HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
N	DMISL	DMISL.EXE	"DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information"
N	DMISLAPP	DMISLAPP.exe	"DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information"
?	dmjay	dmjay.exe	"??"
X	dmloader	dmloader.exe	"Added by a variant of the RBOT WORM!"
X	Dmsvc32	Dmsvc32.exe	"Added by the AGOBOT.ABU WORM!"
X	dmtdll	dmtdll.exe	"Added by a variant of the CRYPTER.C TROJAN!"
U	DmwClient	dmwclient.exe	"DMW ""anti-cheating"" software for online gaming"
U	DMXLauncher	DMXLauncher.exe	Part of Dell's Media Experience a multimedia suite which offers the user functionality to organise and play music and digital video files
X	dm[3 random letters].exe	dm[3 random letters].exe	"Added by the RUINDEM TROJAN!"
X	DM_server	dmserver.exe	"Comet Cursor adware"
X	dm_service	[path to file]	"Added by the MITGLIEDER.P TROJAN!"
X	dnam	d140113.a.Stub.EXE	"Added by the STUB_A TROJAN!"
N	Dnar	Dnar.exe	"Installed on some Dell workstations and DMI related. Tries to access the internet and is known to not be required - but what does it do?"
Y	DNE Binding Watchdog	rundll dnes.dll DnDneCheckBindings	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
Y	DNE DUN Watchdog	rundll dnes.dll DnDneCheckDUN13	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
X	DNHelper32	DNHlp32.exe	Added by an unidentified WORM or TROJAN!
X	DNS	mc-58-12-0000080.exe	"Shorty adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000093.exe	"Shorty adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-110-12-0000079.exe	"Shorty adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000120.exe	"Shorty adware - also detected as the AGENT.FD TROJAN!"
X	DNS	mc-58-12-0000140.exe	"Shorty adware - also detected as the AGENT.FD TROJAN!"
X	DNS	[worm filename]	"Added by the BCKDR-CQG BACKDOOR!"
X	Dns Resolver	dnsrslve.exe	"Added by the RBOT-WS WORM!"
X	DNS Service	dnsresolver.exe	"Added by the RBOT-PQ WORM!"
X	DNS Service	dnssvc.exe	"Added by the DELBOT-Z WORM!"
?	DNS2GoClient	dns2goclient.exe	"DNS2Go is a Domain Name System that will make your computer accessible anytime anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?"
N	DNS7reminder	Ereg.exe Ereg.ini	"ScanSoft (Nuance) Dragon NaturallySpeaking registration reminder. Version 7"
X	DNSCacheBoost	dnsping.exe	"Added by the DNSBUST-A TROJAN!"
X	dnscleaner	dnscleaner.exe	"CoolWebSearch parasite variant"
X	dnse	dnse.exe	"WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended see here"
?	DNXVC	dnxvc.exe	"??"
X	doc	doc.exe	"Added by the AGOBOT-BJ WORM!"
X	DocTor	Doctor.exe	"Added by the DOTOR.A WORM!"
X	Doctor Antivirus 2008	antvr.exe	"Doctor Antivirus 2008 rogue security software - not recommended see here"
N	DocuMagix Init	PWATCH.EXE	"PaperMaster is an application for the PC designed to automate the process of organizing archiving and retrieving digital versions of files. Start manually if needed"
U	Document Manager	docmgr.exe	"Wave Systems Corp. Document Manager - ""provides secure storage and management capabilities for file and folder level encryption"""
X	Doggy Style	MsPMSPSd.exe	"Added by the SDBOT-AAP WORM!"
X	DOGStart	GSDOGST.EXE	Added by an unidentified VIRUS WORM or TROJAN! A possibility is a trojan known as PENIS
?	Doing	doing.exe	"??"
X	doit.exe	doit.exe	"Added by the FORBOT-EK WORM!"
X	Domain Name Resolve Service	dnsresolver.exe	"Added by the KIMAN.A WORM!"
X	DomPlayer Service	wakeservice.exe	"DomPlayer adware"
U	Don't Panic	dontpanicdemodp.exe	"30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite.""
U	Don't Panic Pop-Up Stopper	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
U	Don't Panic!	DP.EXE	"Don't Panic! privacy software from Panicware. ""Clean up Internet tracks and quickly hide personal documents with this privacy suite"""
U	Dopus	dopus.exe	"Directory Opus - a file manager from GPSoft"
N	DoroServer	DoroServer.exe	"Doro PDF Writer from The SZ Development. All what you need for creating pdf files"
X	dos	dos64.exe	Adware downloader trojan
X	Dos Prompt Loader	cygwin.exe	"Added by the SDBOT-VV WORM!"
?	Dosbat	??	"??"
X	Dot1XCfg	Dot1XCfg.exe	"Detected by PCTools as Maxfiles adware - see here"
U	DoubleDesktop	dd.exe	"""DoubleDesktop is a smart and elegant system tray utility that effectively doubles the width of your Windows desktop"""
N	DoUWantIt	duwi.exe	DoUWantIt - online shopping assistant. Start it manually
X	Dowmingzu	Dowmingzu.dll.vbs	"Added by the SOLOW-E WORM!"
X	down	hlp32.exe	"Added by the DLOADER.BG TROJAN!"
X	down	[trojan filename]	"Added by the SMALL-QJ TROJAN!"
U	Down2Home	Down2Home.exe	"Down2Home - ""monitors your ADSL/Cablemodem/Dialup traffic and provides you with usefull statistics about the amount of data your PC has transferred"""
N	Download Accelerator Manager Free Edition	dam.exe	"Download Accelerator Manager Free Edition from Tensons Corp"
N	Download Accelerator Plus 5.0	DAP.exe	"Download Accelerator Plus from Speedbit. Download manager for resuming downloads amongst other features. Available via Start -> Programs. Note that the free version is adware based"
X	Download Plus	DownloadPlus.exe	"DownloadPlus adware"
N	Download Wonder	DownloadWonder.exe	"Download Wonder from Forty Software. Download manager for resuming downloads amongst other features"
N	DownloadAccelerator	DAP.EXE	"Download Accelerator Plus from Speedbit. Download manager for resuming downloads amongst other features. Available via Start -> Programs. Note that the free version is adware based"
X	DownloadLegalMusic	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	DownloadMP3	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	DownloadWare	dw.exe	"DownloadWare adware"
X	DownloadWare Engine	Dwe.exe	"DownloadWare adware"
X	Downxz	Downxz.bat	"Added by the MYDOOM.W WORM"
N	DPAgnt	DPAgnt.exe	"digitalPersona fingerprint scanner"
U	DPAS	DPASNT.exe	DefenderPro AntiSpy - spyware remover
U	DPASUpdate	DPASAutUpdate.exe	Automatic updates for DefenderPro AntiSpy - spyware remover
U	DPASUpdate	DPASAutoUpdate.exe	"Defender Pro Antispy"
Y	Dpcnav	dpcnav.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
N	DPConfig	DPConfig.exe	Compuware DevPartner Studio Configuration Utility a tool for software developers - System Tray access to configure the utility's analysis. Not required at startup can be launched from the Start Menu programs group when needed
X	dpcproxy	dpcproxy.exe	"Added by the GOLDENP-A TROJAN!"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y	Dpcstart	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
X	dpi	dpi.exe	"Delfin Media Viewer or ""Promulgate"" adware"
X	dpnsvr32	dpnsvr32.exe	"Added by the AOLPASS-B TROJAN!"
U	dpps2	dpps2.exe	"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
X	dps	dps.exe	"SmartestSearch parasite - poses as a foistware bogus adware/spyware remover called ""scumware-remover"""
N	dptracker	dptracker.exe	"CamTrack webcam software that enhances the way people video chat"
U	DpUtil	TEDTray.exe	"Main executable for TOSHIBA DualPoint Utility Main Module. It is a system tray icon program that provides configuration options for dual pointing device"
N	Drag'n'Drop_Autolaunch	Autolaunch.exe	"Iomega HotBurn - CD-RW burning software"
?	DragDrop	DragDrop.exe	"??"
N	DragnDrop_Autolaunch	Autolaunch.exe	"Iomega HotBurn - CD-RW burning software"
X	DRam Monitor 23	tskman3.exe	"Added by a variant of the RBOT WORM!"
X	DRam prmaessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	DRam prosesor	[random filename]	"Added by the SPYBOT.EE WORM!"
X	DRam prosessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	DRam prosessor	plscd.exe	"Added by the RBOT.CYA WORM!"
X	DRam prosessor	HWAPI.exe	"Added by a variant of the RBOT WORM! Note - this is not the McAfee HackerWatch process which has the same filename"
X	DRam prosessor	WindowsUpdate.exe	"Added by the RBOT-BBZ WORM!"
X	DRam prosessor	msupdate.exe	"Added by the DELF-FAW TROJAN!"
X	DRam rar proc	winupdaterar.exe	"Added by a variant of the IRCBOT TROJAN!"
X	DRam rare proc	updaterarwin.exe	"Added by the RBOT-GQW WORM!"
X	DRan posessor	DAP.exe	"Added by a variant of the SDBOT WORM!"
X	DrCache	MSTDC.EXE	"Added by the BDOOR-JM BACKDOOR!"
X	dreams	server.exe	"Added by a variant of the SDBOT WORM!"
X	DrefIW	SysDrefIWv2.exe	"Added by the DREF-C WORM!"
X	DrefIW	SysDref.exe	"Added by the DREF-D WORM!"
?	dregfix	ph_finder.exe	"??"
N	DrgToDsc	DrgToDsc.exe	"Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly"
?	dried.exe	dried.exe	"??"
X	drin	[path to trojan]	"Added by the SMALL.DPB TROJAN!"
X	DriveCleaner 2006 Free	UDC2006.exe	"DriveCleaner rogue security software - not recommended see here"
X	DriveCleaner Free	UDC.exe	"DriveCleaner misleading security program - not recommended see here"
U	DriveIcons	DriveIcon.exe	"Drive Icons from Realtek - shows a specific icon for each card type for their card reader controllers"
U	DriveLED	OODLed.exe	"O&O DriveLED - hard disk monitoring and crash prevention"
X	Driver	gbot.exe	"Added by the JUNTADOR.K TROJAN!"
X	Driver32	Scam32.exe	"Added by the SIRCAM WORM!"
X	DriverCheck	svchost.exe	"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder"
X	DriverDB	svcmdx32.exe	"Added by the BERPI TROJAN!"
X	DriverLoad	svchost.exe	"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a C:DriverLoad folder"
U	DriverMagicLogon	dmschedule.exe	"Part of DriverMagic - ""the easiest way to locate device drivers"""
N	DriverMax	devices.exe	"DriverMax from Innovative Solutions - ""a new tool that allows you to download the latest driver updates for your computer. No more searching for rare drivers on discs or on the web or inserting one installation CD after the other"""
X	DriverModule	csrnvrt.exe	"Added by the IRCBOT.I TROJAN!"
X	DriverPath	system32.exe	"Added by the PRORAT-S TROJAN!"
X	Drivers for Internet Explorer	accesweb.exe	Added by freewebs.com hijacker!
N	DriveSelect	driveselect.exe	"DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs"
U	drkly16j	rundll32.exe drkly16j.dll ServiceCheck	"KidsWatch Time Control parental control software"
X	DRM Upgrade	drmupgd.exe	"Detected by Trend Micro as the IRCBOT.AWU BACKDOOR! See here"
U	dRMON SmartAgent	SmartAgt.exe	"Part of the network monitoring program group for 3Com NIC cards. See here for more info"
X	drmsrv32	stmhosts.exe	"Added by the AGENT.AGWU TROJAN!"
X	drmu	W95Mm.exe	Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise
X	Drmupgds	Drmupgds.exe	"Detected by PCTools as Maxfiles adware - see here"
X	drocher	d.exe	Adult content dialler
X	DropSpam Lifestyle	dslifestyle.exe	"Dropspam adware"
X	drvddll.exe	drvddll.exe	"Added by the BEAGLE.AP WORM!"
X	Drvddll_exe	drvddll.exe	"Added by the BEAGLE.X WORM!"
U	DrvIcon	DrvIcon.exe	"""Vista Drive Icon changes the drive icons shown in Windows ""My Computer"" to a nearly Vista drive icon showing the drive's free space with a smooth colored horizontal bar"""
?	DrvListnr	DrvListnr.exe	"Analog Devices SoundMAX soundcard related. What does it do and is it required?"
U	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
U	DrvMon.exe	DrvMon.exe	"Alcor drive monitor software"
X	drvnetw	drvnetw.exe	"Added by the BROGGER-B TROJAN!"
X	drvr32h	drvr32h.exe	Added by an unidentified VIRUS WORM or TROJAN!
X	drvrmanager	drvrquery32.exe	"Added by the BOOHOO WORM!"
X	drvsys.exe	drvsys.exe	"Added by the BEAGLE.W WORM!"
X	drvsyskit	hidr.exe	"Added by the BAGLE.HR WORM!"
X	drvupd	rundll32 ..drvupd.inf	"Hijacker - drvupd.inf file installs a ""searchforge.com"" hijack"
X	drv_st_key	hidn.exe	"Added by the BEAGLE.FF WORM!"
X	DrWatson	drwatson_.exe	"Added by the LOHAV-S TROJAN!"
X	DrWatson	drwatson_32.exe	"Added by the LOHAV-S TROJAN!"
X	DrWeb Antivirus	DRWEBAV.EXE	Added by an unidentified WORM or TROJAN!
Y	Drwebscheduler	Drwebscd.exe	"DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications in particular the antivirus scanner or the update subsystem"
X	DR_S	DR_S.exe	"IstBar adware"
X	ds	ds.exe	"Added by the SPYMON TROJAN!"
U	DS Clock	dsclock.exe	"Digital desktop clock including synchronization with atomic servers - see here"
X	dsa	dsa.exe	Homepage hijacker - redirecting to downseek.com
X	DSAcass	[path to file]	"Added by the RANKY.M TROJAN!"
X	dsadlsa14	dsakfsak14.exe	"Added by the ONLINEG-P TROJAN!"
X	DSB	DSB.exe	"EnergyPlugin adware"
U	dscactivate	dsca.exe	Dell Support Agent offers additional support and update features for your Dell computer or laptop
X	dsd	zz.exe	"Added by the RBOT-FOX WORM!"
N	DSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching they decided to implement an anti-spyware service. Run manually before installation starts
X	Dsi	dp-******.exe	Added by an unidentified adware where ****** are random characters
X	Dsi	dp-him.exe	"Added by the MULTIDR-AH TROJAN!"
X	Dskcompat	Dskcompat.exe	"Added by the GEMA TROJAN!"
U	DSKEY	DsKey.exe	"Part of PC PhoneHome - ""secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection"". Security software from Brigadoon Security Group for tracking down lost/stolen computers"
X	DSKEY	[path to trojan]	"Added by the STARTER-G TROJAN!"
N	DSL Monitor	spdstrm.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y	DSLagentexe	DSLagent.exe	"Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection"
Y	dslmon	dslmon.exe	Sagem DSL modem related. Apparently needed to detect the modem
U	DSLSTATEXE	dslstat.exe	System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example)
X	DsmSer	dsm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	svosm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	sysup.exe	"Added by the SERFLOG.B WORM!"
X	DsplObjects	windspl.exe	"Added by the BEAGLE.DN WORM!"
X	DSS	dssagent.exe	"DSSAgent by Brøderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info"
X	DSS	[path to trojan]	"Added by the DSSDOOR-C TROJAN!"
X	DSService	dmrss.exe	"Added by the AGOBOT-XX WORM!"
?	DSSSGENS	dssagens.exe	"??"
X	dstiosys	plsitctl.exe	"Added by the MAILBOT-BX TROJAN!"
X	DSystemDriver	windrv.exe	"Added by the DELF.WG TROJAN!"
U	DT HPW	DTHtml.exe	"Display Tune from Portrait Displays Inc. - ""is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface and the user is guided step-by-step through the entire initial tuning process."" Also licensed and renamed by manufacturers such as Gateway and HP"
N	DU Meter	DUMETER.EXE	"Hagel Technologies internet bandwidth monitor"
U	DualCoreCenter	StartUpDualCoreCenter.exe	Unified control center for overclocking both the graphics card and the CPU but for the program to have its full functionality you must have an MSI mainboard with a CoreCell chip
X	duck	duck.exe	"Added by the AGOBOT-AVG WORM!"
N	Dulux WeatherShield WeatherDesk	weather.exe	"Dulux WeatherShield WeatherDesk - latest weather information from across Australia"
X	Dumeter Services	dumeter.exe	"Added by the SDBOT-AEQ WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list