Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X NvCpl32Deamon nvcpl.exe"Added by the SPYBOT.S WORM!"
X NvCplD m2gr32.exe"""Switch"" premium rate adult content dialler variant"
X NvCplD ntcpl.exe"""Switch"" premium rate adult content dialler variant"
N NvCplDaemon rundll32.exe NvQtwk.dll NvCplDaemon"System Tray icon used to change display settings change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the ""NVIDIA Driver Helper Service"" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here)"
U NvCplDaemon rundll32.exe NvCpl.dll NvStartupIntializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
X NvCplDaemon msmsgrs.exe"Added by the DLOADER-YI TROJAN!"
X NvCplDaemon32 anvshell32.exe"Added by the VB-XU TROJAN!"
X NvCplDeamon nvdisp.exe"Added by the PEEPVIE-I TROJAN!"
X NvCplDmn NAVSVC.EXEAdded by an unidentified VIRUS WORM or TROJAN!
X NvCplScan msc32.exe"Added by the FORBOT-DD WORM!"
X NvCplScan winasp.exe"Added by the FORBOT.BZ WORM!"
X NvCplScan nvsc32.exe"Added by the BROPIA.N WORM!"
X NvCplScan kav32.exe"Added by the FORBOT-EW WORM!"
X NvCplScan netstat32.exe"Added by the SDBOT.BRL WORM!"
X NvCpTDaemon wuauqmr.exe"Added by the CULT-B WORM!"
X nvctrl.exe nvctrl.exe"Added by the ZLOB.G TROJAN!"
X nvd32 lptt01 nvd32.exe"RapidBlaster variant (in a ""nvd32"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X nvd32 ml097e nvd32.exe"RapidBlaster variant (in a ""nvd32"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X NVDispDrv NVDispDRV.EXE"Added by the WINKO.AO WORM!"
X NvGraphicsInterface [path to trojan]"Added by the BCKDR-QKI BACKDOOR!"
U NVHotkey rundll32.exe nvHotkey.dll"Enables the use of ""hot keys"" for changing setting on Nvidia graphics"
X Nvid [8 random charachters]Unidentified adware
X Nvid32 Nvid32.exe"Added by the GEMA TROJAN!"
X Nvidex32 Nvidex32.exe"Added by the GEMA TROJAN!"
Y NVIDIA ActiveArmor ntrayfw.exeSoftware interface for NVIDIA ActiveArmor - hardware firewall built into nVidia nForce motherboard chipsets
X nVidia Application Drivers nvidiav32.exe"Added by a variant of the IRCBOT BACKDOOR!"
X Nvidia Control Daemon nksvc32.exeAdded by an unidentified WORM or TROJAN!
X Nvidia Control Panel ncsvc32.exeAdded by an unidentified VIRUS WORM or TROJAN!
X nVidia Display Drivers (x86) nvsys86.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X NVIDIA Driver MSPMSPSU.EXE"Added by the WOOTBOT.Y WORM!"
X nVidia Drivers nVidiaDrvers.exe"Added by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card"
N NVIDIA nForce APU1 Utilities NVATray.exe"nVidia's nForce Audio Processing Unit (APU)- ""provides 3D positional audio and DirectX 8.0 compatibility and encodes and decodes Dolby Digital 5.1 audio in real time"""
U NVIDIA nTune nTune.exe"nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards"
X nVidia System Drivers nvsys32.exe"Added by an unidentified WORM or TROJAN! See here"
U NVidia System Utility NVSystemUtility.exe"NVidia System Utility (now nTune) lets you adjust bus speeds hardware voltages memory controller timings and fan speed as well as additional settings to increase performance aggressiveness and hardware voltages. Will also display a dynamic graph of CPU and system temperatures hardware voltages and memory bus speeds"
X NVIDIA Video drivers video_32D.exe"Added by the AGOBOT.KV WORM!"
X NVIDIA Video drivers video_32sD.exe"Added by the RBOT-BB WORM!"
X Nvidia32 nvidia32.exe"CoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!"
X NviDiaGT lsass.exe"Added by the AUTORUN-DV WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
N NvidiaQuickTweak rundll32.exe NvQtwk.dll NvTaskbarInit"System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game ""Everquest"". Otherwise settings can be changed manually via Display Properties"
X nvidll32 nvidll32.exe"Added by the RBOT-XK WORM!"
U NVIEW rundll32.exe nview.dll nViewLoadHookThis is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
X nviload32 nviload32.exe"Added by the SDBOT-VT WORM!"
N NvInitialize rundll32.exe NvQtwk.dll NvXTInitThought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
X nvirundll nvirundll.exe"Added by the SPYBOT.NPS WORM!"
X nvjxue nvjxue.exe"Added by the EYEVEG-J WORM!"
Y NVmax NVmax.exeNVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
N NVMCTRAY RUNDLL32.EXE ...NVMCTRAY.DLL NvTaskbarInit"System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game ""Everquest"". Otherwise settings can be changed manually via Display Properties"
U NvMediaCenter RunDLL32.exe NvMCTray.dll NvTaskbarInit"System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game ""Everquest"". Otherwise settings can be changed manually via Display Properties"
N NVMixerTray NVMixerTray.exeSystem Tray access to audio controls from nVidia's motherboard ForceWare software
X nvmsgdwn NVMSGDWN.EXE"Added by the GRABER-D TROJAN!"
X NvMsnW Isass.exe"Added by the BROPIA.K WORM!"
X nvpatch napatch.exe"Added by the SASSER-F WORM!"
U NvPvrNetMon NvPvrNetMon.exe"Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - ""makes sure you don?t miss your favorite show. If you won?t be home to watch the show just use the PVR to set future recordings"""
N NVQuickTweak rundll32.exe NvQtwk.dll NvTaskbarInit"System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game ""Everquest"". Otherwise settings can be changed manually via Display Properties"
N NVRaidService nvraidservice.exe"nVidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Doesn't seem to be required if you have a RAID setup as there is no performance difference without it"
? NVRotateSysTray nvsysrot.dll"Related to NVIDIA nView Control Panel. What does it do and is it required?"
N NVRT nvrt.exeNVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
? NVRTClk NVRTClk.exe"Related to a Gigabyte video card. What does it do and is it required?"
X nvsv32.exe nvsv32.exe"Added by the FORBOT-DI WORM!"
X nvsv32.exe cstr.exe"Added by a variant of the SDBOT WORM!"
X nvsv32.exe asr_fnt.exe"Added by the WOOTBOT.GE WORM!"
X nvsv32.exe nvsv33.exe"Added by the WOOTBOT.FP WORM!"
N NvSvc nvsvc.exeNVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's such as Asus this service may have been renamed to reflect that
X nvsvc nvsvc.exe"Added by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%"
X NVSVC nvsvc.exe"Added by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
Y NvSvc rundll32.exe nvsvc.dll nvsvcStartRelated to NVIDIA graphics cards
X nvsvca32 nvsvca32.exe"Added by the TACTSLAY.E TROJAN!"
X nvsvca32 clfmon.exe"Added by the TACTSLAY.E TROJAN!"
X NVSystem32 nvscv32.exe"Added by the AGOBOT-NO WORM!"
X Nvt32 complaint_7251.exe"Added by the ARTIEF.B TROJAN!"
X NvUpdater nwiz32.exe"Added by a variant of the RBOT WORM!"
X NvVideoCenter NvVid.exe"Added by the HAXDOOR-DO TROJAN!"
X NvXplDeamon xstyles.exeAdded by the SMALL.AJ VIRUS!
? NWEReboot dummy.exe"??"
U nwiz nwiz.exeNvidia nView Wizard - present with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. If you use any of the special nView features available in the control panel leave this alone - otherwise you can disable it
X nwiz32 nwiz32.exe"Added by the SINBANK-A TROJAN!"
Y Nwpopup Nwpopup.exe"Broadcast message handler part of Novell Netware that displays server printer and other messages"
U nwrecmsg nwrecmsg.exe"Broadcast message handler part of Novell Netware that displays server printer and other messages - can cause crashes"
U nwss Sp0.exe"SpyOutside surveillance software. Uninstall this software unless you put it there yourself"
Y NWTRAY nwtray.exe"Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client"
X nxgsvc rundll32.exe nxgsvc.dllstart"Added by the AKBOT.BA WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""nxgsvc.dll"" file is found in %System%"
X nxosys rundll32.exe nxosys.dllstart"Added by the AKBOT.BD WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""nxosys.dll"" file is found in %System%"
U nxpclient sprtcmd.exe /P nxpclient"NetExpert - ""India's first ever automated Broadband care technology."" Identifies and automatically fixes typical problems that may occur with your high-speed internet service"
? oadaemon oadaemon.exe"Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually?"
