Windows startup programs - Database search

Message Board

Windows startup programs - Database search

If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original start-up programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. For further information on this and how to identify and disable start-up programs please visit the Introduction page.

See here for further information on random entries - which are typically added by viruses and other malware or unwanted programs.

Last database update :- 29th Apr, 2013
31819 items listed

You can search for any of the following terms to find and display entries in the start-up programs database but the minimum search is 3 characters and you must click on the "Search" button. Results are sorted by the Startup Item/Name field.

From MSConfig (Start → Run → msconfig → Startup): Startup Item, Command
From Registry Editor (Start → Run → regedit): Name, Data
From SysInternals free AutoRuns utility: AutoRun Entry, Filename from "Image Path"
From Windows Defender for XP/Vista (Tools → Software Explorer): Display Name, Filename
O4 entries from Trend Micro's HijackThis or similar logging utilities: Text highlighted here - [this text] or here - "Startup: this text.lnk", Filename
Any other text

Alternatively, you can browse the full database (without the search facility) over a number of pages or you can use the alphabetical index below to list the entries for that letter by the Command/Data field, but the results may take longer to appear due to the number of them:

A | B | C | D | E | F | G | H | I | J | K | L | B | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

NOTE: Searching for common words (i.e. "the" or "where") will mean the results take longer to appear due to the number of them.

Please click on the Search button

213 results found for Q

Startup Item or Name	Status	Command or Data	Description	Tested
Mozilla Firefox Check 8.0.1	X	q09nufv.exe	Detected by Sophos as Mal/DotNet-C and by Malwarebytes Anti-Malware as Backdoor.WPM. The file is located in %AllUsersProfile%	No
Mozilla Firefox Check 8.0.1	X	q1joskv.exe	Detected by Dr.Web as Trojan.DownLoader5.34509 and by Malwarebytes Anti-Malware as Backdoor.WPM	No
uiijeg	X	q3qen9s.exe	Added by the VB-FHC TROJAN!	No
Microsoft Server Applacations	X	Q8See.exe	Added by a variant of Win32/Rbot	No
Uniblue Quick Access	U	qaccess.exe	Quick Access application from UniBlue Systems Ltd - "helps you account for all processes on your computer by providing an additional plug-in for the Windows task manager"	No
QAGENT	N	qagent.exe	Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled, background downloading takes advantage of unused bandwidth to download current financial information anytime your computer is connected to the Internet	No
qappsrvc32.exe	X	qappsrvc32.exe	Detected by Kaspersky as the WEBBER.M TROJAN!	No
XSZDEC	X	QASXDE.exe	Detected by Malwarebytes Anti-Malware as Spyware.Password. The file is located in %AppData%\QASCXDE - see here	No
XSZQWA	X	QASXDE.exe	Detected by Malwarebytes Anti-Malware as Spyware.Password. The file is located in %AppData%\QASCXDE - see here	No
Porcnsm	X	qavbap.exe	Added by the RANCK-CB TROJAN!	No
QuickBooks Delivery Agent	N	QBDAGENT.EXE	As far QAGENT but for QuickBooks. Can also have the version number in the name	No
QBReminderFlash	N	QBReminder.exe	Upgrade reminder for Intuit's QuickBooks	No
qBrowse	?	qbrowse.exe	??	No
QuickBooks Database Server Manager	U	QBServerUtilityMgr.exe	Part of QuickBooks Pro/Premier from Intuit - "QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access." See here for further information	No
Quickbooks Update Agent	N	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not	No
Qchex Tray Icon	U	Qchex.exe	Related to G7 Productivity Systems Check Software	No
QCTray	U	QCTray.exe	System Tray access to IBM Access Connections - forerunner to the current ThinkVantage version. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - "allowing users to seamlessly switch between wired and wireless environments, managing security settings, printers, home page and other location-specific settings automatically"	Yes
QcvaqtH	X	QcvaqtH.exe	Detected by Malwarebytes Anti-Malware as Trojan.Banker. The file is located in %Root%\Arquivos de programas\FvkymuL\MxeyryW	No
QCWLICON	U	QCWLICON.EXE	Part of IBM Access Connections - forerunner to the current ThinkVantage verison. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - "allowing users to seamlessly switch between wired and wireless environments, managing security settings, printers, home page and other location-specific settings automatically." This is the System Tray icon giving notifications of and access to the Wireless Connection Status	Yes
MSConfig	X	qdakrkyd.exe	Detected by McAfee as PWS-FAGF!D7FB85F839B2 and by Malwarebytes Anti-Malware as Trojan.Agent	No
QD FastAndSafe	N	QDCSFS.exe	Automatically runs the "Fast & Safe Cleanup" option from the now discontinued Norton Cleansweep uninstaller/file cleaning utility. Deletes safe to remove files such as Temporary Internet Files (cache) at startup. It's recommended you run it manually on a regular basis	Yes
QDCSFS	N	QDCSFS.exe	Automatically runs the "Fast & Safe Cleanup" option from the now discontinued Norton Cleansweep uninstaller/file cleaning utility. Deletes safe to remove files such as Temporary Internet Files (cache) at startup. It's recommended you run it manually on a regular basis	Yes
QDM	U	QdmStart.exe	QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc	No
QDMStart	U	QdmStart.exe	QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc	No
QdrModule10	X	QdrModule10.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule11	X	QdrModule11.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule12	X	QdrModule12.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule13	X	QdrModule13.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule15	X	QdrModule15.exe	Internet Speed Monitor I adware - see example here	No
QdrModule16	X	QdrModule16.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule17	X	QdrModule17.exe	Internet Speed Monitor adware variant - see example here	No
QdrModule9	X	QdrModule9.exe	Internet Speed Monitor H adware - see example here	No
QdrPack10	X	QdrPack10.exe	Internet Speed Monitor H adware - see example here	No
QdrPack11	X	QdrPack11.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack12	X	QdrPack12.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack13	X	QdrPack13.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack14	X	QdrPack14.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack15	X	QdrPack15.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack16	X	QdrPack16.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack17	X	QdrPack17.exe	Internet Speed Monitor adware variant - see example here	No
QdrPack9	X	QdrPack9.exe	Internet Speed Monitor adware - see example here	No
disgx	X	qdwwdtx.exe	Added by the SDBOT.BGF WORM!	No
Swdaswdw	X	qdwwdtx.exe	Added by the SDBOT.BGF WORM!	No
yoink	X	qdwwdtx.exe	Added by the SDBOT.BGF WORM!	No
qefiklixubib	X	qefiklixubib.exe	Detected by McAfee as PWS-Zbot-FAHU!880343AE561C and by Malwarebytes Anti-Malware as Trojan.Agent.US	No
qegigaztugpe	X	qegigaztugpe.exe	Detected by Malwarebytes Anti-Malware as Trojan.Inject. The file is located in %UserProfile%	No
Qexplo	?	Qexplo.exe	??	No
QFan Help	?	QFanHelp.exe	Part of the AI Suite system management utility included with some performance ASUS motherboards. "Asus Fan Xpert (aka QFan3) intelligently allows you to adjust bot the CPU and chassis fan speeds according to different ambient temperatures caused by different climate conditions in different geographic regions and your PC's system loading". Can user's with a supported motherboard (such as the Maximus II Formula and P7P55D-E Premium) confirm whether this is required for correct operation?	Yes
QFanHelp	?	QFanHelp.exe	Part of the AI Suite system management utility included with some performance ASUS motherboards. "Asus Fan Xpert (aka QFan3) intelligently allows you to adjust bot the CPU and chassis fan speeds according to different ambient temperatures caused by different climate conditions in different geographic regions and your PC's system loading". Can user's with a supported motherboard (such as the Maximus II Formula and P7P55D-E Premium) confirm whether this is required for correct operation?	Yes
QFanHelp.exe	?	QFanHelp.exe	Part of the AI Suite system management utility included with some performance ASUS motherboards. "Asus Fan Xpert (aka QFan3) intelligently allows you to adjust bot the CPU and chassis fan speeds according to different ambient temperatures caused by different climate conditions in different geographic regions and your PC's system loading". Can user's with a supported motherboard (such as the Maximus II Formula and P7P55D-E Premium) confirm whether this is required for correct operation?	Yes
QuickFinder Scheduler	N	QFSCHD100.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)	No
QuickFinder Scheduler	N	QFSCHD110.EXE	Used in Corel WordPerfect Office 11 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here	No
QuickFinder Scheduler	N	QFSCHD130.EXE	Used in Corel WordPerfect Office X3 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here	No
QuickFinder Scheduler	N	QFSched.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)	No
PJ8L04EUDQ	X	qfslmbkr.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.RND. The file is located in %CommonAppData%\qhinudgt	No
qvqe	X	qgebv.exe	Added by the AGOBOT-OJ WORM!	No
QGY Start	X	QGY.exe	Detected by Malwarebytes Anti-Malware as Spyware.Keylogger.H. The file is located in %System%\UCJNNV	No
qhfw	Y	qhfw.exe	System Tray access to and notifications for an older version of Quick Heal Firewall. Based upon the Outpost Firewall by Agnitum Ltd	Yes
Quick Heal Firewall Pro	Y	qhfw.exe	System Tray access to and notifications for an older version of Quick Heal Firewall. Based upon the Outpost Firewall by Agnitum Ltd	Yes
Quick Heal Messenger	U	QHM32.EXE	Part of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Enables the "Quick Heal messenger service which provides important information about latest threats, updates and other information related to Quick Heal"	No
Quick Heal Startup Scan	Y	QHSTRT32.EXE	Part of Quick Heal Antivirus. Optionally scans the system boot area for programs trying to automatically execute before Windows loads and keeps a watch on some system files which are commonly patched (or replaced) by malware	No
Quick Hide Windows	U	qhw.exe	Quick Hide Windows from CronoSoft - "provides a quick and easy way for home and office PC users to quickly get sensitive materials off the screen without closing programs or losing documents"	No
Infium	U	qip.exe	QIP (Quiet Internet Pager) Infium multiprotocol instant messaging client	No
QIP Internet Guardian	U	QipGuard.exe	Start page guard related to the QIP (Quiet Internet Pager) Infium multiprotocol instant messaging client. Translate this Russian page if you want to know more	No
LVILUJA471F0	X	QJPW1FZJ.exe	Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %AppData%	No
qjybkgwgvkmehmd	X	qjybkgwg.exe	Detected by Malwarebytes Anti-Malware as Trojan.Ransomer.WO. The file is located in %Windir%	No
QuikShield	N	qkshield.exe	QuikShield popup blocker - reportedly stealth installed, see here	No
qktier	X	qktier.exe	Detected by Kaspersky as Worm.Win32.VBNA.isu. The file is located in %UserProfile%	No
Quicklink III	N	QL.EXE	HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode, that is, to receive faxes after a certain number of rings. Available via Start → Programs	No
U4Q7WMJ6WVZB8	X	QL64NPHF8JC.exe	Detected by McAfee as Generic.tfr!c and by Malwarebytes Anti-Malware as Trojan.Agent	No
QlbCtrl	U	QlbCtrl.exe	HP Quick Launch Buttons control center on their laptops	No
Windows Defender	X	QLJJMXM17Q.exe	Detected by Sophos as Troj~VBDwnLdr-C and by Malwarebytes Anti-Malware as Trojan.Agent.Gen	No
QMusic	?	QMAgent.exe	??	No
Winamp Media	X	qmedia.exe	Added by the DIAZMON-A TROJAN!	No
disc detector	?	qnetquestnotifty.exe	??	No
QQ[Chinese characters]	X	qnetsvr.exe	Detected by Ikarus as Trojan-Downloader.Win32.Delf and by Malwarebytes Anti-Malware as Trojan.ChinAd. THe file is located in %ProgramFiles%\qnetsvr	No
Qnext	U	qnext.exe	"Qnext is the world's most advanced communication and sharing suite"	No
QNPlus	N	QNPlus.exe	Quick Notes Plus by Conceptworld - sticky notes tool	No
QnX	X	qnx.exe	Added by the ACKANTTA WORM!	No
HOT FIX	X	QOching.exe	Added by the WOOTBOT.VH WORM!	No
Windows Service Network	X	qodvzpmdiaj.exe	Added by the RBOT-GUV WORM!	No
qoecuy	X	qoecuy.exe	Added by the VB-ERV TROJAN!	No
QOELOADER	U	QOELoader.exe	Installed with older versions of CA anti-spam tools - both as a stand-alone product or as part of a security suite. Scans and filters your E-mail for spam. Now incorporated into CA Internet Security Suite Plus. Formerly Qurb until their acquisition by CA	Yes
QOELoader Application	U	QOELoader.exe	Installed with older versions of CA anti-spam tools - both as a stand-alone product or as part of a security suite. Scans and filters your E-mail for spam. Now incorporated into CA Internet Security Suite Plus. Formerly Qurb until their acquisition by CA	Yes
QPService	U	QPService.exe	HP QuickPlay - "brings your favorite music and movies to life with the touch of a button"	No
WDrvr32SSL	X	qpws32.exe	Added by the SDBOT.AQO WORM!	No
load	X	QQ.exe	Added by the QUADRULE.A WORM! Note - this is not the Tencent QQ Asian instant messanger program which is located in %Windir%	No
QQ.exe	X	QQ.exe	Added by a variant of the SDBOT WORM! Note - this is not the Tencent QQ Asian instant messanger program and resides in the Windows folder	No
QQServer	X	QQ.exe	Added by the DOWNLDR-AN TROJAN!	No
Tencent QQ	N	QQ.exe	Tencent QQ Asian instant messanger program	No
NRESmart Workstation	X	QQBrowserUpdateService.exe	Detected by Trend Micro as TROJ_XKILL.A and by Malwarebytes Anti-Malware as Trojan.Agent. Note - do not confuse with the updater for the legitimate Tencent QQ Asian instant messenger program which runs as a service (QQBrowser Software Updater) with the same filename but is normally located in %ProgramFiles%\Tencent\QQBrowser. This one is located in %UserTemp%	No
[Chinese characters]	X	qqceec.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqceec	No
QQ[Chinese characters]	X	qqcenot.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqcenot	No
[Chinese characters]	X	qqcorb.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqcorb	No
QQ[Chinese characters]	X	qqcore.exe	Detected by Malwarebytes Anti-Malware as Trojan.StartPage. The file is located in %ProgramFiles%\qqcore	No
QQ[Chinese characters]	X	qqdonet.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqdonet	No
QQExternal.exe	X	QQExternal.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.QQ. The file is located in %System%	No
SysDeskqqfx	X	qqfx.exe	Added by the QQPASS.H TROJAN!	No
system32	X	QQGame.exe	Added by the QQPASS-AC TROJAN!	No
X8TWLAUG4B796U	X	QQM9NZ4DT.exe	Added by the AGENT-RPT TROJAN!	No
qqmall	X	qqmall.exe	Detected by Dr.Web as Trojan.Siggen5.9777	No
[Chinese characters]	X	qqntde.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqntde	No
c4dd5d0581d03594b950a69a454943d2	X	qqq.exe	Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %Temp%	No
QQSB	X	QQSB.exe	Detected by McAfee as Generic.ca and by Malwarebytes Anti-Malware as Trojan.Agent.QQ	No
360saft	X	QQSKT.EXE	Detected by Malwarebytes Anti-Malware as Trojan.Dropper. The file is located in %ProgramFiles%	No
[foreign characters]	X	qqsrnet.exe	Detected by Malwarebytes Anti-Malware as Trojan.Clicker. The file is located in %ProgramFiles%\qqsrnet	No
QQ[Chinese characters]	X	qqtodet.exe	Detected by Malwarebytes Anti-Malware as Trojan.ChinAd. The file is located in %ProgramFiles%\qqtodet	No
(Default)	X	QQUpdate.exe	Added by the QUADRULE.A WORM! Note - this malware actually changes the value data of the "(Default)" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank	No
Smarthruengine	U	QS.exe	Samsung smarthru software, used with Lexmark Z82 or Samsung multifunction printers	No
Qscan	X	QScan.exe	Qscan rogue security software - not recommended, removal instructions here	No
Quantifier Security	X	qsecue.exe	Added by the SPYBOT.UOL WORM!	No
QuickenSEMessage	N	Qsemsg.exe	Quicken option	No
MSOfficeCfg	X	qservice.exe	Premium rate adult content dialer	No
qservices	X	qservice.exe	Added by the PROGENT-A TROJAN!	No
SystemService	X	qservice.exe	Premium rate adult content dialler	No
CONNECTION PC CONFIGURATION	X	qsfodrsxr.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %System%	No
Encarta Dictionary Quickshelf	N	QSHLFED.EXE	Provides quick access to Encarta's Dictionary features?	No
userinit	X	qsjtmw.exe	Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Trojan.Agent	No
QSort2000	N	QSORT.EXE	Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"	No
zcproo	X	qssstiej.exe	Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise	No
vdsoarsv	X	qstviuhsjmo.exe	Antivirus .NET rogue security software - not recommended	No
LManager	U	QtaET2S.EXE	Acer Launch Manager - on Acer laptops, provides configurability for the special keys on their range of multimedia keyboards	No
Microsoft	X	qtask.exe	Added by the RBOT-GCA WORM!	No
QTaskStartup	U	qtask.exe	Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly, it is only required for the Desktop Alerts feature	No
Windows Update	X	qtask.exe	Detected by Sophos as W32/Rbot-AKU and by Malwarebytes Anti-Malware as Backdoor.IRCBot. Note - do not confuse with the Quicken file of the same name	No
60xu9	X	qtfcyyp.exe	Added by the VIRUT.CE VIRUS!	No
Quick Time Updater	X	qtime8_32.exe	Added by the DWNLDR-IIZ TROJAN!	No
QUBCity	?	qtp.exe	??	No
RegistryMonitor1	X	qtplugin.exe	Added by the DELF-EZY TROJAN!	No
[various filenames]	X	qtsks.exe	Added by the WEBDOR.Y TROJAN	No
QTSTUB.EXE	N	Qtstub.exe	Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders	No
QTTask	N	QTTask.exe	System Tray access to Apple's QuickTime Player media player from version 5 onwards. Disabling this entry via the programs preferences leaves the entry in place but it no longer runs	Yes
Quick Time Task	N	qttask.exe	System Tray access to Apple's QuickTime Player media player from version 5 onwards. Disabling this entry via the programs preferences leaves the entry in place but it no longer runs	No
QuickTime	X	qttask.exe	Added by the AGENT-ENG TROJAN! Note - this is not the legitimate Apple "Quick Time" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %System%	No
QuickTime	N	QTTask.exe	System Tray access to Apple's QuickTime Player media player from version 5 onwards. Disabling this entry via the programs preferences leaves the entry in place but it no longer runs	Yes
QuickTime Task	N	QTTask.exe	System Tray access to Apple's QuickTime Player media player from version 5 onwards. Disabling this entry via the programs preferences leaves the entry in place but it no longer runs	Yes
QuickTime Task	X	qttask.exe	Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not the legitimate Apple "Quick Time" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %ProgramFiles%\WebMediaViewer	No
Quicktime	X	qttasks.exe	Added by the ADCLICK-AK TROJAN!	No
QuickTime Task	X	qttasks.exe	CoolWebSearch parasite variant	No
SheduIer	X	qttasks.exe	Added by a variant of Troj/Bdoor-EB	No
QtVprMtx	U	QTVPRMTX.EXE	Multimedia keyboard driver from Dritek System Inc	No
RegistryWm	X	qtwm.exe	Detected by Microsoft as Backdoor:Win32/Wombot.A and by Malwarebytes Anti-Malware as Trojan.Agent	No
Launch Manager	U	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state	Yes
LManager	U	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state	Yes
QtZgAcer	U	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state	Yes
LManager	U	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state	No
QtZpAcer	U	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state	No
Mozilla Firefox Check 8.0.1	X	qu5eukv.exe	Detected by Malwarebytes Anti-Malware as Backdoor.WPM. The file is located in %CommonAppData%	No
auto repair system	X	qualityx.exe	Added by an unidentified WORM or TROJAN - probably a SPYBOT variant	No
service updaer	X	qualityz.exe	Added by an unidentified VIRUS, WORM or TROJAN! - probably a SPYBOT variant	No
quartz	X	quartz.exe	Malware installed by different rogue security software including SpyKillerPro	No
qucgopogkade	X	qucgopogkade.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile%	No
DefencerGBA	X	quebra.exe	Detected by McAfee as Generic Downloader.x!glh and by Malwarebytes Anti-Malware as Spyware.Banker	No
Queensla	?	Queensla.exe	??	No
Quest Calendar	U	Quest Calendar.exe	Calendar gadget included with the Quest theme for MyColors from Stardock Corporation	No
Quest Clock	U	Quest Clock.exe	Clock gadget included with the Quest theme for MyColors from Stardock Corporation	No
Start	Y	Quick95.exe	For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone	No
QBRSR	X	QuickBrowser.exe	top-banners.com adware	No
LogitechQuickCamRibbon	N	Quickcam.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
Quickcam	N	Quickcam.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
Quickcam.exe	N	Quickcam.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
LogitechQuickCamRibbon	N	QuickCam10.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
QuickCam10	N	QuickCam10.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
QuickCam10.exe	N	QuickCam10.exe	Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled, System Tray access is also available to the main user interface "ribbon" - otherwise you'll have to use the desktop shortcut or Start menu to display it. Run it manually when required unless you use it all the time	Yes
QuickCamPro	U	QuickCamPro.exe	System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example, auto FTP Upload, etc	No
Exif Launcher	U	QuickDCF.exe	USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly	No
QuickDVBT	U	QuickDVB-T.exe	AVerTV_DVB-T connects Digital TV with your PC or Notebook and allows you to watch free-to-air digital terrestrial television channels with no subscription to pay	No
quicken	X	quicken.exe	CoolWebSearch Therealsearch parasite variant	No
QuickHealCleaner	X	QuickHealCleaner.exe	QuickHealCleaner rogue spyware remover - not recommended, removal instructions here. A member of the WiniGuard family	No
QuickInstallPack	X	QuickInstallPack.exe	Installed and used by rogue security products such as Cleaner2009, AntiMalwareSuite, SecureExpertCleaner and System Guard Center	No
QuickLaunchEr	Y	QuickLaunchEr.Exe	QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray	No
PhotoWise QuickLink	N	quicklnk.exe	Agfa PhotoWise - "PhotoWise QuickLinkTM lets you drag and drop photos right from the camera into your document (applications must be OLE-compliant). Use PhotoWise to print contact sheets and photographic prints. Create slide shows, screen savers, wallpaper and more."	No
Quicknote	N	quicknote.exe	JC&MB Quicknote Virtual Scrapbook	No
QuickRes	N	QUICKRES.EXE	Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel → Display. Not required unless you have to change resolutions on a regular basis	No
Dell QuickSet	N	quickset.exe	Dell utility which provides the user with easy access to configure settings such as power management, icon and font size and displays System Tray and on-screen notifications when function keys are pressed - for volume, brightness, Num-Lock and Wi-Fi on/off for example	No
QuickSet	U	QuickSet.exe	Dell utility which provides the user with easy access to configure settings such as power management, icon and font size and displays System Tray and on-screen notifications when function keys are pressed - for volume, brightness, Num-Lock and Wi-Fi on/off for example	Yes
Browser Infrastructure Helper	X	QuickShare.exe	QuickShare ad-supported browser enhancement by Linkury which "simplifies the process of the most common and important actions today, such as sharing online. It enables users to share via the largest social networks with a single click." It can in turn install the Delta toolbar, is typically bundled with freeware and can be removed via Control Panel → Programs and Features	Yes
OpenOffice.org ..*	N	quickstart.exe	OpenOffice.org office suite quick start (where "..*" is the version number)	No
Iomega QuickSync	?	Quicksync.exe	??	No
OpenOffice.org x	N	QUICKS~1.EXE	Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start → Programs. Will automatically be started when any OpenOffice component is started from Start → Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number	No
QuicktimeMngr	X	QuicktimeMngr.exe	Detected by Trend Micro as WORM_WOOTBOT.BA	No
Quick Time file manager	X	quicktimeprom.exe	Added by the SDBOT BACKDOOR!	No
QuickTime Update Completion x	N	quicktimeupdatehelper.exe	Different numbers caused by number of launches. So if 3 updates are made separately, 3 would appear (in theory)	No
LoadFujitsuQuickTouch	U	QuickTouch.exe	Maps the keys on a Fujitsu Siemens Lifebook application panel to various programs and functions	No
QuickTour	N	QuickTour.exe	Runs the QuickTour on the first reboot after installing Logitech's SetPoint software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). The tour is designed to help you get the most out of the device - you can learn about the default settings of your device and how to customize it for the way you work	Yes
QuickTV	U	QuickTV.exe	Infra-red remote control driver for the AVerTV Studio TV tuner/personal video recoder from AVerMedia. Required if you use the remote control	No
QuickTimeUpdate	X	QuickUpdate.exe	Added by the BIFROSE-CW TROJAN!	No
Animated Wallpaper	U	Quiet Thunderstorm.exe	Quiet Thunderstorm animated desktop wallpaper from Desktop Animated	No
QuikSync	N	QUIKSYNC.EXE	Used by Iomega drives. Available via Start → Programs	No
QuitCounter	N	QuitCounter.exe	Quit Counter by Xarka Software - a utility to help quit smoking which "keeps track of various statistics, friends and also congratulates the user with many different graphics on reaching various milestones"	Yes
QuitCounter.exe	N	QuitCounter.exe	Quit Counter by Xarka Software - a utility to help quit smoking which "keeps track of various statistics, friends and also congratulates the user with many different graphics on reaching various milestones"	Yes
AntiVirusProtection	?	qumk.exe	??	No
Quote on Table 3	N	Quote3.exe	Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required	Yes
Quote3	N	Quote3.exe	Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required	Yes
Quote3.exe	N	Quote3.exe	Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required	Yes
qursumarlydf	X	qursumarlydf.exe	Detected by McAfee as Downloader.a!cvx and by Malwarebytes Anti-Malware as Malware.Packer	No
Quick Shelf xx	N	qushelfxx.exe	Places an icon in the system tray for launching MS Bookshelf. Available via Start → Programs"xx" represents the version number - ie, 98, 99	No
Quick View Plus	N	QVP32.EXE	Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start → Programs	No
Quicken Startup	N	QWDLLS.EXE	Quicken option to load DLLs at startup	No
[various names]	X	qwe.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page	No
qwe	X	qwe.exe	Added by the LINEAGE-F TROJAN!	No
Microsoft Update Machine	X	qwerty.exe	Added by a variant of Win32/Rbot. The file is located in %System%	No
QWERTY	?	qwerty.exe	Possibly adult content related adware	No
qwertybot.exe	X	qwertybot.exe	Added by the AGENT.ALF TROJAN!	No
Windows Spooler Control Service	X	qwidh.exe	Added by a variant of the SPYBOT WORM! See here	No
Class Net.TCP Removal Discovery	X	qwnbwxvs.exe	Detected by Malwarebytes Anti-Malware as Trojan.QHost. The file is located in %System%	No
JUpdate 1.1.0	X	qwrtaw5.exe	Detected by McAfee as Generic.tfr!bf	No
Micosoft Loggen	X	qxaw.exe	Added by the SDBOT-ID WORM!	No
qyftegoblari	X	qyftegoblari.exe	Detected by McAfee as Downloader.a!dbd and by Malwarebytes Anti-Malware as Trojan.Agent.US	No
qygronhazepi	X	qygronhazepi.exe	Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %UserProfile%	No
66qiw	X	qz81l2.exe	Detected by Kaspersky as Virus.Win32.Virut.ce. The file is located in %WinTemp%	No
QZNewVer	X	qznewver.exe	Detected by Dr.Web as Trojan.DownLoader5.57283	No
QuickZoneUD	X	QZUpdate.exe	Detected by Dr.Web as Trojan.DownLoader5.57283	No

Notes & Warnings

If you can help identify new entries and verify/identify those entries with a "?" status (especially hardware specific - such as laptops and motherboards) then please E-mail us (startups_at_pacs-portal_dot_co_dot_uk).

"Status" key:

"Y" - Normally leave to run at start-up
"N" - Not required or not recommended - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Variables:

%System% - refers to the System folder; by default this is
- C:\Windows\System32 (7/Vista/XP)
- C:\Winnt\System32 (2K)
- C:\Windows\System (Me/9x)
%Windir% - refers to the Windows installation folder; by default this is
- C:\Windows (7/Vista/XP/Me/9x)
- C:\Winnt (2K)
%ProgramFiles% - refers to the Program Files folder; typically the path is C:\Program Files
%CommonFiles% - refers to the Common Program Files folder; typically the path is C:\Program Files\Common Files
%Root% - refers to the highest directory level on a hard drive - i.e., C:\, D:\
%UserProfile% - refers to the current user's profile folder; by default this is
- C:\Users\{user} (7/Vista)
- C:\Documents and Settings\{user} (XP/2K)
%AllUsersProfile% - refers to the common profile folder for all users; by default this is
- C:\Users\All Users (7/Vista)
- C:\Documents and Settings\All Users (XP/2K)
%AppData% - refers to the current user's Application Data folder; by default this is
- C:\Users\{user}\AppData\Roaming (7/Vista)
- C:\Documents and Settings\{user}\Application Data (XP/2K)
%CommonAppData% - refers to the common Application Data folder for all users; by default this is
- C:\ProgramData (7/Vista - Note: this directory is hidden by default)
- C:\Documents and Settings\All Users\Application Data (XP/2K)
%LocalAppData% - refers to the current user's Local Application Data folder; by default this is
- C:\Users\{user}\AppData\Local (7/Vista)
- C:\Documents and Settings\{user}\Local Settings\Application Data (XP/2K)
%MyDocuments% - refers to the current user's Documents folder; by default this is
- C:\Users\{user}\Documents (7/Vista)
- C:\Documents and Settings\{user}\My Documents (XP/2K)
%CommonDocuments% - refers to the current user's Documents folder; by default this is
- C:\Users\Public\Documents (7/Vista)
- C:\Documents and Settings\All Users\Documents (XP/2K)
%UserTemp% - refers to the current user's Temp folder; by default this is
- C:\Users\{user}\AppData\Local\Temp (7/Vista)
- C:\Documents and Settings\{user}\Local Settings\Temp (XP/2K)
%WinTemp% - refers to the Windows Temp folder; typically the path is C:\Windows\Temp
%Temp% - refers to either or both of the %UserTemp% and %WinTemp% folders where the location isn't specified, or %Root%\Temp
%Templates% - refers to the current user's Templates folder; by default this is
- C:\Users\{user}\AppData\Roaming\Microsoft\Windows\Templates (7/Vista)
- C:\Documents and Settings\{user}\Templates (XP/2K)
%UserStartup% - refers to the current user's Startup folder; by default this is
- C:\Users\{user}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup (7/Vista)
- C:\Documents and Settings\{user}\Start Menu\Programs\Startup (XP/2K)
%AllUsersStartup% - refers to the All User Startup folder; by default this is
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup (7/Vista - Note: this directory is hidden by default)
- C:\Documents and Settings\All Users\Start Menu\Programs\Startup (XP/2K)

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.

WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of start-up applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at start-up. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

To avoid the database becoming too large, all malware entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost.exe" above for example. Multiple malware can also use the same start-up entries, in this case only those with significant differences (such as file location) are repeated in this database.

As more than 15K entries in this database related to malware you should use a quality internet security package. Which ever you choose, keep it updated and get the latest version at least every two years.

There are a number of virus and malware entried listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program

NOTE: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.

SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. We fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.

Copyright

Presentation, format & comments Copyright © 2001 - 2012 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Powered by Malwarebytes
All rights reserved

Site Map

Home