Startup Applications List
If you're frustrated with the time it takes your Windows PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most comprehensive and most accurate!
"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs please visit the Startup Content page.
For further information on random startup entries please visit the Startup Info page. For the next few months and foreseeable future I'll be verifying many of the Y, U, N & ? entries via virtual machines. If you can verify/identify those entries with a "?" status (especially hardware specific - such as laptops and motherboards) then please E-mail me (address at bottom of the page) or use the new Message Board.
Last update :- 31st August
21939 items listed
"Status" key:
Variables:
| Name or Startup Item | Status | Command or Data | Description | Tested? |
|---|---|---|---|---|
| CompaqPrinTray | N | printray.exe | Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop | No |
| ControlPanel | X | popcorn.exe internat.dll, LoadKeyboardProfile | Added by the BIZVES-B TROJAN! | No |
| ControlPanel | X | popcorn64.exe rundll.dll, LoadMouseProfile | Added by the DLOADER-OI TROJAN! | No |
| ControlPanel | X | popcorn72.exe rundll.dll, LoadMouseProfile | Added by the DLOADER-RA TROJAN! | No |
| ControlPanel | X | popcorn320.exe rundll.dll, LoadMouseProfile | Added by a variant of the DLOADER-RA TROJAN! | No |
| ControlPanel | X | private.exe internat.dll,LoadMouseCarpetProfile | Added by the CLICKER-AZ TROJAN! Creates the files sdfff, fdsf and zxczxc. In %System% creates the files d.exe, s.exe and r.exe. Note - the "private.exe" file is found in %System% | No |
| Country Select | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| CountrySelection | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| Cyberlink PowerCinema 3.0 | N | PCMService.exe | Part of Cyberlink's PowerCinema - which can be used to watch movies, play music and even watch TV in a central location. Commonly, PC manufacturers will base their own multimedia player/organizer on PowerCinema (such as Dell's Media Experience and Acer's Arcade Deluxe). Disabling this entry will not prevent PowerCinema working and doing so can prevent problems such as the screensaver not starting or a laptop not entering standby/hibernation/sleep-mode | Yes |
| Data Restore Service | X | prq8.exe | Added by the KELVIR.AI WORM! | No |
| DefensaAntiMalware | X | pgs.exe | DefensaAntiMalware, Spanish rogue security software - not recommended. A member of the AVSystemCare family | No |
| DellAutomatedPCTuneUp | Y | PTAgnt.exe | PC TuneUp from Dell - "silently monitors your system, automatically running needed maintenance during idle time to keep you at peak performance" | No |
| DevicePath | X | Proyecto1.exe | Added by the GRUEL WORM! | No |
| DhcpCep | X | PYJJKIME.exe | Added by the AGENT-BXQ TROJAN! | No |
| Dialgo SDK | U | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" | No |
| Dialog Helper | N | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs | No |
| directx | X | PipeCmd.exe | Added by the SDBOT.D TROJAN! | No |
| Disk Defragmentation Loader | X | pmsvcr.exe | Added by a variant of the IRCBOT TROJAN! | No |
| DocuMagix Init | N | PWATCH.EXE | PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed | No |
| DRam prosessor | X | plscd.exe | Added by the RBOT.CYA WORM! | No |
| dregfix | ? | ph_finder.exe | ?? | No |
| dstiosys | X | plsitctl.exe | Added by the MAILBOT-BX TROJAN! | No |
| DXM6Patch_981116 | N | p_981116.exe | Win32 cabinet self extractor. More info here | No |
| eTrust PestPatrol Active Protection | U | PPActiveDetection.exe | PestPatrol real-time protection feature. "Stops spyware before it infects your system" | No |
| Event Planner Reminders | N | PLNRNote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Event Planner Reminders Tray Icon | N | PLNRnote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Event Reminder | N | pmremind.exe | Event reminder for calendar dates, etc from Broderbund PrintMaster. Disable using the program's own option (if available) or a startup manager as it will re-instate if disabled via MSConfig | No |
| Explore | X | PLORE.EXE | Added by the FORBOT-P WORM! | No |
| freinst | X | pgs.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples | No |
| Gadwin PrintScreen | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| game | X | patcher.scr | Added by the PSW-ED TROJAN! | No |
| GoldenAntiSpy | X | pgs.exe | GoldenAntiSpy rogue security software - not recommended. A member of the AVSystemCare family | No |
