PC

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	00PCTFW	FirewallGUI.exe	"System Tray access to PC Tools Firewall Plus from PC Tools - which ""is a powerful personal firewall for Windows that protects your computer from intruders and controls the network traffic in and out of your PC"""
U	1455 Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX1455 multifunction printer
U	2335dn Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Dell 2335 multifunction laser printer
U	3170 Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung CLX3170 multifunction laser printer
U	3Deep Control Panel	3DeepCTL.EXE	"3Deep® from E-Color corrects lighting
U	4x26 Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX4x26 multifunction laser printers
U	4x28 Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX4x28 multifunction laser printers
X	55278	grepclient1.exe	"Added by the LINEAGE-S TROJAN!"
U	6200 Scan2PC	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung CLX6200 multifunction laser printer
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
N	Acme.PCHButton	pchbutton.exe	Used by HP Instant Support
?	Alcom PCL Capture	FMW_PCAP.EXE	"??"
X	ALTER DATA	[path] repcale.exe [path] beird.exe	"Added by the IRCFLOOD.CD TROJAN! Both files are located in %System%\ccdew"
X	Antivirus PC 2009	avpc2009.exe	"Antivirus PC 2009 rogue security software - not recommended
X	AntivirusPCPakke	pgs.exe	"AntivirusPCPakke
X	AntivirusPCSuite	pgs.exe	"AntivirusPCSuite rogue security software - not recommended
Y	APC UPS Status	Display.exe	"APC PowerChute® Personal Edition status icon"
X	APcDefender	APcDefender.exe	"APcDefender rogue security software - not recommended
X	APCProtect.exe	APCProtect.exe	"APCProtect rogue security software - not recommended
X	APcSafe	APcSafe.exe	"APcSafe rogue security software - not recommended
X	APcSecure	APcSecure.exe	"APcSecure rogue security software - not recommended
U	APC_SERVICE	mainserv.exe	"APC PowerChute® Personal Edition - ""safe system shutdown software with sophisticated power management functions."" Appears as a service in XP/Vista and under the ""RunServices"" registry key in Win98"
Y	apc_tray	apc_tray.exe	Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
U	Appcon	vAppCon.exe	"Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established"
X	appconn	appconn.exe	"Added by the CARGAO WORM!"
X	asdx	xwinrpc32.exe	"Added by the AGOBOT.VO WORM!"
U	AsusEPCMonitor	AsEPCMon.exe	"Part of the ACPI driver for the Asus Eee PC range. Manages the Fn function keys and ""on screen display"""
U	AtiQiPcl	AtiQiPcl.exe	Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
Y	avpcc	avpcc.exe	"Kaspersky Labs anti-virus"
U	Bart Station	PPCOLink.exe	Dialer for PeoplePC ISP
X	BCPC	bcpc.exe	"BroadcastPC adware variant"
X	bcpc_c	bcpc_c.exe	"BroadcastPC adware variant"
N	Belkin PCMCIA WLAN Monitor	monitorbk.exe	Belkin USB Network Adapter Management utility - can be started manually
N	BigPondCable	bpcable.exe	Telstra Bigpond Cable login software - can be started manually
N	BlackICE PC Protection	blackice.exe	"Loads the user interface for the BlackICE PC Protection (was Defender) firewall. From the parent site - '(the user interface) starts in the ""Startup"" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' BlackICE was supported by IBM Internet Security Systems (formerly just ISS) when them acquired the NetworkICE parent but is no longer available. See also LoadBlackD"
X	Boarddata	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM! Both files are often located in %System%"
N	Bose Wave/PC Monitor	wavepcmonitor.exe	"System Tray access for this system (more info on the system here). Available via Start -> Programs"
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	BPCV2	BPCV2.exe	"BroadcastPC adware"
X	BPCv2 re	bpc2 re inst.exe	"BroadcastPC adware variant"
X	C:WINDOWSsystem32SetupCmd.exe	SetupCmd.exe	"Detected by Kaspersky as the AGENT.AAW TROJAN!"
?	Canon PC1200 iC D600 iR1200G Status Window	CAPM1LAK.EXE	"Cannon printer related - is it required in startup?"
X	CleanPCTool	SysRep.exe	"CleanPCTool rogue system error and cleaning utility - not recommended
U	Client Access API Daemon	cwbappcd.exe	"IBM iSeries Client Access
X	CMAPP	cmappclient.exe	"CasClient adware - also detected as the CMAPP TROJAN!"
U	CmPCIaudio	"RunDll32 CMICNFG3.CPL	CMICtrlWnd"
X	ControlPanel	"popcorn.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"popcorn64.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"popcorn72.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"popcorn320.exe rundll.dll	LoadMouseProfile"
U	CostAware	niIPCApp.exe	"NetInternals CostAware - download quota measuring tool"
N	Country Select	pctptt.exe	"Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell
N	CountrySelection	pctptt.exe	"Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell
X	CPCmscl0ck	CPCmsclock.ExE	"Added by the IRCFLOOD.BF TROJAN!"
X	cppc	[path to trojan]	"Added by the VB-NV BACKDOOR!"
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Creative PCI Audio Configuration Utility	starter.exe	"System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer"
N	Cyberlink PowerCinema 3.0	PCMService.exe	"Part of Cyberlink's PowerCinema - which can be used to watch movies
X	DATABASE MySql	[path] repcale.exe [path] beird.exe	"Added by the RANDON-AL WORM! Both files are often located in %System%\qsws"
X	DefendAPc	DefendAPc.exe	"DefendAPc rogue security software - not recommended
Y	DellAutomatedPCTuneUp	PTAgnt.exe	"PC TuneUp from Dell - ""silently monitors your system
X	DhcpCep	PYJJKIME.exe	"Added by the AGENT-BXQ TROJAN!"
