Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	MultiRes	MultiRes.exe	"MultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP"
U	MUPS	MUPS.exe	"Lauches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions"
Y	murphy shield	lmgui.exe	"Firewall part of BitDefender virus scanner/firewall"
N	Music01 Server	Music01 Server.exe	"J River Media Jukebox"
X	MusIRC (irc.music.com) client	musirc4.71.exe	"Added by the RANDEX.Q WORM!"
?	Mustek MDC 3000	Mounter.exe	"Related to software for the Mustek MDC 3000 digital camera - what does it do and is it required?"
N	MutexServiceEx	Sys32Smm.exe	"Webroot Sofware's discontinued ""Privacy Master"""
U	MVRescue	mvrescue	Related to Multivision Computers back up/restore program. Multivision Computers ceased operating in 2004
U	MW1HelperStartUp	Mw1helper.exe	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."
U	MW1HelperStartUp	MW1HEL~1.EXE	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."
U	mwavscan	mwavscan.com	"MicroWorld Anti Virus Toolkit is a free anti-virus scanner that runs on-demand. You can choose to scan your entire system
U	MWLExe	MwlGui.exe	"Part of McAfee Wireless Protection for Wi-Fi users"
N	MWProEng	MWProEng.exe	Logitech Mouseware Pro software - only required when using special functions
N	MWSnap	MWSnap.exe	"MWSnap - screen capture utility. Start manually when required"
X	mwsoemon	mwsoemon.exe	"MyWebSearch parasite"
X	Mwsvm	mwsvm.exe	"SeekSeek search hijacker related - see here"
X	mxb2	[path to worm]	"Added by the IXBOT-G WORM!"
X	MxHLp32	MxHLp32.exe	"Added by a variant of the VAGRNOCKER TROJAN!"
U	MXO Auto Loader	MXOaldr.exe	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MXOBG	MXOALDR.EXE	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MxRunner	MxRunner.exe	"EasyUninstall from Aladdin Systems (formerly by Ontrack)"
X	My Agent	msagent.exe	"Added by the NEGASMS.A TROJAN!"
X	My App	SMSSvc.exe	"Added by the NEGASMS.A TROJAN!"
X	My Search Bar Eq	S4BAREQ.EXE	"MySearch parasite"
X	My Web Search Bar	MWSBAR.DLL	"MyWay - an IE Browser Helper Object used by adware WeSearch to add an IE toolbar to provide search features
U	My-disgo	MyKey disgo.exe	"Related to disgo pro. Program will synchronize data"
X	MyAccessMedia	tmp*.exe [ = random char/digit]	"My AccessMedia toolbar related
U	MyAgtTry	MyAgtTry.exe	"System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications"
X	Myapp	[filename]	"Added by the FATEE.B WORM!"
X	Myapp	service.exe	Homepage hijacker
X	MyAV	avpguard.exe	"Added by the NETSKY.J WORM!"
Y	MyCIO Agent Service	myagtsvc.exe	"McAfee VirusScan ASaP Agent service"
U	myCIO.com ASaP	MyAgtTry.exe	"System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications"
N	myCIO.com Splash	Splash.exe	"Splash screen for McAfee VirusScan ASaP on-line scanner"
X	MyCometCursor	MYCOME~1.EXE	"Comet Cursor adware"
X	MyDailyHoroscope	MYDAIL~1.EXE	"MyDailyHoroscope foistware"
X	MyDailyHoroscope	MyDailyHoroscope.exe	"MyDailyHoroscope foistware"
U	MyEmoticons	MYEMOTICONS.EXE	"MyEmoticons from Persona Ltd - add icons (emoticons) to your E-mail"
X	MyFastAccess	myfastupdate.exe	My-Fast-Access toolbar updater
X	myhuy	huy.exe	"Added by the BLASTER-C WORM!"
X	myhuy	huy2.exe	"Added by the BLASTER-L WORM!"