Y oahstifr oahstifr.exe"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital it verifies all the links etc in a site. It runs as a service in NT 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up.""
U OAKSTART OAKSTART.EXESets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N OAKTASK OAKTASK.EXETaskbar utility for a "control panel" for a CD-RW
U OASClnt oasclnt.exeMcAfee VirusScan On-Access Scan Client service
Y Object Store Server osserver.exe"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital it verifies all the links etc in a site. It runs as a service in NT 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up.""
X ObjectDock Brico.cmd"Added by the BOBANDY-A WORM!"
? objtjprx objtjprx.exe"??"
? obsver obsver.exe"Part of LingoWare translating software - what does it do and is it required?"
N OCAudioIni OCAudioIni.exe"One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer"
N ocraware ocraware.exeOptical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications such as Word WordPerfect etc. Available via Start -> Programs
U Octoshape Streaming Services OctoshapeClient.exe"Octoshape Live Streaming - ""is a revolutionary technology that will reduce your bandwidth cost and improve the quality in sound and picture"""
X ocx32 ocx32.exe"Added by the ASTEF or RESPAN WORMS!"
X OCXUPDT32 ocxupdt32.exe"Added by the AGOBOT-IF WORM!"
X OD SYSCNTR.EXEHotVideo dialler
X od-matrxx od-matrxx.exeAdult dialler - xx can be any number
X od-stndxx od-stndxx.exeAdult dialler - xx can be any number
X od-teenxx od-teenxx.exeAdult dialler - xx can be any number
U ODBC BackUp fdxxl.exe"G Data ""PC Spion"". PC monitoring and surveilling software captures all users activity on the PC see here. Disable/remove if you didn't install it yourself!"
X oddworldz.exe oddworldz.exe"Added by the MULTIDR-EG TROJAN!"
N Odebit Multimedia V2 Odebit.exe"Odébit Multimedia - free French multimedia player giving access to the best of television videos radio games and chat"
N Odebit Multimedia V3 Odebit.exe"Odébit Multimedia - free French multimedia player giving access to the best of television videos radio games and chat"
N Odebit Multimedia V3 - Services Odebit.exe"Odébit Multimedia - free French multimedia player giving access to the best of television videos radio games and chat"
N Odometer Odometer.EXEMouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
U ODSPConfig ODSPConfig.exe"DsktopSurveil surveillance software. Uninstall this software if you did not install it yourself"
X Oeloader Oeloader.exe"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
X OEM Tools 32 tres32.exe"Added by the RBOT.QB WORM!"
U OEM02Mon.exe OEM02Mon.exe"Creative Live! Cam Console Auto Launcher"
? OEM07Mon.exe OEM07Mon.exe"Related to Live Camera Console Auto Launcher by Creative Technology LTD. What does it do and is it required?"
X OEM32 Tools sres32.exe"Added by a variant of the SPYBOT WORM!"
N OEMCLEANUP oemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
U OEMRESET oemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
U OEMRUNONCE oemrun.exeWindows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished
U oeplugin bxOEPlugin.exe"noHTML for Outlook Express is an add-on that protects Outlook Express from email viruses and email scripts by converting incoming email messages from HTML format to simple text"
? OEPowerPlugs winoeinit.exe"??"
U oepsrv oepsrv.exe"Outlook Express Protector is designed for controlling access to Outlook Express and its e-mail and address data bases"
X OESET setup60.exe"Added by the WAREZDL.28672 TROJAN!"
U OESpamTest OESpamTest.ExE"Kaspersky Anti-Spam"
N OEXCheck EA2Check.exe"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup restore synchronize amongst others"
X oe_drop_spam oesrv.exe"Dropspam adware"
Y OE_OEM TMAS_OEMon.exeRelated to Trend Micro PC-cillin - Internet Security 12
X Offer Companion offers.exeAdware
X Offers offers.exeAdware
X Offica Monitor Secura Systeme winxp_sp3.exe"Added by a variant of the RBOT WORM!"
X Office Office.exe"Added by the KRAIMER.12 TROJAN!"
X Office Desktops imag.exe"Detected by Trend Micro as the SPYBOT.AQR WORM! See here"
U Office Mail off_mail.exe"Office Mail from Burrotech Ltd - ""complete email solution for small/medium businesses homes schools and colleges. It is a small email server which forms the perfect gateway between your internal and external email"""
U Office Mail Alerter om_Alerter.exe"Office Mail Alerter - ""alert Office Mail users when they receive new emails"" via a System Tray icon"
X Office Monitor adv32.exe"Added by the SDBOT-CWO WORM!"
