| Index | Introduction | Database | Detailed Entries | Updates | Concise List | HJT Forums | Rogues | Message Board |
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original start-up programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. For further information on this and how to identify and disable start-up programs please visit the Introduction page.
See here for further information on random entries - which are typically added by viruses and other malware or unwanted programs.
Last database update :- 29th Apr, 2013
31819 items listed
You can search for any of the following terms to find and display entries in the start-up programs database but the minimum search is 3 characters and you must click on the "Search" button. Results are sorted by the Startup Item/Name field.
Alternatively, you can browse the full database (without the search facility) over a number of pages or you can use the alphabetical index below to list the entries for that letter by the Command/Data field, but the results may take longer to appear due to the number of them:
A | B | C | D | E | F | G | H | I | J | K | L | B | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
NOTE: Searching for common words (i.e. "the" or "where") will mean the results take longer to appear due to the number of them.
Please click on the Search button
629 results found for H
| Startup Item or Name | Status | Command or Data | Description | Tested |
|---|---|---|---|---|
| X | h**p://advgoogle.blogspot.com/ | Detected by McAfee as W32/Yahlover.worm.gen.k and by Malwarebytes Anti-Malware as Worm.Sohanad | No | |
| Synchronization loader lokd | X | h2m6w5s.exe | Added by the SDBOT.ACG WORM! | No |
| WINDOWS SYSTEM Cleaner | X | h3.exe | Added by the MYTOB.EQ WORM! | No |
| MicroSoft sys3s1 | X | h4ckn3t.exe | Added by the RBOT.QTY WORM! | No |
| h4te Service Drivers | X | h4te.exe | Added by a variant of Win32/Rbot | No |
| h8k9vwcv9 | X | h8k9vwcv9.exe | Detected by Malwarebytes Anti-Malware as Trojan.Downloader. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| 3-habibie | X | habibie.exe | Added by the BRONTOK-CR WORM! | No |
| hachimitsu-lemon | X | hachimitsu-lemon.exe | Added by the HACHILEM TROJAN! | No |
| a96233fc156e042876b9d1cb7b94e7ad | X | Hack Facebook.exe | Detected by McAfee as Generic PWS.y and by Malwarebytes Anti-Malware as Trojan.MSIL | No |
| d7271e2abb6db7647dd37dd76bdecd00 | X | hack.exe | Detected by McAfee as Trojan-FAUE!79C0889AC0CB and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| HKCU | X | hacker.exe | Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %ProgramFiles%\InstallDir | No |
| HKLM | X | hacker.exe | Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %ProgramFiles%\InstallDir | No |
| UnHackMe Monitor | U | hackmon.exe | UnHackMe allows you to detect and remove a new generation of 'invisible' Trojan programs called "rootkits" | No |
| HackMuFpt | X | HackMuFpt.exe | Added by the SCLOG-AG TROJAN! | No |
| Hades | X | Hades.exe | Detected by Malwarebytes Anti-Malware as Spyware.OnlineGames. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| haisood | X | haisood.exe | Added by the VB-FQS TROJAN! | No |
| YJT3qWKc7i | X | hajabuly.exe | Added by the FAKEALER.IO TROJAN! | No |
| Ultra Hal Assistant 4.5 Startup | N | HalAsst.exe | Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion | No |
| Halflife | X | halflife2.exe | Added by the AGOBOT-OC BACKDOOR! Note - this file is not associated with Valve Corporation's Half-Life 2 game | No |
| HalloweenDesktop | U | HalloweenDesktop.exe | Animated desktop gadget included with the Halloween theme for MyColors from Stardock Corporation | No |
| yeahdude.exe | X | hallowelt.exe | Detected by Symantec as W32.HLLW.Gaobot.RS or W32.Gaobot.SA | No |
| LogMeIn Hamachi Ui | U | hamachi-2-ui.exe | LogMeIn Hamachi remote control and VPN software - "is a hosted VPN service that lets you securely extend LAN-like networks to distributed teams, mobile workers and your gamer friends alike" | No |
| hamachi | U | hamachi.exe | LogMeIn Hamachi remote control and VPN software - "is a hosted VPN service that lets you securely extend LAN-like networks to distributed teams, mobile workers and your gamer friends alike" | No |
| HaMFrontPanel | U | hampanel.exe | Displays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless | No |
| HanUpdate | X | hanz.exe | Added by the RBOT-GLJ WORM! | No |
| Update | X | hanz.exe | Added by a variant of the RBOT-GLJ WORM! | No |
| 360ÍØÂÇ°²È« | X | haokan.exe | Detected by McAfee as Generic.dx!b2c4 and by Malwarebytes Anti-Malware as Trojan.FlyStudio | No |
| winter | X | happy.exe | Added by the SDBOT-YF WORM! | No |
| Windows svchost | X | happy2008.exe | Added by the PUSHBOT.AM WORM! | No |
| haqhamxocyqd | X | haqhamxocyqd.exe | Detected by Malwarebytes Anti-Malware as Trojan.Inject. The file is located in %UserProfile% | No |
| HardBoan | X | HardBoan.exe | HardBoan rogue security software - not recommended, removal instructions here | No |
| hardscanS | X | hardscanU.exe | HardScan rogue security software - not recommended. One of the OneScan family of rogue scanner programs | No |
| Hare | U | hare.exe | Hare - improve and optimize performance of desktop/laptop PCs | No |
| Logitech Harmony Remote | U | HarmonyClient.exe | Logitech Harmony advanced universal remote | No |
| Logitech Harmony Remote Software 7 | U | HARMON~1.EXE | Logitech Harmony Advanced Universal Remote controller software | No |
| 334b2739fc10de6e5338e9606fb87649 | X | hassan.exe | Detected by Dr.Web as Trojan.DownLoader7.32088 and by Malwarebytes Anti-Malware as Trojan.MSIL | No |
| HawkEye IV Control Panel | U | HAWK_32.EXE | Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start → Programs | No |
| HawkEye | U | HAWK_95.EXE | Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start → Programs | No |
| Handy Backup | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 3.0 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 3.5 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 3.9 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 4,1 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 4.0 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 4.1 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 5.3 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 5.4 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 5.7 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup 6.0 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| Handy Backup Pro 1.1 | U | hbagent.exe | Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers | No |
| HBService | X | HBInject.exe | Added by the ONLINEG.CRJ TROJAN! | No |
| Hbinst | X | Hbinst.exe | Hotbar adware | No |
| Hotbar | X | Hbinst.exe | Hotbar adware | No |
| WINDOWS SYSTEM DNSPOOL | X | hbmail.exe | Added by the MYTOB.FW WORM! | No |
| Hbmhly | X | Hbmhly.exe | Added by the LOLYDA.AP TROJAN! | No |
| Hotbar | X | HbOEAddOn.exe | Hotbar adware | No |
| Windows Software | X | hbsppe.exe | Added by the RBOT-GLL WORM! | No |
| HbTools | X | HbtOEAddOn.exe | Hotbar adware | No |
| WeatherOnTray | X | HbtWeatherOnTray.exe | Hotbar adware | No |
| HC Reminder | N | hc.exe | For Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed | No |
| HCDetect | N | HCDetect.exe | MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem | No |
| HCEmployee | U | Hce.exe | HiddenCamera surveillance software. Uninstall this software unless you put it there yourself | No |
| hcen | X | hcen.exe | Added by the SMALL.LR TROJAN! | No |
| hcenter | U | hcenter.exe | Bellsouth (now AT&T) help center. Part of software from Support.com (aka SupportSoft or Tioga) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the "TgAddServer" entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation" | No |
| tgcmd | U | hcenter.exe | Bellsouth (now AT&T) help center. Part of software from Support.com (aka SupportSoft or Tioga) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the "TgAddServer" entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation" | No |
| hchos | X | hchos.exe | Added by the SCAR.BVBM TROJAN! | No |
| sample | X | hchos.exe | Added by the BANKER-EZU TROJAN! | No |
| hclean32.exe | X | hclean32.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| spc_w | N | hcm.exe | NetZero Search Enhancement related | No |
| ATKHOTKEY | U | hcontrol.exe | Hotkeys on an ASUS Notebook. Only required if you use the additional keys | No |
| Hcontrol | U | hcontrol.exe | Hotkeys on an ASUS Notebook. Only required if you use the additional keys | No |
| hcontrol32.exe | X | hcontrol32.exe | Added by the VB-EUF WORM! | No |
| HControlUser | U | HControlUser.exe | Hotkeys on an ASUS Notebook. Only required if you use the additional keys | No |
| HiberMonitor | ? | HCount.exe | ?? | No |
| hcsystray | N | hc_tray.exe | Kuma Notifier for the Shootout! game from the History Channel. "It lets you know whenever there's a new episode that's been released or an announcement from the Kuma team. Just click it to get up-to-the-minute game and event information" | No |
| BlueStacks Agent | N | HD-Agent.exe | BlueStack allows you use thousands of mobile apps on your PC | No |
| BlueStacks App Player | N | HD-FrontEnd.exe | BlueStack allows you use thousands of mobile apps on your PC | No |
| HDAudio | X | hda.exe | Added by the TACTSLAY.U TROJAN! | No |
| SRSHDAudioLab | N | HDAL.exe | SRS HD Audio Lab (which became SRS Audio Essentials) from SRS Labs - "audio enhancement software for your PC. It features: sleek interface design with energized light pulses, surround sound-even from 2 speakers, using SRS Labs audio enhancement technology" | No |
| Genväg till egenskapssida för High Definition Audio | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. Swedish version | No |
| HDAShCut | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required | No |
| High Definition Audio Özellik Sayfası Kısayolu | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. Turkish version | No |
