Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	BatInfEx	rundll32.exe	Displays battery status information on an IBM Thinkpad
X	BatSrv	batserv2.exe	"Recognized by Kaspersky antivirus as the Win32.Locksky.m WORM!"
U	Battery Scope	batmgr.exe	Monitors battery levels on a notebook/laptop PC
U	BatteryBar	batterybar.exe	"BatteryBar - displays battery usage
X	BatzBack	BatzBack.scr	"Added by the BACKZAT WORM!"
U	BAUSB	BAUSB.exe	"Boston Acoustics Audio
X	bawindo	bawindo.exe	"Added by the BEAGLE.AR or BEAGLE.AU WORMS!"
U	BayMgr	DockApp.exe	Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap	bayswap.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
N	BBC Alerts	BBC_Alerts.exe	"BBC Alerts - ""You can now have all the latest news and sports headlines delivered straight to your desktop with the new BBC Alerts service"""
U	BBC News alerts	skinkers.exe	"BBC News Desktop Alerts service - see here. Desktop alert and breaking news e-mail services let you find out about all the latest news as it happens"
?	BBDial	BT Broadband.exe	"Part of BT Broandband - is it required?"
N	bbSysTray	bbSysTray.exe	"Philips CD-RW related - ""the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"""
U	bbui	bbui.exe	AOL DSL status monitor displaying a red/green icon indicating if you have a connection
U	bca	bca.exe	"BeClean Agent - registry
U	BCDetect	bcdetect.exe	Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
Y	BCMDMMSG	bcmdmmsg.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
U	BCMHal	"rundll32.exe bcmhal9x.dll	bcinit"
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
?	bcmwltry	bcmwltry.exe	"Broadcom Corporation Wireless Network Tray Applet. Is it required?"
N	BCNT	bcnt.exe	"AWS Weatherbug related. What does it do?"
X	BCPC	bcpc.exe	"BroadcastPC adware variant"
X	bcpc_c	bcpc_c.exe	"BroadcastPC adware variant"
U	BCTweak	bctweak.exe	"BlasterControl for Creative video cards - controls for desktop settings
X	Bcvsrv32	bcvsrv32.exe	"Added by the GAOBOT.BQJ WORM!"
N	BCWipeTM	bcwipetm.exe	"BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task
X	BD	dc.exe	"Added by the RASDOOR-A TROJAN!"
Y	BDMCon	Bdmcon.exe	"BitDefender antivirus"
Y	BDNewsAgent	bdnagent.exe	"BitDefender antivirus - updater"
Y	BDOESRV	bdoesrv.exe	"Bitdefender 8 antivirus and firewall"
Y	BDSwitchAgent	bdswitch.exe	"Bitdefender 8 antivirus and firewall"
N	BearShare	bearshare.exe	"BearShare file sharing client. Versions known to include spyware - see here"
U	BeatNik Internet Clock	BeatNik.exe	"BeatNik Internet Clock is a Windows clock add-on that supports 'skins'. It can also synchronize your computer's clock with an atomic clock"
X	Beegees Update	beegees.exe	"Added by the SDBOT-ADK WORM!"
?	BEEI	beei.exe	"??"
U	BeFaster	befaster3.exe	"BeFaster internet connection optimization tool"
?	BEHL	BEHL.exe	"??"
?	BEHLO	BEHLO.exe	"??"
N	Belkin PCMCIA WLAN Monitor	monitorbk.exe	Belkin USB Network Adapter Management utility - can be started manually
N	Belkin Wireless Utility	Belkinwcui.exe	"Wireles configuration utility for some Belkin cards such as the Wireless G Desktop Card"
U	BelNotify	"[path] NPBelv32.dll	RunDll32_BelNotify"
?	BELORVBI	BELORVBI.exe	"??"
?	Belsta.exe	Belsta.exe	"Configuration tool for Belkin wireless network cards. Required to change the card's configuration. Is it required for correct operation once the confuiguration is changed?"
