Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	DadApp	dadapp.exe	""DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required
N	Daemon	DAEMON32.EXE	Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
U	Daemon	Daemon.exe	"Daemon Tools - used to map an image-file (.iso
X	Daemon	daemon.exe c daemon2.exe	"Added by the SELOTIMA.A WORM!"
U	DAEMON Tools-1033	Daemon.exe	"Daemon Tools - used to map an image-file (.iso
N	Daily Planner	dayplan.exe	"Daily Planner - discontinued
X	Daily Weather Forecast	weather.exe	"Added by the DLOADER-IP TROJAN!"
X	DamedWare Services	dwdrce.exe	"Added by the RBOT-AOJ WORM!"
U	Dancer	DncLE.exe	"Part of Microsoft Plus! Digital Media Edition - see here"
X	Danton*	[random filename]	"Added by the DANTON TROJAN! where * = random number"
N	Dap	DAP.exe	"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
X	dark	imgst.scr	"Added by the BANCOS.U TROJAN!"
X	dark	imgrt.scr	"Added by the BANCBAN-FH TROJAN!"
X	dark	csrs.scr	"Added by the BANCBAN-GT or BANCBAN-GU TROJANS!"
X	DarkDevil.Grasiele.BR	Grasiele.VBS	"Added by the LEMBRA WORM!"
X	DarKNesS LsasS	LsasS23.exe	Added by an unidentified WORM or TROJAN!
?	DashIE	N/A	"Could be related to "Dash Power Shopping" tool bar in IE?"
X	dasxdads	fsdqd.exe	"Added by the GAOBOT.BIQ WORM!"
X	Data	System.dat.vbs	"Added by the BISCUIT.A WORM!"
X	data	msngs.exe	"Added by the RBOT-ADQ WORM!"
N	Data LifeGuard	BACKWE~1.EXE	Data LifeGuard diagnostic tools for Western Digital's series of hard drives
N	Data LifeGuard LifeLine Lite installer	DLGLI.EXE	"Backweb installer - see here"
X	Data Restore Service	prq8.exe	"Added by the KELVIR.AI WORM!"
X	Data789	Regedit.exe ....data789.tmp	Homepage hijacker
X	DATABASE MySql	[path] repcale.exe [path] beird.exe	"Added by a variant of the RANDON.AN WORM!"
N	DataCaching	FlashKsk.exe	"SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon"
U	DataLayer	DataLayer.exe	"Nokia PC Suite 5 - ""A collection of powerful tools that you can use to manage your phone features and data."" Synchronize the phone with
X	DataViz Inc Messenger	DvzIncMsgr.exe	"Installed with DataViz ""Documents to Go"" software"
N	DataViz Messenger	DvzMsgr.exe	"DataViz Documents to Go - "allows you to use your Word
X	Datcheck	datcheck.exe	"Added by the KEYPANIC TROJAN!"
X	Date Manager	datemanager.exe	"Date Manager - calender program. Spyware/adware based provided by The Gator Corporation"
?	Datechecker	N/A	"Could be related to this?"
X	DateMakerIntl	DateMakerIntl.exe	Premium rate adult content dialler
X	DAupdate	DAupdate.exe	NavEnhance adware
?	DAW9532.exe	DAW9532.EXE	"Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required?"
U	DayToday	DAYTODAY.EXE	"DayToday from RoboMagic Software Corp. Displays the date on the taskbar"
U	DAZEL Delivery Agent	DcDaemon.exe	"Control and send documents
N	dbserv	dbserv.exe	Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
X	DCE Manager	dcemgr.exe	"Added by the TUMAG TROJAN!"
U	DCfssvc	dcfssvc.exe	"Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup
U	dcfssve	dcfssvc.exe	"Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup
X	Dcom System Patch	Microsoft.exe	"Added by the RANDEX.MS WORM!"
N	DDCActiveMenu	DDCActiveMenu.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCM	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCMan	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
X	ddeproc	ddeproc.exe	"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
U	ddhelper	W815DM.EXE	"Enuff Parental Control Software by Akrontech"
X	DDialler	DDialler.exe	Adult content dialler
X	DDriver	windrv.exe	"Added by the DELF.WG TROJAN!"
?	DDT	N/A	"??"
X	de32gen	de32gen.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	DeadAIM	"rundll32.exe DeadAIM.ocm	ExportedCheckODLs"
X	DealHelperBrwsr	dhbrwsr.exe	"DealHelper adware"
X	DealHelperDown	download.exe	"DealHelper adware"
X	DealHelperUpdate	DHUpdt.exe	"DealHelper adware"
X	Debug	DebugW32.exe	"Added by the GUBED TROJAN!"
X	Debugger	dbg32.exe	"Added by the MYTOB-FW WORM!"
X	Debugger	explorer32dbg.exe	"Added by the CWS-M TROJAN!"
X	Debugger	iexplore_dbg.exe	"Added by the CWS-M TROJAN!"
X	DebugMonitor	debugmonitor.exe	"Added by the MYDOOM.BG WORM!"
U	DeeEnEs	DeeEnEs.exe	"DeeEnEs - automatically updates a dynamic IP address when it changes"
X	deejay	forboo.exe	"Added by the FORBOT-AY WORM!"
X	Default	explore.vbs	"Added by the ALLEM WORM!"
X	Default	mtask.vbe	"Added by the ALLEM WORM!"
X	default	shell32.exe	"Added by the BINGHE TROJAN!"
X	Default System Research	vhchost.exe	"Added by the TARNO.I TROJAN!"
X	Default web browser	IexpIore.exe	"Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer)
X	Default_Page_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	Default_Search_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	defender	defender25.exe	"DollarRevenue adware"
X	defender	dfndref_7.exe	"DollarRevenue adware"
?	defergui	defergui.exe	"Related to IBM Standard Software Installer. What does it do and is it required?"
X	defragm_check	defragment.exe	"CoolWebSearch parasite variant"
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Delay	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
U	Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
?	delcab	deltreew.exe C:cabs	"??"
X	Delete Me	worm.exe	"Added by the DOOMHUNTER WORM!"
U	DeleteHistoryFree	dhf.exe	"Delete History Free - ""Privacy protection software for deleting Internet surfing and other computer activity tracks from your PC"""
N	Dell AIO Printer A***	dlbabmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell AIO Printer A***	dlbfbmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell AIO Printer A***	dlbkbmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell Alert	DAMon.exe	""Dell Alert" utility
?	Dell Photo AIO Printer 922	dlbtbmgr.exe	"Dell Photo AIO Printer 922 Device Monitor. Is it required?"
?	Dell Photo AIO Printer 942	dlbubmgr.exe	"Dell Photo AIO Printer 942 Device Monitor. Is it required?"
?	Dell Photo AIO Printer 962	dlbxmon.exe	"Dell Photo AIO Printer 962 Device Monitor. Is it required?"
N	Dell QuickSet	quickset.exe	Dell taskbar icon allowing you to quickly change settings
U	Dell Wireless Manager UI	WLTRAY	Installed alongside Dell Wireless WLAN Card and provides additional configuration options for these devices
N	Dell Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
?	DellDMI	delldmi.exe	"Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
U	DellSupport	DSAgnt.exe	Dell Support Agent offers additional support and update features for your Dell computer or laptop
U	DellTouch	MMKeybd.exe	Dell multimedia keyboard manager. Required if you use the additional keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
X	delmsbb	delmsbb.exe	"NCase adware"
X	delsaap	delsaap.exe	"NCase adware"
?	delstart	delstart.exe	"Reportedly part of BT ISP software - what does it do and is it required in startup?"
X	delsubmit	"rundll32.exe advpack.dll	DelNodeRunDLL32 submit.exe"
?	DelTmp	DelTemp.exe	"Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?"
N	DeltTray	deltray.exe	"System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut
X	DeluxeCommunications	Dxc.exe	"Deluxe Communications
?	demon	demon.exe	"Part of the French Wanadoo ADSL extense pack. What does it do and is it required?"
X	Deneca	Virus salvado	"Added by the DELUZ VIRUS!"
U	DepFrez	frzstate.exe	"Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators
?	Description of Shortcuts	*.exe	"* seems to be a sequence of alphanumerics that can be different
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	"??"
X	DeskAd Service	DeskAdServ.exe	"DeskAd.Service adware"
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	"DeskFlag - animated USA flag on the desktop"
X	DeskMateAutoUpdate	DeskMateAutoUpdate.exe	"DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related"
U	Desksite CMA	cma.exe	"DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center""
X	Desktop	"rundll32.exe msconfd.dll	Restore ControlPanel"
X	desktop	desktop.exe	"Added by the SDBOT.MD WORM!"
N	Desktop Architect	DATRAY.EXE	"Desktop theme manager available Desktop Plant	AZARE10S.PLT	"Vritual plant from here - this version is an Azalea
X	Desktop Search	desktop.exe	"iSearch ""Desktop Search"" hijacker"
?	Desktop Service Centre	DSC.exe	"OptusNet DSL or Dial-Up connection software - is it required?"
N	Desktop Weather	THE WEATHER CHANNEL.exe	"Desktop Weather by The Weather Channel - provides current temperature
N	Desktop Weather 3	THE WEATHER CHANNEL.exe	"Desktop Weather 3 by The Weather Channel - provides current temperature
N	Desktop Weather 3	THEWEA~1.EXE	"Desktop Weather 3 by The Weather Channel - provides current temperature
N	desktopmgr	desktopmgr.exe	"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds
X	DesktopUpdate	"rundll32.exe MSA64CHK.dll	DllMostrar"
U	DesktopX	DESKTOPX.EXE	"A program that replaces the regular Desktop and Taskbar
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
X	destroyb11	destroyb11.exe	"Added by the DELF-KO TROJAN!"
U	detect	idetect.exe	"iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled"
?	detect	turbodetect.exe	"??"
N	Detector	detector.exe	"USB port detector for LG scanners. Sits in the System Tray
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X	Device Configuration Loader	msdvc32.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
U	Device Detector	DevDetect.exe	"Watches for external digital imaging products being connected from ACD Systems"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.