Windows startup programs - Database search

Message Board

Windows startup programs - Database search

If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original start-up programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. For further information on this and how to identify and disable start-up programs please visit the Introduction page.

See here for further information on random entries - which are typically added by viruses and other malware or unwanted programs.

Last database update :- 29th Apr, 2013
31819 items listed

You can search for any of the following terms to find and display entries in the start-up programs database but the minimum search is 3 characters and you must click on the "Search" button. Results are sorted by the Startup Item/Name field.

From MSConfig (Start → Run → msconfig → Startup): Startup Item, Command
From Registry Editor (Start → Run → regedit): Name, Data
From SysInternals free AutoRuns utility: AutoRun Entry, Filename from "Image Path"
From Windows Defender for XP/Vista (Tools → Software Explorer): Display Name, Filename
O4 entries from Trend Micro's HijackThis or similar logging utilities: Text highlighted here - [this text] or here - "Startup: this text.lnk", Filename
Any other text

Alternatively, you can browse the full database (without the search facility) over a number of pages or you can use the alphabetical index below to list the entries for that letter by the Command/Data field, but the results may take longer to appear due to the number of them:

A | B | C | D | E | F | G | H | I | J | K | L | B | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

NOTE: Searching for common words (i.e. "the" or "where") will mean the results take longer to appear due to the number of them.

Please click on the Search button

314 results found for J

Startup Item or Name	Status	Command or Data	Description	Tested
Jufualt	X	j2.exe	Added by the SDBOT-ALJ WORM!	No
eFax 4.1	U	J2GDllCmd.exe	DLL Command Utility for version 4.1 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.2	U	J2GDllCmd.exe	DLL Command Utility for version 4.2 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.3	U	J2GDllCmd.exe	DLL Command Utility for version 4.3 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.4	U	J2GDllCmd.exe	DLL Command Utility for version 4.4 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax DllCmd	U	J2GDllCmd.exe	DLL Command Utility for eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax DllCmd 3.5	U	J2GDllCmd.exe	DLL Command Utility for version 3.5 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax DllCmd 4.0	U	J2GDllCmd.exe	DLL Command Utility for version 4.0 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax Live Menu 3.3	U	J2GDllCmd.exe	DLL Command Utility for version 3.3 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.1	U	J2GTray.exe	System Tray access to version 4.1 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.2	U	J2GTray.exe	System Tray access to version 4.2 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.3	U	J2GTray.exe	System Tray access to version 4.3 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax 4.4	U	J2GTray.exe	System Tray access to version 4.4 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax Tray Menu	U	J2GTray.exe	System Tray access to eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax Tray Menu 3.3	U	J2GTray.exe	System Tray access to version 3.3 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax Tray Menu 3.5	U	J2GTray.exe	System Tray access to version 3.5 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
eFax Tray Menu 4.0	U	J2GTray.exe	System Tray access to version 4.0 of eFax Messenger from j2 Global Communications, Inc. - which "is powerful Internet fax software that makes it easy to create, annotate, sign, zoom and print faxes from any computer"	No
jvsoft	X	j3ewro.exe	Added by the ONLINEG.AFU WORM!	No
A5118r	X	j6321422.exe	Added by the BRONTOK-AK WORM and variants!	No
J6nULNb348MK	X	J6nULNb348MK.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %Root%\J6nULNb348MK	No
[random name]	X	j?vaw.exe	PurityScan adware	No
JA Cfg Util v2	X	jacfg2.exe	Added by the RBOT-AL WORM!	No
jafatgortycx	X	jafatgortycx.exe	Detected by McAfee as PWS-Zbot.gen.apy and by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile%	No
[various names]	X	JAguAr.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page	No
Norton Personal Firewall	X	jah.exe	Added by a variant of the RBOT WORM! See here	No
Casino Royale	X	jamesbond.exe	Added by the RBOT-FZO WORM!	No
Jammer	U	jammer.exe	Jammer by Agnitum - "Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"	No
Jammer2nd	X	Jammer2nd.exe	Added by the NETSKY.Z WORM!	No
*JanisRuckenbrodII	X	janis.com	Added by the POPS WORM!	No
ADOBESYSTEMS	X	jar.exe	Detected by McAfee as PWS-Zbot.gen.aru and by Malwarebytes Anti-Malware as Backdoor.Agent	No
Java (VM) v6.9	X	jav.bat	Detected by Sophos as Troj/Agent-GZK	No
Java VM v6.9.2	X	jav.bat	Added by the DWNLDR-HLM TROJAN!	No
Java VM v6.91	X	jav.bat	Added by the DWNLDR-HLL TROJAN!	No
Microsoft Word Profissional	X	Java Plug In close.exe	Added by the BANKER-EL TROJAN!	No
Java Runtime Update	X	Java Update.exe	Added by an unidentified VIRUS, WORM or TROJAN! See here. The file is located in %UserTemp%\IXP00[random digit].TMP	No
Java Update	X	Java Update.exe	Detected by Dr.Web as Trojan.MulDrop3.37603. The file is located in %AppData%	No
Java Update	X	Java Update.exe	Detected by Kaspersky as Trojan-Dropper.Win32.Injector.pmb and by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%\L3G!T-Labs\jdvs\0.0.0.0	No
java1	X	Java Update.exe	Detected by Dr.Web as Trojan.DownLoader4.13619 and by Malwarebytes Anti-Malware as Trojan.VBKrypt	No
Java(TM) Platform	X	Java(TM) Platform.exe	Detected by Dr.Web as Trojan.DownLoader5.11796 and by Malwarebytes Anti-Malware as Trojan.MSIL	No
GlassFishWorks Oracle™	X	Java(TM) 7u#.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen - where # represents one or more numbers. The file is located in %System%\Oracle	No
JavaPush2.1	X	Java(TM) 7u#.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen - where # represents one or more numbers. The file is located in %System%\Oracle	No
Policies	X	Java(TM) 7u#.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen - where # represents one or more numbers. The file is located in %System%\Oracle	No
Java*.exe [ = random char]	X	Java*.exe [ = random char]	CoolWebSearch/HomeSearch adware - for examples, see this log	No
Java*32.exe [ = random char]	X	Java*32.exe [ = random char]	CoolWebSearch/HomeSearch adware - for examples, see this log	No
Sun MicroSystem	X	java-update.exe	Detected by Kaspersky as Trojan.Win32.Genome.lhki and by Malwarebytes Anti-Malware as Trojan.Agent	No
HKCM	X	Java.exe	Detected by McAfee as Generic.dx!bh3e and by Malwarebytes Anti-Malware as Backdoor.Agent.RGen	No
java	X	java.exe	Detected by Malwarebytes Anti-Malware as MSIL.LockScreen. The file is located in %AppData%	No
java	X	java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.RV. The file is located in %System%\wbem	No
Java	X	Java.exe	Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %Temp%\Java	No
Java	X	Java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Vbkrypt. The file is located in %Temp%\Java Sun	No
Java	X	Java.exe	Detected by McAfee as RDN/Generic.bfr!bc and by Malwarebytes Anti-Malware as Backdoor.Bot. The file is located in %AppData%\Java	No
Java	X	Java.exe	Detected by Sophos as Troj/Mdrop-EYP and by Malwarebytes Anti-Malware as Trojan.Agent	No
Java (TM) Platform	X	Java.exe	Detected by McAfee as RDN/Generic.bfr!d	No
Java Update	X	Java.exe	Detected by Dr.Web as Trojan.MulDrop2.48031	No
java updatex	X	Java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Vbkrypt. The file is located in %Temp%\Java Sun	No
Java.exe	X	Java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%	No
Java.exe	X	Java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.AI. The file is located in %Root%	No
Java.exe	X	Java.exe	Detected by McAfee as RDN/Generic.bfr!d. The file is located in %AppData%\Java	No
JAVACHED	X	Java.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %AppData%\bin	No
JavaVM	X	java.exe	Added by the MYDOOM.M WORM and variants! Note - not to be confused with the valid Windows "java.exe" which is located in %System% as this is located in %Windir%	No
Microsoft Synchronization Manager	X	java.exe	Added by a variant of W32/Sdbot.worm	No
npnp	X	java.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.CPL. The file is located in %AllUsersProfile%\Menu Iniciar\Programas	No
Policies	X	Java.exe	Detected by McAfee as Generic.dx!bh3e and by Malwarebytes Anti-Malware as Backdoor.Agent.RGen	No
Windows Service Ajav	X	java128.exe	Added by the RBOT.BNG WORM!	No
Jufualt	X	java2.exe	Added by the SDBOT.AOE WORM!	No
Java Softe	X	Java32.com	Added by the RBOT.ECN WORM!	No
MicroSun Java	X	java32.exe	Detected by Trend Micro as WORM_RBOT.BRX	No
JavaApplicationtKit	X	JavaAK.exe	Detected by Malwarebytes Anti-Malware as Trojan.AutoIt. The file is located in %AppData%\JavaAK	No
MS Java Applets for Windows NT & XP	X	javaapplet.exe	Added by the RBOT.BHG WORM!	No
MS Java Applets for Windows NT, ME	X	javaapplets.exe	Added by the VANEBOT-B WORM!	No
Sun Microsystems, Inc. S.A	X	javacheck.exe	Added by a variant of PWS-Banker!hc3. The file is located in %AppData%\Microsoft\Windows\Start Menu\Programs (7/Vista) or %UserPofile%\Start Menu\Programs (XP)	No
Sun Microsystems, Inc. S.A	X	javacheck.exe	Detected by McAfee as PWS-Banker!hc3 and by Malwarebytes Anti-Malware as Trojan.Banker. The file is located in %UserProfile%\AppData\LocalFiles	No
JavaCore	X	JavaCore.exe	Detected by McAfee as Matcash. The file is located in %ProgramFiles%\JavaCore	No
Windows Defender	X	javacp.exe	Detected by Sophos as Troj/VB-FLZ and by Malwarebytes Anti-Malware as Trojan.Agent.Gen	No
Sun Java Updater v4	X	javacpl.exe	Added by the AUTORUN.EVE WORM!	No
SunUpdater	X	javacpl.exe	Added by the BUZUS.AGEV WORM!	No
SunJavaUpdateSched v3.5	X	javacq.exe	Added by the PROLACO-A WORM!	No
javadoc	X	javadoc.exe	Added by the AGENT.CE BACKDOOR!	No
elegido	X	javaextension.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.ZPT. The file is located in %AppData% - see here	No
Java	X	javains.exe	Detected by Dr.Web as Trojan.DownLoader4.35867 and by Malwarebytes Anti-Malware as Trojan.Agent.JVGen	No
SunJavaUpdaterv12	X	javajar.exe	Added by the VBINJECT-D MALWARE!	No
Sun Java Updater v5	X	javajre.exe	Added by the AUTORUN-XI WORM!	No
JavaLauncher	X	JavaLauncher.exe	Detected by Malwarebytes Anti-Malware as Trojan.Onlinegames. The file is located in %AppData%\JavaLauncher	No
SunJava Updater v7	X	javale.exe	Added by the ACKANTTA.B WORM!	No
Service Monitor	X	javams32.exe	Detected by Sophos as Troj/Delf-NK	No
Service Monitor	X	javams64.exe	Added by the SDBOT-AFO WORM!	No
SunJavaUpdateSched	X	javamx.exe	Added by the SDBOT-WI WORM!	No
SunJavaUpdaterv14	X	javan.exe	Detected by McAfee as W32/Routrobot.worm	No
MS Java for Windows XP & NT	X	javanet.exe	Added by the VANEBOT-A WORM!	No
javapl	X	javapl	Detected by McAfee as RDN/Generic PWS.y and by Malwarebytes Anti-Malware as Backdoor.Agent	No
Sun Java Security Plugin	X	javaplugin.exe	Detected by McAfee as RDN/Generic.tfr!r and by Malwarebytes Anti-Malware as Trojan.Inject	No
Java update	X	javaqs.exe	Added by the SWARLEY.A WORM!	No
Etraffic	X	JavaRun.exe	TopMoxie adware	No
topmoxie	X	JavaRun.exe	TopMoxie adware	No
JavaRuntimePE	X	JavaRunNW.exe	Detected by Dr.Web as Trojan.PWS.Multi.1017	No
JavaRuntimey	X	JavaRuntimey.scr	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.DC. The file is located in %AppData%\System Configuration	No
java-plugin	X	javasctp.exe	Added by the VB.AMX TROJAN!	No
Java RunTime SDK	X	JavaSDK.exe	Detected by ESET as Win32/VB.NYT	No
Sunjava	X	javasmart.exe	Added by the AGENT.AHV TROJAN!	No
JavaSoft	X	JavaSoft.exe	Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen	No
Policies	X	JavaSoft.exe	Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen	No
scvhost	X	JavaSoft.exe	Detected by Dr.Web as Trojan.DownLoader2.48558	No
javasun	X	javasun.exe	Detected by Malwarebytes Anti-Malware as Trojan.Banker. The file is located in %Root%\java sun	No
JavaTM0512	X	JavaTM0512.exe	Detected by McAfee as RDN/Generic BackDoor and by Malwarebytes Anti-Malware as Backdoor.Agent.DC	No
JavaTUpdate	X	JavaTUpdate.exe	Detected by McAfee as RDN/Generic BackDoor!p and by Malwarebytes Anti-Malware as Backdoor.Agent.DC	No
Java applet	X	javaup.exe	Added by the SDBOT-ACF WORM!	No
Kaspersky Email Security	X	javaupd.exe	Added by the SWARLEY.A WORM!	No
SunJavaUpdateSched	X	javaupd.exe	Added by the SISCOS.VA TROJAN!	No
3fc0f2282a8aad20e9973738d93f539b	X	javaupdate.exe	Detected by Dr.Web as Trojan.DownLoader7.32309 and by Malwarebytes Anti-Malware as Trojan.Agent	No
HKCU	X	javaupdate.exe	Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %ProgramFiles%\Java	No
HKCU	X	javaupdate.exe	Detected by Kaspersky as Trojan.Win32.Llac.bdm and by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %System%\microsoft\Java	No
HKLM	X	javaupdate.exe	Detected by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %ProgramFiles%\Java	No
HKLM	X	javaupdate.exe	Detected by Kaspersky as Trojan.Win32.Llac.bdm and by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %System%\microsoft\Java	No
Java	X	JavaUpdate.exe	Detected by McAfee as Generic BackDoor!dho	No
Java_Update	X	JavaUpdate.exe	Detected by McAfee as RDN/Generic.dx!v and by Malwarebytes Anti-Malware as Backdoor.Messa.Gen	No
JavaUpdate	X	JavaUpdate.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Messa. The file is located in %AppData%	No
JavaUpdate.exe	X	JavaUpdate.exe	Detected by McAfee as Generic BackDoor!1fq and by Malwarebytes Anti-Malware as Trojan.Banker	No
Javaupdater	X	Javaupdate.exe	Detected by Kaspersky as Backdoor.Win32.BotNet.n	No
Policies	X	javaupdate.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %ProgramFiles%\Java	No
Policies	X	javaupdate.exe	Detected by Kaspersky as Trojan.Win32.Llac.bdm and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %System%\microsoft\Java	No
rat	X	JavaUpdate.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Bot. The file is located in %MyDocuments%\DCSCMIN	No
Windows Defender	X	JavaUpdate.exe	Detected by Dr.Web as Trojan.MulDrop3.57125 and by Malwarebytes Anti-Malware as Trojan.Agent.Gen	No
Java Update Checker	X	JavaUpdate.jar	Added by the INCRAT HACKTOOL!	No
MicroUpdate	X	Javaupdated.exe	Detected by McAfee as Generic BackDoor.xa and by Malwarebytes Anti-Malware as Backdoor.Agent.DC. The file is located in %AllUsersProfile%\Start Menu\JavaCA	No
SunJavaUpdaterv13	X	javaupdater.exe	Detected by Kaspersky as Trojan.Win32.Inject.angt	No
JavaUploader	X	JavaUploader.exe	Detected by Dr.Web as Troj/DotNet-G and by Malwarebytes Anti-Malware as Backdoor.Bot	No
Microsoft Java Virtual Machine	X	javavm.exe	Added by a variant of Win32/Rbot	No
MS Java virtual machine	X	javavm.exe	Detected by Trend Micro as WORM_RBOT.ABG	No
WebSavingsFromEbates	X	javaw [path to code]	Ebates "Web Savings" adware - aka TopMoxie adware. "javaw.exe" is an Oracle (was Sun Microsystems) file located in %ProgramFiles%\Java used to view Java applications. The associated "Web Savings" files are located in %ProgramFiles%\WebSavingsFromEbates	No
command	X	javaw.exe	Detected by Sophos as W32/Agobot-LG. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
Java auto-updater	X	javaw.exe	Detected by Sophos as Troj/Agent-RUT. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %AppData%	No
Java Virtual Machine	X	javaw.exe	Added by a variant of Win32/Rbot. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
Java(TM) Updater	X	javaw.exe	Detected by Kaspersky as Trojan-Dropper.Win32.Dapato.wdp. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %AppData%	No
javaw	X	javaw.exe	Detected by Dr.Web as Trojan.DownLoader6.13879 and by Malwarebytes Anti-Malware as Bacdoor.Bot. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %AppData%	No
javaw.exe	X	javaw.exe	Detected by Kaspersky as Worm.Win32.Bybz.apr. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %AppData%\Microsoft	No
MicrosoftCorp	X	javaw.exe	Detected by Kaspersky as Trojan.Win32.Buzus.bulo. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
MicrosoftNAPC	X	javaw.exe	Detected by Kaspersky as Trojan.Win32.Buzus.bulo. Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
SunJavaUpdater	X	javaw.exe	Added by the MYTOB.QR WORM! Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
SunJavaUpdater v2	X	javaw.exe	Added by the AGENT.AEFE TROJAN! Note - this is not the legitimate Oracle (was Sun Microsystems) file of the same name located in %ProgramFiles%\Java which is used to view Java applications. This one is located in %System%	No
Swap Nut	N	javaw.exe	javaw.exe can be loaded by other programs at startup but in this instance it's SwapNut, a peer-to-peer file sharing and searching utility developed and marketed by File Metrics, Inc. Users can search for and find almost any type of digital file (audio, video, photos etc.) through a secure peer-to-peer network	No
javaw.exe.exe	X	javaw.exe.exe	Detected by Dr.Web as Trojan.Siggen3.37155 and by Malwarebytes Anti-Malware as Trojan.Agent	No
windows_startup	X	javawin.exe	Added by the NURECH TROJAN!	No
javawsa.exe	X	javawsa.exe	Added by the BANK-Y TROJAN!	No
JavaStartKit	X	JavaWSK.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%\JavaWebSK	No
Cisco Systems VPN client	X	javawss.exe	Detected by McAfee as W32/Routrobot.worm	No
Java sun	X	Javawx.exe	Detected by Malwarebytes Anti-Malware as Trojan.Dropper. The file is located in %AppData%\Java sun	No
Javawx Update	X	Javawx.exe	Detected by Malwarebytes Anti-Malware as Worm.Rebhip. The file is located in %AppData%\Java suns	No
Policies	X	Javawx.exe	Detected by Malwarebytes Anti-Malware as Trojan.Dropper. The file is located in %AppData%\Java sun	No
Sun Java Updater v7.4	X	javawx.exe	Added by the ACKANTTA.B WORM!	No
Java X Run Class	X	javax.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %Temp%	No
java suns	X	javaxr.exe	Detected by Malwarebytes Anti-Malware as Trojan.Sombra. The file is located in %AppData%\Java sun	No
26b80c51bbadde62edff0404f8948746	X	Jave.exe	Detected by Dr.Web as Trojan.DownLoader7.12453 and by Malwarebytes Anti-Malware as Trojan.MSIL	No
jawa32	X	jawa32.exe	Added by the AGENT.BG WORM!	No
Jawa322	X	jawa32.exe	Added by a variant of the AGENT.BG trojan	No
Windows Live Messenger	X	jbmYZEakOeSphSPfDGzA.exe	Detected by Sophos as Troj/Banbra-LC and by Malwarebytes Anti-Malware as Trojan.MSIL	No
Java Runtime Environment	X	jbuild.exe	Added by the DELBOT-J WORM!	No
Sun Java Console for Windows NT & XP	X	jconsole.exe	Added by the VANEBOT-C WORM!	No
RunJava	X	jcview.exe	Added by the AUTORUN-BEL WORM!	No
Service Registry NT Save	X	jdbgmgrnt.exe	Detected by Sophos as Troj/Bancos-CG	No
MSAdmin	X	jdbgmrg.exe	Added by the DASMIN.A TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here	No
MSConfigr	X	jdbgmrg.exe	Added by the DASMIN.C TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here	No
qaswww	X	jdsuml.exe	Added by the BUZUS.CQMU TROJAN!	No
A.EXE	X	jeabykcdxjaba.exe	Detected by McAfee as Generic.dx and by Malwarebytes Anti-Malware as Trojan.Agent.Agen	No
Windows MS Update 32	X	jebote.exe	Added by the FORBOT-GK WORM!	No
l80vS6v3d3gK1y1®	X	jedVOIjq46.exe	Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %AppData%\R2hSJYgkwAAgZCO	No
Windows Service Agccnt	X	jeqcfyo.exe	Added by the RBOT-GST WORM!	No
a	X	jesse.exe	Added by the MELO-A WORM!	No
jetdsd.exe	X	jetdsd.exe	Detected by Malwarebytes Anti-Malware as Trojan.Banker. The file is located in %Windir%	No
JfuBwuna	X	jfubwuna.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.AI. The file is located in %LocalAppData%\bydojrej and %UserStartup% and its presence there ensures it runs when Windows starts	No
jfziem	X	jfziem.exe	Added by the AGENT-NPL WORM!	No
Jgncnl	X	Jgncnl.exe	Detected by Malwarebytes Anti-Malware as Trojan.FkClean. The file is located in %AppData%	No
ChromeUpdate	X	jgssis.exe	Detected by Dr.Web as Trojan.DownLoader6.37415	No
RPC Service	X	jgszznv.exe	Added by the RBOT-EMS WORM!	No
JgUJevQpNnePtDM	X	JgUJevQpNnePtDM.exe	Windows Recovery rogue security software - not recommended, removal instructions here	No
Jiddtvxrkoarxnuc.exe	X	Jiddtvxrkoarxnuc.exe	Detected by Malwarebytes Anti-Malware as Trojan.FakeCC. The file is located in %AppData%	No
WINDOWS	X	jif.exe	Added by the MYTOB.MK WORM!	No
JB	N	Jiffybar.exe	"Get Paid As You surf" application	No
uwuxusif	X	jijikete.exe	Detected by Trend Micro as WORM_SDBOT.AXW	No
Jing	U	Jing.exe	Jing screen/video capture utility from TechSmith Corporation	No
jiupi	X	jiupi.exe	Added by the CHANGEUP-C WORM!	No
jivekkuljujy	X	jivekkuljujy.exe	Detected by McAfee as PWS-Zbot.gen.ari and by Malwarebytes Anti-Malware as Trojan.Crypt	No
jjanggametoolbar	X	jjanggametoolbar.exe	Detected by Dr.Web as Trojan.Click2.16351 and by Malwarebytes Anti-Malware as Trojan.ChinAd	No
JJangQ	X	JJangQC.exe	Detected by AVG as OpenShopper.D and by Malwarebytes Anti-Malware as Adware.KorAd. The file is located in %ProgramFiles%\JJangQ	No
JJangQSearchBarOS	X	JJangQSearchBar.exe	Detected by AVG as OpenShopper.A and by Malwarebytes Anti-Malware as Adware.KorAd. The file is located in %ProgramFiles%\JJangQ\JJangQSearchBar	No
Microsoft Update Setup	X	jjdrive32.exe	Detected by Microsoft as Worm:Win32/Pushbot.OF and by Malwarebytes Anti-Malware as Backdoor.Bot	No
msjava critical update	X	jjfixer.exe	Detected by Sophos as Troj/Hector-A	No
WinUpdtr	X	jkduhy.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.Gen. The file is located in %AppData%	No
Microsoft Update Machine	X	jkfrnz.exe	Added by the RBOT-GOZ WORM!	No
Microsoft Update Machine	X	jkydxg.exe	Added by the RBOT.AEA BACKDOOR!	No
Protocol Intelligent Process	X	jlipfave.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %System%	No
JMB36X IDE Setup	U	JMInsIDE.exe	JMB36x series IDE (or Parallel ATA) configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers	No
JmpyxPEOWqPO	X	JmpyxPEOWqPO.exe	Added by the FAKEAV-DAQ TROJAN!	No
36X Raid Configurer	Y	JMRaidSetup.exe	JMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers	No
JMB36X Configure	Y	JMRaidSetup.exe	JMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers	No
JMB36X Configure	U	JMRaidTool.exe	JMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers	No
Creata Mail	U	JMSrvr.exe	Creata_Mail. Smileys, stationary and more for you email. Required if you want to access the program from Outlook or Outlook Express	No
Usb driver	X	jmv2.exe	Added by the RANDEX.AV WORM!	No
msjavadll	X	jnana.tsa	Added by the JNANABOT TROJAN!	No
Windows Service Agent	X	jnxrcyc.exe	Added by the RBOT.XAT BACKDOOR!	No
JobHisInit	U	JobHisInit.exe	Used by Ricoh network printers to enable network printing from the client	No
Microsoft Config Setup	X	jodrive32.exe	Added by the BACKDR-EY BACKDOOR!	No
JogServ2	U	JogServ2.exe	"Jog Dial" on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features	No
JOGSERV2.EXE	U	JogServ2.exe	"Jog Dial" on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features	No
vscan	X	joke.vbs	Added by the ROOKIE-A TROJAN!	No
JokerLoader	X	JokerLoader.js	Detected by Malwarebytes Anti-Malware as Malware.Trace. The file is located in %UserProfile%\Joker	No
[various names]	X	jopplerg.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page	No
Launch Norton AntiVirus 2000	X	jorgf.exe	Added by the RBOT-AUI WORM!	No
jotgesadosjy	X	jotgesadosjy.exe	Detected by Dr.Web as Trojan.DownLoader6.62576 and by Malwarebytes Anti-Malware as Trojan.Agent.US	No
jotog	X	jotog.exe	Detected by Malwarebytes Anti-Malware as Trojan.Downloader. The file is located in %UserProfile%	No
JOYTECH USB Neo S Controller	U	JoytechNeoSTrayIcon.exe	System Tray access to Joytech Neo S PC gamepad controller software	No
Game Device	N	JOYUPDRV.EXE	Genius game controller profile activator	No
JeticoPFStartup	Y	jpf.exe	"Jetico Personal Firewall software protects computers against hackers and malicious software when networked or connected to the Internet. It offers detailed, configurable event logs, reports, plus the option to view and edit the firewall configuration. The modular architecture is as open as possible to assist with easier evaluation of the security"	No
king_jp	X	jpking.exe	Added by the AGENT-POO TROJAN!	No
jpupd	X	jpupd.exe	Added by the DIALER.CM TROJAN!	No
java	X	jpxiinstall.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%	No
E2Y7AF5VP621	X	JQ4IGAVB.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%	No
Jqfsfb	X	Jqfsfb.exe	Added by the MDROP-DUY TROJAN!	No
java	X	jqs.exe	Detected by Microsoft as Worm:Win32/Dorkbot.R and by Malwarebytes Anti-Malware as Trojan.Fkjava	No
JQS	X	jqs.exe	Detected by McAfee as RDN/Generic.bfr!a and by Malwarebytes Anti-Malware as Trojan.Agent.QJ	No
Java suns	X	Jqsx.exe	Detected by Malwarebytes Anti-Malware as Trojan.Passwords. The file is located in %AppData%\Java suns	No
Messenger Update	X	Jqsx.exe	Detected by Malwarebytes Anti-Malware as Trojan.Passwords. The file is located in %AppData%\Java suns	No
Systes	X	jrdtifkkxbbsa.exe	Added by the RBOT-ADC WORM!	No
Java Runtime	X	jre.exe	Detected by Dr.Web as Trojan.MulDrop4.8778 and by Malwarebytes Anti-Malware as Trojan.Agent	No
Jreg	X	Jreg2b.exe	FlashEnhancer adware	No
JRESP7	X	JREUPD7.exe	Detected by McAfee as Generic.dx!bh3h and by Malwarebytes Anti-Malware as Trojan.Agent	No
jrun32	X	jrun32.exe	Detected by McAfee as RDN/Generic Dropper and by Malwarebytes Anti-Malware as Backdoor.Agent	No
Chrome Update	X	js83kgso.exe	Detected by McAfee as Generic.dx!bdrk. Note - this is not a legitimate Google Chrome browser file	No
Chrome Updater	X	js8dth3w.exe	Detected by McAfee as Generic Dropper!1p3. Note - this is not a legitimate Google Chrome browser file	No
SunJavaUpdateSched132	X	jschd.exe	Added by the AUTORUN-AQY WORM!	No
Javascript	X	jscript.exe	Added by the DELBOT-AD WORM!	No
Windows Javascript Daemon	X	jsdaemon.exe	Detected by Microsoft as Backdoor:Win32/Rbot.EK	No
JavaScript Debugging Service	X	JsDbgMan.exe	Added by the DERDERO.E WORM!	No
Jsec	X	Jsec.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent.DC. The file is located in %AppData%	No
jserd.exe	X	jserd.exe	Detected by Malwarebytes Anti-Malware as Spyware.PWS. The file is located in %Root%\addons	No
Audio Device	X	jshed.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %AppData%\Install	No
SunJavaUpdateSched v3.4	X	jshed.exe	Added by the BUZUS.AUUB TROJAN!	No
Java Auto Update	X	jsheded.exe	Detected by Dr.Web as Trojan.Siggen5.6039 and by Malwarebytes Anti-Malware as Backdoor.Bot	No
Windows Microsoft Service	X	jsopfuud.exe	Detected by Sophos as Troj/Agent-HCD and by Malwarebytes Anti-Malware as Backdoor.Bot	No
jssvc23	X	jsssvc.exe	Detected by Trend Micro as WORM_RBOT.EIW	No
Java Update Manager	X	jstchde.exe	Added by the SMALL.AWBM TROJAN!	No
ykemkfel	X	jsuyaxatssd.exe	Added by the AGENT-ODY TROJAN!	No
jtoshiba	X	jtoshiba.exe	Detected by McAfee as PWS-Zbot-FAJX!6245B271B2DA and by Malwarebytes Anti-Malware as Trojan.Agent.ZB	No
Windows Defender	X	JTVEBY4Z1V.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.Gen. The file is located in %AppData%\win32	No
MICROSFT NT SUPPORT	X	jtzbpfnkxk.EXE	Added by the RBOT-CMI WORM!	No
jubidiswiror	X	jubidiswiror.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Pushdo. The file is located in %UserProfile%	No
jucheck	X	jucheck.exe	Detected by Symantec as W32.Scrimge.O	No
jucheck.exe	X	jucheck.exe	Detected by Trend Micro as TROJ_BATWIPER.A	No
jucheed	X	jucheed.exe	Detected by Dr.Web as Trojan.DownLoader4.633 and by Malwarebytes Anti-Malware as Backdoor.IRCBot	No
Sun Java Updater v7.11	X	jucshed.exe	Added by the AUTORUN-ABH WORM!	No
SunJavaUpdateSched v3	X	jucshed.exe	Added by the AUTORUN-ABC WORM!	No
System	X	Juegs.exe	Added by the CULLER-C WORM!	No
Juice	N	Juice.exe	Juice - a free utility that "allows you to select and download audio files from anywhere on the Internet to your desktop". This entry is present if you choose the option to add it to the startup group during installation	Yes
VEFXYVZZBNWMJDJPXQZLDQTNB	X	JujvVloUUoRoqjOSRMtPFJxoA.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %AppData%	No
jukaxjyxpolb	X	jukaxjyxpolb.exe	Detected by McAfee as Downloader.a!db3 and by Malwarebytes Anti-Malware as Trojan.Agent.US	No
EleFunAnimatedWallpaper	U	Jungle Waterfall.exe	Jungle Waterfall animated wallpaper from	No
ArVzWJrYn	X	jUOghDDYN.exe	Detected by McAfee as Generic PWS.y!dxb and Malwarebytes Anti-Malware as Trojan.MSIL	No
jupdate	X	jupdate.exe	Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %AppData%	No
USB SECURITY DEVICE CoInstaller	Y	JupitCo.exe	ButterflyMedia USB Flash drive related - required for the password security feature to work	No
JuPo	X	jupos.exe	Added by the SDBOT-CAG WORM!	No
Java developer Script Browse	X	jusched.exe	Detected by Sophos as Troj/VB-ESK. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %Windir%	No
Java Update Manager	X	jusched.exe	Detected by Sophos as CXmal/FkFldr-C and by Malwarebytes Anti-Malware as Trojan.Backdoor.IRC. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %AppData%\HEX-5823-6893-6818	No
Java(TM) Platform SE 6	Y	jusched.exe	Checks with Oracle's (was Sun Microsystems) Java updates site to see if newer Java versions are available. Recommended that you leave this enabled due to potential Java vulnerabilities and exploits that may be used by malware writers	Yes
Java(TM) Platform SE 6 U*	Y	jusched.exe	Checks with Oracle's (was Sun Microsystems) Java updates site to see if newer Java versions are available. Recommended that you leave this enabled due to potential Java vulnerabilities and exploits that may be used by malware writers	Yes
Java(TM) Platform SE Auto Updater 2 0	Y	jusched.exe	Checks with Oracle's (was Sun Microsystems) Java updates site to see if newer Java versions are available. Recommended that you leave this enabled due to potential Java vulnerabilities and exploits that may be used by malware writers	Yes
jusched	Y	jusched.exe	Checks with Oracle's (was Sun Microsystems) Java updates site to see if newer Java versions are available. Recommended that you leave this enabled due to potential Java vulnerabilities and exploits that may be used by malware writers	Yes
jusched	X	jusched.exe	Detected by Dr.Web as Trojan.DownLoad2.45152 and by Malwarebytes Anti-Malware as Trojan.Agent. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %AppData%	No
jusched	X	jusched.exe	Detected by Sophos as Troj/Banker-BOV. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %System%	No
SunJavaUpdateSched	Y	jusched.exe	Checks with Oracle's (was Sun Microsystems) Java updates site to see if newer Java versions are available. Recommended that you leave this enabled due to potential Java vulnerabilities and exploits that may be used by malware writers	Yes
SunJavaUpdateSched	X	jusched.exe	Detected by Kaspersky as Trojan-Downloader.Win32.Agent.etq. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %CommonFiles%	No
SunJavaUpdateSched##	X	jusched.exe	Detected by Sophos as Troj/Lolbot-A and by Malwarebytes Anti-Malware as Trojan.Downloader. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %ProgramFiles%\Java\jre-##\bin - where ## represents numbers	No
SunJavaUpdateSched,	X	jusched.exe	Detected by McAfee as PWS-Zbot and by Malwarebytes Anti-Malware as Trojan.Dropper. Note the addtional "," at the end of the startup name and that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %ProgramFiles%\Java\jre-07\bin	No
SunJavaUpdateSched9	X	jusched.exe	Detected by Sophos as Troj/Lolbot-A. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %Program Files%\Java\jre-09\bin	No
Update	X	jusched.exe	Detected by Kaspersky as Trojan-Downloader.Win32.VB.amx and by Malwarebytes Anti-Malware as Trojan.Agent.VB. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %System%	No
winupdate	X	jusched.exe	Detected by Sophos as Troj/DwnLdr-FUX. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %Windir%	No
wmon	X	jusched.exe	Detected by Sophos as W32/Agobot-OW. Note that this is not the legitimate Oracle (was Sun Microsystems) file of the same name which is usually located in %Program Files%\Java\version number\bin (up to version 6 update 16) or %CommonFiles%\Java\Java Update (from version 6 update 17). This one is located in %System%	No
JavaUpdateSched	X	jusched32.exe	Added by the BCKDR-CKB BACKDOOR!	No
WINTASK DLL	X	jusched32.exe	Added by the MYTOB.AI WORM!	No
A7675373-85EC-453E-B7CF-3CD09AFEFE-1421009279	X	juschedg.exe	Detected by Dr.Web as Trojan.DownLoader8.24522 and by Malwarebytes Anti-Malware as Trojan.Agent	No
WININITST	X	juschedi.exe	Detected by McAfee as Generic Downloader.x!glh and by Malwarebytes Anti-Malware as Trojan.Agent	No
Java	X	jushed.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%\Microsoft	No
Java	X	jushed.exe	Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %AppData%	No
jushed	X	jushed.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %Root%\ProgramData	No
SunJavaUpdateSched v2	X	jushed.exe	Added by the ACKNATTA.B WORM!	No
SunJavaUpdateSched v3.3	X	jushed.exe	Added by the BUZUS.ASUU WORM!	No
SunJavaUpdateSched10	X	jushed.exe	Added by the ACKANTTA.F WORM!	No
jushed32.exe	X	jushed32.exe	CoolWebSearch parasite variant - also detected as the BIZTEN-L TROJAN!	No
pnvifj	X	jusodl.exe	Added by the QQPASS.48436 TROJAN!	No
JussDropUtility	U	JussDrop.exe	Related to DropShots Inc. A subscription based service for family to connect, converse and share photos and videos	No
just	X	just.exe	Detected by Malwarebytes Anti-Malware as Trojan.Banker.Gen. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts - see here	No
Just Gestures	U	JustGestures.exe	Just Gestures by Miroslav Dzurenko - "is an easy and elegant way to enhance your mouse with endless possibilities. The main idea is to get maximum efficiency out of your mouse and use the keyboard as little as possible. The program allows you to create mouse gestures with user-defined actions; you can use mouse movements and click combinations. Just Gestures will recognize gestures you perform and invoke the appropriate actions"	No
JustVoip	N	JustVoip.exe	JustVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype	Yes
Java Update Manager	X	jutched.exe	Detected by Kaspersky as Trojan.Win32.VB.ajyq and by Malwarebytes Anti-Malware as Trojan.Agent.DL	No
jutsu	X	jutsu.exe	Added by the RBOT-LS WORM!	No
juzched	X	juzched.exe	Added by the ZLOB-ATO TROJAN!	No
Jv16pt Network Resident	U	jv16pt_network.exe	jv16 PowerTools network resident program. Only needed if you are using the program's network features	No
javasun	X	jvcsun.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %System%	No
JvcHost	X	jvcsvc32.exe	Added by the AGOBOT-AIU WORM!	No
Microsoft Corporation	X	jview.exe	Added by the RBOT-AOD WORM!	No
Windows Audio Services	X	jvm.exe	Added by the ACKANTTA.F WORM!	No
JVM0	X	JVM0.exe	Added by the BANCBAN-PV TROJAN!	No
jvms.exe	X	jvms.exe	Added by the ORCU.B TROJAN!	No
SunJavaUpdateSched16	X	jvshed.exe	Added by the ACKANTTA.G WORM!	No
MSConfig	X	jwbotgzh.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.Gen. The file is located in %UserProfile%	No
wintask32	X	Jwintask.com	Detected by Sophos as W32/Nafbot-A and by Malwarebytes Anti-Malware as Worm.P2P	No
JW Manager	X	jwmngr.exe	Added by the DELBOT-G WORM!	No
Microsoft Driver Setup	X	Jwrb.exe	Added by the AUTORUN-AOB WORM!	No
MSConfig	X	jwtdkdrw.exe	Detected by Sophos as Troj/Agent-ZYN and by Malwarebytes Anti-Malware as Trojan.Agent	No
jxef1104	X	jxef1104.exe	Added by the XIPI-A WORM!	No
JXL Radio	X	jxl.exe	Added by the RBOT-EBE WORM!	No
Jufualt	X	jxx2.exe	Added by the SDBOT.BTG WORM!	No
jyczozeszexa	X	jyczozeszexa.exe	Detected by McAfee as BackDoor-FAGP!486358B665D3 and by Malwarebytes Anti-Malware as Trojan.Agent.US	No
Jzi16	?	jzi16.exe	??	No
jzvfvsqpc	X	jzvfvsqpc.exe	Detected by Sophos as Troj/Agent-GWP	No
[random characters]	X	j[random].exe	Added by the BRONTOK-AI WORM and variants!	No