X	Disk Panel Configuration	dpcsvc.exe	"Added by the IRCBOT.BSQ BACKDOOR!"
X	Disk Panel Setup	npcsvc.exe	"Added by a variant of the IRCBOT TROJAN!"
Y	Dpcnav	dpcnav.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
N	DPConfig	DPConfig.exe	"Compuware DevPartner Studio Configuration Utility
X	dpcproxy	dpcproxy.exe	"Added by the GOLDENP-A TROJAN!"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y	Dpcstart	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
U	DT 11Mbps WLAN PC Card Station	DTCARDMonitor.exe	11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
X	Dynamic Dns Binary	WinHelpcfn.exe	"Added by a variant of the RBOT WORM!"
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
N	EAPCISETUP	wizard.exe	Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
Y	Earthlink Protection Control Center	elnk_pcc.exe	"EarthLink Protection Control Center - ""powerful
U	EasySync Pro	XCPCMenu.exe	"""IBM® Lotus® EasySync® Pro is a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - PocketPC	AUTODE~1.EXE	"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - PocketPC	AutoDetect.exe	"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	ELBERTRicoh_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Ricoh MFP Type 104 multifunction printer
U	ELBERT_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-5x30 Series multifunction printers
X	element furth	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM! Both files are often located in %System%\vert"
?	eSupInit	eSupCmd.exe	"Related to SupportSoft (aka Support.com) ""Real-Time Service Management software"". What does it do and is it required?"
X	expcrt	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	ga6pcw	ga6pcw.exe	"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
X	Generic Host Process for Win32 Service	rpchost.exe	"Added by the IRCBOT.DCN WORM!"
X	Generic Host Process for Win32 Services	ntspcv.exe	"Added by the SDBOT.S TROJAN!"
U	GoToMyPC	g2svc.exe	"ExpertCity GoToMyPc logon - web-based remote-access solution that allows individuals and companies to register their computers online and then securely access those computers from any web browser"
U	GroupWise PDA Connect - PocketPC	AUTODE~1.EXE	"Windows Mobile Pocket PC specific translator for the GroupWise PDA Connect PDA synchronisation utility from Novell"
N	GrpConv	grpconv.exe	"Microsoft Windows Program Group Converter - used by installers (ONLY in the RunOnce keys) - provides the translation of groups and group items to folders and links. Also see this MS Knowledge Base article"
U	Guardian PC Security Tools	Pfft.exe	"Boomerang Software's Guardian PC Security Tools - now rebranded as the eXtendia Security Suite"
X	GuardPcs.exe	GuardPcs.exe	"GuardPcs rogue security software - not recommended
U	H/PC Connection Agent	WCESCOMM.EXE	"Connection manager for Microsoft ActiveSync - mobile device synchronization software for Windows XP (and earlier)
U	HelpCenter	sprtcmd.exe /P HelpCenter	"Self-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft
U	HelpCenter4.1	sprtcmd.exe /P HelpCenter4.1	"Self-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft
X	helpctl.exe	helpctl.exe	"Added by the GASLIDE TROJAN!"
X	Highspeeddownloader	SetupClickHere.EXE	"Homepage hijacker
N	HP CD Writer	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N	HP CD-DVD	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N	HP CD-Writer	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N	HP Component Manager	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
N	HP Simple Trax	Hpcron.exe	Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start -> Programs or Desktop Icon
X	hpcmd	cmd.exe	"Added by the ADCLICK-DS TROJAN!"
N	hpcmpmgr	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
U	hplampc	hplampc.exe	HP Scanner Lamp Utility - fixes an issue with the scanner lamp not going off
U	IBMUltraBayHotSwapCPLLoader	IBMBAY2N.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
X	IGuardPc.exe	IGuardPc.exe	"IGuardPc rogue security software - not recommended
X	IMJPMIG6.1	HelpCat.exe	"Added by the BESVERIT WORM!"
X	INFO DATA	apc.exe	"Added by the RANDON.B WORM!"
Y	InoRPC	InoRpc.exe	"Associated with eTrust Antivirus/InoculateIT"
X	Installs SP2	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM! Both files are located in %System%\qpalsp"
X	Installs SP4	[path] repcale.exe [path] p0rd.exe	"Added by the RANDON-AK WORM! Both files are located in %System%\ekrlgc"
U	Instant Wireless Configuration Utility	WPC11Cfg.exe	"Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
N	InstantTray	PCLETray.exe	"Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually"
X	Internet Protocol Configuration Loader	ipcl32.exe	"Added by the SDBOT TROJAN!"
U	IP Changer 2.0	IPChanger.exe	"IP Changer 2.0 from Plustech Inc - network configuration management tool"
X	IPC Connection	ipcconn.exe	"Added by the RBOT-AEG WORM!"
X	IPC Spool Manager	wnmgre.exe	"Added by the SDBOT-ZC WORM!"
X	IPC Spool Manager	winspec.exe	"Added by the SDBOT-BLU WORM!"
X	ipcfg.exe	ipcfg.exe	"Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN!"
X	IPConfig	svcxnv32.exe	"Added by the HACARMY.E TROJAN!"
X	IPConfig	svcxnw32.exe	"Added by a variant of the HACARMY.E TROJAN!"
X	IPConfig	ipconfigs.exe	"Added by the HACARMY.C BACKDOOR!"
X	IpCtrl	ipcon32.exe	"Added by an unidentified VIRUS
N	IPInSightLAN 01	IPClient.exe	"IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. Included with services from BellSouth
X	IPTable Configuration	Winipcfgs.exe	"Added by a variant of the RBOT WORM!"
