Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	eBay Toolbar	EBAYTBAR.EXE	"eBay Toolbar - reportes as spyware as it "phones home""
U	eBayToolbar	eBayTBDaemon.exe	"eBay toolabar related - also contains eBay account Guard which monitors for fraudulent eBay sites"
U	eBoard	Eboard.exe	eMachines multimedia keyboard manager. Required if you use the extra keys
N	eBot	DownloadWizard.exe	"eBot from Digital River - "helps ensure your computer always has the latest technology
U	EC21	EZQ.EXE	"Related to EC21. ""EC21 is the world�s largest B2B marketplace to facilitate online trades between exporters and importers from all around the world"""
?	ecpe	ECPE.EXE	"??"
U	eDataSecurity Loader	eDSloader.exe	"Part of Acer Empowering Technology. ""Acer eDataSecurity Management is a handy file encryption utility that protects files from being accessed by unauthorized persons
N	edexter	edexter.exe	"eDexter supplements internet filtering by substituting local images for filtered images in order to prevent browser stalls and other annoyances. Can be activated manually when starting the browser"
X	editpad	editpad.exe	"Added by the CONSPER-B TROJAN!"
N	EDLoader	DTLoader.exe	Effective Desktop from MiniStars Software - desktop management software no longer being supported
U	eDonkey2000	edonkey2000.exe	"File sharing network - not recommended as the free version of this application should be avoided as it installs
U	EDRestore	??	"Set Point from Easy Desk Software - ""small utility that automatically sets System Restore points for WinME/XP"""
X	educational writer	[random filename]	"Added by the RBOT-LZ WORM!"
U	Edwizard	Edwizard.exe	"SafeGuard Easy - ""provides total company-wide protection for sensitive information on laptops and workstations. Boot protection
U	eFax DllCmd	J2GDllCmd.exe	"eFax Messenger fax software"
N	eFax Tray Menu	HotTray.exe	"eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here"
U	eFax Tray Menu	J2GTray.exe	"eFax Messenger fax software tray menu"
N	eFax.com Tray Menu	HotTray.exe	"eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here"
X	efaxs lptt01	efaxs.exe	"RapidBlaster variant (in a ""efaxs"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	efaxs ml097e	efaxs.exe	"RapidBlaster variant (in a ""efaxs"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
U	EFI Job Monitor	"[path] efjm.dll	run"
U	Efpap.exe	Efpap.exe	"Easy File & Folder Protector. Deny access to certain files and folders
U	ehTray	ehtray.exe	"Windows XP Media Center Edition 2005. Enables the user to access Windows Messenger from within Media Center"
X	ei10.exe	ei10.exe	"Added by the AGOBOT-NK WORM!"
U	Eicon NetworksLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
U	Eicon TechnologyLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
X	eixfi	china.bat	"Added by the WCUP.A WORM!"
U	Elbycheck	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
U	Electron Microscope	EMIII.exe	"Electron Microscope or EM - is a program used to track Stanford's distributed computing program client called Folding at Home
X	Element	Element.txt	"Added by the ELEM TROJAN!"
X	element furth	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM!"
X	elitemedia	elitemediapop.exe	"Added by the LOWZONE-BB TROJAN! Also known as Elitebar/EliteToolbar/EliteSidebar adware"
N	elm	Elmenv.exe	"ViaTech eLicense for securing
X	ELNKProxy	smproxy.exe	"Surfmonkey adware"
U	ELSA WINman Suite	Winmsuit.exe	"Allows you to totally customize your ELSA graphics card settings
Y	ElsaCapiCtl	Rcapi.exe	"Assumed to stand for Remote Common Application Programming Interface (RCAPI)
U	ELSAChipGuard	elsavect.exe	"ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed
U	ELSBLaunch	ELSBLaunch.exe	"EarthLink SpamBlocker"
N	EMA.exe	EMA.EXE	Time management system which helps you to manage your time and appointments
U	eMachines eBoard	Eboard.exe	eMachines multimedia keyboard manager. Required if you use the extra keys
Y	Email Protection	emlproxy.exe	"AntiVirus Quick Heal - E-mail protection"
Y	EmailScan	mcvsescn.exe	Related to McAfee AntiVirus suite - used to automatically scan incoming e-mails
X	eMakeSV	EMAKESV.EXE	"Switch premium rate adult content dialler variant"
X	eMakeSV	EMAKE2B.EXE	"Switch premium rate adult content dialer variant"
X	eMCryT Sh3ars Panagers	[path to worm]	"Added by the RBOT-AWI WORM!"
X	emoc0re	emo.exe	"Added by the AGOBOT-AGE WORM!"
X	empin	e121307.exe	"Delphin Media Viewer adware related"
X	empin	e121307.Stub.exe	"Delphin Media Viewer adware related"
X	emsw.exe	emsw.exe	"Attune HelpExpress - spyware. Disable and uninstall - see here"
X	emule	emule.exe	"Added by the RBOT-ALZ WORM!"
N	eMusicClient Systray	eMusicClient.exe	"eMusic MP3 download software"
U	EM_EXEC	EM_EXEC.EXE	Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
N	EN4060C Taskbar	en4060ct.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
X	enBrowser	[name of file]	"WINBO adware"
?	encapsulated command tool	wintr.com	"??"
N	Encarta Dictionary Quickshelf	QSHLFED.EXE	"Provides quick access to Encarta's Dictionary features?"
N	ENCMONITOR	monitor.exe	The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it
N	Encoder Agent	WMENCAGT.EXE	"MS Windows Media Encoder
U	Encompass_ENCMONTR	ENCMONTR.EXE	Optional simple browser from Yahoo (Encompass)
?	ENCSurf	surfboard.exe	"??"
N	Energizer FileSaver	Energizer FileSaver.exe	"Energizer FileSaver - UPS back-up utility for Energizer UPS products. From their Tech Support staff this is known to have a memory leak since it's release - with no fix planned! It will grab 2-5 handles per second and crash the average system in less than 3 days - therefore not recommended"
X	EnergyPlugIn	EnergyPlugin.exe	"EnergyPlugin adware variant"
U	enginecs2	enginecs2.exe	"Cyber Sentinel - internet filtering software"
Y	EngUtil	EngUtil.exe	"Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine
X	Enh Win Updt	enhupdt.exe	"Adware downloader - recognized by Kaspersky antivirus as Trojan-Downloader.Win32.OneClickNetSearch.h"
X	enhance32	enhance32.exe	"Added by the CRYPTER.A TROJAN!"
N	EnigmaPopupStop	EnigmaPopupStop.exe	"Part of Enigma SpyHunter - not recommended
?	ENSApServer2_0	APSERVER.EXE	"Intel AnyPoint Wireless II Home Network related. What does it do and is it required?"
?	ENSMIX32.EXE	ENSMIX32.EXE	"Sound card driver. Is it required?"
U	EnsoniqMixer	starter.exe	"Puts the Ensoniq mixer in system tray. From Ensoniq Technologies ""Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used"". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility"
U	Entbloess 2	Entbloess2.exe	"Related to Window-Switcher - it allows you to see previews of all your open applications via a single keystroke in a manner similar to Apple's Expos�
U	Enterra Icon Keeper	IcnKeepr.exe	"Icon Keeper - ""tool to save and restore icon positions on the desktop"""
X	Enumerate Service	wsys.exe	"Added by the MANIFEST TROJAN!"
Y	EnvyHFCPL	EnMixCPL.exe	"VIA Envy24 PCI Audio Controller driver"
U	eonemng	eOneMng.exe	"eOne Manager
U	EOUApp	EOUWiz.exe	Intel ProSET Wireless related - provides additional configuration options for these devices
U	EOUWiz	EOUWiz.exe	Intel ProSET Wireless related - provides additional configuration options for these devices
U	EPoXUSDM	USDM.EXE	"EPoX Universal Serial Data Monitor - a diagnostics tool that shows Temps
N	ePrint 3.0 Service	EPRINT3.EXE	"LEADTOOLS ePrint file conversion software - ""convert any file to and from over 150 document and image formats including searchable PDF
N	ePrint 4.0 Service	EPRINT4.EXE	"A component of the ""LEADTOOLS ePrint File Conversion Software - Convert ANY file to and from over 150 document and image formats including searchable PDF
U	ePrompter	ePrompter.exe	"ePrompter - E-mail notification software"
N	EPS	e_srcv02.exe	"According to the Epson info: ""Use this utility to automatically check for errors and also check the level of ink remaining."" This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check"
N	EPS	e_srcv03.exe	"According to the Epson info: ""Use this utility to automatically check for errors and also check the level of ink remaining."" This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check"
N	EPSON Background Monitor	STMS.EXE	Supposed to keep an Epson printer ready for quick printing. Users report little difference whether it is on or not
U	EPSON CardMonitor	EPSON CardMonitor1.0.exe	Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint
N	EPSON Status Monitor 3 Environment Check	e_srcv03.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
N	EPSON Status Monitor 3 Environment Check	e_srcv02.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
N	EPSON Status Monitor 3 Environment Check 2	e_srcv03.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
N	EPSON Status Monitor 3 Environment Check 2	e_srcv02.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
U	EPSON Stylus C44 Series	E_S10IC2.EXE	"Epson Stylus C44 Series printer monitor - for checking ink levels
U	EPSON Stylus C46 Series	E_S4I0T1.EXE	"Epson Stylus C46 Series printer monitor - for checking ink levels
U	Epson Stylus C62 Series	E-S0BIC1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U	Epson Stylus C82 Series	e_s0hic1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
?	EPSON Stylus DX4800 Series	E_FATIADE.EXE	"Related to Epson Stylus DX4800 Series printer - what does it do and is it required in startup?"
U	EPSON Stylus Photo R300 Series	E_S4I2F1.EXE	"Epson Status Monitor 3 for the Epson Stylus Photo R300 (and probably others) printers - monitors the status of ink levels
U	EPSON Stylus Photo RX420 Series	E_FATI9CE.EXE	Related to the EPSON Stylus Photo RX420 Series printer/scanner/copier
U	EpsonPhotoStarter	EPSON_PhotoStarter.exe	Only needed if you want to make full use of the capabilities of an Epson printer that included this
X	EQAdvice	EQAdvice.exe	"Added by NewAds1 ADAWARE!"
U	EQArticle	EQArticle.exe	"EQArticle adware"
?	Equipmen	Equipmen.exe	"??"
U	Eraser	eraser.exe	"Eraser allows for complete removal of data from your hard drive"
U	eRecoveryService	check.exe	"Acer Notebook related. Acer eRecovery allows the user to restore the operating system or backup the current system profile
U	eRecoveryService	Monitor.exe	"Part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
N	EReg	reg32.exe	"EReg is a software registration tool incorporated on products such as those by Br�derbund
X	erfgddfk	wind2ll2.exe	"Added by the BEAGLE.CQ WORM!"
X	erghgjhgdr	windlhhl.exe	"Added by the BEAGLE.BG WORM!"
X	erghgjhjgdr	windlhhl.exe	"Added by the BEAGLE.BG or BEAGLE.BH or BEAGLE.BI or BEAGLE.BJ WORMS!"
?	erm	erm.exe	"??"
X	eros.exe	eros.exe	Adult content dailler
N	Error Nuker	ErrorNuker.exe	"ErrorNuker registry cleaner - only required if you want the application to run a scan at startup. The program can be launched manually if required"
X	Error Safe	ers.exe	"Added by ErrorSafe - security risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats"
X	ErrorGuard	ErrorGuard.exe	"Spyware remover - not recommended
X	errorhandler	errorhandler.exe	"Added by ErrorHandler ADAWARE!"
X	erthegdr	windll2.exe	"Added by the BEAGLE.CG WORM!"
X	erthgdr	windll.exe	"Added by the BEAGLE.AO or BEAGLE.AQ WORMS!"
X	erthgdr	svc.exe	"Added by the BEAGLE.BN or BEAGLE.BP WORM!"
X	erthgdr2	svc23.exe	"Added by the BAGLE.CG WORM!"
?	ERTS0749	ERTS0749.exe	"IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire?"
U	ERUNT AutoBachup	AUTOBACK.EXE	"ERUNT backup utility - when added to the user's startup folder automatically backs up the registry each time the system boots
Y	eSafe Protect	ESPWatch.exe	"eSafe from Aladdin - internet security for gateway and E-mail servers"
U	ESB	esb.exe	Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
Y	eScan Monitor	AVKWCTL9X.EXE	"eScan antivirus"
U	eScan Scheduler	avkserv.exe	"eScan antivirus scheduler"
U	eScan Updater	Trayicos.exe	"eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads"
X	EScorcher	escorcher.exe	"Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead"
N	ESFTP	esftp.exe	"ESftp - FTP client for transfering files between a local PC and another remote computer"
X	Esoh	Esoh123.exe	"Added by the AGOBOT.FF WORM!"
X	Especial	Deneca.bat	"Added by the DELUZ VIRUS!"
N	ESPN BottomLine	bline.exe	"ESPN BottomLine. ""You can dock the BottomLine to the top or bottom of your screen or drag it around on your desktop
?	ESS Daemon	Essd.exe	"Related to an ESS based soundacard. Is it required?"
?	essapm	essapm.exe	"ESS Solo soundcard driver. Is it required?"
Y	Essdc	essdc.exe	Related to an ESS Solo soundcard. Seems as though it's required
?	ESSNDSYS	ESSNDSYS.EXE	"Related to an ESS based soundacard. Is it required?"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.