Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	drvddll.exe	drvddll.exe	"Added by the BEAGLE.AP WORM!"
X	Drvddll_exe	drvddll.exe	"Added by the BEAGLE.X WORM!"
?	DrvListnr	DrvListnr.exe	"Analog Devices SoundMAX soundcard related. What does it do and is it required?"
U	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
U	DrvMon.exe	DrvMon.exe	"Alcor drive monitor software"
X	drvnetw	drvnetw.exe	"Added by the BROGGER-B TROJAN!"
X	drvr32h	drvr32h.exe	"Added by an unidentified VIRUS
X	drvrmanager	drvrquery32.exe	"Added by the BOOHOO WORM!"
X	drvsys.exe	drvsys.exe	"Added by the BEAGLE.W WORM!"
X	drvupd	rundll32 ..drvupd.inf	"Hijacker - drvupd.inf file installs a ""searchforge.com"" hijack"
X	drv_st_key	hidn.exe	"Added by the BEAGLE.FF WORM!"
X	DrWatson	drwatson_.exe	"Added by the LOHAV-S TROJAN!"
X	DrWatson	drwatson_32.exe	"Added by the LOHAV-S TROJAN!"
X	DrWeb Antivirus	DRWEBAV.EXE	Added by an unidentified WORM or TROJAN!
Y	Drwebscheduler	Drwebscd.exe	"Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications
X	DR_S	DR_S.exe	"AdShooter adware"
X	ds	ds.exe	"Added by the SPYMON TROJAN!"
U	DS Clock	dsclock.exe	"Digital desktop clock including synchronization with atomic servers - see here"
X	dsa	dsa.exe	Homepage hijacker - redirecting to downseek.com
X	DSAcass	[path to file]	"Added by the RANKY.M TROJAN!"
X	DSB	DSB.exe	"EnergyPlugin adware"
N	DSentry	DSentry.exe	"Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching
X	Dsi	dp-******.exe	Added by an unidentified adware where ****** are random characters
X	Dsi	dp-him.exe	"Added by the MULTIDR-AH TROJAN!"
X	Dskcompat	Dskcompat.exe	"Added by the GEMA TROJAN!"
U	DSKEY	DsKey.exe	"Part of PC PhoneHome - ""secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection"". Security software from Brigadoon Security Group for tracking down lost/stolen computers"
N	DSL Monitor	spdstrm.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y	DSLagentexe	DSLagent.exe	"Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection"
Y	dslmon	dslmon.exe	Sagem DSL modem related. Apparently needed to detect the modem
U	DSLSTATEXE	dslstat.exe	System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example)
X	DsmSer	dsm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	svosm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	sysup.exe	"Added by the SERFLOG.B WORM!"
X	DsplObjects	windspl.exe	"Added by the BEAGLE.DN WORM!"
X	DSS	dssagent.exe	"DSSAgent by Br�derbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info"
X	DSS	[path to trojan]	"Added by the DSSDOOR-C TROJAN!"
X	DSService	dmrss.exe	"Added by the AGOBOT-XX WORM!"
?	DSSSGENS	dssagens.exe	"??"
X	DSystemDriver	windrv.exe	"Added by the DELF.WG TROJAN!"
N	DU Meter	DUMETER.EXE	"Hagel Technologies internet bandwidth monitor"
X	duck	duck.exe	"Added by the AGOBOT-AVG WORM!"
X	Dumeter Services	dumeter.exe	"Added by the SDBOT-AEQ WORM!"
N	dumprep 0 -k	dumprep 0 -k	"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
N	dumprep 0 -u	dumprep 0 -u	"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
X	DUN_SERVICES3	dun3.exe	"Added by the SOKIRON TROJAN!"
X	Duweculey	yujixit.exe	"Added by the SDBOT.BRP WORM!"
N	dvd43	DVD43_Tray.exe	"DVD43 is ""a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies"""
U	DVD43	DVD43.exe	"DVD43 is a small tool that overrides CSS copy-protection found on DVD movies"
X	dvd98	windvd98.exe	"Added by the CULT.P WORM!"
U	DVDBitSet	DVDBitSet.exe	DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
?	DVDCheck	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
X	Dvdcompat	Dvdcompat.exe	"Added by the GEMA TROJAN!"
N	DVDLauncher	DVDLauncher.exe	"Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion"
N	DVDSentry	DSentry.exe	"Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching
N	DVDTray	DVDTray.exe	HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware
N	DVDUpgrade	DVDUpgrd.exe	"Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs"
N	DVDXGhost	DVDGhost.EXE	"DVD Ghost - ""utility to make your software DVD players and DVD copy/backup softwares restriction-free
Y	Dvp95	Dvp95.exe	"Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine"
Y	dvpapi9x	DVPAPI9X.exe	Command AntiVirus for Windows 95/98/Me
Y	DvpInitExe	Dvpinit.exe	"Command Antivirus related"
Y	dvprpt	Dvprpt.exe	"Command Antivirus related"
X	dvraudio	dvraudio.exe	"Added by a variant of the CRYPTER.C TROJAN!"
X	dvsfss	fbsfsdrs.exe	"Added by the SDBOT-QA WORM!"
U	DVSync	dvsync.exe	DVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC
X	Dvx	wsxsvc.exe	"Delfin Media Viewer or ""Promulgate"" adware variant"
X	dw	dw.exe	"DownloadWare adware"
N	DW4	Weather.exe	"Desktop Weather"
U	DWHeartbeatMonitor	DWHeartbeatMonitor.exe	DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
N	DwlClient	support.exe	Download manager for Dell support alerts
Y	dwStart	FireWall.exe	"The Shield firewall"
X	Dx	sys.exe [ = random number]	"Added by the DEXTER.A WORM!"
X	Dx8compat	Dx8compat.exe	"Added by the GEMA TROJAN!"
X	dxdiags.exe	dxdiags.exe	"Added by the CERTIF-G TROJAN!"
X	dxdll32	ntxdll.exe	"Added by the GAOBOT.CPX WORM!"
N	DXDllRegExe	dxdllreg.exe	"Created when you select ""Yes"" to check the ""WHQL Digital signatures"" in the DirectX9 files at the first time you open it"
X	DxLoad	DX3DRndr.exe	"Added by the GIBE.B WORM!"
N	DXM6Patch_981116	p_981116.exe	"Win32 cabinet self extractor. More info here"
X	dxmsrv	dxmsrv.exe	Added by an unidentified WORM or TROJAN!
X	Dxsty	Dxsty.exe	"Added by the GEMA TROJAN!"
X	Dxupdate.exe	Dxupdate.exe	"Added by the MAFEG WORM!"
X	dxvid	dxvid.exe	Added by Trojan-Downloader.Win32.Dluca.by TROJAN!
X	DyFuCA	optimize.exe	"Adult content dialler - see here"
X	DyFuCA Active Alert	actalert.exe	"Adult content dialler - see here"
X	Dynamic Dns Binary	dynitora.exe	"Added by the RBOT-WT WORM!"
X	Dynamic Dns Binary	CMD16.EXE	"Added by the RBOT-XM WORM!"
X	Dynamic Dns Binary	winxp34.exe	"Added by a variant of the RBOT WORM!"
X	Dynamic Dns Binary	WinHelpcfn.exe	"Added by a variant of the RBOT WORM!"
X	Dynamic Link Library loader	Loader32.exe	"Added by the KOL TROJAN!"
U	DynDNS Updater	DynDNS.exe	"Dynamic DNS IP address updater tool
N	DynDNS-Updater Traytool	ddutray.exe	"DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually"
X	DynHttp Dns Binary	dynizari.exe	"Added by a variant of the RBOT WORM!"
U	DynSite	DynSite.exe	"DynSite - dynamic DNS client
U	Dynu Basic Client	dynubas.exe	"Dynu online dynamic IP update client. Useful when using a dial up modem"
?	DZKillMe	DZSAVEME.EXE	"??"
U	D_V_T	dvt.exe	"DICOM Validation Tool - ""DICOM is increasingly being used as the standard communication mechanism when integrating various medical products in a hospital environment"""
X	E-Card	ecard.exe	"Added by the YODI WORM!"
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
X	E-nrgyPlus	E-nrgyPlus.exe	"Added by the Energyplus TRACKWARE! Tracks internet activity including websites visited and queries made at popular search engines. This information along with some system information is sent to a remote site"
X	e-Surveiller Station	estation.exe	"Added by ESurveiller spyware. Note - ESurveiller is spyware that monitors and records keystrokes and mouse clicks
U	E06DXLRD_7604703	EDICT.EXE	"Related to Microsoft Encarta dictionary functions"
N	E6TaskPanel	TaskPanl.exe	"Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X	Eac Download	download.exe	"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
U	EACLEAN	eaclean.exe	"For Compaq PC's. Easy Access button support for the keyboard"
X	Eac_Cnry	canary.exe	"Added by the CANARY TROJAN!"
?	Eac_rnvdl	ANTIVIRUS_INSTALL.EXE	"??"
U	EanthologyApp	EANTHO~1.EXE	"eAcceleration Stop-Sign security software related. Previously not recommended
U	EanthologyApp	eanthology.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
U	eanthology_install.exe	eanthology_install.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
U	eanth_critical_update_alert	sys_alert.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
U	eanth_system_patcher	sys_alert.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
N	EAPCISETUP	wizard.exe	Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
Y	Earthlink Protection Control Center	elnk_pcc.exe	"EarthLink Protection Control Center - ""powerful
N	EarthLink ToolBar 5.0	etoolbar.exe	"EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar
U	Easy Key	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
N	Easy Start Button	esb.exe	Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
U	Easy-PrintToolBox	BJPSMAIN.EXE	A utility to launch the applications that are bundled with a Canon bubblejet printer
X	EasyAV	EasyAV.exe	"Added by the NETSKY.S or NETSKY.T WORMS!"
X	EasyDates	EasyDates.exe	Premium rate adult content dialler
X	EasyDates_nl	EasyDates_nl.exe	Adult content dialler
U	EasyKey	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
U	EasyKeyboardLogger	EasyKeyboardLogger.exe	"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
U	EasyMessage	em2.exe	"Easy Messenger
X	EasySearchBar	ESBUpdate.exe	EasySearchBar adware downloader
X	easyServ	Server.exe	"Added by the EASYSERV TROJAN!"
U	EasySync Pro	XCPCMenu.exe	"EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes"
U	EasyTuneIII	EasyTune.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U	EasyTuneIV	ET4Tray.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
X	easywww	easywww2.exe	"Added by an unidentified VIRUS
N	EbatesMoeMoneyMaker	wjview ...Code	"Ebates adware"
X	EbatesMoeMoneyMaker0	EbatesMoeMoneyMaker0.exe	"Ebates adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.