CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

StartupList Index

Currently 17175 startuplist entries and growing...
Last updated on 2008-08-21 15:41:23 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!

For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    *Microsoft UpdateXwucxt.exeAdded by the W32.HLLW.STMU TROJAN!
    *Microsoft UpdateXwuytc.exeAdded by the W32.HLLW.STMU TROJAN!
    *Microsoft UpdateXctxma.exeAdded by the W32.HLLW.STMU TROJAN!
    *Microsoft UpdateXwstcl.exeAdded by the W32.HLLW.STMU TROJAN!
    *Microsoft UpdateXcxma.exeAdded by the W32.HLLW.STMU TROJAN!
    *microsoft updateXcxma.exeAdded by the W32.HLLW.STMU TROJAN
    *MS SetupX[random file name]Virtumondo adware, also known as the VUNDO TROJAN!
    *MSConfig32Xaecache.exe Detected as Trojan.Win32.Obfuscated.gp by F-secure
    *Security CenterXsecctr.exeAdded by the SDBOT.BRO WORM!
    *StateMgrYstatemgr.exeWindows ME default for System Restore. Do NOT disable!
    *WerKernelReportingNWerFault.exeRelated to Windows_Error_Reporting technology (WER) on Vista Computers. WER captures software crash and hang data from end-users who agree to report it. Note: Located in \%WINDIR%\System32\
    *windows updateXwurauclt.exeAdded by the W32/RBOT-SY WORM!
    *windows updateXwsctl.exeAdded by the SPYBOT.PR WORM!
    *windows updateXwscxt.exeAdded by the RBOT.AOS WORM!
    *windows updateXwkmst.exeAdded by the SDBOT.AVD WORM!
    *windows updateXwuaucrlt.exeAdded by the SPYBOT.HUR WORM! Read the link, keylogger/password stealing TROJAN(S) involved.
    *windows updateXwaurclt.exeAdded by a variant of the WIN32.RBOT WORM!
    *WinLogonX[trojan path] ren time:[random number]Added by the VUNDO TROJAN!
    *winstatsXwinstats.exeAdded by the Trojan.Gargafx TROJAN! Note: This trojan file (winstats.exe) is found in the Windows or Winnt folder.
    *wuauclt.exeXw****.exe (* = random char)Added by a variant of the W32/RBOT-UG WORM! - NOTE: * in the file name represents a random char; variants spotted: wxmct.exe, wtmsv.exe, wxmst.exe, wmsvc.exe and so on...
    *wuauclt.exeXwmsvc.exeAdded by the W32/RBOT-UG WORM! Read the link, keylogger/password stealing TROJAN(S) involved.
    ,main drive LoaderXwininfo.exeSuspected malware as it appears in 3 different registry locations - see here
    -FreedomNeedsRebootYZkRunOnceR.exeRelated to Internet_Security_Suite used by Internet providers to protect customers against many attacks. Read the article Note: Located in \%Program Files%\(Internet provider)\(Internet provider) Internet Security Suite\
    ..XABC2007.exeAdded by the Troj/Dloadr-ASH TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K)
    .mscdrXlassa.exeAdded by the WEBUS.C TROJAN!

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.

    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    148ppm 0.164s (0.024s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer