Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	Boarddata	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM!"
Y	BOC412	BOC412.exe	"Version 4.12 of NSClean's BOClean anti-trojan software"
Y	BOCleanautostart	Boclean.exe	"NSClean's BOClean anti-trojan software"
U	BOINC Manager	boincmgr.exe	"BOINC manager - ""controls the use of your computer's disk
U	Boingo Wireless Utility	Icon###XXX#X#.exe	"Starts the Boingo Wireless utility
X	boler.exe	syser.exe	"Added by the RBOT-AYS WORM!"
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	"Bonzi Buddy adware - see here for removal instructions"
X	boo	boo.exe	"Adware downloader - recognized by Kaspersky antivirus as the FAVADD.O TROJAN!"
X	BookedSpace	"RunDLL32.EXE [path] bs2.dll	DllRun"
N	BookmarkCentral	BMLauncher.exe	"Bookmark Express - "offers a more flexible way to manage Web site bookmarks
N	BookMarkSink	syncit.exe	Bookmark synchronization utility
N	BookMarkSync	syncit.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks
N	BookMarkSync2It	sync2it.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks
U	Boost XP Service	bxservice.exe	"Boost XP from Systweak - WinXP tweaking utility"
X	boot	boot.exe	"Added by the PUPPET-A TROJAN!"
X	Boot Manager	Njgal.exe	"Added by the KILO TROJAN!"
X	Boot Manager	bootmng.exe	"Added by a variant of the SPYBOT WORM!"
X	BootCfg	Install.log.vbs	"Added by the YPSAN.D WORM!"
X	BootCTRL	bootctrl.exe	Added by an unidentified WORM or TROJAN!
X	BootLoader	BootLoader.exe.vbs	"Added by the WATERWORKS WORM!"
X	bootpd.exe	bootpd.exe	"Added by the AGENT-DT TROJAN!"
X	BootsCfg	Date.POP.vbs	"Added by the KUULLIO WORM!"
X	BootsCfg	wscript.exe [path] All Users.vbs	"Added by the SPILTRON WORM!"
X	BootsCfg	wscript.exe [path] All Users.vbe	"Added by the SPILTRON WORM!"
X	BootsCfg	wscript.exe [path] Install.log.vbs	"Added by the YPSAN.E WORM!"
U	BootStatus	BOOTST~1.EXE	"Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it
U	BootWarn	BootWarn.exe	"From here: ""Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus
X	boot_reg	[path to file]	"Added by the BANCBAN-CA TROJAN!"
N	Bose Wave/PC Monitor	wavepcmonitor.exe	"System Tray access for this system (more info on the system here). Available via Start -> Programs"
X	BossIdea	winlogin.exe	"Added by the LINEAGE-I TROJAN!"
?	Boston	Boston.exe	"Part of the Boston Acoustics USB speaker systems. What does it do and is it required?"
X	Bot Loader	svchostt.exe	"Added by the GAOBOT.ALV WORM!"
X	Bouncer RunStartup	bouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	Bouncer RunStartup	LiveUpdate.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	boy lovers of bsd	ilikeboys.exe	"Added by the MYTOB.LY WORM!"
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	BPCv2 re	bpc2 re inst.exe	"BroadcastPC adware variant"
U	BPK	bpk.exe	"Blazing Tools Perfect Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
N	BPServer	G6FTPSrv.exe	"BulletProof FTP Server"
U	BQTray.exe	BQTray.exe	"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility
X	Brasil	Brasil.exe	"Added by the OPASERV.E WORM!"
X	Brasil	BRASIL.PIF	"Added by the OPASERV.E WORM!"
X	BrasilOld	[worm filename]	"Added by the OPASERV.P WORM!"
X	Brct	trdb.exe	"Recognized by Kaspersky antivirus as the PurityScan.y TROJAN!"
U	Break_Reminder	BREAK REMINDER.exe	"Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here"
X	Breg	bcre.exe	"BroadcastPC adware variant"
X	Breg	bptre.exe	"BroadcastPC adware variant"
X	Breg	breg.exe	"BroadcastPC adware variant"
X	Bridge	rundll32.exe ...Bridge.dll	Flingstone.com browser hijacker
Y	Brindys BriTray	BRITRAY.EXE	"Main process for the following applications: GEDEX
U	BrmfRmPA	BrmfRmPA.exe	Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate
N	Broadband Wizard	bbwiz.exe	"Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs"
U	Broadcom Wireless Manager UI	bcmntray.exe	"Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems"
N	Broadcom Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
X	Bron-Spizaetus	CVT.exe	"Added by the RONTOKBRO WORM!"
X	Bron-Spizaetus	norBtok.exe	"Added by the RONTOKBRO.B WORM!"
X	Bron-Spizaetus	[path to file]	"Added by the BRONTOK-F WORM!"
X	Bron-Spizaetus	bronstab.exe	"Added by the RONTOKBRO.C WORM!"
X	Bron-Spizaetus	eksplorasi.exe	"Added by the RONTOKBRO.J WORM!"
X	Bron-Spizaetus	ElnorB.exe	"Added by the RONTOKBRO.D WORM!"
X	Bron-Spizaetus	sempalong.exe	"Added by the BRONTOK-E WORM!"
X	Bron-Spizaetus	RakyatKelaparan.exe	"Added by the BRONTOK-J or BRONTOK-L WORMS!"
X	Bron-Spizaetus-5118REPM	komodo-6321422.exe	"Added by the BRONTOK-R WORM!"
X	Bron-Spizaetus-cfgmktoq	bbm-qotkmgfc.exe	"Added by the BRONTOK-M WORM!"
X	Bron-Spizaetus-cfgmmnru	bbm-urnmmgfc.exe	"Added by the BRONTOK-N WORM!"
N	BrowseProxy	FindService.exe	"Actual Names (AdvSearch) Internet Keywords parasite"
X	browser	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	s menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser aid	browseraid.exe	"BrowserAid/BrowserPal foistware"
X	Browser Help Svc	BHSV.EXE	"Added by the RBOT-AVQ WORM!"
Y	Browser Hijack Blaster	bhblaster.exe	"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	"BrowserAid/BrowserPal foistware"
U	Browser Sentinel	BrowserSentinel.exe	"Browser Sentinel - notifies you if a program wants to penetrate into Internet explorer
X	BrowserUpdateSched	qwinnsap.exe	"ZenoSearch adware"
X	BrowserUpdateSched	twinorag.exe	"ZenoSearch adware"
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
N	BS Player	bsplayer.exe	"BSplayer - A video player used to play avi
N	BsCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
X	Bsoft lppt01	Bsoft.exe	"RapidBlaster variant (in a ""BelmontSoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	bsplayer	bsplayer.exe	"BSplayer - a video player used to play avi
X	BSVCHOST	SVCH0ST.EXE	"Added by the VOXOM TROJAN!"
X	Bsx3	"RunDLL32.EXE [path] bs3.dll	DllRun"
X	BT	[path to trojan]	"Added by the LITEBOT-B TROJAN!"
U	BT Broadband Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
X	BT00003*	abcdefg23.exe	"Added by the VB-VT TROJAN where * = 5
X	BT00003*	hiklmnop27.exe	"Added by the VB-VT TROJAN where * = 2
U	btbb_wcm_McciTrayApp	McciTrayApp.exe	"System tray access to Motive's Broadband 2.0 configuration and repair utility"
?	btinst	btinst.exe	"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
U	BTModemProtection	BTModemProtection.exe	"BT Privacy Online modem protection software
U	BTopenworld	DialBTYahoo.exe	BT Yahoo! internet connection manager
?	BTSETBOOTKEY	BTSetBootKey.exe	"Related to a USB Bluetooth adaptor. What does it do and is it required?"
U	BtStart	btstart.exe	"Broadcorp (formerly WIDCOMM) Bluetooth Connectivity Software"
U	bttray	bttray.exe	"System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places
Y	BTUSRBDG	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
Y	BTUSRBDGF	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
X	BTV	btv.exe	"BroadcastPC adware variant"
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U	BUFFALO Power Save Utility for HD	HDManage.exe	"Power Save utility for Buffalo backup hard discs"
U	bugwatcher service	bugwatcher.exe	"BuildBU	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BuildLab	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	BuildLab	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
X	BuildLabs	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
X	BuildLabs	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
N	BulletProof FTP Server	bpftpserver.exe	"BulletProof FTP Server"
Y	BullGuard	mgui.exe	"Part of Bullguard antivirus"
Y	BullGuard	BullGuard.exe	"Part of BullGuard antivirus"
U	BullGuard Update	avxlive.exe	"Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions"
Y	BullGuard XComm	XCOMMSVR.EXE	"Part of Bullguard antivirus"
Y	BullGuardInit	AVXINIT.EXE	"Part of Bullguard antivirus"
Y	BullguardoptIn	bulldownload.exe	"Part of Bullguard antivirus"
X	BullsEye	bargains.exe	"BargainBuddy adware"
X	BullsEye Network	bargains.exe	"BargainBuddy adware"
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
X	Bunx	beagle.exe	"Added by the LEBREAT-E WORM!"
N	BurnQuick Queue	BQTray.exe	"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility
U	Button Server	bttnserv.exe	"Found on a Compaq PC
N	ButtonKey	ButtonKey.exe	"CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut"
N	Buzme	Bmui.exe	"Buzme by RingCentral
U	BuzMe	RCUI.exe	"Display Client for the BuzMe Internet Call Waiting Service"
U	Buzof.exe	buzof.exe	"Buzof from Basta Computing "enables you to automatically answer
X	bxproxy	bxproxy.exe	"Added by the BXPROXY TROJAN!"
X	bxsx5	"RunDLL32.EXE [path] bsx5.dll	DllRun"
X	bxxs5	"RunDLL32.EXE [path] bxxs5.dll	dllrun"
X	Bymer.Scanner	Wininit.exe	"Added by the BYMER WORM!"
X	Bymer.Scanner	Msinit.exe	"Added by the BYMER WORM!"
X	c	c:archiv~1win.com	"Added by the CUYDOC TROJAN!"
U	C-Media Echo Control	EchoCtrl.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer
N	C-Media Mixer	Mixer.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	C2K	CYB2K.EXE	CYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.