Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
U H/PC Connection Agent WCESCOMM.EXEActive sync for use with Windows CE based palm PC
Y H2O cledx.exe"Related to copyright protection products by SyncroSoft"
U H2OWIBU CXWibu.exe"Related to CodeMeter from WIBU-SYSTEMS AG. Software protection hardware"
X h4te Service Drivers h4te.exe"Added by a variant of the RBOT WORM!"
X hachimitsu-lemon hachimitsu-lemon.exe"Added by the HACHILEM TROJAN!"
X HackMuFpt HackMuFpt.exe"Added by the SCLOG-AG TROJAN!"
X hagent avp.exe"Added by the ""Herman Agent"" remote access TROJAN!"
U HalifaxHowardCluster skinkers.exe"""Howard the Weatherman"" desktop client from Halifax by Skinkers - marketing/messaging tool. Leave enabled if you want to receive messages"
Y Hamachi hamachi.exe"LogMeIn Hamachi remote control and VPN software"
U HaMFrontPanel hampanel.exeDisplays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget but otherwise pointless
U Handy Backup 3.9 hbagent.exe"Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers"
X HanUpdate hanz.exe"Added by the RBOT-GLJ WORM!"
N Hard Disk Sentinel HDSentinel.exe"Hard Disk Sentinel - a multi-OS hard disk drive monitoring application. Its goal is to find test diagnose and repair hard disk drive problems display hard disk health performance degradations and failures"
X Hard drive Controller hdcontroller.exe"Added by the KIMAN.B WORM!"
U Hardware Doctor Hwdoctor.exe"Winbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds voltages temperatures. Only required if you're concerned about your system temperature - typically for ""overclocked"" systems"
X Hardware Monitor Service mshms.exe"Added by the WOLLF-A TROJAN!"
X Hardware Profile hxdef.exe"Added by the LOVGATE.AB WORM!"
X Hardware Profile hxdef.exe..."Added by the LOVGATE.Z WORM!"
U Hardware Sensors Monitor hmonitor.exeUtility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
X Hardware Shell Detection WinHSD.exe"Added by a variant of the RBOT WORM!"
U Hare hare.exe"Hare - improve and optimize performance of desktop/laptop PCs"
U Harmony 98 - CasioOrg CasAgnt.exe"Enterprise Harmony 98 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000"
X HATAPE [path to trojan]"Added by the BANKER-QF TROJAN!"
U HawkEye HAWK_95.EXEControl Panel application for the old Number Nine graphics cards to change resolution colour depth etc. Available via Start -> Programs
U HawkEye IV Control Panel HAWK_32.EXEControl Panel application for the old Number Nine graphics cards to change resolution colour depth etc. Available via Start -> Programs
U Hawking HWU54G Utility HWU54G.exe"Wireless management utility for the HWU54G Mini Wireless-G USB Adapter from Hawking Technologies Inc"
U Hawking Wireless Utility HWU8DD.exe"Wireless management utility for the HWU8DD Hi-Gain™ USB Wireless-G Dish Adapter from Hawking Technologies Inc"
X Hbinst Hbinst.exe"Hotbar adware"
N HC Reminder hc.exeFor Compaq PC's. Help Compiler crunches help database will run without being in startup when needed
N HCDetect HCDetect.exeMS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification detection and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually also has a known memory leak problem
U hcenter tgcmd.exe"See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
X hclean32.exe hclean32.exe"Wareout - malware masquerading as a spyware and dialer remover"
U Hcontrol hcontrol.exeHotkeys on an ASUS Notebook. Only required if you use the additional keys
N hcsystray hc_tray.exe"Kuma Notifier for the Shootout! game from the History Channel. ""It lets you know whenever there?s a new episode that?s been released or an announcement from the Kuma team. Just click it to get up-to-the-minute game and event information"""
N HDAShCut HDAShCut.exeHigh definition audio page shortcut for Realtek audio devices - not required
U HDAudDeck HDAudioCPL.exe"Vista control panel for VIA Vinyl HD Audio Codecs from VIA Technologies Inc - such as the VT1708B"
U HDAudDeck HDeck.exe"XP control panel for VIA Vinyl HD Audio Codecs from VIA Technologies Inc - such as the VT1708B"
X HDAudio hda.exe"Added by the TACTSLAY.U TROJAN!"
X HDAudio Driver 1.0 [random filename].exe"Added by the TEADOOR-D TROJAN!"
X HDAudio Driver 2.0 [random filename].exe"Added by the TEADOOR-E TROJAN!"