X	Belt	Belt.exe	"VX2.Transponder parasite updater/installer related"
X	Benadril Alert Tool	benadrilalert.exe	Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
N	BestPopUpKiller	BestPopupKiller.exe	"Popup killer by Swanksoft - not recommended
X	BeSys	[path to file]	"BeSys adware"
X	BF4P	bf4p.exe	"Added by the IRCBOT.GEN WORM!"
Y	bg	bullguard.exe	"Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster"
U	BGInfo	Bginfo.exe	"BGinfo automatically displays relevant information about a Windows computer on the desktop's background
U	BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}	NMBgMonitor.exe	"Related to Nero Home"
Y	BGNewsAgent	bgnewsag.exe	"BullGuard antivirus updater"
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
N	BHOCop	BHOCop.exe	"PC Magazine's BHODemon 2.0	BHODemon.exe	"BHODemon ""protects you from unknown Browser Helper Objects (BHOs)
U	BHR	BHR.exe	"Browser Hijack Retaliator - recovers your browser after it has been hijacked by spyware
U	BI1HelperStartUp	BI1HEL~1.EXE	"ScreenScenes ""Beach Islands"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."
X	BIE	"Rundll32.exe BDSrHook.dll	Rundll32"
U	BigDog303	VM303_STI.EXE	"Related to VIMICRO USB for PC Camera"
?	BigDogPath	VM_STI.EXE	"Bundled with some software for digital cameras that use a USB connection - what does it do and is it required?"
N	bigfix	BIGFIX.EXE	"BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet� Messages) and can automatically check your computer for bugs
U	BigPond Toolbar	bpumTray.exe	"Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier""
N	BigPondCable	bpcable.exe	Telstra Bigpond Cable login software - can be started manually
N	Billminder	Billmind.exe	Can be setup in Quicken to remind user of due payments. Available via Start -> Programs
X	bin32hpu	ppstub.exe	"PrecisionPop adware"
X	bingdian	Bingdian.vbs	"Added by the BINGD WORM!"
?	Bingo Charm	charms.exe	"Some kind of screen icon kind of like desk flag
U	Biomenu	menusw.exe	"Related to Sony VAIO - passwords
X	Bios	Bios32.exe	"Added by an unidentified VIRUS
X	BIOS XP Loader	[random filename]	"Added by the RBOT-IC WORM!"
X	BIOS1	BIOS1.EXE	"Added by the OPASERV.T WORM!"
?	BIOVCIP	BIOVCIP.exe	"??"
N	BitComet	BitComet.exe	"BitComet P2P client - can be launched from Start -> Programs"
X	BitDefender Antivirus	BITDEFENDERX.EXE	"Added by a variant of the SPYBOT WORM!"
Y	BitDefender Communicator	xcommsvr.exe	"BitDefender antivirus"
U	BitDefender for MSN Messenger	msnmon.exe	"Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website"
U	BitDefender for Yahoo! Messenger	yahmon.exe	"Bitdefender anti-virus for Yahoo! Messenger - no longer supported at the BitDefender website"
Y	BitDefender Live! Init	bdinit.exe	"BitDefender antivirus"
Y	BitDefender Scan Server	bdss.exe	"BitDefender antivirus"
Y	BitDefender Virus Shield	vsserv.exe	"BitDefender antivirus"
Y	bitdefenderlive	avxlive.exe	"Main program of BitDefender virus scanner/firewall"
U	BitDefender_P2P_Startup	BitDefender_P2P_Startup.exe	"Bitdefender anti-virus for P2P clients - no longer supported at the BitDefender website"
N	BitWare Print Monitor	bwprnmon.exe	"FaxServe network fax software"
N	BJ Printer Status Monitor	Cjstsr.exe	Canon BJ printer status monitor
N	BJ Status Monitor 5xx	CJSTRxx.EXE	Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
N	bjcfd	cdf.exe	"BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs"
N	BlackICE PC Protection	blackice.exe	"Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD"
N	BlackIce Utility	blackice.exe	"Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD"
U	blads	blads.exe	"A Tweak-XP component
X	blah service	winupdate.exe	"Added by the GAOBOT.BIA WORM!"
X	blah service	winsysengine.exe	"Added by the RBOT-KI WORM!"
X	blah service	internet.exe	"Added by a variant of the RBOT WORM!"
X	blah service	smnp.exe	"Added by the RBOT.IZ WORM!"
X	blah service	msnmsgrr.exe	"Added by the RBOT.PZ WORM!"
X	blah service	tazkmgr.exe	"Added by the RBOT.UA WORM!"
X	blah service	FaLeH.exe	"Added by the RBOT-AES WORM!"
X	blah service	microsoft.exe	"Added by a variant of the RBOT WORM!"
X	blah service	evosys.exe	"Added by a variant of the RBOT WORM!"
X	blah service	win32.exe	"Added by the RBOT-AXO WORM!"
X	Blah service	CCAPPS32.EXE	"Added by the RBOT.TV WORM!"
X	blahh service	msengine.exe	"Added by a variant of the RBOT WORM!"
X	blahx service	msnjompa.exe	"Added by the SDBOT.AML WORM!"
N	BlazeChanger	FBZPaper.exe	"Ember graphic file viewer
N	bldbubg	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
U	blinkx	blinkx.exe	"Blinkx Desktop ""Smart Folders"" software"
X	BLMessagingIntegration	blengine.exe	"BuddyLinks adware"
U	BlockAds	blads.exe	"A Tweak-XP component
X	BlockChecker	Block-checker.exe	"BlockChecker adware"
X	Blocker System611 Monitoring	PopUpBlocker611.exe	"Added by the RBOT.BLJ WORM!"
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
U	blsloader	blsloader.exe	"BellSouth ISP Internet Tools"
X	blss	blss.exe	"Added by the BLARUL TROJAN!"
N	BLSTAPP	blstapp.exe	Puts access to Creative's BlasterControl in the System Tray
N	Blubster	Blubster.exe	"Related to Blubster Music sharing service"
U	Blue Frog	bluefrog.exe	"Blue Frog by Blue Security Inc. - actively fights spam by posting complaints on the sites advertised by the spam you receive"
?	BlueLight_uoltray	exec.exe	"Related to BlueLight Internet. What does it do and is it required?"
U	BlueSoleil	BLUESO~1.EXE	"BlueSoleil Bluetooth wireless manager from IVT Corporation"
U	BlueSpace NE	BlueSpaceNE.exe	"""BlueSpace NE is a utility program used to run the Bluetooth function on VAIO computers that support the Bluetooth function or on VAIO computers connected to the Bluetooth USB adapter"". Shortcut available via Start -> Programs"
U	BlueToothAuthentication Agent	"RunDLL32.exe irprops.cpl	BluetoothAuthenticationAgent"
U	Blueyonder Instant Support Tool	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
N	BMail Installation	FTP_back.exe	"Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not"
X	Bman	BMan1.exe	Abcsearch.com/DealHelper adware variant
U	BMMGAG	"Rundll32 PWRMONIT.DLL	StartPwrMonitor"
U	BMMLREF	BMMLREF.EXE	Battery Manager for IBM ThinkPad laptops
?	BMMMONWND	"rundll32.exe [path] BatInfEx.dll	BMMAutonomicMonitor"
U	BMO MasterCard Wallet	EWALLET.EXE	"The wallet conveniently stores billing
N	BMupdate	BMupdate.exe	"Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example
X	BMZ	bmz.exe	"NCase adware"
X	Bndt32	Bndt32.exe	"Added by the LACON WORM!"
X	Bnexe	[random filename]	"Added by the KITRO.D (or ARGEN.A) WORM!"
U	BO1HelperStartUp	BO1HEL~1.EXE	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."
U	BO1HelperStartUp	Bo1helper.exe	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30..."

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.