Startup Applications List
Unfortunately, due to a change in my circumstances, the startup programs database here at Sysinfo.org will no longer be updated and the off-line downloads are no longer available. The version at Pacman's Portal will, however, continue to be updated and it's recommended that you refer to that site for more up to date information. The reason for this change in policy cannot be disclosed at this time but I hope you have enjoyed using the database here and thank you for your support and kind comments over the years.
Paul Collins
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. The database is mirrored in a slightly different format at Pacman's Portal.
"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs you may want to also visit this page.
For further information on random startup entries please visit the Startups Info page.
Last update :- 29th July, 2011
24133 items listed
"Status" key:
| Name or Startup Item | Status | Command or Data | Description | Tested? |
|---|---|---|---|---|
| TurboNet | X | [path to trojan] | Added by the RENOS-EA TROJAN! | No |
| TVEService | N | TVEService.exe | Preloads TV related parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of that feature. Only required on slower/older systems and included with versions of PowerCinema bundled (and re-branded) with systems from Acer, Dell, ASUS and others | Yes |
| TVT Scheduler Proxy | U | scheduler_proxy.exe | Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates), Rescue and Recovery (backup and system recovery), Message Center Plus and maybe others. It's exact function isn't known but if disabled, the "plan updates" button in the IBM System Update software will no longer be available, though the software will continue run properly | Yes |
| type32 | U | type32.exe | Microsoft IntelliType Pro utility (up to version 5.4) - required to support the multimedia keys, programmed keys and key macros on Microsoft's range of keyboards. If this entry is disabled, any programmed keys or actions will not be supported and keys will not function as expected in applications with advanced text services enabled | Yes |
| UCam_Menu | ? | MUIStartMenu.exe | Part of YouCam from CyberLink - effects software for webcams. The exact purpose of this entry is unknown at present but it unloads from memory once run | Yes |
| ucstartup | N | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc | Yes |
| ucstartup.exe | N | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc | Yes |
| UC_Start | N | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc | Yes |
| UIWatcher | N | UIWatcher.exe | Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2, UnInstaller 3 and UnInstaller 4. These monitor and record program installations and allows you to remove them completely, so that no trace is left. This is the installion monitor that sits in the System Tray and detects the launch of installation programs | Yes |
| Uniblue ProcessQuickLink 2 | N | ProcessQuickLink2.exe | ProcessQuickLink by Uniblue Systems Ltd - gives you quick access to their Process Library entry for a currently running process via the standard Windows Task Manager (CTRL+ALT+DEL). A System Tray icon also allows you to search the library and launch the Task Manager. Run on demand | Yes |
| Uniblue Registry Booster | N | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals | Yes |
| Uniblue RegistryBooster 2 | N | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals | Yes |
| Uniblue RegistryBooster 2009 | N | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals | Yes |
| Uniblue SpyEraser | Y | SpyEraser.exe | SpyEraser spyware remover from Uniblue Systems Limited - now discontinued. Provides System Tray access and also required for the real-time Live Guard feature to work to monitor and check for BHOs, toolbars, search hooks, etc | Yes |
| UniblueRegistryBooster | N | launcher.exe | Launcher for an older version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system". Run manually at regular intervals | Yes |
| UniblueSpeedUpMyPC | U | Launcher.exe | Launcher for an older version of the SpeedUpMyPC from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" | Yes |
| Update | X | [original file path] | Added by the LYNDEGG WORM! | No |
| Update for Windows | X | [various filenames] | Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe, common.pif, common.scr, Sexo.exe, Sexo.jpg.pif, ini_file__.pif, load_me__.tmp, msfile.pif, system_load_.pif or zipped.rar.pif | No |
| Update Scheduler | Y | UPSCHD.EXE | Automatic update scheduler for older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus | Yes |
| UpdateChecker Application | N | UpdateChecker.exe | Part of the ASUS Update Windows based BIOS update utility included with some ASUS motherboards. Checks the current BIOS revision. Note that with the version tested (7.16.02 Beta) if this entry was allowed to run at startup, ASUS Update would not run properly and casued system errors | Yes |
| UpdateLBPShortCut | ? | MUIStartMenu.exe | Part of LabelPrint from CyberLink - "an intuitive application that lets you design and print stylish CD/DVD labels in four easy steps". The exact purpose of this entry is unknown at present but it unloads from memory once run | Yes |
| UpdateP2GoShortCut | ? | MUIStartMenu.exe | Part of the Power2GO all-media disc burning software from Cyberlink. The exact purpose of this entry is unknown at present but it unloads from memory once run | Yes |
| UpdatePDRShortCut | ? | MUIStartMenu.exe | Part of PowerDirector (video editing software) and PowerStarter (which is the main launcher for the DVD Suite multimedia suite - which is now Media Suite) from CyberLink. The exact purpose of this entry is unknown at present but it unloads from memory once run | Yes |
| UpdatePPShortCut | ? | MUIStartMenu.exe | Part of PowerProducer from CyberLink - which "enables you to capture HD video from the latest generation of digital camcorders and then burn it onto DVDs and Blu-ray re-writeable discs". The exact purpose of this entry is unknown at present but it unloads from memory once run | Yes |
| UpdaterStartupUtility | N | UpdaterStartupUtility.exe | Update manager for Adobe Application Manager (AAM) - as used in their Creative Suite 5 (CS5) stand-alone products and suites for example | Yes |
| updatesched | X | [random filename] | ZenoSearch adware variant | No |
| UpdateWin | X | [random filename] | Added by the IRCBOT.AZW BACKDOOR! | No |
| UpdSys | X | [random filename] | Added by the BJ TROJAN! | No |
| upme | X | [filename] | Added by the MUGLY.F WORM! | No |
| UPNP | X | [path to trojan] | Added by the DROPPER.EAT TROJAN! | No |
| UPS-Status | Y | UPS-Status.exe | Provides System Tray access to the management options and displays notifications for Belkin Bulldog Plus UPS management software | Yes |
| UPS-Status.exe | Y | UPS-Status.exe | Provides System Tray access to the management options and displays notifications for Belkin Bulldog Plus UPS management software | Yes |
| UPSCHD | Y | UPSCHD.EXE | Automatic update scheduler for older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus | Yes |
| UrlLstCk | Y | UrlLstCk.exe | Part of older versions of Symantec's Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in %Program Files%\Norton Internet Security. It is a URL Checklist. It should not be disabled." During testing it never appears to run though | Yes |
| URLLSTCK.exe | Y | UrlLstCk.exe | Part of older versions of Symantec's Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in %Program Files%\Norton Internet Security. It is a URL Checklist. It should not be disabled." During testing it never appears to run though | Yes |
| UsbD | X | [path to trojan] | Added by the CIDRA-F TROJAN! | No |
| USBHWINFO | X | [path to trojan] | Added by the LOWZONE-I TROJAN! | No |
| usbn | X | [path to trojan] | Added by the HOGIL-C TROJAN! | No |
| User | X | .exe | Added by the PUNYA-B WORM! | No |
| user logon | X | [path to worm] | Added by the PAHATIA-A WORM! | No |
| User32 | X | [filename] | Added by the NETTRASH TROJAN! | No |
| UserSystem | X | [filename] | CoolWebSearch Smartsearch parasite variant. Also detected as the SEARCH-A TROJAN! | No |
| Usrobotics Online Registration | N | ?? | Pop-up reminding customers to register their products online at US Robotics | No |
| UsrPrmpt | U | UsrPrmpt.exe | Used in conjunction with Security Center on XP from SP2 onwards to warn user's that older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton Personal Firewall are disabled | Yes |
| Utility Tray | U | sistray.exe | System Tray access to display settings for Silicon Integrated Systems (SiS) based graphics chipsets. Located in %System% | Yes |
| uTorrent | N | uTorrent.exe | µTorrent - file sharing client for Windows sporting a very small footprint from BitTorrent, Inc. Designed to use as little cpu, memory and space as possible while offering all the functionality expected from advanced clients. For more information about the protocol see here. As µTorrent is a peer-to-peer (P2P) file-sharing client used to distribute large amounts of data between multiple users make sure you have good, up-to-date virus protection and check any downloads | Yes |
| uTorrent.exe | N | uTorrent.exe | µTorrent - file sharing client for Windows sporting a very small footprint from BitTorrent, Inc. Designed to use as little cpu, memory and space as possible while offering all the functionality expected from advanced clients. For more information about the protocol see here. As µTorrent is a peer-to-peer (P2P) file-sharing client used to distribute large amounts of data between multiple users make sure you have good, up-to-date virus protection and check any downloads | Yes |
| V128IITV | ? | ?? | Loads drivers for some STB graphics cards. May be related to such a card with a TV out option? | No |
| vadseinst | X | [path to trojan] | Added by the RANCK-CM TROJAN! | No |
| Vaganza-XPloit-[User Name]" | X | [user name].exe | Added by the GAVGENT.A WORM! | No |
Notes & Warnings
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.
NOTE: There are a number of virus and malware entries listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. I fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
RECOMMENDATIONS:
If you're looking for a startup manager then why not try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.
As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware we recommend you use a quality internet security package. Which ever you choose, keep it updated.
Copyright
Presentation, format & comments Copyright © 2001 - 2011 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved