HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
Y	AHNSD	AhnSD.exe	"AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis"
?	AHNUE	AHNUE.exe	"??"
X	ahost	ahost.exe	"Added by a variant of the SDBOT WORM!"
N	AHQInit	ahqinit.exe	Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
X	Ahst	iebs.exe	"PurityScan/Clickspring adware"
X	AHU	[path to worm]	"Added by the ANACON-B WORM!"
X	AHU	ANACON.EXE	"Added by the NACO.A WORM!"
X	ahui32.exe	ahui32.exe	"Added by the CERTIF-M TROJAN!"
U	Ai Nap	AiNap.exe	"Part of the ""Ai Suite"" utility supplied with some Asus motherboards. ""With AI Nap users can instantly snooze your PC without terminating the tasks. System will continue operating at minimum power and noise when user is temporarily away"""
U	Ai Quicker Help	AsRc.exe	"ASUS DH Remote media portal launcher for their Digital Home range of motherboards that are designed for users to control the computer at a distance away such as the M2N DH. ""ASUS DH Remote is a convenient PC remote controller that gives users unprecedented control over their PCs from the comfort of their couches"""
X	Aica	tuaa.exe	"PurityScan/Clickspring adware"
X	Aida	ttuh.exe	"PurityScan/Clickspring adware"
X	Aida	eetu.exe	"PurityScan/Clickspring adware"
?	AidemHotKey	DVMAIN.EXE	"Keyboard related"
?	AidemHotKey	KEYAPP.EXE	"Keyboard related"
U	aiepk	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
N	AIM	aim.exe	AOL Instant Messenger. If connected to the internet automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
U	AIM	AIM+.exe	AIM plus - a free add-on to AOL's Instant Messenger for Windows from Big-O Software
X	AIM Instant Message Cookies	[random filename]	"Added by the RBOT-AFV WORM!"
N	AIM Logger	AIMLogger.exe	"AIM Logger - saves AIM (AOL Instant Messenger) conversations to log files. Can be started when you are using AIM"
X	Aim Plugin	aimplugin.exe	"Added by the GUAP-F WORM!"
X	AIM reminder	AIM reminder.exe	"Added by the BUDDY.E TROJAN!"
N	Aim6	AOLLaunch.exe	"AOL Instant Messenger - start it when you want to use it"
N	Aim6	aim6.exe	"AOL Instant Messenger - start it when you want to use it"
X	AIM95 Startup	aim95.exe	"Added by the AGOBOT.AEE WORM!"
X	aimaol lptt01	aimaol.exe	"RapidBlaster variant (in a ""Aimaol"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	aimaol ml097e	aimaol.exe	"RapidBlaster variant (in a ""Aimaol"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	AimingClick	AimingClick.exe	"AimingClick from AimingTech. Web searching tool. Available via Start -> Programs"
U	AIMPro	aimpro.exe	"AIM Pro - secure instant messaging video conferencing on-line meetings and desktop and file sharing"
N	AIMster	??	Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N	AIMWDInstall	AIMWDInstall.exe	"Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	aircity	aircity.exe	"Related to ""Prutect"" malware from e2Give"
U	AirPort Base Station Agent	APAgent.exe	"Airport Base Station Agent utility for Apple's AirPort wi-fi basestations. ""Wireless solution for home school and business. As it blankets your space with a blazing-fast secure wireless network it opens up a world of possibilities for home entertainment backups printing and more"""
U	AJC Active Backup	AJCActBk.exe	"AJC Active Backup from AJC Software - ""Instantly backup files you change on your PC and keep multiple versions to undo"""
X	AKEYNAME	WinServ.exe	"Added by the EVILBOT.C TROJAN!"
U	akeys	akeys.exe	"""Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"""
X	akgkagaksad9	fsakfask9.exe	"Added by the ONLINEG-M TROJAN!"
U	AKiller	akiller.exe	"Advertising Killer - popup stopper"
U	ala.exe	ala.exe	"Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer"
U	Alarm Manager	Alarmapp.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?	AlarmWatcher	AlarmWatcher.exe	"Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?"
N	Album Fast Start	ABMTSR.EXE	Scanner software not required for scanner to work
?	AlcFDMonitor	ALCFDRTM.EXE	"RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?"
?	ALCFDRTM16	ALCFDRTM16.com	"RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?"
X	Alchem	Alchem.exe	"ClickAlchemy adware"
U	Alcmtr	Alcmtr.exe	"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
U	Alcohol	Alcohol.exe	"Alcohol 120% - CD/DVD emulation/writing/copying software"
U	Alcohol Autorun	Alcohol.exe	"Alcohol 120% - CD/DVD emulation/writing/copying software"
U	AlcoholAutomount	axcmd.exe	"Alcohol 120% is a powerful Windows application that makes it easy to create backups of DVDs* and CDs. In addition the program lets you store your most used CDs as images on your computer so you can call them up at the click of a button. This part automounts images disc images"
?	Alcom PCL Capture	FMW_PCAP.EXE	"??"
N	AlcWzrd	ALCWZRD.EXE	RealTek High Definition audio driver related - detects new devices when plugged in then pops up a dialog box. If everything works as expected you should be able to disable this one
U	AlcxMonitor	Alcxmntr.exe	"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
X	aldefr ere service	tay0x.exe	"Added by the RBOT-XS WORM!"
X	alerter	alerter.exe	"MAHA.F spyware"
X	Alevir	Alevir.exe	"Added by the OPASERV-A WORM!"
X	AlevirOld	[worm filename]	"Added by the OPASERV WORM!"
N	Alexa	alexa.exe	"Related to Alexa. Note - collects and stores information about the web pages you view the data you enter in online forms and search programs and with versions 5.0 and higher the products you purchase online whilst using the toolbar. Although Alexa state's they do not attempt to analyze the data it may collect about you to determine who you are some of your information collected by the software is personally identifiable. Please read the Privacy Policy. Not Recommended"
X	AlexaToolbar	alt.exe	"Detected by Ewido Security Suite as the DELF.EB hijacker!"
X	AlfaCleaner	AlfaCleaner.exe	"AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware"
U	AlfaClock Classic	AlfaClock.exe	"AlfaClock Free Edition from AlfaSoft Research Labs - ""enhances your taskbar clock (tray clock) with fully customizable clock display alarms time synchronization and more"""
U	AlfaClock2	AlfaClock2.exe	"AlfaClock2 from AlfaSoft Research Labs -""enhances your tray clock functionality. Of course you can customize the look adjusting fonts colors backgrounds and more. But the main goal of this program is to extend your tray clock functionality"""
?	ALFY Accellerator	AlfyAC~1.exe	"??"
X	ALG.EXE	iexplorer .exe	"Added by the DEMOTRY-B WORM!"
X	ALG32	ALG32.EXE	"Added by the STARTPAGE.K hijacker"
X	algchk.exe	algchk.exe	"Detected by Kaspersky as the VB.ATE TROJAN!"
X	ALGU	ALGU.EXE	"Added by the CWS-I TROJAN!"
X	ALGU.exe	ALGU.exe	"Added by the STARTPAGE.O TROJAN!"
U	ALi5289	ALi5289.exe	"Related to Uli Integrated Drivers from Uli Electronics Inc"
N	Alias SketchBook Snapshot	ALIASS~2.EXE	Screen-capture utility for Alias Sketchbook
N	AlienAutopsy	Test_BS.exe	"Alienware computer technical support software"
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
?	AliUSBfix	GREENMK.exe	"May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?"
X	Alive SYstem	scchost.exe	"Added by the TOFDROP-B TROJAN!"
X	Alive SYstem	scchostc.exe	"Added by the TOFDROP-B TROJAN!"
X	alkasr	?????.exe	"Added by the BALKART TROJAN!"
U	All Aboard Status	stswin.exe	"All Aboard! Internet Connection Sharing status icon"
X	All Sea screen saver	TaskTray.exe	Free screensaver installs lots of foistware - remove it
X	All Sea web link	FWLink.exe	Free screensaver installs lots of foistware - remove it
N	AllerCalc	AllerCalc.exe	"AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually"
X	Allopassw	[path to trojan]	"Added by the RANKY.CU TROJAN!"
U	AllSeeingEye	ase.exe	"All-Seeing_Eye security software - ""monitors everything that takes place on your computer and alerts the user as soon as anything suspicious or out-of-the-ordinary is happening providing the user with alternatives for possible actions"""
U	allSnap	allSnap.exe	"""allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"""
U	AllToTray	ALLTOTRAY.EXE	"AlltoTray from DNTSoft - minimize any program to your System Tray"
X	Alogrithm Link Queue	alq.exe	"Added by a variant of the SDBOT WORM!"
U	Alogserv	Alogserv.exe	From McAfee VirusScan for logging scanning activities. In some cases if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6 this is a critical component of McAfee and disabling it can cause a PC to lock up
U	ALPass	ALPass.exe	"ALPass password manager"
X	alpha	svchost.exe	"Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
Y	Alps Electric USB Server	Monserv.exe	"Alps Electric USB Server - required according to this article"
U	AlpsPoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?	ALServ	ALServ.exe	"Altec Lansing AMS speaker related. What does it do and is it required?"
X	Altnet	points manager.exe	"Altnet TopSearch adware"
X	AltnetPointsManager	points manager.exe	"Altnet TopSearch adware"
U	AltoMB_service	AltoMBsrv.exe	"Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U	ALTOOLS	AccessL.exe	"ALTools family of PC utilities"
X	AltPayments	AltPayments.exe	"WeirdOnTheWeb adware"
N	ALU Scheduler Service	ALUSchedulerSvc.exe	Symantec LiveUpdate scheduler for programs such as Norton AV or Internet Security
U	ALUAlert	ALUNotify.exe	Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
N	Aluria Security Center	SecurityCenter.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU the well known adware company see here"
U	Aluria's Pop-Up Stopper	eps.exe	Aluria Pop-Stopper
N	Aluria's Spyware Eliminator	ASE.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU the well known adware company see here"
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	"Always On Top Maker - utilty to enable an application to always be displayed ""on top"" of others on the desktop"
N	AlwaysReady Power Message APP	ARPWRMSG.EXE	"Related to HP and Compaq Desktop PCs. Read this article"
X	AmazingTens	AmazingTens.exe	Premium rate adult content dialler
U	AMD PowerNow!	GemBack.exe	"AMD PowerNow! - ""an innovative solution available on all AMD mobile processor-based notebooks that can effectively increase notebook battery life while delivering performance on demand"""
Y	amd_dc_opt	amd_dc_opt.exe	"AMD Dual-Core Optimizer - ""can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction"""
N	America Online *.* Tray Icon	aoltray.exe	Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N	AME_CSA	rundll32 amecsa.cpl RUN_DLL	Loads ADSL modem Control Panel applet
U	AModemLockDown	ModemLockDown.exe	"ModemLockDown - allows you to supervise internet access by disabling the modem protects againt dialers accessing dial-up connections etc"
Y	Amon	AMON.EXE	"Monitoring part of Eset's NOD32 virus-scanner"
Y	Amonitor	amon.exe	"Tiny Personal Firewall"
U	AMP WinOFF	winoff.exe	"WinOFF is "" a utility designed to shut down Windows computers automatically in a fully configurable way"""
U	AMSG	Amsg.exe	"Part of the IBM ThinkVantage Productivity Center. ""The Message Center sends automatic notification on ThinkVantage Technologies integrated with your system. Once you're online"""
X	amsgupdate	ams.exe	Added by a variant of the MAILBOT TROJAN!
N	AMSN	amsn.exe	"aMSN Messenger is a multiplatform MSN messenger clone"
X	amsn	amsn.exe	"Added by the BANKER-BNZ TROJAN!"
X	amva	amvo.exe	"Added by the SILLYFDC-BR WORM!"
N	Anapod Manager	anamgr.exe	"Anapod Explorer from Red Chair Software ""is the most advanced Windows iPod® software available offering iPod® management through full Windows Explorer integration under My Computer"""
X	anbv32	nabv32.exe	"Added by the TITOG.C WORM!"
X	angeleyes	msdll.exe	"Detected by Kaspersky as the VB.PI TROJAN! See here"
Y	ANIWZCS2Service	WZCSLDR2.exe	"ALPHA Networks wireless driver"
?	ANIWZCSService	WZCSLDR.exe	D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
?	AnnotateCheck	AnnCheck.exe	"Genius Wizard Pen Tablet driver related. Is it required?"
N	Announcements	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N	Anntext	Anntext.exe	Caere Pagekeeper text annotation server
U	AnonymityGateway	Anonymity Gateway.exe	"Anonymity Gateway - privacy protection tool that conceals IP address preventing your surfing habits and your internet activity form being tracked by websites or Internet Service Providers"
U	Anonymizer Total Net Shield	AnonTns.exe	"Anonymizer Total Net Shield - ID protection and privacy software"
U	ANONYMIZER_SPYWAREKILLER	SpyWareKiller.exe	"Anonymizer Spyware Killer - now Anti-Spyware"
U	ANONYMIZER_SPYWAREKILLER	AnonAntiSpyware.exe	"Anonymizer Spyware Killer - now Anti-Spyware"
U	Another Internet Explorer Popup Killer	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
X	ansjava	[path to worm]	"Added by the RANDON-AN WORM!"
X	Anskya	PYSKY.NET.exe	"Added by the DLOADER-MW TROJAN!"
X	Answer Problem	dSAFsqs.exe	"Added by the SDBOT-SC WORM!"
U	AnswerTool	AnswerTool.exe	"AnswerTool - save your E-mail replies in AnswerTool then reuse them again and again"
X	Anti	Isass.exe	"Added by the BROPIA.K WORM!"
X	Anti Spam Service	spamsvc.exe	"Added by the MYTOB-BK WORM!"
N	Anti-Blaxx Manager	Anti-Blaxx.exe	"Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives"
U	Anti-keylogger check	antikey.exe	"Anti-keylogger - protects against keylogger programs monitoring your keystrokes"
U	Anti-Trojan-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
X	Anti-Virus	vpms.exe	"Added by a variant of the SLAPER TROJAN!"
X	Anti-Virus	[random filename].exe	"Added by the CAPROBAD-A TROJAN!"
X	Anti-Virus Product Sync	[unprintable character][3 characters]log.exe	"Added by the KEDEBE.D WORM!"
X	Anti-Virus Update Scheduler	[path to trojan]	"Added by the SPAMMIT-A TROJAN!"
X	Anti-Virus Update Scheduler	winsp3.exe	"Malware - detected by Kaspersky as the AGENT.FP TROJAN!"
X	Anti-Virus Update Scheduler V1.39.12R	[path to trojan]	"Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe kaspersky.exe nrton.exe wins.exe gah32.exe 1.tmp syste.exe alg.exe socks.exe winxpsp2.exe tek9.exe sks.exe hihi.exe s.exe xps2.exe dns2.exe ikav32.exe and more..."
X	AntiClicker	SVCHST32.EXE	"Added by the CBH TROJAN!"
U	antidialer.co.uk	Dialer_Watcher.exe	"Dialer_Watcher is an application that allows you to detect dialers on your computer"
X	antihost	ahr.exe	"Added by the BANCBAN-QJ TROJAN!"
X	AntiMalwareGuard	amg.exe	"AntiMalwareGuard rogue spyware remover - not recommended see here"
U	AntiPopUp	AntiPopUp.exe	"AntiPopUp for IE - pop-up stopper"
X	antispy	ANTIVIR.exe	"IE AntiVirus rogue security software - not recommended see here"
X	antispy	ANTIVIRUS.exe	"IE AntiVirus rogue security software - not recommended see here"
X	antispy	ieav.exe	"IE AntiVirus rogue security software - not recommended see here"
X	antispy	scan.exe	"IE AntiVirus rogue security software - not recommended see here"
X	AntiSpyCheck	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended see here"
X	AntiSpyCheck 2.1.0	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended see here"
X	AntiSpyKit *.*	AntiSpyKit *.*.exe	"EAdwareKiller spyware remover where *.* represents the version number - not recommended see here"
X	AntispyStorm	AntispyStorm.exe	"AntiSpyStorm misleading security software - not recommended see here"
X	AntiSpyware	Antispyware.exe	"AntiSpywareApp spyware remover - not recommended see here"
X	AntiSpywareBot	AntiSpywareBot.exe	"AntiSpywareBot spyware remover - not recommended see here"
X	AntiSpywareExpert	ase.exe	"AntiSpywareExpert rogue spyware remover - not recommended see here"
X	AntiSpywareMaster	asm.exe	"AntiSpywareMaster spyware remover - not recommended see here"
X	AntiSpywareShield	AntiSpywareShield.exe	"AntiSpywareShield spyware remover - not recommended see here"
X	AntiVerminser	AntiVerminser.exe	"AntiVerminser spyware remover - not recommended see here"
X	antiviirus	antiviirus.exe	Added by a variant of the AGENT.KEU TROJAN!
X	Antivir	svchst.exe	"Added by the RAGRUK-A TROJAN!"
X	AntiVir	scvhost.exe	"Added by the AGENT-DSF TROJAN!"
X	AntiVir	winlog.exe	"Added by the IRCBOT-TJ TROJAN!"
Y	AntiVir XP	AVwin.exe	"AntiVir® PersonalEdition Classic - antivirus"
X	Antivir64	Antivir64.exe	"Antivir64 rogue security software - not recommended see here"
X	AntiVirGear *.*	AntiVirGear *.*.exe	"AntiVirGear misleading security software where *.* represents the version number - not recommended see here"
X	Antivirus	av.exe	"Added by the SINKIN TROJAN! Resets IE start page to realphx.com"
X	Antivirus	maja.exe	"Added by the NETSKY.H WORM!"
X	Antivirus	iexpl0res.exe	Added by an unidentified WORM or TROJAN!
X	AntiVirus	kaspery.exe	"Added by a variant of the RBOT WORM!"
X	AntiVirus	AntiVirus.exe	"Added by the BANKER-EHB TROJAN!"
X	Antivirus	antvrs.exe	"Antivirus 2008 rogue security software - not recommended see here"
X	Antivirus	avm.exe	"Antivirus Master rogue security software - not recommended see "
X	Antivirus	vav.exe	"Vista Antivirus 2008 rogue security software - not recommended see here"
X	Antivirus Installer	[path to trojan]	"Added by the BADGENT-A TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list