POP

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	12Ghosts Popup-Killer	12popup.exe	"12Ghosts Popup-Killer"
U	Acronis Popup Blocker	"RunDll32.exe [path] Blocker.dll	Run"
X	AdPopup	dcf5678.exe	"Added by the AGENT-FZ TROJAN!"
U	Aluria's Pop-Up Stopper	eps.exe	Aluria Pop-Stopper
U	Another Internet Explorer Popup Killer	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
U	AntiPopUp	AntiPopUp.exe	"AntiPopUp for IE - pop-up stopper"
U	Ashampoo PopUpBlocker	PopUpKiller.exe	"Ashampoo popup blocker
U	Asmw Soft Popups Burner	popups burner.exe	"Popup blocker
Y	AVK Mail Checker	AVKPop.exe	"eXtendia AVK AntiVirus email checker"
U	Banpopup by Pratik	Banpopup.exe	Banpopup - popup killer
X	BestPopUpKiller	BestPopupKiller.exe	"Popup killer by Swanksoft - not recommended
X	Blocker System611 Monitoring	PopUpBlocker611.exe	"Added by the RBOT.BLJ WORM!"
X	BootsCfg	wscript.exe [path] Date.POP.vbs	"Added by the KUULLIO WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
Y	CallBumping	cbpopw.exe	"Related to the Gazel 128 PCI ISDN adapter. Required if you use it"
X	ControlPanel	"popcorn.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"popcorn64.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"popcorn72.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"popcorn320.exe rundll.dll	LoadMouseProfile"
U	Don't Panic Pop-Up Stopper	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
X	elitemedia	elitemediapop.exe	"Added by the LOWZONE-BB TROJAN! Also known as Elitebar/EliteToolbar/EliteSidebar adware"
N	EnigmaPopupStop	EnigmaPopupStop.exe	"Part of Enigma SpyHunter - not recommended
N	Fromine WinPopup	winpopup.exe	Instant Messenger program
N	IsReminder	ISPopup.exe	"Related to GuardWare iShield - this is the registration reminder for the trial version
N	ItsDeductiblePopUp	ItsDeductible.exe	"ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip"
U	Kill Popup	KillPopup.exe	"KillPopup - pop-up stopper"
N	Launch YahooPOPs! at Windows startup	YAHOOPOPS.EXE	"YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs"
X	MasterBoot Switch	popupkill.exe	"Added by a variant of the RBOT WORM!"
X	MSN Popup Blocker	msnpopblck.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	MyPopupKiller	mpk.exe	"MyPopupKiller - popup killer"
Y	NOD32POP3	Pop3scan.exe	"POP3 E-mail part of Eset's NOD32 virus-scanner"
Y	Norton eMail Protect	POPROXY.EXE	"Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed
X	notepad2.exe	popuper.exe	"Added by the PUPER-E TROJAN!"
Y	Nwpopup	Nwpopup.exe	"Broadcast message handler part of Novell Netware that displays server
U	PC Pitstop Optimize Scheduler	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
U	PCPOptimize	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
N	PerfectPrint	pfppop70.exe	Print engine used by Corel WordPerfect 7 and Presentations 7
U	Petit Larousse 2001	HIPL2000Popup.exe	Popup dictionary tool
X	pool manager	popsvr.exe	"Added by the AGENT-S BACKDOOR!"
X	POP	PopSrv***.exe	"PeopleonPage foistware
X	POP Manager	popmgr.exe	"Added by the BCKDR-PYV BACKDOOR!"
U	POP Peeper	POPPeeper.exe	"POP_Peeper from Mortal Universe Software Entertainment ""is an email notifier that runs in your Windows task bar and alerts you when you have new email on your POP3
U	Pop-Up Smasher	PopupSmasher.exe	"Pop-Up Smasher - pop-up killer"
U	Pop-Up Stopper	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
U	Pop-Up_Blocker	Popup.exe	"A Tweak-XP component
U	Pop-Up_Scanner	Popupscn.exe	"Panicware popup blocker"
X	pop06ap	pop06ap2.exe	"MediaMotor adware"
X	pop06apelt	thiselt.exe	"ZenoSearch adware"
U	pop3 Server	config.cfg	"Part of HTML2POP3 - ""Convert Webmail to POP3.Is also included a SMTP/POP3 tunneling system that allow send and receive email in a private network HTTP PROXY based. All connection are plugin based. Over 250 email server supported and tested"""
Y	Pop3trap.exe	Pop3trap.exe	"Part of Trend Micro web-security products - PC-cillin 2000
X	PopeSvr	PopeSvr.exe	"Added by the LEGMIR-AJ TROJAN!"
X	PopMark	WinTask.exe	"""Pop Marketing"" adware"
U	PopNot	PopNot.exe	"PopNot - pop-up killer"
U	PopOops	PopOops.exe	"PopOops - pop-up killer"
U	Popopen	popopen.exe	"
X	PopRock	[path to trojan]	"Added by the AGENT-LNU TROJAN!"
Y	Poproxy	POPROXY.EXE	"Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed
X	popsrv146	popsrv146.exe	"AproposMedia adware"
U	PopSubtract	PopSub.exe	"PopSubtract - pop-up killer"
X	PopularScreensaversWallpaper	"rundll32 [path] F3SCRCTR.DLL	LES"
U	Popup Ad Filter	PopFilter.exe	"Popup Ad Filter - pop-up killer"
X	Popup and Advertisement Killers	adkillers.exe	"Added by the RBOT-DDH WORM!"