U	IRIS_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung CLX-3160 Series multifunction laser printer
U	IRIS_XRX_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Xerox Phaser 6110MFP multifunction laser printer
Y	ISTray	pctsTray.exe	"System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools"
X	jzvfvsqpc	jzvfvsqpc.exe	"Added by the AGENT-GWP BACKDOOR!"
X	KeepCop	KeepCop.exe	"KeepCop rogue security software - not recommended
X	KeepCop.exe	KeepCop.exe	"KeepCop rogue security software - not recommended
X	kernel32dll	guardpc.exe	"Added by the FORBOT-CU WORM!"
U	Laplink PDASync 3.1 - PocketPC	AUTODE~1.EXE	"Laplink PDASync for Windows Mobile Pocket PC - PDA synchronisation utility"
U	Launch PC Probe II	Probe2.exe	"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme)
X	Live PC Care	LP[random characters].exe	"Live PC Care rogue security software - not recommended
U	Lock My PC	lockpc.exe	"Lock My PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen
U	Logan_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-4500 Series multifunction printer
X	Logitech Desktop	IPCONN.EXE	"Added by the SDBOT-WE WORM!"
X	Logonrepclient1	CSRSS.EXE	"Added by the BRONTOK-BT WORM and variants! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS"
U	Maple_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung CLX-216x Series multifunction printers
U	MFP1815_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Dell Laser MFP 1815 multifunction printer
X	Micro Process	appconf.exe	Added by an unidentified WORM or TROJAN!
X	Microsft Remote Procedure Daemon	msrpcd.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Application Center	mappc.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Client Pc	spoolsrv.exe	"Added by the RBOT-AQM WORM!"
X	Microsoft IPC	system.exe	"Added by the NULLBOT TROJAN!"
X	Microsoft IPC	svshost.exe	"Added by an unidentified VIRUS
X	Microsoft Map PC	mappc.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Mapped PC	mappedpc.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft PC Health Remote Assistance File Open & Save controls	sfrcdlg32.exe	"Added by the RBOT-AVY WORM!"
X	Microsoft PCHealth32	[path to file]	"Added by the NICE-A TROJAN!"
X	Microsoft PCHealth32	NDDENB.exe	"Added by the PWSYAHOO-A TROJAN!"
X	Microsoft PCI Manager	mspci.exe	"Added by the RBOT.BBG WORM!"
X	Microsoft Procedure Call	MSPCALL.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update	VPC32.EXE	"Added by the AGOBOT.XM WORM!"
X	Microsoft Update Clinic	svsipconfig.exe	"Added by the RBOT.BR WORM!"
X	Microsoft Update Process	wmipcvse.exe	"Added by the AGOBOT-JF TROJAN!"
X	Microsoft Visual Application	vpcrtf.exe	"Added by the IRCBOT-XJ TROJAN!"
X	Microsoft Visual Studio VSA	varpc32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Windows Secure Server	rpcxWindows.exe	"Added by the RBOT-LL WORM!"
X	Microsoft Windows Secure Update	rpcxwinupdt.exe	Added by an unidentified WORM or TROJAN!
X	Microsoft WPCEmail	[path to trojan]	"Added by the SNIFFER-N TROJAN!"
X	MicrosoftNAPC	flashsplayer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MicrosoftNAPC	javaw.exe	"Added by the BUZUS.BULO TROJAN!"
X	MicrosoftNAPC	msnrmgs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MicrosoftNAPC	regtray.exe	"Added by the POISON.AHNW BACKDOOR!"
X	MicrosoftNAPC	securebind.exe	"Added by the INJECT TROJAN!"
X	MicrosoftNAPC	sysdiag64.exe	"Added by a the AUTOINF-AB WORM!"
X	MicrosoftNAPC	traymgr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MicrosoftNAPC	update.exe	"Added by the AUTORUN-ASG WORM!"
X	MicrosoftNAPC	wupdate.exe	"Added by the AGENT-LAY TROJAN!"
?	MigrationVendorSetupCaller	"rundll32.exe migrate.dll	CallVendorSetupDlls"
X	MS Remote Procedure Call	msrpc32.exe	"Added by the RBOT-QL WORM!"
X	Ms System Config	pcedit.exe	"Added by a variant of the SDBOT WORM!"
X	msjava service	xpcd.exe	"Added by the SDBOT.VM WORM!"
X	MSN RPC Manager	msnrpcmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSNSysRestore	pc32.exe	Added by a variant of the MASTAK VIRUS!
X	MSVsmt	rpcxctx.exe	Added by an unidentified WORM or TROJAN!
X	myCleanerPC	myCleanerPC.exe	"MyCleanerPC rogue spyware remover - not recommended"
X	MyPcSecure	MyPcSecure.exe	"MyPcSecure rogue security software - not recommended
U	NaverPCGreen	NPCGreenUpgrader.exe	"Related to Naver_Anti-virus Realtime Monitor From NHNCorp"
X	NBT System alias	[path] repcale.exe [path] beird.exe	"Added by a variant of the RANDON.AN WORM!"
X	netpc32.exe	netpc32.exe	"Malware
X	NettoyeurDePC	GDC.exe	"NettoyeurDePC French rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
Y	Nokia PC Suite	DataLayer.exe	"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
N	Nokia PC Sync	PCSync2.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
N	Nokia.PCSync	PCSync2.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
N	NokiaPCSuiteTray	LaunchApplication.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	NokiaPCSyncTray	PCSync.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
U	nxpclient	sprtcmd.exe /P nxpclient	"NetExpert - ""India's first ever automated Broadband care technology."" Identifies and automatically fixes typical problems that may occur with your high-speed internet service"
U	ODSPConfig	ODSPConfig.exe	"DsktopSurveil surveillance software. Uninstall this software if you did not install it yourself"
Y	OfficeScan95	pccwin97.exe	"Trend Micro antivirus OfficeScan"
Y	OfficeScanNT Monitor	pccntmon.exe	"Trend Micro OfficeScan Antivirus real-time scan monitor"
U	OnlinePCfix SmoothSurfer	SS.exe	"Smooth-Surfer - blocks banners
U	P3000x_S2P	ScanToPc.exe	Dell Laser MFP 1600N network application for scanning files to the PC
X	PC	userinity.exe	"Added by the PROVIS-A TROJAN!"