X Office Monitor alg32.exe"Added by the RBOT-GMM WORM!"
X Office Monitor nvsvc86.exe"Detected by Trend Micro as the IRCBOT.BVO BACKDOOR! See here"
X Office Monitor Secure Systema absecure32.exe"Added by the RBOT.FPW WORM!"
X Office Monitor Word Exel R svch.exe"Added by the DWNLDR-GWW TROJAN!"
X Office Monitor Word Exel R u.exe"Added by the SDBOT-DEE WORM!"
X Office Monitors GoogleUpdater.exe"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
X Office Monitorse [path to worm]"Added by the SDBOT-CZX WORM!"
N Office Startup Osa.exeApplication which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
X Office Startup Exploer.exe"Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries"
N Office Startup Osa9.exeApplication which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
X Office SturtUp osa9.exe"Added by the CLICKER-EC TROJAN! Note - this trojan is located in %Windir% and should not be confused with the Microsoft office program located in %Program Files%\Microsoft Office\Office"
X OfficeAgent expIorer.exe"Added by the TACTSLAY.A TROJAN!"
X OfficeAgent outIook.exe"Added by the TACTSLAY.A TROJAN!"
X OfficeAgent svcrhost.exe"Added by the TACTSLAY.A TROJAN!"
X OfficeAgent svcshost.exe"Added by the TACTSLAY.A TROJAN!"
X OfficeDeamon msorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
Y OfficeGuard RegChecker ogrc.exe"Kaspersky Labs anti-virus"
X OfficeGuardUI svcss.exe"Added by the DEDLER-C TROJAN!"
? officejet 6100 hposol08.exeAssociated with a HP PSC2110 (and maybe others) all-in-one machine
U OFFICEKB kbdap32a.EXE"Keyboard utility for a Micro Innovations brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard"
X OfficeQuickAccess OfficeHost.vbs"Added by the PEXMOR WORM!"
X Offices msnmgd32.exe"Added by the FORBOT-DV WORM!"
X Offices Monitors [path to worm]"Added by the RBOT-GKO WORM!"
X Offices Monitorse [path to worm]"Added by the RBOT-GKO WORM!"
X Offices Monitorse algose32.exe"Added by the RBOT-GDD WORM!"
Y OfficeScan95 pccwin97.exe"Trend Micro antivirus OfficeScan"
Y OfficeScanNT Monitor pccntmon.exe"Trend Micro OfficeScan Antivirus real-time scan monitor"
X OfficeWord Monitor msn32.exe"Added by the RBOT-GUE WORM!"
X OfficeWord Monitors Offlce.exe"Added by the IRCBOT.JZ TROJAN!"
X OFFICEXP OFFICEXP.exe"Added by the WOOTBOT.HE WORM!"
X Office_app msnmrgs.exeAdded by a variant of the VBBANC-A TROJAN!
X office_update [path to trojan]"Added by the DLOADER-ZB TROJAN!"
N OfotoNow USB Detection Rundll32.exe OFUSBS.DLL WatchForConnection OfotoNow"Autodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs"
Y ogrc ogrc.exe"Kaspersky Labs anti-virus"
N Oil Change OCTray32.exeFrom CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
? OIM oim.exe"Related to the O2 (was ""genie"") mobile phone service. What does it do and is it required?"
X OKGO winutade.exe"Added by the BANKER-EHZ TROJAN!"
U OKI LPR Utility okilpr.exeOKI printer utility
X OKMaster OKMaster.exe"OKToolbar adware"
X OLE [filename]"Added by the STAWIN or TARNO.D TROJANS!"
X OLE Automation Server ole32aut.vbe"CoolWebSearch parasite variant"
X oleaccrc oleaccrc.exe"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
X OLEDb Service runoledb32.exe"Added by a variant of the SPYRE.B TROJAN!"
X olehelp olehelp.exe"Added by the BOOKMARKER.D or BOOKMARKER.G TROJANS!"
X OleLoader ole32.exeAdded by the DELF.BR TROJAN!
U olesvr olesvr.exe"Salfeld Child Control - parental control software"
X Olive System Szchost.exe"Added by the MERCURYCAS.A TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list