| High Definition Audio -ominaisuussivun pikakuvake | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. Finnish version | No |
| High Definition Audio Property Page Shortcut | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required | No |
| Raccourci vers la page des propriétés de High Definition Audio | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. French version | No |
| Snarvei til egenskapsside for High Definition Audio | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. Norwegian version | No |
| Verknüpfung mit der High Definition Audio-Eigenschaftenseite | N | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. German version | No |
| HDAudDeck | U | HDAudioCPL.exe | Vista control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B | No |
| Συντόμευση σελίδας ιδιοτήτων του High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Greek version | No |
| Atalho para a Página de Propriedades do High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Portuguese version | No |
| Genväg till egenskapssida för High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Swedish version | No |
| Genvej til egenskabsside for High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Danish version | No |
| High Definition Audio Özellik Sayfası Kısayolu | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Turkish version | No |
| High Definition Audio 屬性頁捷徑 | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Chinese version | No |
| High Definition Audio Property Page Shortcut | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required | No |
| Raccourci vers la page des propriétés de High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. French version | No |
| Skrót do strony właściwości High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Polish version | No |
| Snelkoppeling naar eigenschappenvenster voor High Definition Audio | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Dutch version | No |
| Verknüpfung mit der High Definition Audio-Eigenschaftenseite | U | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. German version | No |
| Realtek | X | HDCltp.exe | Detected by McAfee as Backdoor-CEP.gen.ad. Note that this is not a valid Realtek process | No |
| Hard drive Controller | X | hdcontroller.exe | Added by the KIMAN.B WORM! | No |
| RSD_HDDThermo | N | HDD Thermometer.exe | Freeware hard disk thermometer from RSD Software that constantly monitors the temperature of the hard disk and takes the necessary measures to avoid overheating by providing warnings with alarm tones or switching off the computer or entering hibernation mode. No longer supported | No |
| Ashampoo HDD Control Guard | U | HDDControlGuard.exe | Part of Ashampoo® HDD Control - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access | Yes |
| HDDControlGuard | U | HDDControlGuard.exe | Part of Ashampoo® HDD Control - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access | Yes |
| HDDControlGuard.exe | U | HDDControlGuard.exe | Part of Ashampoo® HDD Control - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access | Yes |
| HDDHealth | U | hddhealth.exe | HDD Health is a "full-featured failure-prediction agent for machines using Windows 95, 98, NT, Me, 2000 and XP. Sitting in the system tray, it monitors hard disks and alerts you to impending failure" | No |
| HDDlife | U | HDDlife.exe | HDDlife checks the health of your hard drives at regular intervals and informs you about the results of these checks | No |
| Icon Animation | N | HDE.EXE | Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons | No |
| HDAudDeck | U | HDeck.exe | Control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B | No |
| HDeck MFC Application | U | HDeck.exe | Control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B | No |
| System Help | X | hdesk.exe | Detected by Dr.Web as Trojan.DownLoader5.60373 and by Malwarebytes Anti-Malware as Trojan.Banker | No |
| server | X | hdhhhr.exe | Detected by McAfee as Generic.dx!bhrc and by Malwarebytes Anti-Malware as Backdoor.Agent | No |
| Hercules DJ Series | N | HDJSeriesCPL.exe | Control Panel for the Hercules DJ Console Series | No |
| BUFFALO Power Save Utility for HD | U | HDManage.exe | Power Save utility for Buffalo backup hard discs | No |
| HDMICtrlMan | ? | HDMICtrlMan.exe | Related to HD video support on some Toshiba laptops. What does it do and is it required? | No |
| HDriveSweeper | X | HDriveSweeper.exe | HDriveSweeper rogue privacy program - not recommended, removal instructions here | No |
| Hard Disk Sentinel | N | HDSentinel.exe | Hard Disk Sentinel - a multi-OS hard disk drive monitoring application. Its goal is to find, test, diagnose and repair hard disk drive problems, display hard disk health, performance degradations and failures | No |
| HP Service Drivers | X | hdsys.exe | Added by the SDBOT-ZE WORM! | No |
| HDtray | N | HDtray.exe | Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start → Settings → Control Panel | No |
| Bcvsrv32 | X | he3.exe | Detected by Trend Micro as WORM_AGOBOT.AKB | No |
| Icon Hearit 95 | N | hearit95.exe | Audio desktop customization utility from Moon Valley Software. Resource hog | No |
| Icon Hearit 98 | N | hearit98.exe | Audio desktop customization utility from Moon Valley Software. Resource hog | No |
| heaul | X | heaul.exe | Added by the SILLYFDC-GI WORM! | No |
| hefcndy | X | hefcndy.exe | Added by the ONLINEGAMES.AJBX TROJAN! | No |
| Loaders | X | HeIp.exe | Added by the SDBOT-ADB WORM! | No |
| Loaders | X | HeIp.pif | Added by the SDBOT-ACS WORM! | No |
| Microsoft Security Monitor Process | X | hel.exe | Added by the EGGDROP.V BACKDOOR! | No |
| HelioBarXP | N | HelioBarXP.exe | HelioBar XP by Sycory renders the Windows Taskbar (the strip at the bottom on the screen) transparent, revealing the whole desktop and associated background image. The purpose seems irrelevant as you can right-click on the Taskbar and select Properties → Auto-hide the taskbar anyway | No |
| PicasaNet | N | Hello.exe | Hello is an application that allows Blogger users to post digital photos and captions directly to their personal weblogs, or blogs | No |
| systhread | X | HELLO.EXE | Added by the WINKER.F BACKDOOR! | No |
| HelloInt | X | hello3.exe | Added by the CASAL.A TROJAN! | No |
| helloserv | X | helloserv.exe | Detected by Trend Micro as WORM_ZHELATI.BHA | No |
| Badx | X | HELLRAIDER.EXE | Added by the MINDCTRL.A BACKDOOR! | No |
| Fhzepgyi | X | HELLRAIDER.EXE | Added by the MINDCTRL.A BACKDOOR! | No |
| help | X | help.exe | Detected by McAfee as PWS-FAHB!CB20D8190AFF and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| helpths | X | help.exe | Detected by McAfee as RDN/Generic BackDoor!g and by Malwarebytes Anti-Malware as Backdoor.Agent | No |
| host | X | help.exe | IESearchToolbar parasite. Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.LF TROJAN! | No |
| ISHelp | U | help.exe | ISpy is a security risk that logs keystrokes and captures screenshots. If you didn't install this yourself uninstall it | No |
| MSDNN | X | help.exe | Added by the AGENT-GBK TROJAN! | No |
| once | X | help.exe | IESearchToolbar parasite. Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.LF TROJAN! | No |
| Run | X | help.exe | IESearchToolbar parasite. Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.LF TROJAN! | No |
| Windows Help | X | help.exe | Detected by Dr.Web as BackDoor.IRC.Bot.1758 and by Malwarebytes Anti-Malware as Backdoor.IRCBot.Gen | No |
| debugger | X | help.pif | Added by the DELF-DRA WORM! | No |
| Windows Help System | ? | Help.pif | ?? | No |
| help | X | help.scr | Detected by Sophos as Troj/Bancos-BBU and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| WinInit | X | help01.hlp | Detected by Malwarebytes Anti-Malware as Trojan.Agent.WNT. The file is located in %Windir% - see here | No |
| IMJPMIG6.1 | X | HelpCat.exe | Added by the BESVERIT WORM! | No |
| helpctl.exe | X | helpctl.exe | Added by the GASLIDE TROJAN! | No |
| HDAUDIOUPDATESERVICE | X | helpdeck.exe | Detected by McAfee as Generic.dx!bht4 and by Malwarebytes Anti-Malware as Backdoor.Agent | No |
| HelpDesk | X | HelpDesk.exe | Added by the BANKER.CIY TROJAN! | No |
| winlogon.exe | X | helper.exe | Added by the FAKESPY-A TROJAN! | No |
| LOGITECHS | X | helperfile.exe | Detected by McAfee as PWS-Zbot.gen.aru and by Malwarebytes Anti-Malware as Backdoor.Messa | No |
| ml34 | X | helpermlm4.exe | Added by the MAILBOT-BH TROJAN! | No |
| jon315 | X | helperssrvc.exe | Added by the MAILBOT-BI TROJAN! | No |
| Helpex32 | X | helpex32.exe | Added by the CRYPTER.A TROJAN! | No |
| HELPEXP.EXE | X | HelpExp.exe | Aveo Attune automated helpdesk software - regarded as adware | No |
| HelpInfo | X | HelpInfo.exe | HelpInfo rogue security software - not recommended, removal instructions here | No |
| Microsoft Security Monitor Process | X | HelpMe.exe | Added by the VB.BJO TROJAN! | No |
| helpo | X | helpo.exe | Added by the BANLOA-BU TROJAN! | No |
| HelpPrivacy | X | HelpPrivacy.exe | HelpPrivacy rogue security software - not recommended, removal instructions here | No |
| sck121 | X | helpsyss.exe | Added by a variant of the MAILBOT TROJAN! | No |
| helpw | X | helpw.exe | Adware downloader | No |
| Driverab | X | helz.exe | Added by the RBOT-ABH WORM! Note - the file is a hidden, read-only, system file | No |
| henqisaknifk | X | henqisaknifk.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile% - see here | No |
| heomstool | X | heomstool.exe | Added by the HEOMS TROJAN! | No |
| Internet History Eraser | U | HERASER.exe | Internet History Eraser - deletes your browsing tracks | No |
| herjek | X | herjek.exe | Added by the NUWAR.APJ WORM! | No |
| cdoosoft | X | herss.exe | Detected by Symantec as W32.SillyFDC.BCT and by Malwarebytes Anti-Malware as Spyware.OnlineGames | No |
| wzservice | X | hess.exe | Added by the HACKARMY.W TROJAN! | No |
| sdfgsdfg | X | hey.exe | Added by the AGOBOT-OR WORM! | No |
| HeypPtdMGKlWj | X | HeypPtdMGKlWj.exe | Added by the FAKEAV-DVM TROJAN! | No |
| Hf | U | Hf.exe | Hide Folders - hide your folders so only you can view them | No |
| hffsrv | Y | hffsrv.exe | Hide Files & Folders - "great easy-to-use password-protected security utility working at Windows kernel level you can use to password-protect certain files and folders, or to hide them securely from viewing and searching just with a click of mouse". If this entry is disabled, any files/folders that are protected/hidden will no longer be accessible without first accessing the main program | Yes |
| hffsrv.exe | Y | hffsrv.exe | Hide Files & Folders - "great easy-to-use password-protected security utility working at Windows kernel level you can use to password-protect certain files and folders, or to hide them securely from viewing and searching just with a click of mouse". If this entry is disabled, any files/folders that are protected/hidden will no longer be accessible without first accessing the main program | Yes |
| uxxWbaxpqVfsi | X | HFFVI0Uas9.exe | Detected by Dr.Web as Trojan.DownLoader6.6080 | No |
| EFI Hot Folders | U | hffw.exe | "EFI Hot Folders improves productivity by simplifying the printing of PostScript and PDF files into a select, drag, and drop process. Once users create Hot Folders with different printing and finishing parameters, files are printed without opening an application or print driver menu." Part of EFI's high-end printing solutions | No |
| HfmIgycf | X | hfmigycf.exe | Detected by Malwarebytes Anti-Malware as Trojan.Backdoor. The file is located in %AppData%\yyusvysr | No |
| HF Security | X | hfsecure.exe | Added by the AGOBOT-TI WORM! | No |
| hfxp | U | hfxp.exe | Hide Folders XP - hide your folders so only you can view them | No |
| HF_G_Jul | U | HF_G_Jul.exe | Supports the AVG Secure Search box feature added on new browser tabs which is powered by Yahoo!. Added with the latest versions of AVG security software | No |
| Meeting Connection | X | hgakdl32.exe | Looks like a variant of the PPDOOR-E TROJAN! | No |
| Colorific | N | Hgcctl95.exe | Colorific® from E-Color - "delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor." Now superseded by ColorWizzard™ | No |
| Colorific Control Panel | N | Hgcctl95.exe | Colorific® from E-Color - "delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor." Now superseded by ColorWizzard™ | No |
| Matrox Color Control | N | hgcctl95.exe | For Matrox video cards. Quick access to changing colors | No |
| king_hg | X | hgking.exe | Added by the AUTORUN-BMQ WORM! | No |
| hgqhp.exe | X | hgqhp.exe | Added by the FLUSH.F TROJAN! | No |
| huigezi | X | HgzServer.exe | Added by the GRAYBIRD.C TROJAN! | No |
| Genius Auto Attacher | N | HG_Watcher.exe | Holdem Genius - "Play all of your Texas Holdem hands like a pro with Holdem Genius - the most advanced Texas Holdem odds calculator and the ultimate weapon for playing technically perfect Texas Holdem hands" | No |
| MSAgent | X | hhnt.exe | Detected by Trend Micro as TSPY_AGENT.JI | No |
| HTML Help System | X | hhs.pif | Added by the RBOT-ATB WORM! | No |
| HTML32 Help System | X | hhs32.pif | Added by the RBOT-ATE WORM! | No |
| Hibernation | U | hib32.exe | Reduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run of battery regularly | No |
| Hid.exe | X | hid.exe | Added by the RATSOU.B TROJAN! | No |
| Servicewin | X | Hide32.exe | Added by the MSNVB-D WORM! | No |
| Hide IP | U | hideip.exe | Hide IP - the forerunner to Hide IP NG by Hide IP Software which is a utility to hide your IP address and therefore improve your privacy | No |
| Hide IP Easy | U | HideIPEasy.exe | Hide IP Easy utility which allows you to "hide your real IP with a fake one, surf anonymously, prevent hackers from monitoring your activity, and provide full encryption of your online activity, all with the click of a button" | No |
| Hide IP NG | U | hideipng.exe | Hide IP NG by Hide IP Software - a utility to hide your IP address and therefore improve your privacy | No |
| hiden | X | hiden.exe | Detected by Sophos as Troj/Agent-IW | No |
| HideOE | U | HideOE.exe | HideOE - allows you to 'hide' Outlook Express or minimize it to the System Tray | No |
| cpyt | X | hidep.exe | Added by the MIRJACK-A TROJAN! | No |
| HideRun.exe | X | Hiderun.exe and svhost.exe and pro.gif | Added by the BOOHOO WORM! | No |
| hidisk_info | X | hidisk_info.exe | Detected by McAfee as Generic.dx | No |
| drv_st_key | X | hidn.exe | Added by the BEAGLE.FF WORM! | No |
| drvsyskit | X | hidr.exe | Added by the BAGLE.HR WORM! | No |
| hidserv | U | hidserv.exe | This is the Human Interface Device Server for Win98SE/2000/Me/XP, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the controller for the keyboard sound controls on the USB and PS/2 keyboards | No |
| HighKey1 | X | HighKey1.exe | Detected by AVG as GENERIC12.LHE - see here | No |
| hihotrun | X | hihotrun.jse | Detected by Dr.Web as Trojan.DownLoader2.45503 and by Malwarebytes Anti-Malware as Trojan.VBS. Note - the file is located in %AllUsersStartup% and its presence there ensures it runs when Windows starts | No |
| HijackThis | U | HijackThis.exe | "HijackThis is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware, malware or other unwanted programs". This option is added when you select Config → "Run HijackThis scan at startup..." once a scan has been performed | No |
| HijackThis startup scan | U | HijackThis.exe | "HijackThis is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware, malware or other unwanted programs". This option is added when you select Config → "Run HijackThis scan at startup..." once a scan has been performed | No |
| HijSrv32 | X | hijsrv.exe | Added by the BANKGERM-D TROJAN! | No |
| BT00003* | X | hiklmnop27.exe | Added by the VB-VT TROJAN where * = 2,3 or 4! | No |
| Memory manager | X | himem32.exe | Added by the MANCSYN TROJAN! | No |
| Windows File Migration Wizard | X | HIMENSYST.EXE | Added by the RBOT-EMO WORM! | No |
| load= | X | hint.exe | Added by the ATAK WORM! | No |
| Petit Larousse 2001 | U | HIPL2000Popup.exe | Popup dictionary tool | No |
| HyperappelPL | U | HIPL2002Popup.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2005 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| HyperappelPL2003 | U | HiPL2002popup.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2003/4 versions of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Petit Larousse 2001 | U | HiPL2002popup.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2001 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Petit Larousse 2002 | U | HIPL2002Popup.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2002 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Hiprotect | X | Hiprotect.exe | Hiprotect rogue security software - not recommended, removal instructions here | No |
| delol | X | hiquooc.exe | Added by the BDOOR-AMP TROJAN! | No |
| hisearch3 | X | hisearch2.exe | Detected by Malwarebytes Anti-Malware as Adware.Korad. The file is located in %AppData%\temp | No |
| HistoryKill | N | histkill.exe | HistoryKill removes your web surfing path by removing the URL drop-list history, detailed history file, cache, and cookies in both IE and Netscape Navigator browsers. Available via Start → Programs | No |
| HistoryFeeds.exe | X | HistoryFeeds.exe | Detected by Malwarebytes Anti-Malware as Trojan.Banker. Note that the Command field can be either blank or the same as the Name field and located in a sub-folder of %LocalAppData% - see here and here | No |
| ccctp | X | HistoryJMTi.exe | Added by the GANBATE.A WORM! | No |
| HistorySweep | N | HistorySweep.exe | HistorySweep - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities | No |
| Diskstart | X | hit.exe | Startportal - Switch dialer and hijacker variant, see here. Also detected as the DELF-JE TROJAN! | No |
| hitlink.exe | X | hitlink.exe | Detected by Microsoft as Adware:Win32/HitLink and by Malwarebytes Anti-Malware as Adware.Korad | No |
| hitNzo20gkQ | X | hitNzo20gkQ.exe | Detected by Dr.Web as Trojan.Carberp.800 and by Malwarebytes Anti-Malware as Trojan.Agent. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| HitQ | X | HitQ.exe | Hijacker, for more information see here | No |
| HitwarePKLite | U | HITWAR~1.EXE | Hitware Popup Killer Lite | No |
| HIV | X | HIV.exe | Added by the HIVA TROJAN! | No |
| hk | U | hk.exe | KeyLoggerExp keystroke logger/monitoring program - remove unless you installed it yourself! | No |
| Hook99startup | U | hk2re.exe | "Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons, bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent" | No |
| hkcmd | U | hkcmd.exe | Hot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable | Yes |
| HotKeysCmds | U | hkcmd.exe | Hot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable | Yes |
| igfxhkcmd | U | hkcmd.exe | Hot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable | Yes |
| Intel(R) Common User Interface | U | hkcmd.exe | Hot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable | Yes |
| MicroUpdate | X | hkcmd.exe | Detected by McAfee as Generic BackDoor and by Malwarebytes Anti-Malware as Backdoor.Agent.DC. Note - this is not the Hot Key handler (same filename) for Intel graphics chipsets which is normally located in %System%. This one is located in %MyDocuments%\MSDCSC | No |
| windows messengers | X | hkcmds.exe | Added by the AGENT-CRZ TROJAN! | No |
| windows | X | hkey.exe | Added by the GAOBOT.AFW WORM! | No |
| Panasonic HotKey Manager | U | HKEYAPP.EXE | HotKey management for Panasonic rugged mobile PCs | No |
| voipsoft | X | hkicmd.exe | Added by the AGENT-QVJ TROJAN! | No |
| hkmsvc | X | hkmsvc.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %UserProfile%\Local Settings | No |
| hkserv | U | HKserv.exe | Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS | No |
| HKSERV.EXE | U | HKserv.exe | Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS | No |
| hkss | U | hkss.exe | Compaq HotKey Support - multimedia keyboard support | No |
| 7521835e51df732bd433233caa5a67e8 | X | hl.exe | Detected by Malwarebytes Anti-Malware as Trojan.Delf. The file is located in %UserTemp% | No |
| xsidu | X | hl0vjr.exe | Detected by Kaspersky as Trojan.Win32.VB.aqqe and by Malwarebytes Anti-Malware as Trojan.Downloader | No |
| drvsyskit | X | hldrrr.exe | Added by the BAGLE.QU TROJAN! | No |
| hldrrr | X | hldrrr.exe | Added by the BAGLE-KF WORM! | No |
| hlhtxo | X | hlhtxo.exe | Detected by McAfee as QLowZones-27 | No |
| HLL Data Parameter | X | hllcxpa.exe | Detected by Trend Micro as WORM_RBOT.AFG | No |
| auto__hloader__key | X | hloader_exe.exe | Added by the BAGLE.AB TROJAN! | No |
| VSMP | X | hlojsnigc.exe | Added by the RBOT-GQS WORM! | No |
| down | X | hlp32.exe | Added by an unidentified VIRUS, WORM or TROJAN! | No |
| HLcleanup | X | hlsetup2.exe | Detected by Emsisoft as Adware.Win32.Themexp.org | No |
| GYLW32 | X | hlwn.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.WNL. The file is located in %AppData%\Denver | No |
| FYLW32 | X | hlwne.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %AppData%\Atlantis | No |
| HostsMan | U | hm.exe | "HostsMan is a freeware application that lets you manage your Hosts file with ease". It is mainly intended to block specific domains (mostly advertising servers) by redirecting them to localhost, but can also be used to add any other domain/Ip combination that you want to be included in the HOSTS file | No |
| HMI PowerSystem | X | hmisvc32.exe | Added by the RANDEX.CZZ WORM! | No |
| HML PowerSource | X | hmlsvc32.exe | Added by the SDBOT-XL WORM! | No |
| HPl Services | X | hmlsvc32.exe | Added by the AGOBOT-SI WORM and variants! | No |
| Hardware Sensors Monitor | U | hmonitor.exe | Hardware Sensors Monitor by AB Software - "utilizes sensor chips on smart motherboards to track system and CPU core temperatures, voltages and cooling fans." Only required if you overclock your system or live in a hot environment and want to monitor the status or execute tasks such as sounding audio alarms are shutting down the computer | No |
| hmonitor | U | Hmonitor.exe | Hardware Sensors Monitor by AB Software - "utilizes sensor chips on smart motherboards to track system and CPU core temperatures, voltages and cooling fans." Only required if you overclock your system or live in a hot environment and want to monitor the status or execute tasks such as sounding audio alarms are shutting down the computer | No |
| Avast | X | hmu8399.exe | Added by the VB-ECZ TROJAN! | No |
| HMV PowerSource | X | hmusvc32.exe | Added by the SDBOT-YW WORM! | No |
| Home Malware Cleaner | X | HM[random].exe | Home Malware Cleaner rogue security software - not recommended, removal instructions here | No |
| Sync Data | U | Hndsync.exe | Pocket Real Estate - mobile synchronization manager | No |
| Hekio Startups | X | Hnksvc32.exe | Added by the AGOBOT-QE WORM! | No |
| ho2stdll.exe | X | ho2stdll.exe | Added by the BANKER-HO TROJAN! | No |
| hogame Supporter | X | hogameSupporter.exe | Detected by Malwarebytes Anti-Malware as Adware.Kraddare. The file is located in %ProgramFiles%\hogame Supporter | No |
| hohoskivosuz | X | hohoskivosuz.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile% | No |
| Holiday Lights | N | Holiday Lights.exe | Holiday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start → Programs | No |
| HolidayCalendar | U | HolidayCalendar.exe | Calendar gadget included with a theme for MyColors from Stardock Corporation | No |
| WinReg32 service | X | holqdnoxpmeu.exe | Added by a variant of W32/Sdbot.worm | No |
| HOI Services | X | holsvc32.exe | Added by the AGOBOT-SF WORM! | No |
| hom | X | hom.exe | Detected by McAfee as Generic BackDoor and by Malwarebytes Anti-Malware as Trojan.Downloader. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| HomeAlarm | U | HomeAlarm.exe | Chameleon Clock - system tray clock replacement | No |
| HomeAntivirus 2009 | X | HomeAntivirus2009.exe | HomeAntivirus 2009 rogue security software - not recommended, removal instructions here | No |
| Home Antivirus 2010 | X | HomeAntivirus2010.exe | Home Antivirus 2010 rogue security software - not recommended, removal instructions here | No |
| HomeAV | X | homeav.exe | Home Personal Antivirus rogue security software - not recommended, removal instructions here | No |
| HomeClean | X | HomeCleanLaunch.exe | HomeClean rogue security software - not recommended, removal instructions here | No |
| Homeland Network | X | HomelandNetwork.exe | Homeland Network Notifier - pops ads | No |
| win | U | homesec.exe | Related to the Sentry Parental Controls software | No |
| HondaHelper | U | HondaHelper.exe | Part of Honda Music Link which allows you to use your Honda's audio system's controls to play and search for music on your iPod® in you car | No |
| honiqsogoqki | X | honiqsogoqki.exe | Detected by Malwarebytes Anti-Malware as Spyware.Zbot. The file is located in %UserProfile% | No |
| Honor | ? | honor.exe | ?? | No |
| Intel system tool | X | hookdump.exe | Added by the SPYRE-H TROJAN! | No |
| HookSys | U | HookSys.exe | SurfinGuard Pro from Finjan - internet protection software, protects against all malicious code delivered through executables, scripting files, ActiveX and Java | No |
| NetMeter | U | HooNetMeter.exe | "Net Meter is a powerful and easy-to-use bandwidth meter. It monitors traffic of all network connections and displays real-time graphical and numerical data transfer rates. Net Meter can display details of multiple network connections at the same time. It records all network traffic and includes extensive logging (daily, weekly and monthly) and traffic events. Net Meter works with virtually all types of network connections including phone modems, DSL, cable modem, LAN, satellite and more." | No |
| Eech | X | hoor.exe | PurityScan adware | No |
| HKCU | X | host.exe | Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %System%\drivers | No |
| HKLM | X | host.exe | Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %System%\drivers | No |
| HKLM | X | Host.exe | Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %System%\Internet Explorer | No |
| HKLM | X | host.exe | Detected by McAfee as Generic.bfr!ev and by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %ProgramFiles%\Windows Media Player\install | No |
| Host | X | Host.exe | Detected by Malwarebytes Anti-Malware as Trojan.Backdoor. The file is located in %Windir% | No |
| host | X | host.exe | Detected by Symantec as Trojan.Exponny | No |
| MSN | X | Host.exe | Detected by McAfee as RDN/Generic Dropper!d and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| Mssn | X | Host.exe | Detected by Malwarebytes Anti-Malware as Trojan.Inject. The file is located in %AppData%\Install | No |
| NetWire | X | Host.exe | Detected by Dr.Web as Trojan.Packed.23472 and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| Policies | X | host.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\drivers | No |
| svchost | X | Host.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Bot. The file is located in %AppData%\Install | No |
| vhost | X | host.exe | Peppi adware | No |
| windows | X | Host.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%\Install - see here | No |
| Windows Host Service | X | host.exe | Added by the KELVIR.AN WORM! | No |
| Windows-Network | X | Host.exe | Added by the ESION BACKDOOR! | No |
| Sygate Personal Firewall | X | host32.exe | Added by the RBOT.ALD BACKDOOR! | No |
| Windows Update | X | host32.exe | Detected by Sophos as W32/Rbot-GU and by Malwarebytes Anti-Malware as Backdoor.IRCBot | No |
| ControlPanel | X | host32.exe internat.dll,LoadKeyboardProfile | Added by the DELF.DW TROJAN! | No |
| Hostname Manager Server | X | host32srv.exe | Added by a variant of Win32/Rbot | No |
| Windows Host Booter | X | hostbooter.exe | Added by an unidentified WORM or TROJAN! See here | No |
| Servicing | X | hostd.exe | Detected by Trend Micro as WORM_SDBOT.BUI | No |
| hostdll.exe | X | hostdll.exe | Added by the BANKER-BO TROJAN! | No |
| WinService | X | hosth.exe | Added by the DWNLDR-FUX TROJAN! | No |
| Microsoft Invisible | X | hostmng.exe | Detected by Dr.Web as Trojan.DownLoader7.8922 and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| hostnet | X | hostnet.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData% | No |
| layersldm | X | hostplsrvc.exe | Added by a variant of W32/Sdbot.worm | No |
| avgnt | X | hostr.exe | Detected by Malwarebytes Anti-Malware as Trojan.VBAgent. The file is located in %System%\install | No |
| hostr | X | hostr.exe | Detected by Malwarebytes Anti-Malware as Trojan.VBAgent. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| Hostren.exe | X | Hostren.exe | Added by the BANCOS.BJS TROJAN! | No |
| Microsoft DNS Host Resolution | X | hostres.exe | Added by the AGOBOT-MK BACKDOOR! | No |
| Windows Host | X | hosts.exe | Added by the KELVIR.U WORM! | No |
| Windows Hosts | X | hosts.exe | Added by the KELVIR-O TROJAN! | No |
| HostSecuritySystem.exe | X | HostSecuritySystem.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.HSC. The file is located in %Windir% - see here | No |
| hostserv | X | hostserv.exe | Detected by Trend Micro as WORM_RBOT.BPZ | No |
| Sygate Personal Firewall | X | hostserv.exe | Detected by Trend Micro as WORM_RBOT.BKO | No |
| Windows Host32 Starter | X | hostserv.exe | Added by the SDBOT-WU WORM! | No |
| HostServices | X | HostServices6.exe | Detected by Malwarebytes Anti-Malware as Trojan.Dropper. The file is located in %AppData% | No |
| HostSVC syse | X | HostSVC.exe | Added by the RBOT-ANZ WORM! | No |
| Windows Host Device | X | hostsvc.exe | Added by the ZOOTY-A WORM! | No |
| Windows Update System | X | hostsys.exe | Detected by Sophos as Troj/VB-FMO and by Malwarebytes Anti-Malware as Backdoor.IRCBot | No |
| HostWi31 | X | HostWi.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %System%\HostWi32 | No |
| HostWi33 | X | HostWi.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %System%\HostWi32 | No |
| Java Update | X | hostwww.exe.exe | Added by the AGENT-MFH TROJAN! | No |
| Hot 8.0 Live | X | hot.exe | Added by the BANKER.EIE TROJAN! | No |
| stagio | X | hot.exe | Added by the AGENT-NZS TROJAN! | No |
| HotAction_hr | X | hotaction_hr.exe | Added by the SITEICON-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "HotAction_hr" | No |
| HotbarSA | X | HotbarSA.exe | Hotbar adware | No |
| Hot Corners | U | Hotc.exe | Hot Corners - "lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen" | No |
| hotclipalert | X | hotclipalertcheck.exe | Added by the DWNLDR-IJP TROJAN! | No |
| PLFFAP | ? | HotfixQ0306270.exe | Prolific Technology Inc. USB Flash Disk driver - is it required in startup? | No |
| HOTFOON2 | U | hotfoon4.exe | Related to Hotfoon - a developer and provider of Internet Telephony technology based on LTP (Lightweight Telephony Protocol) | No |
| HotIDE | U | hotide.exe | HotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks | No |
| KeybdUtility | ? | HotKey.exe | Located in a LG Software\LG OSD directory. Related to function keys on and LG Electronics system? | No |
| load= | Y | hotkey.exe | Solo 5300 display driver for Win2K on some Gateway laptops | No |
| Toshiba Hotkey Utility | U | Hotkey.exe | Multimedia/function key manager for Toshiba laptops | No |
| zOSD | ? | HotKey.exe | Located in a LG Software\LG OSD directory. Related to function keys on an LG Electronics system? | No |
| HotkeyApp | U | HotkeyApp.exe | Programmable keys on Acer, Fujitsu and other laptops | No |
| LManager | U | HotkeyApp.exe | Programmable keys on Acer, Fujitsu and other laptops | No |
| Hot Keyboard | U | HotKeyb.exe | Hot Keyboard by Imposant - "is a personal productivity tool for Windows operating system. Whether you are working, or just having fun, Hot Keyboard helps you make computer tasks faster. Create macros, assign them to hotkeys and forget repetitive tasks!" | No |
| HotkeyMon | U | HotKeyMon.exe | Support the Fn hotkeys on Asus laptops and netbooks | No |
| HotkeyService | U | HotkeyService.exe | Support the Fn hotkeys on Asus laptops and netbooks | No |
| CPQHotKeys | X | hotkeysvc.exe | Added by the RBOT-XA WORM! | No |
| Hotkey Utility | U | HotkeyUtility.exe | Keyboard management utility required to use programmable function and special keys on some laptops from suppliers such as Acer, Gateway, Packard Bell and eMachines | No |
| HotKeyz.exe Startup | U | HotKeyz.exe | HotKeyz from Skynergy - "lets you easily create and maintain a categorized list of your hotkeys. Each hotkey, a key combination on your keyboard, will launch a command. You decide which commands go with which hotkeys" | No |
| Hot Party 22 | ? | hotpart22.exe | ?? | No |
| HotPix | X | hotpix.exe | Adult content dialler | No |
| hotplug | X | hotplug.exe | Hotplug malware | No |
| HotSync Manager | N | hotsync.exe | Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start → Programs | No |
| Hot Inside | X | Hottest Story Ever.exe | Added by the BHARAT.A WORM! | No |
| eFax Tray Menu | N | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start → Programs. Disabling instructions available here | No |
| eFax.com Tray Menu | N | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start → Programs. Disabling instructions available here | No |
| j2 Tray Menu | N | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start → Programs. Disabling instructions available here | No |
| hotwetlove | X | hotwetlove.exe | Adult content dialler. Will not uninstall - components have to be manually deleted | No |
| Hot_Kiss | X | Hot_Kiss.exe | Adult content dialler | No |
| Hotplug | U | hot_plug.exe | Related to the SiS_Hot_Plug_Application. Enables automated driver loading for hotpluggable devices. If this service is stopped, hotplug devices will no longer function | No |
| Hot_Tarts | X | Hot_Tarts.exe | Adult content dialler | No |
| Hot_Tarts_** | X | Hot_Tarts_**.exe | Premium rate adult content dialer (where * is a random char) | No |
| Hot_Tarts_Au | X | Hot_Tarts_Au.exe | Premium rate adult content dialler | No |
| Hot_Tarts_mc | X | Hot_Tarts_mc.exe | HotTarts adult content dialer | No |
| houtor.exe | X | houtor.exe | Added by the VOBFUS.V WORM! | No |
| HoverDesk | U | HoverDesk.exe | HoverDesk - desktop replacement software | No |
| howcodecopen | X | howcodecopen.exe | Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Trojan.HowCodec | No |
| howcodec | X | howcodec_update.exe | Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Trojan.HowCodec | No |
| hpWirelessAssistant | U | HP Wireless Assistant.exe | Wireless management utility for HP computers that allows the user to enable individual wireless devices (such as Bluetooth or WLAN devices) and shows the state of the radios for those devices | No |
| File Mapping Services | X | hp-1003.exe | Added by the RBOT.FAN WORM! | No |
| Main Executable (HP) | ? | HP05T0R5.exe | HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do? | No |
| HPAdvisor | U | HPAdvisor.exe | HP Advisor - services and support utility on HP machines providing "a single access point for the things you need most", including security status, alerts and others | No |
| HPAdvisorDock | U | HPAdvisorDock.exe | HP Advisor Dock - custom toolbar for program shortcuts with built-in search facility. Part of the HP Advisor services and support utility on HP machines | No |
| HP Update Assistant | X | HPAware.exe | Added by the MRO TROJAN! | No |
| HP Mobile Printing | U | HPBMOBIL.EXE | HP Mobile Printing allows you to print to your wireless HP printer from your mobile device via Bluetooth wireless technology | No |
| HP Mobile Printing Driver | U | HPBMOBIL.EXE | HP Mobile Printing allows you to print to your wireless HP printer from your mobile device via Bluetooth wireless technology | No |
| HP Status Server | ? | hpboid.exe | Copied during installation of HP Inkjet Printer Drivers in Win2K/XP. What does it do and is it required? | No |
| HPBootOp | U | HPBootOp.exe | "HP Boot Optimizer intelligently and dynamically launches software during startup, based on available resources, to improve startup performance" | No |
| HP Port Resolver | ? | hpbpro.exe | ?? | No |
| TomcatStartup | ? | hpbpsttp.exe | Apache Tomcat web server, part of HP LaserJet "Printer Tools" software. What does it do and is it required? | No |
| TomcatStartup 2.5 | ? | hpbpsttp.exe | Apache Tomcat web server, part of HP LaserJet "Printer Tools" software. What does it do and is it required? | No |
| HP CD-DVD | N | hpcdtray.exe | System Tray access to a HP CD-DVD's functions. Available via Start → All Programs | No |
| HP CD-Writer | N | hpcdtray.exe | System Tray access to a HP CD-Writer's functions. Available via Start → All Programs | No |
| HPCDTray | N | hpcdtray.exe | System Tray access to a HP CD-Writer's or CD-DVD's functions. Available via Start → All Programs | No |
| HP Component Manager | N | hpcmpmgr.exe | Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error "Windows can't shutdown the computer because hpcmpmgr.exe can't be ended" | No |
| hpcmpmgr | N | hpcmpmgr.exe | Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error "Windows can't shutdown the computer because hpcmpmgr.exe can't be ended" | No |
| HP Simple Trax | N | Hpcron.exe | Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start → Programs or Desktop Icon | No |
| Hide and Protect any Drives for Win95/98/Me/2k/XP | U | HPDAgent.exe | Loads Hide and Protect any Drives - which allows you to "Protect Hard drive, CD, DVD, floppy and flash, and deny access to partitions of your hard drives. Stop unauthorized software installations and data leak by removable media". If disabled, hidden and locked drives still retain their original status so the user will only be able to change their status them via the main UI | Yes |
| HPDAgent | U | HPDAgent.exe | Loads Hide and Protect any Drives - which allows you to "Protect Hard drive, CD, DVD, floppy and flash, and deny access to partitions of your hard drives. Stop unauthorized software installations and data leak by removable media". If disabled, hidden and locked drives still retain their original status so the user will only be able to change their status them via the main UI | Yes |
| hpdeskjet | X | hpdeskjet.exe | Detected by Kaspersky as Trojan-Downloader.Win32.Genome.axxw and by Malwarebytes Anti-Malware as Trojan.Banker | No |
| KnexStarter | U | HPDeviceService.exe | HP Device Communications Services (also known as Knex) - installed with HP Easy Printer Care software. "The HP Device Communication Services software carries product-specific plug-ins that are installed whenever HP Device Communications Services is installed" | No |
| HP Display Settings | U | hpdisply.exe | Sets default display settings. Unchecking this item has been reported to cure a "Problem sending command to keyboard" error message | No |
| HPNT | X | hpdll.exe | Malware downloader - detected by Kaspersky as the VB.KU TROJAN! | No |
| 000hpdllhos | X | hpdllhost.exe | LZIO.com adware downloader | No |
| Windows HP Drivers | X | hpdmws.exe | Added by the SDBOT.AQU WORM! | No |
| HP Envy Guides AutoPlay | N | hpdocstart.exe | Related to the HP Envy series of laptops. Based upon the entry name, we assume this automatically launches the product guides and isn't required - can a user confirm this? | No |
| 1: | N | hpdrv.exe | HP utility for monitoring when and how many recoveries have been done | No |
| run= | N | hpfsched | HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature | No |
| hpfsched | N | hpfsched.exe | HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature | No |
| hpgs2wnd | N | hpgs2wnd.exe | Share-to-Web - HP-created software and Internet-based application that enables easy uploading and sharing of photos via affiliated photo-sharing Web sites. Available via Start → Programs | No |
| Share-to-Web Namespace Daemon | N | hpgs2wnd.exe | Share-to-Web - HP-created software and Internet-based application that enables easy uploading and sharing of photos via affiliated photo-sharing Web sites. Available via Start → Programs | No |
| Hpha1mon | U | Hpha1mon.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 2.0 to 2.3 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| Hpha2mon | U | Hpha2mon.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.1 to 3.2 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| Hpha3mon | U | Hpha3mon.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.3.138 to 3.4.13 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| HP Health Check Scheduler | U | HPHC_Scheduler.exe | HP Health Check Scheduler from Hewlett-Packard | No |
| HPHmon03 | U | hphmon03.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| HPHmon04 | U | hphmon04.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 4.0 to 4.2 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| hphmon05 | U | hphmon05.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 5.0 to 5.3 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| HPHmon06 | U | hphmon06.exe | Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 6.0 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature | No |
| Hphome | X | hphome.js | Homepage hijacker | No |
| PreloadApp | N | hphprld.exe setup.exe | HP Deskjet/PhotoSmart printer related - printers function normally without it | No |
| setup | N | hphprld.exe setup.exe | HP Deskjet/PhotoSmart printer related - printers function normally without it | No |
| HPHUPD04 | N | hphupd04.exe | HP software update checker and wizard launcher. Available via Start → Programs | No |
| HPHUPD05 | N | hphupd05.exe | HP software update checker and wizard launcher. Available via Start → Programs | No |
| HPHUPD06 | N | hphupd06.exe | HP software update checker and wizard launcher. Available via the Start menu | No |
| HPHUPD07 | N | hphupd07.exe | HP software update checker and wizard launcher. Available via Start → Programs | No |
| HPHUPD08 | N | hphupd08.exe | HP software update checker and wizard launcher. Available via Start → Programs | No |
| zzz-hpi-boot | ? | hpi-boot.exe | Associated with HP Photosmart printers | No |
| HP IDScheduler | ? | HPIDSCHD.exe | HP Instant Delivery Scheduler | No |
| exmon | ? | hpimoniter.exe | Some kind of hp digital camera maybe or a photo smart connection probe? | No |
| CXMon | N | Hpi_Monitor.exe | Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software" | No |
| HP JetDiscovery | N | HPJETDSC.EXE | HP JetAdmin software which monitors printing jobs on a network environment | No |
| JetAdmin Discovery Indicator | Y | HPJETDSC.EXE | HP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator | No |
| hpjsiroute[IP address] | ? | hpjsira.exe | Related to HP laserjet printers and IP addresses. An IP address is appended to the name field - ie "hpjsiroute192.168.1.2" | No |
| HP KEYBOARD | U | HPKEYBOARD.EXE | "Application software for the keyboard set. Displays message when battery level is low." For HP systems - see here | No |
| HP KEYBOARDx | U | HPKEYBOARDx.EXE | On-screen display (OSD) applet for the HP Desktop Keyboard | No |
| HP Lamp | Y | HPLamp.exe | HP Scanner Utility that controls your scanners light bulb. Needed if it's switched on | No |
| HPLamp | Y | HPLamp.exe | HP Scanner Utility that controls your scanners light bulb. Needed if it's switched on | No |
| hplampc | U | hplampc.exe | HP Scanner Lamp Utility - fixes an issue with the scanner lamp not going off | No |
| Automatic Media Update | X | HPLNT32.RVD | Added by an unidentified WORM/TROJAN! | No |
| Hewlett Packard Manager | X | hpmanager.exe | Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program | No |
| HP Precision Scan | N | hpmdlbwx.exe | HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required | No |
| DrvStart | X | HPMedia.exe | Added by the BANCBAN-QE TROJAN! | No |
| HpMmKbd | U | HpMmKbd.exe | HP's multimedia keyboard driver which enables the end-user to use the automation features of the HP multimedia keyboard | No |
| VMware hptray | X | hpmon.exe | Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not a legitimate VMware entry | No |
| HP Quick Launch | U | HPMSGSVC.exe | Supports the Quick Launch buttons on some HP Notebooks which enable you to quickly access the programs that you use most frequently - see here for more information | No |
| HPMVTray | U | HPMVTray.exe | HP Media Vault Networked Storage Device - System Tray management utility | No |
| HP Network Registry Agent | U | hpnra.exe | Installed with the drivers for many HP printers since 2002 - for more information see here under "HPNRA.exe" | No |
| VDI Manager (HP) | ? | HPO0VDX05.exe | HP (Hewlett-Packard) related. Now - what does it do? | No |
| HPAiODevice(hp officejet g series) | ? | hpoavn07.exe | HP Printer related, reportedly lets file transfers from an HP device pass files through Windows firewall. Is it required? | No |
| hp psc 2000 Series | U | hpobnz08.exe | System Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start | No |
| HPAiODevice(hp psc 900 series) -1 | N | hpobrt07.exe | Installed with a Hewlett Packard 900 series colour printer, scanner, fax, photo card slot printer, copier. Assumed to perform an identical function to the hpaiodevice entry | No |
| hpodblia | N | hpodblia.exe | HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually | No |
| hpaiodevice | N | hpodev07.exe | Direct from HP - "Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when "portable" is chosen during installation)". Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner | No |
| hpodlb08 | N | hpodlb08.exe | HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually | No |
| OfficeJet Manager | ? | HPOmnu05.exe | HP Officejet All-in-One Printer related. What does it do and it it required? | No |
| HPAIO_PrintFolderMgr | N | hpoopm07.exe | Directly from HP: "This process has one purpose - detects if the device moves to a different port, and notifies other processes to look on the new port." For various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the HP icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner | No |
| HPOSD | U | HPOSD.exe | OSD (on-screen-display) utility for HP computers - displays notifications such as Caps Lock being pressed, volume being increased, playback being paused, etc | No |
| officejet 6100 | ? | hposol08.exe | Associated with a HP PSC2110 (and maybe others) all-in-one machine | No |
| HP OfficeJet Series 700 StartUp | ? | HPOstr03.exe | HP Officejet 700 All-in-One Printer related. What does it do and it it required? | No |
| HP OfficeJet Series 500 Startup | ? | HPOstr05.exe | HP Officejet 500 All-in-One Printer related. What does it do and it it required? | No |
| HP OfficeJet Series 700 Startup | ? | HPOstr05.exe | HP Officejet 700 All-in-One Printer related. What does it do and it it required? | No |
| HP OfficeJet Startup | ? | HPOstr05.exe | HP Officejet 600 All-in-One Printer related. What does it do and it it required? | No |
| HP OfficeJet T Series Startup | ? | HPOstr05.exe | HP Officejet T Series All-in-One Printer related. What does it do and it it required? | No |
| DeviceDiscovery | U | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products | No |
| hpotdd01 | U | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products | No |
| HP AutoIndexer | U | hppautoindexer.exe | Installed by HP multi-function printer driver software, related to PC faxing. If you are not using the PC faxing feature you can go ahead and disable these services from the startup | No |
| HPPA_Main | U | HPPA_Main.exe | "HP Power Assistant provides an easy method for changing operating system and device configuration settings in order to manage power consumption". Used to manage many peripherals on an HP laptop (ie, Wi-fi, Bluetooth and ambient light sensor) | No |
| HPPowerAssistant | U | HPPA_Main.exe | "HP Power Assistant provides an easy method for changing operating system and device configuration settings in order to manage power consumption". Used to manage many peripherals on an HP laptop (ie, Wi-fi, Bluetooth and ambient light sensor) | No |
| HP Laser Jet Director | U | hppdirector.exe | System Tray icon that opens various functions such as copy, fax, email, scan, copy plus, etc. Right-click on it and you see a few options such as the preceding bar plus About, Help, ToolBox, Exit, etc | No |
| HP Photo Manager | X | HPPhotoManager.exe | Added by the SDBOT.AXU WORM! | No |
| Status Monitor CLJ1500 | U | HPPOUMUI.exe | Status monitor for the HP Color LaserJet 1500 printer from Hewlett-Packard - for monitoring printer status, checking ink levels, etc | No |
| hpppt | Y | hpppt.exe | Related to the drivers for HP ScanJet scanners | No |
| Hpppta | Y | hpppta.exe | HP parallel port driver for certain hardware | No |
| Print Hp Tray | X | hpprint.exe | Added by the RBOT-GWE WORM! | No |
| Win USB 2.0 USB Driver | X | HPPrint.exe | Added by the SPYBOT.DNB WORM! | No |
| KIT3 | X | hpprintqueue.exe | Added by the ADCLICK-DS TROJAN! | No |
| HPPROPTY | N | HPPROPTY.EXE | HP LaserJet Toolbox | No |
| RunTasktray | U | HPPRun.exe | System Tray access to HP Easy Printer Care software | No |
| HP SchedIndexer | U | hppschedindexer.exe | Installed by HP multi-function printer driver software, related to PC faxing. If you are not using the PC faxing feature you can go ahead and disable these services from the startup | No |
| HP Parallel Port Test | N | hppt.exe | Associated with a HP ScanJet scanner | No |
| HPUsageTracking | N | hppusg.exe | Part of the HP Customer Participation Program and can cause memory leaks - see here. Similar to the equivalent Microsoft Customer Participation Program, it sends back statistics on how you use their products | No |
| HPPWRSAV | U | HPPWRSAV.EXE | Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com, pick your OS option under the SUPPORT tab, follow the instructions and you will find an updated lamp control patch | No |
| CamMonitor | ? | hpqcmon.exe | From HP and related to digital imaging | No |
| hpqcmon | ? | hpqcmon.exe | From HP and related to digital imaging | No |
| hpqSRMon | ? | hpqSRMon.exe | Related to HP Digital Imaging products. What does it do and is it required? | No |