U	PC Alert III	alert.exe	"MSI PC Alert III - allows you to view your system and cpu temperature
X	PC Antispyware 2010	PC_Antispyware2010.exe	"PC Antispyware 2010 rogue security software - not recommended
U	PC Booster	pcbooster.exe	"PC Booster from inKline Global - ""easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"""
U	PC Doc Pro - 3.1	pcdocpro.exe	"PC Doc Pro (now Win Doc Pro) - system health check and fix utility"
X	PC Drive Tool	GDC.exe	"PC Drive Tool rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
U	PC Dynamics SdwMon32	sdwmon32.exe	"SafeHouse ""Personal Privacy"" protects and hides your private and personal photos
X	PC Live Guard	PC[random characters].exe	"PC Live Guard rogue security software - not recommended
N	PC Pitstop Optimize Reminder	Reminder.exe	"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
U	PC Pitstop Optimize Scheduler	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
X	PC Protection Center	PcProtection.exe	"PC Protection Center 2008 rogue security software - not recommended
X	PC Scout	pcscout.exe	"PC Scout rogue security software - not recommended
X	PC Security 2009	PC_Security2009.exe	"PC Security 2009 rogue security software - not recommended
N	PC SpeedScan Pro	PCSpeedScan.exe	"Ascentive PC SpeedScan Pro registry optimizer - not recommended
U	PC Spy Keylogger	ToolKeylogger.exe	"PCSpyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
N	PC Suite	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PC Suite	LaunchApplication.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PC Suite for Smartphones	Application Launcher.exe	"System Tray access to the Sony Ericsson PC Suite mobile phone management utility for some models
N	PC Suite Tray	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PC Sync	PCSync2.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
Y	PC Tools AntiVirus Client	PCTAV.exe	"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
U	PC Tools Disk Suite	aDSProcMngr.exe	"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
Y	PC Tools Firewall Plus	FirewallGUI.exe	"System Tray access to PC Tools Firewall Plus from PC Tools - which ""is a powerful personal firewall for Windows that protects your computer from intruders and controls the network traffic in and out of your PC"""
U	PC Tools Privacy Guardian	pg.exe	"Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Cache
X	PC-Antispy	PC-Antispy.exe	"PC-Antispy rogue spyware remover - not recommended
X	PC-Antispyware	PC-Antispyware.exe	"PC-AntiSpyware rogue spyware remover - not recommended"
X	PC-Checkup	PCCheckUp.exe	"Installed by SpeedItUp without permission
X	PC-Cleaner	PC-Cleaner.exe	"PC-Cleaner rogue security software - not recommended"
X	PC-Config32	corona.exe	"Added by the CORONEX.A WORM!"
X	PC2X	initial.bat	"Added by the DWNLDR-FZZ TROJAN!"
X	PCAntiMalware	pcam.exe	"PCAntiMalware rogue security software - not recommended
X	PCAntiVirusPro	pgs.exe	"PCAntiVirusPro rogue security software - not recommended
U	pcAnywhere Agent	pcamgt.exe	"Part of pcAnywhere 9.0 or later. This process listens for incoming PC Anywhere connections if your PC is configured as a PC Anywhere host"
Y	PCBG	PCBODYGUARD.EXE	"PC Bodyguard from Calluna - protects system files and settings from being deleted
Y	PCBODYGUARD	PCBODYGUARD.EXE	"PC Bodyguard from Calluna - protects system files and settings from being deleted
U	PcBoost	PcBoost.exe	"PCBoost from PGWARE
X	pcc	explcrer.exe	"Added by the AGENT-FW BACKDOOR!"
Y	PCCClient.exe	PCCClient.exe	"Part of Trend Micro web-security products - PC-cillin 2002-2003 and Virus Buster 2001-2003"
Y	pccguide.exe	pccguide.exe	"Part of Trend Micro web-security products - Internet Security 2005-2007
Y	PCCIOMON.exe	PCCIOMON.exe	"Part of Trend Micro web-security products - PC-cillin 2000
X	PCCleaner	SysCleaner.exe	"PCCleaner rogue cleaning utility - not recommended
Y	PCClient.exe	PCClient.exe	"Part of Trend Micro web-security products - PC-cillin 2004 and Virus Buster 2004"
Y	PccPfw	PccPfw.exe	"Part of Trend Micro web-security products - PC-cillin 2002-2003 and Virus Buster 2002-2004. This is the firewall"
Y	PcCtlCom	PCCTLCOM.EXE	"Part of Trend Micro web-security products - Internet Security 2005-2006 and Virus Buster 2005-2006"
N	PCDRealtime	realtime.exe	"Apparently the monitoring device for PC Doctor Online. It provides a ""free"" examination on system files (i.e. registry)
U	PCDrProfiler	RunProfiler.exe	Part of PC Doctor software installed for some machines. Disabling or enabling it is down to your preference
X	PcEXPLODE	specialfile.exe	"Added by the RBOT.RH WORM!"
