HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	DlDir1	caKe	"Added by the CAKE WORM!"
?	DLForcerExe	DLForcerEXE.exe	"??"
N	DLF_00000B00	Vcdlf.exe	"Known to cause problems with "Out of memory" errors (see here). Otherwise
N	DLG	DLGCHBW.exe	Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
N	DLHelperEXE	WATCH.exe	Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
X	DLHelperEXE.exe	N/A	Downloader for Microgaming/Casino software - stealth installed
X	dlhost	dlhost.exe	"Added by the EXPHOOK-A TROJAN!"
X	DLINK dfe drivers for Windows NT	windfe.exe	"Added by the RANDEX.AK WORM!"
U	DLink System Tray	dlnetst.exe	"Related to D-Link DGE-530T PCI card for servers and workstations"
X	Dlite	dllmanager.exe	"Added by the WOOTBOT.DN WORM!"
X	Dll Boot Loader on Startup (do not remove this)	[various filenames]	Added by an unidentified TROJAN!
X	DLL Manager	dllmngr32.exe	"Added by a variant of the RBOT WORM!"
X	DLL Service Manager	[path to worm]	"Added by the RPCBOT.F TROJAN!"
X	dll services	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	DLL32	dllmem32.exe	"Added by the KWBOT.E WORM!"
X	DLL32	dllhost.dll	"Added by the SUCLOVE.A WORM!"
X	DllCacherv2	dllcachev2.exe	"Added by the LATEDA TROJAN!"
X	dlldmt	dlldmt.exe	"Added by a variant of the CRYPTER.C TROJAN!"
X	DllExecutable	[path to file]	"Added by the VB-SP WORM!"
X	dllhelp	dllhelp.exe	"Added by the STARTPAGE.DQ hijacker"
X	dllhelp	dllhlp.exe	"Added by the Downloader-HI TROJAN!"
X	dllhostxp.exe	dllhostxp.exe	Browser hijacker and adware downloader
X	DllLoader	lssas.exe	"Added by the JE WORM!"
X	Dlload	killer.exe	"Added by the KILLAV-FK TROJAN!"
X	dllreg	dllreg.exe	"Added by the CRYPTER.A TROJAN!"
X	DLLService32	dllsvc32.exe	"Added by the AGOBOT.VX WORM!"
N	dlmMgr	AdobeDownloadManager.exe	"Adobe Download Manager - ""can prevent you from having to start from the beginning should your download process be interrupted
X	dlsp2mx	dlsp2mx.exe	"Added by the MPB-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""dlsp2mx"""
?	DLT	dlt.exe	"??"
X	dluca	dluca.exe	"Adult content dialler - see here"
X	dluca	dluca.exe	"Added by the DLUCA.C TROJAN!"
X	dluxde	dluxde.exe	All-In-One-Telcom (adult content dialler) variant
X	Dluxjp	cnfrm.exe	"Added by the DLUCA.D TROJAN!"
X	DM mgr	dm_mgr.exe	"Added by the JITTAR TROJAN!"
X	dm***.exe [* = random char]	dm***.exe [* = random char]	"Wareout - malware masquerading as a spyware and dialer remover"
N	DMAScheduler	DMAScheduler.exe	"Related to DigitalMedia Plus Archiver. This program is non-essential process to the running of the program
X	DMC	dmc.exe	Added by Trojan-Downloader.Win32.Dluca.bv TROJAN!
N	DMILDR	dmildr.exe	"Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
N	DMISL	DMISL.EXE	"DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information"
N	DMISLAPP	DMISLAPP.exe	"DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information"
?	dmjay	dmjay.exe	"??"
X	dmloader	dmloader.exe	"Added by a variant of the RBOT WORM!"
X	Dmsvc32	Dmsvc32.exe	"Added by the AGOBOT.ABU WORM!"
X	dmtdll	dmtdll.exe	"Added by a variant of the CRYPTER.C TROJAN!"
U	DMXLauncher	DMXLauncher.exe	"Part of Dell's Media Experience
X	dm[3 random letters].exe	dm[3 random letters].exe	"Added by the RUINDEM TROJAN!"
X	DM_server	dmserver.exe	"Comet Cursor adware"
X	dm_service	[path to file]	"Added by the MITGLIEDER.P TROJAN!"
X	dnam	d140113.a.Stub.EXE	"Added by the STUB_A TROJAN!"
X	Dnar	Dnar.exe	"Unknown
Y	DNE Binding Watchdog	"rundll dnes.dll	DnDneCheckBindings"
Y	DNE DUN Watchdog	"rundll dnes.dll	DnDneCheckDUN13"
X	DNS	mc-58-12-0000080.exe	"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000093.exe	"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-110-12-0000079.exe	"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000120.exe	"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000140.exe	"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
X	DNS	[worm filename]	"Added by the CQG WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Common Files folder"
X	Dns Resolver	dnsrslve.exe	"Added by the RBOT-WS WORM!"
X	DNS Service	dnsresolver.exe	"Added by the RBOT-PQ WORM!"
?	DNS2GoClient	dns2goclient.exe	"DNS2Go is a Domain Name System that will make your computer accessible anytime
X	DNSCacheBoost	dnsping.exe	"Added by the DNSBUST-A TROJAN!"
X	dnscleaner	dnscleaner.exe	"CoolWebSearch parasite variant"
?	DNXVC	dnxvc.exe	"??"
X	DocTor	Doctor.exe	"Added by the DOTOR.A WORM!"
N	DocuMagix Init	PWATCH.EXE	"PaperMaster is an application for the PC designed to automate the process of organizing
X	Doggy Style	MsPMSPSd.exe	"Added by the SDBOT-AAP WORM!"
X	DOGStart	GSDOGST.EXE	"Added by an unidentified VIRUS
?	Doing	doing.exe	"??"
X	doit.exe	doit.exe	"Added by the FORBOT-EK WORM!"
X	Domain Name Resolve Service	dnsresolver.exe	"Added by the KIMAN.A WORM!"
U	Don't Panic	dontpanicdemodp.exe	"30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite.""
U	Don't Panic Pop-Up Stopper	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
U	Don't Panic!	DP.EXE	"Don't Panic! privacy software from Panicware. ""Clean up Internet tracks and quickly hide personal documents with this privacy suite"""
U	Dopus	dopus.exe	"Directory Opus - a file manager from GPSoft"
X	dos	dos64.exe	Adware downloader trojan
X	Dos Prompt Loader	cygwin.exe	"Added by the SDBOT-VV WORM!"
?	Dosbat	??	"??"
U	DoubleDesktop	dd.exe	"""DoubleDesktop is a smart and elegant system tray utility that effectively doubles the width of your Windows desktop"""
N	DoUWantIt	duwi.exe	DoUWantIt - online shopping assistant. Start it manually
X	down	hlp32.exe	"Added by the DLOADER.BG TROJAN!"
X	down	[trojan filename]	"Added by the Small-QJ TROJAN!"
U	Down2Home	Down2Home.exe	"Down2Home - ""monitors your ADSL/Cablemodem/Dialup traffic and provides you with usefull statistics about the amount of data your PC has transferred"""
N	Download Accelerator Plus 5.0	DAP.exe	"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
X	Download Plus	DownloadPlus.exe	"DownloadPlus adware"
N	Download Wonder	DownloadWonder.exe	"Download Wonder from Forty Software. Download manager for resuming downloads
N	DownloadAccelerator	DAP.EXE	"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
X	DownloadLegalMusic	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	DownloadWare	dw.exe	"DownloadWare adware"
X	DownloadWare Engine	Dwe.exe	"DownloadWare adware"
X	Downxz	Downxz.bat	"Added by the MYDOOM.W WORM"
N	DPAgnt	DPAgnt.exe	"digitalPersona fingerprint scanner"
U	DPAS	DPASNT.exe	DefenderPro AntiSpy - spyware remover
U	DPASUpdate	DPASAutUpdate.exe	Automatic updates for DefenderPro AntiSpy - spyware remover
Y	Dpcnav	dpcnav.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
N	DPConfig	DPConfig.exe	"Compuware DevPartner Studio Configuration Utility
X	dpcproxy	dpcproxy.exe	"Added by the GOLDENP-A TROJAN!"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y	Dpcstart	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
X	dpi	dpi.exe	"Delfin Media Viewer or ""Promulgate"" adware"
X	dpnsvr32	dpnsvr32.exe	"Added by the AOLPASS-B TROJAN!"
U	dpps2	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
X	dps	dps.exe	"SmartestSearch parasite - poses as a foistware
N	dptracker	dptracker.exe	"CamTrack webcam software that enhances the way people video chat"
U	DpUtil	TEDTray.exe	"Main executable for TOSHIBA DualPoint Utility Main Module. It is a system tray icon program that provides configuration options for dual pointing device"
N	Drag'n'Drop_Autolaunch	Autolaunch.exe	"Iomega HotBurn - CD-RW burning software"
?	DragDrop	DragDrop.exe	"??"
N	DragnDrop_Autolaunch	Autolaunch.exe	"Iomega HotBurn - CD-RW burning software"
X	DRam prmaessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	DRam prosesor	[random filename]	"Added by the SPYBOT.EE WORM!"
X	DRam prosessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	DRan posessor	DAP.exe	"Added by a variant of the SDBOT WORM!"
X	DrCache	MSTDC.EXE	"Added by the JM TROJAN!"
X	DrefIW	SysDrefIWv2.exe	"Added by the DREF-C WORM!"
X	DrefIW	SysDref.exe	"Added by the DREF-D WORM!"
?	dregfix	ph_finder.exe	"??"
N	DrgToDsc	DrgToDsc.exe	"Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly"
?	dried.exe	dried.exe	"??"
N	DriveLED	OODLed.exe	"O&O DriveLED - displays your HDD LED on your monitor. Start manually"
X	Driver	gbot.exe	"Added by the JUNTADOR.K TROJAN!"
X	Driver32	Scam32.exe	"Added by the SIRCAM WORM!"
X	DriverCheck	svchost.exe	"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder"
X	DriverDB	svcmdx32.exe	"Added by the BERPI TROJAN!"
X	DriverLoad	svchost.exe	"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder"
X	DriverModule	csrnvrt.exe	"Added by the IRCBOT.I TROJAN!"
X	DriverPath	system32.exe	"Added by the PRORAT-S TROJAN!"
X	Drivers for Internet Explorer	accesweb.exe	Added by freewebs.com hijacker!
N	DriveSelect	driveselect.exe	"DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs"
U	drkly16j	"rundll32.exe drkly16j.dll	ServiceCheck"
U	dRMON SmartAgent	SmartAgt.exe	"Part of the network monitoring program group for 3Com NIC cards. See here for more info"
X	drmu	W95Mm.exe	"Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread"
X	drocher	d.exe	Adult content dialler
X	DropSpam Lifestyle	dslifestyle.exe	"Dropspam adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list