Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	hclean32.exe	hclean32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
U	Hcontrol	hcontrol.exe	Hotkeys on an ASUS Notebook. Only required if you use the additional keys
N	HDAShCut	HDAShCut.exe	High definition audio page shortcut - not required
X	HDAudio Driver 1.0	[random filename].exe	"Added by the TEADOOR-D TROJAN!"
X	HDAudio Driver 2.0	[random filename].exe	"Added by the TEADOOR-E TROJAN!"
U	HDDHealth	hddhealth.exe	"HDD Health is a ""full-featured failure-prediction agent for machines using Windows 95
U	HDDlife	HDDlife.exe	"HDDlife checks the health of your hard drives at regular intervals and informs you about the results of these checks"
?	HDhelp	tbhdhelp.exe	"Associated with Philips Edge series soundcards. Is it required?"
N	HDtray	HDtray.exe	"Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel"
X	he3bbcff	"rundll32.exe [path] he3bbcff.dll	EnableRunDLL32"
X	he3e3fc4	"rundll32.exe [path] he3e3fc4.dll	EnableRunDLL32"
X	HELLBOT TEST	1hellbot.exe	"Added by the MYDOOM.BO WORM!"
X	HELLBOT3	coolbot.exe	"Added by the MYTOB.AB WORM!"
X	hellodolly	shost.exe	"Added by the YODO WORM!"
X	helloworld	nb32ext2.exe	"Added by the MYDOOM.BV WORM!"
X	helloworld	nb32ext3.exe	"Added by the MYTOB.JT WORM!"
?	Help	helpext.exe	"??"
X	Help Temp Files	netreg.exe	"Added by the FORBOT-EM WORM!"
X	helpctl.exe	helpctl.exe	"Added by the GASLIDE TROJAN!"
X	Helper	eschlp.exe	"Added by the BLASTER.T WORM!"
X	HELPER	greece nm.exe	"AsdPlug premium rate adult content dialer variant"
X	HELPER	Netherlands.exe	"AsdPlug premium rate adult content dialer variant"
X	HELPER	new zealand.exe	"AsdPlug premium rate adult content dialer variant"
X	HELPER	sweden.exe	"AsdPlug premium rate adult content dialer variant"
X	HELPER	canada.exe	"AsdPlug premium rate adult content dialler variant"
X	HELPER	france.exe	"AsdPlug premium rate adult content dialler variant"
X	HELPER	temp532.exe	"AsdPlug premium rate adult content dialler variant"
X	helper.dll	[path] rundll32.exe [path] helper.dll	"CnsMin (Chinese Keywords) hijacker related"
X	HelpExp.exe	HelpExp.exe	"Attune HelpExpress - spyware. Disable and uninstall - see here"
X	helpmanager	spoler.exe	"Added by the RANDEX.J WORM!"
X	helpw	helpw.exe	Adware downloader
X	hen	[filename].exe	"Added by the TARNO.G TROJAN!"
X	heomstool	heomstool.exe	"Added by the HEOMS TROJAN!"
X	hErcUnes	softhost.exe	"Added by the GARROCH WORM!"
U	Hermes Messenger	DGDRHE~1.EXE	"A LAN messenger alternative to WinPopUp - Digital Dreams Software"
X	Hewlett Packard Manager	hpmanager.exe	"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
N	Hewlett Packard Recorder	Remind32.exe	HP multifunction registration
U	Hf	Hf.exe	"Hide Folders - hide your folders so only you can view them"
X	HF Security	hfsecure.exe	"Added by the AGOBOT-TI WORM!"
U	hffsrv	hffsrv.exe	"Hide Files & Folders is a ""password-protected security utility working at the Windows kernel level allowing you to password-protect files and folders
U	hfxp	hfxp.exe	"Hide Folders XP - hide your folders so only you can view them"
X	hgqhp.exe	hgqhp.exe	"Added by the FLUSH.F TROJAN!"
N	HGTXPEI	FirstReboot.exe	Herucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
?	HiberMonitor	HCount.exe	"??"
U	Hibernation	hib32.exe	"Reduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate
X	Hid.exe	hid.exe	"Added by the RATSOU.B TROJAN!"
U	HideOE	HideOE.exe	"HideOE - allows you to 'hide' Outlook Express or minimize it to the System Tray"
X	HideRun.exe	Hiderun.exe and svhost.exe and pro.gif	"Added by the BOOHOO WORM!"
X	HideStyle	Ante Browse Trust.exe	"IE toolbar taking you to Lop.com. If the exe is running
U	hidserv	hidserv.exe	"This is the Human Interface Device Server for Win98SE/2000/Me/XP
N	High Definition Audio Property Page Shortcut	HDAudPropShortcut.exe	"Realtek audio card related - probably adds the odd feature to one of the ""Sounds"" Control Panel applet tabs - doesn't appear to be required"
Y	HighPoint ATA RAID Management Software	raidman.exe	"HighPoint RAID management - hard disk striping/mirroring utility for increased performance and reliability. See here for more information on RAID"
U	HijackThis startup scan	HijackThis.exe	"HijackThis lists the contents of key areas of the Registry and hard drive areas that are used by both legitimate programmers and hijackers. The program is continually updated to detect and remove new hijacks. It does not target specific programs and URLs
X	HijSrv32	hijsrv.exe	"Added by the BANKGERM-D TROJAN!"
N	HistoryKill	histkill.exe	"HistoryKill removes your web surfing path by removing the URL drop-list history
U	Hitman Pro SurfRight Helper	srhelper.exe	"Hitman Pro - a utility to start a number of Security Protection software. They can be started individualy"
X	HitQ	HitQ.exe	"Hijacker
U	HitwarePKLite	HITWAR~1.EXE	"Hitware Popup Killer Lite"
X	HIV	HIV.exe	"Added by the HIVA TROJAN!"
U	hk	hk.exe	"KeyLoggerExp keystroke logger/monitoring program - remove unless you installed it yourself!"
N	hkcmd	hkcmd.exe	"Installed by the Intel 810 and 815 chipset graphic drivers. If the user wishes to have ""HotKey"" access to Intel's customised graphics properties
X	HKEYok	runlli32.exe	"Added by the QQPASS-U TROJAN!"
X	HKLMRun	windowsupdate.exe	"Added by the FORBOT-BJ WORM! (where HKLMRun represents HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun)"
U	hkserv	HKserv.exe	Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS
U	hkss	hkss.exe	Compaq HotKey Support - multimedia keyboard support
X	HLcleanup	hlsetup2.exe	"LinkReplacer/FFinder adware"
X	hldrrr	hldrrr.exe	"Added by the BAGLE-KF WORM!"
X	hlhtxo.exe	hlhtxo.exe	"Added by the QLOWZONES-27 TROJAN!"
X	HLL Data Parameter	hllcxpa.exe	"Added by the RBOT.AFG WORM!"
X	HMI PowerSystem	hmisvc32.exe	"Added by the RANDEX.CZZ WORM!"
X	HML PowerSource	hmlsvc32.exe	"Added by the SDBOT-XL WORM!"
U	Hmonitor	Hmonitor.exe	Hardware sensor monitoring program. Only required if you overclock your system and want to check on the status
X	HMV PowerSource	hmusvc32.exe	"Added by the SDBOT-YW WORM!"
X	ho2stdll.exe	ho2stdll.exe	"Added by the BANKER-HO TROJAN!"
X	HOI Services	holsvc32.exe	"Added by the AGOBOT-SF WORM!"
N	Holiday Lights	Holiday Lights.exe	"Holiday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start -> Programs"
X	Hollaback	slvhosts.exe	"Added by the SDBOT.BMO WORM!"
N	Home Theater SchSvr	SchSvr.exe	"WinScheduler is installed with Home Theater Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
U	HomeAlarm	HomeAlarm.exe	"Chameleon Clock - system tray clock replacement"
?	HomeCentre WakeUp	LGWAKEUP.EXE	"Associated with the no longer supported Xerox HomeCentre printer/scanner"
X	Homeland Network	HomelandNetwork.exe	Homeland Network Notifier - pops ads
?	Honor	honor.exe	"??"
U	Hook99startup	hk2re.exe	""Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons
U	HookSys	HookSys.exe	"SurfinGuard Pro - protects against all malicious code delivered through executables
Y	HorngTech4D	bally4d.exe	HorngTech 4D mouse driver
X	Host	N/A	"Added by the POPDIS or STARTPAGE.F TROJANS!"
X	host	help.exe	"Identified as the DELF.LF by Ewido Security Suite"
X	Host Process	mame.exe	"Added by the RBOT-APO WORM!"
X	hostdll.exe	hostdll.exe	"Added by the BANKER-BO TROJAN!"
U	HostManager	AOLHostManager.exe	"Manages a component essential to the operation of most current AOL software. If you remove it from startup it will load when IE is launched
N	HostManager	AOLSoftware.exe	"Quoted from AOL Beta Team
X	Hostren.exe	Hostren.exe	"Added by PWS.BANKER.F
X	hostserv	hostserv.exe	"Added by the RBOT.BPZ WORM!"
X	hostserv	wiz98.exe	"Added by a variant of the SDBOT WORM!"
U	HostsMan	hm.exe	"""HostsMan is a freeware application that lets you manage your Hosts file with ease"". It is mainly intended to block specific domains (mostly advertising servers) by redirecting them to localhost
X	HostSrv	sachostx.exe	"Added by the LOOKSKY.H WORM! Drops multiple files in the System (9x/ME) or System32 (NT/2K/XP) folders"
X	HostSrv	sachostx.exe	"Added by the LOOKSKY.A or LOOKSKY.F or LOOKSKY.G WORMS!"
X	HostSrv	sachostx.exe...	"Added by the LOOKSKY.E WORM!"
X	HostSVC syse	HostSVC.exe	"Added by the RBOT-ANZ WORM!"
U	Hot Corners	Hotc.exe	"Hot Corners - ""lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen"""
U	Hot Key Kbd 2690 Daemon	SK9910DM.exe	Multimedia keyboard manager - required if you use any special keys
U	Hot Key Keybd 9910 Daemon	SK9910DM.exe	Multimedia keyboard manager - required if you use any special keys
?	Hot Party 22	hotpart22.exe	"??"
X	HotAction_hr	hotaction_hr.exe	"Added by the SITEICON-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""HotAction_hr"""
X	Hotbar	Hbinst.exe	"Hotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here"
X	Hotbar	HbOEAddOn.exe	"Hotbar adware"
X	Hotfix Updat	svdhost32.exe	"Added by the GAOBOT.ZW WORM!"
U	HotIDE	hotide.exe	HotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks
U	HotkeyApp	HotkeyApp.exe	"Programmable keys on Acer
N	HotKeysCmds	hkcmd.exe	"Installed by the Intel 810 and 815 chipset graphic drivers. If the user wishes to have ""HotKey"" access to Intel's customised graphics properties
X	HotPix	hotpix.exe	Adult content dialler
X	hotplug	hotplug.exe	"Added by the SILLYDL TROJAN!"
N	HotSync Manager	hotsync.exe	Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start -> Programs
X	hotwetlove	hotwetlove.exe	Adult content dialler. Will not uninstall - components have to be manually deleted
X	Hot_Kiss	Hot_Kiss.exe	Adult content dialler
X	Hot_Tarts	Hot_Tarts.exe	Adult content dialler
X	Hot_Tarts_**	Hot_Tarts_**.exe	Premium rate adult content dialer (where * is a random char)
X	Hot_Tarts_Au	Hot_Tarts_Au.exe	Premium rate adult content dialler
X	Hot_Tarts_mc	Hot_Tarts_mc.exe	"HotTarts adult content dialer"
U	HoverDesk	HoverDesk.exe	"HoverDesk - desktop replacement software"
?	hp 1000 firmware	fwdl.exe	"HP LaserJet 1000 related. Is it a driver or automatic firmware update (based upon the filename)?"
U	HP AutoIndexer	hppautoindexer.exe	"Installed by HP multi-function printer driver software
N	HP CD Writer	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N	HP CD-DVD	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N	HP CD-Writer	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
X	hp center	BACKWEB-*****.exe	"See here - ""messaging service that automatically sends you support information
N	hp center UI	ShadowBar.exe	"User Interface for HP Center - see here"
N	HP Component Manager	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
X	HP Deskjet	HP_DeskJet_500.exe	"Added by the FORBOT-DA WORM!"
U	HP Digital Imaging Monitor	hpqtra08.exe	"System Tray access to HP Director. Required if you prefer to use the all-in-one buttons to manually scan documents or transfer photos froma camera
U	HP Display Settings	hpdisply.exe	"Sets default display settings. Unchecking this item has been reported to cure a ""Problem sending command to keyboard"" error message"
?	HP IDScheduler	HPIDSCHD.exe	"HP Instant Delivery Scheduler"
N	HP Image Zone Fast Start	hpqthb08.exe	"Improves the startup time of HP Image Zone. If you disable it

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.