U HDDHealth hddhealth.exe"HDD Health is a ""full-featured failure-prediction agent for machines using Windows 95 98 NT Me 2000 and XP. Sitting in the system tray it monitors hard disks and alerts you to impending failure"""
U HDDlife HDDlife.exe"HDDlife checks the health of your hard drives at regular intervals and informs you about the results of these checks"
? HDhelp tbhdhelp.exe"Associated with Philips Edge series soundcards. Is it required?"
X hdlfoe df98ndf svchots.exe"Added by a variant of the RBOT WORM!"
X hdlpscom [8 random letters].exe"Added by the RBOT-FUL WORM!"
N HDtray HDtray.exePhilips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel
X he3bbcff rundll32.exe he3bbcff.dll EnableRunDLL32"LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""he3bbcff.dll"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
X he3e3fc4 rundll32.exe he3e3fc4.dll EnableRunDLL32"LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""he3e3fc4.dll"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
X Hekio Startups Hnksvc32.exe"Added by the AGOBOT-QE WORM!"
X HELLBOT TEST 1hellbot.exe"Added by the MYDOOM.BO WORM!"
X HELLBOT3 coolbot.exe"Added by the MYTOB.AB WORM!"
X hellfire svchost.exe"Added by the LEOX.D TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X hellodolly shost.exe"Added by the YODO WORM!"
X helloserv helloserv.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X helloworld nb32ext2.exe"Added by the MYDOOM.BV WORM!"
X helloworld nb32ext3.exe"Added by the MYTOB.JT WORM!"
X helloworld3 nb32ext4.exe"Added by the RITDOOR.A WORM!"
? Help helpext.exe"??"
X help help.scr"Added by the BANCOS-BBU TROJAN!"
X Help Wizardnil.exe"Added by the BANCOS-BCZ TROJAN!"
X Help lshost.exeIdentified as a variant of the Trojan-Clicker.Win32.Delf.aro malware
X Help and Support Service usnsvc.exe"Detected by Kaspersky as the SDBOT.AAD TROJAN! See here"
X Help Temp Files netreg.exe"Added by the FORBOT-EM WORM!"
X helpctl.exe helpctl.exe"Added by the GASLIDE TROJAN!"
X Helper eschlp.exe"Added by the BLASTER.T WORM!"
X HELPER greece_nm.exe"AsdPlug premium rate adult content dialer variant"
X HELPER Netherlands.exe"AsdPlug premium rate adult content dialer variant"
X HELPER new_zealand.exe"AsdPlug premium rate adult content dialer variant"
X HELPER sweden.exe"AsdPlug premium rate adult content dialer variant"
X HELPER canada.exe"AsdPlug premium rate adult content dialer variant"
X HELPER france.exe"AsdPlug premium rate adult content dialer variant"
X HELPER temp532.exe"AsdPlug premium rate adult content dialer variant"
X helper.dll rundll32.exe [path] helper.dll"CnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X HelpExp.exe HelpExp.exe"Attune HelpExpress - spyware. Disable and uninstall - see here"
X helpmanager spoler.exe"Added by the RANDEX.J WORM!"
X helpo helpo.exe"Added by the BANLOA-BU TROJAN!"
X helpw helpw.exeAdware downloader
X hen [filename].exe"Added by the TARNO.G TROJAN!"
X heomstool heomstool.exe"Added by the HEOMS TROJAN!"
? HerculesCamService CamService.exe"Related to the Hercules Dualpix HD Webcam. What does it do and is it required?"
X hErcUnes softhost.exe"Added by the GARROCH WORM!"
U Hermes Messenger DGDRHE~1.EXE"A LAN messenger alternative to WinPopUp - Digital Dreams Software"
X Hewlett Packard Manager hpmanager.exe"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
N Hewlett Packard Recorder Remind32.exeHP multifunction registration
U Hf Hf.exe"Hide Folders - hide your folders so only you can view them"
X HF Security hfsecure.exe"Added by the AGOBOT-TI WORM!"
U hffsrv hffsrv.exe"Hide Files & Folders is a ""password-protected security utility working at the Windows kernel level allowing you to password-protect files and folders or to hide them securely from viewing and searching"""
U hfxp hfxp.exe"Hide Folders XP - hide your folders so only you can view them"
X hgqhp.exe hgqhp.exe"Added by the FLUSH.F TROJAN!"
N HGTXPEI FirstReboot.exeHerucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
X hhtnsn rnxntup.exe"Added by a variant of the ORCU.B TROJAN!"
? HiberMonitor HCount.exe"??"
U Hibernation hib32.exeReduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate etc. Required if you run of battery regularly
X Hid.exe hid.exe"Added by the RATSOU.B TROJAN!"
U HideOE HideOE.exe"HideOE - allows you to 'hide' Outlook Express or minimize it to the System Tray"
X HideRun.exe Hiderun.exe and svhost.exe and pro.gif"Added by the BOOHOO WORM!"
X HideStyle Ante Browse Trust.exe"IE toolbar taking you to Lop.com. If the exe is running end it and remove the ""Stupidmore"" directory from C:Program Files"
U hidserv hidserv.exe"This is the Human Interface Device Server for Win98SE/2000/Me/XP it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers HIDSERV is the controller for the keyboard sound controls on the USB and PS/2 keyboards"
X hid_start gzmrotate.dll"AdRotator/IconAds adware"
U High Definition Audio Property Page Shortcut CHDAudPropShortcut.exe"Realtek audio card related. Probably adds the odd feature to one of the ""Sounds"" Control Panel applet tabs - doesn't appear to be required"
N High Definition Audio Property Page Shortcut HDAShCut.exeHigh definition audio page shortcut for Realtek audio devices - not required
U High Definition Audio Property Page Shortcut CHDAudPropShortcut.exe"Realtek audio card related. Probably adds the odd feature to one of the ""Sounds"" Control Panel applet tabs - doesn't appear to be required"
Y HighPoint ATA RAID Management Software raidman.exe"HighPoint RAID management - hard disk striping/mirroring utility for increased performance and reliability. See here for more information on RAID"
X Highspeeddownloader SetupClickHere.EXE"Homepage hijacker redirecting to ""turbo-search101.com"" - see here"
U HijackThis HijackThis.exe"""HijackThis is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware malware or other unwanted programs"". This option is added when you select Config → ""Run HijackThis scan at startup..."" once a scan has been performed"
U HijackThis startup scan HijackThis.exe"""HijackThis is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware malware or other unwanted programs"". This option is added when you select Config → ""Run HijackThis scan at startup..."" once a scan has been performed"
X HijSrv32 hijsrv.exe"Added by the BANKGERM-D TROJAN!"
X himem.exe [path to worm]"Added by the STRATION-FW WORM!"
X HistoriaLout. GDC.exeAdded by and unidentified misleading security program
N HistoryKill histkill.exeHistoryKill removes your web surfing path by removing the URL drop-list history detailed history file cache and cookies in both IE and Netscape Navigator browsers. Available via Start -> Programs
U Hitman Pro SurfRight Helper srhelper.exe"Hitman Pro - a utility to start a number of Security Protection software. They can be started individualy"
X HitQ HitQ.exe"Hijacker for more information see here"
U HitwarePKLite HITWAR~1.EXE"Hitware Popup Killer Lite"
X HIV HIV.exe"Added by the HIVA TROJAN!"
U hk hk.exe"KeyLoggerExp keystroke logger/monitoring program - remove unless you installed it yourself!"
U hkcmd hkcmd.exe"Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. If the user wishes to have ""HotKey"" access to Intel's customised graphics properties it is required otherwise not. It can be disabled via the Display Properties in the Control Panel"
X HKEYok runlli32.exe"Added by the QQPASS-U TROJAN!"
X HKLMRun windowsupdate.exe"Added by the FORBOT-BJ WORM! (where HKLMRun represents HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun)"
U hkserv HKserv.exeKeyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS
U hkss hkss.exeCompaq HotKey Support - multimedia keyboard support
X HLcleanup hlsetup2.exe"LinkReplacer/FFinder adware"
X hldrrr hldrrr.exe"Added by the BAGLE-KF WORM!"
X hlhtxo.exe hlhtxo.exe"Added by the QLOWZONES-27 TROJAN!"
X HLL Data Parameter hllcxpa.exe"Added by the RBOT.AFG WORM!"
X HMI PowerSystem hmisvc32.exe"Added by the RANDEX.CZZ WORM!"
X HML PowerSource hmlsvc32.exe"Added by the SDBOT-XL WORM!"
U Hmonitor Hmonitor.exeHardware sensor monitoring program. Only required if you overclock your system and want to check on the status
X HMV PowerSource hmusvc32.exe"Added by the SDBOT-YW WORM!"
X ho2stdll.exe ho2stdll.exe"Added by the BANKER-HO TROJAN!"
X HOI Services holsvc32.exe"Added by the AGOBOT-SF WORM!"
N Holiday Lights Holiday Lights.exe"Holiday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start -> Programs"
X Hollaback slvhosts.exe"Added by the SDBOT.BMO WORM!"
N Home Theater SchSvr SchSvr.exe"WinScheduler is installed with Home Theater Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card you will need it. Available via Start -> Programs"
U HomeAlarm HomeAlarm.exe"Chameleon Clock - system tray clock replacement"
? HomeCentre WakeUp LGWAKEUP.EXE"Associated with the no longer supported Xerox HomeCentre printer/scanner"
U HomeKeyLogger KeyLogger.exe"SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself"
X Homeland Network HomelandNetwork.exeHomeland Network Notifier - pops ads
X homepage.monitor.exe isamonitor.exe"Added by the ZLOB-QK TROJAN!"
U HondaHelper HondaHelper.exe"Part of Honda Music Link which allows you to use your Honda's audio system's controls to play and search for music on your iPod® in you car"
? Honor honor.exe"??"
U Hook99startup hk2re.exe""Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent"""
U HookSys HookSys.exe"SurfinGuard Pro from Finjan - internet protection software protects against all malicious code delivered through executables scripting files ActiveX and Java"
U HornetMonitor MntrHrnt.exe"Hornet Monitor - monitoring system that detects and responds to unauthorized access attempts and sources of channel interference on any local DSSS network"
Y HorngTech4D bally4d.exeHorngTech 4D mouse driver
X Host N/A"Added by the POPDIS or STARTPAGE.F TROJANS!"
X host help.exe"Identified as the DELF.LF by Ewido Security Suite"
X Host Process mame.exe"Added by the RBOT-APO WORM!"
X Host Process svchost.exe"Detected by Kaspersky as the AGENT.DGO TROJAN! See here. Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! The file is located in the Fonts directory"
X hostdll.exe hostdll.exe"Added by the BANKER-BO TROJAN!"
U HostManager AOLHostManager.exeManages a component essential to the operation of most current AOL software. If you remove it from startup it will load when IE is launched increasing launching time
N HostManager AOLSoftware.exe"Quoted from AOL Beta Team ""Manages a component essential to the operation of most current AOL software client or not. You should be able to remove it from Startup (it'll just load when Explorer is launched which will extend load time a bit) but do leave it on your system""."
X Hostname Manager Server host32srv.exe"Added by a variant of the RBOT WORM!"
X Hostren.exe Hostren.exe"Added by PWS.BANKER.F a variant of the BANKER-BO TROJAN!"
X hostserv hostserv.exe"Added by the RBOT.BPZ WORM!"
X hostserv wiz98.exe"Added by a variant of the SDBOT WORM!"
U HostsFileMgr winHostsEdit.exe"AdBin from Gilmore Software Development. An easy solution to managing your Window's hosts file"
U HostsMan hm.exe"""HostsMan is a freeware application that lets you manage your Hosts file with ease"". It is mainly intended to block specific domains (mostly advertising servers) by redirecting them to localhost but can also be used to add any other domain/Ip combination that you want to be included in the HOSTS file"
X HostSrv sachostx.exe"Added by the LOOKSKY.H WORM! Drops multiple files in the System (9x/ME) or System32 (NT/2K/XP) folders"
X HostSrv sachostx.exe"Added by the LOOKSKY.A or LOOKSKY.F or LOOKSKY.G WORMS!"
X HostSrv sachostx.exe..."Added by the LOOKSKY.E WORM!"
X HostSVC syse HostSVC.exe"Added by the RBOT-ANZ WORM!"
X Hot 8.0 Live hot.exehttp://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BANKER.EIE
U Hot Corners Hotc.exe"Hot Corners - ""lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen"""
X HOT FIX Gothic.exe"Detected by Kaspersky as the RBOT.ESX WORM!"
X Hot Inside Hottest Story Ever.exe"Added by the BHARAT.A WORM!"
U Hot Key Kbd 2690 Daemon SK2690DM.EXEMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U Hot Key Kbd 9910 Daemon SK9910DM.exeMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
? Hot Party 22 hotpart22.exe"??"
X HotAction_hr hotaction_hr.exe"Added by the SITEICON-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""HotAction_hr"""
X Hotbar Hbinst.exe"Hotbar adware"
X Hotbar HbOEAddOn.exe"Hotbar adware"
X HotbarOE OEAddOn.exe"Hotbar adware"
X HotbarSA HotbarSA.exe"Hotbar adware"
X hotdlll remote.cmd"Added by the BANKER-EHG TROJAN!"
X hotdlll vmmreg32.exe"BANKER.DX spyware"
X hotefix msnmanegers.exe"Detected by Trend Micro as the IRCBRUTE.AS TROJAN! See here"
X hotfix msnnmaneger.exe"Added by the WOOTBOT.AF WORM!"
X Hotfix Updat svdhost32.exe"Added by the GAOBOT.ZW WORM!"
U HOTFOON2 hotfoon4.exe"Related to Hotfoon - a developer and provider of Internet Telephony technology based on LTP (Lightweight Telephony Protocol)"
U HotIDE hotide.exeHotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list