Startup Applications List
Unfortunately, due to a change in my circumstances, the startup programs database here at Sysinfo.org will no longer be updated and the off-line downloads are no longer available. The version at Pacman's Portal will, however, continue to be updated and it's recommended that you refer to that site for more up to date information. The reason for this change in policy cannot be disclosed at this time but I hope you have enjoyed using the database here and thank you for your support and kind comments over the years.
Paul Collins
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original startup programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. The database is mirrored in a slightly different format at Pacman's Portal.
"Name or Startup Item" in the table below refers to how an entry is displayed in MSConfig, Windows Defender or the registry "Run" keys. "Command or Data" refers to the program the entry runs. For further information on this and how to identify and disable startup programs you may want to also visit this page.
For further information on random startup entries please visit the Startups Info page.
Last update :- 29th July, 2011
24133 items listed
"Status" key:
| Name or Startup Item | Status | Command or Data | Description | Tested? |
|---|---|---|---|---|
| Service Pack 1 | X | [random filename] | Added by the VXGAME.Z TROJAN! Note - the filename is random - see the link. Typical examples are vexg6ame4.exe, vexga3me2.exe, vexga4m1et4.exe, etc | No |
| Service PAck SFVP | X | [worm filename].exe | Added by a variant of the RBOT WORM! The filename is 4 random characters | No |
| service32.exe | X | [path to trojan] | Added by the DLOADR-AYX TROJAN! | No |
| Services | X | [path to trojan] | Added by the METEORSHELL TROJAN! | No |
| Services | X | [path to trojan] | Added by the RANCK-DB TROJAN! | No |
| Services004 | X | [worm filename] | Added by the BUGBROS WORM! | No |
| services32 | U | [random filename] | Director adware | No |
| ServoApp | Y | ServoApp.exe | Multi Function Printer (MFP) server agent for products such as Belkin's Wireless G All-in-One Print Server and ZyXEL's NPS-520 which allow multiple computers to use networked all-in-one printers. Required for the MFP Server Agent (MFPAgent.exe) to run properly - whether it's set to start manually or automatically | Yes |
| ServUTrayIcon | U | Serv-U-Tray.exe | System Tray access for the Serv-U FTP server which allows the user to (amongst others) start the Management Console, stop the server and display notifications | Yes |
| SetPoint | U | Setpoint.exe | Logitech SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). Required if you want to use the advanced features or modify the default settings of these devices and located in %ProgramFiles%\Logitech\Setpoint | Yes |
| Setup | X | [path to trojan] | Added by the DROPPER.EAT TROJAN! | No |
| SfKg6w | X | [path to worm] | Added by the AGENT.BUO WORM! | No |
| SfKg6wIP | X | [random filename] | Identified as a variant of the TrojanDownloader.Matcash malware | No |
| SfKg6wIPu | X | [random filename] | Identified as a variant of the TrojanDownloader.Matcash malware | No |
| ShareSearcher | X | [path to trojan] | Added by the AGENT-FPE TROJAN! | No |
| shellbn | X | [random].dll | SoftStop rogue security software - not recommended | No |
| ShellCommand | X | [path to file] | Added by the REMCON-A TROJAN! | No |
| Shotty | N | Shotty.exe | Shotty by Thomas Baumann - "is an application to take pictures from your computers screen (called screenshots) or from one application only. Unlike other applications that does this Shotty provides various other features that are useful to modify the taken screenshot" | Yes |
| Shotty - Tiny but impressive screenshot utility | N | Shotty.exe | Shotty by Thomas Baumann - "is an application to take pictures from your computers screen (called screenshots) or from one application only. Unlike other applications that does this Shotty provides various other features that are useful to modify the taken screenshot" | Yes |
| ShowLOMControl | U | [strange symbol] | Note that there is a strange symbol in the command field and in logs it's shown as "O4 - HKLM\..\Run: [ShowLOMControl] [strange symbol]". Additional registry information for the entry is "Reg_DWORD 0x00000001 (1)". It means Show "LAN on Motherboard" Control. On systems where you can install an external LAN interface, it will warn you that you already have a built-in LAN interface. Appears to be a feature on certain Dell systems | No |
| ShutdownWithoutLjiasvt.exe | X | [path to trojan] | Added by the BIFROSE.F BACKDOOR! | No |
| Sidebar | U | Sidebar.exe | Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker | Yes |
| SilentSoftech | X | [worm filename] | Added by the SILLYFDC-BL WORM! | No |
| Silica Calender | U | Silica Calendar.exe | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Calender | U | SILICA~1.EXE | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Calendar.exe" is shown as "SILICA~1.EXE" | Yes |
| Silica Clock | U | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Clock | U | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Clock.exe" is shown as "SILICA~2.EXE" | Yes |
| Silica Picture Frame | U | Silica Picture Frame.exe | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. Once started, Silica Picture Frame.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Picture Frame | U | SILICA~3.EXE | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. Once started, Silica Picture Frame.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Picture Frame.exe" is shown as "SILICA~3.EXE" | Yes |
| Silica Search | U | Silica Search.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. Once started, Silica Search.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Search | U | SILICA~4.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. Once started, Silica Search.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Search.exe" is shown as "SILICA~4.EXE" | Yes |
| Silica ToDo List | U | SI90AE~1.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica To-Do List.exe" is shown as "SI90AE~1.exe" | Yes |
| Silica ToDo List | U | Silica To-Do List.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Unit Converter | U | SIF08B~1.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Unit Converter.exe" is shown as "SIF08B~1.exe" | Yes |
| Silica Unit Converter | U | Silica Unit Converter.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Volume Control | U | SI2992~1.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Volume Control.exe" is shown as "SI2992~1.exe" | Yes |
| Silica Volume Control | U | Silica Volume Control.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Weather | U | SI39E3~1.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Weather.exe" is shown as "SI39E3~1.exe" | Yes |
| Silica Weather | U | Silica Weather.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits | Yes |
| Silica Word of the Day.exe | U | SI985F~1.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Word of the Day.exe" is shown as "SI985F~1.exe" | Yes |
| Silica Word of the Day.exe | U | Silica Word of the Day.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits | Yes |
| sInErA | X | .exe | Added by the SILLYFDC-AB WORM! | No |
| SipDiscount | N | SipDiscount.exe | SipDiscount - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype | Yes |
| SiS (R) Compatible Super VGA SiSTray application | U | sistray.exe | System Tray access to display settings for Silicon Integrated Systems (SiS) based graphics chipsets. Located in %System% | Yes |
| SiS Compatible Super VGA Keyboard Daemon | U | keyhook.exe | Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys | Yes |
| SiS Windows KeyHook | U | keyhook.exe | Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys | Yes |
| SiSPower | Y | Rundll32.exe SiSPower.dll,ModeAgent | Power scheme manager for Silicon Integrated Systems (SiS) based mobile chipsets | Yes |
| SiteAdv | U | SiteAdv.exe | Preloads the McAfee SiteAdvisor browser plug-in for Internet Explorer and Firefox. "With SiteAdvisor software installed, your browser will look a little different than before. We add small site rating icons to your search results as well as a browser button and optional search box. Together, these alert you to potentially risky sites and help you find safer alternatives". Not required as it will load with your browser | Yes |
| SiteAdvisor | U | SiteAdv.exe | Preloads the McAfee SiteAdvisor browser plug-in for Internet Explorer and Firefox. "With SiteAdvisor software installed, your browser will look a little different than before. We add small site rating icons to your search results as well as a browser button and optional search box. Together, these alert you to potentially risky sites and help you find safer alternatives". Not required as it will load with your browser | Yes |
| SiteAdvisor | U | SiteAv.exe | Refer to the SiteAdv.exe entry. This entry only appears to originate from version 2.0.0.75 (Build 4295) of SiteAdvisor and the registry entry incorrectly points to the invalid filename "SiteAv.exe" - when it should be "SiteAdv.exe" | Yes |
Notes & Warnings
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all virus entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost" above for example. Multiple viruses can also use the same startup entries, in this case only those with significant differences (such as file location) are repeated in this database.
NOTE: There are a number of virus and malware entries listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
IMPORTANT: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. I fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
RECOMMENDATIONS:
If you're looking for a startup manager then why not try Spybot - Search & Destroy (by Safer Networking Ltd) as the startup programs section (select the Advanced mode) includes descriptions from this database. You might also want to try their RunAlyzer and FileAlyzer tools.
As there are more than 10,000 entries in this database related to viruses, trojans, worms and other malware we recommend you use a quality internet security package. Which ever you choose, keep it updated.
Copyright
Presentation, format & comments Copyright © 2001 - 2011 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Database creation and support by Patrick Kolla
Software support by John Mayer
All rights reserved