X	Popup Blocker System	PopUpBlocker.exe	"Added by a variant of the RBOT WORM!"
X	Popup Blocker System326a Monitoring	PopUpBlocker6a.exe	"Added by the RBOT.AUH WORM!"
X	Popup Blocker System8 Monitoring	PopUpBlocker8.exe	"Added by a variant of the RBOT WORM!"
X	Popup Blocker Updater	regsvr32 veev***.dll [ = random char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
U	PopUp Buster+	popupbuster.exe	PopUp Buster - free Pop-up blocker
X	Popup Defence Updater	regsvr32 pdfupd.dll	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
U	Popup Defender	PD.exe	"
U	PopUp Destroy	Popup-Destroy.exe	"French pop-up killer from VSoft"
X	PopUp Stopper	NO POPUP.EXE	"Added by the SPYBOT-DC WORM!"
U	Popup Terminator	GLADManager.exe	"Popup Terminator - pop-up killer"
U	PopupEliminator	Popup Eliminator.exe	"Popup Eliminator - pop-up killer"
U	PopUpKiller	PopUpKiller.exe	"PopUpKiller - pop-up killer"
X	popuppers	newpop63.exe	"Medload adware"
X	popuppers64	a64sddd.exe	"Popuppers adware
X	popuppers65	[path to file]	"Medload adware"
U	PopUpStopperCompanion	PSComp.exe	"PopupStopper Companion popup blocker"
U	PopUpStopperFreeEdition	PSFREE.EXE	"Panicware's Pop-Up Stopper - free limited features version"
U	PopUpStopperProfessional	PopUpStopperProfessional.exe	"Panicware's Pop-Up Stopper - paid for version"
U	PopupVanish	PopupVanish.exe	Pop-up blocker
U	PopUpWasher	PopUpWasher.exe	"PopUpWasher pop-up killer"
X	PopUpWatch	PopUpWatch.exe	"BPS spyware remover - not recommended
X	precpop2	starter.exe	"PrecisionPop adware"
?	Realpopup	Realpopup.exe	"RealPopup - "Replaces old winpopup with a full featured freeware tool which remains stable and simple as its predecessor""
U	Run POPFile in background	perl.exe	"POPFile - E-mail spam blocker"
U	Run POPFile in background	wperl.exe	"POPFile - E-mail spam blocker"
X	SafeGuard Popup Blocker Updater	regsvr32 sfgupd.dll	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	SafeGuard Popup Blocker Updater (required)	regsvr32 sfg***.dll [ = ramdom char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	SafeGuard Popup Updater (required)	regsvr32 sfg***.dll [ = random char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	SafeGuard Popup Updater (required)	regsvr32 PDF***.dll [ = random char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	SBMPOP	SBMPop.exe	SearchByMedia adware
X	septpop06apsept	septpop06apsept.exe	"MediaMotor.Popupwithcast adware"
X	sixtysix	sixtypopsix.exe	"Medload adware"
X	StartupOption	loadsysdisk.exe	"Added by the HIDAGENT-B WORM!"
U	Super Popup Blocker	popkill.exe	"Saga Super Popup Blocker - pop-up stopper"
U	Sureshotpopupkiller	Stopthepop.exe	"Stop-the-Pop-Up popup blocker"
U	Sureshotpopupkiller	pusak.exe	"Stop-the-Pop-Up popup blocker"
?	SVM Pop	svmpop.exe	"??"
U	System Mechanic Popup Blocker	PopupBlocker.exe	"Popup blocker part of Iolo System Mechanic utility suite"
U	System Mechanic Popup Stopper	Popupstopper.exe	"Popup stopper part of Iolo System Mechanic utility suite"
U	Systweak Ad and Popup Blocker	adblock.exe	"Ad and popup blocker part of Advanced System Optimizer from Systweak"
X	Terminate Popup	ZPU.exe	"Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here"
X	Terminate Popup	fpuk.exe	Popup killer - foistware proven to install the Regsvc32 homepage hijacker
U	TnPopUp	billbrz.exe	"Related to Technesis ""award-winning solutions for tracking and managing print
U	tpopservice	tpopservice.exe	DirecWay two-way satellite internet service enhanced POP proxy server for email
X	TrustIn Popups	TrustInPopups.exe	"TrustInPopups adware"
U	Vpop3 Mail Server	vpop3.exe	"Mail server from Paul Smith Computer Services. Runs in system tray to collect mail. Can be run from a shortcut and if it isn't running then it won't get your email!"
N	WarReg_PopUp	WarReg_PopUp.exe	Acer warranty registration popup
X	Web Offer	ezPopStub.exe	"eZula TopText adware"
U	Web2Pop	Web2Pop.exe	"Web2Pop allows you to retrieve your web-based accounts messages to read them in your favorite e-mail client"
X	Windows Population Logger	winpo32.exe	"Added by the AGENT.YKR WORM!"
X	WinPop	winpop.exe	"Brudevic A adware"
N	WinPopup	WINPOPUP.EXE	"Intranet chat software provided by windows for chat on small networks. Handy little LAN messaging utility. Has been included in Windows since 95
X	winpopup	winupie.exe	Adware by Tradeexit.com
U	YPOPs	YPOPs.exe	"YPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook
U	YPOPs	YPOPs	"YPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook
U	Zero PoPup Killer XP	zpk_xp.exe	"Intelligent anti-pop-up software product by Ax-Soft"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.