| Guardian PC Security Tools | U | Pfft.exe | Boomerang Software's Guardian PC Security Tools - now rebranded as the eXtendia Security Suite | No |
| gw port controller | Y | PORTCT95.EXE | From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung | No |
| Hidup_Susah | X | Pembantu.exe | Added by the SILLYFDC.BDM WORM! | No |
| HP Presentation Ready | N | PresRdy.exe | HP Omnibook related: "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device" | No |
| HPU | N | ProvenTactics.exe | Proven Internet Marketing software | No |
| Hyper Files | X | phfhost.exe | Added by the AGENT-JQO TROJAN! | No |
| icrosoft Visual | X | plscx.exe | Added by the RBOT-AYO WORM! | No |
| icrosoft Windows DLL Services Configuration | X | poker3.exe | Added by the SDBOT-AER WORM! | No |
| IE6 | X | porn.pif | Added by the RBOT-ATF WORM! | No |
| Imonitor | U | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal | No |
| InstantTray | N | PCLETray.exe | Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually | No |
| Intel PDS | U | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled | No |
| Intel PROSet Tray Icon | N | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features | No |
| ISPSERVICE | X | psycho.exe | Added by the IRCFLOOD-O TROJAN! | No |
| ISTray | Y | pctsTray.exe | System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools | Yes |
| Karen's Once-A-Day II | U | PTOAD.exe | "Have a job that should be run exactly once each day? Karen's Once-A-Day II is just what you need!" Scheduler that lets you specify progams, web pages and files that be run or opened automatically, the first time | No |
| KernelFaultCheck | X | ptool32.exe | Added by the LEGMIR-BN TROJAN! | No |
| Keyboard Preload Check | Y | Preload.exe | Millenium Multi-Function Keyboard driver | No |
Download Alternative Formats
The following files are available for people developing mirrors of the site and using the information presented here:
Startup XML File - Startup INI File - Startup HTML File
For IE users, right-click on the link and select "Save Target As..." - note that for the INI and HTML files the suggested filename will be "startuplist.htm" and you'll have to rename them "startuplist.ini" and "startuplist.html" respectively.
For Firefox users, I recommend downloading the zipped versions from here. Otherwise, you'll have to open the file and save it - which can take a long time due to the size.
NOTE: These downloads are password protected and free to anyone producing a mirror or free utility. If you produce a commercial/shareware utility please contact me to discuss options. If you don't fall into any of these categories and want to download any of these files you will need to either make a donation of $15/year or more via PayPal (or E-mail me) and you will be provided with the login details which will change at the beginning of each year. The donation will go towards researching new and existing entries for the database and creating these files. Since making these files available for download they've been available free of charge and downloaded thousands of times. I believe they are unique as to my knowledge, no similar site offers such a resource as the lists they offer are on-line only.
Warning
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.
NOTE: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.
NOTE : There are a number of virus and malware entried listed in this database where specific removal instructions haven't been given. If this is the case then you could try SDFix, a program written by AndyManchesta that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program and here for the latest ReadMe file detailing the fixes included.
IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
RECOMMENDATIONS:
If you're looking for a startup manager then why not try WinPatrol (by BillP Studios) or Advanced SystemCare Free (by IObit) - both include the option to search this database for a particular entry. Alternatively try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.
There are an ever increasing number of rogue applications appearing these days and many of the removal guides referenced in this database use MalwareBytes Anti-Malware (which now incorporates the now discontinued RogueRemover).
As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware I recommend you use a quality internet security package. Which ever you choose, keep it updated.
| Sponsored links: | Leased Line | Polycom Soundstation 2 | UK VPN | SDSL |
Copyright
Presentation, format & comments Copyright © 2001 - 2010 Paul Collins
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved
Support