HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
N	NvInitialize	"rundll32.exe NvQtwk.dll	NvXTInit"
X	nvirundll	nvirundll.exe	"Added by the SPYBOT.NPS WORM!"
X	nvjxue	nvjxue.exe	"Added by the EYEVEG-J WORM!"
Y	NVmax	NVmax.exe	NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
N	NVMCTRAY	"RUNDLL32.EXE ...NVMCTRAY.DLL	NvTaskbarInit"
U	NvMediaCenter	"RunDLL32.exe NvMCTray.dll	NvTaskbarInit"
N	NVMixerTray	NVMixerTray.exe	System Tray access to audio controls from nVidia's motherboard ForceWare software
X	nvmsgdwn	NVMSGDWN.EXE	"Added by the GRABER-D TROJAN!"
X	nvpatch	napatch.exe	"Added by the SASSER-F WORM!"
U	NvPvrNetMon	NvPvrNetMon.exe	"Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - ""makes sure you don’t miss your favorite show. If you won’t be home to watch the show
N	NVQuickTweak	"rundll32.exe NvQtwk.dll	NvTaskbarInit"
N	NVRaidService	nvraidservice.exe	"nVidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Doesn't seem to be required if you have a RAID setup as there is no performance difference without it"
N	NVRT	nvrt.exe	NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
?	NVRTClk	NVRTClk.exe	"Related to a Gigabyte video card. What does it do
X	nvsv32.exe	nvsv32.exe	"Added by the FORBOT-DI WORM!"
X	nvsv32.exe	cstr.exe	"Added by a variant of the SDBOT WORM!"
X	nvsv32.exe	asr_fnt.exe	"Added by the WOOTBOT.GE WORM!"
X	nvsv32.exe	nvsv33.exe	"Added by the WOOTBOT.FP WORM!"
N	NvSvc	nvsvc.exe	"NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active
X	nvsvc	nvsvc.exe	"Added by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	NVSVC	nvsvc.exe	"Added by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	nvsvca32	nvsvca32.exe	"Added by the TACTSLAY.E TROJAN!"
X	NVSystem32	nvscv32.exe	"Added by the AGOBOT-NO WORM!"
X	NvUpdater	nwiz32.exe	"Added by a variant of the RBOT WORM!"
X	NvXplDeamon	xstyles.exe	Added by the SMALL.AJ VIRUS!
?	NWEReboot	dummy.exe	"??"
N	nwiz	nwiz.exe	"Associated with the newer versions of nVidia graphics cards drivers.  Allows you to immensely improve desktop layouts by setting preferences and optimizations.  However
X	nwiz32	nwiz32.exe	"Added by the SINBANK-A TROJAN!"
Y	Nwpopup	Nwpopup.exe	"Broadcast message handler part of Novell Netware that displays server
U	nwrecmsg	nwrecmsg.exe	"Broadcast message handler part of Novell Netware that displays server
X	nwss	Sp0.exe	"Added by the SpyOutside surveillance software. Uninstall this software unless you put it there yourself"
Y	NWTRAY	nwtray.exe	"Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client"
?	oadaemon	oadaemon.exe	"Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually?"
Y	oahstifr	oahstifr.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
U	OAKSTART	OAKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	OAKTASK	OAKTASK.EXE	Taskbar utility for a "control panel" for a CD-RW
U	OASClnt	oasclnt.exe	McAfee VirusScan On-Access Scan Client service
Y	Object Store Server	osserver.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
?	objtjprx	objtjprx.exe	"??"
?	obsver	obsver.exe	"Part of LingoWare translating software - what does it do and is it required?"
N	OCAudioIni	OCAudioIni.exe	"One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer"
N	ocraware	ocraware.exe	"Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications
X	ocx32	ocx32.exe	"Added by the ASTEF or RESPAN WORMS!"
X	OCXUPDT32	ocxupdt32.exe	"Added by the AGOBOT-IF WORM!"
X	OD	SYSCNTR.EXE	HotVideo dialler
X	od-matrxx	od-matrxx.exe	Adult dialler - xx can be any number
X	od-stndxx	od-stndxx.exe	Adult dialler - xx can be any number
X	od-teenxx	od-teenxx.exe	Adult dialler - xx can be any number
U	ODBC BackUp	fdxxl.exe	"G Data ""PC Spion"" - monitoring and surveillance software
X	oddworldz.exe	oddworldz.exe	"Added by the MULTIDR-EG TROJAN!"
N	Odometer	Odometer.EXE	Mouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
U	ODSPConfig	ODSPConfig.exe	"DsktopSurveil surveillance software - get rid of it unless you installed it yourself!"
X	Oeloader	Oeloader.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
X	OEM Tools 32	tres32.exe	"Added by the RBOT.QB WORM!"
X	OEM32 Tools	sres32.exe	"Added by a variant of the SPYBOT WORM!"
N	OEMCLEANUP	oemreset.exe	Resets OEM installation settings at bootup. Not required unless you're new to PC's
U	OEMRESET	oemreset.exe	Resets OEM installation settings at bootup. Not required unless you're new to PC's
U	OEMRUNONCE	oemrun.exe	Windows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished
U	oeplugin	bxOEPlugin.exe	"noHTML for Outlook Express is an add-on that protects Outlook Express from email viruses and email scripts by converting incoming email messages from HTML format to simple text"
?	OEPowerPlugs	winoeinit.exe	"??"