Notes & Warnings

If you can help identify new entries and verify/identify those entries with a "?" status (especially hardware specific - such as laptops and motherboards) then please E-mail us (startups_at_pacs-portal_dot_co_dot_uk).

"Status" key:

"Y" - Normally leave to run at start-up
"N" - Not required or not recommended - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Variables:

%System% - refers to the System folder; by default this is
- C:\Windows\System32 (7/Vista/XP)
- C:\Winnt\System32 (2K)
- C:\Windows\System (Me/9x)
%Windir% - refers to the Windows installation folder; by default this is
- C:\Windows (7/Vista/XP/Me/9x)
- C:\Winnt (2K)
%ProgramFiles% - refers to the Program Files folder; typically the path is C:\Program Files
%CommonFiles% - refers to the Common Program Files folder; typically the path is C:\Program Files\Common Files
%Root% - refers to the highest directory level on a hard drive - i.e., C:\, D:\
%UserProfile% - refers to the current user's profile folder; by default this is
- C:\Users\{user} (7/Vista)
- C:\Documents and Settings\{user} (XP/2K)
%AllUsersProfile% - refers to the common profile folder for all users; by default this is
- C:\Users\All Users (7/Vista)
- C:\Documents and Settings\All Users (XP/2K)
%AppData% - refers to the current user's Application Data folder; by default this is
- C:\Users\{user}\AppData\Roaming (7/Vista)
- C:\Documents and Settings\{user}\Application Data (XP/2K)
%CommonAppData% - refers to the common Application Data folder for all users; by default this is
- C:\ProgramData (7/Vista - Note: this directory is hidden by default)
- C:\Documents and Settings\All Users\Application Data (XP/2K)
%LocalAppData% - refers to the current user's Local Application Data folder; by default this is
- C:\Users\{user}\AppData\Local (7/Vista)
- C:\Documents and Settings\{user}\Local Settings\Application Data (XP/2K)
%MyDocuments% - refers to the current user's Documents folder; by default this is
- C:\Users\{user}\Documents (7/Vista)
- C:\Documents and Settings\{user}\My Documents (XP/2K)
%CommonDocuments% - refers to the current user's Documents folder; by default this is
- C:\Users\Public\Documents (7/Vista)
- C:\Documents and Settings\All Users\Documents (XP/2K)
%UserTemp% - refers to the current user's Temp folder; by default this is
- C:\Users\{user}\AppData\Local\Temp (7/Vista)
- C:\Documents and Settings\{user}\Local Settings\Temp (XP/2K)
%WinTemp% - refers to the Windows Temp folder; typically the path is C:\Windows\Temp
%Temp% - refers to either or both of the %UserTemp% and %WinTemp% folders where the location isn't specified, or %Root%\Temp
%Templates% - refers to the current user's Templates folder; by default this is
- C:\Users\{user}\AppData\Roaming\Microsoft\Windows\Templates (7/Vista)
- C:\Documents and Settings\{user}\Templates (XP/2K)
%UserStartup% - refers to the current user's Startup folder; by default this is
- C:\Users\{user}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup (7/Vista)
- C:\Documents and Settings\{user}\Start Menu\Programs\Startup (XP/2K)
%AllUsersStartup% - refers to the All User Startup folder; by default this is
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup (7/Vista - Note: this directory is hidden by default)
- C:\Documents and Settings\All Users\Start Menu\Programs\Startup (XP/2K)

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.

WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of start-up applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at start-up. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

To avoid the database becoming too large, all malware entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost.exe" above for example. Multiple malware can also use the same start-up entries, in this case only those with significant differences (such as file location) are repeated in this database.

As more than 15K entries in this database related to malware you should use a quality internet security package. Which ever you choose, keep it updated and get the latest version at least every two years.

There are a number of virus and malware entried listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program

NOTE: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.

SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. We fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.

Copyright

Presentation, format & comments Copyright © 2001 - 2012 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Powered by Malwarebytes
All rights reserved

Site Map

Home