Home Computer Repair Online - Startup Applications List

Home Computer Repair Online Startup Applications List

Home » Welcome to the Startup Applications List
Status Code Key:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  • To lookup a startup program by file name, click the letter it starts with or use the search feature.

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z - Other

    Status CodeNameCommand Description
    NLXSUPMONLXSUPMON.EXELexmark Printer. The printer should work fine without it
    XLzioMediaUpdaterLzioMediaUpdater.exeLZIO.com adware downloader
    ?LXBRKskLXBRKsk.exeLexmark printer related. What does it do and is it required?
    Ylxbrbmgrlxbrbmgr.exeLexmark printer button manager. Required for correct operation
    ?LXBLKskLXBLKsk.exeLexmark related. What does it do, and is it required?
    ?LXbbmgrLXbbmgr.exeLexmark printer button manager? Is it required?
    NLwinst Run Profilerlwtest.exeLogitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
    ?lxamsp32lxamsp32.exeAssociated with a Lexmark Printer - is it required?
    ULWBMOUSEMOUSE32A.EXEMouse driver - required if you use non-standard Windows driver features
    ?LVCOMSXLVCOMSX.EXELogitech webcam related. What does it do and is it required?
    ULWBMOUSElwbwheel.exeMouse driver - required if you use non-standard Windows driver features
    ULVComslvcoms.exeLvcomm server. Related to Logitech Quick Cam - works fine without it but it is needed for the Logitech ImageStudio software to connect to the camera
    YLTWinModem1ltmsg.exeOne of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
    XLTSMSGShell32.exeAdded by the LEMIR.B TROJAN!
    ULtMohLtmoh.exeModem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
    YLTMSGltmsg.exeOne of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
    NLTSMMSGLTSMMSG.exeLucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too
    XLTM2bible.exeAdded by the LITMUS.203 TROJAN!
    XLTM2winupdate.exeAdded by the LITMUS.203 TROJAN!
    XLTM2MSGSRV320.EXEAdded by the LITMUS.C TROJAN!
    XLTM2MPGSRV32.EXEAdded by the LITMUS.201 TROJAN!
    XLTM2MSGSRV32.EXEAdded by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem
    XLTDMgrLTDMgr.exePowerStrip foistware
    YLT DAEMONltdaemon.exeActs as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
    XLSvrLSvr.exePowerStrip foistware
    Xlssasslssas.exeAdded by the AGOBOT.RL WORM!
    XLSPmonitorLSPmonitor.exeeAcceleration Stop-Sign related - foistware. Read their privacy statement here
    XLSPFixLSPmonitor.exeeAcceleration Stop-Sign related - foistware. Read their privacy statement here
    Xlsasss.exelsasss.exeAdded by the SASSER.E WORM!
    Xlsass servicelsass2.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    Xlsasslsasrv.exeAdded by the MYDOOM.AG WORM!
    Xlsass[path to lsass.exe]Added by the ALADINZ.F TROJAN! Note - this is not the legitimate lasss.exe process which should NOT appear in Msconfig/Startup!
    Xlsassstart.batAdded by the ZCREW TROJAN!
    Xlsasslsass.exeAdded by the RATSOU.B TROJAN! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
    NLS120 Superdisk??Supposed to accelerate transfer rate on LS-120, contributes to system lockups
    ULPtasklptask.exeProgram Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted
    ULPSLps.exeLocal Port Scanner - "With LPS you're able to check your computer for open or listening ports"
    XLpr123Lpr123.exeAdded by an unidentified password stealer trojan
    XLowVersionSupport[filename]Added by the LASTRAS TROJAN!
