HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	dc	dc.exe	"Added by the COIDUNG-A WORM!"
X	dc2k5	SVIQ.EXE	"Added by the COIDUNG-A WORM!"
U	DC300 Monitor	cmonitor.exe	Monitor for a Acer DC300 digital camera
X	DC6CW	DC6CW.EXE	"DriveCleaner misleading security program - not recommended see here"
X	DC6_check	dc6_startupmon.exe	"WinAntiVirus 2006 misleading virus software - not recommended see here"
X	dc6_check	dcmon.exe	"SystemDoctor misleading security software - not recommended see here"
X	DC6_Check	uwasdc.exe	"WinAntiSpyware 2006 spyware remover - not recommended see here"
X	DCE Manager	dcemgr.exe	"Added by the TUMAG TROJAN!"
U	DCfssvc	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
U	dcfssve	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
X	Dcom System Patch	Microsoft.exe	"Added by the RANDEX.MS WORM!"
X	dcsm	dcsm.exe	"DriveCleaner rogue security software - not recommended see here"
N	DDCActiveMenu	DDCActiveMenu.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCM	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCMan	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
X	ddeproc	ddeproc.exe	"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
U	ddhelper	W815DM.EXE	"Enuff Parental Control Software by Akrontech"
X	DDialler	DDialler.exe	Adult content dialler
X	ddivmwa	[random filename]	"Added by a variant of the SLAPER TROJAN!"
U	ddoctorv2	sprtcmd.exe /P ddoctorv2	"Comcast Desktop Doctor (provided by SupportSoft Inc) is a free self-help tool for Comcast broadband users. Identifies and automatically fixes typical problems that may occur with your high-speed internet service"
X	DDriver	windrv.exe	"Added by the DELF.WG TROJAN!"
X	DDriver	svchost.exe	"Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
?	DDT	N/A	"??"
U	DDWMon	ddwmon.exe	"Direct Disc Writer Event Monitor from TOSHIBA"
X	de32gen	de32gen.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	DeadAIM	rundll32.exe DeadAIM.ocm ExportedCheckODLs	"DeadAIM - feature enhancing product for AOL's Instant Messenger program"
X	DeadKitty	DeadKitty.exe	"Added by the DEADCAT-A WORM!"
X	DealHelperBrwsr	dhbrwsr.exe	"DealHelper adware"
X	DealHelperDown	download.exe	"DealHelper adware"
X	DealHelperUpdate	DHUpdt.exe	"DealHelper adware"
X	Death.exe	Death.exe	"Added by the DELF-ERW TROJAN!"
X	Debug	DebugW32.exe	"Added by the GUBED TROJAN!"
X	Debugger	dbg32.exe	"Added by the MYTOB-FW WORM!"
X	Debugger	explorer32dbg.exe	"Added by the CWS-M TROJAN!"
X	Debugger	iexplore_dbg.exe	"Added by the CWS-M TROJAN!"
X	debugger	help.pif	"Added by the DELF-DRA WORM!"
X	DebugMonitor	debugmonitor.exe	"Added by the MYDOOM.BG WORM!"
U	DeeEnEs	DeeEnEs.exe	"DeeEnEs - automatically updates a dynamic IP address when it changes"
X	deejay	forboo.exe	"Added by the FORBOT-AY WORM!"
X	Deewoo	ncntnkwd.exe	Identified as a variant of the AdWare.Win32.ZenoSearch.am malware
X	Default	explore.vbs	"Added by the ALLEM WORM!"
X	Default	mtask.vbe	"Added by the ALLEM WORM!"
X	default	shell32.exe	"Added by the BINGHE TROJAN!"
X	Default	_default.pif	"Added by the RUBBLE-C WORM!"
X	Default System Research	vhchost.exe	"Added by the TARNO.I TROJAN!"
X	Default web browser	IexpIore.exe	"Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer) the first has a captial "i" in place of lower case "L""
X	Default_Page_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	Default_Search_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	defender	defender25.exe	"DollarRevenue adware"
X	defender	dfndref_7.exe	"DollarRevenue adware"
?	defergui	defergui.exe	"Related to IBM Standard Software Installer. What does it do and is it required?"
X	defragm_check	defragment.exe	"CoolWebSearch parasite variant"
X	defragsys	svchost.exe	"Added by the BIFROSE-TH TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Deko550	Deko550.exe	"Associated with the Deko550 entry-level SD real-time graphics system from Avid Technology"
U	Delay	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
X	DelayLoad	msprint.exe	"Added by a variant of the Win32.Agent.ryo malware - see here"
U	Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
N	DelayShred	ShrCL.EXE	"McAfee Delay Shreder - not required at startup. You can use QuickClean manually via McAfee Security Center and run it from there"
?	delcab	deltreew.exe C:cabs	"??"
X	Delete Me	worm.exe	"Added by the DOOMHUNTER WORM!"
U	DeleteHistoryFree	dhf.exe	"Delete History Free - ""Privacy protection software for deleting Internet surfing and other computer activity tracks from your PC"""
U	Dell AIO Printer A920	dlbkbmgr.exe	System Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A940	dlbabmgr.exe	System Tray application for the Dell Photo AIO Printer 940 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A960	dlbfbmgr.exe	System Tray application for the Dell Photo AIO Printer 960 that enables scan or fax functions to run directly from the printer via the buttons
N	Dell Alert	DAMon.exe	"Dell Alert" utility that's supposed to make interaction with Support easier
U	Dell DataSafe Scheduler	DataSafeOnlineScheduler.exe	"Scheduler for Dell DataSafe™ Online which ""helps protect your music photos and other important files by placing backup copies on a secure storage site using your internet connection"""
U	Dell Photo AIO Printer 922	dlbtbmgr.exe	System Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell Photo AIO Printer 942	dlbubmgr.exe	System Tray application for the Dell Photo AIO Printer 942 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell Photo AIO Printer 962	dlbxmon.exe	DellPhoto AIO Printer 962 Device Monitor
N	Dell QuickSet	quickset.exe	Dell taskbar icon allowing you to quickly change settings
N	DELL Webcam Manager	DellWMgr.exe	Dell Webcam Manager - Webcam management software provided on Dell PCs
N	Dell Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
Y	DellAutomatedPCTuneUp	PTAgnt.exe	"PC TuneUp from Dell - ""silently monitors your system automatically running needed maintenance during idle time to keep you at peak performance"""
?	DellDMI	delldmi.exe	"Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about monitor the status of or change the state of the client computer such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols which are systems management protocols defined by industry standards?"
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
U	DellSupport	DSAgnt.exe	Dell Support Agent offers additional support and update features for your Dell computer or laptop
U	DellSupportCenter	sprtcmd.exe /P DellSupportCenter	"Dell Support Center (provided by SupportSoft Inc) is a free self-help tool for Dell users. Identifies and automatically fixes typical problems that may occur with your high-speed internet service"
U	DellTouch	MMKeybd.exe	Dell multimedia keyboard manager. Required if you use the additional keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
?	DellTransferAgent	TransferAgent.exe	"Found on Dell computers. What does it do and is it required?"
X	delmsbb	delmsbb.exe	"NCase adware"
X	delsaap	delsaap.exe	"NCase adware"
?	delstart	delstart.exe	"Reportedly part of BT ISP software - what does it do and is it required in startup?"
X	delsubmit	rundll32.exe advpack.dll DelNodeRunDLL32 submit.exe	"CoolWebSearch parasite variant"
U	DeltaIITaskbarApp	DeltaIITray.exe	"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
?	DelTmp	DelTemp.exe	"Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?"
N	DeltTray	deltray.exe	"System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut Start -> Programs or Start -> Settings -> Control Panel"
X	DeluxeCommunications	Dxc.exe	"Deluxe Communications adware - successor to SurfSideKick"
X	DELXP Protocol	delxp.exe	"Added by a variant of the SDBOT WORM!"
?	demon	demon.exe	"Part of the French Wanadoo ADSL extense pack. What does it do and is it required?"
X	Deneca	Virus salvado	"Added by the DELUZ VIRUS!"
U	DepFrez	frzstate.exe	"Deep Freeze from Faronics Coporation. ""Freezes"" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators for example"
?	Description of Shortcuts	*.exe	"* seems to be a sequence of alphanumerics that can be different i.e. 1960F8A9 4EBD23F5 etc. Each of these files would appear to be a shortcut i.e. 4EBD23F5 is actually Works Calender Reminder (found via a registry search)"
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	"??"
X	DeskAd Service	DeskAdServ.exe	"DeskAd.Service adware"
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	"DeskFlag - animated USA flag on the desktop"
X	DeskMateAutoUpdate	DeskMateAutoUpdate.exe	"DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related"
U	Desksite CMA	cma.exe	"DeskSite CMA siftware - ""retrieves new content from the DeskSite Data Center"""
U	DeskSlide	DeskSlide.exe	"""DeskSlide is utility for automating wallpaper changes on your desktop"""
X	Desktop	rundll32.exe msconfd.dll Restore ControlPanel	"Added by the BOOKMARKER TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""msconfd.dll"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	desktop	desktop.exe	"Added by the SDBOT.MD WORM!"
X	Desktop	Desktop.com	"Added by the VB-DRN WORM!"
X	desktop	desktop.ini.vbs	"IE-Title malware"
N	Desktop Architect	DATRAY.EXE	"Desktop theme manager available here - for managing the desktop appearance fonts sounds etc"
U	Desktop Calendar	Desktop Calendar.exe	"Desktop Calendar - ""Desktop Calendar is a highly customizable calendar program that turns your desktop into a traditional wall calendar by rotating the background image on a monthly basis"""
N	Desktop Plant	AZARE10S.PLT	"Vritual plant from here - this version is an Azalea there are others so the filename may be different"
X	Desktop Search	desktop.exe	"iSearch adware"
N	Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software
N	Desktop Weather	THE WEATHER CHANNEL.exe	"Desktop Weather by The Weather Channel - provides current temperature conditions alerts etc"
N	Desktop Weather 3	THE WEATHER CHANNEL.exe	"Desktop Weather 3 by The Weather Channel - provides current temperature conditions alerts etc"
N	Desktop Weather 3	THEWEA~1.EXE	"Desktop Weather 3 by The Weather Channel - provides current temperature conditions alerts etc"
U	DesktopIconToy	DesktopIconToy.exe	"""Desktop Icon Toy is an easy to use desktop icon enhancement tool which allows you to make many funny but useful patterns out of your windows desktop icons"""
N	desktopmgr	desktopmgr.exe	"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds including the "Blackberry""
X	DesktopUpdate	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
U	DesktopX	DESKTOPX.EXE	A program that replaces the regular Desktop and Taskbar and can be changed to the user's liking
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
X	destroyb11	destroyb11.exe	"Added by the DELF-KO TROJAN!"
U	detect	idetect.exe	"iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled"
?	detect	turbodetect.exe	"??"
N	Detector	detector.exe	USB port detector for LG scanners. Sits in the System Tray and when it detects the scanner through the USB port you can run the scanner software from the tray. It is not required at all since you can use the scan software from almost any photo editing software
U	DetectorApp	DetectorApp.exe	"Related to Roxio MyDVD (was Sonic) DVD authoring software"
?	DevconDefaultDB	READREG	"Appears to be related to older Creative Soundblaster soundcards"
X	Development Environment	devenv.exe	"Added by the DELBOT-AH WORM!"
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X	devenv	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	Device Configuration Loader	msdvc32.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
U	Device Detector	DevDetect.exe	"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N	Device Detector 2	DevDtct2.exe	"Installed by various Olympus products this program detects the active connection of a speech device (voice recorder etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a ""high"" priority level which can negatively impact system resources"
X	Device Hardware	devicehnd.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device IO System	deviceio.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Manager	wfxmgr.exe	"Added by the RBOT.AJU WORM!"
X	Device Security	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Driver	devicesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	DeviceDiscovery	hpotdd01.exe	Detection of new imaging printing and other peripherals on HP machines such as USB printers cameras and Bluetooth products
X	DevicePath	Proyecto1.exe	"Added by the GRUEL WORM!"
X	DevicePath	Root.exe	"Added by the GRUEL WORM!"
U	Devices	olesvr.exe	"Salfeld Child Control - parental control software"
X	Devicewin	[path to trojan]	"Added by the BANKER-AEV TROJAN!"
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
U	devldr16.exe	devldr16.exe	"Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use ""Sound Play Control"" and ""Sound Recorder"". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable ""Creative SB16 Emulation"" under Creative Miscellaneous Devices"
?	Devlog	devlog.exe	"Apparently mainboard/chipset related by a French company called AS Media - what exactly is it and is it required"
X	dfgfdgrergd	[path to trojan]	"Added by the RANKY.CK TROJAN!"
?	DGJM	DGJM.exe	"??"
X	dgtstart	dgtstart.exe	"DigitalNames.g adware"
U	dguard	dguard.exe	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
X	DHCP	smss.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
X	DHCP Server	regsvr.exe	"Added by the RBOT-PR WORM!"
X	DHCP32	services.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
?	DHNUXB	DHNUXB.exe	"??"
X	DI2	[path to file]	"BroadcastPC adware"
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Diagnostic	diagnostic.exe	"Added by the ALPHA-C TROJAN!"
X	Dial22	dlm.exe	Adult content dialler
X	Dial33	dlm.exe	Adult content dialler
X	Dialer	rundll32.exe msa32chk.dll	Unidentfied malware
U	Dialer Control	dc.exe	"Dialer-Control. Detects and protects from premium rate adult content diallers"
U	Dialer Detect	dd.exe	"DialerDetect detects stealth installed premium rate diallers and sounds the alarm when such a connection is being installed without you knowing it"
U	Dialgo SDK	PhoneAnswer.exe	"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID Wave Playback Wave Recording Digit Monitoring POP3 e-mail Manipulation Speech Recognition and Synthesis"""
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	"Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders"
N	Dialog Helper	PDDLGHLP.EXE	"Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs"
X	DialUp Network Application	Rnaap.exe	"Added by a variant of the SDBOT WORM!"
X	Diam prlaer	oqedrhg.exe	"Added by the SDBOT-DEU WORM!"
?	Diamondview	Diamondview.exe	"Manulife Financial Insurance program. Is it required at startup?"
X	DIECOX	csrss.exe	"Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Diesel	Recalculate.exe	"Added by the LAZAR TROJAN!"
U	DietK	DietK.exe	"Diet Kazaa add-on for Kazaa Media Desktop - ""removes all adware and popups built in Download Accelerator makes searches faster and helps produce more results"""
U	DigiCell	DigiCell.exe	"MSI DigiCell - ""the most useful and powerful utility that MSI has spent much research and efforts to develop helps users to monitor and configure all the integrated peripherals of the system such as audio program power management MP3 files management and communication / 802.11g WLAN settings. Moreover with this unique utility you will be able to activate the MSI well-known features Live Update and Core Center"""
X	DigiD	DigitalSound.exe	Adware downloader
N	DigiGuide	CLIENT.EXE	TV guide and reminder
N	DigiGuide	client01.exe	TV guide and reminder
U	Digisoft AntiDialer	AntiDialer.exe	"Digisoft AntiDialer"
U	DigiSrv	DigiSrv.exe	"Related to camera software from DigitalDreams"
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list