Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	kmw_show.exe	kmw_show.exe	Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features
N	Kodak Batch Transfer	pezdow1.exe	Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
U	Kodak EasyShare software	EasyShare.exe	Software bundled with Kodak digital cameras to manage the connection between the PC and the Camera. Can be started manually
N	Kodak Picture Easy . Batch Transfer	PezDownload.exe	"Part of ""Kodak Picture Easy"" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. . represents the version"
N	Kodak Picture Transfer Software	pts.exe	Looks for Kodak camera connection and media insertion. Available via Start -> Programs
N	Kodak Software Updater	backweb*****.exe	"Software updater for Kodak Easyshare digital cameras"
Y	KodakCCS	KodakCCS.exe	Kodak DC File System Driver
U	Komunikator	tlen.exe	"Tlen - a Polish language instant messaging client"
U	KONICA MINOLTA magicolor 2400W STD	MSTMON_S.EXE	Konica Minolta Magicolor 2400W colour printer monitor
N	Konni Symbol Autostart	KonniSymbol.exe	"Gives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5"
N	kontiki	kontiki.exe	"Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops"
Y	KPDrv4XP	KPDrv4XP.exe	MediaKey USB Keypad Driver
Y	KPFW32.EXE	KPFW32.EXE	"KingSoft Personal Firewall"
Y	KPFWSvc.EXE	KPFWSvc.EXE	"KingSoft Personal Firewall"
U	Kraidman	Kraidman.exe	"""Toshiba RAID Support is a Toshiba EasyGuard feature that uses RAID Level 1 technology to minimise downtime by protecting against data loss and ensuring quick data recovery"" - for Toshiba laptops"
U	KREC32	krec32.exe	StarrCommander Pro Keystroke logging software
X	Krnlcheck	csrss.exe	"Added by the BOTNACHALA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
U	Krnlmod	Krnlmod.exe	Keystroke logger/monitoring program - remove unless you installed it yourself!
X	ksrlnhm	zxatgso.exe	"Added by the DLOADER-LI TROJAN!"
X	Ksrv32	Ksrv32.exe	"Added by the AGOBOT-PI WORM!"
X	KTAX Auto Loader	ktax.exe	"Added by the SDBOT-MZ WORM!"
U	ktchnsnk	ktchnsnk.exe	HP program found with the Office Jet 500/600/700 series which initializes the Office Jet manager each time the computer is booted up or rebooted
X	KV2005	word.EXE	"Added by the IW TROJAN!"
X	kv3000	lover.vbe	"Added by the ZSYANG.B WORM!"
X	kvern16.dll	regsvr32.exe [path] kvern16.dll	"DailyWinner adware"
X	KV_HOST	cxjx.exe	"Added by the LEGMIR-BB TROJAN!"
X	kw3eef76	"rundll32.exe [path] kw3eef76.dll	EnableRunDLL32"
N	kX Mixer	kxmixer.exe	Provides Mixer and Control functionality to KxProject Audio driver for EMU10k based soundcards
U	KX509	kx509_kfwk5.exe	"Kerberos Secure Authentication for Windows"
?	KYE_Showicon	shwicon.exe	"Card reader for memory cards from digital cameras. Is it required? "
X	KYK Control Settings	KYSVCXD.EXE	"Added by a variant of the RBOT WORM!"
X	KYM Control Settings	phqghum.exe	"Added by the RBOT.BQD WORM!"
X	L4r1$$a	L4r1$$a.pif	"Added by the ASSIRAL-C WORM!"
X	laltin	L90112201.Stub.exe	"Delphin Media Viewer adware related"
X	LAN Driver	landriver32.exe	"Added by the RBOT.BT WORM!"
X	lanbrup	lanbrup.exe	"SafeSurfing adware"
U	LanguageMonitor	Oplmsb01.exe	OKI Printer language support monitor
X	LanGuard	languard.exe	"Adware downloader - also detected as the SECONDT-C TROJAN!"
X	LanGuard	[path to trojan]	"Added by the DLOADER-VO TROJAN!"
