Startup Applications List

Unfortunately, due to a change in my circumstances, the startup programs database here at will no longer be updated and the off-line downloads are no longer available. The version at Pacman's Portal will, however, continue to be updated and it's recommended that you refer to that site for more up to date information. The reason for this change in policy cannot be disclosed at this time but I hope you have enjoyed using the database here and thank you for your support and kind comments over the years.

Paul Collins

If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. The database is mirrored in a slightly different format at Pacman's Portal.

"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs you may want to also visit this page.

For further information on random startup entries please visit the Startups Info page.

Last update :- 29th July, 2011
24133 items listed

"Status" key:

- show all
all  others  A  B  C  D  E  F  G  H  I  J  K  L  M  N  O  P  Q  R  S  T  U  V  W  X  Y  Z  
Page No.: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
Name or Startup ItemStatusCommand or DataDescriptionTested?
Microsoft UpdatingXnavguard.exeAdded by the RBOT.HW WORM!No
Microsoft Windows DLL Services ConfigurationXnewdll.exeAdded by the SDBOT-ZR WORM!No
Microsoft Windows DLL Services ConfigurationXnewdll2.exeAdded by the SDBOT-ABD WORM!No
Microsoft Windows UpdateXndsuhyz.exeAdded by the RBOT-GVG WORM!No
Microsoft Winedows UpdateingXNinKey.exeAdded by a variant of the SPYBOT WORM! See hereNo
Microsoft xpsp2XNetworksystem.exeAdded by a variant of the SDBOT WORM!No
MicrosoftNetwork Daemon for Win32XNETD32.EXEAdded by the RANDEX.F WORM!No
Mirabilis ICQNNDetect.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> ProgramsNo
ModemOnHoldUnetWaiting.exeNetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more informationNo
MONPluginSrIvcsXn3monap23.exeAdded by a variant of the RBOT WORM!No
Mozilla Firebird v0.8 Internet BrowserXnetstats.exeAdded by the IRCBOT.MC BACKDOOR!No
Mozilla Quick LaunchNNetscp6.exeNetscape 6 and Mozilla browsersNo
MS taskbarXnts.exeAdded by the RBOT-AGB WORM!No
MS UniXXnavupdate64.exeAdded by the RBOT.CRZ BACKDOOR!No
MS Unix BinaryXNorton2005Update.exeAdded by a variant of the RBOT WORM!No
MSDNXnese.exeAdded by the SDBOT.AHY WORM!No
MSNXnetstats.exeAdded by the IRCBOT.UXP WORM!No
Msn MessengerXnkbf.exeAdded by the RBOT-GMQ WORM!No
MSN serviceXNTDKRN.EXEAdded by the RBOT.UJ WORM!No
MSN Service UtilitiesXnkn.exeAdded by the KELVIR-BC WORM!No
MSNPluginSrIvcsXn3vasap23.exeAdded by a variant of the RBOT WORM!No
MSOfficeCfgXnavchk.exePremium rate adult content dialerNo
MSupdate.exeXN/ACoolWebSearch parasite variant - resets home page to an adult content siteNo
MSupdater.exeXN/ACoolWebSearch parasite variant. Installs the Winshow.dll browser pluginNo
MS_NETD_WIN32Xnetd32.EXEAdded by the RANDEX.F WORM!No
myNetWatchmanUnwclient.exeSends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is runningNo
MySoftware NewsFlashNNewsflsh.exeRuns in your task bar and receives alerts and release information on MySoftware products from AvenquestNo
N2PTrayUNet2fone.exeAn Internet telephony application. Needed only if you have an account at Net2Phone, IncNo
NADaemonNNADAEMON.EXEProgram by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not requiredNo
NaggerrunkeyNnagger.exePackard Bell Free Internet Signup screenNo
nah_ShellXnah_cord.exeAdded by the HANAMBOT TROJAN!No
Naimagent_UIYnaimag32.exeWorkstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scanNo
nana2009Xnana2009.exeAdded by the POISON.PG BACKDOOR!No
Nano AntivirusXnanoav.exeNano Antivirus rogue security software - not recommended, removal instructions hereNo
NAP32XNAP32.exePremium rate adult content diallerNo
NarratorUNarrator.exeAssociated with the Narrator accessibility feature on Windows XP. It is used to convert text to speechNo
NasUnas.exeClearx adwareNo
NatalXNatal.scrAdded by the OPASERV.AE WORM!No
Natural DesktopUNatural Desktop.exeAnimated desktop gadget included with the Natural Desktop theme for MyColors from Stardock CorporationNo
nAv AGENTXN/AAdded by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processesNo
NAV Auto ProtXnavprot1.exeAdded by the RBOT.ZAC WORM!No
NAV Auto ProtectXnavprotect.exeAdded by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from SymantecNo
NAV Auto UpdatesXnavwindows.exeAdded by a variant of the SDBOT WORM!No
NAV Auto UpdatesXnavupdaterx.exeAdded by a variant of the RBOT WORM!No
NAV Auto UpdatesXnavupdaters.exeAdded by the RBOT-UN WORM!No
NAV Scan ServiceXNAVSCAN32.EXEAdded by the SDBOT.VG WORM!No
navappXnavapp.exeNavExcel adware variantNo
navapw32Ynavapw32.exeBackground scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malwareYes
all  others  A  B  C  D  E  F  G  H  I  J  K  L  M  N  O  P  Q  R  S  T  U  V  W  X  Y  Z  
Page No.: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

Notes & Warnings


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.

WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.

NOTE: There are a number of virus and malware entries listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program

IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.

SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. I fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.


If you're looking for a startup manager then why not try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.

As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware we recommend you use a quality internet security package. Which ever you choose, keep it updated.

Fight spyware with SpybotSD


Presentation, format & comments Copyright 2001 - 2011 Pacman's Portal
Portions Copyright Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved