Startup Applications List
Unfortunately, due to a change in my circumstances, the startup programs database here at Sysinfo.org will no longer be updated and the off-line downloads are no longer available. The version at Pacman's Portal will, however, continue to be updated and it's recommended that you refer to that site for more up to date information. The reason for this change in policy cannot be disclosed at this time but I hope you have enjoyed using the database here and thank you for your support and kind comments over the years.
Paul Collins
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. The database is mirrored in a slightly different format at Pacman's Portal.
"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs you may want to also visit this page.
For further information on random startup entries please visit the Startups Info page.
Last update :- 29th July, 2011
24133 items listed
"Status" key:
| Name or Startup Item | Status | Command or Data | Description | Tested? |
|---|---|---|---|---|
| Configuration L0ader | X | picorulez.exe | Added by the SDBOT-IN BACKDOOR! | No |
| ControlPanel | X | popcorn.exe internat.dll, LoadKeyboardProfile | Added by the BIZVES-B TROJAN! | No |
| ControlPanel | X | popcorn64.exe rundll.dll, LoadMouseProfile | Added by the DLOADER-OI TROJAN! | No |
| ControlPanel | X | popcorn72.exe rundll.dll, LoadMouseProfile | Added by the DLOADER-RA TROJAN! | No |
| ControlPanel | X | popcorn320.exe rundll.dll, LoadMouseProfile | Added by a variant of the DLOADER-RA TROJAN! | No |
| ControlPanel | X | private.exe internat.dll,LoadMouseCarpetProfile | Added by the CLICKER-AZ TROJAN! Creates the files sdfff, fdsf and zxczxc. In %System% creates the files d.exe, s.exe and r.exe. Note - the "private.exe" file is found in %System% | No |
| Country Select | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| CountrySelection | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| Data Restore Service | X | prq8.exe | Added by the KELVIR.AI WORM! | No |
| DefensaAntiMalware | X | pgs.exe | DefensaAntiMalware, Spanish rogue security software - not recommended. A member of the AVSystemCare family | No |
| DellAutomatedPCTuneUp | Y | PTAgnt.exe | PC TuneUp from Dell - "silently monitors your system, automatically running needed maintenance during idle time to keep you at peak performance" | No |
| DevicePath | X | Proyecto1.exe | Added by the GRUEL WORM! | No |
| DhcpCep | X | PYJJKIME.exe | Added by the AGENT-BXQ TROJAN! | No |
| Dialgo SDK | U | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" | No |
| Dialog Helper | N | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs | No |
| directx | X | PipeCmd.exe | Added by the SDBOT.D TROJAN! | No |
| Disk Defragmentation Loader | X | pmsvcr.exe | Added by a variant of the IRCBOT TROJAN! | No |
| DocuMagix Init | N | PWATCH.EXE | PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed | No |
| DRam prosessor | X | plscd.exe | Added by the RBOT.CYA WORM! | No |
| dregfix | ? | ph_finder.exe | ?? | No |
| DSL Connection Manager | N | ProDsl.exe | System Tray access to the connection manager for Intel ADSL modems - such as the ProDSL 3200 and ProDSL 2100. Allows you to monitor a number of parameters for you DSL connection and modem | No |
| dstiosys | X | plsitctl.exe | Added by the MAILBOT-BX TROJAN! | No |
| DXM6Patch_981116 | N | p_981116.exe | Win32 cabinet self extractor. More info here | No |
| eEjerik | X | pohapereq.exe | Added by the SDBOT.BFF WORM! | No |
| eTrust PestPatrol Active Protection | U | PPActiveDetection.exe | Real-time protection for eTrust PestPatrol Anti-Spyware - which became CA Anti-Spyware and is now included in CA AntiVirus Plus | No |
| Event Planner Reminders | N | PLNRNote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Event Planner Reminders Tray Icon | N | PLNRnote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Event Reminder | N | pmremind.exe | Event reminder for calendar dates, etc from Broderbund PrintMaster. Disable using the program's own option (if available) or a startup manager as it will re-instate if disabled via MSConfig | No |
| Explore | X | PLORE.EXE | Added by the FORBOT-P WORM! | No |
| freinst | X | pgs.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples | No |
| Gadwin PrintScreen | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| game | X | patcher.scr | Added by the PSW-ED TROJAN! | No |
| GoldenAntiSpy | X | pgs.exe | GoldenAntiSpy rogue security software - not recommended. A member of the AVSystemCare family | No |
| Guardian PC Security Tools | U | Pfft.exe | Boomerang Software's Guardian PC Security Tools - now rebranded as the eXtendia Security Suite | No |
| GW Port Controller | Y | PORTCT95.EXE | From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung | No |
| Hidup_Susah | X | Pembantu.exe | Added by the SILLYFDC.BDM WORM! | No |
| HP Presentation Ready | N | PresRdy.exe | HP Omnibook related: "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device" | No |
| HPU | N | ProvenTactics.exe | Proven Internet Marketing software | No |
| Hyper Files | X | phfhost.exe | Added by the AGENT-JQO TROJAN! | No |
| icrosoft Visual | X | plscx.exe | Added by the RBOT-AYO WORM! | No |
| icrosoft Windows DLL Services Configuration | X | poker3.exe | Added by the SDBOT-AER WORM! | No |
| IE6 | X | porn.pif | Added by the RBOT-ATF WORM! | No |
| Imonitor | U | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal | No |
| InstantTray | N | PCLETray.exe | Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually | No |
| Intel PDS | U | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled | No |
| Intel PROSet Tray Icon | N | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features | No |
| ISPSERVICE | X | psycho.exe | Added by the IRCFLOOD-O TROJAN! | No |
| Karen's Once-A-Day II | U | PTOAD.exe | "Have a job that should be run exactly once each day? Karen's Once-A-Day II is just what you need!" Scheduler that lets you specify progams, web pages and files that be run or opened automatically, the first time | No |
| KernelFaultCheck | X | ptool32.exe | Added by the LEGMIR-BN TROJAN! | No |
| Keyboard Preload Check | Y | Preload.exe | Millenium Multi-Function Keyboard driver | No |
Notes & Warnings
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.
NOTE: There are a number of virus and malware entries listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. I fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
RECOMMENDATIONS:
If you're looking for a startup manager then why not try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.
As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware we recommend you use a quality internet security package. Which ever you choose, keep it updated.
Copyright
Presentation, format & comments Copyright © 2001 - 2011 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved