Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
N	Device Detector 2	DevDtct2.exe	"Installed by various Olympus products
U	DeviceDiscovery	hpotdd01.exe	"Detection of new imaging
X	DevicePath	Proyecto1.exe	"Added by the GRUEL WORM!"
X	DevicePath	Root.exe	"Added by the GRUEL WORM!"
U	Devices	olesvr.exe	"Salfeld Child Control 2003 - parental control software"
X	Devicewin	[path to trojan]	"Added by the BANKER-AEV TROJAN!"
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
U	devldr16.exe	devldr16.exe	"Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use ""Sound Play Control"" and ""Sound Recorder"". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable ""Creative SB16 Emulation"" under Creative Miscellaneous Devices"
?	Devlog	??	"??"
?	Devlog	devlog.exe	"Apparently mainboard/chipset related
?	DGJM	DGJM.exe	"??"
X	dgtstart	dgtstart.exe	"DigitalNames.g adware"
U	dguard	dguard.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
X	DHCP Server	regsvr.exe	"Added by the RBOT-PR WORM!"
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
?	DHNUXB	DHNUXB.exe	"??"
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Diagnostic	diagnostic.exe	"Added by the ALPHA-C TROJAN!"
X	Dial22	dlm.exe	Adult content dialler
X	Dial33	dlm.exe	Adult content dialler
X	Dialer	rundll32.exe msa32chk.dll	Unidentfied malware
U	Dialer Control	dc.exe	"Dialer-Control. Detects and protects from premium rate p0rn diallers"
U	Dialer Detect	dd.exe	"DialerDetect detects stealth installed premium rate diallers
U	Dialgo SDK	PhoneAnswer.exe	"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	"Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders"
N	Dialog Helper	PDDLGHLP.EXE	"Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs"
X	DialUp Network Application	Rnaap.exe	"Added by a variant of the SDBOT WORM!"
?	Diamondview	Diamondview.exe	"Manulife Financial Insurance program. Is it required at startup?"
X	DIECOX	csrss.exe	"Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process
X	Diesel	Recalculate.exe	"Added by the LAZAR TROJAN!"
U	DietK	DietK.exe	"DietK - add-on for Kazaa Media Desktop; ""removes all adware and popups
U	DigiCell	DigiCell.exe	"MSI DigiCell - ""the most useful and powerful utility that MSI has spent much research and efforts to develop
X	DigiD	DigitalSound.exe	Adware downloader
N	DigiGuide	CLIENT.EXE	TV guide and reminder
N	DigiGuide	client01.exe	TV guide and reminder
U	DigiSrv	DigiSrv.exe	"Related to camera software from DigitalDreams"
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
N	Digital River eBot	downlo~1.exe	"Digital River Systems EBOT for downloading software from their site. In some cases
X	DigitalNames	DigitalNamesStart.exe	"DigitalNames spyware variant"
N	DigitalWizard	ISWizard.exe	"InstallShield's DigitalWizard - free
N	DigitalWizard Monitor	dwMon.exe	"InstallShield's DigitalWizard - free
U	DIGServices	DIGServices	Created by Disney but licensed to ESPN for watching videos
N	DIGStream	digstream.exe	"DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically"
U	Dimension	Dimension.exe	"Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames
U	Dimension4	d4.exe	"Dimension 4 - network time synchronization freeware - starts-up
X	Dino3	dino3.exe	Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X	Dinst	dinst.exe	"IMIServer/IEPlugin adware"
X	Dir1	caKe	"Added by the CAKE WORM!"
X	Direct settings	sdchost.exe	"Added by the DAEMONI-I TROJAN!"
U	Direct Update	DUControl.exe	"DirectUpdate dynamic DNS updater"
X	Direct X Direct3D	dxd3d.exe	"Added by a variant of the SDBOT WORM!"
X	Direct X Opengl	dxopengl.exe	"Added by a variant of the RBOT-CJ WORM!"
X	direct3d.exe	direct3d.exe	"Added by the CERTIF-F TROJAN!"
N	DirectCD	DirectCD.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X	directs.exe	directs.exe	"Added by the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T WORMS!"
U	DIRECTVDSL	Directvdsl.exe	Starts DirectTV DSL modem at boot up. Can also be started manually
X	DirectX	ddhelp32.exe	"Added by the BIONET.318 TROJAN! Note - not the DirectX helper which is ddhelp.exe"
X	directx	Directx.exe	"Added by the SDBOT.D TROJAN!"
X	directx	Sqlexploit.exe	"Added by the SDBOT.D TROJAN!"
X	DirectX	DirectX.exe	"Added by the BLAXE or LOGPOLE WORMS!"
X	directx	NTCmd.exe	"Added by the SDBOT.D TROJAN!"
X	directx	PipeCmd.exe	"Added by the SDBOT.D TROJAN!"
X	DirectX 32	directx32.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	DirectX For Microsoft Windows	dtxservice.exe	"Added by the PROGENT TROJAN!"
X	DirectX for Microsoft Windows	Fservice.exe	"Added by the PRORAT TROJAN!"
X	DirectX for Microsoft Windows	Sservice.exe	"Added by the PRORAT TROJAN!"
X	DirectX For Microsoft� Windows	fservice.exe	"Added by the PRORAT-P TROJAN!"
X	DirectX shell driver	[path to trojan]	"Added by the MARKTMAN-B TROJAN!"
X	DirectX Video Driver	dxterm5.exe	"Added by the WILAB-A TROJAN!"
X	DirectX64	DirectXset.exe	"Added by the BROWNEY.A WORM!"
X	DirectX9 Diag	dx9diag.exe	"Added by the RBOT-ALT WORM!"
U	Dirkey	Dirkey.exe	"Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders "
?	Disable EHCI	nousb20.exe	"??"
but wit	disabled
N	Disc Detector	CtNotify.exe	"For Creative sound cards. Detects when you insert a CD
?	disc detector	qnetquestnotifty.exe	"??"
?	discoveg	discoveg.exe	"??"
N	DiscoverDeskshop	Deskshop.exe	"Discover Deskshop - single use "virtual" credit card"
U	DiscUpdateManager	DiscUpdMgr.exe	"Disc Update Manager for Digital interactive's DISCover Console. Provider of on-demand video games"
X	Disk Keeper	[path to trojan]	"Added by the SMALL-VE TROJAN!"
X	Disk Keeper	SECURITY.EXE	"Daosearch adware"
X	Disk Manager	diskver.exe	"Added by the RBOT.AQT WORM!"
X	Disk Master	[trojan name]	"Added by the DISTER TROJAN! - a spam relayer"
X	DiskCheck	msdarkend.exe	Added by an unidentified WORM or TROJAN!
N	DiskeeperSystray	DkIcon.exe	"DisKeeper defragmentation software - can be started manually"
X	diskinf	diskinf.exe	"Added by the CRYPTER.A TROJAN!"
?	DISKMON.EXE	DISKMON.EXE	"??"
N	Disknag	disknag.exe	Dell program that reminds you to make your backup diskettes
X	Diskstart	Code.exe	Adult content dialler
X	Diskstart	cat.exe	MS-Connect dialler
X	Diskstart	hit.exe	Adult content dialler
X	Diskstart	Snt.exe	Adult content dialler
U	Disk_Monitor	Disk_Monitor.exe	"Multi-media
U	display	The_Eye.exe	"Added by the ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself"
X	Display Drivers	cssrs.exe	"Added by the AGOBOT.FX WORM!"
N	Display Settings	hptasks.exe	"Allows for the adjustment of the display for LCD screen
N	DisplayTrayIcon	TrayIcon.exe	"System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution
U	Disspy	disspy.exe	"Disspy spyware detection and removal software"
N	Distiller Assistant 3.01	DISTASST.EXE	From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
X	Distributed File System	Dfsvc.exe	"Added by the MYFIP.A or MYFIP.K WORMS!"
X	Distributed File System	kernel32dll.exe	"Added by the MYFIP-C or MYFIP.K WORMS!"
X	Distributed File System	blade.exe	"Added by the MYFIP.AC WORM!"
U	Distributed File System	win.exe	"Added by the MYFIP.AB WORM!"
U	distributed.net client	DNETC.EXE	"Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses"
Y	Dit	dit.exe	""Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required
X	Dit	dit.exe	"Added by the LAZAR-A TROJAN! Note - this is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
N	DiTask.exe	DiTask.exe	"Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free
?	Divamon.exe	Divamon.exe	"Associated with an Eicon Networks Diva ISDN or ADSL modem - what does it do and is it required?"
X	divx	divxenc.exe	"Added to the SPBOT.B TROJAN!"
X	Divx	codll.exe	"Added by the GRAVEBOT-A TROJAN!"
X	DivX MediaPlayer 7.0	Dr.DivX.exe	"Added by the ALADINZ.G TROJAN!"
X	DivX Player	DivXPlayer.exe	"Added by a variant of the RBOT WORM!"
X	DivX Updater	DivX.Exe	"Added by the NALDEM TROJAN or MASTAK VIRUS!"
X	Divx4 codec	devldr32.exe	"Added by an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file"
N	DJREGFIX	regedit /s c:hpdjregfix.reg	DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers
X	djtopr1150.exe	djtopr1150.exe	"WebRebates adware"
X	dKernel	dKernel.exe	"Added by the DECOY-A WORM!"
Y	DkService	DkService.exe	"From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. It's recommended to leave this enabled
X	DKTime	dktime.exe	"Added by the LUNII TROJAN!"
X	Dkware lptt01	dkware.exe	"RapidBlaster variant (in a ""DonkeySoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Dkware ml097e	dkware.exe	"RapidBlaster variant (in a ""DonkeySoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
?	dkzzixm	dkzzixm.exe	"??"
Y	dla	tfswctrl.exe	"Drive letter access to a UDF packet writer for CD-RW - from HP
U	DLA	DLACTRLW.EXE	"Sonic CD/DVD burning applications"
N	DlaTray	Dlatray.exe	"System Tray access to DLA - Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - ""This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"""
?	dlbcserv	dlbcserv.exe	"Related to a Dell Photo Printer - what does it do and is it required?"
U	DLBUCATS	"DLBUtime.dll	_RunDLLEntry@16"
?	dlccmon.exe	dlccmon.exe	"Dell Photo AIO Printer 924 Device Monitor. What does it do and is it required?"
?	DLCDCATS	"rundll32 [path] DLCDtime.dll	_RunDLLEntry@16"
?	dlcdmon.exe	dlcdmon.exe	"Related to Dell Photo Printers - what does it do and is it required in startup?"
X	dlder	dlder.exe	"Advertising spyware. Considered to be one oft the worst - even creating a fake ""explorer.exe"" file. Can be installed via versions of ""Grokster""

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.