per.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	BioniXWallpaper	BioniX Wallper.exe	"BioniX Wallpaper Changer - ""the most advanced wallpaper changer/wallpaper manager software in the world"""
N	BlazeChanger	FBZPaper.exe	"Ember graphic file viewer
X	BlockKeeper	BlockKeeper.exe	"BlockKeeper rogue security software - not recommended
U	BO1HelperStartUp	Bo1helper.exe	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
Y	Communications_Helper	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
Y	Communications_Helper.exe	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
X	Configuration Loader	WinHelper.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
U	CTHELPER	CTHELPER.EXE	"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
X	CTHelper	cthelper.exe	"Added by the RBOT-XB WORM! Note - do not confuse with the Creative application of the same name described here"
U	DataKeeper	DataKeeper.exe	"PowerQuest DataKeeper (now owned by Symantec) backup software"
N	ezHelper	ezHelper.exe	"Part of the ezPeer+ ezHelper music sharing program."
X	GoogleUpdater3	GoogleMapper.exe	"Added by the ROUTROBOT WORM!"
X	HDriveSweeper	HDriveSweeper.exe	"HDriveSweeper rogue privacy program - not recommended
U	Hitman Pro SurfRight Helper	srhelper.exe	"Hitman Pro - a utility to start a number of Security Protection software. They can be started individualy"
U	HondaHelper	HondaHelper.exe	"Part of Honda Music Link which allows you to use your Honda's audio system's controls to play and search for music on your iPod® in you car"
N	iIWiper	Systemwiper.exe	"System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis"
N	Internet Sweeper	Sweeper.exe	"Internet Sweeper - removes unnecessart left over files after browsing the internet"
Y	iTunes Helper	iTunesHelper.exe	Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
Y	iTunesHelper	iTunesHelper.exe	Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
X	Java Update	keeper.exe	"Added by the AGENT-DIS TROJAN!"
Y	Logitech	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
Y	LogitechCommunicationsManager	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
Y	LogitechRegisterVideoApplications	InstallHelper.exe	Entry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software
U	LogitechVideo[inspector]	InstallHelper.exe	Entry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications
X	MalwareStopper	MalwareStopper.exe	"Malware Stopper rogue security software - not recommended"
X	MalwareWiper	MalwareWiper.exe	"MalwareWipe rogue security software variant - not recommended
X	Microsoft Windows Security	spvsper.exe	"Added by a variant of the SDBOT WORM!"
X	MicrosoftUpdate	syshelper.exe	"Added by the WOOTBOT.AC WORM!"
U	ML1HelperStartUp	ML1Helper.exe	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	MS Java Service Wrapper Windows NT & XP	wrapper.exe	"Added by the VANEBOT-D WORM!"
U	MW1HelperStartUp	Mw1helper.exe	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	notepad2.exe	popuper.exe	"Added by the PUPER-E TROJAN!"
U	NSHelper	aexnsinstallhelper.exe	Altiris Express Notification Server Install helper - monitors integrity of the installation
X	pestsweeper	pestsweeper.exe	"PestSweeper rogue security software - not recommended
U	POP Peeper	POPPeeper.exe	"POP_Peeper from Mortal Universe Software Entertainment ""is an email notifier that runs in your Windows task bar and alerts you when you have new email on your POP3
X	pqhelper	pqhelper.exe	"Searchcentrix hijacker"
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	"Different numbers caused by number of launches. So if 3 updates are made separately
U	RegClean Expert Scheduler	RCHelper.exe	"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
U	RivaTuner	RivaTunerWrapper.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTunerStartupDaemon	RivaTunerWrapper.exe	"Part of RivaTuner - a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This entry is for Vista and loads the main application (RivaTuner.exe) to apply overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTunerWrapper Application	RivaTunerWrapper.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
X	s4helper	s4helper.exe	"Searchcentrix hijacker"
X	SafetyKeeper	SafetyKeeper.exe	"SafetyKeeper rogue security software - not recommended
X	SaveKeeper	SaveKeeper.exe	"SaveKeeper rogue security software - not recommended
X	SecureKeeper	SecureKeeper.exe	"SecureKeeper rogue security software - not recommended
U	SpyStopper	spystopper.exe	"SpyStopper - blocks intrusive spyware
U	SpySweeper	SpySweeper.exe	"Spy Sweeper - detects and removes spyware"
X	SpyTrooper	SpyTrooper.exe	"SpyTrooper rogue spyware remover - not recommended
X	Spyware Sweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
X	SpywareSweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
X	super	super.exe	"Added by the AGOBOT-QT WORM!"
U	System Mechanic Popup Stopper	Popupstopper.exe	"Popup stopper part of Iolo System Mechanic utility suite"
X	SYSTEM service helper	svchelper.exe	"Added by the MONKBD-A WORM!"
X	SystemB	MessengerStopper.exe	"MessStopper adware"
X	tracesweeper	tracesweeper.exe	"Trace Sweeper rogue privacy tool - not recommended"
N	tray_helper	tray_helper.exe	"Tray Helper is an Email checker with additional tools
X	Update.exe	ravseuper.exe	"Added by the QQPASS-P TROJAN!"
?	Verizon Custom Uninstall Tracking	InstallHelper.exe	"Verizon related installation tracker. What does it do and is it required?"
U	VirusKeeper	VirusKeeper.exe	"VirusKeeper uses a powerful real-time threat detection engine"
X	W32PluginsDownloaderXMLHTTPSelfClearing7520	wiper.exe	"Added by the PROXYSER-M TROJAN!"
U	WallpaperChanger	Wallpaper.exe	"A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version is 30-day trialware
U	WatcherHelper	WaHelper.exe	"Sierra Wireless Watcher™ - wireless configuration utility"
X	WINDOWS SYSTEM	per.exe	"Added by the ZOTOB.C WORM!"
X	WindowsSystem32	asper.exe	"Added by the AGENT-EFP TROJAN!"
U	WINDVDpatch	CTHELPER.EXE	"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
U	WinIRXHelper	WinIRXHelper.exe	"MSI Media Center Deluxe software - see here"
X	winlogon.exe	helper.exe	"Added by the FAKESPY-A TROJAN!"
X	wzhelper	wzhelper.exe	"Searchcentrix hijacker"
X	[various names]	atl_helper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ATLIEHELPER.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	iehelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MsNetHelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ssweeper.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.