U	PcEye	pceye.exe	"PCEye 2000 - parental control utility"
N	PCHbutton	PCHbutton.exe	Used by HP Instant Support
N	PCHealth	pchschd.exe	"This is a ""scheduler"" and does not turn off PC Health. For more information refer here"
X	PCHEasySearch	STUpdate.exe	PCH EasySearch bar
?	PCIMODEM	pcimodem.exe	"Associated with Lucent based Aztech MDP7800-U PCI modems. Is it required?"
U	PCLEPCI	ppe.exe	"Pinnacle Systems PCI Performance Enhancer. "This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards.""
X	PClK	PClK.exe	"Added by the LEGMIR-BL TROJAN!"
U	PCMagInstaback2	InstaBack.exe	"
?	PCMCIA Resource Monitor	nvp2pmon.exe	"NVIDIA nForce P2P Driver. What does it do and is it required?"
X	PCMM2007RT	pcmm2007.exe	"PC MightyMax 2007 rogue security software - not recommended
?	PCMMediaSharing	PCMMediaSharing.exe	"Part of Acer HomeMedia Connect
X	PCMMRealtime	pcmm.exe	"PC MightyMax rogue security software - not recommended
N	PCMService	PCMService.exe	"Part of Cyberlink's PowerCinema - which can be used to watch movies
U	PCPerf	pcperf.exe	"PC Accelerator 2007 from DefendGate Inc. ""Powerful all-in-one PC performance and Internet acceleration solution designed to help increase your system and online performance and security"""
N	PCPitstop Registration Reminder	Reminder.exe	"Registration reminder for the Exterminate antimalware package from PC Pitstop"
U	PCPitStopEraser	PCPitStopErase.exe	"""PC PitStop Erase is both a free privacy scanner and paid tracks cleaner"""
U	PCPOptimize	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
X	PCPrivacyCleaner	pcpc.exe	"PCPrivacyCleaner rogue privacy tool - not recommended"
X	PCPrivacyDefender Freeware	UPSPDAP.exe	"PCPrivacyDefender rogue privacy program - not recommended
X	PCPrivacyTool	GDC.exe	"PCPrivacyTool rogue privacy tool - not recommended. There are number of variants in this family sharing the same filename and user interface - see here"
X	PCprot	crcss.exe	Added by an unidentified WORM!
X	PCprotectar.exe	PCprotectar.exe	"PCprotectar rogue security software - not recommended. A member of the AntiAID family"
?	pcqmqgn.exe	pcqmqgn.exe	"??"
X	PcRaiser	main.exe	"PcRaiser rogue optimization utility - not recommended"
U	PCRecSA	PCRecSA.exe	"Part of the IBM/XPoint Rapid Restore backup utility. If you choose
X	PcSecureNet	PcSecureNet.exe	"PcSecureNet rogue security software - not recommended
X	PCSecureSystem	pgs.exe	"PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family"
X	pcServer	server.exe	"Ssppyy spyware"
X	PCShield	regsvr32 sfg_***.dll [ = random char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	PcsProtector	PcsProtector.exe	"PcsProtector rogue security software - not recommended
X	PcsSecure	PcsSecure.exe	"PcsSecure rogue security software - not recommended
N	PCStart	Pcm25.exe	"Runs as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big"
N	PCSuite	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PCSuiteTrayApplication	TrayApplication.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PCSuiteTrayApplication	LaunchApplication.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PCSuiteTrayApplication	TRAYAP~1.EXE	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PCSuiteTrayApplication	LAUNCH~1.EXE	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
X	Pcsv	pcsvc.exe	"Delfin Media Viewer or ""Promulgate"" adware"
N	PCSync	PCSync.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
X	PcSync	PcSync.exe	"Added by the RBOT-XJ WORM! Note - do not confuse with the Nokia application described here"
N	PcSync	PcSync2.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
N	PCSync.exe	PCSync.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
N	PCSync2	PCSync2.exe	"System Tray access to Nokia PC Sync - which ""allows you to synchronise contacts
Y	PCTAV	PCTAV.exe	"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
Y	PCTAVApp	PCTAV.exe	"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
X	pctdf.exe	pctdf.exe	PCTotalDefender rogue spyware remover variant
U	PcThrust	PcThrust.exe	"PCThrust from SwiftDog - ""increases computer performance by allocating higher portions of CPU power to active applications and games"""
X	PCToolPro	SysRep.exe	"PCToolPro rogue system error and cleaning utility - not recommended
X	PCTotalDefender	pgs.exe	"PCTotalDefender rogue security software - not recommended. A member of the AVSystemCare family"
X	pctp_check	startmon.exe	"Part of the PcTurboPro rogue system optimization tool - not recommended
U	pctspk	pctspk.exe	Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions
Y	pctsTray	pctsTray.exe	"System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools"
Y	pctsTray.exe	pctsTray.exe	"System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools"
X	PCTurboPro	pctp.exe	"PcTurboPro rogue system optimization tool - not recommended
U	PCTVOICE	pctvoice.exe	"The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it
U	PCTVRemote	remoterm.exe	Controls the remote control on some Pinnacle TV tuners
X	PCVirusless	pgs.exe	"PCVirusless
U	PCWatch	pcwatch.exe	"PCWatch surveillance software. Uninstall this software if you did not install it yourself"