U	MyIE.exe	MyIE.exe	"MyIE2/Maxthon browser related"
X	MyLife	CmdServ.exe	"Added by the HOLAR.A WORM!"
U	myNetWatchman	nwclient.exe	"Sends your firewall alerts to a website
X	MyPointsPointAlert	wjview ...MyPointsPointAlertrun.exe	"""With MyPoints you can earn rewards from name-brand merchants. You can even earn vacations and frequent flyer miles"". Dubious privacy policy"
U	MyPopupKiller	mpk.exe	"MyPopupKiller - popup killer"
U	myprint mileage	mpm.exe	Reports battery status on a portable printer
X	MySLScan	msvc32.exe	"Added by the FORBOT-EH WORM!"
X	mysoft	winexplor.exe	"Browser hijacker
N	MySoftware NewsFlash	Newsflsh.exe	"Runs in your task bar and receives alerts and release information on MySoftware products from Avenquest"
N	MySpaceIM	MySpaceIM.exe	"MySpaceIM internet messenger"
X	mysvcig38	mysvcc.exe	"Added by a variant of the SDBOT WORM!"
U	MytekSystrayExePath	MyTekSystray.exe	"MyTek system tray - web site providing computer tech support in Australia"
X	MyTotalSearch Email Plugin	mtsoemon.exe	"MyTotalSearchBar adware"
X	MyVBApp	SysNT.exe	"ReferAd adware"
X	MyVBApp	install.exe	"Detected as Generic Downloader.s by McAfee
X	MyVBApp	setup.exe	"Recognized by Kaspersky antivirus as the Clicker.Win32.VB.kb TROJAN! File location is in the Root folder (C:)
X	MyVirt.exe	MyVirt.exe	"Added by the REMADM-C TROJAN!"
U	MyVitalAgent	VtlAgent.exe	"MyVitalAgent from Lucent Technologies. Replacement for Net.Medic
U	MyVitalAgent	VtlAgent.exe	"MyVitalAgent from Lucent Technologies. Replacement for Net.Medic
X	MyWebSearch Email Plugin	mwsoemon.exe	"MyWebSearch parasite"
U	N2PTray	Net2fone.exe	"An Internet telephony application. Needed only if you have an account at Net2Phone
N	NADaemon	NADAEMON.EXE	"Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required"
N	Naggerrunkey	nagger.exe	Packard Bell Free Internet Signup screen
Y	Naimagent_service	EPOAgentnaimas32.exe	"Networked version of McAfee VirusScan. Installs
Y	Naimagent_UI	EPOAgentnaimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Y	Naimagent_UI	naimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
X	Name	Iexplorer0.exe	"Added by the THREADSYS TROJAN!"
X	Name Server	mswins.exe	"Added by a variant of the SDBOT WORM!"
X	NAMEDPIPE SYSTEM	namedpipe.exe	"Added by the MYTOB-FH TROJAN!"
X	nano	svchost.exe	"Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	NAP32	NAP32.exe	Premium rate adult content dialler
X	Narrator	*****.exe [ = random char]	"Added by the QOOLOGIC TROJAN!"
U	Narrator	Narrator.exe	Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
X	Natal	Natal.scr	"Added by the OPASERV.AE WORM!"
X	NAV	RuxDLL32.exe	"Added by the MAPSON.D WORM!"
Y	NAV Agent	navapw32.exe	Norton Anti-Virus's background scanning process
X	nAv AGENT	N/A	"Added by the RIOSYS MACRO! Note the lower-case ""n"" and ""v"" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes"
X	NAV Agent	systems.exe	"Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name"
X	NAV Agent	winsnav.vbs	"Added by the ANPES WORM!"
X	NAV Agent	wmilib32.exe	"Added by the VB-XU TROJAN!"
X	NAV Auto Prot	navprot1.exe	"Added by the RBOT.ZAC WORM!"
X	NAV Auto Protect	msfwe1.exe	"Added by a variant of the RBOT WORM!"
X	NAV Auto Protect	navprotect.exe	"Added by a variant of the RBOT WORM!"
