HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	AutoSizer	AUTOSIZER.EXE	"AutoSizer - utility that automatically maximizes windows when they're opened"
N	AutoSpell	autospel.exe	"AutoSpell - spell checker (version 6.*)"
N	AutoSpell 5	ASWATC32.EXE	"AutoSpell - spell checker"
N	autotbar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
N	AutoTKit	AUTOTKIT.EXE	On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N	autoupd	autoupd.exe	"Raxco Software Auto Update utility."Used to keep your software up-to-date""
X	autoupd	autoupd.exe	"Added by an unidentified VIRUS
X	autoupdate	"WINUP2DATE.DLL	SHStart"
X	autoupdate	"rundll32 [path] DATADX.DLL	SHStart"
X	autoupdate	"rundll32 [path] SUPDATE.DLL	SHStart"
X	Autoupdate Service	kaka.exe	"Added by the SYMPE-B TROJAN!"
X	AutoUpdater	aupdate.exe	"Tinybar variant"
X	AutoUpdater	AutoUpdate.exe	"PeopleonPage foistware"
X	autoupdatev2	[path to file]	"Added by the DROPPER-BM TROJAN!"
X	autoupdatev2	autoupdatev2.exe	"Recognized by Kaspersky antivirus as Clicker.Win32.Agent.fq"
X	AutoVirusProtection	ciscv.exe	"Added by a variant of the RBOT WORM!"
X	auto__antiav__key	antiav_exe.exe	"Added by the BAGLEDI-AA TROJAN!"
X	auto__hloader__key	hloader_exe.exe	"Added by the BAGLE.AB TROJAN!"
X	aux.exe	aux.exe	"Added by the ZINS TROJAN!"
X	auxAudioDevice	aux32.exe	"Added by the AIZU WORM!"
N	AUXXTRAY	au30setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
X	AV	UPDATE-28062004.exe[25 blank spaces].vbs	"Added by the MIDFIN WORM!"
X	AV Client	patch31345.exe	"Added by the MYDOOM.AD WORM!"
X	AV Industry	patch31345.exe	"Added by the MYDOOM.AD WORM!"
X	AV UpDate	Update.exe	"Added by the FUROOT-A TROJAN!"
N	AvaFind	AvaFind.exe	"AvaFind file search utility"
Y	Avast!	ashserv.exe	"Part of Avast! anti-virus software"
Y	avast!	ashDisp.exe	"Part of Avast! anti-virus software"
Y	avast! Web Scanner	Ashwebsv.exe	"Part of Avast! anti-virus software"
Y	Avast32	Astart32.exe	"Part of Avast! anti-virus software"
X	avc	avmon.exe	Added by an unidentified TROJAN!
U	AvconsoleEXE	Avconsol.exe	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X	AveoAttune	atmdlusr.exe	Spyware - part of an automated helpdesk software
X	AvG	svchost323.exe	"Added by the RBOT-ZA WORM!"
X	AVG Grisoft Updater	updater.exe	"Added by the AGOBOT-OT WORM!"
Y	AVG7_AMSVR	Avgamsvr.exe	"AVG antivirus related"
Y	AVG7_CC	AVGCC.exe	"AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components
Y	AVG7_EMC	AVGEMC.exe	"AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses"
Y	AVG7_Run	avgw.exe	"AVG Anti-Virus 7.0 related"
Y	avgamsvr.exe	Avgamsvr.exe	"AVG antivirus related"
Y	avgcc32	avgcc32.exe	"AVG anti-virus control center. Also enables scheduled tests
Y	AVGCtrl	AVGCtrl.exe	"Part of AntiVirŽ PersonalEdition Classic antivirus"
Y	avgfwsrv	AVGFWSRV.EXE	"Firewall from Grisoft AVG Plus Firewall Edition"
Y	avgmsvr.exe	avgmsvr.exe	"AVG Anti-Virus 7.0 related"
Y	AVGnt	AVGnt.exe	"AntiVirŽ PersonalEdition Classic antivirus. System Tray icon and control program"
Y	Avgserv9.exe	Avgserv9.exe	"AVG antivirus background monitoring"
Y	AVGuard	AVGuard.exe	"AntiVirŽ PersonalEdition Classic antivirus. Background task which scans files transparently"
Y	AVG_CC	avgcc32.exe	"AVG anti-virus control center. Also enables scheduled tests
Y	AVG_EMC	AVGEMC.exe	"AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses"
Y	AVG_RegCleaner	AVGREGCL.exe	"AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems"
X	avidrv	drvsc.exe	"Recognized by Kaspersky antivirus as Trojan-Downloader.Win32.Agent.ph"
X	Avimgt	Avimgt.exe	"Added by the GEMA TROJAN!"
X	Avimgt32	Avimgt32.exe	"Added by the GEMA TROJAN!"
Y	avinit	AVINIT9X.EXE	"Command antivirus related"
Y	AVK Mail Checker	AVKPop.exe	"eXtendia AVK AntiVirus email checker"
Y	AVKBar	AVKBar.exe	"GData AntiVirusKit Anti-virus"
Y	AvMaiSrv	Avmaisrv.exe	"Part of Avast! anti-virus software - E-mail scanner"
X	avnort	formatsys.exe	"Added by the SERFLOG.A WORM!"
X	avnort	msmbw.exe	"Added by the SERFLOG.A WORM!"
X	avnort	serbw.exe	"Added by the SERFLOG.A WORM!"
X	AVP	[path to trojan]	"Added by the MUTBO-A TROJAN!"
Y	avpcc	avpcc.exe	"Kaspersky Labs anti-virus"
Y	avpm	avpm.exe	"Kaspersky anti-virus"
X	Avpr	avpr.exe	"Added by the MYDOOM.AF WORM!"
X	Avril Lavigne - Muse	[random filename]	"Added by the AVRIL-A WORM!"
Y	AVSCHED32	AVSched32.exe	"AntiVirŽ PersonalEdition Classic - antivirus"
Y	AVSchedScan	SCHSC9X.EXE	"Command antivirus related"
X	AvSer	dsm.exe	"Added by the SERFLOG.B WORM!"
X	AvSer	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	AvSer	svosm.exe	"Added by the SERFLOG.B WORM!"
X	AvSer	sysup.exe	"Added by the SERFLOG.B WORM!"
X	avserve.exe	avserve.exe	"Added by the SASSER WORM!"
X	avserve2.exe	avserve2.exe	"Added by the SASSER.B or SASSER.C WORMS!"
X	avserve3.exe	avserve3.exe	"Added by the SASSER.G WORM!"
U	AVStation premium	AVStation agent.exe	"Related to Samsung AV Station - instant playback of music
N	Avtray	Avtray.exe	"Command Antivirus tray icon"
?	AVWLPSTA	AVWLPSTA.exe	"PRISM Status Tray Applet - but what is it for and is it required?"
Y	AVWUpd32	AVWUPD32.EXE	"AntiVirŽ PersonalEdition Classic - updater"
Y	avx communicator	xcommsur.exe	"Anti-virus part of BitDefender virus scanner/firewall"
Y	Avxlive	avxlive.exe	"Bullguard or BitDefender antivirus"
Y	avxlni	avxinit.exe	"Anti-virus part of BitDefender virus scanner/firewall"
?	Avxnews	??	"??"
U	Awatch	Awatch.exe	"Diagnosis tool that monitors DSL connections
N	awhost32	awhost32.exe	"Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file
U	AWMON	Ad-Watch.exe	"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
U	AWMON	Ad-Monitor.exe	"F-Secure Anti-Spyware"
?	AWUSGSTA	AWUSGSTA.exe	"Reportedly related to a USB Wifi Adapter - is it required at startup?"
U	awxDTools	"awxDTools.dll	awxRegisterDll"
?	AxFilter	"Rundll32 AXFILTER.DLL	Rundll32"
X	AXVenore	AXVenore.exe	"Identified as a TROJAN!"
Y	azmodem	azexe.exe	"Aztech Labs modem driver"
?	a_vpd	vpd.exe	"Located in the IBMTOOLSVPD sub-directory. What does it do and is it required?"""
U	a˛	a2guard.exe	"a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a˛ 'Background Guard' real time protection feature"
N	B'sCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
X	b.exe	b.exe	"Added by the SDBOT.BND WORM!"
N	B.Reader	remin.exe	"Birthday Reminder 5.0 - as the name implies"
X	b3d	BDEsecureinstall.exe	"B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in the ""System"" directory. (3) Disable and ideally delete it from the registry. (4) Remove the ""BDE"" directory and all its contents"
X	b3dUpdate	Zupdate.exe	"Associated with B3d Projector foistware - see here"
U	b9	B9.exe	"FireTrust Benign - allows you to receive e-mail which is safe from viruses
X	b99	msmm.exe	"ClientMan parasite variant"
X	babeie	"rundll32 cnbabe.dll	dllstartup"
N	Babylon Client	Babylon.exe	"Babylon-Pro is a powerful information tool that instantly provides relevant information
N	Babylon Translator	Babylon.exe	"""Babylon-Pro is a powerful information tool that instantly provides relevant information
X	Back Updates	Uninstall.log.vbs	"Added by the YPSAN.D WORM!"
X	Backdoor.NuAgent	agent.exe	"Added by the AGENT-DP TROJAN!"
X	Background Intelligent Transfer Service	rundll32.exe	"Added by the VB-ZD TROJAN! Note - this file is located in the C:Windowshelp folder
U	BackgroundSwitcher	bgswitch.exe	"Originally included with Microsoft's XP PowerToys (but now withdrawn - see here
N	Backpack UDF	bpudfmon.exe	"Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk"
X	backup	[path to worm]	"Added by the AGOBOT-H WORM!"
X	Backup Service	backup.svc	Unidentified adware
U	Backup4all OTB Agent	B4AOTB.exe	"""Backup4all is an award-winning data backup software for Windows. This backup utility was designed to protect your valuable data from partial or total loss by automating backup tasks
U	BackupExecScheduler	besch.exe	"Veritas ""Back Up My PC"" software"
?	BackupNotify	backupnotify.exe	"HP Digital Imaging related. What does it do and is it required?"
N	BackWeb	backweb.exe	Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
N	Backwork	Backwork.exe	"Backwork trojan detector"
U	BACPI10	bacpi10a.exe	Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
N	BacsTray	BacsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	BADDATE	BADDATE.EXE	"Added by an unidentified VIRUS
X	BagleAV	csrss.exe	"Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
X	Bakra	IEHost.EXE	"Added by the MULTIDR-AH TROJAN!"
X	Band-Aid	[path to file]	"Added by the RANKY.O TROJAN!"
X	Bandook	ali.exe	"Added by the EXEMAS-B TROJAN!"
U	Bandwidth Monitor Pro	Bandwidth Monitor Pro.exe	"Bandwidth Monitor Pro - utililty to track your current download/upload limit that may be set by your ISP"
U	Banpopup by Pratik	Banpopup.exe	Banpopup - popup killer
X	Bar Ding lolt	Analiz.exe	"Added by the RBOT-RP WORM!"
X	bargains	bargains.exe	"BargainBuddy foistware"
X	bargains	bargainbuddy.exe	"BargainBuddy foistware"
?	Bart Station	station.sbrt	"Related to PeoplePC ISP. May be a dialler for dial-up accounts?"
U	Bart Station	PPCOLink.exe	Dialer for PeoplePC ISP
X	BarTheme	bartent32.exe	"Added by the AGOBOT-UG WORM!"
N	bascstray	BascsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	Bat	secure2.bat	"Added by the ZCREW.C TROJAN!"
N	Batchreg1	N/A	"Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list