U	oepsrv	oepsrv.exe	"Outlook Express Protector is designed for controlling access to Outlook Express and its e-mail and address data bases"
U	OESpamTest	OESpamTest.ExE	"Kaspersky Anti-Spam"
N	OEXCheck	EA2Check.exe	"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup
X	oe_drop_spam	oesrv.exe	"Dropspam adware"
Y	OE_OEM	TMAS_OEMon.exe	Related to Trend Micro PC-cillin - Internet Security 12
X	Offer Companion	offers.exe	Adware
X	Offers	offers.exe	Adware
U	Office Mail	off_mail.exe	"Office Mail from Burrotech Ltd - ""complete email solution for small/medium businesses
U	Office Mail Alerter	om_Alerter.exe	"Office Mail Alerter - ""alert Office Mail users when they receive new emails"" via a System Tray icon"
N	Office Startup	Osa.exe	"Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog
X	Office Startup	Exploer.exe	"Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries"
N	Office Startup	Osa9.exe	"Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog
X	OfficeAgent	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	outIook.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	svcrhost.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	svcshost.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeDeamon	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
Y	OfficeGuard RegChecker	ogrc.exe	"Kaspersky Labs anti-virus"
X	OfficeGuardUI	svcss.exe	"Added by the DEDLER-C TROJAN!"
?	officejet 6100	hposol08.exe	Associated with a HP PSC2110 (and maybe others) all-in-one machine
U	OFFICEKB	kbdap32a.EXE	"Micro Innovations keyboard management"
X	OfficeQuickAccess	OfficeHost.vbs	"Added by the PEXMOR WORM!"
X	Offices	msnmgd32.exe	"Added by the FORBOT-DV WORM!"
Y	OfficeScan95	pccwin97.exe	"Trend Micro antivirus OfficeScan"
Y	OfficeScanNT Monitor	pccntmon.exe	"Trend Micro OfficeScan Antivirus real-time scan monitor"
X	OFFICEXP	OFFICEXP.exe	"Added by the WOOTBOT.HE WORM!"
X	office_update	[path to trojan]	"Added by the DLOADER-ZB TROJAN!"
N	OfotoNow USB Detection	"Rundll32.exe OFUSBS.DLL	WatchForConnection OfotoNow"
Y	ogrc	ogrc.exe	"Kaspersky Labs anti-virus"
N	Oil Change	OCTray32.exe	From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
?	OIM	oim.exe	"Related to the OKI LPR Utility	okilpr.exe	OKI printer utility
X	OLE	[filename]	"Added by the STAWIN or TARNO.D TROJANS!"
X	OLE Automation Server	ole32aut.vbe	"CoolWebSearch parasite variant"
X	oleaccrc	oleaccrc.exe	"Adware downloader - recognized by Kaspersky antivirus as TrojanDownloader.Agent.am"
X	OLEDb Service	runoledb32.exe	"Added by a variant of the SPYRE.B TROJAN!"
X	olehelp	olehelp.exe	"Added by the BOOKMARKER.D or BOOKMARKER.G TROJANS!"
X	OleLoader	ole32.exe	Added by the DELF.BR TROJAN!
U	olesvr	olesvr.exe	"Salfeld Child Control 2003 - parental control software"
X	Olive System	Szchost.exe	"Added by the MERCURYCAS.A TROJAN!"
X	Olympic	IE4321.exe	Adult content premium rate dialer - also detected as SMALL.CZ
X	Omf4	OMF4.EXE	"Added by the FREEMEGA TROJAN!"
N	OmgStartup	omgstartup.exe	Sony program called OpenMG Jukebox - player and music organizer
U	OmniHTTPd	ohttpd.exe	"OmniHTTPd web server from Omnicron"
N	OmniPage	Opware32.exe	"Part of OmniPage Pro from Scansoft (was Caere) - "the fastest
U	OmniPass	scureapp.exe	"OmniPass from Softex Inc. - secure password management software"
U	OM_Monitor	FirstStart.exe	"Olympus Master - digital camera management tools"
U	OM_Monitor	MONITOR.EXE	"Olympus Master - digital camera management tools"
U	On Screen Display	OSD.EXE	"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume
X	once	help.exe	"Identified as the DELF.LF by Ewido Security Suite"
N	One Touch Monitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	One Touch Monitor	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	One Touch Monitor	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
Y	OneCareUI	winssnotify.exe	"Related to Windows OneCare Live from Microsoft"
N	OneTouch Monitor	OneTouchMon.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X	Onflow	onflow.exe	Onflow is a internet company that offers an online advertising program. Not required - uninstall
U	OnfolioStorage	onfserv.exe	"""Onfolio is the complete solution for collecting
?	online cdrom	Active acid.exe	"??"
X	Online Service	svchost.exe	"Added by the HOSTIDEL.B or HOSTIDEL.C or TARNO.B TROJANS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
U	OnlinePCfix SmoothSurfer	SS.exe	"Smooth-Surfer - blocks banners
N	OnlineTime	onlinetime.exe	"OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs"
X	online_party	online_party.exe	Adult content dialler
X	Onluna Sarvice	sachost.exe	"Added by the TOFGER-AA TROJAN!"
X	Onlune Sarvice	sachost.exe	"Added by the DAEMONI-J TROJAN!"
X	OnSrvr	OnSrvr.exe	OnWebMedia adware
X	oo4	"RunDLL32.EXE [path] oo4.dll	DllRun"
?	OOLHELPT	OOLHELPT.exe	"??"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list