloadermssvr.exe2020Search Toolbar related. Reported to be auto-installed
Y3c1807pd3cmlink.exe 3cpipe-3c1807pd3Com WinModem driver. See here for more WinModem information
Y3capplnk3capplnk.exeUS Robotics Modem driver
N3cdminic3CDMINIC.EXE3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
?3CM Link3cmcnkw.exeSame as below?
Y3Cmlink3CmlinkW.exeFor a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
N3ComDMIAgent3CDMINIC.EXE3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y3cpipe-USRpdAUSRmlnkA.exeModem driver files from US Robotics
U3Deep Control Panel3DeepCTL.EXEFrom LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X3Dfx AccGFXACC.EXEAdded as a result of the GIBE VIRUS!
Y3dfx Tools3dfxCmn.dllUpdates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
N3dfx Task Manager3dfxMan.exeSystem Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y3dfxv2ps.dll3dfxv2ps.dllUpdates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
U3DLabsHelperDemon3dldemon.exeDirectly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled
?3Dlabs Taskbar Display Manager3DLman.exe3DLabs graphics driver related. System Tray access to display settings?
N3D Text3D Text.scr3D Text screensaver
U3qdctl.exe3qdctl.exeProvided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
X5-1-61-96members-area.exeAdult content dialler
X5-2-46-1125-2-46-112.exeAdult content pop-up dialler. Removal instructions here
X666Ska.exeAdded as a result of the NETBUS VIRUS!

Back to search

 Name/Startup ItemCommandComments
UA1000 Settings Utilitycpqa1000.exeCompaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
UA4ProxyA4Proxy.exeAnonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
?AAACLEANAAACLEAN.INF??
?AAAKeyboard????
NAAATraySaverTraySaver.exeSystem Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
NABBYY Community AgentCAGENT.EXEInstalled with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software
XABCkeylogger.exeMonitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
UAbsolute Shielddseraser.exeAbsolute Shield/Evidence Eliminator - iternet history eraser
XABsrabsr.exeAdded as a result of the AUTOUPDER VIRUS!
Xabtump3serch.exe
lopsearch.exe
Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version
UAbyssWebServerabyssws.exeAbyss web server
YAcBtnMgr_XxxAcBtnMgr_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
UAccelerateaccelerate.exeWebroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
NAccess Ramp Monitorarmon32.exeMonitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
NAccessRamp Monitor01ARMon32a.exeFrom a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."
NAccessRampLAN01ARUpld32.exeVersion of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
NAccuWeather.com® Desktop??Desktop weather from AccuWeather.com
UAcerNotebookManageralmxptray.exeSystem Tray access on some Acer Notebooks to give faster access to system settings
?AcerPowerkeyPowerkey.exePowerKey utility for Acer TravelMate notebook PCs. What does it do and is it needed?
YACMonitor_XxxACMonitor_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
Xacocashfastdown.exe
fastfown.exe
Adult content dialler
UAcombo3dmouseAcombo3d.exeMouse driver - required if you use non-standard Windows driver features
XAcontiaconti.exeAdult content dialler
Uacousticacoustic.exeControl panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
Nacpartagpart11.exeProgram for finding trucks on-line
NAcrobat AssistantACROTRAY.EXEIf you want to create a PDF using Acrobat Distiller, you can execute this program manually just before doing so
?ActionAgentactionagent.exe??
NAction Manager 32am32.exeAssociated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
NActivationActivation.exePart of Microsoft Money
UActivboardMMKeybd.exePackard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
XActiveDesktopsystray32.exeAdded as a result of the DABOOM VIRUS!
NActiveEyesActiveEyes.exeActiveEyes from TFI Technology
UActiveMenuActiveMenu.exeWild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally
UActivePlusactiveplus.exeInteractive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
YActiveShieldMCVSSHLD.EXEMcAfee VirusScan On-line. See also McAgentExe
NActivSurfbackweb*****.exePackard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
UAD2KClientAD2KClient.exeExecutable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
NAdaptecDirectCDDirectcd.exeDirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
NAd-awareAd-aware.exeAd-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
NAdaware Bootupad-aware.exeAd-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
XAdaware lptt01adaware.exeNew variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware
UAd Blockerblocker.exeAd Blocker - blocks popups, and also removes banners, image ads and flash ads
?ADGADG.exe SoundBlaster Audigy related?
NADGJdetADGJDet.exeAdded with SoundBlaster Live! or Audigy soundcards for headphone autodetection
XADM Library Loaderadmlib32.exeAdded as a result of a variant of the SDBOT VIRUS!
UAd-MuncherADMUNCH.EXEAd Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
XAdobeAadobes.exeAdded as a result of the FLOOD.BA VIRUS!
UAdobe Gamma LoaderAdobe Gamma Loader.exeAdjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
?Ad Online Guideadonlineguide.exe??
Xadpadp.exeSpyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
NADQuickAccessAdtray.exeAfter Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
UADServiceADService.exePart of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
UAdsGoneAdsgone.exeAdsGone - pop-up stopper
NADSL Diagnostic Toolsmapiicon.exeSystem tray access to ADSL modem diagnostic tools. Available via Start -> Programs
YADSSADSS.exeADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
UAdSubtractadsub.exeAdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
UADUserMonADUserMon.exePart of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
XAdult_ChatAdult_Chat.exeAdult content dialler
XAdult_Chat1Adult_Chat1.exeAdult content dialler
NAdvanced Tools CheckADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
XAdvapiAdvapi.exeAdded as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS!
UAdvertising KillerAkiller.exeAKiller - pop-up stopper
UAd-watchAd-watch.exePart of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
NAELaunchAELaunch.exeAudio Applications Launcher for the Philips Acoustic Edge soundcard
?AeXSWDUsrAeXSWDUsr.exeAltiris Express NS Client Manager software. Is it required?
UAEZBProcaptezbp.exeIBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
UAFAFilterwindefault.exeAFAFilter - internet filter software
NAgentAgent.exeCyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
?AgenteRemupd.exePart of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar?
UAgfaCLnkAgfaCLnk.exeFor Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
YAGRSMMSGAGRSMMSG.exeIBM AMR modem driver
NAGSatelliteAGSatellite.exeProgram from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
Uahfp
or
ahfprog
ahfp.exeAdvanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
UAHNSDAhnSD.exeAhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
?AHNUEAHNUE.exe??
NAHQInitahqinit.exePart of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
Uaiepkaiepk2.exeAnother IE Popup Killer - pop-up stopper
NAIMaim.exeAOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
Xaimaol lptt01aimaol.exeNew variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
NAimingClickAimingClick.exeAimingClick from AimingTech. Web searching tool. Available via Start -> Programs
XAIM reminderAIM reminder.exeAdded as a result of the BUDDY VIRUS!
NAIMster??Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
YAiptek Graphics Tablet (USB)atwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
UAKillerakiller.exeBuyPin Advertising Killer - popup killer
UAlarm ManagerAlarm.app.exePalm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?AlarmWatcherAlarmWatcher.exeAssociated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?
NAlbum Fast StartABMTSR.EXEScanner software, not required for scanner to work
?Alcom PCL CaptureFMW_PCAP.EXE??
?AlcxMonitorAlcxmntr.exeRealtek AC97 Audio - Event Monitor. What does it do and is it required?
XAlevirAlevir.exeAdded as a result of the OPASERV.A VIRUS!
NAlexaAlexa.exe?Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs
?ALFY AccelleratorAlfyAC~1.exe??
YALiSndMgrALiSndMg.exeALi AC97 Sound driver
UAll Aboard Statusstswin.exeAll Aboard! Internet Connection Sharing status icon
XAll Sea screen saverTaskTray.exe"Free screensaver", installs lots of foistware. See here. Get rid of it
XAll Sea web linkFWLink.exe"Free screensaver", installs lots of foistware. See here. Get rid of it
UallSnapallSnap.exe"allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or 
Photoshop"
UAlogservAlogserv.exeFrom McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
?Alps Electric USB ServerMonserv.exeAlps Electric USB Server. What does it do and is it required?
UAlpsPoint
or
Apoint
Apoint.exeTouchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?ALServALServ.exeAltec Lansing AMS speaker related. What does it do and is it required?
NAltnetPointsManagerpoints manager.exeAltnet Points Manager. See here
UALUAlertALUNotify.exeNotification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
UAlwaysOnTopMakerAlwaysOnTopMaker.exeAlways On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop
NAME_CSArundll32 amecsa.cpl, RUN_DLLLoads ADSL modem Control Panel applet
NAmerica Online *.* Tray Iconaoltray.exePuts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
YAmonAMON.EXEMonitoring part of Eset's NOD32 virus-scanner
YAmonitoramon.exeTiny Personal Firewall
Xanbv32nabv32.exeAdded as a result of the TITOG.C VIRUS!
NAnnouncementsAnnclist.exeMS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
NAnntextAnntext.exeCaere Pagekeeper text annotation server
UAnother Internet Explorer Popup Killeraiepk.exeAnother IE Popup Killer - pop-up stopper
UAnti-keylogger checkantikey.exeAnti-keylogger - protects against keylogger programs monitoring your keystrokes
UAntiPopUpAntiPopUp.exeAntiPopUp for IE - pop-up stopper
?AntiVirusProtectionqumk.exe??
YAnVirAnVir.exeAnVir virus destroyer
Uanvshellanvshell.exeSystem Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
?anycom bluetoothftflauncher.exeAssociated with an Anycom bluetooth wireless card. What does it do and is it required?
UAolAcsDaemon1Acsd.exeAOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having 
to go through the procedure of signing back on manually
NAolFixAolFix.exeRun on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL  to run correctly. Not seen much any more and should only run once
XAornumaornum.exeInstalled along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
NAO Tray
or
AOTray
AOTray.ExeSystem Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Yapc_trayapc_tray.exePart of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
YAPC UPS StatusDisplay.exeAPC PowerChute Personal Edition status icon
?Apmsrv9xAPMSRV9X.EXEIntel AnyPoint Wireless II Home Network related. What does it do and is it required?
X<filename>App.exeAdded as a result of the WAXPOW VIRUS!
UAppconvAppCon.exeVital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established
UAppExtenderAppExtCB.exeLoads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
YApplicationmdmsetsp.exeAztech Labs modem driver
YApwheelApwheel.exeWheel support for an Alps mouse 
?ApvxdAPVXDWIN.EXEPart of Panda Anti-Virus. What is this part and is it required?
YApvxdwinAPVXDWIN.EXEPart of Panda Anti-Virus. Required to enable permanent virus protection
Xara-key<random>Added as a result of the ANTINNY VIRUS! where <random> is a random program name with random characters
NARCSolo RecoveryN/ABackup software by Computer Associates - no longer supported
XAritimaaritima.exeAdded as a result of the ARITIMA VIRUS!
YashMaiSvashmaisv.exeAvast! anti-virus software - probably E-mail protection based upon the name?
UAsioRegregsvr32.exe ctasio.dllASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
Nasp4trayasp4tray.exeSystem Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
YAspireTimeMachineacertmb.exeSystem recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
NasTrayAstray.exeVoyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
NAstroAstro.exeChecks for updates to Quicken on a system reboot
NASUSKeyV38SHELL.EXESystem tray Icon for quickly changing video modes
UASUS SmartDoctorVGAProbe.exeASUS video card fan/thermal monitor
UASUS TweakEnableastart.exeRestores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
NASWDPASWDP.exeMLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
XASWnkaswnk.exeAdult content dialler
?Ati2cwxxAti2cwxx.exeFor some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it 
NAti2mdxxAti2mdxx.exeFor ATI video cards. System Tray access to display mode changing
UAtiCwd
or
AtiCwd32
AtiCwd.exe
AtiCwd32.exe
Ati2cwad.exe
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
NATI GART Set-up UtilityAtigart.exeProgram that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
NAtiKeyAtiKey32.exe
atiptkad.exe
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display
UATI Launchpadlaunchpd.exeConvenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
UATIModeChangeAti2mdxx.exeSystem Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
UATIPOLAB
or
ATIPOLL
ati2evxx.exeATI External Event Utility EXE Module. This task can comsume lots of CPU resournces  on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
UAtiPTA
or
AtiPTAAA
or
atiptaxx
Ati2ptxx.exe
Atiptaxx.exe
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
UAtiQiPclAtiQiPcl.exeUsed for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
NATI SchedulerAtisched.exeComponent that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
UATISmartati2s9ag.exeATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
Xatisrc2windfind.exeAdult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
NATI Task ApplicationAtitkad.exeSystem Tray access to common display functions on ATI video cards. As above
NATI Task Application (Atikey)Atitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display
UATIX10atix10.exeATI Remote Wonder - PC wireless remote control
XATM Controladpn.exeAdded as a result of the MMS.A VIRUS!
NATnotesatnotes.exeLoads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
NAtomicaatomica.exeAtomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
UAtomicTimeATOMICTIME.EXEAtomicTime - utility that synchronizes your PC clock to an atomic clock
UAtrackatrack.exeNew feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
UATTBroadbandUpdateSAUpdate.exeBig Brother from Quest Software. System and network monitor
UATTRedUpdateAutoUpdate.exeAdditional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
XAttuneClientEngineattune_ce.exe"Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer". Not required - treated as adware
XAttuneContentUpdaterattune_cu.exeRelated to the above. All needed for the program to do its job properly
XAttuneDiscoveryattune_di.exeRelated to the above. All needed for the program to do its job properly
XAttuneSystrayattune_st.exeRelated to the above. All needed for the program to do its job properly
NaTuneratuner.exeaTuner - tweak tool for GeForce based graphics cards
Yatwtusbatwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
UAU AgentAUagent.exeAu Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
YAUCBPNPaucbnpn.exeAdaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
?AudCtrlRunDll32 AudCtrl.dll, RCMonitorAudio control panel?
NAudioHQAhqtb.exeFor Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
UAutobarautobar.exeConnect buttons on the keyboard for internet direct access, etc. on HP computers
NAutoEAAhqrun.exeFor Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
NAutoMate Task Service automate.exeTask scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
NAutomatically launches the United Devices Agent when you start your computerUD.EXEThe United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
UAutoSizerAUTOSIZER.EXEAutoSizer - utility that automatically maximizes windows when they're opened
XAutoUpdateraupdate.exeAupdate, Tinybar variant. Spyware
YAureal A3D Interactive Audiosa3dsrv.exeFor Aureal based 3D soundcards. A3D sound features won't work with this disabled
YAureal A3D Interactive Audio InitA3dInit.exeFor Aureal based 3D soundcards. A3D sound features won't work with this disabled
Xausvcausvc.exeAdded as a result of the AUTOUPDER VIRUS!
NAUTOPROPREGPROP.EXE
WMPADDIN.DLL
Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
NAutoSpell 5ASWATC32.EXEAutoSpell - spell checker
?Auto T Bar
or
autotbar
autotbar.exeFound in the /hp/bin directory on a HP PC?
Nautoupd (1)autoupd.exeRaxco Software Auto Update utility."Used to keep your software up-to-date"
Xautoupd (2)autoupd.exeVIRUS! - found in a folder of the same name
NAUXXTRAYau30setp.exeSystem Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
?AutoShutdownpssvc.exeUtility to fix vCard Export in MS Outlook 2000 - although why are these together?
YAvast32Astart32.exeAvast32 anti-virus - scanner
YAvast!ashserv.exeAvast! anti-virus software - probably the main scanner?
UAvconsoleEXEAvconsol.exeFrom McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
XAveoAttuneatmdlusr.exeRelated to AttuneClientEngine above
YAVG_CC
or
avgcc32
avgcc32.exeAVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
YAVG7_CCAVGCC.exeAVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
YAVGCtrlAVGCTRL.EXEBackground task of the AntiVir antivirus program which scans files transparently in the background
YAVG_EMCAVGEMC.exeAVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Yavgmsvr.exeavgmsvr.exeRequired for AVG Anti-Virus 7.0 to function
YAVG_RegCleanerAVGREGCL.exeAVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
YAvgserv9.exeAvgserv9.exeBackground monitoring program for AVG anti-virus
YAvMaiSrvAvmaisrv.exeAvast32 anti-virus - E-mail scanner
Yavpccavpcc.exeKaspersky Labs anti-virus
XAvril Lavigne - Muse<random filename>Added as a result of the AVRIL-A VIRUS!
YAVSCHED32AVSched32.exeAntiVir anti-virus from H+BDEV
NAvtrayAvtray.exeCommand Antivirus tray icon
UAVWUpd32AVWUPD32.EXEAntiVir updater. Useful, but can be run manually
Yavx communicatorxcommsur.exeAnti-virus part of BitDefender virus scanner/firewall
YAvxliveavxlive.exeBullguard or BitDefender antivirus
Yavxlniavxinit.exeAnti-virus part of BitDefender virus scanner/firewall
?Avxnews????
Nawhost32awhost32.exePart of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
Ya-winpoet-servicewinpppoverethernet.exeWinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
?AxFilterRundll32 AXFILTER.DLL,
Rundll32
??

Back to search

 Name/Startup ItemCommandComments
Xb3dBDEsecureinstall.exeB3d Projector - installed along with the KaZaA file sharing utility. Causes a program called "ZUPDATE.EXE" to periodically try and access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
Xb3dUpdateZupdate.exeSame as above but not installed via KaZaA
Xb9B9.exeFireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run"
Xbabeierundll32 cnbabe.dll,
dllstartup
CommonName Toolbar spyware. To uninstall see here
NBabylon TranslatorBabylon.exe"Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"
UBackgroundSwitcherbgswitch.exeBackground Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here
NBackpack UDFbpudfmon.exeBackpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk
UBackupExecSchedulerbesch.exeVeritas "Back Up My PC" software
NBackWebbackweb.exeAutomatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
NBackworkBackwork.exeBackwork trojan detector
UBACPI10bacpi10a.exeKnown as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
Nbacstraybacstray.exeBroadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
XBADDATEBADDATE.EXEAdded as a result of an unidentified VIRUS!
Xbargainsbargains.exe
bargainbuddy.exe
Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here
?Bart Stationstation.sbrtRelated to PeoplePC ISP. May be a dialler for dial-up accounts?
NBatchreg1N/APart of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here
UBatteryBarbatterybar.exeBatteryBar - displays battery usage, and the current percentage of battery power left
UBattery Scopebatmgr.exeMonitors battery levels on a notebook/laptop PC
XBatzBackBatzBack.scrAdded as a result of the BACKZAT VIRUS!
UBAUSBBAUSB.exeBoston Acoustics Audio, USB driver
UBayMgrDockApp.exeHot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices 
UBayswapbayswap.exeHot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
UBayswap2TbUpdate.exeHot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
NbbSysTraybbSysTray.exePhilips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"
Ubbuibbui.exeAOL DSL status monitor displaying a red/green icon indicating if you have a connection
UBCDetectbcdetect.exeBcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
YBCMDMMSGbcmdmmsg.exeBCM voicemodem driver. Required for dial-up if you have one of these modems
UBCMHalrundll32.exe bcmhal9x.dll, bcinitBlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
YBCMSMMSGBCMSMMSG.exeBCM voicemodem driver. Required for dial-up if you have one of these modems
UBCTweakbctweak.exeBlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
NBCWipeTMbcwipetm.exeBCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed
YBDMConBdmcon.exeBitDefender antivirus
NBearSharebearshare.exeBearShare file sharing client. Versions known to include spyware - see here
?BEEIbeei.exe??
?Belsta.exeBelsta.exeConfiguration tool for Belkin wireless network cards. Required to change the card’s configuration. Is it required for correct operation once the confuiguration is changed?
XBenadril Alert Toolbenadrilalert.exePlug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
Ybgbullguard.exeBullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster
Nbgsmsndbgsmsnd.exePrinter driver to generate PDF files from any program
NBHOCopBHOCop.exeZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware
NbigfixBIGFIX.EXEBigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet® Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog
UBigPond ToolbarbpumTray.exeTelstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier"
NBillminderBillmind.exeCan be setup in Quicken to remind user of due payments. Available via Start -> Programs
XbingdianBingdian.vbsAdded as a result of the BINGD VIRUS!
XBiosBios32.exeAdded as a result of an unidentified VIURS!
YBitDefender Communicatorxcommsvr.exeBitDefender antivirus
UBitDefender for MSN Messengermsnmon.exeBitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually
Ybitdefenderliveavxlive.exeMain program of BitDefender virus scanner/firewall
YBitDefender Live! Initbdinit.exeBitDefender antivirus
UBitDefender_P2P_StartupBitDefender_P2P_Startup.exeBitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually
YBitDefender Scan Serverbdss.exeBitDefender antivirus
NBitWare Print Monitorbwprnmon.exeFaxServe network fax software
Nbjcfdcdf.exeBroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
NBJ Status Monitor 5xxCJSTRxx.EXECanon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
NBlackICE PC Protection
or
BlackIce Utility
blackice.exeLoads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
NBlazeChangerFBZPaper.exeEmber graphic file viewer, manager, and touch-up system
UBlockAds
or
blads
blads.exeA Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
NBlockTrackerBlockTracker.exeIf present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
Xblssblss.exeCBlaster trojan/dialer/downloader
NBLSTAPPblstapp.exePuts access to Creative's BlasterControl in the System Tray
?BlueToothAuthentication AgentRunDLL32.exe irprops.cpl, BluetoothAuthenticationAgentUsed for a bluetooth adapter?
NBMail InstallationFTP_back.exePart of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not
UBMMGAGRundll32 PWRMONIT.DLL, StartPwrMonitorDisplays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
?BMMLREFBMMLREF.EXERelated to IBM Thinkpad Power Management Utility. What does it do and is it required?
UBMO MasterCard WalletEWALLET.EXEThe wallet conveniently stores billing, shipping and payment information on your PC
NBMupdateBMupdate.exeRelated to BookmarkCentral below. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install
XBndt32Bndt32.exeAdded as a result of the LACON VIRUS!
XBnexe<random filename>Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
YBOCleanautostartBoclean.exeNSClean's BOClean anti-trojan software
UbombshelBOMB32.EXEPart of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
XBonzi Buddy??Spyware - read here for information and here for removal instructions
XBookedSpacebs2.dll,DllRunAdware, related to the Remanent parasite
NBookmarkCentralBMLauncher.exeBookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use"
UBoost XP Servicebxservice.exeBoost XP from Systweak - WinXP tweaking utility 
Xbootboot.exeAdded as a result of the ELEM VIRUS!
XBootLoaderBootLoader.exe.vbsAdded as a result of the WATERWORKS VIRUS!
XBoot ManagerNjgal.exeAdded as a result of the KILO VIRUS!
UBootStatusBOOTST~1.EXEVisual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day.  Once you exit it, it has no more effect on resources
NBose Wave/PC Monitorwavepcmonitor.exeSystem Tray access for this system (more info on the system here). Available via Start -> Programs
Ubpcpost.exebpcpost.exeMS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
UBPKbpk.exeBlazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
UBQTray.exeBQTray.exeSystem Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
XBrasilBrasil.exeAdded as a result of the OPASERV.E VIRUS!
NB.Readerremin.exeBirthday Reminder 5.0 - as the name implies
YBrindys BriTrayBRITRAY.EXEMain process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired
NBroadband Wizardbbwiz.exeStarts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs
NBrowseProxyFindService.exeActual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you"
Xbrowser aidbrowseraid.exeBrowserAid/BrowserPal foistware
YBrowser Hijack Blasterbhblaster.exeBrowser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings
UBrowser LauncherCommandr.exeLogitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
XBrowser Paladblck.exeBrowserAid/BrowserPal foistware
NBrowserWebCheckloadwc.exeChecks to make sure that IE is still your default browser
NB'sCLiPBSCLIP.exeCD recording utility that comes with a lot of CDR/CDRW drives and isn't required
XBsoft lppt01Bsoft.exeNew variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
XBsx3Rundll32.exe bs3.dll, DllRunBookedSpace parasite variant
?btinstbtinst.exeAssociated with an Anycom bluetooth wireless card. What does it do and is it required?
?bttraybttray.exeAssociated with an Anycom bluetooth wireless card. What does it do and is it required?
YBTUSRBDGFBtUsrBdg.exeUsed with a Mitsumi USB Bluetooth adaptor
NBuddyizerBuddyizer.exePart of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
Ubugwatcher servicebugwatcher.exeBugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures
?BuildBU
or
bldbubg
bldbubg.exeFound on a Dell machine??
UBulldog Serviceupsd.exeBelkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
YBullGuardmgui.exePart of Bullguard antivirus
YBullGuardInitAVXINIT.EXEPart of Bullguard antivirus
UBullGuard Updateavxlive.exePart of Bullguard antivirus. Leave enabled unless you manually update virus definitions
YBullGuard XCommXCOMMSVR.EXEPart of Bullguard antivirus
?BullsEye TrackerBeTrack.exeBullseye - intelligent research assistant
NButtonKeyButtonKey.exeCyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut
UButton Serverbttnserv.exeFound on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required
UBuzof.exebuzof.exeBuzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes"
NBuzmeBmui.exeBuzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
XBymer.ScannerWininit.exe
Msinit.exe
Added as a result of the BYMER VIRUS!

Back to search

 Name/Startup ItemCommandComments
UC2KCYB2K.EXECYBERsitter 2000 or 2001 -  anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
NCachemanCacheman.exeFreeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
?CACStartercacstart.exe??
UCaddais BackupOnDemandBODMon.exeCaddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"
UCADScads.exeCyber Sentinel internet filtering software
NCAgentCAgent.exeAbbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
XcAgOu<filename>.htaAdded as a result of the KAKWORM VIRUS!
NCahootWebcardCahootWebcard.exe"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed
?CallBumpingcbpopw.exe??
NCallControlftctrl32.exeFaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
NCal Reminder Shortcutcalrem.exeProduces a pop-up reminder of events scheduled using the MS Office Calendar
NCamCheckCamCheck.exeNuCam camera software related
NCamio Viewer xIXApplet.exeImage viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
?CamMonitorhpqcmon.exeFrom HP and related to digital imaging
NCanadaCanada.exeKnown to be a dialler - but is it maliscous or clean?
NCanarycanary-std.exeCanary monitoring program. Keylogger, monitors all computer activity
NCanon Printer Monitor BJCxxxCjstlst.exeTrayicon for Canon printer. xxx denotes model. Available via Start -> Programs
NCapfaxcapfax.exePhoneTools fax software
NCapture Express 2000capexp.exeCapture Express - screen capture utility
NCard MonitorREGCNT09.exeFor the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
UCARPservicecarpserv.exeAssociated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example
?CasAgntCasAgnt.exeRelated to a Casio PDA - but what does it do and is required?
UCBWAttnCBWAttn.exeRequired for Bitware to answer incoming faxes, can cause sleep mode problems
UCBWHostCBWHost.exeRequired for Bitware to answer incoming faxes, can cause sleep mode problems
?CBWUserCBWDial.exeAssociated with Bitware that integrates fax, voice, pager, and data communications on your desktop
XCC2KUIcomet.exeComet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more information and for the uninstall procedure
YCcAppccApp.exePart of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this
NCcdecoderundll32.exe streamci,
StreamingDeviceSetup
Part of the closed caption decdoder/MS VBI codec. Should only run once
YCCDoctorLogonTestingccdoctor.exeChecks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product
YCcEvtMgrccEvtMgr.exePart of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via CcApp and was not required as a seperate entry but a recent update changed this
YCcPxySvcCCPXYSVC.exePart of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall
Xccregexplorer.exeAdded as a result of the ZCREW VIRUS! Note - this is not the valid explorer.exe
YCcRegVfyccRegVfy.exePart of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"
YccSetMgrccSetMgr.exePart of Norton AntiVirus 2004. What does it do?
N??CDANTSRV.exeC-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually
NCDInterceptorcdi.exeCD indexer for measuring the speed of CD players
NCDTrayCDTray.exeOn HP PCs, this is the small CD icon next to the time
?CeEKEYCeEKey.exeToshiba Satellite E-Key related. Is it required?
?CeEPOWERcepmtray.exeToshiba power management related. Is it required?
XCekirge<path to worm>Added as a result of the KERGEZ.A VIRUS!
?CEPAwsot.exe??
NCFDCFD.exeBroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
Ycfgintprcfgintpr.exeConfiguration Interpreter - part of Tiny Personal Firewall V4
Ncfgwizcfgwiz.exeIntroduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
?cFosInst_Checkcfosinst.exeDSL Modem driver related. What does it do and is it required?
UCGServercgserver.exeAssociated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs
XCgtask Servicescgtask.exeAdded as a result of the LALA.B VIRUS!
UChamClockChamClock.exeChameleon Clock - system tray clock replacement
?ChangeLineschngline.exe??
NCheck for One Touch Updatewiseupdt.exeChecks for updates for Visioneer OneTouch scanners
UCheckItToolBox.exeCheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify
UCheck Messengercmesseng.exeCheck Messenger from Qchex.com - program that helps you manage the activity of your Qchex account
YCheckMsgPlusMsgPlusH.dll,
VerifyInstallation
Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.
?checktimect.exeFound in the \HPSelect\Frontend\ directory on a HP machine. What is it's purpose and is it required?
UCherryKeyManKeyMan.exeMultimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys
NCHKADMINCHKADMIN.EXECompaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"
XChokeChoke.exe-blahhAdded as a result of the CHOKE VIRUS!
UCHotKeymhotkey.exe
or
MK9805.EXE
Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
NChristmas Music PlayerTTEST6.EXE"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
?ChromeMarkkeysh.exeRelated to this. Don't know what keysh.exe does though and if it's required
?ChronitelInitTVCHTVINIT.EXE??
XCiaBackdoormsldr.comAdded by a VIRUS!
NCIJxP2PSERVERCIJxP2PS.EXECompaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7
NCISrvr ProgramCISRVR.EXERelated to internet setup on Compaq PC's
NCitiVANCitiVAN.exeOption from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again
YCjstcomCjstcom.exeCanon printer BJ status language monitor
NClick Tray CalendarClickT~1.EXEClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc
?CleanEasyImgcleanall.exe??
UCleanSweep Smart Sweep- Internet SweepCsinsm32.exeAutomatic logging of installs from Norton CleanSweep - available via Start -> Programs
NCleanSweep Useage WatchCSUSEM32.EXEQuarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
NCleanupONICTASK.EXEInternet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet
?CleanupProgramcleanup.exeIn a C:\Sonysys folder - Sony Vaio related?
UClickoffClickoff.exeClickoff automatically dismisses annoying dialog boxes
NClick Radio Tunerclickr~1.exeClickRadio - subscription service playing radio music via the internet
XCLICKTHEBUTTONCTB.EXEPrice comparison based spyware
NClient Access Check Versioncwbckver.exePart of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
?Client Access Express Welcomecwbwlwiz.exeWelcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
NClient Access Help Updatecwbinhlp.exeClient Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
NClient Access ServiceCwbSvStr.ExePart of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?Client agent for ARCserveW95AGENT.EXEPart of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?
XClientMan1mscman.exeSpyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
NClik Status Monitortoolsclickstat.exePart of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
NClipbook ServiceClipsrv.exeSupports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
NClipMate5xClipMt5x.exeClip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
NClipmate6CLIPMT60.EXEClip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
NClipomaticClipomatic.exeMike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data
NClipsrvClipsrv.exeSupports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
NClipTrakkerClipTrakker.exeCliptrakker - clipboard extender
UCLMFrontPanelclmpanel.exeSystem tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost
?clnwallrundll.exe setupx.dll, InstallHinfSection ..\delwall.inf??
XClockSyncSync.exeClockSynck - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available
UClockWiseCLOCKWISE.EXEClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync
NCloneCD
or
CloneCDTray
CloneCDTray.exeSystem tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray
UCloneCDElbyCDFLElbyCheck.exeFrom Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
?Clotusorgreg0prtStart.exe Orgprt.exeLotus SmartSuite related. In a Lotus\OrgReg folder. Unclear what exactly it does?
XClrSchLoaderLoader.exeClearsearch variant of IGetNet
?CmaudioRundll32 cmicnfg.cpl,
CMlCtrlWnd
Control panel for C-Media based soundcards - often included on popular motherboards with in-built audio?
XCmdcmd32.exeAdded as a result of the P2P.TANKED VIRUS!
XCMEcme.exePart of Gator advertising spyware - see here for removal instructions
UC-Media Echo ControlEchoCtrl.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer (below) 
NC-Media MixerMixer.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
XCmeSYSCMEsys.exePart of Gator advertising spyware - see here for removal instructions
XCmeUPDCMEupd.exePart of Gator advertising spyware - see here for removal instructions
?CMGrdianCMGrdian.exeOne of the McAfee shared components. What does it do and is it required?
UCMPDPSRVCMPDPSRV.EXEPrinter Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more." Installed with some Compaq and Lexmark printers
XN/ACNBABE.EXEAppears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
Ncnetkontiki.exeKontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
XCnsMaxInternat.exeAdded as a result of the POINTEX VIRUS!
XCnsMinRundll32.exe CNSMIN.DLL, Rundll32Appears as "Chinese Keywords" in the Add/Remove programs box and symptoms are a whole list of rubbish URL's in your Internet Explorer history. Clear history does not remove these. For more information see here
NCnxDslTaskBarCnxDslTb.exeConnexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
UCodename Dashboarddashboard.exeCodename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"
XColdlife -icmpSystray.exeAdded as a result of the FSERVE VIRUS! Note - this is not the real SysTray.exe
Ucolorealcoloreal.exeMakes colours sharper and brighter, but will only work with coloreal capable monitors
NColorific Control PanelHgcctl95.exeFrom E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor
NCOM-IPCOMIP.EXECOM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
XComcastSUPPORTtgkill.exeComcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
XCOMCFGcomcfg.exeAdded as a result of the TOADCOM.A VIRUS!
UCOMDRV32svdhost.exeOrvell Monitoring 2003 - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/
XCommand (1)system.exeAdded as a result of the GATECRASH.A or GATECRASH.B VIRUSES!
XCommand (2)Gotit.exeAdded as a result of the TITOG VIRUS!
NCommCtrcommctr.exe"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs
UCompaq AlerterCPQAlert.exeCompaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
NCompaq Computer Corp SCCenter ModuleSCCENTER.EXEFor Compaq PC's. Part of Backweb
?Compaq Computer SecurityRundll32.exe SECURE32.CPL, Service??
NCompaq DMIcpqdmi.exeCompaq version of the Desktop Management Interface
?CompaqHW Comp Managercpqhcm.exeRunning on a Compaq laptop - any ideas?
NCompaq Internet Setupinetwizard.exeFor Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
UCompaq Knowledge Centersilent.exe & matcli.exeFor Compaq PC's. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide.
NCompaq Message ServerCOMPAQ-RBA.EXEApplies to CPQBootPerfDB below as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems
UCompaq PK Daemoncpqkl.exeFor Compaq laptops for programming user configurable keys. Not required unless you use them
NCompaqPrinTrayprintray.exePuts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
NCompaqSystraycpqpscp.exeCompaq System Tray icon
NCompaq Video CD Watcher??For Compaq PC's. MPEG viewer
XCOM Service (1)mscom32.comAdded as a result of the BEASTY.H VIRUS!
XCOM Service (2)msynvr.comAdded as a result of the BEASTY.G VIRUS!
XCOM Service (3)msjclh.comAdded as a result of the PLUX VIRUS!
NCOMSMDEXEcomsmd.exe3Com tray icon
XComTry Web Searcherwstray.exeComtry MP3 Downloader related - spyware
XConfigservice.exeAdded as a result of the ISRAZ.B VIRUS!
XConfig LoadationiEEexplore.exeAdded as a result of the SDBOT.H VIRUS!
XConfig LoadatiorinI3Explorer.exeAdded as a result of the SDBOT.H VIRUS!
XConfig Loader (1)svchosl.exeAdded as a result of the GAOBOT.P VIRUS!
XConfig Loader (2)sysldr32.exeAdded as a result of the GAOBOT VIRUS!
XConfig Loader (3)scvhost.exeAdded as a result of the GAOBOT.AE VIRUS! Note - this is not the valid svchost.exe as described here
UConfigSafeCFGSAFE.EXE
or
AUTOCHK.EXE
ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
NConfigServicesConfig.exePart of initial setup on a Compaq PC
XConfiguration Loadedwupdated.exeAdded as a result of the MOEGA VIRUS!
XConfiguration Loader (1)aim95.exe
cmd32.exe
IEXPL0RE.EXE
iexplore.exe
loadcfg32.exe
MSTasks.exe
Added as a result of the LOADCFG or SDBOT. Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas 
the valid "iexplore.exe" (IE) resides in C:\Program Files
XConfiguration Loader (2)syscfg32.exeAdded as a result of the SDBOT.B VIRUS!
XConfiguration Loader (3)service5.exeAdded as a result of the GAOBOT.AF VIRUS!
XConfiguration ManagerCNFGLD32.EXE
Cnfgldr.exe
Added as a result of the SDBOT VIRUS!
NConfiguration UtilityCONFIG.EXEControls linksys wireless connection. Available from the Desktop
NConfiguration WizardCfgwiz32.exeAdded as a result of a variation of the HACKTACK VIRUS! Not to be confused with the valid MS "ISDN Configuration Wizard" (Cfgwiz32.exe) in C:\Windows\System
NConmgrconmgr.exeStarts Winfax pro at startup
UConMgr.execonmgr.exeConnection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut 
XConnect2Partyconnect2party.exeAdult content dialler
NConnectionManagerCManager.exeSBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
?Contactecontacte.exeSome kind of driver?
XContentServicewinservn.exeHomepage hijacker
XContinueInstallbpsinstall.exeBrowserAid parasite
NControlCentreTrayXWCTray.exeSystem Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc
NControllerWFXCTL32.EXEFrom Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Ncontrol panel (1)smctrlw.exeSystem Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
XControl Panel (2)System.exeAdded as a result of the DANI VIRUS!
UCookie Cop 2CookieCop.exeCookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
UCookieJarCookiejar.exeCookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
UCookie PalCPBRWTCH.EXEKookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
UCookiePatrolCookiePatrol.exeCookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
UCookieWallcookie.exeCookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
UCool Deskcdesk.exeCool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you
UCoolSwitchtaskswitch.exeALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
UCopernicPerUserTaskMgrCopernicPerUserTaskMgr.exeAutomatic tasking feature of Copernic Pro multi-search engine tool
NCorelCENTRAL 10I_26dadCC.exeCorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs
NCorel Colleagues & Contacts Reminderscffrem.exeCorel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office
NCorel Desktop Application Directordadx.exeThe Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
NCorel Family & Friends remindersCFFREM.EXECorel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic
NCorelMedia FoldersIndexer8MFindexer.exe
MFINDE~1.EXE
Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
NCorel Registration
or
Corel Registration Reminder
Remind32.exeIf you don't want to register Corel products and be reminded about it every 2 weeks disable it
NCorel ReminderNAVBROWSER.EXEIf you don't want to register Corel products and be reminded about it every 2 weeks disable it
XCoreSrvcoresrv.exeSome IRC trojans/worms use this - see here for more information
?CORESYScoresys.exe??
NCorrectConnectCConnect.exeBroadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
NCountrySelection
or
Country Select
pctptt.exeCountry selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
Xcouponicacouponica.exeAdware - see here
?Coupon Offers????
UCP32NOTCP32BTN.EXEFor the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
?CPA9P2PSERVERCPA9P2PS.exeFound on a Compaq Presario but what is it?
UCPATR10CPATR10.EXEDritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast
UCPBrWtchCPBrWtch.exeKookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
YCPD_EXECPD.EXEFirewall bundled with McAfee VirusScan 6.*
Xcpntmgcwincomp.exe
winmgts.exe
Remote-control trojan from Electronic Group - see here
?CPortPatchcppatch.exeCPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?
YCPQAcDcCPQAcDc.exeCompaq PowerCon power management software for laptops
UCPQAlertCPQAlert.exeCompaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
NCPQBootPerfDBCPQBootPerfDB.EXESee Compaq Message Server above
YCPQCalibCPQCalib.exeCompaq PowerCon power management software for laptops
NCPQDFWAGCpqDfwAg.exeFor Compaq PC's. Runs Compaq diagnostics on every boot
UCPQEASYACCcpqeadm.exeFor Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
Ucpqeauicpqeaui.exeFor Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
Ucpqekkcpqek.exeFor Compaq PC's. Easy Access button support for the keyboard
UCPQInet Runtime ServiceCpqInet.exeFor Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers
NCPQINKAGENTcpqinkag.exeThat is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
Ucpqnscpqnpcss.exeRelated to Compaq.Net - not required if you don't use that
YCPQSTUTFIXstutfix.exeFor Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton
UCPUcoolCpucool.exeProgram to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
XCPU Managercpumgr.exeAdded as a result of the PANDEM.B VIRUS!
Xcqlygworld_cup_.batAdded as a result of the WCUP VIRUS!
?CQSCP2PS??"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
?CQSCP2P SERVER??"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
Ucracked_windows1cracked_windows1.exeCracked Windows popup killer
NCrazyTalk Serverundll32.exe CrazyTalk.dll, DIIServeMediaFileCrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS
NCreateCDCreatecd.exeAdaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
NCreateCD50Createcd50.exeAdaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
NCreative AGP Wizardagpwiz.exePart of Creative's BlasterControl
NCreativeDiscNotifierCTNOTIFY.EXEFor Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel
XCreative.exeCreative.exeAdded as a result of the PROLIN VIRUS!
NCreative LauncherCTLauncher.exeFor Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
UCreativeMixerCTMIX32.EXECreative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon
NCreative PCI Audio Configuration Utilitystarter.exeSystem Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer
NCreative Service for CDROM AccessCtsvccda.exeResident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
NCriticalUpdateWucrtupd.exeMS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site
XcronosMARCO!.SCRAdded as a result of the OPASERV.G VIRUS!
?Crystal 3D Audio ControlCWD3DSND.EXECrystal 3D Audio sound driver. Is it required?
?csccsc.exe??
UCSINJECT.EXECSINJECT.EXEPart of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes."
XCSRSSCSRSS.EXESearch page hijacker, redirecting to http://www.search-aide.com/. Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
XCSRSWIN<random filename>Added as a result of the WINSHELL.50 VIRUS!
XCSRSX<random filename>Added as a result of the WINSHELL.50.B VIRUS!
UCSS_CentralCSS_1631.EXECSS Communication Agent (95 Host) from Command Software Systems "CSS Central™ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console."
YCSScheduleCheckSCHWIZEX.EXEPart of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
XcsssCsss.exeAdded as a result of the BALICK VIRUS!
Yctct.exect.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it
NCTAVTrayCTAvTray.exeFor Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ
NCTDVDDetCTDVDDet.exe
CTDetect.exe
Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
Uctfmon (1)ctfmon.exeCTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
Xctfmon (2)taskmgr32#.exeAdded as a result of the SOWSAT.B VIRUS! where # is a number from 0 to 9
Xcftmon32taskmgr#.exeAdded as a result of the SOWSAT.C and SOWSAT.J VIRUSES! where # is a number greater than or equal to zero
NCTHELPERCTHELPER.EXECTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
?CTPDPSRVCTPDPSRV.EXEPrinter driver (in the WINDOWS\System32\spool\DRIVERS\W32X86 folder). Is it required?
NCTRegRunCTRegRun.exeFor Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative
NCTStartupCTEaxSpl.exeSplash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard
UCTsysVolCTSYSVOL.exeCreative sound card volume controls
?cttdpsrvcttdpsrv.exe??
YcuagentExeCuagent.exeCommand Antivirus related
Xcuocuo.exeAdded as a result of the BUGBEAR VIRUS!
NCursorXPCursorXP.exeCursorXP from Stardock - tool for creating mouse cursors
NCuteMXCuteMX.EXEFile sharing utility
YCVPNDcvpnd.exeSub-system used by Cisco VPN client for making a connection to a remote IPSec server
Ncwbckvercwbckver.exePart of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
Ncwbinhlpcwbinhlp.exeClient Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
Ncwbsvstrcwbsvstr.exePart of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?cwbwlwizcwbwlwiz.exeWelcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
?Cwcdschk.exeCwcdschk.exeIBM Thinkpad related?
NCXMonHpi_Monitor.exeAutodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
NCybercyberchk.exeLikely to be found in a directory called "Belkin" and pops up a dialog box saying "It's time to Clean your Laser lens", with the window title "PMC Laser Lens", referring the CD/CDRW/DVD drives. If you find anything more please let me know
NCyberMedia AgentCMAGENT.EXEPart of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled
UCyber Trioshowmode.exeFrom G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs
XCyberWolfCyberWolf.exeAdded as a result of the CYDOG.C VIRUS!
XCyDoor
or
CydoorUpdate
CD_Load.exeAdware. Check here for information about Cy-Door and here for a program that can remove it
NCyphTrayCyphTray.exeCypherus - encryption software

Back to search

 Name/Startup ItemCommandComments
ND066U UtilityD066UUTYTWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software
UD4D4.exeDimension 4 - network time synchronization software
YDadAppdadapp.exe"DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell
NDACONFIGEXEdaconfig.exe3Com NIC Diagnostics. Available via Start -> Programs
NDaemon (1)DAEMON32.EXEPre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
UDaemon (2)
or
DAEMON Tools-1033
Daemon.exeDaemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
NDaily Plannerdayplan.exeDaily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them
NDapDAP.exeDownload Accelerator Plus from SpeedBit - download manager/accelerator
XDarkDevil.Grasiele.BRGrasiele.VBSAdded as a result of the LEMBRA VIRUS!
?DashIEN/ACould be related to "Dash Power Shopping" tool bar in IE?
XData789Regedit.exe ....data789.tmpHomepage hijacker
NDataCachingFlashKsk.exeSmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon
?DataLayerDataLayer.exeNokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." What does it do and is it 
required?
NData LifeGuardBACKWE~1.EXEData LifeGuard diagnostic tools for Western Digital's series of hard drives
NData LifeGuard LifeLine Lite installerDLGLI.EXEBackweb installer - see here
NDataViz MessengerDvzMsgr.exeDataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts"
XDatcheckdatcheck.exeAdded as a result of the KEYPANIC VIRUS!
?DatecheckerN/ACould be related to this?
XDateMakerIntlDateMakerIntl.exePremium rate dialler also referred to as the PORNSPA.F VIRUS!
XDate Managerdatemanager.exeDate Manager - calender program. Spyware/adware based provided by The Gator Corporation
NDAupdateDAupdate.exeDoubleAgent content manager
?DAW9532.exeDAW9532.EXELoaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required?
UDayTodayDAYTODAY.EXEDayToday from RoboMagic Software Corp. Displays the date on the taskbar
UDAZEL Delivery AgentDcDaemon.exeControl and send documents, etc, to any destination - see here
N??dbserv.exeDatabase Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
NDCfssvcdcfssvc.exeAssociated with digital cameras and known to cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. It is even money if you will be able to read the files off the camera without this
XDDCActiveMenuDDCActiveMenu.exeAs below
XDDCM
or
DDCMan
DDCMan.exeDigital Distribution Channel from Wild Tangent - adware
Xddeprocddeproc.exeAssociated with Webcelerator - spyware. Read eAcceleration's privacy statement here
?DDTN/A??
NDeadAIMrundll32.exe DeadAIM.ocm,
ExportedCheckODLs
DeadAIM - feature enhancing product for AOL's Instant Messenger program
XDebugDebugW32.exeAdded as a result of the GUBED VIRUS!
XDefault web browserIexpIore.exeAdded as a result of the OBLIVION.B VIRUS! Note - don not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L"
Udefwatchdefwatch.exeDetects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
UDelay
or
Delayrun
delayrun.exeOn HP PCs this program is used to help prevent conflicts or timing issues on fast computers
NDell AlertDAMon.exe"Dell Alert" utility, that's supposed to make interaction with Support easier
?DellDMIdelldmi.exePossibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards?
UDELLMMKB
or
DellTouch
DELLMMKB.EXEMultimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
NDellSCdellsc.exeDell Solution Center - web-based troubleshooting tools and educational offerings
?DelTmpDelTemp.exeAdded to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?
NDeltTraydeltray.exeSystem Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel
?demondemon.exePart of the French Wanadoo ADSL extense pack. What does it do and is it required?
UDepFrezfrzstate.exeDeep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example
?Description of Shortcuts*.exe* seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search)
XDesiredesires.exeAdult content dialler
NDeskColorDESKCOLOR.EXEProvides transparent icon text backgrounds and coloured icon text
NDeskflagDeskflag.exeDeskFlag - animated USA flag on the desktop
UDesksite CMAcma.exeDesksie CMA siftware - "retrieves new content from the Desksite Data Center"
NDesktop ArchitectDATRAY.EXEDesktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc
Ndesktopmgrdesktopmgr.exeSynchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry"
NDesktop PlantAZARE10S.PLTVritual plant from here - this version is an Azalea, there are others so the filename may be different
?desk-top-servicedesk-top-service.exe??
NDesktop WeatherTHE WEATHER CHANNEL.exeDesktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc
UDesktopXDESKTOPX.EXEA program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking
Ndeskupdeskup.exeAdds Iomega Zip drive icons to the desktop
Udetect (1)idetect.exeiNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled
?detect (2)turbodetect.exe??
NDetectordetector.exeUSB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software
UDEventAgenteventagt.exeDEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
XDevicePathProyecto1.exe
Root.exe
Added as a result of the GRUEL VIRUS!
Udevldr16devldr16.exeAssociated with some Creative Labs sound cards.  Provides audio support for DOS applications.  Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
?Devlog????
?dhcpagntdhcpagnt.exeIntel DSL modem driver. Is it required?
Ndiagentdiagent.exeSystem Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
XDialerrundll32.exe msa32chk.dllUnidentfied malware
NDialog Box AssistantOSDEx.exeDialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders
NDialog HelperPDDLGHLP.EXEDialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
NDigiGuideCLIENT.EXE
or
client01.exe
TV guide and reminder
NDigital Dashboarddevgulp.exeFor Compaq PC's. Loads Digital Dashboard options
NDigital Line DetectDLG.exeDetects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
NDigital River eBotdownlo~1.exeDigital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here
NDigitalWizardISWizard.exeInstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
NDigitalWizard MonitordwMon.exeInstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
NDIGStreamdigstream.exeDIGStream Cache Manager - part of ESPN Motion that periodically checks for new videos periodically, downloading them in the background is available. Starting ESPN Motion starts digstream automatically
UDimension4d4.exeAtomic clock synchronisation freeware - starts-up, adjusts the system clock, then shuts down
XDino3dino3.exeRelated to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
XDir1caKeAdded as a result of the CAKE VIRUS!
NDirectCDDirectCD.exeDirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
UDirect UpdateDUControl.exeDirectUpdate dynamic DNS updater
UDIRECTVDSLDirectvdsl.exeStarts DirectTV DSL modem at boot up. Can also be started manually
XDirectX (1)ddhelp32.exeAdded as a result of the BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe
Xdirectx (2)Directx.exe
Sqlexploit.exe
NTCmd.exe
PipeCmd.exe
Added as a result of the SDBOT.D VIRUS!
XDirectX (3)DirectX.exeAdded as a result of the BLAXE VIRUS!
XDirectX64DirectXset.exeAdded as a result of the BROWNEY.A VIRUS!
XDirectX For Microsoft Windowsdtxservice.exeAdded as a result of the PROGENT VIRUS!
UDirkeyDirkey.exeDirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders 
?Disable EHCInousb20.exe??
NDisc Detector (1)CtNotify.exeFor Creative sound cards. Detects when you insert a CD, DVD, etc
?disc detector (2)qnetquestnotifty.exe??
?discovegdiscoveg.exe??
NDiscoverDeskshopDeskshop.exeDiscover Deskshop - single use "virtual" credit card
?DISKMON.EXEDISKMON.EXE??
NDisknagdisknag.exeDell program that reminds you to make your  backup diskettes
NDisplayTrayIconTrayIcon.exeSystem Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display
NDistiller Assistant 3.01DISTASST.EXEFrom Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
Udistributed.net clientDNETC.EXEDsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses
YDitdit.exe"Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found
NDiTask.exeDiTask.exeAssociated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs
NDJREGFIXregedit /s c:\hp\djregfix.regDJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers
UDkServiceDkService.exeFrom Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. Used to schedule defragmenting on a regular basis and not required if you do so manually on a regular basis
XDkware lptt01dkware.exeNew variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
?dkzzixmdkzzixm.exe??
Ydlatfswctrl.exeDrive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
NDlaTrayDlatray.exeOn HP PCs, tray icon for dla above
Xdlderdlder.exeAdvertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus
XDlDir1caKeAdded as a result of the CAKE VIRUS!
NDLF_00000B00Vcdlf.exeKnown to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown
?DLForcerExeDLForcerEXE.exe??
NDLGDLGCHBW.exeBackweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
NDLHelperEXEWATCH.exeDownload helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
ND-Link AirPlus DWL-650+ UtilityWLANMON.exeD-Link Air Plus Wireless PC modem connection monitor
XDLL32dllmem32.exeAdded as a result of the KWBOT.E VIRUS!
XDLL Service Manager<path to worm>Added as a result of the RPCBOT.F VIRUS!
?DLTdlt.exe??
Xdlucadluca.exeAdult content dialler - see here
NDMILDRdmildr.exePart of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs 
NDMISLDMISL.EXEDMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
NDMISLAPPDMISLAPP.exeDMI similar to above
XDnarDnar.exeUnknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here
YDNE Binding Watchdogrundll dnes.dll, DnDneCheckBindingsDeterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
YDNE DUN Watchdogrundll dnes.dll, DnDneCheckDUN13Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
?DNS2GoClientdns2goclient.exeDNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?
?DNXVCdnxvc.exe??
XDocTorDoctor.exeAdded as a result of the DOTOR VIRUS!
NDocuMagix InitPWATCH.EXEPaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
?Doingdoing.exe??
UDon't Panicdontpanicdemodp.exe30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite."
UDon't Panic Pop-Up Stopperdpps2.exePop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
?Dosbat????
NDownload Accelerator Plus 5.0DAP.exeDownload Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is "adware" based
XDownload PlusDownloadPlus.exeDownloadPlus parasite - opens pop-up adverts
XDownloadWaredw.exeDownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
NDownload WonderDownloadWonder.exeDownload Wonder from Forty Software. Download manager for resuming downloads, amongst other features
NDPAgntDPAgnt.exedigitalPersona fingerprint scanner
YDpcnavdpcnav.exeDirecWay from DirectTV satellite based high-speed internet access
YDPCProxyLoadOnStartupdpcstart.exeDirecWay from DirectTV satellite based high-speed internet access
YDpcstartdpcstart.exeDirecWay from DirectTV satellite based high-speed internet access. Proxy software
Udpps2dpps2.exePop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
?DragDropDragDrop.exe??
NDrag'n'Drop_AutolaunchAutolaunch.exeIomega HotBurn - CD-RW burning software
?dregfixph_finder.exe??
NDriveLEDOODLed.exeO&O DriveLED - displays your HDD LED on your monitor. Start manually
XDriver32Scam32.exeAdded as a result of the SIRCAM VIRUS!
NDriveSelectdriveselect.exeDVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs
UdRMON SmartAgentSmartAgt.exePart of the network monitoring program group for 3Com NIC cards. See here for more info
XdrmuW95Mm.exeHomepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread
Ndrvlsnrdrvlsnr.exeCompaq/ADI SoundMAX integrated digital audio controller related
Xdrvr32hdrvr32h.exeAdded as a result of an unidentified VIRUS!
Xdrvrmanagerdrvrquery32.exeAdded as a result of the BOOHOO VIRUS!
Xdsadsa.exeHomepage hijacker - redirecting to downseek.com
UDS Clockdsclock.exeDigital desktop clock including synchronization with atomic servers - see here
NDSentryDSentry.exeAnti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
YDSLagentexeDSLagent.exeUsed in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection
NDSL Monitorspdstrm.exeComes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
XDSSdssagent.exeDSSAgent by Brøderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info
?DSSSGENSdssagens.exe??
NDU MeterDUMETER.EXEHagel Technologies internet bandwidth monitor
Ndumprep 0 -k
or
dumprep 0 -u
dumprep 0 -k
dumprep 0 -u
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
UDVDBitSetDVDBitSet.exeDVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
NDVDSentryDSentry.exeAnti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
YDvp95Dvp95.exeScan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine
Ydvpapi9xDVPAPI9X.exeCommand AntiVirus for Windows 95/98/Me
YDvpInitExeDvpinit.exeCommand Antivirus related
YdvprptDvprpt.exeCommand Antivirus real time protection
UDVSyncdvsync.exeDVSync is the program that allows you to synchronize your daVinci’s PDA's data with your Personal Information Manager on the PC
Xdwdw.exeDownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
NDwlClientsupport.exeDownload manager for Dell support alerts
?DXDllRegExedxdllreg.exeAppears to be a MS patch that reregisters some of the DirectX DPlay DLL's?
XDxLoadDX3DRndr.exeAdded as a result of the GIBE.B VIRUS!
NDXM6Patch_981116p_981116.exeWin32 cabinet self extractor. More info here
XDyFuCAoptimize.exeAdult content dialler - see here
XDyFuCA Active Alertactalert.exeAdult content dialler - see here
?DZKillMeDZSAVEME.EXE??

Back to search

 Name/Startup ItemCommandComments
NE6TaskPanelTaskPanl.exeEarthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space
Ueabconfg.cplEabServr.exeEasy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
XEac_Cnrycanary.exeAdded as a result of the CANARY VIRUS!
XEac Downloaddownload.exeAssociated with Webcelerator - spyware. Read eAcceleration's privacy statement here
UEACLEANeaclean.exeFor Compaq PC's. Easy Access button support for the keyboard
?Eac_rnvdlANTIVIRUS_INSTALL.EXE??
XEanthologyAppEANTHO~1.EXEStop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here
NEapcisetup (1)sbsetup.exeRockwell RipTide soundcard application software. Sound works without it
NEAPCISETUP (2)wizard.exePart of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
NEarthLink ToolBar 5.0etoolbar.exeEarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time
XEasyDates_nlEasyDates_nl.exeAdult content dialler
UEasyKey or
Easy Key
easykey.exeFor programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
XeasyServServer.exeAdded as a result of the EASYSERV VIRUS!
NEasy Start Buttonesb.exeProvides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
UEasySync ProXCPCMenu.exeEasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes
UEasyTuneIIIEasyTune.exeTuning (overclocking) utility for Gigabyte motherboards. Shortcut available
UEasyTuneIVET4Tray.exeTuning (overclocking) utility for Gigabyte motherboards. Shortcut available
NEbatesMoeMoneyMakerwjview ...CodeEbates is a website that provides discounts from purchases from many websites. Discounts are automatic if on the Ebates listing. Discounts are paid in cash quarterly
XeBay ToolbarEBAYTBAR.EXEeBay Toolbar - reportes as spyware as it "phones home"
UeBoard
or
eMachines eBoard
Eboard.exeeMachines multimedia keyboard manager. Required if you use the extra keys
NeBotDownloadWizard.exeeBot from Digital River - "helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs
XE-Cardecard.exeAdded as a result of the YODI VIRUS!
?ecpeECPE.EXE??
NEDLoaderDTLoader.exeEffective Desktop from MiniStars Software - desktop management software no longer being supported
NeFax.com Tray MenuHotTray.exeeFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
Xefaxs lptt01efaxs.exeNew variant of the RapidBlaster parasite (in a "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
UEfpap.exeEfpap.exeEasy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching
?ehTrayehtray.exeeHome Media Center PC related - what does it do and is it required?
UEicon NetworksLAN_DAEMON
or
Eicon TechnologyLAN_DAEMON
watch.exeAssociated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually
Xeixfichina.batAdded as a result of the WCUP VIRUS!
UElbycheckElbyCheck.exeFrom Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
XElementElement.txtAdded as a result of the ELEM VIRUS!
NelmElmenv.exeViaTech eLicense for securing, distributing and selling music online
YElsaCapiCtlRcapi.exeAssumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem
UELSAChipGuardelsavect.exeChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking
UELSA WINman SuiteWinmsuit.exeAllows you to totally customize your ELSA graphics card settings, including overclocking the GPU
NEMA.exeEMA.EXETime management system which helps you to manage your time and appointments
XeMailEncryptionVELOZSYS.EXEeAcceleration Stop-Sign related - foistware. Read their privacy statement here
UEM_EXECEM_EXEC.EXELogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
?emsw.exeemsw.exe??
NEN4060C Taskbaren4060ct.exeComes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
?encapsulated command toolwintr.com??
NEncarta Dictionary QuickshelfQSHLFED.EXEProvides quick access to Encarta's Dictionary features?
NENCMONITORmonitor.exeThe Encompass Monitor. This program is the Connect Direct Program.  It is more trouble than it is worth and few use it
NEncoder AgentWMENCAGT.EXEMS Windows Media Encoder, which already has a shortcut in the Start Menu if installed
UEncompass_ENCMONTRENCMONTR.EXEOptional simple browser from Yahoo (Encompass)
?ENSApServer2_0APSERVER.EXEIntel AnyPoint Wireless II Home Network related. What does it do and is it required?
?ENSMIX32.EXEENSMIX32.EXESound card driver. Is it required?
UEnsoniqMixerstarter.exePuts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility
XEnumerate Servicewsys.exeAdded as a result of the MANIFEST VIRUS!
UeonemngeOneMng.exeeOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC
UePrompterePrompter.exeePrompter - E-mail notification software
NEPSON Background MonitorSTMS.EXESupposed to keep an Epson printer ready for quick printing.  Users report little difference whether it is on or not
UEPSON CardMonitorEPSON CardMonitor1.0.exeMonitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint
UEpsonPhotoStarterEPSON_PhotoStarter.exeOnly needed if you want to make full use of the capabilities of an Epson printer that included this 
NEPSON Status Monitor 3 Environment Check
or
EPSON Status Monitor 3 Environment Check 2
e_srcv03.exe
e_srcv02.exe
According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
UEpson Stylus C62 SeriesE-S0BIC1.EXERequired for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
UEpson Stylus C82 Seriese_s0hic1.EXERequired for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
?EquipmenEquipmen.exe??
NERegreg32.exeEReg is a software registration tool incorporated on products such as those by Brøderbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it
?ermerm.exe??
Xeros.exeeros.exeAdult content dailler
YeSafe ProtectESPWatch.exeeSafe from Aladdin - internet security for gateway and E-mail servers
?ESS DaemonEssd.exeRelated to an ESS based soundacard. Is it required?
YEssdcessdc.exeRelated to an ESS Solo soundcard. Seems as though it's required
?ESSNDSYSESSNDSYS.EXERelated to an ESS based soundacard. Is it required?
YESSOLOESSOLO.exeSound card driver that re-instates itself every time it's removed
Yesspkesspk.exeESS Technology modem speaker driver file. Required to get on-line with this modem
NEthernettcaudiag.exe3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
XEtrafficJavaRun.exeMarketing software from TopMoxie
YeTrustCIPEezdsmain.exeeTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior
YeTrust EZ Firewallefpeadm.exeeTrust EZ Firewall
UEVENTLISTENEREvLstnr.exeUsed with a Nikon digital camera to recognize when the camera is plugged in
Neventmgreventmgr.exeUsed with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
NEvent Planner RemindersPLNRnote.exeSierra Event Planner tray icon
NEvent Reminderpmremind.exeA calendar/alarm program that installs with Brøderbund Printmaster
NEvidence Eliminatoree.exeEvidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis
Nevntsvcevntsc.exeApplication Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it
NeWare StartupiWareStart.exeeWare iWare task bar. Not required
UEW Message Servermsg32.exeConexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices
NExciteAssistantEXEASSISTANT.EXEWith Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open
NExcite PlatformExlaunch.exeLoads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer
?Excite Private Messenger Pipex8impipe.exe??
Xexecfg4execfg4.exeAdded as a result of the ELECTRON VIRUS!
?Executedelfolders.exe??
Xexe lptt01exe.exeNew variant of the RapidBlaster parasite (in a "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
UExif LauncherExiflaquickdcr.exe
or
QuickDCF.exe
USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
UExitKillerEkiller.exeExit Killer - automatically closes pop-up windows in your browser
?exmonhpimoniter.exeSome kind of hp digital camera maybe or a photo smart connection probe?
Xexplore (1)explore.exeAdded as a result of the NETBUS and other VIRUSES!
XExplore (2)Explorer.exeAdded as a result of the IRC.FLOOD.G VIRUS! Note - this is not the valid Windows "explorer.exe"
XExplore (3)explore.exeAdult content dialler - where explore.exe resides in the Windows or Wnnt folder
Xexplore.exeExplore.exeAdded as a result of the GRAYBIRD.G VIRUS!
Uexplorer (1)explorer.exeStarts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR
XExplorer (2)Explorer.exeAdded as a result of the DVLDR VIRUS! Note - this is not the valid "Explorer.exe" as it's in the Windows\Fonts directory
Xexplorer (3)wscript.exe <filename>Sneaky way to start any VBS script. Many viruses use VBS files
XExplorer (4)shellexpl.exeAdded as a result of the GPIX and SHELDOR VIRUSES!
Xexplorer (5)expl32.exeAdded as a result of the RATSOU VIRUS!
XExplorer32Expl32.exeAdded as a result of the HACKTACK VIRUS!
XExplorer lptt01explorer.exeNew variant of the RapidBlaster parasite (in a "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Explorer which has the same executable name
UExshow95EXSHOW95.exeSupport software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices
?Extranet AutoDialAutoExt.exeNortel Networks Contivity Extranet Switching Software
UExtraDNSExtraDNS.exeExtraDNS - DNS configuration tool
NEye Tide Launcheroneeyetideone.exeNascar wallpaper
Nezagentezagent.exeEzVCR recording software for the ASUS TV FM card. Available via Start -> Programs
NEZDeskEZDESK.EXEUtility that remembers icon locations for each user and resolution. Available here
NEzEjMnApEzEjMnAp.exeFor IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start -> Programs
XeZmmodmmod.exeEzula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
YezShieldProtector for Px
or
ezPS_Px
ezSP_Px.exe
or
ezSP_PxEngine.exe
Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings
UEZSMART Appezsmart.exeEZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported
XezulaeZmmod.exeRegarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
XeZuluMaineZuluMain.exeComes with "KaZaA" installation. Advertising Spyware. Not required but KaZaA won't work

Back to search

 Name/Startup ItemCommandComments
Xf607f607.exeAdded as a result of the URAT.B VIRUS!
?fapmonfapmon.exeFair Access Policy monitor for DirecPC/DirecWay internet access
UFastCachefc.exeFastCache from AnalogX - speeds up browsing by resolving DNS requests locally
NFastTrack AcceleratorSPEED UP.EXEFastTrack Accelerator - "speedup" utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus
NFastUsr
or
fast
fast.exeInstalls as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
UFatPipeDHCPSoftware enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
UFatpipe Dialerfpdialer.exeSee above
UFBDirectFBDirect.exeSoftware that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
?FBIFBISM.exeCompaq related but what does it do?
Xfcrunfc.exeAdded as a result of the CAMPURF VIRUS!
?FD_SAPFD.exeGenicom SAP Printer driver. Is it required?
UFEELitDeviceManagerfeelitdm.exeAssociated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
XfegozeSVCH0ST.EXEAdded as a result of the GRAYBIRD.D VIRUS!
UFellowes ProxyR3proxy.exeInstalled with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
UFG1_00frntgate.exeFrontGate MX - e-mail spam blocker
UFhtisxkfhtisxk.exeXtraKeys - keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove via Spybot S&D (for example)
NFileFreedom_Pluginwtm.exeFileFreedom peer-to-peer sharing program
XFileSoftWscript.exe UpdataFiles.vbsAdded as a result of the SST.B VIRUS!
UFilterguardFiltrgrd.exeAn icon located in the lower left of the screen and looks like a lifesaver. This icon is a “short-cut” to access the basic features of SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by “right-clicking” on the icon
XFind FastFindfast.exeComplete utter waste of space! Part of MS Office - searches disk drives for Office file types to make opening them easier
YFind Virus Launch Programfvlaunch.exePart of Dr. Solomon's Antivirus
NFinePrint Dispatcher vxFPDISPxA.EXEFinePrint - virtual printer for use with any printer. Search for "dispatcher" here for more information. If removed, it will re-install when program is run - hence the Y recommendation
YFix-itmxtask.exePart of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required
YFix-it AVmemcheck.exePart of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
?FLASH32-flash32.exe??
NFlashPath Status
or
FlashPath Monitor
SDSTAT.EXE
FLSHSTAT.EXE
System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
UFlexicdFlexicd.exeCD player - part of the Win95 Power Toys
XFLooDNeTFLooDeR.exeAdded as a result of the FLOODNET VIRUS!
YFltProcessmsinet.exePart of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done
XFlyswatDesktopflydesk.exeAdvertising spyware
UFmctrlTrayFmctrl.EXEGenius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)
?FocusFocus.exeISDN configuration wizard?
XFolder Servicewssdtu.exeAdded as a result of the MANIFEST VIRUS!
NFolding@homeWINFAH.EXEFolding@Home is a distributed computing project which studies protein folding, misfolding, aggregation, and related diseases - must be running in order to access the internet to upload to the servers. Available via Start -> Programs
NFontFixfontfix.exeNot required but what is it?
Xfoobin lptt01adaware.exeNew variant of the RapidBlaster parasite (in a "foo1" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
YFoolProoffpwinldr.exeFoolProof Security PC security software from SmartStuff
YFoolProofSweep??Part of FoolProof Security PC security software from SmartStuff
NForbesForbesAlerts.exeForbes Business News Alerts - displays business news headlines in a little window on the screen
XForceShowrundll32.exe QaBar.dll, ForceShowBarAdultLinks/QAbar parasite related
NForget Me NotAGRemind.exeCalendar reminder part of American Greetings® CreataCard®
NFotoStation Easy AutoLaunchFotoStation Easy AutoLaunch.exeInstalled with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either
UFourthDayFourthDay.exeThe Fourth Day - "astronomical clock and almanac for your system tray"
YFP Loaderloadfp.exeFoolProof Security - PC security software from SmartStuff
?FPWGMWZDFPWGMWZD.exe??
NFpxmnmsrvc.exeRemote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations
YFreedomFreedom.exeZero Knowledge Freedom - Anti-Virus, Personal Firewall and Parental Control, it also blocks ads, safeguards your personal information, encrypts your passwords, and much more
?Free Downloads Monitorfdcmon.exe??
UFreeMem ProFMEMPRO.EXESome users swear by memory management utilities such as FreeMem Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
UFreeMemVn2FreeMem.exeSome users swear by memory management utilities such as FreeMem but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
UFreeRAM XPFreeRAM XP Pro x.exeSome users swear by memory management utilities such as FreeRAM XP Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind. "x" indicates the version number
Ufreesurferfs20.exeEMS Free Surfer mk II - pop-up stopper
?frgukshdrkmck.exe??
NFriendlyWebQuick-LaunchSELFCERT.EXEselfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
UFRISK FP-SchedulerF-Sched.exeScheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis
YFRW_EXEFRW.EXEConSeal Signal9 firewall - now McAfee Personal firewall
Yfrxmxinsfrxmxins.exeATI 3D Studio MAX/VIZ driver
?FSDPSRVFSDPSRV.exe??
UF-Secure Management AgentFSMA32.EXEF-Secure Antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products
YF-Secure ManagerFSM32.EXEF-Secure Antivirus - carry out scheduled virus scans automatically
Ufspfsp.exeFolder Shield - hide entire directories and thus prevent access by anyone else to your personal files and documents
YfsprFolderShield.exeFolder Shield - hide personal files and folders
NFSScrCtlFSScrCtl.exeScreen saver control applet used by the "Stardust Screen Saver Toolkit" and "SolidWorks Screen Saver"
Ufsservfserv.exeFarsighter Server - monitors a remote computer invisibly by streaming video to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time
YF-StopWF-StopW.exeF-Prot anti-virus background scanner by F-Risk Software
XFSWFSW.exeFreeScratchAndWin parasite
UFtpqueueFtpsched.exePart of WS_FTP Pro from Ipswitch. Queueing facility for scheduling FTP transfers
Yfwenc.exefwenc.exeCheck Point SecuRemote VPN client - "dynamic and fixed IP addressing for all ISP services - dial-up, cable modem, or DSL - the ideal solution for telecommuters and mobile workers"
Nfwrastrcfwrastrc.exeDial-up software for Friendly Technologies/1NationOnLine free ISP
Ufxredirfxredir.exeCanon MultiPASS fax redirector

Back to search

 Name/Startup ItemCommandComments
?g3dctlg3dctl.exe??
NGadwin PrintScreenPrintScreen.exeGadwin PrintScreen - utility to capture, print or save the current window
UGainwardTBPanel.exeConfiguration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
NGameSpotkontiki.exeKontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
UGammaHotKeyssetgamma.exePart of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop
XGatorgator.exeSpyware - see here for removal instructions
XGator eWalletgator.exeGator eWallet from The Gator Corporation. Spyware - see here for removal instructions
UGazelDisplaygsyno.exeBT Digital Access USB - Gazel ISDN installation System Tray icon
UGBTrayGBTray.exeSystem Tray icon access to GoBack (below)
?GCC Remindergccrem.exeAssociated with AcraMax Greeting Card Creator. Is it a registration reminder?
NGDriveGDriver.exeFound on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
NGearboxconfsvr.exeNTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here
XGEDZACGEDZAC.exeAdded as a result of the GEMEL VIRUS!
NGemStRmWGemStRmW.exeFor a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually
Xgeneral lptt01general.exeNew variant of the RapidBlaster parasite (in a "General" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
YGenie USB MonitorUSBmonitor.exePort monitor for an external USB hard drive. Required to enable access to the drive
NGetRight Tray IconGETRIGHT.EXEGetRight from Headlight Software - download manager for resuming downloads and choosing multiple download locations. The freeware version is/was spyware. The registered version isn't if you don't install the Aureate/Radiate software. Available via Start -> Programs
NGet Smilegetsmile.exePuts smilie faces in your E-mail. Run manually when required
NGhostStartServiceGhostStartService.exeRequired to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard
NGhostStartTrayAppGhostStartTrayApp.exeSystem Tray access to Norton Ghost - added from the 2003 version
YGilatFTCftc.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
YGilat SOM Enumeratordllhost.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
?GisdnLoggisdnlog.exeBT Digital Access USB
YGlideGlidew32.exeCirque touchpad driver
XGLSetITMSIEXEC.EXEAdded as a result of the OPTIX PRO 1.32 VIRUS!
YGmouseGmouse.exeAmouse mouse driver - required if you use non-standard Windows driver features
UGnetmousgnetmous.exeGenius NetScroll+ mouse driver - required if you use non-standard Windows driver features
?gnubgnub.exe??
UGoBackGBMenu.exeRoxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
UGoBack Polling ServiceGBPoll.exeRoxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
UGoBack Tray IconGBTray.exeSystem Tray icon access to GoBack (above)
UGoldensoft_MndlSvrMndlSvr.exeGoldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
NGoogleDCClientGoogleDCC.exeGoogle Compute Client - only present if you installed the Google Toolbar with "Google Compute" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click "Stop Computing"
UGoToMyPCg2svc.exeExpertCity GoToMyPc logon - web-based remote-access solution that allows individuals and companies to register their computers online and then securely access those computers from any web browser
XGo!Zillagozilla.exeA variant for the Go!Zilla download manager, see above
XGo!Zilla Monster DownloadsGo.exeDownload manager for resuming downloads and choosing multiple download locations. Advertising spyware
NGRAgra.exeLooks at system resources at startup and warns you if they have dropped. Contains links to the Disk Clean Up, Defrag and Start Up Menu. It does have a link to a startup configuration utility. Similar to msconfig but can keep a list of disabled apps. Not really necessary. Only appears if you load the Gateway Startup Utility
UGravis Appawareloaderdbserver.exeLooks like it's associated with Gravis game controllers and the Keyset Manager, allowing the user to program the buttons for games that don't support them
?Gravis Xperience Driver SupportGrxp4exe.exeAssociated with the drivers for Gravis game controllers. What does it do and is it required?
?GrdSys32GrdSys32.exeX-Stream ISP software. Offers free Net access funded by on-screen ads. Is it required or can you create your own dial-up networking connection to use on demand?
NGreetings WorkshopGWREMIND.EXEYou really want to be reminded about somebody's birthday at the expense of resources?
Xgremierwscript.exe gpremier.vbsAdded as a result of the GPREMIER VIRUS!
NGrpConvgrpconv.exeTo facilitate the upgrade from Windows 3.1 to Win95/98, an executable file named GRPCONV.EXE is included with Win95/98. This file provides the translation of groups and group items to folders and links unless you need to access Win 3.1 Group files 
?GscbcGscbc.exe??
Xgshpzzgshp.vbsHomepage hi-jacker
NGsiconexeGsicon.exeADSL modem monitor from Eicon Networks (as used by BT for its Broadband internet service for example). Can safely be disabled without affecting the connection - all this does is give an indication of connectivity and access to the diagnostic facilities
NGSOrganizerGSOrganizer.exeGoldenSection Organizer - personal information manager
XGStartupGMT.exeGator spyware variant. See Gator
NGtwatchgtwatch.exeAssociated with a Mustec scanner and not required
NGuardianCMGrdian.exeMcAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
XGustavVED<filename.exe>Added as a result of the OPASERV.H VIRUS!
Xgvagfxjrundll32 ...gvagfxj.dllUnidentified adware, spyware or virus
NGWMDMMSGGWMDMMSG.exeUsed with internal modems on Gateway and vprMatrix PCs. This is the "GTW modem messaging applet" and is not required for the modem to work correctly
UGWMDMpiGWMDMpi.exeUsed with internal modems on Gateway PCs such as the 450SX Notebook. Required for audio settings to be maintained and does not remain in memory once run. See here for more information
Ygw port controllerPORTCT95.EXEFrom a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung
Ugwumgwum.exeGigabyte utility manager. Loads if you have a Gigabyte motherboard and got a full bundle of utilities installed. Monitors CPU, fans, BIOS etc. Only used by system "tweakers"
?gyygyy.exePossibly Gator (and therefore spyware) related?

Back to search

 Name/Startup ItemCommandComments
NHalifaxHowardClusterskinkers.exeHoward the Weatherman desktop client from Halifax by Skinkers - marketing/messaging tool
UHaMFrontPanelhampanel.exeDisplays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless
UHandy Backup 3.9hbagent.exeHandy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers
UHardware Sensors Monitorhmonitor.exeUtility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
UHarehare.exeHare - improve and optimize performance of desktop/laptop PCs
UHawkEyeHAWK_95.EXEControl Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
UHawkEye IV Control PanelHAWK_32.EXEControl Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
XHbinstHbinst.exeHotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
NHCDetectHCDetect.exeMS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem
UHcontrolhcontrol.exeHotkeys on an ASUS Notebook. Only required if you use the additional keys
NHC Reminderhc.exeFor Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed
?HDhelptbhdhelp.exeAssociated with Philips Edge series soundcards. Is it required?
NHDtrayHDtray.exePhilips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel
Xhellodollyshost.exeAdded as a result of the YODO VIRUS!
?Helphelpext.exe??
Xhelpctl.exehelpctl.exeAdded as a result of the GASLIDE VIRUS!
XHelpExp.exeHelpExp.exeAttune HelpExpress. Disable - see here
Xhelpmanagerspoler.exeAdded as a result of the RANDEX.J VIRUS!
UHermes MessengerDGDRHE~1.EXEA LAN messenger alternative to WinPopUp - Digital Dreams Software
NHewlett Packard RecorderRemind32.exeHP multifunction registration
UHfHf.exeHide Folders - hide your folders so only you can view them
NHGTXPEIFirstReboot.exeHerucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
?HiberMonitorHCount.exe??
UHibernationhib32.exeReduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run of battery regularly
XHid.exehid.exeAdded as a result of the RATSOU.B VIRUS!
XHideRun.exeHiderun.exe and svhost.exe and pro.gifAdded as a result of the BOOHOO VIRUS!
Uhidservhidserv.exeThis is the Human Interface Device Server for Win98SE/2000/Me/XP, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the controller for the keyboard sound controls on the USB and PS/2 keyboards
NHistoryKillhistkill.exeHistoryKill removes your web surfing path by removing the URL drop-list history, detailed history file, cache, and cookies in both IE and Netscape Navigator browsers. Available via Start -> Programs
Uhkcmdhkcmd.exeInstalled by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via the Display Properties in Control Panel
UhkservHKserv.exeKeyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS
Uhksshkss.exeCompaq HotKey Support - multimedia keyboard support
UHmonitorHmonitor.exeHardware sensor monitoring program. Only required if you overclock your system and want to check on the status
NHoliday LightsHoliday Lights.exeHoliday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start -> Programs
UHomeAlarmHomeAlarm.exeChameleon Clock - system tray clock replacement
?HomeCentre WakeUpLGWAKEUP.EXEAssociated with the no longer supported Xerox HomeCentre printer/scanner
?Honorhonor.exe??
UHook99startuphk2re.exe"Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons, bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent"
UHookSysHookSys.exeSurfinGuard Pro - protects against all malicious code delivered through executables, scripting files, ActiveX and Java
XHotbarHbinst.exeHotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
UHot CornersHotc.exeHot Corners - "lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen"
UHotIDEhotide.exeHotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks
UHotkeyAppHotkeyApp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
UHot Key Keybd 9910 DaemonSK9910DM.exeFor programmable keys on a multi-function keyboard - such as provided by Gateway - for volume, one-button net connection. Required if you use the extra keys
UHotKeysCmdshkcmd.exeInstalled by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via Control Panel -> Display Properties
?Hot Party 22hotpart22.exe??
NHotSync Managerhotsync.exeInstalled when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing.  Available via Start -> Programs
Xhotwetlovehotwetlove.exeAdult content dialler. Will not uninstall - components have to be manually deleted
UHoverDeskHoverDesk.exeHoverDesk - desktop replacement software
?hp 1000 firmwarefwdl.exeHP LaserJet 1000 related. Is it a driver or automatic firmware update (based upon the filename)?
Nhpaiodevicehpodev07.exeDirect from HP - "Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when "portable" is chosen during installation)". Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner
NHPAiODevice(hp psc 900 series) -1hpobrt07.exeInstalled with a Hewlett Packard 900 series colour printer, scanner, fax, photo card slot printer, copier. Assumed to perform an identical function to hpaiodevice above
NHP-Aio FlightRemind32.exeHP multifunction registration
NHPAIO_PrintFolderMgrhpoopm07.exeDirectly from HP: "This process has one purpose - detects if the device moves to a different port, and notifies other processes to look on the new port." For various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the HP icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner
?HP AutoIndexerhppautoindexer.exe??
UH/PC Connection AgentWCESCOMM.EXEActive sync for use with Windows CE based palm PC
NHP CD-DVD
or
HP CD Writer
hpcdtray.exeSystem Tray access to a HP CD-Writer's functions. Available via Start -> Programs
Xhp centerBACKWEB-137903.exeBased upon HP's own description from here - "With the My HP Center, consumers have access directly from the desktop to Internet sites featuring special offers for HP customers ranging from personal finance and shopping to digital imaging and music" I have classified this as adware. The number may change - if yours is different let me know
Xhp center UIShadowBar.exeUser Interface for HP Center
UHPDJ Taskbar Utilityhpztsbol.exe
hpztsd02.exe
hpztsb04.exe
hpztsb05.exe
(1) Ghostscript device driver for printers understanding Hewlett-Packard's Printer Command Language - see here for more info
or
(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer 
NHP_dladlatray.exeOn HP PCs, tray icon for dla - which provides drive letter access to HP's and Veritas' version of DirectCD
Nhpfschedhpfsched.exeHPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
UHPGamesActiveMenuActiveMenu.exeWild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally
Nhpgs2wndhpgs2wnd.exe"HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." Available via Start -> Programs
UHPHAxMONHPHAxMON.EXEMedia card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this 
feature and known to cause system crashes in some cases. "x" can be 1, 2 or 3 and depends upon driver version. Replaced by HPHmon04 (below) from version 4 onwards
NHPHmon03HPHMON03.EXEMonitors the status of a HP printer. If you turn off the printer while still using the computer, a yellow triangle with exclamation mark will replace the original icon on task bar
UHPHmon04hphmon04.exeMedia card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature
XHphomehphome.jsHomepage hijacker
NHPHUPD04hphupd04.exeHP Photosmart software update checker and wizard launcher. Available via Start -> Programs
?HP IDSchedulerHPIDSCHD.exeHP Instant Delivery Scheduler
NHP Info Express??On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
NHP Internet CenterSURFBRD.EXELoads the HP Internet center surfboard on startup. HP Internet Center allows you to customize the multimedia keys on the fly without having to go the Control Panel --> Keyboards to change them
NHP JetSpeed AutostartAUTOSTART.EXEAutostart executable for the old multiplayer game HP Jetspeed
NHP JetDiscoveryHPJETDSC.EXEHP JetAdmin software which monitors printing jobs on a network environment
?hpjsiroutehpjsira.exeRelated to HP laserjet printers and IP addresses. An IP address is appended to the name field - ie "hpjsiroute192.168.1.2"
YHpLampHPLAMP.EXEHP Scanner Utility that controls your scanner’s light bulb. Needed if it's switched on. Also refer here for troubleshooting
UHPLogiFinderhp_finder.exeHP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
?HP Network Registry Agenthpnra.exe??
Nhpodbliahpodblia.exeHP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
?hpoddt01.exeN/A??
Nhpodlb08hpodlb08.exeHP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
?HP OfficeJet Series 700 StartupHPOSTR03.EXE??
NHP Parallel Port Testhppt.exeAssociated with a HP ScanJet scanner
?HP Port Resolverhpbpro.exe??
YhppptaHPPPTA.exeHP parallel port driver for certain hardware
NHP Precision Scanhpmdlbwx.exeSame as HP ScanPicture below
NHP Presentation ReadyPresRdy.exeHP Omnibook related:  "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device"
NHPPROPTYHPPROPTY.EXEHP LaserJet Toolbox
Uhp psc 2000 Serieshpobnz08.exeSystem Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start
UHPPWRSAVHPPWRSAV.EXEPower save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com, pick your OS option under the SUPPORT tab, follow the instructions and you will find an updated lamp control patch
?hpqcmonhpqcmon.exeFrom HP and related to digital imaging
UHP RecordNow??From HP "Software for the CD writer. Do not prevent from starting unless the CD writer is never going to be used."
NHP ScanPicturehpsplmwa.exeHP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
UHPSCANMonitorhpsjvxd.exeHP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner
?hpScannerFirstBootscannerfb.exeHP scanner related
UHP ScanPatchHPScanFix.exeProgram that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used, then it is safe to remove or prevent from starting
?HP SchedIndexerhppschedindexer.exeHP laserjet related
Nhpsjbmgrhpsjbmgr.exeHP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup, unless the scanner is used every day, such as in a business environment
NHPStarthpstart.wsfThis a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot
?HP Status Serverhpboid.exe??
Uhpsysdrvhpsysdrv.exeThis item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP, if it can't tell that it is an HP it will not run. If unchecked, it can prevent the running of the Application Recovery CDs, the use of the multimedia keys, and the HP Instant Support. Also seen that without it running, the Riptide Sound card that was installed on some older HP computers stops working
?hp Silent ServiceHpSrvUI.exeHP related
NHP Simple TraxHpcron.exeSupplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start -> Programs or Desktop Icon
NHPUProvenTactics.exeProven Internet Marketing software
NHP Updates??On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
NHPZTS04hpzts04.exeHewlett Packard printer toolbox shortcut that resides in the system tray
YHREF.OCXregsvr32.exe ....\HREF.OCXHREF.OCX is an ActiveX control developed by xFX JumpStart and used to provide HTML-alike clickable links on Windows-based programs such as PopUpKiller
UHtinpdor.exeAppears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. 
Otherwise not required
UHTpatchhtpatch.exeHTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%
XhuigeziHgzServer.exeAdded as a result of the GRAYBIRD.C VIRUS!
XHWINFO*HWINFO*Added as a result of the PUROL VIRUS! where * is a random character
YHWinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
XHXDL.EXE
or
HXIUL.EXE
HXDL.EXE
or
HXIUL.EXE
Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
UHydraVisionDesktopManagerdesk98.exeATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
UHydraVisionViewportviewport.exeATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup

Back to search

 Name/Startup ItemCommandComments
XI386I386.exeAdded as a result of the MYPOWER VIRUS!
?I81SHELLI81SHELL.exeAppears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard
Ui8kfanguii8kfangui.exeGraphical interface for fan speed control
Yiamappiamapp.exeAtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
?Iapiap.exePossibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?
Nibmmessagesibmmessages.exeAllows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"
?Ibmmon.exeIbmmon.exe??
UIbmpmsvcibmpmsvc.exePower management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes
?IBMUltraBayHotSwapSoundIBMBAYSN.EXESupports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? Related to the item below
UIBMUltraBayHotSwapCPLLoaderIBMBAY2N.EXESupports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
NICH Syntheusexe.exeSound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices
NIC_KEY_3spvic.exeInstant Chess related
UiCleaniClean.exeIEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"
NiCnNAG.EXEiChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist
NICOICO.EXEFound on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
NIcon AnimationHDE.EXEPart of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
YICONCLNTiconclnt.exeAPC PowerChute Tray Icon. Associated with the UPS listing
UICONDESKICONDESK.EXESmall utility which will allow you the option of hiding or showing your desktop icons
NIconfig.exeIconfig.exeIcon for LS-120 "Superdisk"
NIcon Hearit 95hearit95.exeAudio desktop customization utility from Moon Valley Software. Resource hog
NIcon Hearit 98hearit98.exeAudio desktop customization utility from Moon Valley Software. Resource hog
XIcon lptt01icon.exeNew variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
NIconoidIconoid.exeIconoid is a desktop icon manager
NIconsaverIconsaver.exeIconSaver is a desktop icon manager
XICQ Hacking ProICQpro.exeAdded as a result of a version of the NETSPY VIRUS!
NICQ LiteICQLite.exeICQ Lite - compact version of the popular messaging program
NICQ Plusvplus.exeICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs
UICSDCLTrundll32.exe Icsdclt.dll, ICSClientInternet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines
NICServerIcserver.exeIntel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
YICSMGRICSMGR.EXEMonitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you’re sharing the internet on various computers
XID8525ID8525.exe
id85255.exe
ID8525 VIRUS and homepage hijacker!
NID CommanderIDCom.exeCaller ID utility for identifying incoming telephone numbers
XIDEide.exeAdded as a result of the ASSASIN.F VIRUS!
?IDEDMAcfgdmaof.exe??
XIDE LoaderIDElibr32.exeAdded as a result of the XILON VIRUS!. Related to the game "Diablo II"
UiDesktopidesktop.exeImmersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse
NIDManIDMan.exeInternet Download Manager - download files faster, schedule and resume
NIDW Logging Toolidwlog.exeAdded with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
UIECleanAuxIeboot6.exeIEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup
Xiedlliedll.exeHomepage hijacker, redirecting to coolwwwsearch.com
XIEDriverIEDriver.exeInstalled as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze
XIELoader32iexplore32.exeAdded as a result of the SPEX VIRUS!
Nietsrietsr.exeIEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc
XIexploreiexplore.exeAdded as a result of the BOXER VIRUS!
Xiexplorer lptt01iexplorer.exeNew variant of the RapidBlaster parasite (in a "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Explorer which has the same executable name
XIexplore Servicesiexplore.exeAdded as a result of an unidentified VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder
UIFSplash.exeIFSplash.exeI-FORCE driver for force feedback steering wheel
Nigfxtrayigfxtray.exeQuick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
XiilcIILC.EXEHomepage hijacker
NiIWiperSystemwiper.exeSystem Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
YIJ75P2PSERVERIJ75P2PS.EXEPrinter utility which is required in order to make the printer work correctly
?IKE Service 95IKEService.exeAssociated with PGP
UiKeyWorksIKEYMAIN.EXEA4Tech wireless keyboard driver and utility
XiLLeGaL
or
iLLeGaL.exe
Mplayer.exeAdded as a result of the HOLAR.C (or GALIL@MM) VIRUS! Note - this should not be comfused with Windows Media Player which has the same filename
?ILO_Office_ManagerIntEdReg.exe /OFFMANIntense Educational Ltd - Language Office Software. Is it required?
UImagefoximagefox.exeImageFox 2.0 is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes
YImage & RestoreIMAGE32.exePart of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
Nimekrigimekrig.exePart of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
NImesh??Imesh is a file sharing system
NImesh Auto Update??Update check for above. Turn the update off under "options"
NImgIconImgIcon.exeUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
NImgStartImgStart.exeUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
Nimjpmig
or
Imjpmig8.1
IMJPMIG.EXEPart of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese)
?immcheck.exeimmcheck.exeRelated to I-FORCE driver for force feedback steering wheel?
NImonitorPlguni.exeMcAfee QuickClean 3.0 - removes internet clutter and unwanted programs
NiM Start CenteriM_Tray.exeInstalled with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
NInCDincd.exeAhead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk
NInControl Desktop ManagerDMHKEY.EXEFor Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
NIncredimailincredimail.exe"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
NIndexSearchIndexSearch.exeAssociated with PaperPort scanner software from ScanSoft
XInetapiNetapi.exeAdded as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
?InetConfinetconf.exe??
UInetdINETD32.EXEWindows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation
XInet DeliveryIntdel.exe
intdel_2.exe
Spyware
Uinetinfo.exeinetinfo.exeExecutable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)
XInetMSNmsnet.exeAdded as a result of a variant of the SDBOT VIRUS!
?Infoplay.exeInfoplay.exeWritten by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?
UInfo Selectis.exeInfo Select from Micro Logic - personal information manager
UInfra-red MonitorIRMON.EXESystem Tray access to infra-red devices. Not required unless you use infra-red devices
Xinfwininfwin.exeMsview parasite variant
Xinfusinfus.exeAdult content dialler
UInfuzerInfuzer.exeInfuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"
YInitialize8x88x8_init.exeTool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
NInk MonitorInkMonitor.exeAssociated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
NInkWatchInkWatch.exeAssociated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
YInoRPCInoRpc.exeAssociated with eTrust Antivirus/InoculateIT
YInoRTInoRT9x.exeAssociated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here
UInoTaskInoTask.exeScheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here
?insCOA5insCOA5.exe??
NInstallAurealDemosInstallAurealDemos.jsUsed to initialize the Aureal A3D demos InstallShield wizard
UInstallBuddyIbtna.exeInstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync
?InstallNAIProductSETUP.EXECould be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?
?Install Pending Filessifxinst.exeUninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?
NInstantAccessINSTAN~1.EXEFrom TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
NInstant Update Centerreminder.exeFrom Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG.  PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner
UInstant Wireless Configuration UtilityWUSB11cfg.exeUtility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
Xinstitinstit.batAdded as a result of the OPASERV.H VIRUS!
?InstUtlR.exeInstUtlR.exe??
UIntel Active Monitorimontray.exeMonitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock"
UIntel File Transferxfr.exePart of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
UIntellitypetype32.exeFor MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them
UIntel PDSpds.exeIntel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
UIntelProcNumUtilitycpunumber.exeIntel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
UIntel Product Number UtilityIntelProcNumUtility.exeIntel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
NIntel PROSet Tray Iconpromon.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
?Intense Registry ServiceIntEdReg.exe /CHECKIntense Educational Ltd - Language Office Software. Is it required?
YInterCheck MonitorIcmon.exePart of Sophos ant-virus sofware
XInterdllInterdll.exeAdded as a result of the DELF family of VIRUSES!
XInternal<trojan filename>Added as a result of the SMOTHER & TRANSLAT VIRUSSES!
XInternalSystrayKazza.exeAdded as a result of the OPTIXPRO.12.C VIRUS! Note - unlike the valid KaZaA executable, this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or 
C:\Windows\System32 (WinXP)
XInternat Confbootconf.exeHomepage hijacker, redirecting to coolwwwsearch.com; see for example here
Ninternat.exe (1)internat.exeLanguage selection icon in system tray
XInternat.exe (2)internat.exeAdded as a result of the NETSNAKE VIRUS! Note - the real internat.exe resides in %windir%\system\ (where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon
XInternet.exeInternet.exeAdded as a result of the MAGICCALL VIRUS!
UInternet Answering MachineIAMNET~1.EXEFrom Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
XInternet Configsvchosts.exeAdded as a result of the SDBOT VIRUS!
XInternet Exploreriexplorer.exeAdded as a result of the LORSIS VIRUS! Note! - the valid Internet Explorer would not normally run at startup unless added manually by the user and would not run from the registry "RunServices" key as this does
UInternet History EraserHERASER.exeInternet History Eraser - deletes your browsing tracks
XInternet Loader1MSInstall61.exeAdded as a result of the KWBOT.B VIRUS!
UInternet Optimizeroptimize.exeInternet connection optimizer. Leave this enabled if you find it improves your connection
YInternet Sharing Serveriss_srvr.exeIntel AnyPoint internet sharing software
N Internet SweeperSweeper.exeInternet Sweeper - removes unnecessart left over files after browsing the internet
U Internet TimerITIMER.exeShareware dial-up connection call cost calculator from Ratsoft
XInternetWasherProiw.exeInternet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
XinternctWinSocks5.exeAdded as a result of the GRAYBIRD.F VIRUS!
XInterntInternt.exeAdded as a result of the PEEPER VIRUS!
NInterTrust Quick Startit_cpq~1.exeInterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business
XInterUWINDRV.EXEAdded as a result of the IRCINTER.A VIRUS!
NIntervideo Win Cinema Manager
or
Intervideo WinCinema Manager
WinCinemaMgr.exeWinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
NIntervideo WinSchedulerWinScheduler.exeWinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
UInterWARNinterwarn.exeInterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs
XIntrenatIntrenat.exeAdded as a result of the LEMIR.E VIRUS!
NIntroducing Media ManagerSPLASHA.EXEMS Media Manager tour. Not required
NIntroduction-Registration??For Compaq PC's. Should only run first time, PC Introduction & Compaq registration
XIntruderAlertia99.exeIntruder Alert '99 from Bonzi - spyware
XIoadqmMedia Player.exeAdded as a result of the HAWAWI VIRUS!
Uiolo Task AgentTask_Agent.exeiOlo System Mechanic Task Agent. Scheduled maintenance
UIomega Automatic Backup
or
Iomega Automatic Backup 1.0.1
ibackup.exeIomega Automatic Backup - automatic backups for use with Iomega portable HDD 
NIomega Backup Schedulerdtiom98.exeUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
NIomega Disk Icons
or
Iomega Drive Icons
IMGICON.EXEUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
?Iomega QuickSyncQuicksync.exe??
NIomega Startup OptionsIMGSTART.EXEUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
NIomegaWareCOMMANDER.EXEUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
NIomega WatchIOWATCH.EXEUsed by Iomega drives. Available via Start -> Programs
UIomon98.exeIomon98.exePC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
NiPalmmon.exeInstalled with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
XIPInSightLAN 01ipclient.exeInstalled with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resource - hence the "X" status
NIPInSightMonitor 01ipmon32.exeInstalled with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information
YIPinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
Xipmon.exeipmon.exeAdded as a result of the RECERV VIRUS!
UiProtectYouip.exeiProtectYou - internet filtering/parental control and network monitoring software
YIPSecMonIPSecMon.exeMicrosoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
?IPWIPW.exe??
YIREIKEIreIKE.exeMicrosoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
?iRis Active Monitorwinmon32.exe??
UIrMonIRMON.EXESystem Tray access to infra-red devices. Not required unless you use infra-red devices
?IRPMonitoritcnmon.exe??
Nisdbdcisdbdc.exeFor Compaq PC's. May install properties in dial-up networking when you register with an ISP
?ISDN MonitorLinksts.exeAsuscom ISDN modem driver. Is it required or does it just monitor the line status?
UISDNwatchIWatch.exeFRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"
?ISLP2STAISLP2STA.EXEPossibly a left over from Windows Update for wireless NIC (maybe Linksys) drivers?
UiSpyNOWispynow.exeiSpyNOW - remote monitoring and surveillance software
XIST Serviceistsvc.exeISTBar foistware
UItkItk.exeIn The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
UiTouchiTouch.exeiTouch loads the iTouch configuration program for Logitech keyboards. It’s needed if your keyboard has shortcut buttons and if you use them. It’s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock
NItsDeductiblePopUpItsDeductible.exeItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
NIusagenetdet.exeInternet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
NIW Control Centeriwctrl.exeVOB InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Supplied with some Toshiba CD-writers. Maybe required if you use this feature on a regular basis
XI-Worm.GiGuuGiG.eXeAdded as a result of the GINK VIRUS!
?IZEN/A??

Back to search

 Name/Startup ItemCommandComments
Nj2 Tray MenuHotTray.exeeFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
UJammerjammer.exeJammer by Agnitum - "Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"
XJava Runtimesiexplore.exeAdded as a result of the KILLAV.B VIRUS! Note - this is not the valid IE (iexplore.exe) file as it's located in C:\Winnt\Java\Java\ rather than C:\Program Files\Internet Explorer
NJBJiffybar.exe"Get Paid As You surf" application
YJetAdmin Discovery IndicatorHPJETDSC.EXEHP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator
NJet DetectionADGJDet.exeAdded with SoundBlaster Live! or Audigy soundcards for headphone autodetection
UJobHisInitJobHisInit.exeUsed by Ricoh network printers to enable network printing from the client
UJogServ2
or
Jog Serve
JogServ2.exe"Jog Dial" on a Sony Vaio laptop.  The dial can select various functions such as control audio. Needed if you use its features
?jotlmillenzje.exe??
UJv16pt Network Residentjv16pt_network.exejv16 PowerTools' network resident program. Only needed if you are using the program's network features
Ujv16 PT TempFileToolTempTool.exejv16 PowerTools' temporary file remover

Back to search

 Name/Startup ItemCommandComments
NK6CPU.EXEK6CPU.EXEAuthenticates CPU as K6 in system properties
Xkakkak.htaAdded as a result of the KAKWORM VIRUS!
UKalibumpKalibump.exeUsed with the now unsupported Kali software for on-line gaming. This is used to automatically bump up the priority of WinProxy to GREATLY improve game speed when using a SOCKS proxy
NKana ReminderReminder.exeKana Reminder is a program which can be used to set a reminder to be triggered at a specified time
UKavRunsWindll.exeAdded as a result of the TRYNOMA VIRUS!
NKAZAAkazaa.exeKAZAA is a file-sharing program which unfortunately being ad-based includes "Cy-door" adware. Check here for information about "Cy-door" and here for a program that can remove it
XKAZAACuf9Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Nkazaalitekazaalite.exeKazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms
XKazaa lptt01kazaa.exeNew variant of the RapidBlaster parasite (in a "kazaa" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid KaZaA file sharing program which has the same executable name
UKBDKBD.EXEMultimedia keyboard manager. Required if you use the multimedia keys
UKBD MediaCenterMEDIACTR.EXEMultimedia keyboard manager. Required if you use the multimedia keys
NkdxKHost.exeKonTiki Secure Delivery Plug In related. "The Kontiki Delivery Management System (DMS) is a secure delivery network for distribution of video, software, audio, documents, and other digital media. The Kontiki DMS enables enterprises to efficiently publish, secure, deliver and track digital media to employees, partners, and customers"
XKeenvalueKeenvalue.exeKeenvalue spyware - see here
UKE9801DriBat32.exeKE-9801 multimedia keyboard - required if you use the multimedia keys
UKEMailKbKEMailKb.EXEControls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the buttons - like volume control or shut down
?Kemetkemet.exe??
XKernelbboy.exeAdded as a result of the MUMU.B VIRUS!
Xkernel32 (1)kern32.exeAdded as a result of the BADTRANS.A VIRUS!
XKernel32 (2)Kernel32.exeAdded as a result of a number of VIRUSES - such as BABYLONIA, KERNEL and HOOKER
Xkernel32 (3)kernel.dliAdded as a result of the NETDEVIL.B VIRUS!
XKernel32 (4)Kernel.dllAdded as a result of the REDLOF.M VIRUS!
Xkernel32 (5)kernel32.dlIAdded as a result of the NETDEVIL.15 VIRUS!
Nkernelfaultcheckdumprep 0 -k
dumprep 0 -u
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
XKernell32Kernell.dllAdded as a result of the DESTINY VIRUS!
XKernel Loaderntkrnl.exeAdded as a result of the CERVIVEC.A VIRUS!
XKernelwKernelw32.exeAdded as a result of the INDOR.E VIRUS!
UKeyboard ManagerMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys. Can also be listed as MULTIMEDIA KEYBOARD
YKeyboard Preload CheckPreload.exeMillenium Multi-Function Keyboard driver
UKeyMaestrokmaestro.exeMultimedia keyboard manager. Required if you use the multimedia keys
Ukeymapkeymap.exeSystem Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game
Xkeymgrldrrundll32 setupapi,
InstallHinfSection... keymgr3.inf
CoolWebSearch hijacker variant
UKeyPatrolKeyPatrol.exeKeyPatrol - detects Key Loggers ("keyboard loggers" or "keyloggers") using both behavioral and pattern-matching algorithms
NKey TextKeyText.exeKey Text 2000 from MJMSoft Design - utility to automate repetitive keyboard tasks. Available via Start -> Programs
UKeyWalletKWallet.exe"KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins, passwords and other personal data manually"
Nkhookerkhooker.exeSiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
UKICKMON.EXEKICKMON.EXEKeepItClean - utility that deletes safe to remove files, cookies, browsing history, etc. This is the scheduler - if you don't schedule clean-ups it isn't required
NKinberlinkKinberlink.exeKinberlink network messaging. Available via Start -> Programs
UKK Loaderloadkk.exeKeyKey XP Professional from KeyKey.com. "Monitor Instant Messages, Chats, Emails, Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and much more completely undetected to the user."
Uklprun32dll.exePAL PC Spy - key recorder and screen capture utility which controls and monitors everything that happens on your pc and online
UKM9801UMMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available
Ukmw_run.exekmw_run.exeKensington MouseWorks - mouse/trackball software. Not required unles you use any special features
Ukmw_show.exekmw_show.exeKensington MouseWorks - mouse/trackball software. Not required unles you use any special features
NKodak Batch Transferpezdow1.exePart of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
NKodak Picture Transfer Softwarepts.exeLooks for Kodak camera connection and media insertion. Available via Start -> Programs
YKodakCCSKodakCCS.exeKodak DC File System Driver
NKodak Software Updaterbackweb*****.exeSoftware updater for Kodak Easyshare digital cameras
NKonni Symbol AutostartKonniSymbol.exeGives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5
Nkontikikontiki.exeKontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
UKrnlmodKrnlmod.exeKeylogger - see here. Given a "U" recommendation because it depends if you intentionally installed it. If you didn't, treat it as "X" and uninstall or remove via Spybot S&D (for example)

Back to search

 Name/Startup ItemCommandComments
ULanSpeed2LanSpeed2.exeMonitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
ULapLink schedulerLlsched.exeUtility that automatically performs file transfers as unattended background operations
YLASTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
?Laterlater.exe??
?Launcglauncg.exe??
ULaunchApLaunchAp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
ULaunchboardlnchbrd.exe"LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions"
XLauncher (1)launcher.exeSpyware component related to DownloadWare and found in Program Files\KFH
NLauncher (2)relaunch.exeAudio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
NLaunch YahooPOPs! at Windows startupYAHOOPOPS.EXEYahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> 
Programs
ULavasoft AdwatchAd-watch.exePart of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
Ylaxmsp32.exelaxmsp32.exeLexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work 
ULCDCLCDC.exeLCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins
NLDMbackweb-8876480.exe
ldmconf.exe
Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech. Also listed under Logitech Desktop Messenger
ULED TRAYLEDTRAY.EXEInstalls a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
NLeechGetLeechGet.exeLeechGet download manager
XLetsSearchLetsSearch.exeBrowserAid/BrowserPal foistware variant
NLexmarkPrinTrayprintray.exeLexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
YLexmark Xxx Button ManagerAcBtnMgr_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
YLexmark Xxx Button MonitorACMonitor_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
ULexmark X5100 Serieslxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a 
desktop shortcut
ULexmark X74-X75lxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a 
desktop shortcut
N??lexpps.exeFor Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges
ULexStartlexstart.exeLexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
ULfsndmnglfsndmng.exeLightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents"
NLicCrtlrunservice.exeeLicense, licensing system incorporated with some software and games
NLifeScape Media DetectorPicasaMediaDetector.exeMedia detector for Picasa's automatic photo organizer
Xli-multi****li-multi****.exeAdult web-dialler - **** is random
NLine Speed Meter V3.0LineSpeedMeter.exeLineSpeedMeter - detect the download and upload speed of your internet connection
Xli-speed****dlres.exeAdult web-dialler - **** is random
Xli-thund****li-thund****.exeAdult web-dialler - **** is random
Xli-vita****li-vita****.exeAdult web-dialler - **** is random
NLIULIU.exe
Rubicon.exe
Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
NLiveMonitorLMonitor.exeMSI Live Update2 - auto-detects and suggests the latest BIOS/Driver/Utilities information
NLive MenuDllcmd32.exeeFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here
NLiveNoteLivenote.exeAsus graphics card driver live update feature
?LLMODCL2rundll.exe setupx.dll, InstallHinfSection
..\LLMODCL2.INF
??
ULManagerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
?lmpdpsrvlmpdpsrv.exeRelated to a Lexmark printer/scanner. Printer sharing server? Is it required?
NLMSTATUSLMSTATUS.EXELexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)
Nload= (1)adw30.exeAfter Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
Uload= (2)asistat.exeStatus monitor for an NEC SuperScript printer
?load= (3)cfgsys32.exe??
Uload= (4)esspk.exeSpeakerphone capability through a soundcard for an ESS modem
Yload= (5)hotkey.exeSolo 5300 display driver for Win2K on some Gateway laptops
Nload= (6)HPWHRC.EXELoads the Status Window software for the HP Laserjet printers
?load= (7)WPSLOAD.EXERelated to a Canon BJ C series printer?
Nload= (8)vi_grm.exeMonitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
?load= (9)WINOSCFG.EXECould it be something to do with configuring Windows on a new PC from an OEM supplier?
Yload= (10)wpshrc.exeRequired to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
Yload= (11)Bfrecv.exeBitware modem driver
XLOAD32 (1)Lorena.exeAdded as a result of the MAPSON.C VIRUS!
Xload32 (2)load32.exeAdded as a result of the NIBU, BAMBO and DUMARU VIRUSES!
YLoadBlackDblackd.exeThis is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility)
?LoadBtnHndBtnHnd.exeFujitsu LifeBook related
XLoadDBackUpBcTool.exeAdded as a result of the GIBE VIRUS!
?LoadDvpApi9xDVPAPI9X.exePart of Command AntiVirus for Windows 95/98/Me. Is it needed?
Xloaderloader.exeHomepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe
XLoadFontsLoadFonts.vbs
Tahoma.vbs
Homepage hijacker that changes your homepage to an adult content site
XLoadingAgentZipLoader32.exe
msload32.exe
Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
NLoadMSvcmmmsvcmm32.exeAuto-update for Movielink - internet movie rental System Tray access
XLoadOrderVerification*.exeAdded as a result of the TRON VIRUS! * is a random file name, possibly Pthymvfr.exe
ULoadout Managernost_LM.exeManager for the Belkin Nostromo n50 SpeedPad game controller - see here
XLoadPowerProfile (1)ASDAPI.EXEAdded as a result of the CABRO VIRUS! Not to be confused with the valid entry below
ULoadPowerProfile (2)Rundll32.exe powrprof.dllPower management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings
XLoadPowerProfile (3)Rundll.exe powerprof.dllAdded as a result of the LOXOSCAM VIRUS! Note - do not confuse with the valid LoadPowerProfile (2) entry above! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe"
ULoadQMloadqm.exeLoads the MSN Queue Manager. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it
ULOAD WBLOADWB.EXEPart of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it
XLoadWindowsFile<filename>Added as a result of the DELF.B VIRUS! where <filename> is the infected file
ULogi_MwxLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
XLoginPassportLgnpsp32.exeAdded as a result of the REDIST.C VIRUS!
XLogin Service<random filename>Added as a result of the MIGMAF VIRUS!
NLogitech Desktop Messengerbackweb-8876480.exe
ldmconf.exe
Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
YLogitechGalleryRepairISStart.exeAssociated with Logitech cameras. If unchecked it causes DLL errors and isn't stable
NLogitechImageStudioTrayLogiTray.exeAssociated with Logitech cameras
ULogitech UtilityLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
NLogitech Wakeuplgwakeup.exeLoads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images
XLogon.exelogon.exeHomepage hijacker
ULogonStudiologonstudio.exeWinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users"
ULogWatchlogwat95.exeLicensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied
YLook 'n' Stoplooknstop.exeLook 'n' Stop personal firewall
XLookup_Syslookupsys.exeP04n trojan
NLotus Organizer EasyClipeasyclip.exe"The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs
NLotus QuickStartsmartctr.exeLotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs
ULotus SuiteStartsuitest.exePuts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs
XLowVersionSupport<filename>Added as a result of the LASTRAS VIRUS! where <filename> is the name of the file dropped by the virus
NLS120 Superdisk??Supposed to accelerate transfer rate on LS-120, contributes to system lockups
Xlsass (1)lsass.exeAdded as a result of the RATSU.B VIRUS! Note! - the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
Xlsass (2)start.batAdded as a result of the ZCREW VIRUS!
XLSPFix
or
LSPmonitor
LSPmonitor.exeeAcceleration Stop-Sign related - foistware. Read their privacy statement here
XLSvrLSvr.exePowerStrip foistware
YLT DAEMONltdaemon.exeActs as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
XLTDMgrLTDMgr.exePowerStrip foistware
XLTM2MSGSRV32.EXE
MPGSRV32.EXE
MSGSRV320.EXE
winupdate.exe
bible.exe
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
ULtMohLtmoh.exeModem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
NLTSMMSGLTSMMSG.exeLucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too
XLTSMSGShell32.exeAdded as a result of the LEMIR.B VIRUS!
YLTWinModem1ltmsg.exeOne of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
NLVComslvcoms.exeLvcomm server. Related to Logitech Quick Cam - works fine without it
ULWBMOUSElwbwheel.exe
MOUSE32A.EXE
Mouse driver - required if you use non-standard Windows driver features
NLwinst Run Profilerlwtest.exeLogitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
?lxamsp32lxamsp32.exeAssociated with a Lexmark Printer - is it required?
?LXbbmgrLXbbmgr.exeLexmark printer button manager? Is it required?
NLXSUPMONLXSUPMON.EXELexmark Printer. The printer should work fine without it

Back to search

 Name/Startup ItemCommandComments
NM3Traym3tray.exeMovielink - internet movie rental System Tray access
NMachine Debug Managermdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7
NMacLicMacLic.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
NMacNameMacName.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
NMadExeLaunchRA.exeDell Resolution Assistant
YMAD.EXEMAD.EXEMAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
UMagicDskMAGICDSK.EXEMagic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
NMagitimeMagitime.exeMagitime - connection tracking utility which monitors online time, expense, data transfer
UMailBellmailbell.exeMailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
UMailbox Verifiermboxvrfy.exeMailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
XMail_CheckMail_Check.exeAdded as a result of the PANOIL.C VIRUS!
?Mail.commcalert.exeMail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
?Main Executable (HP)HP05T0R5.exeHP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?
NMania Win RestoreRESWIN.EXEPinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
XMantis<filename>Added as a result of the MANTIBE VIRUS! where <filename> is the filename
?mapisvc32mapisvc32.exe??
NMass storage check registryrundll32.exe MSDServ.dll,
check registry
Used with a USB based smartmedia card reader
UMatadormlfbuddy.exeMailFrontier - anti-spam application
XMatrixScreenSavermss.exeMalware, see here
NMatrox Color Controlhgcctl95.exeFor Matrox video cards. Quick access to changing colors
NMatrox Control Centermgactrl.exeFor Matrox video cards. Quick access to settings
NMatrox Diagnosticmgadiag.exeFor Matrox video cards. Quick access to diagnostics
NMatrox PowerdeskPDesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
NMatrox QuickDeskmgaqdesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
XMaxAlertsmax.exeBonzi MaxALERT - spyware
YMaxtorComboComboButton.exeRequired to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
UMaxtorRegAUTOREG.EXEPart of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
UMBM 4MBM4.exeMotherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
UMBM 5MBM5.exeMotherboard Monitor 5 - as above but for version 5
UMBProbembrpobe.exeMBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
XMCwintrims.exeAdded as a result of the WINTRIM VIRUS!
UMcAfee.InstantUpdate.MonitorRuLaunch.exeInstant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan 
leave it enabled unless you update manually on a regular basis
YMcAfee FirewallCPD.EXEFirewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
NMcAfee GuardianCMGRDIAN.EXEMcAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
?McAfeeUpdaterUIUpdaterUI.exeAssociated with McAfee Enterprise 7.0.0. Updater for McAfee anti-virus and security programs?
YMcAfeeVirusScanServiceAvsynmgr.exeFrom McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
YMcAfeeWebscanXWebScanX.exeFrom McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
NMcAfee Winguage??Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
UMcAgentExemcagent.exeFrom McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
?Mcappins.exemcappins.exeMcAfee Application Installer. What does it do and is it required?
NMChangerMChanger.exeMedia Changer - utility that allows you to change wallpapers, sounds, themes, etc
UMcUpdateExemcupdate.exeFrom McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
YMcVsRtemcusrt.exePart of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why
Ymcvsshldmcvsshld.exeMcAfee VirusScan On-line. See also McAgentExe above
Nmdac_runoncerunonce.exeAssociated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". 
XMD IE Plugin (1)md.exeAdult content dialler
XMD IE Plugin (2)winy.exeAdware
XMdmMdm.vbsAdded as a result of the WHITEHO or TRAPPY VIRUSES!
NMDM7mdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager
NMediaFace IntegrationSethook.exeFellowes Neato™ cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
UMediaKeyMediaKey.exeMultimedia keyboard manager. Required if you use the multimedia keys
XMediaLoads
or
MediaLoads Installer
dw.exeMedialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
Xmedia_managermediaman.exeMini-Player,  IMESH related foistware, see here
UMedia Manager IndexerAIRSVCU.EXEPart of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
NMediaMonitorMediam~1.exeInstalled by Smartdisk MVP CD burning software. Software will work fine without it
XMediaPathProyecto1.exe
Root.exe
Added as a result of the GRUEL VIRUS!
XMedia Plug x.1.2msdm.exeAdded as a result of the MULDROP.352 VIRUS!
NMediaRing Talkmrtalk.exeMedia Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
Xmedia_stubstub.exeMini-Player,  IMESH related foistware, see here
UMemoKitMK.EXEMemory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
UMemory+tfimemsr.exeMemory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
XMemoryMeterMemoryMeter.exeAutoinstalling spyware by Total Velocity
NMemory Stick MonitorMSTAT.exeUsed with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
UMemTurbomemturbo.exeMemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
NMenuSnapMenuSnap.exeMenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe
UMessage_Blockermessageblock.exeMessage Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"
NMessagerStarter FreeserveStartMessager.exeFreeserve Messenger
XMessenger Blockmsngrblock.exeAdded as a result of the PATOO VIRUS!
NMessengerPlus
or
MessengerPlus2
MsgPlus.exeThird party MSN Messenger extension that hides banner ads and adds archiving and other useful features. Appears not to work unless checked, but may be activated after startup. Not recommended as it includes Lop.com - see here
Xmessnger (1)<filename>Added as a result of the DLODER VIRUS! where <filename> is the worm name
Xmessnger (2)Dvldr32.exeAdded as a result of the DELODER.A VIRUS!
?mfgboot????
NMGA_CD_Installmgasetup.exeMatrox Millennium video driver. Not required once drivers installed
NMGA QuickdeskMGAQDESK.EXEFor Matrox video cards. Quick access to tweak your card to your liking
Ymgavctrl
or
mgavrtclexe
mgavrtcl.exe
mgavrte.exe
McAfee's Virus Scan Online
NMHINITMHINIT.EXEPart of the Cybermedia Clean Sweep package
NMicroangelo DesktopMuamgr.exeQuick access to MicroAngelo 5.0. Available via Start -> Programs
NmicroAttuneDownloadatmdlusr.exeUSR (US Robotics) modem auto updater. May be a sub-set of Attune
UMicroDialleratdialler1.exePart of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
XMicrofinder lptt01mcf.exeNew variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
XMicroLoad<random filename>Added as a result of the DARBY VIRUS!
Xmicrosoftsvchost.exeAdded as a result of the ASTEF VIRUS! Note - this is not the valid svchost.exe as described here
Xmicrosoft420microsoft420.exeAdded as a result of the MENACE.B (or W32.SOFUNNY) VIRUS!
NMicrosoft Announcement ListenerAnnclist.exeMS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
XMicrosoft auto updatewinupdate.exeAdded as a result of the BMBOT VIRUS!
XMicrosoft Conf Ldrsysconf.exeAdded as a result of a variant of the SDBOT VIRUS!
XMicrosoft Corporation<random filename>Added as a result of various VIRUSES such as VISAGES, BABYBEAR and TOFACED
XMicrosoft Cvrtmscvrt32.exeAdded as a result of a unidentified VIRUS!. Named almost, but not exactly like the legitimate msvcrt or msvcrt20.dll
XMicrosoft Diagnostic<filename>.exeAdded as a result of the ACEBOT VIRUS! The <filename>.exe will be random and must be deleted after the virus has been removed. Not to be confused with the DOS based MSD.EXE
XMicrosoft Find FastFindfast.exeComplete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
YMICROSOFT FIREWALL CLIENTISATRAY.EXEMS Internet Security and Acceleration Server 2000
NMicrosoft Greetings  ReminderMHPRMINF.EXEYou really want to be reminded about somebody's birthday at the expense of resources?
NMicrosoft Greetings Workshop ReminderGwremind.exeYou really want to be reminded about somebody's birthday at the expense of resources?
XMicrosoft Inet Xp..teekids.exeAdded as a result of the BLASTER.C VIRUS!
UMicrosoft Intellitype Prospeedkey.exeAdditional keyboard shortcuts on MS programmable keyboard
XMicrosoft IPC (1)system.exeAdded as a result of the NULLBOT VIRUS!
XMicrosoft IPC (2)svshost.exeAdded as a result of an unidentified VIRUS!
NMicrosoft Office (1)
or
Microsoft Office Startup
Osa.exe
Osa9.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Osa9.exe is the Office 2000 variant
NMicrosoft Office (2)
or
Microsoft Office Shortcut Bar
Msoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
NMicrosoft Office Fast CacheFastboot.exePart of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast above and can be disabled
XMicrosoft Netviewgesfm32.exeAdded as a result of the RANDEX.C VIRUS!
XMicrosoftNetwork Daemon for Win32NETD32.EXEAdded as a result of the RANDEX.F VIRUS!
XMicrosoft RDLLsysconf32.exeAdded as a result of a variant of the SDBOT VIRUS!
XMicrosoft Scanregmicrosoftscanreg.exeAdded as a result of the FRANRIV.A VIRUS!
XMicrosoftServiceManager (1)mstask32.exeAdded as a result of the YAHA.P VIRUS!
XMicrosoftServiceManager (2)Wintsk32.exeAdded as a result of the YAHA.U VIRUS!
XMicrosoftServiceManager (3)EXPLORERE.EXEAdded as a result of the YAHA.AB VIRUS!
XMicrosoftServiceManager (4)msupdat.exeAdded as a result of the YAHA.AA VIRUS!
NMicrosoft Sidewinder Game Controller SoftwareSWTRAY.EXEMS SideWinder game controller system tray icon. Available via Start -> Programs
NMicrosoft Sound Volume Toolmssvol.exeThis is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
XMicrosoft Spool Server for Win32spoolsrv.exeAdded as a result of the RANDEX.H VIRUS!
XMicrosoft® System MapperSysMap.exeAdded as a result of the MAPSY VIRUS!
XMicrosoft System Restore ConfigurationCBRSS.EXEAdded as a result of a variant of the SPYBOT VIRUS!
XMicrosoft Tray<random filename>Added as a result of the DELF.BZ VIRUS!
XMicrosoftValuesyscnfg.exeAdded as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
UMicrosoft Webserversvctrl.exePersonal web server program which enables you to create and host a web server from your computer. Not required for most people
XMicrosoft Windows Kernel Serviceswinkrnl386.exeAdded as a result of the ZEBROXY VIRUS!
XMicrosoft Windows Update Servicewupdmgr32.exeAdded as a result of the DOS.AUTOCAT VIRUS!
NMicrosoft Works Calendar Reminderswkcalrem.exeProduces a pop-up reminder of events scheduled using the MS Works Calendar
NMicrosoft Works PortfolioWksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
NMicrosoft Works Update Detection wkdetect.exeChecks for updates to MS Works
Xmicrosoft xdaemon 2.0xdaemon.exeAdded as a result of the DELF.D VIRUS!
NMightyFAX ControllerMFNTCTL.EXEMighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software"
XMINIBUGMINIBUG.EXEDisplays ads inside Weatherbug - see here
UminilogMINILOG.EXEIf you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
NMiniNoteMININOTE.EXEMini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software
NMINIFERT.EXEMINIFERT.EXEPart of Backweb
UMinMaxExtenderMmext.exeMinMaxExtender - window handling tool
NMirabilis ICQNDetect.exe
icq.exe
ICQNet.exe
If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
NmiroVIDEO Tray Toolmisitray.exeTool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card, e.g. for the above actions
?misiCTRLmisiCTRL.exeMiro video driver related. Is it required?
?misiTRAYmisiTRAY.exeMiro video driver related. Is it required?
NMixghostmixghost.exeManagement software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu
UMMhidmmhid.dllThis is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP
?MMHKmmhk.exeA driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?
?MMHotKeyMMHotKey.exeFrom T-Media - possibly something to do with multimedia hot keys?
?MM Installsetup.exePossibly Money Manager from Moneysoft?
UMMKeybdMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
Xmmodmmod.exeEzula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
Nmmptim1mmpti.exeMpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
?MMRunmmrun.exe May be related to Musicmatch Jukebox as below?
YMMTASKmmtask.tskA check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc
XMMtask Servicemmtask.exeAdded as a result of a VIRUS related to the SOBIG.E VIRUS!
NMMTray (1)mm_tray.exeMusicmatch Jukebox icon in the task tray. Often supplied with HP CD-RW drives.  The program works fine without it
NMMTray (2)MMTray.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
NMMTray2KMMTray2K.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
NMMTrayLSIMMTrayLSI.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
?mmusrstpprocrun.exe??
Xmmxrunmsosa.exeAdult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and RegCompres (REGCPM32.EXE), otherwise they return
Xmnsvcmnsvc.exeAdded as a result of the AUTOUPDER VIRUS!
Xmnsvcspmnsvcsp.exeVIRUS!
Nmobsyncmobsync.exeMS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages
NMODmuamger.exeMicroAngelo On Display from Impact Software lets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them
U??MODEMBTR.EXEModem Booster from inKline Global to improve ISP connections
UModemOnHoldMOH.EXENetWaiting Modem-on-Hold Application
NModemUtilitymdmsetpe.exeSystem Tray configuration icon for Aztech modems
XModularConfigsyscnfg.exeAdded as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
XModule Call initializeRUNDLL32.EXE reg.dll,
ondll_reg
Added as a result of the LOVGATE VIRUS!
NMorpheusmorpheus.exeMusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"
NMoneyAgentmoney express.exePart of MS Money. Available via Start -> Programs
NMoney Expressmoneyexpress.exePart of MS Money. Available via Start -> Programs
NMoneyStartUp10.0Activation.exePart of MS Money 2002. Available via Start -> Programs
UMonitor Apache ServersApacheMonitor.exePart of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
Nmoon phasemoon.exeMoon Phase - tray icon that indicates the phases of the moon
Xmosearchmosearch.exeFast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here
UMotiveMonitormotmon.exeOn HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required
NMotiveSBMotiveSB.exeThe same as Motive SmartBridge below
NMotive SmartBridgempbtn.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
UMount Safe & SoundFbmount.exeFrom McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
NMouse 32AMouse32A.exeMouse driver to control mouse functions from Azona. Available via Start -> Programs
NMouseCountMC.exeMouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required
UmouseElfMC.exeSystem Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features
UMouseImpMImpHost.exeMouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device"
NMouse Suite 98 Daemonpelmiced.exeMouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
UMousinfomousinfo.exeMS mouse information tool - for troubleshooting mouse problems
XMovieNetworksMovieNetworks.exeMovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:\Program Files\MovieNetworks directory
XMovieplaceMovieplace.exeMoviePlace malware
NMozilla Quick LaunchNetscp6.exe
Mozilla.exe
Netscape 6 and Mozilla browsers
YMPFExempf.exe
MpfTray.exe
McAfee Personal Firewall
?M Player Post Installerpostinstallm.exe??
UMplSetupMplSetup.exeUsed by Ricoh network printers to enable network printing from the client
UMPowerMPower.exeMPower from MindBeat. "Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load". Some users swear by programs such as this but I suggest you read this article and make up your own mind
YMPREXE.exemprexe.exeWIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here and here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus
XMprHTMLMprHTML.exeAdded as a result of a variant of the VAGRNOCKER VIRUS!
UMPSExemscifapp.exeMcAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"
?MP_STATUS_
MONITOR
monitr32.exeRelated to Cannon Multi-Pass
XMPtask Servicesmptask.exeAdded as a result of the LALA or DOWNLOADER-BN.B or AOT VIRUSES!
NMPTBoxMPTBOX.EXECannon Multi-Pass toolbox - a button bar
UMPEOCsinsm32.exeAutomatic logging of installs from Norton CleanSweep - available via Start -> Programs
Xmqbkupmqbkup.exeAdded as a result of the OPASERV.K VIRUS!
NmrtMngrmrtMngr.exeMaintenance Release Task Manager for Intuit’s QuickBooks or Quicken
UMRU-Blaster Schedulerscheduler.exeMRU-Blaster scheduler - detects and cleans MRU (most recently used) lists on your computer
NMRU-Blaster Silent Cleanmrublaster.exeMRU-Blaster - performs silent cleaning of MRU lists at boot
XMS7531ms7531.exeHomepage hijacker
XMSAdminjdbgmrg.exeAdded as a result of the DASMIN.A VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
XMSBBmsbb.exeAdvertising spyware
Umscnmscn.exePart of the SafeChildNet internet filtering program - required if you use it
NMSConfig (1)
or
MSConfigReminder
msconfig.exeThis is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
NMSConfig (2)MSCONFIG32.EXEUnidentified adware, spyware or virus. Not to be confused with the valid entry above which has the command "msconfig.exe"
XMS Config Loadersvchos1.exeAdded as a result of the AGOBOT.R VIRUS!
XMsconfig lptt01msconfig.exeNew variant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Msconfig which has the same executable name
XMSConfigrjdbgmrg.exeAdded as a result of the DASMIN.C VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
XMS-Connectarr.exe
cdm.exe
game.exe
msite18.exe
web.exe
Adult content dialler - see here
XMSCOREsyscnfg.exeAdded as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
XMsctrl32Msctrl32.scrAdded as a result of the REDIST VIRUS!
XMSDLLsyscnfg.exeAdded as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
XMsdos32Msdos32.pifAdded as a result of the RECORY VIRUS!
Xmsdos423msdos423.exeAdded as a result of the MENACE.A (or W95.SOFUNNY.WORM@M) VIRUS!
NMSDTCmsdtc.exeMS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
Xmsfindosa.exemsfindosa.exeAdded as a result of the DOWNLOADER-BS VIRUS!
XMsgmgr<path to worm>Added as a result of the BABYBEAR VIRUS!
XMsgsrv16Msgsrv16.exeAdded as a result of the DELF family of VIRUSES!
YMSGSRV32.exemsgsrv32.exeWindows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background
XMsgtraysys16.exeAdded as a result of an unknown VIRUS!
XMSHT@MSHT@.EXEAdded as a result of the MAGISTR.A VIRUS!
XMS HTML (1)msHtml.exeAdded as a result of the PESTDOOR.31 VIRUS!
XMS HTML (2)mslat.exeAdded as a result of the LATINUS.SVR VIRUS!
XMS-HTML (3)<random filename>Added as a result of the LATINUS.15 VIRUS!
XMSKCES32<filename>Added as a result of the CLONER VIRUS!
XMSKernel32MSKernel32.vbsAdded as a result of the LOVELETTER (I LOVE YOU) VIRUS!
UMSKExespamkiller.exeMcAfee SpamKiller
?MSLIB32mswatch32.exe??
XMslogon lptt01mslogon.exeNew variant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Xmsmanager32msmngr32.exeAdded as a result of the RANDON-R (or WOMANIZ.A) VIRUS!
XMsmgtmsmgt.exeTotal Velocity adware/hijacker
?MsmqIntCertregsvr32 /s mqrt.dllMicrosoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?
NMSMSGSmsmsgs.exeMSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
Xmsnsystem32.exeAdded as a result of the KITRO.A VIRUS!
XMSNETmsnet.exeAdded as a result of the BOA VIRUS!
XMS Network Controlmswin.exeAdded as a result of the DUMBA VIRUS!
?MsnFixermsnfixjs.jsLocated in the HP\bin\msnfix directory of a HP PC
NMSN Internet Accesstrayclnt.exeQuick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
XMSN messengermessenger.exeUnidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
XMSN messenger servicemssgs.exeUnidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
Nmsnmsgrmsnmsgr.exeMSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
NMSN Quick ViewMsndc.exeQuick way to connect to MSN internet service
?MSNSysRestorepc32.exe??
XMSOOBDMSOOBD.EXEAdded as a result of the MAGISTR.A VIRUS!
XMSPQFileMSA****.TMPHomepage hijacker. See here for more information. **** can be anything
Umspwrpupstman.exe"Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me) 
NMSPY2002ImScInst.exePart of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
XMsrcMsrc.exeAdded as a result of the KRYPTONIC GHOST VIRUS!
XMSREGITMsgp.exeAdded as a result of the KRYPGHOS (Kryptonic Ghost) VIRUS!
XMSRegSvcregsvc32.exeHomepage hijacker that changes your homepage to an adult content site
XMS-RunKeyarr.exeMS-Connect dialler/hijacker
XMS Security Hotfixservice5.exeAdded as a result of the GAOBOT.AG VIRUS!
Xmsservicemsserv.exeAdded as a result of the HYD VIRUS!
XMS_SETUP.EXEN/AAdded as a result of the CHARGE VIRUS!
XMs Spool32MS SPOOL32.EXEAdded as a result of the ASASSIN VIRUS!
XMSSQLMssql.exeAdded as a result of the SDBOT VIRUS!
XMSStartOptimizer (1)Iexpres.exeAdded as a result of the POLDO.B VIRUS!
XMSStartOptimizer (2)WINUPD.EXEAdult material dialler - see here. This has to be cleared at the same time as RegCompres (REGCPM32.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
Xmssurfer lptt01mssurfer.exeNew variant of the RapidBlaster parasite (in a "surfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware
Xmssvc<path to trojan>Added as a result of the PSK VIRUS!
XMSSHVCMSSHVC.exeAdded as a result of the NUFFY.A VIRUS!
YMSSVC.EXEMSSVC.EXEStealthdisk - hides folders, files and applications. Will also encrypt them for better protection
XmssysintIexplore .exeAdded as a result of the PWSTEAL.ABCHLP and PSPIDER.310.B VIRUSES! Note - this is not the valid Internet Explorer (iexplore.exe)
Xmssyslanhelpermsmsgri32.exeAdded as a result of the RANDEX.D VIRUS!
XMstapiMstapi.exeKeylogger trojan
XMstng32MSTng32.exeAdded as a result of the TANG VIRUS!
XMS Updatesmscache.exe
aupd.exe
Spyware web downloader
XMSVXDMSVXD.EXEAdded as a result of the DATOM.A VIRUS!
XMswincfgMswincfg32.exeAdded as a result of the CYBERSPY VIRUS!
UMSwheelmswheel.exeMicrosoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
XMsys32morfitwebentrance.exeMorfit ADjectPager - "uses home page rental technology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage 
Xmsys lptt01msys.exeNew variant of the RapidBlaster parasite (in a "Msyss" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
XMtr2mtr2.exeAdded as a result of the KRYPTONIC GHOST VIRUS!
Nmuamgrmuamgr.exeQuick access to MicroAngelo 5.0. Available via Start -> Programs
?Mufixmufix.exe??
UMultiCAM InitializerMCamBoot.exeThe MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled
UMulti-function keyboardGWHotkey.exeSoftware that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail, browser, volume and CD/DVD controls, etc)
UMultimedia KBD
or
MULTIMEDIA KEYBOARD
MMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys. Can also be listed as Keyboard Manager
UMultiResMultiRes.exeMultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP
UMUPSMUPS.exeLauches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions
Ymurphy shieldlmgui.exeFirewall part of BitDefender virus scanner/firewall
NMusic01 ServerMusic01 Server.exeJ River Media Jukebox
NMWSnapMWSnap.exeMWSnap - screen capture utility. Start manually when required
XMxHLp32MxHLp32.exeAdded as a result of a variant of the VAGRNOCKER VIRUS!
NMXO Auto LoaderMXOaldr.exeMaxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and can be disabled without causing problems
UMxRunnerMxRunner.exeEasyUninstall from Aladdin Systems (formerly by Ontrack)
UMyAgtTryMyAgtTry.exeSystem tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
?Myapp (1)MMX.EXE??
XMyapp (2)service.exeHomepage hijacker
YMyCIO Agent Servicemyagtsvc.exeMcAfee VirusScan ASaP Agent service
UmyCIO.com ASaPMyAgtTry.exeSystem tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
NmyCIO.com SplashSplash.exeSplash screen for McAfee VirusScan ASaP on-line scanner
NMyFastAccessmyfastupdate.exeMy-Fast-Access toolbar updater
XMyLifeCmdServ.exeAdded as a result of the HOLAR.A VIRUS!
UmyNetWatchmannwclient.exeSends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running
Umyprint mileagempm.exeReports battery status on a portable printer
XMy Search Bar EqS4BAREQ.EXEMySearch bar parasite
UMytekSystrayExePathMyTekSystray.exeMyTek system tray - web site providing computer tech support in Australia
UMyVitalAgentVtlAgent.exeMyVitalAgent from Lucent Technologies. Replacement for Net.Medic, monitoring all popular internet transactions and alerting the user of the loaction of connection problems. Available via Start -> Programs

Back to search

 Name/Startup ItemCommandComments
UN2PTrayNet2fone.exeAn Internet telephony application. Needed only if you have an account at Net2Phone, Inc
YNaimagent_serviceEPOAgentnaimas32.exeNetworked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
YNaimagent_UIEPOAgentnaimag32.exeNetworked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
NNADaemonNADAEMON.EXEProgram by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
NNaggerrunkeynagger.exePackard Bell Free Internet Signup screen
XNAVRuxDLL32.exeAdded as a result of the MAPSON.D VIRUS!
YNAV Agent (1)
or
navapw32
navapw32.exeIntroduced with Norton Anti-Virus 2002 to replace Norton Auto-Protect and Norton eMail Protect. Leaving "Auto-Protect", "E-mail Scanning" and "Script Blocking" enabled doesn't seem to slow the system down. 
XnAv AGENT (2)N/AAdded as a result of the RIOSYS VIRUS! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
XNavAgent32 (1)lasvr32.exeAdded as a result of the FEMOT.D VIRUS!
XNavAgent32 (2)SCardSvr32.ExeAdded as a result of the MOFEI.B VIRUS!
XNAV Auto UpdateNavautoupdate.exeAdded as a result of the SPYBOT VIRUS!
NNAV CfgWiz
or
NAV Configuration Wizard
cfgwiz.exeIntroduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
UNAV DefAlertDefAlert.exeNorton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
UNaviscopenaviscope.exeNaviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
XNAV Live Update<filename>Added as a result of the DEBORMS.C VIRUS! <filename> represents the path to the worm. Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
XNavPassNavPass.exeFree system for gaining access to and downloading from adult content web-sites
XNAVUpdrundll32.exe navupd.dll, StartupAdded as a result of the NAVU VIRUS!
NNB Common Dialog EnhancementsCOMDLGEX.EXEPart of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
UNbkCtrlNbkCtrl.exeScheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
NNB Start MenuSTARTM.EXEPart of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
NNB Windows PatternsWINDBKGND.EXEPart of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
?NCClientN/A??
NNCDncd.exeNorton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
?NCLAUNCHNCLAUNCH.ExePart of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required?
NNCS_SSCsinsm32.exeSame as CleanSweep Smart Sweep-Internet Sweep
?NDDEAGNTNDDEAGNT.EXEWinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
XNDplDeamonnstask32.exe
winlogin.exe
Added as a result of the RANDEX.E VIRUS!
UNDPSDPMW32.EXENovell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature
?NECMFKnecmfk.exeNec related - maybe a browser and e-mail launch interface?
?neqprvfy.exeneqprvfy.exeAppears to be related to the downloading of some application - possibly verifying updates?
UNeroChecknerocheck.exeAssociated with "Nero Burning Rom" CD writing software. Used to install/control Nero driver nerocd2k.sys. Required only if you use Win2K/XP and login without admin privileges
XNero.ma<digits>.exeAdded as a result of the JONBARR.D VIRUS! where <digits> is 2 or 3 random digits
XNetWINREG.EXEAdded as a result of the ASSASIN.D VIRUS!
UNetAcceleratorNetAccel.exeNetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance
UNet Activity Diagramnad.exeNet Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs
XNetapiNetapi.exeAdded as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
XNetAppwinserv.exeAdded as a result of the SHADOWTHIEF VIRUS!
UNetCruiser DialerNCDialer.exeNetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"
?netfxupdatenetfxupdate.exe??
NNet-It LauncherNILaunch.exeNet-It - web publishing software
NNetline Usernetchk.exeNetline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example
UNetlimiterNetlimiter.exeNetlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."
XNetManagerServicentss.exeAdded as a result of the BESTPICS.A VIRUS!
NNetPerSecNetPerSec.exeNetPerSec - measures the real-time speed of your Internet connection
XNetropa Internet ReceiverNetropa.exeNetropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
UNetRunNetRun.exeNetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost
NNetscape MessengerNETSCAPE.EXEIn Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed
NNetscp6Netscp6.exeNetscape 6
UNetShow Powerpoint HelperNSPPTHLP.EXEIf disabled, user created fonts can no longer be seen by other programs
NNetStat LiveNsl.exeAnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data
UNetTimeNETTIME.EXEFrom a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."
UNetTurbonetturbo.exeNetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled
NNetword Agentnwant33.exeAn interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
XNetwork AdministrationNAS.exeAdded as a result of the ANTILAM.20.Q VIRUS!
XNetworkClientNetworkClient.exeAdded as a result of the LEMUR VIRUS!
UNetWork Device SwitchNetDevSW.exeToshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
NNetworkSetupdlink.exeD-Link System Tray icon
NNetZIPFoldersnzfprop.exeNetzip Classic zip file manager
XNetzip Smart Downloadernpnzdad.exeAdvertising spyware
XNeuroMedia(IESpeaker)NeuroMedia.exePart of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available
NNeuroSpeech OESpeakerOEMonitor.exePart of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not
XNew.net
or
NEWDOT~1
rundll32.exe NewDotNetStartup
Newdot~2.exe
Advertising spyware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example
NNewsalrtNEWSALRT.EXEMSNBC News system tray utility to alert you to new news
XNewsgroup lptt01newsgroup.exeNew variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
NNewsUpdnewsupd.exeFor Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.
UNFM ServiceNPDOR9x.exeAppears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. 
Otherwise not required
NnForce Tray Optionssstray.exenVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
NNielsen NetRatingsinsight.exeNielsen NetRatings -  "Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site’s audience and your customers". Is it required?
XnikLausnikLaus.exeAdded as a result of the NIKLAS VIRUS!
NNInitNInit.exeNorton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
YnisservNISSERV.EXENorton Personal Firewall
YNisumNISUM.EXENorton Personal Firewall
NNkVwMon.exeNkVwMon.exeInstalled with a Nikon digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
?NMSSvcNMSSVC.EXENIC Management Service - diagnostics program for Intel Pro family network cards
YNMSVCnmSvc.exeCovenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it
UNNSvcnnsvc.exeNetNanny internet filter
UNoAdsNoAds.exeBlocks advertisement banners in Internet Explorer
XNo Credit Cardplugin-<random>.exeAdult content pop-up dialler
UNod32CCnod32cc.exeControl Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button
YNOD32kernelNod32krn.exeNod32 Antivirus Version 2
Ynod32kuinod32kui.exeNod32 Antivirus Version 2
YNOD32POP3Pop3scan.exePOP3 E-mail part of Eset's NOD32 virus-scanner
?NodeMngerNodemngr.exePart of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?
UNo-IP DUCDUC20.exePart of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available
NNokia Connection MonitorNclConf.exeMonitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
UNOMAD Detectorctmnrun.exeDetects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
NNomdChecknomdchek.exePart of Intel's Native Audio
UNorman ZANDAZLH.EXESystem Tray icon for Norman Antivirus
YNorton Auto-Protectnavapw32.exeNorton Anti-Virus's background scanning process. Can be inconvenient because it scans files when Run/Opened or Downloaded/Created and you can scan files manually via right-click after downloading/copying. However, in light of some of the viruses around these days it's probably best to put up with the inconvenience
?Norton AV PreloadPremend.exeNorton Antivirus related. What does it do and is it required
NNorton Crashguard Monitorcgmenu.exeTroublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
NNorton Disk DoctorNdd32.exeNorton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
YNorton eMail ProtectPOPROXY.EXEProxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
NNorton Navigator Loadernnloader.exeAn older Norton utility for file management under Windows 95. More information here
UNorton Program Schedulernsched32.exe
NPSsvc.exe
Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
?Norton Program Scheduler Event Checkernpscheck.exePart of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker
NNorton System DoctorSysdoc32.exeNorton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
?NotebookManagernbm.exeAssociated with Acer notebook PCs. What does it do and is it required?
XNotepad lptt01notepad.exeNew variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not Windows Notepad which has the same executable name
UNPROTECTnprotect.exeNorton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin
?NPS Event Checkernpscheck.exePart of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker
?NovaPortal Single User ServiceNPSU.exe??
UNovastorSchedulerdSCHENGD.EXENovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
XNSCheckNSCHECK.EXENettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
Xnsdluansdlua.exeAll-In-One Telcom - adult content dialler
Xnsdrivernssys32.exeAdded as a result of an unidentified VIRUS!
UNsengineNsengine.exeScheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
XNSupdateNSupdate.exeAdult content dialer
XNsvdrnsvdr.exeAdult content dialler
XNTDLMcsrss.exeAdded as a result of the HALE VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling as this resides in c:\winnt\system32\qossrv\
UNTFSCLUPNTFSCLUP.EXEPart of ConfigSafe. What does this part do?
NNT Kernel Patchntkrnlpt.exeFaxServe network fax software
NNTrtcntrtc.exeDell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here
XNTsocketNoeWinnt.exeAdded as a result of the ATAKA-E VIRUS!
U??NTVDM.EXEWindows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
Xntvdscmntvdscm.exeAdded as a result of the TR/SCKEYLOG.SPY.20 VIRUS!
YNuTCSetupEnvironncoeenv.exeUsed by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone
?NVCLOCKrundll32 nvclock.dll, fnNvclockOverclocking utility for nVidia based graphics cards?
?NvColorInitrundll32.exe NvQtwk.dll, NvColorInitAssociated with Nvidia based graphics cards
UNvCpl
or
NvCplDaemon (1)
rundll32.exe NvCpl.dll, NvStartupIntializes the clock and memory settings on nVidia based graphics cards. Disable if you overclock your card
NNvCplDaemon (2)rundll32.exe NvQtwk.dll, NvCplDaemonAs above - the name is dependent upon the driver version you have
XNvCplDmnNAVSVC.EXEAdded as a result of an unidentified VIRUS!
Xnvd32 lptt01nvd32.exeNew variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
NNvidiaQuickTweak
or
NVQuickTweak
rundll32.exe NvQtwk.dll,
NvTaskbarInit
System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
UNVIEWrundll32.exe nview.dll,
nViewLoadHook
This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
NNvInitializerundll32.exe NvQtwk.dll,
NvXTInit
Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
YNVmaxNVmax.exeNVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
UNvMediaCenterRunDLL32.exe NvMCTray.dll,
NvTaskbarInit
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your 
card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
NNvSvcnvsvc.exeNVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
XNvXplDeamonxstyles.exeAdded as a result of the SMALL.AJ VIRUS!
Nnwiznwiz.exeAssociated with the newer versions of nVidia graphics cards drivers.  Allows you to immensely improve desktop layouts by setting preferences and optimizations.  However, this isn't necessary for the operation of your system
YNwpopupNwpopup.exeBroadcast message handler part of Novell Netware that displays server, printer and other messages. Older version of nwrecmsg below
Unwrecmsgnwrecmsg.exeBroadcast message handler part of Novell Netware that displays server, printer and other messages. Newer version of Nwpopup above and can cause crashes
YNWTRAYnwtray.exeNovell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client

Back to search

 Name/Startup ItemCommandComments
Yoahstifroahstifr.exeComes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
UOAKSTARTOAKSTART.EXESets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
NOAKTASKOAKTASK.EXETaskbar utility for a "control panel" for a CD-RW
YObject Store Serverosserver.exeComes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
NOCAudioIniOCAudioIni.exeOne-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer
Nocrawareocraware.exeOptical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start -> Programs
Xocx32ocx32.exeAdded as a result of the ASTEF VIRUS!
XODSYSCNTR.EXEHotVideo dialler
Xod-matrxxod-matrxx.exeAdult dialler - xx can be any number
Xod-stndxxod-stndxx.exeAdult dialler - xx can be any number
Xod-teenxxod-teenxx.exeAdult dialler - xx can be any number
XOeloaderOeloader.exeXupiter OrbitExplorer toolbar related, drive-by foistware
NOEMCLEANUPoemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
NOemRunOncerunonce.exeUsed on OEM installations to preinstall drivers and software - not required since all the work has already been done
NOEXCheckEA2Check.exeExpress Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others
XOffer Companion
or
Offers
offers.exeAdvertising spyware
YOfficeGuard RegCheckerogrc.exeKaspersky Labs anti-virus
?officejet 6100hposol08.exe??
YOfficeScanNT Monitorpccntmon.exeTrend Micro OfficeScan Antivirus real-time scan monitor
XOffice StartupOsa.exe
Osa9.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Osa9.exe is the Office 2000 equivalent. Some users claim there's no difference with or without it but it isn't required anyway
NOfotoNow USB DetectionRundll32.exe OFUSBS.DLL,
WatchForConnection OfotoNow
Autodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs
Yogrcogrc.exeKaspersky Labs anti-virus
NOil ChangeOCTray32.exeFrom CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
?OIMoim.exeRelated to the O2 (was "genie") mobile phone service. What does it do and is it required?
NOmgStartupomgstartup.exeSony program called OpenMG Jukebox - player and music organizer
UOmniHTTPdohttpd.exeOmniHTTPd web server from Omnicron
NOmniPageOpware32.exePart of OmniPage Pro from Scansoft (was Caere) - "the fastest, easiest way to turn paper documents into digital files you can edit." Opware32.exe links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs
NOneTouchMonitor
or
One Touch Monitor
or
ONETOU~2
OneTouchMonitor.exe
1tou~2.exe
ONETOU~2.EXE
For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
XOnflowonflow.exeOnflow is a internet company that offers an online advertising program. Not required - uninstall
UOnlinePCfix SmoothSurferSS.exeSmooth-Surfer - blocks banners, ads, popups, and cleans MRU and Recent file lists
NOnlineTimeonlinetime.exeOnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs
XOn Screen DisplayOSD.EXEBy Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume, etc. Nice but not required if you don't adjust things regularly - can also freeze
XOnSrvrOnSrvr.exeOnWebMedia adware
NOP12 ReminderEreg.exeRegistration reminder for OmniPage Pro 12 from ScanSoft
NOpenOffice.org xQUICKS~1.EXEDisplays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number
NOperator (1)??Media Pilot operator, in Win.ini. Locks port open
UOperator (2)xtmop.exeFax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported
NOpiStatOPISTAT.EXEOpiStat is a European Research Institute whose goal is to understand consumer needs and opinions better
XOPQFileregedit.exe /s
.......\rad03FA6.tmp
Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit
NOptimum OnlineNetsurf.exeOptimum Online ISP software. Not required, just window dressing & advertising from Optimum
NOpware12Opware12.exeOmniPage Pro 12 from ScanSoft
XOrbitUpdateupdate.exeXupiter OrbitExplorer toolbar, drive-by foistware
XOrbitViewview.exeXupiter OrbitExplorer toolbar, drive-by foistware
?org5.exeorg5.exeLotus Organizer 5 application file, Lotus Organizer software. What does it do and is it required?
UOrigRage128TweakerRAGE128TWEAK.EXEThird party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com
UORiNOCOCmluc.exeClient Manager software for an ORiNOCO wireless LAN card
XOSSProxyOSSPROXY.EXEPart of Nettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
UOStivityInvAgtostivity.exeOStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system"
YOutpost Firewalloutpost.exeOutpost personal firewall
XOutwarsyslaunch.exeOutwar adware downloader
?OVCJovcj.exe??
NOvernetOvernet.exeOvernet peer-to-peer (P2P) file sharing program
UOWCCardbusTrayocbtray.exeIcon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface
XOWMngrOWMngr.exeOnWebMedia advertising foistware - see here for exactly what to look for

Back to search

 Name/Startup ItemCommandComments
NP2P NETWORKINGP2P Networking.exe
p2pautostart.exe
Peer to Peer (P2P) sharing of files on the internet
Np_981116p_981116.exeWin32 cabinet self extractor. More info here
UPagekeeper Jobs
or
Pagekeeper Lite
pkjobs.exePageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
XPAgentPAgent.exeScans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found. See here for more info
NPagis SchedulerMonitor.exeScheduler for the Pagis scanning suite from Scansoft. 
?pagmstartclient.exePossibly related to this?
NPagooPAGOO.EXEPagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
NPalm.exePalm.exePalm Desktop Software for use with Palm handheld devices. Available via Start -> Programs
?Palm MultiUser ConfigConfigtool.exeMultiUser configuration for a Palm PDA device?. Is it required?
NPaltalkNetaware.exePALNETAW~1.EXEVoice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start -> Programs. Delete the shortcut in Start -> Programs -> StartUp as well otherwise it will be reinstated
UPanda Schedulerpavsched.exePanda Antivirus scan scheduler. Required if this is your virus scanner program and you have scans scheduled on a regular basis. I recommend that you scan manually so you don't need this but if you tend to forget then leave it
NPaperportrunppdrv.exeLoads the drivers associated with monitoring scanner status associated with PaperPort software. Can be a resource hog - see here
NPaperPort PTDpptd40nt.exe"PaperPort" software associated with scanners
NPaperQuote System Tray IconPQTRAY.EXEPaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation
NPasteListerplister.exePasteLister - clipboard extender. Start manually when required
XPatchpatch.exeAdded as a result of the NETBUS VIRUS!
XPAV.EXE (1)%Number%Added as a result of the KITRO.D (or ARGEN.A) VIRUS!. %Number% can be any number
YPAV.EXE (2)PAV.EXEPER Antivirus
YPAVFIRESPavFires.exePanda Antivirus
UPC Alert IIIalert.exeMSI PC Alert III - allows you to view your system and cpu temperature, fan rpm and more. Only required if you overclock
YPCBODYGUARD
or
PCBG
PCBODYGUARD.EXEPC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
UPC Boosterpcbooster.exePC Booster from inKline Global - "easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"
YPCCClient.exePCCClient.exePC-Cillin 2002 antivirus software
Ypccguide.exepccguide.exePC-Cillin 2002 antivirus software
YPCCIOMON.EXEPCCIOMON.EXEPC-Cillin 2000 antivirus software. This is the actual virus-scanner
XPC-Config32corona.exeAdded as a result of the CORONEX.A VIRUS!
YPccPfwPccPfw.exePC Cillin 2003 personal firewall
NPCHbuttonPCHbutton.exeUsed by HP Instant Support
NPCHealthpchschd.exeThis is a "scheduler" and does not turn off PC Health. For more information refer here
?PCIMODEMpcimodem.exeAssociated with Lucent based Aztech MDP7800-U PCI modems. Is it required?
UPCLEPCIppe.exePinnacle Systems PCI Performance Enhancer. "This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards."
NPCStartPcm25.exeRuns as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big
NPcSyncPcSync.exeIf a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start -> Programs
Upctspkpctspk.exeUsed for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions
UPCTVOICEpctvoice.exeThe program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. It’s better to leave it
UPDEnginePDEngine.exePerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot
NpdexploPDEXPLO.EXEPowerDesk Pro by Ontrack. Enhanced desktop and file manager. Available via Start -> Programs
NpdfFactory Pro Dispatcher v1fpdis1.exe"With pdfFactory you can create PDF documents from any program printing to the virtual PDF printer". Available via a desktop shortcut or Start -> Programs
NPDirectPDirect.exeIBM Presentation Director software
Updp Serverctpdpsrvr.exeIncluded and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network
NPe2ckfnt SEchkfont.exeUsed to check whether the fonts are installed properly on your computer or not for a scanner. If you don't want to execute it, you can uncheck it in the startup menu
YPER Email Protectionpavmail.exePER Antivirus
NPerfectPrintpfppop70.exePrint engine used by Corel WordPerfect 7 and Presentations 7
YPersFwPersFw.exeKerio or Tiny Personal Firewall
UPestPatrol Control CenterPPControl.exePestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
?PFW_CfgEnginePFWCFG~1.EXEPersonal Firewall related?
?PFW_PullSrvPULL.EXEPersonal Firewall related?
XPgMonitrPgMonitr.exeAdware based media viewer by The Delfin Project
YPGPSDKSVCpgpsdkserv.exePGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality
UPGPSERVICEpgpservice.exePGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a "fall-back" mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference
NPGPtraypgptray.exePGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start -> Programs
NPhime2002a
or
PHIME2002ASync
TINTSETP.EXEPart of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
UPhoneFree version 6.2PHONEF??.EXEAn Internet telephony application. Complicated registration and ad banners tailored to your profile - see here
NPhoto Express Calendar Checker SECALCHECK.EXEIf you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper, Photo Express will replace the wallpaper automatically. Photo Express 2.0 has a calendar checker which checks the date on your system and updates your wallpaper accordingly
NPhoto Loader supervisoryPlauto.exeCasio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures
NPhotoWise QuickLinkquicklnk.exeAgfa PhotoWise - "PhotoWise QuickLinkTM lets you drag and drop photos right from the camera into your document (applications must be OLE-compliant). Use PhotoWise to print contact sheets and photographic prints. Create slide shows, screen savers, wallpaper and more."
NPicasa Media DetectorPicasaMediaDetector.exeMedia detector for Picasa's automatic photo organizer
NPickatagpickatag.exePick-a-tag - "Freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages"
NPICPRTRPICPRTR.EXEProgram for viewing and measuring a variety of 3D CAD data formats
NpictureBUZZTrayswtray.exeSystem Tray access to PictureBUZZ on-line printing software from Streetwise Software. If you use the software set the page you use as a favourite in your browser and run it manually
UPiDunHKPIDUNHK.EXEPart of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens
UpiiserviceOEN/ASpam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE
YPinnacleDriverCheckPSDrvCheck.exePart of InstantCopy CD/DVD copying software from VOB/Pinnacle that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
NPingerpinger.exePinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification
NPioletpiolet.exePiolet - peer-to-peer file sharing client
NPivotSoftwarewpctrl.exePivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
UpjWebCampjWebCam.exeWebcam automation software that saves regular photos from webcam and can also act as HTTP server
UPLEAPCPUCPLpleapu.exeCPU Control Panel for the Powerleap CPU upgrade
NPlguniPlguni.exeMcAfee QuickClean 3.0 - removes internet clutter and unwanted programs
XPlobkernel.comAdded as a result of the OPTIXPRO.12 VIRUS!
?PLoaderumsd.exeUSB Mass Storage Disk related tray icon. Is it required?
UPLXSTARTPLXSTART.EXESets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW.
NPLXTASKPLXTASK.EXETaskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files)
XPMediawinsrvc.exeInternet marketing sofware from PMedia as used in E-Card FriendGreetings foistware - see here. Treated by Trend as the FRIENDGRT.B VIRUS!
NPMTSHOOTpmtshoot.exeMS tool for troubleshooting power management problems
UPMXInitpmxinit.exeRestores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma 
UPnpchkPnpchk.exeAztech Labs Sound 3 PnP driver
UPNSetupPNSetup.exePopNot - pop-up killer
XPNtask Servicespntask.exeAdded as a result of the LALA.C VIRUS!
UPocket Sheet SyncPSXLTRAY.EXECasio Pocket Sheet synchronization software
UPOINTER
or
point32
point32.exeMicrosoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
XPOPPopSrv***.exePeopleonPage foistware, bundled with Grokster where *** are random digits
Ypop3trappop3trap.exePC-Cillin 2000 antivirus software -> E-mail scanner
UPopNotPopNot.exePopNot - pop-up killer
UPopOopsPopOops.exePopOops - pop-up killer
UPopopenpopopen.exePopOpen makes your windows spring open with animation effects
YPoproxyPOPROXY.EXEProxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
Xpopsrv146popsrv146.exePeopleOnPage online dating browser enhancement - also adware and privacy issues, see here. For removal instructions see here
UPopSubtractPopSub.exePopSubtract - pop-up killer
UPopup Ad FilterPopFilter.exePopup Ad Filter - pop-up killer
UPop-Up_BlockerPopup.exeA Tweak-XP component, blocks advertisement pop-up windows in Internet Explorer. Can be enabled/disabled via Tweak-XP -> Internet Tweaks
UPopup DefenderPD.exePopup Defender - pop-up killer
UPopupEliminatorPopup Eliminator.exePopup Eliminator - pop-up killer
UPopUpKillerPopUpKiller.exePopUpKiller - pop-up killer
UPopUpStopperFreeEditionPSFREE.EXEPnaicware's Pop-Up Stopper - free limited features version
UPop-Up Stopperdpps2.exePop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
UPopUpWatchPopUpWatch.exePart of BPS Trace Remover - made by the folks who "developed" BPS Spyware Remover which reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!
?POS-PartnerbatchprocessorBATCH.EXEVISA credit card batch processing related to Appcon. Is it needed or can it be started manually via Start -> Programs or a manually created shortcut?
NPost-It(r) SoftwarePsnotes.exePop-up "yellow" notes on screen. Available via Start -> Programs
UPOW!pow.exePop-up killer
YPowerChutePwrchute.exe"During a power outage, if you're not available to save your files & close down Windows....PowerChute will do that for you. PowerChute will save your application files, close your applications and shut down your computer just like you would...otherwise, the APC UPS (Uninterruptible Power Supply) unit would go to battery until it wore down, then your computer would shutoff"
NPowerDVDPowerDVD.exeLaunches Cyberlink's PowerDVD software and creates a system tray icon. If enabled, PowerDVD will open automatically when a DVD movie is inserted. Launch manually
UPowerKeyPowerKey.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
XPowerManagementRundlll.exeAdded as a result of the SURDUX VIRUS!
XPowerManagerSvchost.exeAdded as a result of the JEEFO VIRUS! Note - this is not the valid svchost.exe as described here
YPowerPanelPOWPANEL.EXEPower management utility on notebooks/laptops - automatically switches modes when running on battery
UPowerPropowerpro.exePart of the power professional program that loads the floating menu bar. Can be accessed from Start -> Programs, but I'd leave it alone if you use this program
NPowerQuest Startup UtilityPQINIT.EXEFrom a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems"
NPowerReg SchedulerPowerReg Scheduler.exePowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
NPowerReg SchedulerV2PowerReg SchedulerV2.exePowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
UPowerTools Tray Iconpttray.exePowerTools - add-on for AOL
UPowertweak (1)PT2.EXE"Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Use predefined settings' is enabled in the programs options
UPowertweak (2)PTCTRL.EXEAs for Powertweak above. This item is added to startup if 'Configure system at logon' is enabled in the programs options
NPowerStrippowerstrip.exe
PSTRIP.EXE
PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
NPP****usbFBDirect.exeSoftware that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
UPP2000 InstaupdatePPInupdt.exeProtector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually
YPP2000 Real Time ScanPPVstop.exeProtector Plus anti-virus software - real time scanner
YPP2000 Taskbar ControlPPTbc.exeProtector Plus anti-virus software - system tray access
NPP3100bflatbed.exeTwain driver for the Visioneer PaperPort 3100b scanner that allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop
UppassAntispy.exeAntiSpy firewall - "program designed to combat against various types of intrusion and monitoring programs currently in use or presently being developed worldwide"
UPPControlPPControl.exePestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
UPPK Setup(Server)SEServe.exeProgrammable Power Key on Sony Vaio laptops. "Using the Programmable Power Key (PPK) button, collect your e-mail automatically with one key stroke. You can also program your PPK to turn on your SuperSlim Notebook at a predetermined time and perform simple tasks - completely unattended"
NPProTraypprotray.exePart of the power professional program. Loads the System Tray control
UPPMemCheckppmemcheck.exePPMemCheck - "extends PestPatrol's power so that the most dangerous Pests -- those that are about to execute -- are found, terminated, and cleaned from a user's system"
Npptd40ntpptd40nt.exe"PaperPort" software associated with scanners
UPPUpdateppupdater.exe.exePPUpdater - "is the update program that ships with PestPatrol. It is able to update licensed and evaluation versions, and presents a visual display of what it is doing". Run manually unless you think you'll forget to check for updates on a regular basis
NPPWWebCapPPWebCap.exe"PaperPort" software associated with scanners
UPraize MessengeritLoad.exePraize IM Christian chat instant messenger
UPrayerPTW.EXEIslamic Adhan program (call fpr daily prayers)
NPrecision Time Clock CheckerPrecisionTime.exePrecision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
YPreloadPreload.exeMillenium Multi-Function Keyboard driver
?PreloadApphphprld.exeHP Printer driver related?
XPremeternrpr.exe
prmt.exe
NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
NPrice Patrolneo.exePrice Patrol by Half.com - internet shopping companion for finding the best on-line prices
?PrimaLauncherLauncher.exeAssociated with PrimaScan scanners. Is it required?
UPrimax 3D Mouse3dmoused.exeEnables the scroll button on the Primax 3-D Scroll mouse
?PrimstaPrimsta.exeLinksys Wireless CompactFlash Card driver related. Is it required?
XPrinterSpyassault.exeDubious "spyware killer" - see here. To be avoided
?Printer UpdateCFGREG.EXEMaybe a registration reminder or automatically updates drivers or application software for a printer?
NPrintkey2000printkey2000.exeScreen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
NPrint Master Event ReminderPMremind.exePrint Master Gold - calander feature that pops up reminders, such as birthdays
Nprintnowprintnow.exePrintNow - a utility that primarily allows "Print Srceen" or "Alt+Print Screen" screenshots to be sent directly to a printer
NPrinTrayPrintray.exeLexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
NPrintScreenUNWISE.EXEGadwin PrintScreen - utility to capture, print or save the current window
NPrintscreen 95PRT95MIN.EXEPrintscreen 95 - utility to capture, print or save the current window
NPrint Screen Deluxepsdeluxe.exeUtility allows "Print Scrn" or "Print Screen" key to capture, print or save the current window
Xprint sharing (1)start.batAdded as a result of the ZCREW VIRUS!
Xprint sharing (2)hidden32.exe <path>\explorer.exeAdded as a result of the ZCREW.B VIRUS! Note - this is not the valid Windows Explorer (explorer.exe)
XPrizeSurferprizesurfer.exe"PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
Xprmtprmt.exeNetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
?ProArtProArt.exe??
Xprocmonprocmon.exeAdded as a result of the BIONET.40A VIRUS!
NProDslProDsl.exeIntel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
XProfileProfile.vbsAdded as a result of the WHITEHO or TRAPPY VIRUSES!
NProfilerProfiler.exeEnables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs
XProgram FileProgmon.exeAdded as a result of the PEEPER VIRUS!
XProgram In WindowsIEXPLORE.EXEAdded as a result of the LOVGATE.F VIRUS! Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) wheras 
the valid "iexplore.exe" (IE) resides in C:\Program Files
NPromon.exepromon.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
XPromulGatePgMonitr.exeAdware based media viewer by The Delfin Project
NPRONoMgr.exePRONoMgr.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
UPro PCL Status MonitorPENGSS.EXEXerox printer/fax/copier status monitor (PCL = printer control language)
UPropel AcceleratorPropelAC.exePropel Internet Accelerator
UProPort StartupProPort.exeProport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving
UPRPCMonitorPRPCUI.exeIntel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%
UPS2ps2.exeMultimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost.
YPSDrvCheckPSDrvCheck.exePart of InstantCopy CD/DVD copying software from VOB/Pinnacle that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
UPSFreePSFree.exePop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
NPSIWin2.3 Connection ServerPsconsv.exeAllows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
UPsMFCardPsMFCard.exeComponent of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use
?PsPCCardPsPCCard.EXEFound on a Toshiba laptop?. Any ideas?
UPspContrpspcontr.exeDriver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
UPsSoundPsSound.exeOn a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay
??PSTORES.EXEPart of Windows Services Protected Storage?
Nptfbptfb.exePush the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
NPtsnoopPtsnoop.exeThese descriptions I've come across - all valid as far as I can see :-
(1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it
(2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info
(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed)
Note: If using AOL and you disable this you may lose your connection or lock up
(4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'\PTSNOOP and the System.ini tab under drivers='path'\ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists
(5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems
(6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows"
Upttrunpttrun.exeTransmeta Crusoe processor related. Reduces application launch times and makes the computer "more responsive"
NPtUDFAppPtUDFApp.exeSony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start -> Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar
UPurgativePURGATIVE100.EXEAIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack
NPUSH6599PUSH6599.EXEScan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software
NPush Clientpull.exeClient software from Interwise that MS use for their webcasts
NPush The Freakin' Buttonptfb.exePush the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
NPVRPVR.exePocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card
YPwrmonitRundll32 PwrMonit.dllIBM's proprietary 'battery maximiser' and power monitoring software for laptops
UPwrsavePwrsave.exeToshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power
?Pwruploginpulogin.exe??
UPwrupTweakMePUPXPTWK.EXE"Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows® NT4, 2000 and XP configuration to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want." Boot-up options won't work if disabled 
UPWS TrayPwsTray.exeMicrosoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start -> Programs

Back to search

 Name/Startup ItemCommandComments
NQ152404wsript.exe Q152404.VBSAppears to run Scandisk at bootup on NEC PCs
NQAGENTqagent.exeQuicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled, background downloading takes advantage of unused bandwidth to download current financial information anytime your computer is connected to the Internet
NQBCD autorunautorun.exeQuick Books CD
Xqbkupdbsmqbkup.exeAdded as a result of the OPASERV.K VIRUS!
?qBrowseqbrowse.exe??
UQCTRAYQctray.exeSystem Tray icon providing access to the "IBM Access Connections" wizard on ThinkPad laptops and also allows to change the network environment. Not the same as QCWLIcon, which is pertinent only to the Wireless LAN
UQCWLICONQcwlicon.exeUsed by IBM Thinkpad laptops with built-in wireless card (802.11). System Tray icon that provides a shortcut to "Wireless Connection Status" and allows to turn WL on and off
NQD FastAndSafeQDCSFS.exeAutomatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
UQDM
or
QDMStart
QdmStart.exeQDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc
?Qdsafe????
NQSort2000QSORT.EXEUtility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"
?QexploQexplo.exe??
UQT4HPOTOneTouch.exeHewlett Packard One Touch keyboard driver. Required if you use the additional keys
UQTaskStartupqtask.exeFeature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly, it is only required for the Desktop Alerts feature
NQTSTUB.EXEQtstub.exePart of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
?QUBCityqtp.exe??
?QueenslaQueensla.exe??
NQuickBooks Delivery AgentQBDAGENT.EXEAs far QAGENT but for QuickBooks. Can also have the version number in the name
?Quickbooks Update Agentqbupdate.exeAssociated with Intuit's Quickbooks. Possibly to do with the payroll update service which needs to run about 4 times per year 
according to some postings seen on Google. Not required to be running constantly. Can anybody confirm this?
UQuick ControlsAstrotoolbar.exeGateway Astro Screen and Sound Controls tray icon
UN/AQuickCamPro.exeSystem Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example, auto FTP Upload, etc
NQuicken Scheduled Updatesbagent.exeQuicken background downloading module
NQuickenSEMessageQsemsg.exeQuicken option
NQuicken StartupQWDLLS.EXEQuicken option to load DLLs at startup
NQuickFinder SchedulerQFSCHD100.exe
QFSched.exe
Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
YQuick Heal On-Line ProtectionCateye.exeQuick Heal - virus scanner
YQuick Heal Startup ScanQHSTRT32.EXEQuick Heal - virus scanner
YQuickLaunchErQuickLaunchEr.ExeQuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
NQuicknotequicknote.exeJC&MB Quicknote Virtual Scrapbook
NQuickResQUICKRES.EXEUtility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel -> Display. Not required unless you have to change resolutions on a regular basis
Nquicksetquickset.exeDell taskbar icon allowing you to quickly change settings
NQuick Shelf xxqushelfxx.exePlaces an icon in the system tray for launching MS Bookshelf. Available via Start -> Programs"xx" represents the version number - ie, 98, 99
YQuick StartupFquick32.exeFor a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
NQuickTime Task
or
qttask
Qttask.exeSystem Tray access to Apple's "Quick Time" viewer from version 5 onwards
NQuickTime Update Completion xquicktimeupdatehelper.exeDifferent numbers caused by number of launches. So if 3 updates are made separately, 3 would appear (in theory)
UQuickTVQuickTV.exeInfra-red remote control driver for the AVerTV Studio TV tuner/personal video recoder from AVerMedia. Required if you use the remote control
NQuick View PlusQVP32.EXEQuick View Plus from Inso Corporation. Multiple file type viewer. Available via Start -> Programs
NQuicklink IIIQL.EXEHP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode, that is, to receive faxes after a certain number of rings. Available via Start -> Programs
NQuikSyncQUIKSYNC.EXEUsed by Iomega drives. Available via Start -> Programs

Back to search

 Name/Startup ItemCommandComments
URadBootRadBoot.exeRadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings
URAMDeframdef.exeRam Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. Some users swear by programs such as this but I suggest you read this article and make up your own mind
URamIdleramidle.exeRAM Idle - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by  freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." Some users swear by programs such as this but I suggest you read this article and make up your own mind
URAMpageRAMpage.exeSmall Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source
YRapAppRAPAPP.EXEApplication protection component of BlackICE PC Protection (was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch
XRapidBlasterrb32.exeHomepage hijacker (adult content) - see this newsgroup thread
YRaptor Mobilevpnservices.exeSymantec VPN Client used to connect to corporate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking
XRA ServerSlave.exeAdded as a result of the RA VIRUS!
YRAV8Trayravtray8.exeRAV anti-virus related
XRAVEN_VLZS.EXERAVEN_VLZS.EXEAnother eAcceleration program - spyware. Read their privacy statement here
XRavTimeMstray.exeAdded as a result of the WUKILL.A VIRUS!
NRay Process KillerPrkill.exeRay Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead
Xrb32 lptt01rb32.exeHomepage hijacker (adult content)
XRCSyncRCSync.exePrizeSurfer related. "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
XRDLLRunDll16.exeAdded as a result of the SDBOT.F VIRUS!
Xrdvs<filename.exe>Added as a result of the ULTIMAX VIRUS! <filename.exe> is the worm filename created
NRealDownloadRealPlay.exeDownload manager. Available via Start -> Programs
XRealDownload Expressnpnzdad.exeAdvertising spyware
NReality Fusion GameCam SERFTRay.exeSystem Tray access for Logitech's Reality Fusion GameCam. For more details see here. Available via Start -> Programs
NRealJukeboxSystraytsystray.exeSystem Tray icon for RealJukebox
Xrealplay lptt01realplay.exeNew variant of the RapidBlaster parasite (in a "RealPlay" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not RealPlayer which can have the same executable name
?RealpopupRealpopup.exeRealPopup - "Replaces old winpopup with a full featured freeware tool which remains stable and simple as its predecessor"
NRealschedrealsched.exeApplication Scheduler installed along with RealOne Player. Runs independently of RealOne Player, to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. If it can't be disabled try deleting or renaming realsched.exe and then delete the entry in the registry
XReal-TensReal-Tens.exeDownloadWare based advetising spyware
YRealtime Monitorrealmon.exeRealtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates
?RealTimeUpdateRealTimeUpdate.exeProduct description in properties is "InternetExplorerCommunicationAgent Module" ?
NRealTrayRealPlay.exeSystem Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling SmartCenter via Preferences
?RebootReboot.exe??
YRecguardrecguard.exeOn HP computers, Recguard prevents the deletion or corruption of the WinXP Recovery Partition. Without it enabled, it is possible to knock that completely out and force the customer to send the PC back to HP for a re-image, possibly at the customer's expense
NReclipreclip.exeReclip Popup Clipboard manager
NRecoverN/AAdded during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete
?RecSheRecSche.exe??
NRed Flagredflag.exePMS prediction program with modes for guys and girls - no longer available
XRed Swoosh EDN ClientRSEDNClient.exeRed Swoosh - mechanism used by web sites to allow you to download files from those sites quicker and more efficiently. Note from the license agreement they automatically update the software and share non-personally identifiable information with others in the network
URefereereferee.exeMediaComm's monitor for file association changes. Stop rogue programs from screwing your settings either on installation or whenever they run
NRefreshRefresh.exe(Iomega) Refresh - loads the Iomega desktop icons at startup
XRegReg.htaHomepage hi-jacker. Removal instructions here
XRegcheck~CAB001.EXEAdded as a result of the CYBERSPY VIRUS!
XRegCleanerSYSio32.exeAdded as a result of an unidentified virus VIRUS!. Note - do not confuse this with the popular RegCleaner registry cleaner freeware
XRegCompres (1)Regcpm32.exeAdded as a result of the POLDO.B VIRUS!
XRegCompres (2)REGCPM32.EXEAdult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
Xregeditregedit.exeAdded as a result of the BRID.A VIRUS! Note - resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). The valid "regedit.exe" resides in C:\Windows (Win9x/Me/XP) or C:\Winnt (WinNT/2K)
?reginfo32reginfo32.exe??
URegisterDropHandlerREGIST~1.EXEPart of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation 
NRegister MediaRing Talkregister.exeIf you don't want to register MediaRing and be reminded about it every bootup disable it
NRegistration-Studio 8RegTool.exeRegistration for Pinnacle Studio Version 8 home video software from Pinnacle Systems
XRegistrywscript.exeAdded as a result of the VBSWG VIRUS!
XRegistry Scannerregscanr.exeAdded as a result of the OPTIX LITE FIREWALL BYPASS VIRUS!
XRegistry ServicesRegistry.exeAdded as a result of the DOWNLOADER.CILE VIRUS!
YRegProtRegprot.exeRegistryProt from Diamond Computer Systems - protects the system registry against changes
YRegrun2WatchDog.exeGreatis Software's RegRun 3 Security Suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, viruses, etc 
NRegShaveregshave.exePart of the USB driver set for the Fuji Finepix series or digital cameras as it works fine without it as mentioned here
Xregsrvregsrv.exeAdded as a result of the OPTIXPRO.11 VIRUS!
Xregsvc32regsvc32.exeHomepage hijacker that changes your homepage to an adult content site
UREGSVR32regsvr32.exe ctasio.dllASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
?regtmlpN/A??
URegTweakRegTwk.exeRage3d Tweak - ATI Radeon tweaker which allows access to registry tweak options, custom display modes, refresh rates and overclocking all through an easy to use interface
XRegVerREGVER.EXEAdded as a result of the LATINUS.16 VIRUS!
XRegWritecsrss.exeAdded as a result of the SOKACAPS VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
URegx10EXEatix10.exeATI Remote Wonder - PC wireless remote control
UReleaseRAMRRAM.exe"Release RAM allows your computer to run faster and uses your computer's RAM more efficiently". Some users swear by programs such as this but I suggest you read this article and make up your own mind
NRemHelpRemhelp.exeBT Voyager ADSL Modem Help related
NReminderreminder.exeFrom MS Money. Reminds you of your bills
NReminder-cpqXXXXXremind32.exeCompaq printer Registration
NReminder-hpcXXXXXremind32.exeHP CD-Writer Registration
NReminder-ranXXXXXremind32.exeRegistration reminder widget for Rand Mcnally maps
Nreminder-ScanSoft Product Registrationremind32.exeRegistration reminder for ScanSoft products such as PaperPort
?Remind XP????
URemote Accessrnaapp.exeDial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie, 
analogue 56K modem) and terminates after the connection is closed
XRemote Access SlaveSynchost.exeAdded as a result of the RIPJAC VIRUS!
NRemote_AgentRemoteAgent.exeCyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings, you will need this, otherwise can be disabled. Available via Start -> Programs
NRemoteControlrmctrl.exeAdded via the installation of PowerDVD 4 software. Function unknown but not required
URemote Desktop Computingmarspc.exeMarspc Remote Desktop Computing
URemote Management Agentzenrc32.exePart of Novell's ZENworks - "Complete End-to-End Directory-enabled Network Management". Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation
Uremote masterremote master.exeRequired if you want your ASUS Remote control to work at all. Available via Start -> Programs
XRemote Procedure Call LocatorRUNDLL32.EXE reg678.dll ondll_regAdded as a result of the LOVGATE.F VIRUS!
?RemovecplRemovecpl.exeRelated to a Belkin 54Mbps Wireless Utility Control Panel applet. Is it required?
?RemStartremstart.exe??
URepliGo AssistantRepliGoMon.exeCerience RepliGo software - "any document you have on your PC can be transferred to your mobile device"
NResolution Assistantmatcli.exeDell Resolution Assistant
NResource Meterrsrcmtr.exeWindows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes
?Restart_VS????
?Restart WatchWatch.exeAssociated with an Eicon Networks Diva ISDN or ADSL modem. What does it do and is it required?
YRestoreIT!VBPTASK.EXERestoreIT! from FarStone "allows you to recover instantly your files, system configuration, and even your operating system, to any point in time prior to the data loss or system failure."
UResume Copycopyfstq.exePart of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut down. Not required if your not using the program or don't care about that function
UResumeFixClocksresumefix.exePart of the RadeonTweaker utility for overclocking ATI Radeon graphics cards
URetrieverSchedulerretrieverscheduler.exe80-20 Retriever from 80-20 - "80-20 Retriever is a powerful personal search tool that encompasses email folders, archived email, and local or network file systems, giving users one point of fast, accurate search for all personal information". Real-time scheduler - shortcut available
NRexSyMonrexsymon.exeIntellisync for REX sychronization software for Xircom REX MicroPDAs for sharing information between the PDA and PC
XRFTray??Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs
?rfwydgrfwydg.exe??
NRFX_auto_upgraderundll32.exe npvpg005.dllA browser plugin called the RichFX player. Here is a link to download RichFX's solution to removing the auto upgrade
URing Central Faxrcenterrll.exeOnly needed if you want a PC to answer faxes automatically
XrIOphosIsrIOPHosIs.vBSAdded as a result of the RIOSYS VIRUS!
URivaTuner
or
RivaTunerStartupDaemon
RivaTuner.exeRivaTuner for tweaking nVidia graphics cards. Required if you make any changes
?RjLyraInstallersetup.exe??
Nrmmonmprmmon.exeResource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card
URNBOStartsentstrt.exeProgram used to initialise the VxD virtual driver for Sentinel drivers associated with Rainbow H/W keys that plug-in to the parallel port. These are usually supplied with workplace design tools and restrict the use of the software only to the machine to which the H/W key is connected. Required if you have such tools
?rndll2rndll2.exeMay be related to the DivX program as a *.dat file in the same directory had "DivXPro505Bundle.exe" mentioned within?
NRoboFormWatcherRoboFormWatcher.exeAI Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs
URocket.TimeRocketTime.exeTime synchronization software from Rocket Software
?roketpiperpclient.exe??
NRoxioAudioCentralRxMon.exePart of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Exact purpose unknown?
NRoxioDragToDiscDrgToDsc.exePart of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Packet writing like DirectCD?
NRoxioEngineUtilityEngUtil.exePart of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Exact purpose unknown?
?RMremoteRmRemote.exeRemote control driver for REALmagic Xcard. Is it required?
?ROUTDROUTD.exe??
URP32rp32.exeControlIT (was Remotely Possible) from Enterprise International for remote control and access to Win9x/NT systems.
YRPCSS.exerpcss.exeRemote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se, a program may need it to communicate with other components of itself. You could delete the program but if any abnormalities occur soon after then reinstall. Under NT, deleting this critical system component will disable the OS. For a more detailed explanation see here
XRRMedicrrmedic.exeTroubleshooting utility for the RoadRunner cable internet service. Not required and you are advised to completely uninstall it. Provides a lot of false alarms and gets a lot of people panicking about there internet connection
Urscmptrscmpt.exeRequired on the GeFroce 64 meg MX card to show the full 64 meg memory and appears to be a software memory emulator running under the Win2K - see here. High CPU useage results - hence the U status
Yr_serverr_server.exeRadmin - remote admistrator server
UrsMenursMenu.exeSynchronizes a Casio PDA with MS Outlook
?RSRCMTZRSRCMTZ.exe??
XRSSrundll32 RSSToolbar.dll, DllRunMain"Related Sites" toolbar - SearchAndClick hijacker variant
N??rt7eng.exeThe remote client service for Norton Ghost on Win2k Pro. This is not normally needed to Auto-load as you can manually start the client service if you connect to a remote host. Loads in SERVICES
?RtlMon.exeRtlMon.exe??
?rtosrtos.exe??
?RTStartMuteN/A??
Yrtvscn95RTVSCN95.EXEReal-time virus scanner component of Norton Anti-Virus Corporate Edition
URuLaunchRuLaunch.exeInstant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
XRun[0]syscnfg.exeAdded as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
Xrun= (1)<random filename>Added as a result of the SUBSEVEN and many other VIRUSES!
Nrun= (2)cmmpu.exeMIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as part of the software for a Guillemot Maxi Muse sound card (PCI)
Nrun= (3)hpfschedHPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
Nrun= (4)lxdboxcp.exeLexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS
Nrun= (5)pcfix2k.exepcfix2k splash screen
Xrun= (6)ptlseq.cplPhoenixNet BIOS adware. See here
Urun= (7)ramsys.exeAdvanced Startup Manager from Rays Lab
Xrun= (8)VLFHO.exeVIRUS!
?run= (9)wallflip.exeDesktop wallpaper changer?
Xrun= (10)Virus_Cleaner.exeAdded as a result of the PANOL VIRUS!
Xrun= (11)MagicRulez.exeAdded as a result of the MINIMAN VIRUS!
Xrun= (12)dllreg.exeAdded as a result of the NIBU, BAMBO and DUMARU VIRUSES!
Xrun= (13)Sp00lsv.exeAdded as a result of the GRAYBIRD.E VIRUS!
Xrun= (14)cekirge.scrAdded as a result of the KERGEZ.A VIRUS!
Xrun= (15)Mail_Check.exeAdded as a result of the PANOIL.C VIRUS!
Xrun= (16)explore.exeAdded as a result of the GRAYBIRD.G VIRUS!
Xrun= (17)CapsideRed.pifAdded as a result of the CASPID VIRUS!
Xrun= (18)svch0st.EXEAdded as a result of the GRAYBIRD VIRUS!
Xrun= (19)HgzServer.exeAdded as a result of the GRAYBIRD.C VIRUS!
Xrun= (20)SVCH0ST.EXEAdded as a result of the GRAYBIRD.D VIRUS!
Xrun32dll (1)WINClock.exeUnidentified mIRC VIRUS!
Xrun32dll (2)task32.exeUnidentified mIRC VIRUS!
XRun32dll (3)ocxdll.exeUnidentified mIRC VIRUS!
URunAlertAService.exeMSI MOtherboard PC Alert III - MSI motherboard monitoring software. Only required if you "overclock" your system
NrunAPrunAP.exeNot required but what is it?
XRunapp32Runapp32.exeAdded as a result of the NEODURK VIRUS!
XRun_cdRun_cd.exeAdded as a result of the GHOST.23 VIRUS!
Xrundli32rundli32.exeAdded as a result of the LADE VIRUS!
XRundllsystem32Rundllsystem32.exeAdded as a result of the NETDEVIL.B VIRUS!
XRundll16Rundll16.exeAdded as a result of any number of VIRUSES!
XRundll32 (1)Rundll32.exeAdded as a result of the DVLDR VIRUS! Note - this is not the valid "Rundll32.exe" as it's in the Windows\Fonts directory
NRUNDLL32 (2)RUNDLL32.EXE NvQtwk,
NvCplDaemon
This loads the System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again
NRunDLL32 (3)RunDLL32.exe NvMCTray.dll,
NvTaskbarInit
System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
Urundll32 (4)Rundll32.exe Wf2kcpl.dll,
DllLoadDefaultSettings
Loads default settings for Leadtek Winfast graphics cards
XRunDLL32 (5)winupdate.exeUnidentified VIRUS! - possibly a BMBOT variant
XRundll32.exeProyecto1.exe
Root.exe
Added as a result of the GRUEL VIRUS!
XRundll32_7rundll32.exe MSIEFR40.DLL, DllRunServerBrowserAid "Featured Results" hijacker variant
Xrundll###die.exe and either ttg.exe or secure.exe or mdll.exe or secure.batAdded as a result of the SUMTAX VIRUS! where ### is 134, 569, 777 or 946
XRun MSupdt32wscript MSupdt32.vbsAdded as a result of the CASER VIRUS!
URunOnceRUNONCE.EXEPart of MS Data Access Components - only required if you use these
URun POPFile in backgroundperl.exe
wperl.exe
POPFile - E-mail spam blocker
XRunProg (1)Server.exeAdded as a result of the OPTIX.04.A VIRUS!
XRunProg (2)wini.exeAdded as a result of the OPTIX.04.D VIRUS!
URun StartupMonitorStartupMonitor.exeMike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
URunSysd32RunSysd32.exeDesktopShield2000 by Stéphane Groleau. Locks the desktop at bootup so that users cannot bypass the Windows screensaver password. Only essential if using the program and is an optional setting. It can be disabled from within
XRunWindowsUpdateuptodate.exeBrowserAid/BrowserPal foistware
?RUSBHOLoaderrundll32.exe RUSBHOLoader.dll,
AutoRegister
??
XrvdeN/ARelated to li-speed****
XRVPbpc.exeSpyware included with the latest version of Grokster. Also see here
NRxMonrxmon9x.exeDell Resolution Assistant

Back to search

 Name/Startup ItemCommandComments
?S24EvMonS24EvMon.exeEvent Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?
?S3apphkS3apphk.exeS3 graphics related?
NS3TRAYS3Tray.exeS3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display
?s3tray2s3tray2.exeSame as above?
?SASa3.exeLogitech QuickCam driver. Is it required?
NSa3dsrvSa3dsrv.exe3D sound extension for Windows
US4FS4F.exeS4F internet filtering software
NSabreserverSABSERV.EXEAirline reservation software from Sabre. Available via Start -> Programs
NSafeInstall.exeSAFEIN~1.EXEMonitors a download and ensures an newer version of a file isn't replaced by an older one
NSafeOFFSafeOff.exeProvides protection that if user accidentally presses the power switch a dialog will pop up for confirmation
XSafeSurfingUpdateSSUpdate.exeDyFuCa/MoneyTree parasite variant
NSAgent2ExePathSAgent2.exeSeiko Epson printer status agent. Disable if printer is not used often
XSAHagentSahagent.exeShop At Home Network parasite - security issues
USAIMONSaiMon.exeSaitek joystick driver
?SaiSmartSaiSmart.exe"Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button. What does it do and is it required?
USaitekAutoConfiguresaicnfig.exeConfiguration for Saitek game controllers
NSandIconSandIcon.exeSanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources
?SA ServiceSAservice.exeAssociated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?
USAUpdateSAUpdate.exeBig Brother from Quest Software. System and network monitor
XSaveSave.exeRebranded version of SaveNow advertising spyware
XSaveNowSaveNow.exeAdvertising spyware. Installed as part of the Kazaa Media Desktop bundle for example
USay The Time 5.0SAYTIME.EXEThis program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly
NSB Audigy 2 Startup Menu/l:engRelated to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
USBDrvDetSBDrv.exeDetects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one
XSBHCsbhc.exeSuperBar parasite - uninstall available here
NSBMXsbmx.exeSoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
XSB WatchdogSBWatchdog.exeSpyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here for more information
Nscscrubxp.exeScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc
?sc23execsc23exec.exePossibly related to a digital camera
Xscanmscman.exeSpyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
?Scan DetectorPmxdetect.exeAssociated with PrimaScan scanners. Is it required?
XScanDiskScanDisk.exeAdded as a result of the GANDA.A VIRUS! Note! - this is not the valid "ScanDisk" Win9x/Me standard disk error checker
NScanner DetectorSDetect.exeScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
?ScanFile????
?ScanInicioInicio.exePart of Panda Anti-Virus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active
XScanRegistry (1)nsrvnt.exeAdded as a result of the NERTE VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe
XScanRegistry (2)scanregv.exeAdded as a result of the MASTERLOCK VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe
YScanRegistry (3)Scanregw.exeScans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
XScanRegistry (4)Scanregw.exeAdded as a result of the STATOR VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt). Runs from the registry RunServices key as opposed to the Run key
XScanRegistry (5)Scanregw.exeAdded as a result of the GWGHOST VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
?Scan Wizardbutton.exeAssociated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it 
required?
NSCardSvr (1)scardsvr.exeRelated to SmartCard readers and sometimes uses lots of system resources
XSCardSvr (2)SCardSvr32.ExeAdded as a result of the MOFEI.B VIRUS!
USchedulingAgentmstask.exe
mstinit.exe
MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
XScheduling AgentScheduler.exeAdded as a result of the SUBWOOFER VIRUS! Note! - this is not the real MS Scheduling agent listed above as the executable is incorrect
NScheduled MaintenanceScheduled_Maintenance.exeScheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs
USchmailiSchmaili.exeSchmaili - insert animated smilies into your e-mail
YSCHWIZEXSCHWIZEX.EXEPart of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
NScotia OnLine Recovery
or
Scotia OnLine Security v*.* Recovery
etdirrcv.exeScotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
NScrapPadScrappad.exeScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper
UScreen Guardlaunch.exePart of Access Denied security and privacy software
UScreen Guard Message Scansgms.exePart of Access Denied security and privacy software
NScreen Saver ControlFSScrCtl.exeInstalls as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon
?scriptscript.batMaybe associated with DOS on a Win9x machine
YScriptBlockingSBServ.exeUpdate to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information
YScriptSentryScriptsentry.exeScript Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly
UScroll-In-Mouse V2.0SCROLL.EXEToolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features
XScrSvrScrSvr.exeAdded as a result of the OPASOFT.A VIRUS!
USDaemonsdaemon.exePC Security from Tropical Software. 'PC Security™ 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'
NSDetectSDetect.exeScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
XSearchEnhancementscbar.exeIE search hijacker
XSearch-ExeSE.exeHijacker - redirecting to Search-exe.com
?Search Hooksrchhook.exe??
USecondChancesctray.exePower Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash
XSecret-Crushstart.exeHijacker that may reset your browser's home page and/or search settings to point to undesired sites
USecsysSecsys.exeKey Interceptor - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
USecureItProSecureitpro470p.exeSecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop
XSecureLoginMslg32.exeAdded as a result of the REDZED VIRUS!
Y??SECWIZ98.EXESecurity Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here
?SelfHostUtilslefhost.exe??
XSENTRYSENTRY.exeFrom IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it 
Yserrdctl.exeserrdctl.exe"Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems
Xserverserver.exeAdded as a result of the DELTAD.A VIRUS!
XSERVER.EXESERVER.EXEAdded as a result of the BUSHTRO122 VIRUS!
XserverexServer.txt.vbsAdded as a result of the DELTAD.A VIRUS!
UServiceConfigispbeg.exeComcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation
NService Connectionsccenter.exe
bwtray.exe
For Compaq PC's. Part of Backweb
XService Hostspoolos.exeAdded as a result of the TORVEL VIRUS!
NService Managersqlmangr.exeSQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs
Xservices (1)start.batAdded as a result of the ZCREW VIRUS!
XServices (2)<path to trojan>Added as a result of the RANCK or RANCK.B VIRUSSES!
XServices.EXEservices.exeAdded as a result of the KAZPING VIRUS! Note! - this is not the valid Windows Service Controller (services.exe) process
XServices HostScchost.exeAdded as a result of the DONK VIRUS! Note - this is not the valid svchost.exe as described here
NServ-U (1)serv-u32.exeFTP server
XServ-U (2)wssdsu.exeAdded as a result of the MANIFEST VIRUS!
?ServUTrayIconServUTray.exeSystem Tray icon for Serv-U FTP server. Is it required?
?SetDefaultMIDIMIDIDef.exeRelated to a Soundblaster Audigy soundcards. What does it do and is it required?
?setdefprtsetdefprt.exeRelated to a Brother printer?
XsetFTPBackcreatesw.exeAdded as a result of the FTP_BMAIL VIRUS!
Nseticlient
or
SETI@home
SETI@home.exeSETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
NSetiQueueSetiqu~1.exeProvides work unit buffering for Seti@Home clients - see here for more details
NSetiSpySetiSpy.exeFrom the site - 'SETI Spy is a little program I wrote to "spy" on the progress and performance of the SETI@home client. I call it a "spy" because I tried to make it as unobtrusive as possible'
?setuphphprld.exe ....setup.exeProperties reveal it as "HP DeskJet Setup". Probably not required but can somebody confirm?
NSetupICWDesktopicwconn1.exeAppears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
?setuzpsetuzp.exe??
XSetVrcsetvrc.exeAdded as a result of the HUNTOCX VIRUS!
XSex Terisst01b.exeAdded as a result of the REPAD VIRUS!
XSFtrb Servicecftrb32.exeAdded as a result of the SOBIG.D VIRUS!
USfWinStartInfosfWinStartupInfo.exe

SFIRM32 Online Banking software

?SGTBoxSGTBox.exeCanon scanner driver. Is it required?
Usgtraysgtray.exeStorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
?sharedpremsharedprem.exeAppears to be part of a file called Poser_5_Crack.exe which prevents installation of any version of Poser graphics software? Possibly an anti-piracy measure by the developers?
NShare-to-Web Namespace Daemonhpgs2wnd.exe"HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs
YSharing and Mapping SoftwareDShmap.exeIntel AnyPoint internet sharing software
NSharkEjectAEJCT32.exeAllows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required
XShell (1)Shell32.exeAdded as a result of the BADSECTOR VIRUS!
XShell (2)ray.exe
Tray.exe
Homepage hijacker re-directing browsers to adult content websites
XShellApiSHELLMSN.EXEAdded as a result of the NETDEV.B VIRUS!
XShellapi32Shellapi32.exeAdded as a result of the NETDEVIL (or NERTE) VIRUS!
XShellExShellEx.exeAdded as a result of the ANAKHA VIRUS!
?shicoxpshicoxp.exe??
XShineShine.exeAdded as a result of the HAPPYLOW (or NISHE-A) VIRUS!
Nshockmachine reminderSmReminder.exeShockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version
NShockwave InitSWINIT.EXEPart of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
NShortKeys 99SHORTKEY.EXEShortKeys from Insight Software Solutions - allows you to program keys with text strings
XShowbehindSHOWBEHIND.EXEAdvertisement display which can be stopped here
?ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051shwicon.exeCard reader for memory cards from digital cameras. Is it required?
USHPC32SHPC32.exePort monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled
YShStatEXESHSTAT.EXEFrom McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs
UShutdownawareshutdownaware.exeLoaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system
UShutDownProShutDownPro.exeShutDownPro - shutdown, reboot, logoff your System with one mouse click
XSicomSicom.exeAdded as a result of the NETLIP VIRUS!
USideACTSideACT.exeSideACT organizer software
NSideWinderTrayV4
or
SWTrayV4
SWTrayV4.exeMS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
XSingaporesingapore.exeAdds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself
Usiscolorcolor.exeProbably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
NSiS KHookerkhooker.exeSiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
Xsistrai.exesistrai.exeAdded as a result of the PROVA VIRUS!
Xsistraysistray.exeAdded as a result of the PROVA VIRUS! Note - this resides in C:\Windows\Command
USiS Tray
or
sistray
sistray.exeSystem Tray icon for SiS based graphics. Note - this resides in C:\Windows\System
?SISSoundmanSoundman.exeRelated to a Silicon Integrated Systems Corp (SiS) product?
?SiSSetCDfmtSiSSetCDfmt.exeRelated to a Silicon Integrated Systems Corp (SiS) product?
USiSSWLEDsisswled.exeSystem Tray utility for SiS 900 network cards
?SiSUSBRGSiSUSBrg.exeSiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP. Why is it in the startups though?
USK9910DMSK9910DM.EXEMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
USKDAEMONSKDAEMON.EXEMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys 
Nskinkersskinkers.exeSelection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here
YSkyBlaster SchedulerSSFSch.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
YSkySurfer Management ServiceSmaServ.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
NSleepManagerSleepMgr.exeThis program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode
XslideIexplore.exeAdded as a result of the GASLIDE VIRUS! Note - this is not the valid Internet Explorer file "iexplore.exe"
Nslimp3SliMP3 Server.exeSlimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"
NSlingshotSLINGS~1.EXEAtomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more"
NSm56aclsm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
NSmapp
or
Smtray
smtray.exeSystem Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
USmartalecpcaccel.exeSmartalec PC Accelerator - system optimization utility
NsMaRTcaPsSMARTC~1.EXEsMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys
NSmart Card ServiceScardSvr.exeFor Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly
USmart Connect MonitorSCMon.exeAppears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
USmart Connect SetupSCSetup.exeAppears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
?SmarthruengineQS.exeUnknown but disabled without problems
NSmart Type Assistantsta.exeSmart Type Assistant - a complex typing automation tool, intended to make your work faster and safer
NSmart Label O Serverssloserv.exePart of the printer software for the smart-label printer made by Seiko. Can be disabled safely
NSmart Label RFViewerSSLFVIEW.EXEPart of the printer software for the smart-label printer made by Seiko. Can be disabled safely
USmartPCXLpcaccel.exeSmartalec PC Accelerator - system optimization utility
Ysmc
or
SMC Service

or
SmcServices
smc.exe
spfsmc.exe
Sygate Firewall
NSmith Micro trysmiptray.exeSmith Micro shared files. Comes with D-Link web cam
USMS Application LauncherLAUNCH32.EXEMicrosoft Systems Management Server - used to manage computers on a network remotely
USMS Client Serviceclisvc95.exeWhen the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)
YSmserialsm56hlpr.exeMotorola based modem driver
NSMSI LoaderSMLoader.exeSmith Micro HotFax - fax software
XSMSSsmss.exeAdded as a result of the FLOOD.F VIRUS! Note - this is not the valid windows file "smss.exe" as it resides in C:\Winnt\system32\CatRoot\ rather than C:\Windows\System32
USMS Win9x Message Agent??This program assigns a user to a Systems Management Server site
Xsmsys (1)Explorer.exeAdded as a result of the CLICKER-C VIRUS! Note! - the valid "explorer.exe" is located in C:\Windows or C:\Winnt whereas this one is located in a C:\Windows\Template or 
C:\Winnt\Template subdirectory
Xsmsys (2)vi.exeAdult content dialler
?snbrsnbr.exe??
NSnsiconSnsicon.exeLaunches a screensaver program from Second Nature
?SO5 Integrator Pass Onesointgr.exeStarOffice 5. See here for more details
?SO5 Integrator Pass Twosointgr.exeStarOffice 5. See here for more details
XSock32sock32.exeAdded as a result of the SDBOT VIRUS!
YSoDA StartupSodaStartup.exeUsed by the Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software
NsofficeSOFFICE.EXEDisplays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).
YSOFTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
USoloScheduleSolocfg.exeScheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis
YSolo SentrySolosent.exeSolo Antivirus
?sophagntsophagnt.exePossibly related to Sophocles Screenwriting Software?
NSonic A3D Controlvrtxctrl.exeSound related options
NSoniqueQuickStartsqstart.exeQuickstart for Sonique audio player. Available via Start -> Programs
?SonnRegSonnReg.exePart of E-Color 3Deep for color calibration. Possibly a registration reminder?
?Sootrcea.exe??
?SoSyncMonitorSoSyncMonitor.exeSuperOffice related. What does it do and is it required?
?SoundFusion (1)rundll32 cwcprops.cplControl panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Whether it needs to run at start-up every time I don't know
?SoundFusion (2)rundll32 hercplgs.cpl, BootEntryPointControl panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Whether it needs to run at start-up every time I don't know
Nsoundmansoundman.exeUtilty software for the built-in soundcards on some motherboards from companies such as ASUS and Gigabyte. Available via Start -> Programs
NSourcePathgwreg.exeUsed to update Gateway registry settings for System Restoration Kit and Web update programs
Xsp (1)sp.regIE search hijacker - changes the default search to http://www.gocybersearch.com/
Xsp (2)
or
sps
regedit-s .... sp.dllMalicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here for more and a fix
XSP00LSVSp00lsv.exeAdded as a result of the GRAYBIRD.E VIRUS!
USpamPalspampal.exeSpamPal - anti-spam tool
NSpdstartSpdstart.exeNorton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel."
USpeaking Clock DeluxeSpClDlx.exeSpeaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly
USpeedkeySPEEDKEY.EXEAdditional keyboard shortcuts on MS programmable keyboard
NSpeed racerCTSRReg.exeSoftware for a Creative sound card
USpeed Tecspeedtec.exeAccel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled
USpeedtouch USB DisgnosticsDragdiag.exeFor an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
NSpellex Anywheresa.exeSpellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used
YSpIDerMailspiderml.exeDrWeb antivirus Spider Mail e-mail scanner
NSpinner Plusspinner.exe"Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness". Available via Start -> Programs
XSpoolerSubSystemProcessSpooI32.exeAdded as a result of the SPY.EHKS.21 VIRUS! Note - the "I" between "o" and "3" is a captial "i" not a lower case "L"
XSpool lptt01spool.exeNew variant of the RapidBlaster parasite (in a "spool" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
?SPP (1)run.exe??
Xspp (2)regedit -s spp.regIE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/
?sppbridgesppbridge.exeAssociated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example. Is it required or can it be started manually? 
USPSTEALTSmartProtectorPro.exeSmart Protector Pro - internet privacy tool that erases tracks, MRU lists, etc
XSpyBlastSpyBlast.exeSpyware killer that is in effect autoinstalled foistware, targeted by SpyBot, among others
USpy Blockerspyblocker.exeSpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all
XSpybott lptt01spybott.exeNew variant of the RapidBlaster parasite (in a "Spybott" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
USpyBotSnDSpybotsd.exeSpybot - Search & Destroy - free multi-spyware removal tool from Patrick Kolla
USpyCop ScanCheckMAIN.EXESpyCop surveillance software detection
XSpyNukerSpynuker.exeA "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ‘TrekData’ and ‘Blue Haven Media’, who distribute spyware through ActiveX drive-by-download on web pages
USpyStopperspystopper.exeSpyStopper - blocks intrusive spyware, Web bugs, worms, scripts, advertisements, and cookies. Protects you from being profiled and tracked
USpySweeperSpySweeper.exeSpy Sweeper - detects and removes spyware
XSpywareSpyware.exe

BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!

USpywareGuardsgmain.exe

"SpywareGuard provides a real-time protection solution against spyware"

USpyware Guard Control Panelspywar~1.exe

"SpywareGuard provides a real-time protection solution against spyware"

XSpywareguard lptt01Spywareguard.exeNew variant of the RapidBlaster parasite (in a "Spyguard" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
XSpyware Nuker InstallerSpywareNukerInstaller.exe

A "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ‘TrekData’ and ‘Blue Haven Media’, who distribute spyware through ActiveX drive-by-download on web pages

USpyware ScannerAseScanner.exe

Spyware Eliminator - Aluria Software's multi-spyware removal tool

USPYWATCHSpyWatch.exe

BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!

