Startup Applications List
Unfortunately, due to a change in my circumstances, the startup programs database here at Sysinfo.org will no longer be updated and the off-line downloads are no longer available. The version at Pacman's Portal will, however, continue to be updated and it's recommended that you refer to that site for more up to date information. The reason for this change in policy cannot be disclosed at this time but I hope you have enjoyed using the database here and thank you for your support and kind comments over the years.
Paul Collins
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. The database is mirrored in a slightly different format at Pacman's Portal.
"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs you may want to also visit this page.
For further information on random startup entries please visit the Startups Info page.
Last update :- 29th July, 2011
24133 items listed
"Status" key:
| Name or Startup Item | Status | Command or Data | Description | Tested? |
|---|---|---|---|---|
| PDF Converter Registry Controller | ? | RegistryController.exe | Part of PDF Converter Professional version 2 from Scansoft (now Nuance). what does it do and is it required? | No |
| PDF4 Registry Controller | ? | RegistryController.exe | Part of PDF Converter Professional version 4 from Scansoft (now Nuance). what does it do and is it required? | No |
| PDF5 Registry Controller | ? | RegistryController.exe | Part of PDF Converter Professional and PDF Create (both version 5) - from Nuance. what does it do and is it required? | No |
| PDF6 Registry Controller | ? | RegistryController.exe | Part of PDF Converter Professional version 6 from Nuance. what does it do and is it required? | No |
| Picture Package VCD Maker | U | Residence.exe | Sony "Picture Package®" software for their range of Digital Handycam video cameras. Used to connect the camcorder via USB and allows the user to burn the content directly to a CD | No |
| PopularScreensaversWallpaper | X | rundll32 [path] F3SCRCTR.DLL,LES | MyWebSearch parasite - see here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "F3SCRCTR.DLL" file is located in %ProgramFiles%\MyWebSearch\bar\*.bin - where * represents a number or letter | No |
| Popup Blocker Updater | X | regsvr32 veev****.dll [* = random char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% | No |
| Popup Defence Updater | X | regsvr32 pdfupd.dll | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% | No |
| PostSetupCheck | X | Rundll32.exe atgban.dll | TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "atgban.dll" file is found in %System% | No |
| postSetupCheck | X | Rundll32.exe gzmrt.dll | TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "gzmrt.dll" file is found in %System% | No |
| PostSetupCheck | X | Rundll32.exe cpmsky.dll | TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "cpmsky.dll" file is found in %System% | No |
| PowerManagement | X | Rundlll.exe | Added by the SURDUX TROJAN! | No |
| PowerPrifile | X | rundl132 kenel.dll, PowerProfileEnable | Added by the INMOTA WORM! | No |
| PowerSet | ? | Regedit.exe /s ...PowerSet_8100_CU.REG | Appears to be Toshiba power management related | No |
| preload | N | RUNXMLPL.exe | Software found on Acer computers from Wistron. Information suggests it maps keyboard buttons to operating system functions | No |
| Protected Storage | X | RUNDLL32.EXE MSSIGN30.DLL ondll_reg | Added by the LOVGATE-W WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted | No |
| Ptipbmf | ? | rundll32.exe ptipbmf.dll,SetWriteCacheMode | Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller | No |
| PtiuPbmd | U | Rundll32.exe ptipbm.dll, SetWriteBack | Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. Tells the drivers that the connected Drives should use the "Write Back" Caching. You can disable this if you don't want to use "Write Back" Caching or if you have not connected any driver to your Promise Controller | No |
| PTRGMYGK | X | rundll32.exe ptmg1v.dll, DllRunMain | Added by an unidentified TROJAN, WORM or other malware! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted | No |
| qkoszvd.dll | X | rundll32.exe qkoszvd.dll,jwezubg | Added by the DLOADR-AVD TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "qkoszvd.dll" file is located in %System% | No |
| Quicktlme | X | ru.exe | Adult content dialler | No |