    ULotus SuiteStartsuitest.exePuts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs
    NLotus QuickStartsmartctr.exeLotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs
    NLotus Organizer EasyClipeasyclip.exe"The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs
    XLookup_Syslookupsys.exeP04n trojan
    YLook 'n' Stoplooknstop.exeLook 'n' Stop personal firewall
    ULogWatchlogwat95.exeLicensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied
    XLogon.exelogon.exeHomepage hijacker
    ULogonStudiologonstudio.exeWinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users"
    ULogi_MwxLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
    NLogitechVideoTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    NLogiTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    ULogitechVideoRepairISStart.exeLogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
    ?LogitechSoftwareUpdateManifestEngine.exeUpdater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required
    NLogitechImageStudioTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    ULogitechGalleryRepairISStart.exeLogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
    NLogitech Wakeuplgwakeup.exeLoads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images
    ULogitech UtilityLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
    ?Logitech Hardware Abstraction LayerKhalmnpr.exeLogitech Bluetooth mouse Hardware Abstraction layer. A "hardware abstraction layer" is an interface that enables adding support for new devices and new ways of connecting devices to the computer, without modifying every application that uses the device. What does it do, and is it required?
    NLogitech Desktop Messengerldmconf.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    NLogitech Desktop Messengerbackweb-8876480.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    XLoginPassportLgnpsp32.exeAdded by the REDIST.C WORM!
    XLogin Service[path to file]Added by the MIGMAF TROJAN!
    ULoginwinlog.exeSalfeld Child Control 2003 - parental control software
    ULock My PClockpc.exeLock_My_PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen, disables Windows hot keys and mouse
    XLocal Pagehttp://find.naupoint.comNaupoint browser hijacker
    ?LoadWatcherTest.exeReportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct?
    XLoadWindowsFile[filename]Added by the DELF.B TROJAN! where [filename] is the infected file
    Xloads.exesuploads.exePopuppers.com adware downloader
    XLoadSIPSrundll32.exe [path] SIPSPI32.dll, SIPSPI32123Mania adware
    Xloads.exemedload.exePopuppers.com adware downloader
    Xloads.exeloads.exePopuppers.com adware downloader
    XLoadPowerProfileRundll32.exeAdded by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line
    ULoadQMloadqm.exeInstalled with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it
    XLoadPowerProfilerundl.exeAdded by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll
    XLoadPowerProfileRundll.exe powerprof.dllAdded by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe"
    ULoadPowerProfileRundll32.exe powrprof.dllPower management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings
    XLoadPowerProfileASDAPI.EXEAdded by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll
    ULoadout Managernost_LM.exeManager for the Belkin Nostromo n50 SpeedPad game controller - see here
    XLoadOrderVerification[random filename]Added by the TRON.A TROJAN!
    NLoadMSvcmmmsvcmm32.exeAuto-update for Movielink - internet movie rental System Tray access
    XLoadManagermsload.exeAdded by the OPASERV.T WORM!
    XLoadingAgentmsload32.exeAdded by the OBLIVION TROJAN! This executable is one of the most common but there are more
    XLoadingAgentZipLoader32.exeAdded by the OBLIVION TROJAN! This executable is one of the most common but there are more
    XLoadHTMLrundll32.exe mshtmpre.dll, MShtmpreBrowser hijacker
    XLoadFontsTahoma.vbsHomepage hijacker that changes your homepage to an adult content site
    XLoadFontsLoadFonts.vbsHomepage hijacker that changes your homepage to an adult content site
    XloaderWMPLAYER.EXEUnknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
    Xloaderloader.exeHomepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe
    ?LoadDvpApi9xDVPAPI9X.exePart of Command AntiVirus for Windows 95/98/Me. Is it needed?
    XLoadDBackUpBcTool.exeAdded by the GIBE WORM!
    YLoadBlackDblackd.exeThis is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility)
    ?LoadBtnHndBtnHnd.exeFujitsu LifeBook related
    Xload=a1g.exeAdded by the ATAK.B WORM!
    Xload=dapdll.exeAdded by the ATAK.E WORM!
    Xload=win32exec.exeAdded by the BITTER WORM!
    Xload=hint.exeAdded by the ATAK WORM!
    Yload=AICLIENT.EXEAsset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system
    ?Load=wtfeat.exeAssociated with the Wintab Digitizer
    Xload=Spoolsv.exeAdded by the CIADOOR.B TROJAN! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
    Xload=msater.exeAdded by the RETSAM TROJAN!
    Xload=shambl3r.exeAdded by the REMABL WORM!
    Yload=wpshrc.exeRequired to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
    Yload=Bfrecv.exeBitware modem driver
    ?load=WINOSCFG.EXECould it be something to do with configuring Windows on a new PC from an OEM supplier?
    Nload=vi_grm.exeMonitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
    Yload=hotkey.exeSolo 5300 display driver for Win2K on some Gateway laptops
    Nload=HPWHRC.EXELoads the Status Window software for the HP Laserjet printers
    ?load=WPSLOAD.EXEWindows printing system that comes with the setup for Canon BJC series on the manufacturer's disk
    Uload=esspk.exeSpeakerphone capability through a soundcard for an ESS modem
    Uload=asistat.exeStatus monitor for an NEC SuperScript printer
    ?load=cfgsys32.exe??
    Nload=adw30.exeAfter Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
    Xload321111a.exeAdded by the DUMARU.AH WORM!
    Xload32swchost.exeAdded by the TURTA.A WORM!
    Xload32l32x.exeAdded by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM!
    Xload32load32.exeAdded by the NIBU, BAMBO TROJANS and DUMARU WORM!
    XLOAD32Lorena.exeAdded by the MAPSON.C WORM!
    XLoad-GuardWscript.exe LGuarg.exe.vbsAdded by the YENO.B and YENO.C WORMS!
    ULOAD WBLOADWB.EXEPart of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it
    Xlnternet ExplorerAMSNDMGR.EXEAdded by the KWBOT.R WORM! Note that the "l" is a lower case "L" and not an upper case "I"
    NLMSTATUSLMSTATUS.EXELexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)
    NLMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
    ?lmpdpsrvlmpdpsrv.exeRelated to a Lexmark printer/scanner. Printer sharing server? Is it required?
    ULManagerQtZpAcer.exeAcer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
    ULManagerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
    ?LLMODCL2rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF??
    ULiveUpdateLiveUpdate.exeWeb-update utility as used by various types of software - see here
    NLiveNoteLivenote.exeAsus graphics card driver live update feature
    NLiveMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
    NLive MenuDllcmd32.exeeFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here
    NLIURubicon.exeLogitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
    NLIULIU.exeLogitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
    ULiquidViewlviewj.exe"Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor"
    XLinuxLinux.vbsAdded by the LOVELETTER.AS VIRUS!
    XLinkstslinksts.exeTray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
    NLinkstslinksts.exeTray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
    NLine Speed Meter V3.0LineSpeedMeter.exeLineSpeedMeter - detect the download and upload speed of your internet connection
    NLimeWire x.xLimeWire.exeLimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware
    ULightning DownloadLightning.exeLightning Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer
    NLifeScape Media DetectorPicasaMediaDetector.exeMedia detector for Picasa's automatic photo organizer
    ULicCtrlrunservice.exePart of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
    ULicCtrlrundll32.exe [path] MMFS.DLL, ServicePart of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
    NLicCrtlrunservice.exeeLicense, licensing system incorporated with some software and games
    Xli01f948rundll32.exe [path] li01f948.dll, EnableRunDLL32LZIO.com adware downloader
    Xli-thund****li-thund****.exeAdult web-dialler - **** is random
    Xli-vita****li-vita****.exeAdult web-dialler - **** is random
    Xli-speed****dlres.exeAdult web-dialler - **** is random
    Xli-multi****li-multi****.exeAdult web-dialler - **** is random
    Nlhttsengrundll32.exe ..lhttseng.inf, RemoveCabinetLeft over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine
    ULexStartlexstart.exeLexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
    ULfsndmnglfsndmng.exeLightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents"
    Nlexppslexpps.exeFor Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges
    NLexmarkPrinTrayprintray.exeLexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
    YLexmark Xxx Button MonitorACMonitor_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
    YLexmark Xxx Button ManagerAcBtnMgr_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
    ULexmark X5100 Serieslxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
    ULexmark X74-X75lxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
    YLexmark 3100 Serieslxbrbmgr.exeLexmark printer button manager. Required for correct operation
    NLeechGetLeechGet.exeLeechGet download manager
    XLetsSearchLetsSearch.exeBrowserAid/BrowserPal foistware variant
    ULED TRAYLEDTRAY.EXEInstalls a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
    NLDMldmconf.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    NLDMbackweb-8876480.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    Xldld.exeCoolWebSearch parasite related - redirects to fastwebfinder.com
    Nlcfeplcfep.exeTivoli ?TME? System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"
    Xlcvgalcvga.exeAdded by the HOSTOL-A TROJAN!
    Ylaxmsp32.exelaxmsp32.exeLexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work 
    ULCDCLCDC.exeLCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins
    ULavasoft AdwatchAd-watch.exePart of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
    NLauncherrelaunch.exeAudio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
    XLauncherlauncher.exeSpyware component related to DownloadWare and found in Program FilesKFH
    ULaunchboardlnchbrd.exe"LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions"
    ULaunchAppAlaunch.exeAcer Launch tool utility on laptops
    ULaunchApLaunchAp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
    NLaunch YahooPOPs! at Windows startupYAHOOPOPS.EXEYahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs
    ?Launcglauncg.exe??
    ULaunAppLaunApp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
    ?Laterlater.exe??
    YLASTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
    ?Lasbewat.exe??
    XLAsIAf32RePEAtLD.exeAdded by the REPEATLD WORM!
    Xlar[trojan filename]Added by the ROXY.C TROJAN!
    XLarLlass.exeAdded by the INOR-A TROJAN!
    ULapLink schedulerLlsched.exeUtility that automatically performs file transfers as unattended background operations
    XLanGuardlanguard.exeAdware downloader
    ULanSpeed2LanSpeed2.exeMonitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
    XLanGuardlanguard.exeAdware downloader
    ULanSpeed2LanSpeed2.exeMonitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
    ULapLink schedulerLlsched.exeUtility that automatically performs file transfers as unattended background operations
    XLarLlass.exeAdded by the INOR-A TROJAN!
    Xlar[trojan filename]Added by the ROXY.C TROJAN!
    ?Lasbewat.exe??
    XLAsIAf32RePEAtLD.exeAdded by the REPEATLD WORM!
    YLASTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
    ?Laterlater.exe??
    ULaunAppLaunApp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
    ?Launcglauncg.exe??
    NLaunch YahooPOPs! at Windows startupYAHOOPOPS.EXEYahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs
    ULaunchApLaunchAp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
    ULaunchAppAlaunch.exeAcer Launch tool utility on laptops
    ULaunchboardlnchbrd.exe"LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions"
    XLauncherlauncher.exeSpyware component related to DownloadWare and found in Program FilesKFH
    NLauncherrelaunch.exeAudio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
    ULavasoft AdwatchAd-watch.exePart of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
    Ylaxmsp32.exelaxmsp32.exeLexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work 
    ULCDCLCDC.exeLCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins
    Nlcfeplcfep.exeTivoli ?TME? System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"
    Xlcvgalcvga.exeAdded by the HOSTOL-A TROJAN!
    Xldld.exeCoolWebSearch parasite related - redirects to fastwebfinder.com
    NLDMbackweb-8876480.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    NLDMldmconf.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    ULED TRAYLEDTRAY.EXEInstalls a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
    NLeechGetLeechGet.exeLeechGet download manager
    XLetsSearchLetsSearch.exeBrowserAid/BrowserPal foistware variant
    YLexmark 3100 Serieslxbrbmgr.exeLexmark printer button manager. Required for correct operation
    ULexmark X5100 Serieslxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
    ULexmark X74-X75lxbabmgr.exeSystem Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
    YLexmark Xxx Button ManagerAcBtnMgr_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
    YLexmark Xxx Button MonitorACMonitor_Xxx.exeAssociated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
    NLexmarkPrinTrayprintray.exeLexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
    Nlexppslexpps.exeFor Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges
    ULexStartlexstart.exeLexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
    ULfsndmnglfsndmng.exeLightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents"
    Nlhttsengrundll32.exe ..lhttseng.inf, RemoveCabinetLeft over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine
    Xli-multi****li-multi****.exeAdult web-dialler - **** is random
    Xli-speed****dlres.exeAdult web-dialler - **** is random
    Xli-thund****li-thund****.exeAdult web-dialler - **** is random
    Xli-vita****li-vita****.exeAdult web-dialler - **** is random
    Xli01f948rundll32.exe [path] li01f948.dll, EnableRunDLL32LZIO.com adware downloader
    NLicCrtlrunservice.exeeLicense, licensing system incorporated with some software and games
    ULicCtrlrundll32.exe [path] MMFS.DLL, ServicePart of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
    ULicCtrlrunservice.exePart of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
    NLifeScape Media DetectorPicasaMediaDetector.exeMedia detector for Picasa's automatic photo organizer
    ULightning DownloadLightning.exeLightning Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer
    NLimeWire x.xLimeWire.exeLimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware
    NLine Speed Meter V3.0LineSpeedMeter.exeLineSpeedMeter - detect the download and upload speed of your internet connection
    NLinkstslinksts.exeTray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
    XLinkstslinksts.exeTray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
    XLinuxLinux.vbsAdded by the LOVELETTER.AS VIRUS!
    ULiquidViewlviewj.exe"Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor"
    NLIULIU.exeLogitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
    NLIURubicon.exeLogitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
    NLive MenuDllcmd32.exeeFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here
    NLiveMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
    NLiveNoteLivenote.exeAsus graphics card driver live update feature
    ULiveUpdateLiveUpdate.exeWeb-update utility as used by various types of software - see here
    ?LLMODCL2rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF??
    ULManagerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
    ULManagerQtZpAcer.exeAcer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
    NLMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
    ?lmpdpsrvlmpdpsrv.exeRelated to a Lexmark printer/scanner. Printer sharing server? Is it required?
    NLMSTATUSLMSTATUS.EXELexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)
    Xlnternet ExplorerAMSNDMGR.EXEAdded by the KWBOT.R WORM! Note that the "l" is a lower case "L" and not an upper case "I"
    ULOAD WBLOADWB.EXEPart of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it
    XLoad-GuardWscript.exe LGuarg.exe.vbsAdded by the YENO.B and YENO.C WORMS!
    XLOAD32Lorena.exeAdded by the MAPSON.C WORM!
    Xload32load32.exeAdded by the NIBU, BAMBO TROJANS and DUMARU WORM!
    Xload32l32x.exeAdded by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM!
    Xload321111a.exeAdded by the DUMARU.AH WORM!
    Xload32swchost.exeAdded by the TURTA.A WORM!
    Nload=adw30.exeAfter Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
    Uload=asistat.exeStatus monitor for an NEC SuperScript printer
    ?load=cfgsys32.exe??
    Uload=esspk.exeSpeakerphone capability through a soundcard for an ESS modem
    Yload=hotkey.exeSolo 5300 display driver for Win2K on some Gateway laptops
    Nload=HPWHRC.EXELoads the Status Window software for the HP Laserjet printers
    ?load=WPSLOAD.EXEWindows printing system that comes with the setup for Canon BJC series on the manufacturer's disk
    Nload=vi_grm.exeMonitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
    ?load=WINOSCFG.EXECould it be something to do with configuring Windows on a new PC from an OEM supplier?
    Yload=wpshrc.exeRequired to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
    Yload=Bfrecv.exeBitware modem driver
    Xload=msater.exeAdded by the RETSAM TROJAN!
    Xload=shambl3r.exeAdded by the REMABL WORM!
    Xload=Spoolsv.exeAdded by the CIADOOR.B TROJAN! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
    ?Load=wtfeat.exeAssociated with the Wintab Digitizer
    Yload=AICLIENT.EXEAsset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system
    Xload=hint.exeAdded by the ATAK WORM!
    Xload=win32exec.exeAdded by the BITTER WORM!
    Xload=a1g.exeAdded by the ATAK.B WORM!
    Xload=dapdll.exeAdded by the ATAK.E WORM!
    YLoadBlackDblackd.exeThis is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility)
    ?LoadBtnHndBtnHnd.exeFujitsu LifeBook related
    XLoadDBackUpBcTool.exeAdded by the GIBE WORM!
    ?LoadDvpApi9xDVPAPI9X.exePart of Command AntiVirus for Windows 95/98/Me. Is it needed?
    Xloaderloader.exeHomepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe
    XloaderWMPLAYER.EXEUnknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
    XLoadFontsLoadFonts.vbsHomepage hijacker that changes your homepage to an adult content site
    XLoadFontsTahoma.vbsHomepage hijacker that changes your homepage to an adult content site
    XLoadHTMLrundll32.exe mshtmpre.dll, MShtmpreBrowser hijacker
    XLoadingAgentZipLoader32.exeAdded by the OBLIVION TROJAN! This executable is one of the most common but there are more
    XLoadingAgentmsload32.exeAdded by the OBLIVION TROJAN! This executable is one of the most common but there are more
    XLoadManagermsload.exeAdded by the OPASERV.T WORM!
    NLoadMSvcmmmsvcmm32.exeAuto-update for Movielink - internet movie rental System Tray access
    XLoadOrderVerification[random filename]Added by the TRON.A TROJAN!
    ULoadout Managernost_LM.exeManager for the Belkin Nostromo n50 SpeedPad game controller - see here
    XLoadPowerProfileASDAPI.EXEAdded by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll
    ULoadPowerProfileRundll32.exe powrprof.dllPower management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings
    XLoadPowerProfileRundll.exe powerprof.dllAdded by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe"
    XLoadPowerProfilerundl.exeAdded by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll
    XLoadPowerProfileRundll32.exeAdded by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line
    ULoadQMloadqm.exeInstalled with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it
    Xloads.exeloads.exePopuppers.com adware downloader
    Xloads.exemedload.exePopuppers.com adware downloader
    Xloads.exesuploads.exePopuppers.com adware downloader
    XLoadSIPSrundll32.exe [path] SIPSPI32.dll, SIPSPI32123Mania adware
    ?LoadWatcherTest.exeReportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct?
    XLoadWindowsFile[filename]Added by the DELF.B TROJAN! where [filename] is the infected file
    XLocal Pagehttp://find.naupoint.comNaupoint browser hijacker
    ULock My PClockpc.exeLock_My_PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen, disables Windows hot keys and mouse
    ULoginwinlog.exeSalfeld Child Control 2003 - parental control software
    XLogin Service[path to file]Added by the MIGMAF TROJAN!
    XLoginPassportLgnpsp32.exeAdded by the REDIST.C WORM!
    NLogitech Desktop Messengerbackweb-8876480.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    NLogitech Desktop Messengerldmconf.exeInstalled with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
    ?Logitech Hardware Abstraction LayerKhalmnpr.exeLogitech Bluetooth mouse Hardware Abstraction layer. A "hardware abstraction layer" is an interface that enables adding support for new devices and new ways of connecting devices to the computer, without modifying every application that uses the device. What does it do, and is it required?
    ULogitech UtilityLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
    NLogitech Wakeuplgwakeup.exeLoads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images
    ULogitechGalleryRepairISStart.exeLogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
    NLogitechImageStudioTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    ?LogitechSoftwareUpdateManifestEngine.exeUpdater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required
    ULogitechVideoRepairISStart.exeLogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
    NLogitechVideoTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    NLogiTrayLogiTray.exeLogitech Image Studio - installed with Logitech QuickCams
    ULogi_MwxLogi_MwX.exeLogitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
    XLogon.exelogon.exeHomepage hijacker
    ULogonStudiologonstudio.exeWinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users"
    ULogWatchlogwat95.exeLicensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied
    YLook 'n' Stoplooknstop.exeLook 'n' Stop personal firewall
    XLookup_Syslookupsys.exeP04n trojan
    NLotus Organizer EasyClipeasyclip.exe"The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs
    NLotus QuickStartsmartctr.exeLotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs
    ULotus SuiteStartsuitest.exePuts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs
    XLowVersionSupport[filename]Added by the LASTRAS TROJAN!
    XLpr123Lpr123.exeAdded by an unidentified password stealer trojan
    ULPSLps.exeLocal Port Scanner - "With LPS you're able to check your computer for open or listening ports"
    ULPtasklptask.exeProgram Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted
    NLS120 Superdisk??Supposed to accelerate transfer rate on LS-120, contributes to system lockups
    Xlsasslsass.exeAdded by the RATSOU.B TROJAN! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
    Xlsassstart.batAdded by the ZCREW TROJAN!
    Xlsass[path to lsass.exe]Added by the ALADINZ.F TROJAN! Note - this is not the legitimate lasss.exe process which should NOT appear in Msconfig/Startup!
    Xlsasslsasrv.exeAdded by the MYDOOM.AG WORM!
    Xlsass servicelsass2.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    Xlsasss.exelsasss.exeAdded by the SASSER.E WORM!
    XLSPFixLSPmonitor.exeeAcceleration Stop-Sign related - foistware. Read their privacy statement here
    XLSPmonitorLSPmonitor.exeeAcceleration Stop-Sign related - foistware. Read their privacy statement here
    Xlssasslssas.exeAdded by the AGOBOT.RL WORM!
    XLSvrLSvr.exePowerStrip foistware
    YLT DAEMONltdaemon.exeActs as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
    XLTDMgrLTDMgr.exePowerStrip foistware
    XLTM2MSGSRV32.EXEAdded by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem
    XLTM2MPGSRV32.EXEAdded by the LITMUS.201 TROJAN!
    XLTM2MSGSRV320.EXEAdded by the LITMUS.C TROJAN!
    XLTM2winupdate.exeAdded by the LITMUS.203 TROJAN!
    XLTM2bible.exeAdded by the LITMUS.203 TROJAN!
    ULtMohLtmoh.exeModem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
    YLTMSGltmsg.exeOne of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
    NLTSMMSGLTSMMSG.exeLucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too
    XLTSMSGShell32.exeAdded by the LEMIR.B TROJAN!
    YLTWinModem1ltmsg.exeOne of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
    ULVComslvcoms.exeLvcomm server. Related to Logitech Quick Cam - works fine without it but it is needed for the Logitech ImageStudio software to connect to the camera
    ?LVCOMSXLVCOMSX.EXELogitech webcam related. What does it do and is it required?
    ULWBMOUSElwbwheel.exeMouse driver - required if you use non-standard Windows driver features
    ULWBMOUSEMOUSE32A.EXEMouse driver - required if you use non-standard Windows driver features
    NLwinst Run Profilerlwtest.exeLogitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
    ?lxamsp32lxamsp32.exeAssociated with a Lexmark Printer - is it required?
    ?LXbbmgrLXbbmgr.exeLexmark printer button manager? Is it required?
    ?LXBLKskLXBLKsk.exeLexmark related. What does it do, and is it required?
    Ylxbrbmgrlxbrbmgr.exeLexmark printer button manager. Required for correct operation
    ?LXBRKskLXBRKsk.exeLexmark printer related. What does it do and is it required?
    NLXSUPMONLXSUPMON.EXELexmark Printer. The printer should work fine without it
    XLzioMediaUpdaterLzioMediaUpdater.exeLZIO.com adware downloader


    Presentation, format & comments Copyright © 2001 - 2004 Paul Collins
    Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein
    Database creation and support by Patrick Kolla
    Software support by John Mayer
    All rights reserved