U	LANMessage Pro	LANMES~1.exe	"LANMessage Pro - ""a powerful tool for communicating with other people on your office/home network"""
U	LanSpeed2	LanSpeed2.exe	Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
U	laokey.exe	LaoKey.exe	"Lao Script for Windows (LSWin) is an extension to the Windows operating system to allow Lao language to be used with many different Windows-based applications"
U	LapLink scheduler	Llsched.exe	Utility that automatically performs file transfers as unattended background operations
X	Lar	Llass.exe	"Added by the INOR-A TROJAN!"
X	lar	[trojan filename]	"Added by the ROXY.C TROJAN!"
X	LARISSA ANTI VIRUS	LARISSA_ANTI_VIRUS.exe	"Added by the KLASSIR TROJAN!"
?	Lasb	ewat.exe	"??"
X	LasErma	Ermasys32.exe	"Added by the LERMA-A WORM!"
X	LAsIAf32	RePEAtLD.exe	"Added by the REPEATLD WORM!"
Y	LASTinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
?	Later	later.exe	"??"
U	LaunApp	LaunApp.exe	Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
?	Launcg	launcg.exe	"??"
U	Launch Ai Booster	OverClk.exe	"ASUS Ai Booster is an application that allows you to overclock the CPU either manually or automatically without the hassle of entering the BIOS Setup"
N	Launch Context 5.0	Launch.exe	"Context - electronic dictionary"
U	Launch LCDMon	LCDMon.exe	"Launch LCDMon	LCDMon.exe	Driver/utility for Logitech G-Series gaming keyboards and mice
U	Launch LGDCore	LGDCore.exe	Driver/utility for Logitech G-Series gaming keyboards and mice
X	Launch Norton AntiVirus 2000	jorgf.exe	"Added by the RBOT-AUI WORM!"
N	Launch YahooPOPs! at Windows startup	YAHOOPOPS.EXE	"YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs"
U	LaunchAp	LaunchAp.exe	"Programmable keys on Acer
U	LaunchApp	Alaunch.exe	"Acer Launch tool utility on laptops"
U	Launchboard	lnchbrd.exe	""LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0
X	Launcher	launcher.exe	Spyware component related to DownloadWare and found in Program FilesKFH
N	Launcher	relaunch.exe	"Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs"
X	Lavasoft Ad-Aware	Ad-Aware.exe	"Added by the RBOT-SO WORM! Note - this is not the popular Ad-aware spware/adware removal tool"
U	Lavasoft Adwatch	Ad-watch.exe	"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
Y	laxmsp32.exe	laxmsp32.exe	Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work
X	Laz	Kernn.exe	"Added by the BANCOS-LN WORM!"
U	LCDC	LCDC.exe	"LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins"
Y	LCDMon	LCDMon.exe	Driver/utility for Logitech G-Series gaming keyboards and mice
Y	LCDPlayer	LCDPlyer.exe	"Related to SuperAdBlocker"
N	lcfep	lcfep.exe	"Tivoli 'TME' System Tray icon - ""'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"""
?	LCIDConfig	lcidchng.exe	"??"
U	LClock	lclock.exe	"LClock is a program that makes the Windows' clock look like a Windows Longhorn Clock"
X	lcvga	lcvga.exe	"Added by the HOSTOL-A TROJAN!"
X	ld	ld.exe	"CoolWebSearch Tooncomics parasite affiliate variant - redirects to fastwebfinder.com"
N	LDM	backweb-8876480.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades AND new products
N	LDM	ldmconf.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades AND new products
N	LDM	LogitechDesktopMessenger.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades AND new products
X	ldriver	ldriver.exe	"Added by the CHORUS-A TROJAN! Searchforfree browser hijacker"
U	LED TRAY	LEDTRAY.EXE	Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
U	ledpointer	CNYHKey.exe	Chicony Electronics Multimedia Keyboard Hotkey Driver
N	LeechGet	LeechGet.exe	"LeechGet download manager"
X	leeman	leeman.exe	"Added by the COSIAM-D TROJAN!"
X	LetsSearch	LetsSearch.exe	"BrowserAid/BrowserPal foistware"
U	Lexmark **** Series	lxbabmgr.exe	"Lexmark System Tray application (where ""****"" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut"
U	Lexmark **** Series	lxbkbmgr.exe	"Lexmark System Tray application (where ""****"" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut"
U	Lexmark **** series	lxbtbmgr.exe	"Lexmark System Tray application (where ""****"" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut"
U	Lexmark **** Series	lxbmbmgr.exe	"Lexmark System Tray application (where ""****"" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut"
Y	Lexmark 2200 Series Button Manager	lxbvbmgr.exe	Lexmark printer button manager. Required for correct operation
Y	Lexmark 3100 Series	lxbrbmgr.exe	Lexmark printer button manager. Required for correct operation
Y	Lexmark X6100 Series	lxbfbmgr.exe	Lexmark X6100 printer button manager - required for correct operation
Y	Lexmark Xxx Button Manager	AcBtnMgr_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
Y	Lexmark Xxx Button Monitor	ACMonitor_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
N	LexmarkPrinTray	printray.exe	Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
X	lexplore	lexplore.exe	"Added by the BROPIA WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
N	lexpps	lexpps.exe	"For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC
U	LexStart	lexstart.exe	Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
X	Lfh	Lfh.exe	"Added by the ZAURGA-A TROJAN!"
U	Lfsndmng	lfsndmng.exe	"LightningFAX Enterprise Fax Server - ""puts faxing at the fingertips of networked enterprise users. It enables rapid
U	LGDCore	LGDCore.exe	Driver/utility for Logitech G-Series gaming keyboards and mice
U	LGODDFU	fwupdate.exe	Auto firmware update program for LG Electronics CD-ROM/DVD writer
U	LgWDskTp	LgWDskTp.exe	"Logitech Wireless Desktop mouse and keyboard software. There is an icon for this program on the taskbar next to the clock"
N	lhttseng	"rundll32.exe ..lhttseng.inf	RemoveCabinet"
X	li-multi****	li-multi****.exe	Adult web-dialler - **** is random
X	li-rcash00001	vldial.exe	"Added by the Vl TROJAN!"
X	li-speed****	dlres.exe	Adult web-dialler - **** is random
X	li-thund****	li-thund****.exe	Adult web-dialler - **** is random
X	li-vita****	li-vita****.exe	Adult web-dialler - **** is random
X	li01f948	"rundll32.exe [path] li01f948.dll	EnableRunDLL32"
N	LicCrtl	runservice.exe	"Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running
U	LicCtrl	"rundll32.exe [path] MMFS.DLL	Service"
X	License Manager	license_manager.exe	"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
X	lich	lich.exe	"Added by QLOWZON-BN TROJAN!"
U	LidPolicy	pwrschem.exe	A utility for configuring certain HP notebook models to enter Standby mode when the lid is closed only when running on battery
X	Life FireWall Update1	FireWall-Update1.exe	"Added by the RBOT-ARS WORM!"
N	LifeDrive Manager	LifeDriveMgr.exe	"Keeps the Palm LifeDrive Manager utility in the systray. Shortcut available via Start -> Programs"
N	LifeScape Media Detector	PicasaMediaDetector.exe	"Media detector for Picasa's automatic photo organizer"
X	lify	yujixit.exe	"Added by a variant of the SDBOT WORM!"
U	Lightning Download	Lightning.exe	"Lightning Download download manager. Can be launched manually
X	Limewire	LimeWire.exe	"Added by the RBOT-AGH WORM!"
N	LimeWire x.x	LimeWire.exe	"LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
X	Limpet	explorer16.exe	"Added by the RBOT-AJD WORM!"
N	Line Speed Meter V3.0	LineSpeedMeter.exe	"LineSpeedMeter - detect the download and upload speed of your internet connection"
X	Linker	LinkMaker.exe	"Links adware"
X	links	links.exe	"Added by the LOWZONE-BI TROJAN!"
N	Linksts	linksts.exe	"Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards
X	Linksts	linksts.exe	"Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards
X	Linksys Modem Drivers	linksys.exe	Added by the IRCBOT.VD WORM!
X	Linux	Linux.vbs	"Added by the LOVELETTER.AS VIRUS!"
U	LiquidView	lviewj.exe	"""Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor"""
X	Lisa	Lisa.exe	"Added by the SCOM-D premium rate adult content dialler"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.