CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

StartupList Index

Currently 17175 startuplist entries and growing...
Last updated on 2008-08-21 15:41:23 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!


For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    Random sampling...
    NameStatusFilenameDescription
    KAZAACufX9Added by the KITRO.D (or ARGEN.A) VIRUS!
    kbXAUTO.txtAdded by the W32/Brontok-CV worm
    key2Xwinlog.exeAdded by the Troj/BagleDl-AL TROJAN!
    kissXpingy.exeAdded by a variant of the W32/Cult.worm.gen Note: Located in \%Program Files%\Random folder name\ Note: Use SDFix under supervision.
    KernelwXKernelw32.exeAdded by the INDOR.E VIRUS!
    KomunikatorUtlen.exe Tlen - a Polish language Instant Messaging client
    KernelFaultCheckXptool32.exeAdded by the Troj/LegMir-BN TROJAN! Note: This trojan file is found in the System (95/98/Me) or System32 (NT/2000/XP) folder.
    KPDrv4XPYKPDrv4XP.exeMediaKey USB Keypad Driver
    KillAndCleanXKillAndClean.exe"Spyware remover" of dubious repute - see the authoritative SpywareWarrior_List of Rogue/Suspect Anti-Spyware Products & Web Sites Note: located in C:\Program Files\KillAndClean\
    kavirXkavir.exeAdded by a variant of the Email-Worm.Win32.Zhelatin.xe WORM! Note: located in \%WINDIR%\ Note: Use SDFix under supervision.
    KKM ServiceXkkm.exeAdded by the W32/Nanpy-I WORM! Note: This worm file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
    KeenvalueXKeenvalue.exe eUniverse/KeenValue adware
    keyboard_enumXkeyboard_enum.exeAdded by the TROJ/BDOOR-GP TROJAN!
    kazaaliteNkazaalite.exeKazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms
    KernelFaultCheckNdumprep 0 -kUsed in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
    klopX[path to file]Added by the TROJ/AGENT-WQ TROJAN!
    kontikiNkontiki.exeKontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
    KiweeHookUkwtbaim.exeRelated to Kiwee Toolbar, winks and emoticons that can be seamlessly dropped into the flow of conversation, allowing users to easily make the content their own. Note: Located in \%Program Files%\Kiwee Toolbar2\1.4.127\
    Kerne0223XKerne0223.exeAdded by the Troj/LegMir-ZA TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    keyXsys_xp.exeAdded by the BEAGLE.AC WORM!
    KRNLXKernl32.exeAdded by the Backdoor.Win32.Zomby.b TROJAN!
    KONICA MINOLTA magicolor 2400W STDUMSTMON_S.EXERelated to MINOLTA_magicolor 2400W color printer. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    kernel32Xkern32.exeAdded by the BADTRANS.A VIRUS!
    KREC32Ukrec32.exeStarrCommander Pro Keystroke logging software
    KB926239Yrundll32.exe,apphelp.dll,ShimFlushCacheRelated to Microsoft_KB926239 fix. Windows Media Player 10 may close unexpectedly on a Windows XP-based computer
    Key2?serve.exe??
    Kvsc3XKvsc3.exeAdded by the Troj/PWS-ANM Trojan Read the link, steals information
    Key LoggerXcsrss.exeAdded by the W32.Buchon.A worm.
    Keyspan Digital Media RemoteUKDMRdmn.exeRelated to Keyspan_Digital_Media Products. Note: Located in C:\Program Files\Keyspan\Digital Media Remote 2.0\
    Kernel32Xkrnl32.exeAdded by the EPON VIRUS!
    KraitYrazerhid.exeRelated to Razer Krait mouse driver. Note: Located in \%Program Files%\Razer\Krait\
    Kernel Safe ModeXsmss.exe Mal/78Crack-A
    KASPUOESpamTest.exe Kaspersky_Anti-Spam
    KgjgXrnnypbw.exeAdded by the QuickLinks_Forethought ADAWARE! displays third-party advertising on the computer, Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    KV_HOSTXcxjx.exeAdded by the Troj/LegMir-BB TROJAN! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
    kernel system daemonXACTIVAT0R.exeAdded by the RANDEX.AW VIRUS!
    KrnlcheckXcsrss.exeAdded by the BACKDOOR.BOTNACHALA TROJAN! - Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, shutdown, and hard-error handling, and which should NOT figure in Msconfig!
    KinberlinkNKinberlink.exeKinberlink network messaging. Available via Start -> Programs
    KVM.exeUKVM.exeRelated to belkin kvm switch. From Belkin International.
    KavStartYKAVStart.exe KingSoft Personal Firewall
    Kernel32XKernel32.winAdded by the GAGGLE.D VIRUS!
    KernelCheckXwinser.exeAdded by the TSPY_LMIR.SL TROJAN! Read the link, steals information
    Kazaa Download Accelerator UpdaterXregsvr32 [path],kdpupd.dll SafeguardProtect/Veevo
    keymgrldrXrundll32,setupapi,,InstallHinfSection...,keymgr3.inf CoolWebSearch parasite related
    Kernel32Xsvchosts.exeAdded by an unidentified TROJAN! Downloader... Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    kavsvcYkavsvc.exe Kaspersky antivirus
    Kodak EasyShare softwareUEasyShare.exeSoftware bundled with Kodak digital cameras to manage the connection between the PC and the Camera. Can be started manually.
    KavSvcX******.exe,reg_run (* =,random char)Added by the QOOLOGIC TROJAN!
    Kernel LoaderXntkrnl.exeAdded by the CERVIVEC.A VIRUS!
    KAVPersonal90Xwscntfy.exeAdded by the Troj/Banker-FZ or Troj/Banker-GD TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    Kaspersky AntivirusXKasperskyAV.exeAdded by a variant of the WIN32.RBOT WORM!
    KavPFWYKavPFW.exe KingSoft Personal Firewall
    Kernell32XKernell.dllAdded by the DESTINY VIRUS!
    KK LoaderUloadkk.exeKeyKey XP Professional from KeyKey.com. "Monitor Instant Messages, Chats, Emails, Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and much more completely undetected to the user."
    Keyboard Preload CheckYPreload.exeMillenium Multi-Function Keyboard driver

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.


    Engine Version 2.0 by CastleCops

    spacer spacer