AST

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	acocash	fastdown.exe	Adult content dialler
X	acocash	FASTFOWN.EXE	Adult content dialler
X	adodemaster	adodemaster.exe	"Downloader of Korean origin
N	Album Fast Start	ABMTSR.EXE	"Scanner software
X	AntiSpywareMaster	asm.exe	"AntiSpywareMaster rogue security software - not recommended
N	AOL Fast Start	AOL.exe	"Fast Start loads the AOL integrated email
Y	ashAvast	ashAvast.exe	"Part of Avast antivirus"
X	AST	AST	"Added by the VB.AH TROJAN!"
X	AST	AST.exe	"AutoStarter parasite"
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	AStart	AStart	"Added by the VB.AH TROJAN!"
N	asTray	Astray.exe	"Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer"
N	Astro	Astro.exe	Checks for updates to Quicken on a system reboot
X	Astrum	Astrum.exe	"Astrum Antivirus Pro rogue security software - not recommended
U	ASUS TweakEnable	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
U	AsusTray	AsTray.exe	"Part of the ACPI driver for the Asus Eee PC range. Watches the sensors of the motherboard such as power and temperature"
X	avast	troyan.exe	"Added by the SMALL.CZ TROJAN!"
Y	Avast!	ashServ.exe	"Main part of avast! Antivirus - including the resident protection
Y	avast!	ashDisp.exe	"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner
Y	avast! Antivirus	ashDisp.exe	"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner
Y	avast! Web Scanner	Ashwebsv.exe	"Web scanning part of avast! Antivirus. Starts via a registry ""Run"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
Y	Avast32	Astart32.exe	"Part of Avast! anti-virus software"
X	BastioneAntivirus	pgs.exe	"BastioneAntivirus
U	BeFaster	befaster3.exe	"BeFaster internet connection optimization tool"
U	BMO MasterCard Wallet	EWALLET.EXE	"The wallet conveniently stores billing
X	brastk	brastk.exe	"Added by the DORF-BV TROJAN!"
Y	Browser Hijack Blaster	bhblaster.exe	"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
N	CD Storage Master	cdstorager.exe	"CD Storage Master - a program designed to catalog CD information
U	CognizanceTS	"rundll32.exe [path] AsTsVcc.dll	RegisterModule"
X	Comcast Network	ribiva.exe	"Added by a variant of the IRC TROJAN!"
X	ComcastSUPPORT	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
U	CRBroadCasting	CRBroadCasting.exe	"CardReader2 from On Track Inovations Ltd. USB Card Reader"
X	Daily Weather Forecast	weather.exe	"Added by the DLOADER-IP TROJAN!"
X	Disk Master	[trojan name]	"Added by the DISTER TROJAN! - a spam relayer"
N	fast	fast.exe	Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
X	fast	A-fast.exe	"A-fast Antivirus rogue security software - not recommended
X	Fast Antivirus 2009	FastAV.exe	"Fast Antivirus rogue security software - not recommended
N	FAST Defrag	FAST2.EXE	"FastDefrag defragmenting software"
X	Fast Home	svcnvt.exe	"Detected by Kaspersky as the DELF.KS TROJAN! This file may be found in the System folder on 9x machines
X	Fast Search	svcnv.exe	"Homepage
X	Fast start	Ntut.exe	"Adware - deteced by Kaspersky as the FAVADD.I TROJAN!"
X	Fast start	svcnt.exe	"Adware - detected by Kaspersky as a variant of the FAVADD TROJAN!"
U	FastCache	fc.exe	"FastCache from AnalogX - speeds up browsing by resolving DNS requests locally"
X	FastDownloads	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	fastsmell	fastsmell.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X	FastStart	ntnut32.exe	"Added by the STARTPAGE.L TROJAN!"
X	FastStart	svcnut.exe	"Browser hijacker - a variant of the STARTPAGE.L TROJAN!"
X	FastStart	svcnut32.exe	"Browser hijacker - a variant of the STARTPAGE.L TROJAN!"
N	FastTrack Accelerator	SPEED UP.EXE	"FastTrack Accelerator - ""speedup"" utility for programs that use the FastTrack network such as KaZaA Media Desktop
X	FASTTRACKNETVISION	NETVISION.exe	"DialCar-Z premium rate dialer"
U	FastTVSync	FastTVSync.exe	"Part of InterVideo (now Corel) DVD Copy - ""fast DVD copying and file conversion software. In just three steps
N	FastUser	fast.exe	Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
N	FastUsr	fast.exe	Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
X	FBSearch	FastBrowserSearchProtection.exe	"Fast Browser Search/Search Guard Plus parasite - installed with ""Make the Web Better"" applications such as My Web Tattoo
N	Find Fast	Findfast.exe	From older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier. When indexing is in progress it can use lots of CPU time and memory - especially on slower/older machines
X	findfast	findfast.exe	"Added by the DLOADER.PFR TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office"
X	findfast.exe	findfast.exe	Identified as the RUNDIS.A TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office
X	Floppy Master	[path to trojan]	"Added by the ZONIT-F TROJAN!"
N	fwrastrc	fwrastrc.exe	Dial-up software for Friendly Technologies/1NationOnLine free ISP
N	HP Image Zone Fast Start	hpqthb08.exe	"Improves the startup time of HP Image Zone. If you disable it
N	HP Photosmart Premier Fast Start	hpqthb08.exe	"Improves the startup time of HP Image Zone. If you disable it
Y	LASTinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X	Master	svcghost.exe	"Added by the IRCBOT.RB TROJAN!"
X	Master Card Updaate 32	Mastercard32.exe	"Added by a variant of the RBOT WORM!"
U	Master Volume Spy	MASTERVOLUMESPY.EXE	"Volume control for the Gateway Destination ""DestiVu"" media interface"
X	MasterBoot Switch	popupkill.exe	"Added by a variant of the RBOT WORM!"
U	MaxBlastMonitor	MaxBlastMonitor.exe	"Maxblast hard drive utility for Maxtor (Seagate) drives"
X	Micr Update	soundblaster.exe	"Added by the SDBOT.NP WORM!"
N	Microsoft Find Fast	Findfast.exe	From older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier. When indexing is in progress it can use lots of CPU time and memory - especially on slower/older machines
N	Microsoft Office Fast Cache	Fastboot.exe	"Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled"
U	MRU-Blaster Scheduler	scheduler.exe	"Scheduler for MRU-Blaster - ""a program made to do one large task - detect and clean MRU (most recently used) lists on your computer"""
N	MRU-Blaster Silent Clean	mrublaster.exe	"MRU-Blaster - performs silent cleaning of MRU lists at boot"
U	MRUBlaster	indexcleaner.exe	"MRU-Blaster related - runs once in order to delete the index.dat file in the Temporary Internet Files and/or Cookies folder"
X	MyFastAccess	myfastupdate.exe	My-Fast-Access toolbar updater
N	Nokia FastStart	NokiaMusic.exe	"Part of the Nokia Music music manager. ""With Nokia Music
U	NovastorSchedulerd	SCHENGD.EXE	NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
X	NOYPI_KANG_ASTIG	Exit to DosPrompt.pif	"Added by the FILUKIN.A WORM!"
X	OKMaster	OKMaster.exe	"OKToolbar adware"
N	PasteLister	plister.exe	"PasteLister - clipboard extender. Start manually when required"
N	PowerArchiver Tray	PASTARTER.EXE	"System Tray access to PowerArchiver from ConeXware
N	Print Master Event Reminder	PMremind.exe	"Event reminder for calendar dates
X	PSCastor	PSCastor.exe	"Added by the PSCASTOR TROJAN!"
N	QD FastAndSafe	QDCSFS.exe	Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
X	RapidBlaster	rb32.exe	"RapidBlaster parasite. Recommended you use RapidBlaster Killer to uninstall - see here"
X	Recoveru system	svchast.exe	"Added by a variant of the LINEAGE-AV TROJAN!"
U	remote master	remote master.exe	Required if you want your ASUS Remote control to work at all. Available via Start -> Programs
X	RichMedia	"rundll32.exe [path] hbcast.dll	WaitWindows"
X	Santa Bastards Bitch	SANTAS.BITCH.txt	"Added by the ATNAS.A WORM!"
X	Security Master AV	SM[random characters].exe	"Security Master AV rogue security software - not recommended
N	Simcast	SimcastAlerts.exe	"Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say"
Y	SkyBlaster Scheduler	SSFSch.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y	SoDA Startup	SodaStartup.exe	"Used by the IBM Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software"
X	SondBlaster	lsass.exe	"Added by the PROSTI.AA BACKDOOR! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Media"
X	SpyBlast	SpyBlast.exe	"Spyware killer that is in effect autoinstalled foistware
X	SpyDevastator	SpyDevastator.exe	"SpyDevastator rogue security software - not recommended
N	Supastatus	status.exe	"Supanet ISP software"
X	svchast	svchast.exe	"Added by the LINEAGE-AV TROJAN!"
X	TheLastDefender	LastDefender.exe	"The Last Defender rogue security software - not recommended
U	TweakMASTER	TMTray.exe	"TweakMASTER Internet Optimizer"
U	Vista Start menu	VistaStartMenu.exe	"""Vista Start Menu is the convenient alternative to the plain Start menu you find in Windows XP and Windows Vista"". You have the option to either replace standard Start Menu or run it independently and can load at boot time or run it manually"
U	VistaStartMenu	VistaStartMenu.exe	"""Vista Start Menu is the convenient alternative to the plain Start menu you find in Windows XP and Windows Vista"". You have the option to either replace standard Start Menu or run it independently and can load at boot time or run it manually"
X	Vital Master-boot DLL	crsss.exe	"Added by the RBOT.ASE WORM!"
U	WallMaster	wallmast.exe	"WallMaster - ""The free and easiest way to master your desktop wallpaper!"""
X	Wast	wast.exe	Grokster ads updater
N	WeatherCast	Weather.exe	Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
X	windows auto update	msblast.exe	"Added by the BLASTER.B WORM!"
X	WindowsKeyUpdate	master.exe	"Added by the JOSAM WORM!"
U	WinFast Schedule	Wfwiz.exe	Leadtek WinFast TV tuner scheduler and remote control driver - required if you use the latter
U	Winfast2KLoadDefault	"rundll32.exe wf2kcpl.dll	DllLoadDefaultSettings"
U	WinFastDTV	DTVSchdl.exe	"Scheduler for WinFast DTV digital TV cards from Leadtek Research Inc"
U	Winfast_2K	WF2K.EXE	System Tray application that starts up the Winfox utility for a Leadtek Winfast graphics card to restore settings. Can be started manually via Start → Control Panel → Display. Only needed if you wish to run things like the hardware monitor or overclock your card
U	WinFast_Gamma	"Rundll32.exe wfcpl.dll	DllLoadGammaRampSettings"
U	WinFast_Taskbar	"rundll32.exe wftask.dll	WFDllLoadDefaultSettings"
N	YeppStudioAgent	SamsungMediaStudioAgent.exe	"Samsung Media Studio MP3 player file management software - see here for an example"
X	[various names]	AppMasterCenter.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ExchangeMaster.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.