XSQConfigCheckercc.exeXupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
NSQL Serverscm.exeSQL Server Service Control Manager. Available via Start -> Programs
XSQUpdatesCheckeruc.exeXupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
?sr1exeupdtSup3.exeFound on a Dell computer, in a Documents and Settings\All Users\Application Data\Dell\Alert2 subfolder
?Srmcleansrmclean.exeSrmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. Is it required once the SoftPaq is successfully installed?
XSRNGsrng.exeSearch hijacker - see here
USRP Startupsrrpro.exeSystem Restore Remover Pro allows you to safely and easily remove System Restore and various other Windows Millennium "features." This is enabled if you tick the "Remove unnecessary System Restore information on startup" box. Available via Start -> Settings -> Control Panel
YSRS AppletSrsTray.ExeS3 Sonic Vibes sound card drivers - if disabled you loose sound
XSrv32Srv32.exeAdded as a result of the OPASERV.J VIRUS!
XSrv32Old<filename>Added as a result of the OPASERV.J VIRUS! where <filename> is the original worm name
USrv32Win (1)SpyAgent4.exeSpyAgent - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
USrv32Win (2)Svchost.exeRealtime-Spy keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
YSsdStd.exeStealthdisk - file and folder hiding/locking utility
?ssdiagssdiag.exeEquinox "Configuration and DOS Diagnostic for DOS and Windows platforms"
NSSDPSRVssdpsrv.exeSimple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. Used by Universal Plug and Play (for network device discovery). To remove this program, open Add/Remove Programs, select either Communications (Me) or Networking Services (XP), and remove the checkmark next to Universal Plug and Play
XSSK Servicewinssk32.exeAdded as a result of the SOBIG.E VIRUS!
Nsstraysstray.exenVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
YStart (1)Quick95.exeFor a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
XStart (2)windows.vbsHomepage hijacker
?start (3)start.exe??
YStartEAKStartEAK.exeEasy Access Button Support for Compaq PCs. Required if you use these
NStart Getrightgetright.exeSee Getright Tray Icon
Nstartl.exestartl.exeLingocom LingoWare - translates any application into your language
UStartStopSTARTSTOP.EXEStartStop from TFI Technology - startup manager
UStartSurfingSTARTS.exeStart Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start -> Programs
NStartup??Related to an Iomega drive
UStart Up Copstartcop.exeStartUp Cop - startup manager
?Startup Launcher GUIGUI.exeStartup manager?
U StartupMonitorStartupMonitor.exeMike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
Xstartwindowskeyuserrundle2.exeAdded as a result of the JAVAKILLER VIRUS!
NStart Wingman Profilerlwtest.exe
lwemon.exe   
Logitech Wingman software required to operate Logitech joysticks and gamepads.  Unless you're a hard-core gamer, it's best to leave it unchecked
XStatBarSTATBAR.exeStatBar (system status bar) allows you to quickly get an overview of your system's condition (memory, CPU, uptime, and much more). Due to the sheer number of resources (over 60%) consumed by this program, it is unsuitable for Windows 95/98/SE/Me
NStat 'n' PerfStatnPerf.exeStat 'n' Perf monitors your internet connection and displays information about sent and received bytes
NStatus Monitor XEENGSS.EXEThe Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start -> Programs
UStayAlivesa.exeStayAlive from TFI Technology. "This top-notch tool intercepts crashes when they happen, keeping your programs running so you can save your work."
NStay Connected!StayCon.exeMore than just a pinger, actually simulates online activity. Supports AOL, NetZero, MSN, ATT WorldNet, CompuServe and many other ISPs as well. Available via Start -> Programs
?STBVisionSTBVisn.exeRelated to the STB Velocity graphics card. What does it do and is it required?
NSTBWEBTVSTBWEBTV.EXEUsed to display TV on your PC
Xstcloader
or
STCLOA~1
stcloader.exe
or
STCLOA~1.exe
Popup adware by 2ndThought software
UStealth Anonymizer 2.5stealth25.exeNow named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy
NSteamSteam.exeProgram used for the game Half-Life. Valve (Half-Life creator) made it to test update and patches of the game as well as other games. Can be started manually
NStickiesSTICKIES.EXEStickies - utility that allows you to put yellow "Post-It" type messages on your desktop and can be used to set reminders. Available via Start -> Programs
NStickyNoteStickyNote.exeUtility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start -> Programs
UStillImageMonitorStimon.exeStimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners
UStorageGuardsgtray.exeStorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups 
?STPMGRSTPMGR.EXEPart of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs
XStrng32strngbox.exeAdded as a result of the STRANO VIRUS!
UStyleXPStyleXP.exeStyleXP allows you customize the way WinXP looks. If disabled via msconfig it re-instates itself at reboot, therefore uninstall it if you don't want it
NSubtract the AdsAdSub.exeRemoves adverts from web pages. Although useful - not required
XSULFNBJ.EXESULFNBJ.EXELeft as the result of being infected by the PE_MAGISTR.DAM virus. This virus infects system files and renames them (changing one letter) before adding them to the Run keys in the registry. Once the virus is removed via anti-virus software, delete the infected file and remove the key from the registry
NSupastatusstatus.exeSupanet ISP software
USuperCool Compress BackupMain.exe"SuperCool Zip Backup software is a data backup,restore and file synchronization program"
XSupernova<filename>.exeAdded as a result of the SURNOVA (or SUPOVA) VIRUS! <filename>.exe is the chosen name
Xsuperslutmsslut32.exeAdded as a result of the SLUTER-A VIRUS!
Xsupporter5supporter5.exePart of eScorcher anti-virus software. "eScorcher consists of 2 parts: Supporter5 and eScorcher. Supporter5 is responsible for updates of new virus bases each time you logon to the web. eScorcher is responsible for performing virus checks and deletions". Note from their privacy statement: "eScorcher collects IP addresses. eScorcher uses the information it gathers to tailor our content to suit our members' needs and to help our advertisers better understand our members' demographics"
NSunJavaUpdateSchedjusched.exeChecks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel
USupercleanerSupercleaner.exeSupercleaner - all in one disk cleaner for your computer
USureshotpopupkillerStopthepop.exeStop-the-Pop-Up popup blocker
USurfChoiceSCMan.exeSCMan is a utility that can control services on WinNT from the command line. This utility can create, start, pause, stop, delete services. Furthermore it can retrieve a service's current state, get the displayname for a service and vice versa
XSurfer lptt01surfer.exeNew variant of the RapidBlaster parasite (in a "mssurfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
USurfSecretss2-full.exe"House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray, eliminating tell-tale files at a regular interval of your choosing. You can set it to clear your Internet cache files, cookies, history, temp folder, etc. It can also clear the history of your Run and Find menus, in addition to the AOL cache"
XSustemexplorer.exeUndentified VIRUS!
XSustemUpdateexplorer.exeUndentified VIRUS!
XSVA PlayerSVAplayer.exeQuickFlicks Streaming Player - regarded as spyware. See here for details of how to disable or uninstall it
XSvcsvc.exeHijacker, Clientman parasite variant, redirecting to madfinder.com
XSvcedSvced.exeAdded as a result of the DELF.F VIRUS!
Xsvchost (1)Svch0st.exeAdded as a result of the GAYBIRD.B VIRUS!. Note - there is a number "0" in the executable filename, not a lower/upper case O. This is not the valid svchost.exe as described here
XSVCHOST (2)svchost.exeSystem1060 homepage hi-jacker. Found in a Windows\System\1060 directory. Note - this is not the valid svchost.exe as described here
Xsvchost (3)svchost.exeAdded as a result of the MORB VIRUS!. This is not the valid svchost.exe as described here. Located in the Windows directory, and not in Windows/System(32)
XSVCHOST (4)mrowyekdc.exeAdded as a result of the GOTORM VIRUS!. This is not the valid svchost.exe as described here
Xsvchost (5)Svch0st.exeAdded as a result of the GRAYBIRD VIRUS!
Xsvchost (6)<path to trojan>Added as a result of the HAZZER VIRUS!
Xsvchost.exesvchost32.exeCoolWebSearch hijacker - reroutes every thinkable URL for Google and MSN to CWS. Note - this is not the valid svchost.exe as described here
X<name>Svchosts.exeAdded as a result of the SDBOT.N VIRUS! where <name> can be random
Xsvcwinprocess32<path to worm>Added as a result of the UPERING VIRUS!
?SVM Popsvmpop.exe??
Xsvshostsvshost.exeAdded as a result of an unidentified VIRUS!
NSwap Nutjavaw.exeSwapNut is a peer-to-peer file sharing and searching utility developed and marketed by File Metrics, Inc. Users can search for and find almost any type of digital file (audio, video, photos etc.) through a secure peer-to-peer network
XSWCallerSWcaller.exe
Swcaller2.exe
Homepage hijacker - see here
NSWdwinwd.exePC Security from Tropical Software - lock files, password protect, etc
YSweep95ICLOAD95.EXEPart of Sophos ant-virus sofware
XSwf32 (1)AVupdate.exeAdded as a result of the MERKUR VIRUS!
XSwf32 (2)_backup.exeAdded as a result of the SYMTEN VIRUS!
XSwimSuitNetworkSwimSuitNetwork.exeAdvertising spyware
NSwitchboard.com ToolbarAtHoc.exeToolbar for the on-line version of Yellow Pages in the US - Switchboard.com
USwitch Offswoff.exeSwitch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer, disconnect your current dialup connection, lock workstation, etc
Xsws.exe<random filename.exe>Haldex type adult content dialler
NSwTraySWTRAY.EXEMS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it
?SXGDSENUsxgdsenu.exeYamaha SXG soundcard driver
?SxgTkBarsxgtkbar.exeYamaha SXG soundcard driver
XSYDNEY<file path>Added as a result of the SYNEY VIRUS!
USyGateServicesgserv95.exeSyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs
YSymantec Core LCsymlcsvc.exePart of Norton AntiVirus 2004. What does it do?
NSymantec Fax Starter Edition PortOLFSNT40.EXEOffers a virtual printer as a fax machine. Can be run via a desktop shortcut
USymKeepAliveCKA.exePart of Norton SystemWorks 2003 - keeps a dial-up modem connection alive
NSymTray - Norton SystemWorksSYMTRAY.EXEKeeps all System Tray icons for Norton SystemWorks together to reduce clutter. SystemWorks includes Norton Anti-Virus, Norton Utilities and Norton CleanSweep - mentioned elsewhere here. Personally I only have Norton eMail Protect running which doesn't need SymTray
USyncAgentsyncagent.exeGhost Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
USync DataHndsync.exePocket Real Estate - mobile synchronization manager
NSynchronization Managermobsync.exeFind more information about its use here
USync-ItSyncit.exeSync-It - synchronizes the system clock with time servers on the internet
?SynSetupSynTP.tmp \RunOnce.exeProbably associated Synaptics touchpads on laptops as for SynTPEnh and SynTPLpr below but what does it do and is it required?
USynTPEnhsyntpenh.exeSynaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll
YSynTPLprsyntplpr.exeSynaptics touchpad driver helper. Required for touchpad features to work
Xsysregedit /s sys.regHijacker
USysAgentSysAgent.exeSYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
USysbotsysbot.exeSpector - spying (or monitoring) software to record internet activity
Xsyscfg34.exesyscfg34.exeAdded as a result of the ELECTRON VIRUS!
?SysCompmssdnl.comUnknown but suspect as *.com are not usually run at start up and the name isn't recognized
Xsyscon lptt01syscon.exeNew variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Xsysconfig (1)iexplorer.exeAdded as a result of the CULT.C VIRUS!. Note! - iexplorere.exe is not to be confused with Interrnet Explorer (iexplore.exe)
XSysConfig (2)syscfg35.exeAdded as a result of the KAZMOR.C VIRUS!
Xsysconfig (3)iexplorer.exeAdded as a result of the CULT.H VIRUS! Note! - the valid "iexplorer.exe" resides in C:\Program Files whereas this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
XSysCtlsysctl.exeAdded as a result of the AOK VIRUS!
XSysctrlsprocdll.exeAdded as a result of the WEEDBOTZ.14 VIRUS!
Xsyshelpsyshelp.exeAdded as a result of the LOVGATE VIRUS!
XSyslog lptt01Syslog.exeNew variant of the RapidBlaster parasite (in a "Syslog" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
XSysOpsSysOpsAdded as a result of the MSNCORRUPT VIRUS!
XsysPnP (1)bootconf.exeHomepage hijacker, redirecting to coolwwwsearch.com; see for example here
XSysPnP (2)rundll32 setupapi, InstallHinfSection.... oemsyspnp.infSearch hijacker - see here
YSysPoolMssvc.exeStealthDisk - hides folders, files and applications. Will also encrypt them for better protection
XSysProtectSystem.exeAdded as a result of the NETSPY VIRUS!
XSysRsysmd.exeAdult content based "foistware" (adds hidden components to your system)
XSysReg (1)SysReg.exeAdded as a result of the CCINVADER2 VIRUS!
XSysReg (2)SysReg.exeSearchSeekFind textual marketing foistware
XSysresSysres.exeAdded as a result of the LOGMOD VIRUS!
XSysScanbvt.exeAdded as a result of the AUTOUPDER VIRUS!
XSysServiceSysService.exeAdded as a result of the DELF family of VIRUSES!
XSysService32SysService32.exe
ln32k.dll
Added as a result of the KINDAL VIRUS!
XSystem (1)run322.exeAdded as a result of the LANFILT VIRUS!
XSystem (2)
or
system.exe
system.exeAdded as a result of a number of VIRUSES, including CHILI, NULLBOT, FULAMER.25, NETCONTROLL, NETCONTROLL, GATECRASH.A, GATECRASH.B, NTCONTROL.A, BUSHTRO122 & VIVAEL
Xsystem (3)regedit -s system.dllHomepage hijacker
Xsystem (4)systemsearch.htaJetseeker.com hijacker
XSystem (5)dcomx.exeAdded as a result of the CIREBOT VIRUS!
Xsystem (6)Explorer.exeAdded as a result of the GRAYBIRD VIRUS! Note - this is located in this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 
(WinXP) rather than the valid Windows Explorer which is located in C:\Windows or C:\Winnt
XSystem32 (1)system.exeAdded as a result of the BUSHTRO122 VIRUS!
XSystem32 (2)System32.exeAdded as a result of the MARI, SYSXXX and other VIRUSSES!
XSystem33FB_PNU.EXEAdded as a result of the NICHELLO-A VIRUS!
XSystem 64 Driver for Gamessys64dvr.exeAdded as a result of the SDBOT VIRUS!
XSystemAdministrationWincmp32.exeAdded as a result of the ASYLUM VIRUS!
USystemAgentSage.exe"Microsoft Plus! System Agent automatically tunes your system, performing tasks such as disk optimization and error correction. It can also run any application at prescheduled times"
XSystemBackup (1)mtx.exeAdded as a result of the MTX VIRUS!
XSystemBackup (2)MicroLog.exeAdded as a result of the MICROLOG.A VIRUS!
?SystemBoot (1)ladies.htmUnknown but sounds very suspicious??
XSystemBoot (2)Mshta.exe ...filename.htaAdult content dialler
XSystemCheckSystemcheck.exeAdded as a result of the LAVITS VIRUS!
USystem CheckRundll32.exe SysDll32.dll, SystemCheckXPCSpy Pro keylogger, surveillance and monitoring software
XSystemCONF98iSystemCONF98i.exeAdded as a result of the FROZEN BOT VIRUS!
NSystem DLFcpqdiaga.exeCompaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via Start -> Programs
XSystemDllSystemDll.exeAdded as a result of the LOXOSCAM VIRUS!
Xsystemdrvms32sys.exeVIRUS related - most likely GAOBOT
XSystem Efficiency Monitor (1)mscedit32.exeAdded as a result of the SDBOT.P VIRUS!
XSystem Efficiency Monitor (2)mscommand.exeAdded as a result of the KWBOT.P VIRUS!
XSystemFTPVSENMB.exeMalware (ie, malicious software).  Also changes the system.ini Shell line to read Shell=Explorer.exe VSENMB.exe, and it hacks the Winstart.bat as well
XSystemInitiservc.exeAdded as a result of the FIZZER VIRUS!
XSystem Initialization (1)msmsgri32.exe
payload.dat
Added as a result of the RANDEX.D or ROXY VIRUSSES!
XSystem Initialization (1)msmsgri32.exe
payload.dat
Added as a result of the ROXY.B VIRUS!
USystem LifeGuard SchedulerSlsched.exeSystem LifeGuard scheduler
XSystemManagerSysman32.exeAdded as a result of the DOWNLOADER-BW.B VIRUS!
XSystemMap32Netisp32.vbsAdded as a result of the REDIST.C VIRUS!
XSystemMDmd.exeHomepage hijacker
USystem Monitor (1)SYSMON.EXEComes with some Aopen motherboards. Monitors CPU temp, voltage and fan speed. Warns if any become abnormal
XSystem Monitor (2)Sysmon16.exeAdded as a result of the SDBOT VIRUS!
XSystem MScvbmscvb32.exeAdded as a result of the SOBIG.C VIRUS!
XSystem ProfileRegsrv.exeAdded as a result of the BDS/OPTIXPRO.12 VIRUS!
?SystemReg (1)PROCES.EXE??
XSystemReg (2)svchost.exeAdded as a result of the DEWIN.E VIRUS! Note - this is not the valid svchost.exe as described here
XSystemReg (3)WINREG.EXEAdded as a result of the DEWIN.A VIRUS!
USystems.exeSystems.exeKeyboard Spectator - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
USystemSafeSyssafe.exeSystem Safety Monitor - system monitoring tool with additional application firewalling
XSYSTEMSars32csrss.exeAdded as a result of the AHLEM.A VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
XSystemSASSystem32.exeAdded as a result of the KWBOT.C VIRUS!
XSystem ServiceMSREXE.EXEAdded as a result of the AML VIRUS!
XSystem-ServiceEXPLORER.SCRAdded as a result of the BENJAMIN VIRUS! KaZaA file-sharing users beware!
XSystem Soap Prosoap.exeSystem Soap Pro internet cleaning software. Bundles foistware like HTTPER and Zipclix - best avoided
USystem startupcharmapx.exeOnly required if using an oriental language
USystemSuite Task ManagerMXTASK.EXEvcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program's configuration options to enable only the parts you want running all the time - such as Virusscanner Pro
XSystemTasksfilez.exe
sexypicz.exe
loaded.exe
Adult content dialler
USystemTray (1)
or
SysTray (1)
SysTray.ExeSYSTRAY.EXE - System Tray Services. Provides the Volume Control, PC Card Status, Power Management and other icons that reside in the System Tray (see here). SYSTRAY.EXE may be disabled if none of these services are required. It will launch as and when required if you later enable the icons. If you need these items they're available via Start -> Settings -> Control Panel
XSystemTray (2)SystemTray.exeAdded as a result of the BIGFOOT VIRUS! Note! - this is not the valid SystemTray above
XSystem Traymsccn32.exeAdded as a result of the PALYH.A VIRUS! Warning - spreading via infected E-mail attachments with the sender address faked as support@microsoft.com. Note - do not confuse with the valid SystemTray above
XSystem Tray32SysTray32.exeAdded as a result of the REPAD VIRUS!
NSystemUpdSystemUpd.exeUpdater for Swapoo.com, a kind of Napster for games
USystemWizard SnifferSniffer.exeSystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC
Xsysthreadwinkernal.exeAdded as a result of the LIAMED VIRUS!
XSystoan32systoan.exeAdded as the result of an unidentified VIRUS!
?systr32systr32.exe??
?systraxsystrax.exe??
XSystray (2)Systray_.ExeAdded as a result of the KERGEZ.A VIRUS!
USysW8csta.exeClean Space - privacy and perfomance enhancer
USYSWB6SYSWB6.exeWe-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content
XSyswindowSyswindow.exeAdded as a result of the COW VIRUS!
USZMsgSvc.exeSZMsgSvc.exeStopZilla! - pop-up killer

Back to search

 Name/Startup ItemCommandComments
XTabastte.exeClickspring spyware
NTabletTablet.exeLoads the tablet drivers for the Wacom Graphics Tablet. This can be unchecked in msconfig without problems if you don't need the tablet functional all the time. Create your own shortcut if you need to run it ad hoc. If you forget to run it before running Paint Shop Pro & Adobe Photo Shop) you may find the following: (1) Paint Shop Pro (version 7.04) - (a) Browse function will NOT work (program freezes) (b) On program exit, PSP does not terminate (you have to CTRL+ALT+DEL to close it) (2) Photo Shop (version 6.01) - (a) Program functions slowdown (d) On program exit it takes noticeably longer to shut down (like 30-45 seconds)
YTabUserWTabUserW.exeWacom pen tablet driver
NTadtad.exeFrom Turtle Beach's Santa Cruz on a Dell WinME system. Not required - works fine without it including keyboard hot controls for volume and mute
?TAGtag.exe??
NTahni DeskmateTahni.exeTahni Deskmate - "Interactive cartoon character that lives on your Windows desktop"
NTalkingReminderTALKINGREMINDER.EXETalking Reminder from Software River Solutions - talking calendar reminder
?talknowtalknow.exeCould it be related to this or something similar?
?TangoSetup.exeTango Broadband access software. Is it required?
?TangoManagerTangoManager.exeTango Broadband access software. Is it required?
UTapiTNATapiTNA.exeTelephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys
UTardisTardis.exeTardis - time synchronization software
XTask BarTASKBAR.EXEAdded as a result of the FRETHEM.J VIRUS!
?Task BarClientTaskBarClient.exeResponsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service
?Task BarSvrTaskBarSvr.exePart of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?
NTaskbar Display ControlsRunDLL deskcp16.dll,
QUICKRES_RUNDLLENTRY
Only appears in MSCONFIG if you have a Display Settings icon in the System Tray allowing resolution changes on the fly. Can also be disabled under Control Panel -> Display -> Settings -> Advanced -> General. Also appears if you have Win95 with the QuickRes "Powertoy" installed
XTaskManrundll32.exeAdded as a result of the DVLDR VIRUS! Note - this is not the valid "rundll32.exe" as it's in the Windows\Fonts directory
XTaskmgr (1)Taskmgr.exeSystem1060 homepage hi-jacker. Note - this is not a Windows file and is found in a Windows\System\1060 directory
XTaskmgr (2)tskmgr32.exeHomepage hi-jacker
Ntaskmgr.exetaskmgr.exeWindows Task Manager in Windows XP. If run from the Startup folder, the tray icon will be put to the system tray after boot. Useful to check if XP has finished running the delayed services after boot. Available via a desktop shortcut
Xtaskmngr lptt01taskmngr.exeNew variant of the RapidBlaster parasite (in a "Taskmngr" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
UTaskMonitortaskmon.exeThe Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase)
NTaskPlusTASKPLUS0.EXE
TASKPL~1.EXE
Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
XTaskReg<filename.exe>Added as a result of the CBLAD VIRUS! <filename.exe> is the full path and name of the infected file
XTaskschdTRAYWND.EXEAdded as a result of the LITMUS.002 VIRUS!
Ntaskswitchtaskswitch.exeALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
NTasktrayCTLTray.exeInstalled with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon.  Also allows you to launch the Taskbar via right-click -> Show Taskbar. The tasktray can be accessed via Start -> Programs -> Creative -> Sound Blaster Audigy -> Taskbar
YTau monitorTaumon.exe"Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system."
UTBC Protbcpro.exeTitleBarClock Pro - displays Day, Time, Date, Month, Year, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus
Ntbctraytbctray.exeProvides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
YTBLFUNCtblmouse.exeAiptek HyperPen driver
UTBPanelTBPanel.exeConfiguration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
NTBTraytbtray.exeVLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel
Ytcactivetca.exePart of The Cleaner from MooSoft - stops virus trojans before they can do any damage
NTCAUDIAG -off
or
TCASUTIEXE
tcaudiag.exeAssociated with the 3COM diagnostic module (3COM NIC Doctor).  No further information is available
?TCDPbtnTCDPbtn.exeFound on a Toshiba laptop
?TCDPlayTCDPlay.drvFound on a Toshiba laptop - sounds like the driver for the CD-ROM but why doesn't it use the standard Windows drivers - any comments?
UTClockTCLOCK.EXEKazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs
UTClockExTCLOCKEX.EXEPuts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks
Utcmonitortcm.exePart of The Cleaner from MooSoft - warns of changes to the registry
?TDispVolTDispVol.exe??
UTDKSTARTTDKSTART.EXESets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
NTDKTASKTDKTASK.EXETaskbar utility for a "control panel" for a CD-RW
?TDockNUndockN/AFound on a Toshiba laptop - for use with a docking station?
?TDspOffTdspoff.exeFound on a Toshiba laptop
NTeach In Boxteachbox.exeTutoring program that comes with a SystemAX Computer
YTech-In-A-Boxtechbox.exeTech-in-a-Box "provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs, Tech-in-a-Box is your tool to stay up and running"
YTelepathtelepath.exeDrivers for the WinModem versions of the US Robotics "Telepath" series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
XTerminate PopupFPUK.exe
ZPU.exe
Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker.  Also see here
UTEscKeyTEscKey.exeToshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
?TeslaTESLA.EXE??
?TExBUtil RegistryTExBUtil.exe??
NTextAloudTextAloudMP3.exeTextAloud MP3 - convert text into spoken words and MP3s
NTextbridge Instant Access OCRtelepath.exeTextBridge from Scansoft. OCR (optical character recognition) software for scanning documents into popular editing applications. Available via Start -> Programs
UTFncKyTFncky.exeDeals with the <Fn> - <Function> key combinations on a Toshiba laptop
UTFNF5TFNF5.exeToshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5>, a window appears showing the displays that can be chosen – LCD, LCD + CRT, CRT, TV
Ytfswctrltfswctrl.exeDrive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
XTFTP###tftp###Added as a result of the SPYBOT VIRUS! where # can be any number
UTFunckeyTFuncKey.exeDeals with the <Fn> - <Function> key combinations on a Toshiba laptop
NTgAddServertgfix.exeSoftware from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech)) and ISPs (such as Comcast, Cox and Charter (Pipeline Support Agent)) that allows them to offer on-line support - to update drivers, fix faults, etc. Can cause a deterioration in a PC's peformance (see here). This part does the protection and "self-healing". Uninstallation is recommended by most people - especially for System Restore users (WinME/XP). If not available via Add/Remove, Charter offer some uninstallation instructions involving a registry patch that you may be able to modify for your proivder or try here
UTgcmd
or
tgcmdprovidersbc
tgcmd.exeSee above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. "tgcmdprovidersbc" is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation
NTGCMG??Related to Rogers@Home, causes errors in WinSock32.dll. Not required for connection to work
XTGDC IE Plugintgdc.exeShopForGood spyware - see here
Xtgkilltgkill.exeComcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
UTgsetsitetgfix.exeSee TgAddserver and Tgcmd above. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation
NThdetrfthdetr32.exeAppears to be related to Lycos advertising
?TheMainStartN/A??
UTHGuardTH_Guard.exeResident memory scanning for TrojanHunter
UTHOTKEYTHotkey.exeAssociated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked, like the one that regulates the volume of the system beep, but others didn't, like the one that immediately blackens your screen
UThrustTSRTMTMTSR.exeThrustmaster Thrustmapper. "The Thrustmapper - t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"
UTiADSLtidslmon.exeActiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start -> Programs
XTigerShine.exeAdded as a result of the HAPPYLOW (or NISHE-A) VIRUS!
NTimeCalendartc.exeTimeCalender - calendar reminder
NTimed Backups Manager StartupBACKTIME.EXEBackup Plus - backup software
NTimemanager.exeTimemanager.exeEasy to use program for recording how you spend your time, designed to help you in billing multiple clients
NTimeOnlineTIMEONLINE.EXELightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
XTimeSink Add ClientTSADBOT.EXEAdvertising spyware
NTimeUpTimeup.exeTimeUp - internet online timer
XTime Zone Synchronizationwscript zshell.jsAdded as a result of the NETDEX-A VIRUS!
NTINTSETPTINTSETP.EXELocation in the IME directory on a PC and may therefore be related to an Asian language part of a program. See more on IME here. Known to be not required
YTiny Personal Firewallpersfw.exeTiny Personal Firewall
UtinySpelltinyspell.exeTinyspell - "allows you to easily and quickly check the spelling of words in any Windows application. Monitors your typing on the fly, alerts you whenever it detects a misspelled word, and checks the spelling of every word you copy to the clipboard"
UTiomanExeTioman.ExeAgate Tioman - warm and hot swap removable bay device manager for IBM laptops
NTipsmousetips.exeSuggests tips on using your mouse
UTiTleBarClockTiTleBarClock.exeTitleBarClock displays the day/month/time and free physical RAM on the right hand side of an open window, replacing the system tray clock at startup
?TivoliLCFEP.EXEAppears to be part of a corporate backup strategy - waiting for a backup server to contact your PC and initiate a backup?
NTkBellExe
or
TkBell.Exe
evntsvc.exe
tkbell.exe
Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK
NtkonnectTKONNECT.EXEDialer for the Tiscali internet service provider. Available as a desktop shortcut
UTMA distributioncfinst.exePart of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
UTMESBSTMESBS21.exeToshiba Mobile Extension Selectable Bay Service for WinXP - support for docking stations. Not required if you don't use a docking station
UTMExLogonTMESRV.EXEToshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
?TmmkbTmmkysvr.exeToshiba multi-media keyboard software - possibly including creating keyboard shortcuts?
UTMOUSEtmouse.exeComponent of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects, except disabling the scroll/zoom features of the AccuPoint
Ytmproxytmproxy.exeTrend Micro PC-cillin 2003 antivirus software
UTNTClkTNTCLK.exeOverclocking program for TNT, TNT2, and other graphics cards. This program can overclock the graphics card manually after startup when needed, especially before starting a gaming session. However, for simplicity, it can be left checked to let it run once at startup to automatically overclock the graphics card. In this case, it doesn't even run in the background after doing its job
NTMTMTSRTMTMTST.exeInstalled with Thrustmaster game controllers. It launches the Thrustmapper utility. Not required if you install the "driver only" from Thrustmaster website
UToADiMon.exeToADiMon.exeT-Online ISP software connection assistant
?Tommorrowtomorrow.exe??
?ToPassSrvPktopass.exeRelated to Caere Pagekeeper scanning software (now taken over by Scansoft), Disabling is known to cause problems
XtopmoxieJavaRun.exeMarketing software from TopMoxie
UToshHKCWToshHKCW.exeToshiba Hot Key Change/Control Wireless. Permits you to use a hot key to activate/deactivate built-in 802.11b wireless transmission on a laptop (if installed)
YToshiba Fanfan.exeToshiba untilty to keep the fan on a laptop running if they fail to detect there is too much heat
UToshiba Key StateKEYSTATE.EXEDisplays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g., Toshiba) laptops which do not have a Caps Lock indicator light. Available via Start -> Programs
NToshibaPingerpinger.exePinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification. Disabling instructions here
UTOSHIBSUToshibsu.exeReduces the power consumption when the laptop isn't being used to preserve battery power. Hibernate function doesn't work if this is disabled. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run off battery regularly
YTosMemtosmem.exeToshiba laptop related. Win98/Me ACPI system can not hibernate or go on standby if all of the physical memory lower than 640KB is locked. This utility allocates and locks three pages on boot and then releases them on standby/hibernation for ACPI.SYS in order to solve the above problem
UTotRecSchedTotRecSched.exeScheduler for Total Recorder - allows automatic recording of a show at a given time for later playback or you can use the scheduler as an alarm
Ntour (1)regedit ..tour.regEdits registry values to keep the WinMe tour in Task Scheduler
NTour (2)wincool.exeComponent of WinME that's annoying as hell. Pop's up a prompt to play the C:\WINDOWS\Application Data\Microsoft\INTRO\CONTENT.HTA that plays a full screen version of the WinME product preview Windows Media video file that cannot be stopped to my knowledge until it finishes. That prompt will keep popping up after an install/reinstall of  WinME until you give in and watch the thing. It also puts a task scheduler entry to run that annoying thing every 30 minutes, and don't bother deleting that entry, Windows puts it right back. Not only should you disable it from running, you should delete the thing altogether, as it, somehow can re-enable itself. Apparently you can try setting the file to read only
UTouch ManagerWinLED.exeDell keyboard utility. Disabling can result in loss of screen saver and power saver functionality
UTP4EXtp4ex.exeAdds accessibility options for an IBM TrackPoint
Utp4servtp4serv.exeSupports the "pointer stick" on Thinkpads in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work
?TP98TRAY
or
TPTRAY
TP98TRAY.EXEIBM Thinkpad related utility. What does it do and is it required?
NTP98UTILTP98.EXEIBM Thinkpad feature setup & configuration utility
UTpHotKeyTPHKMGR.EXEActivates "ThinkPad Help" when the "Thinkpad key" is pressed on an IBM ThinkPad laptop. Also activates the audio buttons (volume up/down, mute) on models such as the Thinkpad T30
UTpKmapMnTpKmapMn.exeCreate Keyboard combinations for special Thinkpad buttons when using an external keyboard, e.g. "Ctrl-arrow up" for "volume up". Only required when using an external keyboard. Available via Start -> Programs
UTPP Auto LoaderTppaldr.exeInstalled with DataStor's (and some other manufacturers) USB 2.0 based external DVD, CD-ROM and CD-RW drives. System tray icon allowing the user to disconnect the external drive without an error message being displayed
UTprtrayTprtray.exeDisplays the Power icon in the System Tray on a Toshiba laptop
?TPwrMgrTPwrMgr.exeFound on a Toshiba laptop. Related to power management?
YTPWRTRAYTpwrtray.exeToshiba laptop's own Advanced Power Management system which disables Windows APM (greyed-out in Control Panel). You can't choose which of the 2 systems to use
NTracelesslaunch.exeTraceless 2003 - clear your cookies, temp directories and browser history with a click of a button. It also clears the recent documents and the IE drop down auto complete box
?TrackerTracker.exePossibly associated with My Deluxe Invoices program
UTrackpointSrvdaemon.exe
tp4serv.exe
Supports the "pointer stick" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work
UTracks Eraser Prote.exeTracks Eraser Pro from Acesoft - "Erases all tracks of your internet activity" 
UTransparentTransparentW.exe
TransparentD.exe
TransparentB.exe
Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here
UTransparentIcons
or
tranicon
tranicon.exeA Tweak-XP component (only in the registered version), makes Desktop icons transparent. Can be enabled/disabled via Tweak-XP -> System + File Tweaks -> Windows Tweaks -> Desktop Tweaks -> Make Desktop Icons Transparent
UTrashgrdTRASHGRD.EXEPart of McAfee Nuts & Bolts. Protects all the fi