U	PdaNet Desktop	PdaNetPC.exe	"PdaNet from June Fabrics Technology Inc. Use Windows Mobile Smartphone or PocketPC Phone as wireless modem for your PC"
N	Performance Center	ApcMain.exe	"Ascentive Performance Center - not recommended
U	PestPatrol Control Center	PPControl.exe	"PestPatrol Control Terminal - utility that launched PestPatrol features such as PPMemCheck and CookiePatrol before CA's acquisition"
N	PivotSoftware	wpctrl.exe	"PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens
U	PLEAPCPUCPL	pleapu.exe	"CPU Control Panel for the Powerleap CPU upgrade"
U	Pnpchk	Pnpchk.exe	"Aztech Labs Sound 3 PnP driver"
X	PostSetupCheck	Rundll32.exe atgban.dll	"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""atgban.dll"" file is found in %System%"
X	postSetupCheck	Rundll32.exe gzmrt.dll	"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""gzmrt.dll"" file is found in %System%"
X	PostSetupCheck	Rundll32.exe cpmsky.dll	"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""cpmsky.dll"" file is found in %System%"
U	PPControl	PPControl.exe	"PestPatrol Control Terminal - utility that launched PestPatrol features such as PPMemCheck and CookiePatrol before CA's acquisition"
U	PPCRunonce	PPCRunOnce.exe	"Related to PeoplePC ISP software - may display advertising
X	PreInstall Windows	[path] repcale.exe [path] beird.exe	"Added by a variant of the RANDON.AN WORM! Both files are located in %System%\detr"
U	Pro PCL Status Monitor	PENGSS.EXE	Xerox printer/fax/copier status monitor (PCL = printer control language)
X	ProtectPcs.exe	ProtectPcs.exe	"ProtectPcs rogue security software - not recommended
U	PRPCMonitor	PRPCUI.exe	"Intel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power
X	prutpct	prutpct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Y	PsPCCard	PsPCCard.EXE	Background Power Saving task found on Toshiba laptops and which handles turning Power Saving ON and OFF on any inserted PC Card (PCMCIA card). Only ever disable if you do not use any power saving or hibernation settings (ie: they are all OFF)
U	PspContr	pspcontr.exe	Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
U	R2Plus_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-4x20 Series multifunction printers
U	R2Ricoh_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Ricoh MFP Type 103 multifunction printer
U	Rapid Restore	rrpcsb.exe	"XPoint ""Rapid Restore PC"" - ""a Managed Recovery solution that enables IT Administrators to protect the corporate image
U	Receiver	PcfaxRcv.exe	"Incorporated on multifunction digital copiers (such as the
X	Reg Service	ipcfg.exe	"Added by the AGOBOT-SO WORM!"
N	Reminder-hpcXXXXX	remind32.exe	HP CD-Writer Registration
U	Remote Desktop Computing	marspc.exe	"Marspc Remote Desktop Computing"
X	Remote Procedure Call	winrpc.exe	"Added by the RBOT-KM WORM!"
X	Remote Procedure Call	winsysrpc.exe	"Added by the SDBOT-PS WORM!"
X	Remote Procedure Call For Windows 32bit	rpc.exe	"Added by the RBOT-MD WORM!"
X	Remote Procedure Calls	mswinrpc.exe	"Added by the RBOT.KJ WORM!"
?	roketpipe	rpclient.exe	"??"
X	RPC	MSschost.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	RPC DCOM Vulnerability Patch	msgfix.exe	"Added by the RBOT.S WORM!"
X	RPC Drivers	rpcall.exe	"Added by the SDBOT.FLY WORM!"
X	RPC Patcher	[path to worm]	"Added by the BOLGI WORM!"
X	RPC Service	[random filename]	"Added by the BDOOR-AAD BACKDOOR!"
X	rpc Win32	shost32.exe	"Added by the RBOT-ABL WORM!"
X	rpc Win32	spoolscv.exe	"Added by a variant of the RBOT WORM!"
X	RPCall_WIN2K	Kurawas.exe	"Added by the BHARAT.A WORM!"
X	RPCall_[ComputerName]	smhost.exe	"Added by the REDPLUT-B TROJAN!"
X	rpcc	rpcc.exe	"Added by the SPAMMIT-E TROJAN!"
X	rpcda Win32	rpcda.exe	"Added by the RBOT-AEE WORM!"
X	RPCInstall	[path to trojan]	"Added by the AGENT-DQM TROJAN!"
X	RpcLocator	explorer.exe	"Added by the RBOT-GSA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	RPCser32g	services.exe	"Added by the RITDOOR-C WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCser32g1	services.exe	"Added by the PREX.D WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCser32g3	services.exe	"Added by the PREXOT.D BACKDOOR! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCser32g4	services.exe	"Added by the PREXOT.E BACKDOOR! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCserr32g	winlogon.exe	"Added by the RITDOOR-B WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCserv32	services.exe	"Added by the MYDOOM.AL WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCserv32g	services.exe	"Added by the BOBAX.AA WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCserv32g	CSRSS.EXE	"Added by the BOBAX.AD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	RPCserv32g	MSDEFR.EXE	"Added by the BOBAX.AD WORM!"
X	RPCserv32g	NB32EXT2.EXE	"Added by the BOBAX.AD WORM!"
X	RPCserv32g	WINLOGON.EXE	"Added by the BOBAX.AD WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Y	RPCSS.exe	rpcss.exe	"Remote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se
X	RpcxWindows Extensions	rpcxwinex.exe	"Added by the RBOT.ACP WORM!"
X	RSPC Driver	[random filename].exe	"Added by the RBOT-SN WORM!"
X	RSPC Driver D	[random filename]	"Added by a variant of the RBOT WORM!"
N	run=	pcfix2k.exe	pcfix2k splash screen
X	RVP	bpc.exe	"BroadcastPC adware"
X	SafePcAv	SafePcAv.exe	"SafePcAv rogue security software - not recommended
X	SafePCTool	SysRep.exe	"SafePCTool rogue system error and cleaning utility - not recommended
U	SafetyNet	ipcTray.exe	"Safety.Net from Netveda - ""offers Internet security
U	SafetyNet_Notifier	ipcLn.exe	"Safety.Net from Netveda - ""offers Internet security
U	Scan2pc	Scan2pc.exe	"Scan to PC application for the scanning function of multiple multifunction printers from Dell
X	SecurePcAv	SecurePcAv.exe	"SecurePcAv rogue security software - not recommended
X	SecurePCCleaner	GDC.exe	"SecurePCCleaner rogue privacy tool - not recommended
U	SecurePCSolutionsBootCheck	BootCheck.exe	"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
X	Security Center	AppControl.exe	"Added by the SDBOT.CFT WORM!"
N	SEPCSuite	SEPCSuite.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X	SernellApp.pcx	csrss.exe	"Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""D5133"" subfolder"
X	Service Drivers	PC.EXE	"Added by the SDBOT-WK WORM!"
X	Servicerepclient1	SERVICES.EXE	"Added by the BRONTOK-BT WORM and variants! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS"
U	sfpc	sfpc.exe	"Spy4PC surveillance software. Uninstall this software unless you put it there yourself"
U	SHPC32	SHPC32.exe	Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled
X	SiS Mpc Service	mpcsvc.exe	"Added by the CIADOOR-CJ TROJAN!"
Y	slipcore	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
Y	SlipStream	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
U	Smartalec	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
U	SmartPCXL	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
U	SmpcSys	SmpSys.exe	"""Set Up My PC"" utility supplied with some Packard Bell computers"
X	Social Security Agency	rpcxsocsa.exe	"Added by a variant of the RBOT WORM!"
N	Sony Ericsson PC Suite	Application Launcher.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
N	Sony Ericsson PC Suite	SEPCSuite.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X	SP2 data	[path] repcale.exe [path] apc.exe	"Added by a variant of the RANDON.AN WORM! Both files are often located in %System%\winstat"
?	SPC610NC_Monitor	Monitor.exe	"Related to the Philips SPC610NC webcam. What does it do and is it required?"
N	spc_w	hcm.exe	"NetZero Search Enhancement related"
N	spc_w	blspc.exe	"NetZero Search Enhancement related"
N	spc_w	nzspc.exe	"NetZero Search Enhancement related"
U	Speaking Clock Deluxe	SpClDlx.exe	"Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date
U	SpeedUpMyPC	speedupmypc.exe	"Older version of SpeedUpMyPC from Uniblue - which ""lets you monitor and control all your PC resources with easy
X	Srv RPCrom	NClienti386.exe	"Added by the WATSOON.A TROJAN!"
X	Start CurePCSolution	CurePCSolution.exe	"CurePCSolution spyware remover - not recommended
X	SuspenzorPC	GDC.exe	"SuspenzorPC Czech rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X	Sysmon	rpcmon.exe	"Added by the RANDEX.ATX WORM!"
X	Sysmppcvppp	SysTdSvr.dll	"Generic2.PQG adware"
X	SysSearch	Regedit.exe -s pcsearch.reg	"Added by the STARTPAGE-FN TROJAN! Note that regedit.exe is a legitimate Microsoft file and shouldn't be deleted. The ""pcsearch.reg"" file is located in %Windir%"
X	System	winipck.exe	"Added by the RBOT-TK WORM!"
X	System Restore Data	[path] repcale.exe [path] beird.exe	"Added by the RANDON.AN WORM! Both files are located in %System%\frbyjed"
X	System Setup	rpcxcmod.exe	Added by an unidentified WORM or TROJAN!
X	System Update	mssetupconf.exe	"Added by the RBOT.DLC WORM!"
X	System32 PCI Manager	syspci32.exe	"Added by the RBOT-AFR WORM!"
X	Systems Restart	spchost.exe	Added by an unidentified WORM or TROJAN!
X	tcp checker	tcpcheck.exe	"Added by the VBBOT-A TROJAN!"
X	TempCom	[randomname].com	"Added by the TRAXG WORM!"
X	Total PC Defender	Total PC Defender.exe	"Total PC Defender rogue security software - not recommended
X	Total PC Defender 2010	Total PC Defender 2010.exe	"Total PC Defender rogue security software - not recommended
X	Total Protect 2009	pcpc_starter.exe	"Total Protect 2009 rogue security software - not recommended
X	tpcupdater	updatetc.exe	"Antivirus XP 2008 rogue security software - not recommended"
X	TurvaPC	GDC.exe	"TurvaPC Finnish rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X	uga6pcw	uga6pcw.exe	"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
U	Uniblue SpeedUpMyPC	SpeedUpMyPC.exe	"Older version of SpeedUpMyPC from Uniblue - which ""lets you monitor and control all your PC resources with easy
U	UniblueSpeedUpMyPC	Launcher.exe	"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
X	UnSpyPC	UnSpyPC.exe	"UnSpyPC spyware remover - not recommended
N	UpConfgVer	UpgConf.exe	"Part of Panda Antivirus and Internet Security. Purpose unclear
X	UPCTPcw	UPCTPcw.exe	"Part of the PcTurboPro rogue system optimization tool - not recommended
X	updatexwin	winxrpc.exe	"Added by the AGOBOT-KJ WORM!"
X	uprpcw	uprpcw.exe	"PrivacyProtector rogue privacy tool - not recommended
X	USB 2.0 Driver	updateXPSPC.exe	"Added by the AGOBOT-RJ WORM!"
N	USB2Check	PCLECoInst.dll	"Related to Pinnacle Systems Inc. CoInstaller - you can execute the USB2.0 interface check program (Usb2Check.exe file) to check if your system is a USB2.0 enabled system"
X	UserInit StartUp	rpcxuisu.exe	"Added by a variant of the SDBOT WORM!"