X	NAV Auto Protect	dnsserv.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Protect	mcafee32.exe	"Added by a variant of the SPYBOT WORM!"
X	NAV Auto Update	Navautoupdate.exe	"Added by a variant of the SPYBOT WORM!"
X	NAV Auto Updates	csrssp.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Updates	navwindows.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Updates	slserves.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Updates	navupdaters.exe	"Added by the RBOT-UN WORM!"
X	NAV Auto Updates	navupdaterx.exe	"Added by a variant of the RBOT WORM!"
N	NAV CfgWiz	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
N	NAV Configuration Wizard	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
U	NAV DefAlert	DefAlert.exe	Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X	NAV Live Update	[path to worm]	"Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec"
X	NAV Scan Service	NAVSCAN32.EXE	"Added by the SDBOT.VG WORM!"
X	NavAgent32	lasvr32.exe	"Added by the FEMOT.D WORM!"
X	NavAgent32	SCardSvr32.Exe	"Added by the MOFEI.B WORM!"
X	navapp	navapp.exe	"NavExcel adware variant"
Y	navapw32	navapw32.exe	Norton Anti-Virus's background scanning process
X	NAVCheck	navchk.exe	Premium rate adult content dialer
X	NAVCheck	shman.exe	Premium rate adult content dialer
U	Naviscope	naviscope.exe	"Naviscope is a multipurpose browser enhancement that can speed up Web searches
X	NaviSearch	nls.exe	"NaviSearch
N	NavLoad	NAVBrowser.exe	Registration reminder for CorelDRAW 10
X	navman_20	sysnav32.exe	"Hijacker
?	NAVMD25	UpdtNv28.exe	Added by Symantec for updating the MicroDefs for their AV products - is it required?
X	NAVNet	**.tmp [ = random digit]	Unidentified adware
X	navp.exe	navp.exe	"Added by the AGOBOT-OE WORM!"
X	NavPass	NavPass.exe	Free system for gaining access to and downloading from adult content web-sites
X	NavScan	[filename]	"Added by the OBSORB TROJAN!"
X	NAVSCAN32.EXE	NAVSCAN32.exe	"Added by the SDBOT-DO WORM!"
X	NAVSCANNER32	NAVSCANNER32.EXE	"Added by the RBOT.QC WORM!"
X	NAVUpd	"rundll32.exe navupd.dll	Startup"
X	NAV_Update	NAV_Update.exe	Unidentified WORM or TROJAN!
X	nawadll32	nawadll32.exe	"Added by the SDBOT-ZI WORM!"
X	nawdll32	nawdll32.exe	"Added by the SDBOT-ZM WORM!"
N	NB Common Dialog Enhancements	COMDLGEX.EXE	"Part of McAfee Nuts & Bolts. With Common Dialog Enhancements
N	NB Start Menu	STARTM.EXE	Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
N	NB Windows Patterns	WINDBKGND.EXE	"Part of McAfee Nuts & Bolts. With Background Patterns
U	NBJ	NBJ.exe	Ahead Nero BackItUp - backup program. Only required for if you have scheduled back-ups
U	NbkCtrl	NbkCtrl.exe	"Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here"
?	NBKeyScan	NBKeyScan.exe	"Part of Nero BackItUp. What does it do and is it required?"
X	NBT System alias	[path] repcale.exe [path] beird.exe	"Added by a variant of the RANDON.AN WORM!"
?	nbustrce1D	nbustrce1D.exe	"Device driver
X	NC1565	winntsrv -l -p10001 -d -e cmd.exe -L	"Added by the NEWLEY-A WORM!"
X	Ncao	osoa.exe	"PurityScan/Clickspring adware"
X	Ncao	urpo.exe	"PurityScan/Clickspring adware"
?	NCClient	N/A	"??"
N	NCD	ncd.exe	Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
?	NCLAUNCH	NCLAUNCH.Exe	"Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required?"
N	NCS_SS	Csinsm32.exe	Same as CleanSweep Smart Sweep-Internet Sweep

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.