| HP Image Zone Fast Start | N | hpqthb08.exe | Improves the startup time of HP Image Zone. If you disable it, HP Image Zone takes a long time to start up only the first time you run it. Subsequent startups are much faster than the first time | No |
| HP Photosmart Premier Fast Start | N | hpqthb08.exe | Improves the startup time of HP Image Zone. If you disable it, HP Image Zone takes a long time to start up only the first time you run it. Subsequent startups are much faster than the first time | No |
| HP Digital Imaging Monitor | U | hpqtra08.exe | System Tray access to HP Director. Required if you prefer to use the all-in-one buttons to manually scan documents or transfer photos froma camera, for example | No |
| Codec Reader | X | hpqwgetdrvinfo.exe | Detected by Malwarebytes Anti-Malware as Trojan.Ransom. The file is located in %AppData% - see here | No |
| HPQuickWebProxy | U | hpqwutils.exe | Supports the "HP QuickWeb feature in some HP notebook PCs - that "is an innovative suite of applications that can be accessed within seconds of powering on the notebook. HP QuickWeb resides outside of the notebook's Windows operating system, allowing you to quickly check e-mail, surf the web, chat via instant messenger and Skype, listen to music, and view pictures" | No |
| HP ScanPatch | U | HPScanFix.exe | Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used, then it is safe to remove or prevent from starting | No |
| IPOT USB Service DRV32 | X | hpsebc08.exe | Added by the SDBOT-WH WORM! | No |
| IPOT USB Service DRIVER | X | hpsebc087.exe | Added by the SDBOT-WA WORM! | No |
| HpPrinter | X | hpserver.exe | Added by the CMJSPY-W TROJAN! | No |
| hpsjbmgr | N | hpsjbmgr.exe | HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup, unless the scanner is used every day, such as in a business environment | No |
| HPSCANMonitor | U | hpsjvxd.exe | HP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner | No |
| HP ScanPicture | N | hpsplmwa.exe | HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required | No |
| NetBiosSrvc | X | HPSrvPrt.exe | Added by the SDBOT-COL WORM! | No |
| hp Silent Service | ? | HpSrvUI.exe | HP Silent Service application user interface. What does it do and is it required? | No |
| HPStart | N | hpstart.wsf | This a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot | No |
| HP Status | N | hpstatus.exe | HP Printer Status and Alerts | No |
| SyBot v2.1 By Sky-Dancer | X | HPSV.exe | Added by the ZOTOB.I WORM! | No |
| susse | X | hpsw.exe | LinkMaker adware | No |
| hpsysdrv | U | hpsysdrv.exe | This item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP, if it can't tell that it is an HP it will not run. If unchecked, it can prevent the running of the Application Recovery CDs, the use of the multimedia keys, and the HP Instant Support. Also seen that without it running, the Riptide Sound card that was installed on some older HP computers stops working | No |
| Display Settings | N | hptasks.exe | Allows for the adjustment of the display for LCD screen, CRT Monitor and TV output on HP computers | No |
| ToolBoxFX | U | HPTLBXFX.exe | HP ToolBoxFX - "provides desktop configuration, status and support for every feature". Supplied with some HP multifunction printers | No |
| hptools | X | hptools.exe | Added by a variant of W32/Sdbot.worm | No |
| HP TV Now | U | HpTvNow.exe | Application supplied with HP notebooks. It activates the S-Video port and is said to improve the quality of the output signal (resolution/timeouts) | No |
| HP Visualize Init | ? | HpVisIni.exe | HP Visualize software related. What does it do and is it required? | No |
| hpWirelessAssistant | U | HPWAMain.exe | Wireless management utility for HP computers that allows the user to enable individual wireless devices (such as Bluetooth or WLAN devices) and shows the state of the radios for those devices | No |
| WirelessAssistant | U | HPWAMain.exe | Wireless management utility for HP computers that allows the user to enable individual wireless devices (such as Bluetooth or WLAN devices) and shows the state of the radios for those devices | No |
| load= | N | HPWHRC.EXE | Loads the Status Window software for the HP Laserjet printers | No |
| Win Drivers SSL | X | hpws.exe | Detected by AhnLab as Win32/IRCBot.worm.67098 | No |
| Win Drivers SSL32 | X | hpwsnnsbc.exe | Added by the SPYBOT.MAR WORM! | No |
| HP software update | N | HPWuSchd.exe | HP software updates. If a shortcut doesn't exist, create your own and run it manually | No |
| HP software update | N | HPWuSchd2.exe | HP software updates. If a shortcut doesn't exist create your own and run it manually | No |
| HP Software Updater v1.1 | X | HPWuSchdb.exe | Detected by Sophos as Troj/VB-EUV and by Malwarebytes Anti-Malware as Worm.Prolaco.Gen | No |
| HP Software Updater v1.6 | X | HPWuSchdp.exe | Detected by Sophos as Troj/Mdrop-CVT and by Malwarebytes Anti-Malware as Worm.Prolaco.Gen | No |
| HP Software Updater v1.2 | X | HPWuSchdq.exe | Detected by Sophos as Troj/Agent-OKC and by Malwarebytes Anti-Malware as Worm.Prolaco.Gen | No |
| HP Software Updater v2.7 | X | HPWuSchedv.exe | Detected by Sophos as W32/AutoRun-BHY and by Malwarebytes Anti-Malware as Worm.Prolaco.Gen | No |
| HPZTS04 | N | hpzts04.exe | Hewlett Packard printer toolbox shortcut that resides in the system tray | No |
| HPDJ Taskbar Utility | U | hpztsb01.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb02.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsb02 | U | hpztsb02.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| Windows Update | X | hpztsb02.exe | Detected by Sophos as Troj/Bancd-C and by Malwarebytes Anti-Malware as Backdoor.IRCBot. Note - this it not the legitimate HP Deskjet series printer utility with the same filename located in %System%\spool\drivers\w32x86\3. This one is found in %Windir% | No |
| HPDJ Taskbar Utility | U | hpztsb03.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb04.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsb04 | U | hpztsb04.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb05.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsb05 | U | hpztsb05.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb06.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb07.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsb07 | U | hpztsb07.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb08.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb09.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsb09 | U | hpztsb09.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb10.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb11.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb12.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HPDJ Taskbar Utility | U | hpztsb13.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| hpztsbol | U | hpztsbol.exe | HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer | No |
| HP Deskjet | X | HP_DeskJet_500.exe | Added by the FORBOT-DA WORM! | No |
| HPLogiFinder | U | hp_finder.exe | HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used | No |
| HP Remote Solution | U | HP_Remote_Solution.exe | Provides support for the remote control handset available for some HP computers | No |
| HQI Services | X | hqisvc32.exe | Added by the AGOBOT-RO WORM! | No |
| HQI Services | X | hqlsvc32.exe | Added by the AGOBOT-RP WORM! | No |
| hqtray | N | hqtray.exe | VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to "run multiple operating systems simultaneously on a single PC." It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product | Yes |
| VMware hqtray | N | hqtray.exe | VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to "run multiple operating systems simultaneously on a single PC." It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product | Yes |
| VMware Workstation | N | hqtray.exe | VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to "run multiple operating systems simultaneously on a single PC." It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product | Yes |
| HR | U | Hr.exe | HiddenRecorder periodically takes screenshots of the computer. If you didn't install this yourself remove it | No |
| Hrn_qtv | X | hrnsvc32.exe | Added by the SDBOT-AET WORM! | No |
| HSF Start | X | HSF.exe | Detected by Dr.Web as Trojan.KeyLogger.11004 and by Malwarebytes Anti-Malware as Trojan.Agent.Gen | No |
| Hslodrjwjshdkqwg.exe | X | Hslodrjwjshdkqwg.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %AppData% | No |
| HEProtect | Y | HSockPE.exe | Part of the AntiSpam function of the HAURI ViRobot Desktop internet security suite | No |
| HSON | U | HSON.exe | Toshiba HotStart button support for instant-on entertainment on their laptops | No |
| HiSch | X | HSSearch.exe | Detected by McAfee as Generic.dx and by Malwarebytes Anti-Malware as Adware.Kraddare | No |
| hsswdi | X | hsswd.exe | Detected by McAfee as RDN/Generic BackDoor and by Malwarebytes Anti-Malware as Backdoor.Agent | No |
| ihsswd | X | hsswd.exe | Detected by McAfee as RDN/Generic BackDoor and by Malwarebytes Anti-Malware as Backdoor.Agent | No |
| HSTrans | U | hstrans.exe | Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen | No |
| MegaPanel | U | HSTrans.exe | Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen | No |
| HsuGuiControl | ? | HsuGuiControl.exe | Part of the Starband Internet satellite client. What does it do and is it required? | No |
| syswin.txt | X | hsx.exe | Added by the SPYBOT.HW WORM! | No |
| hsys | U | HSYS.EXE | Keylogger Express keystroke logger/monitoring program - remove unless you installed it yourself! | No |
| Home Security Solutions | X | HS[random characters].exe | Home Security Solutions rogue security software - not recommended, removal instructions here | No |
| DORAMIZ | X | htdschk.exe | Detected by McAfee as Generic.tfr!cb and by Malwarebytes Anti-Malware as Trojan.Agent.DM | No |
| Windows Update | X | htdschk.exe | Detected by Malwarebytes Anti-Malware as Backdoor.IRCBot. The file is located in %System% - see here | No |