| R | X | rundll32.exe msprt.dll | Chinese originated browser hijacker - redirecting to 4199.com Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted | No |
| RabbitWannaHome | X | rabbit.exe | Added by the MIMAIL.S WORM! | No |
| Rabo Session Monitor | Y | RaboSessionMon.exe | Related to RaboBank electronic banking software | No |
| RaConfig2500 | N | RaConfig2500.exe | RaLink wireless LAN configuration utility | No |
| RadarSync | N | RadarSync.exe | Radarsync utility comes from DFI with their latest motherboards, e.g., DFI LanParty Ultra - checks for BIOS and driver updates periodically | No |
| RadBoot | U | RadBoot.exe | RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings | No |
| Radialpoint Security Services | Y | Rps.exe | Main program for internet security suites by Radialpoint. Radialpoint also source online security services for ISP customers such as Virgin Media, AT&T, Bell Canada, TELUS Corporation and Verizon Online | No |
| RadialpointServicepoint.exe | Y | RadialpointServicepoint.exe | Servicepoint tool installed when you install internet security suitea sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled | No |
| Radio365Agent | U | Radio365TrayAgent.exe | Radio365 - create playlists and broadcast live straight from your PC! | No |
| RadioSvr | U | RadioSvr.EXE | Used to configure wire less networks. Windows automatically detects the Wireless network and it configures the network | No |
| RagesCamera | X | Ragesn.exe | Added by the SDBOT.AHJ WORM! | No |
| raidhost | X | raidhost.exe | Added by the AGENT-LID TROJAN! | No |
| RaidTool | U | raid_tool.exe | VIA V-RAID Tool - hard disk striping/mirroring utility for increased performance and reliability | No |
| Rainlendar | U | Rainlendar.exe | Rainlendar is a customizable calendar that displays the current month | No |
| Rainlendar2 | U | Rainlendar2.exe | Rainlendar is a customizable calendar that displays the current month | No |
| Rainmeter | N | Rainmeter.exe | Rainmeter is a customizable performance meter, which can display the CPU load, memory utilization, etc | No |
| Ralink Wireless Utility | U | RaUI.exe | Wireless configuration utility for Railink based products | No |
| RAM Idle Professional | U | RAM_XP.exe | RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind | No |
| RAMASST | U | RAMASST.exe | Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs | No |
| RamBooster2 | X | rb.exe | Added by the AKAK TROJAN! | No |
| RAMConnectionChecker | ? | RAMConnChecker.exe | Part of Remote Access Manager (RAM) for Nortel Networks - which "combines an intuitive, user-friendly remote access interface for dialup, cable, LAN, wireless, and DSL users with state-of-the-art phonebook, dialing, and seamless software distribution and update capabilities". Is it required? | No |
| RAMDef | U | ramdef.exe | Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind | No |
| RAMDrive | U | RDTask.exe | Virtual Hard Drive Pro from Farstone - "takes a portion of your system memory and creates a RAM disk drive, which functions like a physical hard drive, only with much better access rates" | No |
| RAMGINAConnWatch | ? | RAMConnWatcher.exe | Part of Remote Access Manager (RAM) for Nortel Networks - which "combines an intuitive, user-friendly remote access interface for dialup, cable, LAN, wireless, and DSL users with state-of-the-art phonebook, dialing, and seamless software distribution and update capabilities". Is it required? | No |
| RamIdle | U | ramidle.exe | RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind | No |
| RAMpage | U | RAMpage.exe | Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source | No |
| random | X | random.exe | Added by the DLOADER-KM TROJAN! | No |
| Random Interface Network | X | rst.exe | Added by the DELBOT-P WORM! | No |
| Random Interface Network Manager | X | rinsv.exe | Added by the DELBOT-L WORM! | No |
Notes & Warnings
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.
NOTE: There are a number of virus and malware entries listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. I fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
RECOMMENDATIONS:
If you're looking for a startup manager then why not try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.
As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware we recommend you use a quality internet security package. Which ever you choose, keep it updated.
Copyright
Presentation, format & comments Copyright © 2001 - 2011 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved