| Status | Autorun name | Command | Description |
| X | standalone.exe | standalone.exe | Added by the AGOBOT-ADS WORM! |
| N | Stardock Central | sdctray.exe | Stardock Central from Stardock Corporation - "is an enhanced download manager that enables users to install and manage Stardock's software products." Now replaced by the Impulse digital distribution platform |
| U | Stardock CursorXP | CursorXP.exe | CursorXP (now replaced by CursorFX) from Stardock Corporation - cursor editing and management utility. Required if you use any cursors or effects supplied with or created by CursorXP |
| U | Stardock Keyboard Launchpad | Keys.exe | Keyboard Launchpad from Stardock Corporation - "can create keyboard short-cuts for your programs, saved clipboards, URLs, system commands, and more." Required if you want to use the custom keyboard shortcuts. Also part of the Object Desktop suite |
| U | Stardock ObjectBar | OBJECT~1.EXE | ObjectBar from Stardock Corporation - "allows users to create their own custom Start bars, finders, pop-up menus, program launchers, wharfs, docks, etc." Required if you want to use the custom ObjectBar theme features. This is the XP MSConfig entry |
| U | Stardock ObjectBar | ObjectBar.exe | ObjectBar from Stardock Corporation - "allows users to create their own custom Start bars, finders, pop-up menus, program launchers, wharfs, docks, etc." Required if you want to use the custom ObjectBar theme features |
| U | Stardock ObjectBar Shareware | OBJECT~1.EXE | ObjectBar from Stardock Corporation - "allows users to create their own custom Start bars, finders, pop-up menus, program launchers, wharfs, docks, etc." Required if you want to use the custom ObjectBar theme features. This is the Vista/7 MSConfig entry |
| U | Stardock ObjectBar Shareware | ObjectBar.exe | ObjectBar from Stardock Corporation - "allows users to create their own custom Start bars, finders, pop-up menus, program launchers, wharfs, docks, etc." Required if you want to use the custom ObjectBar theme features. This is the Windows Defender entry |
| U | Stardock ObjectDock | ObjectDock.exe | ObjectDock from Stardock Corporation - "Organize your shortcuts, programs and running tasks into an attractive and fun animated dock." Required if you want to use standard or custom shortcuts on the dock |
| U | Stardock ObjectDock | OBJECT~1.EXE | ObjectDock from Stardock Corporation - "Organize your shortcuts, programs and running tasks into an attractive and fun animated dock." Required if you want to use standard or custom shortcuts on the dock |
| U | Stardust Screen Saver Control 2003 | SCMain.exe | Screen Saver Control 2003 from Stardust Software - "is a standalone version of our popular screen saver add-on. It allows you to control and configure all your screen savers directly from the system tray" |
| U | Stardust Wallpaper Control 2003 | WCMain.exe | Wallpaper Control 2003 from Stardust Software - "is a standalone version of our popular wallpaper add-on. It allows you to control and configure your wallpaper directly from the system tray, and includes its own uninstaller" |
| U | StarSkin | starskin.exe | StarSkin allows you to change the view and appearance of your Windows XP box with the use of publically available themes |
| Y | Start | Quick95.exe | For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone |
| X | Start | windows.vbs | Homepage hijacker |
| ? | start | start.exe | ?? |
| X | start | sdcc.exe | Added by the AGENT.CSX TROJAN! |
| X | start | isfmntr.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details |
| X | start | sbmntr.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details. This particular one is "NetProject" |
| X | start | iebtm.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details |
| X | Start aThe Roll | enotxa2.exe | Added by the RBOT-PV BACKDOOR! |
| X | Start aThx Roll | f0mered.exe | Added by the RBOT.AAV WORM! |
| X | Start CurePCSolution | CurePCSolution.exe | CurePCSolution rogue spyware remover - not recommended, removal instructions here |
| X | start extracting | spoolvse.exe | Added by the RBOT-XF WORM! |
| X | start extracting | spoolvs.exe | Added by the RBOT.BAN WORM! |
| X | start extracting | mcafee.exe | Added by the RBOT.FO BACKDOOR! Note - this is not a valid McAfee program and is located in %System% |
| N | Start Getright | getright.exe | Entry added with older versions of the GetRight download manager from Headlight Software, Inc. Start it manually unless you want to intercept download links from your browser |
| X | Start It Upping | svchosets.exe | Added by a variant of the RBOT WORM! |
| U | Start Network Scanner Tool | sdFTP.exe | Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents" |
| X | Start Page | http://find.naupoint.com | Naupoint browser hijacker |
| X | Start Page | svcnt32.exe | Homepage hijacker, also detected as Trojan-Downloader.Win32.Delf.ks |
| Y | Start RF Wireless Keyboard | ktrexe.exe | Yuanxun Electronics RF wireless keyboard driver |
| Y | Start RF Wireless Mouse | cm20.exe | Yuanxun Electronics RF wireless mouse driver |
| U | Start Service | upssrv.exe | Cyber Power PowerPanelPlus software. "During a power failure the system automatically saves and closes open files within the battery backup time and safely powers down your computer" |
| X | Start The Roll | enotax2.exe | Added by the RBOT.XO WORM! |
| U | Start Up Cop | startcop.exe | StartUp Cop - startup manager |
| X | start uploading | smsss.exe | Added by a variant of the SDBOT WORM! |
| X | start uploading | crsss.exe | Added by the RBOT-SZ WORM! |
| X | Start Upping | taksmgr.exe | Added by the RBOT-QK WORM! |
| X | Start Upping | mcrt32.exe | Added by a variant of the SPYBOT WORM! |
| X | Start Upping | windupds.exe | Added by the SDBOT.AFH WORM! |
| X | Start Upping | windupdts.exe | Added by a variant of the RBOT WORM! |
| X | Start Upping | xdcc.exe | Added by the SPYBOT.OY WORM! |
| X | Start Upping | spoolnt.exe | Added by the RBOT-TM WORM! |
| X | Start Upping | iexplorerupdt.exe | Added by the RBOT-RR WORM! |
| X | Start Upping | taskmrg.exe | Added by the RBOT-MA WORM! |
| X | Start Upping | SVCHOSTES.EXE | Added by the RBOT-NB WORM! |
| X | Start Uppings | svcchosts.exe | Added by the SDBOT.VY WORM! |
| X | Start Uppings | mssupdate.exe | Added by a variant of the RBOT WORM! |
| N | Start Wingman Profiler | lwtest.exe | Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer, it's best to leave it unchecked |
| N | Start Wingman Profiler | LWEMon.exe | Part of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed |
| X | Start Xp Setup | msxp.exe | Added by the RBOT.AKK WORM! |
| U | Startacc | startacc.exe | Launches Webroot's Accelerate 2000 software that "speeds up your Internet connection by up to 300%". Leave enabled if you find it improves internet connection |
| N | StartCCC | CLIStart.exe | Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs |
| X | startdrv | startdrv.exe | Added by the DROPRK-A TROJAN! |
| U | StartEAK | StartEAK.exe | Easy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys |
| U | StartEase | StartEase.exe | StartEase from PC Magazine - application launcher that managed programs in the Windows Start menu into an A-to-Z menu structure |
| X | startemdoit | [path to trojan] | Added by the DLOADR-AVP TROJAN! |
| X | Starter | scvhosting.exe | Added by the SDBOT.RU WORM! |
| X | starter | scvhostingg.exe | Added by the FORBOT-FB WORM! |
| X | starter | iexplore.exe | Added by the FORBOT-DU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System% |
| U | StartFoxie | StartFoxie.exe | Foxie Suite from Softonic International. "This suite of free tools comes in the form of an Internet Explorer add-on and includes a mix of powerful security enhancements" |
| X | Starting up | wvsvc.exe | Added by the RBOT-NF WORM! |
| X | startkey | svcmgr.exe | Added by the HIPPER-B TROJAN! |
| X | startkey | update.exe | Added by the BIFROSE-DG TROJAN! |
| X | startkey | XMCHAI.EXE | Added by the BIFROSE-AO TROJAN! |
| X | startkey | explore32.exe | Added by the BDOOR-MT BACKDOOR! |
| X | startkey | CKOTS.exe | Added by the BIFROSE-HM TROJAN! |
| X | StartKey | pligde.exe | Added by the BIFROSE.E TROJAN! |
| X | startkey | RunWinRaR.exe | Added by a variant of the BIFROSE-LV TROJAN! |
| X | startkey | Mysia.exe | Added by the CEP TROJAN! |
| X | startkey | explorer.exe | Added by the BCKDR-MLD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System% |
| X | startkey | furzi.exe | Added by the BIFROSE-OK TROJAN! |
| X | startkey | krnl.exe | Added by the BIFROSE-S TROJAN! |
| X | startkey | royale.exe | Added by a variant of the SDBOT WORM! |
| X | startkey | rtfmsv.exe | Added by the EDEPOL-C TROJAN! |
| X | startkey | scvhost.exe | Added by the BIFROSE-PM TROJAN! |
| X | startkey | server.exe | Added by the BIFROSE-DB TROJAN! |
| X | startkey | win32i.exe | Added by the BIFROSE-R TROJAN! |
| X | startkey | winampXP.exe | Added by the BIFROSE-OY TROJAN! |
| X | startkey | svchost32.exe | Added by a variant of the SDBOT WORM! |
| X | startkey | winlogin.exe | Added by the BIFROSE-PM TROJAN! |
| X | startkey | antivir.exe | Added by the BIFROSE-TO TROJAN! |
| X | startkey | svchost.exe | Added by the AGENT-FPL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | StartKey | msnmsie.exe | Added by the BIFROSE.M BACKDOOR! |
| N | startl.exe | startl.exe | Lingocom LingoWare - translates any application into your language |
| ? | StartMen Application | MUIStartMenu.exe | Part of various video and audio utilities from CyberLink - including (but not limited to) LabelPrint, Power2Go, DVD Suite, PowerProducer and PowerDirector. The exact purpose of this entry is unknown at present but it unloads from memory once run. The command line varies depending upon the product |
| X | StartMenu | deamon.exe | Added by the TACTSLAY.C TROJAN! |
| X | StartMenu | msgaol.exe | Added by the TACTSLAY.C TROJAN! |
| X | StartMenu | s_menu.exe | Added by the TACTSLAY.C TROJAN! |
| X | StartMenu | browse.exe | Added by the DROWSY-C TROJAN! |
| X | startpage | startpage.exe | Browser hijacker - redirecting to pages2start.com |
| U | STARTPAGE | start1.exe | NoSpy.org - prevents spyware from changing your startpage and other browser properties. The start1.exe file is located in a NOSPY.ORG folder |
| X | StartReplySystem | loadnewmessage.exe | Added by the HIDAGENT-B WORM! |
| U | StartSecurDoc | SDPin.exe | SecurDoc from WinMagic Inc - "Provides full disk encryption to protect sensitive information stored on laptops, desktops and PDAs" |
| U | StartStop | STARTSTOP.EXE | StartStop from TFI Technology - startup manager |
| U | StartSurfing | STARTS.exe | Start Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start -> Programs |
| N | Startup | ?? | Related to an Iomega drive |
| X | Startup | WinlogonStartup | Unidentified malware |
| X | Startup | mirc.exe | Added by the FLOOD-EU TROJAN! An uninstall option for mirc.exe can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as mIRC. This one puts 10 files in %Windir% |