X	uwa6pcw	uwa6pcw.exe	"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
X	uwa7pcw	uwa7pcw.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	videopci	videopci.exe	"Added by the AGENT-W TROJAN!"
X	VirtualPCGuard	pgs.exe	"VirtualPCGuard rogue security software - not recommended
N	VoipCheap	VoipCheap.exe	"VoipCheap - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
N	VoipCheapCom	VoipCheapCom.exe	"VoipCheapCom - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
U	VPCUserServices	VMUSrvc.exe	"Part of ""DOS Virtual Machine Additions"" for Microsoft Virtual PC
X	wa7pcw	wa7pcw.exe	"WinAntiVirus Pro 2007 rogue security software - not recommended"
X	wa7pcw	wa7pcw.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	WCPC	wintsvcc.exe	"PurityScan adware"
U	Whitney2_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-4725 Series photocopier
U	WHITNEY2_XRX_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Xerox Phaser 3200MFP multifunction laser printer
U	WhitneyXerox_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Xerox WorkCentre PE220 Series multifunction laser printer
U	WHITNEY_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-4x21 Series multifunction printers
X	win	xwinxrpc32.exe	"Added by the AGOBOT-MV WORM!"
X	win	xwinxrpc.exe	"Added by the AGOBOT-MV WORM!"
U	Windows	WpcUmi.exe	"Notifications from the Parental Controls feature in Windows Vista. Note - disabling this entry does not disable Parental Controls and prevent it monitoring a users activity. On the controller account it prevents the pop-up on from displaying messages such as ""Reminder: View the Parental Controls activity report"". On the user account it prevents the warning messages appearing such as access has been denied and the Parental Controls icon appearing on the System Tray"
X	Windows APCI Verifier	dhcpserv.exe	"Added by the RBOT-FON WORM! Note - Disables the automatic startup of other software and deactivates the Microsoft Internet Connection Firewall (ICF)"
X	Windows driver update	Ipconfig32.exe	"Added by the SDBOT-JV WORM!"
X	Windows Express	pci32b.exe	"Added by the BUZUS.C TROJAN!"
X	windows logon procedure	winlogonpc.exe	"Added by the WINLOGON TROJAN!"
X	Windows More Choice	TopContext.exe	"ZQuest adware"
X	Windows Pc	winmgr.exe	"Added by the BIBOT-A WORM!"
X	Windows PC Defender	WP[random characters].exe	"Windows PC Defender rogue security software - not recommended
X	Windows Relay Service	ipcbind.exe	"Added by the DELFINJECT.F TROJAN!"
X	Windows Remote Addressing	wnpcgs.exe	"Added by the DELF-EZN TROJAN!"
X	Windows Workstation	mpci.exe	"Added by a variant of the RBOT WORM!"
X	WindowsHive	rpcc.exe	"Added by the DLENA-A TROJAN!"
X	windowsupdate	RPC[RANDOM CHARACTERS].exe	"Added by the IRCBOT.B TROJAN!"
X	WinPCDoctor	SysRep.exe	"WinPCDoctor rogue system error and cleaning utility - not recommended
X	WinRPC	winrpcmx.exe	"Added by the BANKER-EEI TROJAN!"
X	Winsock2 driver	kgzgjkpcw.exe	"Added by the SDBOT.T TROJAN!"
X	WIP Config GUI	Winipcfgs.exe	"Added by the RBOT-CN WORM!"
U	Wireless PCI Card Configuration Utility	WMP11Cfg.exe	"Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
U	Wireless-G Notebook Adapter Utility	WPC54CFG.EXE	"Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G)"
N	Wpctrl	wpctrlnt.exe	"WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens
N	Wpctrl	wpctrl95.exe	"WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens
N	wpctrl95	wpctrlnt.exe	"WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens
N	wpctrl95	wpctrl95.exe	"WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens
U	WPCUMI	WpcUmi.exe	"Notifications from the Parental Controls feature in Windows Vista. Note - disabling this entry does not disable Parental Controls and prevent it monitoring a users activity. On the controller account it prevents the pop-up on from displaying messages such as ""Reminder: View the Parental Controls activity report"". On the user account it prevents the warning messages appearing such as access has been denied and the Parental Controls icon appearing on the System Tray"
Y	WPCycle.exe	WpCycleWin.exe	"Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end
X	WSAConfiguration	rpcxmn32.exe	"Added by the AGOBOT.ABG WORM!"
X	XP Cleaner	xpc.exe	"XP Cleaner rogue cleaning utility - not recommended
?	xpcfg	xpcfg.exe	"??"
?	Xpclient	xpclient.exe	"Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?"
U	XPCMonitor	XPCMonitor.exe	"XPC Monitor Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	XPCPHOST Settings	xpcphost.exe	"Added by a variant of the RBOT WORM!"
U	XTNDConnect PC	XCPCMenu.exe	"XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - 3CmPlm	Autodet.exe	"3Com Palm PC specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - CasioOrg	CasAgnt.exe	"Casio Pocket PC specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - ErPhn2	ErTray.exe	"Sony Ericsson IrMC (Infrared Mobile Connectivity) phones and smartphones specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - LtNts4	NtsAgnt.exe	"(IBM) Lotus Notes 4 specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - MyPalm	MPTray.exe	"Palm OS specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - PocketPC	AutoDetect.exe	"Windows Mobile Pocket PC specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	XTNDConnect PC - ScheduleSync	SCHEDU~1.EXE	"ScheduleSync specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
U	Xtrem parental control	pcx.exe	ParentXtreme - surveillance software. Uninstall this software unless you put it there yourself
U	YPC	ypc.exe	"Yahoo Parental controls - ""Let you decide what type of sites and Yahoo! services your kids can access"""

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.