| run= | X | htmlsync.exe | Searchforfree.info browser hijacker | No |
| HTpatch | U | htpatch.exe | HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6% | No |
| sys_Runtt1 | X | htroot.exe | Added by the NILAGE.FY TROJAN! | No |
| htssv32.exe | X | htssv32.exe | Added by a variant of the SDBOT BACKDOOR! | No |
| HTTP.sys | X | http.exe | Detected by McAfee as RDN/Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent.DC | No |
| Internet Explorer | X | http.exe | Added as part of a new potential CWS infection, and part of a suite of programs that installs a web server, php, ftp server, socks, and mail server on your computer without your knowledge. These files are known to be part of an infection that transmits information about your bank accounts, passwords, and other financial information. It should be deleted immediately, you should enable your firewall, and you should contact your financial services in order to report the issue and to have your passwords changed | No |
| Default_Page_URL | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| Default_Search_URL | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| First Home Page | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| Local Page | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| Search Page | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| Start Page | X | http://find.naupoint.com | Naupoint browser hijacker | No |
| https-ssl | X | https.exe | Added by the MOEGA.D WORM! | No |
| afpupdate | X | HttpSrv.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.CTMen. The file is located in %AppData% - see here | No |
| RDSound | X | Huawei3g.exe | Added by the LUIHA-AD TROJAN! | No |
| Log Policy Input Video Connection Network TP | X | huazljabrp.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.CLU. The file is located in %AppData%\vzbrdbozpvu - see here | No |
| HubHelperUpdate.exe | X | HubHelperUpdate.exe | Detected by Malwarebytes Anti-Malware as Adware.KorAd. The file is located in %AppData%\HubHelper | No |
| GIGABYTE Gamer HUD | U | HUD.exe | Gigabyte's Gamer HUD graphics card utility. Primarily used for overclocking to adjust the voltage and working frequency of the GPU, Shader, and video memory | No |
| GIGABYTE Gamer HUD Lite | U | HUD.exe | Lite version of Gigabyte's Gamer HUD graphics card utility. Primarily used for overclocking to adjust the voltage and working frequency of the GPU, Shader, and video memory | No |
| hufeacebzedy | X | hufeacebzedy.exe | Detected by Sophos as Troj/Cutwail-AJ and by Malwarebytes Anti-Malware as Trojan.Agent.US | No |
| huhdir | ? | huhdir.exe | ?? | No |
| voowsmcr | ? | huhdir.exe | ?? | No |
| huifitc | X | huifitc.exe | Added by the ONLINEGAMES.ABGW TROJAN! | No |
| human | X | human.exe | Detected by Kaspersky as Trojan-Dropper.Win32.Agent.akap. Note - the file is located in %AllUsersStartup% and its presence there ensures it runs when Windows starts | No |
| Uwezig | X | humom.exe | Added by the MULTIDR-CR TROJAN! | No |
| hunvaxeabawy | X | hunvaxeabawy.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile% - see here | No |
| myhuy | X | huy.exe | Added by the BLASTER-C WORM! | No |
| myhuy | X | huy2.exe | Added by the BLASTER-L WORM! | No |
| huySosat | X | huysosat.exe | Added by the MDROP-RG TROJAN! | No |
| MSConfig | X | huzmrexf.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %UserProfile% | No |
| Hvid | X | Hvid.exe | Added by the GEMA TROJAN! | No |
| DRam prosessor | X | HWAPI.exe | Detected by Kaspersky as Backdoor.Win32.Rbot.aeu. Note - this is not the McAfee HackerWatch process which has the same filename | No |
| Hardware Doctor | U | Hwdoctor.exe | Winbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds, voltages, temperatures. Only required if you're concerned about your system temperature - typically for "overclocked" systems | No |
| HWINFO* | X | HWINFO* | Added by the PUROL WORM! where * is a random character | No |
| ToolHelp | X | hwpv.exe | Added by a variant of the INFOSTEALER TROJAN! | No |
| hws | X | hws.exe | Added by the STARTPA-CT TROJAN! | No |
| HWSetup | U | HWSetup.exe hwSetUP | "Toshiba Hardware Setup is the Toshiba configuration management tool available through Windows." Allows the user to change BIOS, hard disk, memory, boot disk priority and other settings | No |
| Hawking HWU54G Utility | U | HWU54G.exe | Wireless management utility for the HWU54G Mini Wireless-G USB Adapter from Hawking Technologies, Inc | No |
| Hawking Wireless Utility | U | HWU8DD.exe | Wireless management utility for the HWU8DD Hi-Gain™ USB Wireless-G Dish Adapter from Hawking Technologies, Inc | No |
| Hardware Profile | X | hxdef.exe | Added by the LOVGATE.AB WORM! | No |
| Soft Profile Inc | X | hxdef.exe | Detected by Trend Micro as WORM_LOVGATE.E | No |
| Hardware Profile | X | hxdef.exe... | Added by the LOVGATE.Z WORM! | No |
| Soft Profile Inc | X | hxdef.exe... | Added by the LOVGATE.AO WORM! | No |
| HXDL.EXE | X | HXDL.EXE | Aveo Attune automated helpdesk software - regarded as adware | No |
| HXIUL.EXE | X | HXIUL.EXE | Aveo Attune automated helpdesk software - regarded as adware | No |
| Explorer | X | hxpf.exe | Added by the DELF-DMZ TROJAN! | No |
| [various names] | X | hyandex.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| ATI Technologies Inc. HydraVision Desktop Manager | U | HydraDM.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which "customizes the behaviour of windows and dialog boxes, allows you to set up Hotkeys for navigation in multiple display configurations and applies special effects like transparency and shadows to you desktop" | Yes |
| HydraDM | U | HydraDM.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which "customizes the behaviour of windows and dialog boxes, allows you to set up Hotkeys for navigation in multiple display configurations and applies special effects like transparency and shadows to you desktop" | Yes |
| HydraVisionDesktopManager | U | HydraDM.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which "customizes the behaviour of windows and dialog boxes, allows you to set up Hotkeys for navigation in multiple display configurations and applies special effects like transparency and shadows to you desktop" | Yes |
| ATI Technologies Inc. HydraVision Viewport | U | HydraMD.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which "creates, organizes and arranges up to nine active multi-monitor desktop combinations and allows you to cycle between them with a mouse." There is an optional System Tray icon or a hotkey can be configured to cycle through the desktops | Yes |
| HydraMD | U | HydraMD.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which "creates, organizes and arranges up to nine active multi-monitor desktop combinations and allows you to cycle between them with a mouse." There is an optional System Tray icon or a hotkey can be configured to cycle through the desktops | Yes |
| HydraVisionViewPort | U | HydraMD.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which "creates, organizes and arranges up to nine active multi-monitor desktop combinations and allows you to cycle between them with a mouse." There is an optional System Tray icon or a hotkey can be configured to cycle through the desktops | Yes |
| Razer Hydra Driver | U | HydraSysTray.exe | Razer Hydra gaming controller driver - required if you use the additional features and programmed keys/macros | No |
| hyfpyxhutsiz | X | hyfpyxhutsiz.exe | Detected by McAfee as RDN/Generic Dropper!g and by Malwarebytes Anti-Malware as Trojan.Agent.US | No |
| hrhyr | X | hyper.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\microsoft | No |
| yryrh | X | hyper.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\microsoft | No |
| Hyperappel du Petit Larousse 2007 | U | Hyperappel.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2007 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Hyperappel du Petit Larousse 2008 | U | Hyperappel.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2008 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Hyperappel du Petit Larousse 2009 | U | Hyperappel.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2009 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| Hyperappel du Petit Larousse 2010 | U | Hyperappel.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within the 2010 version of the "Petit Larousse" French dictionary/encyclopaedia from Larousse Publishers | No |
| MS Unix Binary | X | hypertrm.exe | Added by a variant of Win32/Rbot | No |
| RUNHYPER | X | hyperx.exe | PurityScan/Clickspring adware | No |
| *Prauge DVDRam Version 2.3A* | X | hypinit32.exe | Added by the BUZUS.POV TROJAN! | No |
| Prauge DVDRam Version 2.3A | X | hypinit32.exe | Added by the BUZUS.POV TROJAN! | No |
If you can help identify new entries and verify/identify those entries with a "?" status (especially hardware specific - such as laptops and motherboards) then please E-mail us (startups_at_pacs-portal_dot_co_dot_uk).
"Status" key:
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of start-up applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at start-up. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all malware entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost.exe" above for example. Multiple malware can also use the same start-up entries, in this case only those with significant differences (such as file location) are repeated in this database.
As more than 15K entries in this database related to malware you should use a quality internet security package. Which ever you choose, keep it updated and get the latest version at least every two years.
There are a number of virus and malware entried listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
NOTE: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. We fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
Presentation, format & comments Copyright © 2001 - 2012 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Powered by Malwarebytes
All rights reserved
| Privacy Policy | Site Map | Home |