CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

StartupList Index

Currently 17175 startuplist entries and growing...
Last updated on 2008-08-21 15:41:23 Eastern.
!! THESE ARE STARTUP PROGRAMS AND NOT TASK MANAGER PROCESS ITEMS !!


For more information on startup programs, including how to identify them and the information required for submitting additions to this list please refer to Content & Info. Reprinted with permission from Paul Collins who owns the copyright to the list. CastleCops also adds additional items that may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

CastleCops is now hosting the official Pacs-portal forums. CastleCops has also cross-referenced startup entries with our File Hash database where appropriate. Comments or questions can be fielded here.

KEY:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    Random sampling...
    NameStatusFilenameDescription
    xorXsvshost.exeAdded by the AGENT.DC TROJAN!
    XE 8x LM StatusUlmsxxe.exeXerox XE8 series laser printer status monitor
    xrt_ShellXxrt_*.exeAdded by the Troj/Gozi-Gen TROJAN! Note: Located in %userprofile%\ Note: The * in the filename represents some random characters.
    XFilesDialogUXFilesDialog.EXERelated to XFilesDialog designed to improve all the (more or less standard) Windows file dialogs. Note: Located in \%Program Files%\XFilesDialog\
    xp_systemXservices.exe Krepper-G TROJAN, a CoolWebSearch parasite variant or Troj/Krepper-R Note - this is NOT the legitimate services.exe process, which should NOT figure in Msconfig/Startup!
    Xpclient?xpclient.exePart of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
    XPAgentXXPAgent.exeReported as Trj/Clicker.LE by Panda Anti-Virus. Note: This trojan file is found in the Windows\System32 (NT/2000/XP) folder. May be found in the Windows System folder on 9X\Me machines. Do not confuse this with the IBM/XPoint Rapid Restore file which is generally located in the PROGRAM FILES\XPOINT\AGENT folder.
    xpXwinis.exeAdded by the W32/RBOT-WO WORM!
    XTNDConnect PC - LtNts4UNtsAgnt.exeComponent of EasySync Pro
    xpsystemXy.exe CoolWebSearch parasite related
    Xtrem parental controlUpcx.exeAdded by the ParentXtreme SPYWARE! **Note - If you didn't intentionally install this software remove it.
    xkstartup?RunDll32,InstZ82.dll,,SetUsbPrinterPortOn a system with a Lexmark printer
    xzkadsfk10Xafslkfasl10.exeAdded by the Troj/OnLineG-R Trojan
    XPSP2 FirewallXxpsp2fw.exeAdded by the WIN32.SMALL.RN downloader TROJAN!
    x(Number from 1 to 7)Xx6.exeAdded by the Troj/Dadobra-A TROJAN!
    X-Cleaner FreewareUXCLEAN~1.EXE X-Cleaner_Freeware
    XM Satellite Radio (2)UXMMT.exeRelated to XM_Satellite_Radio Note: Located in C:\Program Files\XM Satellite Radio\
    XTNDConnect PC - ErPhn2UErPhn2.exeComponent of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook
    xpiupdateXxpiupdate.exeAdded by the W32/RBOT-AFY WORM!
    Xecuter.batXpsexec.batAdded by the BOOHOO VIRUS!
    XP LoaderXloaderxp.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    XSC SIP ClientUX-Lite.exeRelated to X-Lite SIP based softphone Note: Located in C:\Program Files\X-Lite\
    xpsystemXMSXMIDI.EXE CoolWebSearch parasite variant, identified by Kaspersky_antivirus as TrojanDropper.Win32.Small.cw
    xxsrSrv32Xxxsrsrv.exeAdded by the TROJ/BANCSDE-E TROJAN!
    XNSearchAssistantXSrchAsst.exeiWon Search Assistant - spyware
    XWMSUSBAPI?XWMSAPI.EXEPart of the installation of a Xerox WorkCentre printer/scanner. Is it required?
    xp service pack 2Xxpsp2.exeSdded as result of a W32/Rbot-KW worm infection
    xp32winXxpupdater02.exeAdded by the TROJ/MOSUCK-A TROJAN!
    xpcfg?xpcfg.exe??
    xwareXcskware.exeMalware downloader from xxsware.com, produces porn popups.
    x(Number from 1 to 7)Xx1.exeAdded by the Troj/Dadobra-A TROJAN!
    XP SystemXsystemxp.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    xibquxsXrnxntup.exeAdded by the Infostealer.Orcu.B Note: located in \%WINDIR%\
    xicon?xicon.exePart of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
    XFilesDialogUXFilesDialog.EXERelated to XFilesDialog designed to improve all the (more or less standard) Windows file dialogs. Note: Located in \%Program Files%\XFilesDialog\
    xorXsvchost.exeAdded by the XORDOOR TROJAN! This is not the valid svchost.exe as described here
    XordateXwuauclt10.exe W32/Rbot-GKN
    xflashXxflash.exeAdded by W32/YURIST-K WORM!
    xyXsvhost32.exeAdded by the DELF.FAI TROJAN!
    XupiterCfgLoaderXXTCfgLoader.exeBWCfgLoader.exeXupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
    XPsysXXPsys.exeAdded by the DELF-KQ or Troj/Dloader-SG TROJAN!
    xpiupdateXxpiupdate.exeAdded by the W32/RBOT-AAB WORM!
    XP HOT FISXkbx.exeAdded by the W32/Forbot-GS WORM! Note: Located in \%WINDIR%\System32\ Read the link, allows remote access
    Xpagent?xpagent.exePart of the IBM/XPoint Rapid Restore utility. What does it do and is it required? Note: File location is generally in the C:\PROGRAM FILES\XPOINT\AGENT folder.
    xloadnetXxloadnet.exeDetected by NOD32 as Win32/TrojanClicker.VB.NCK
    XordateXwuauclt11.exe W32/Rbot-GLI Read the link, allows remote access
    xhrmyXXhrmy.exe HyperLinker adware
    xv_ctrlUv_ctrl.exe3dfx Underground Tools - "Gives direct hardware control to your video graphics adapter"
    XFILTERYxfilter.exeRelated to Filseclab Personal Firewall Professional Edition. Note: Located in C:\Program Files\Filseclab\xfilter\
    xxcmXsys.exeAdded by the W32/KRISWORM-A WORM!
    X1UX1.exeRelated to X1's_Enterprise_Desktop Search Resource Center. An enterprise desktop search engine. Note: Located in C:\Program Files\X1\
    XTN Service DriversXwinxtn.exeAdded by the W32/Sdbot-YK WORM!
    XupiterToolbarLoaderXXupiterToolbarLoader.exeXupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
    xDRam rar procxXxwinupdaterarx.exeAdded by the Troj/Riler-W Trojan Read the link, allows remote access
    XTCsgloader?XTCsgloader.exeAnother Xupiter toolbar variant??

    This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
    If you find the information on these pages useful, why not make a donation to help towards its maintenance :- or E-mail me.


    Engine Version 2.0 by CastleCops

    spacer spacer