Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
Y BTUSRBDGF BtUsrBdg.exe"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
X BTV btv.exe"BroadcastPC adware"
X BtvC btvclean.exe"BroadcastPC adware"
Y Bubble Bubble.exe"Added by Windows SteadyState which ""helps make it easy for you to keep your computers running the way you want them to no matter who uses them."" Bubble allows notification messages to appear on a computer managed by Windows SteadyState"
N Buddyizer Buddyizer.exePart of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
N BudgetSip BudgetSip.exe"BudgetSip - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
U BUFFALO Power Save Utility for HD HDManage.exe"Power Save utility for Buffalo backup hard discs"
N Bug Eliminator Bug_Elim.exe"Bug Eliminator - ""performs a complete health check on your computer safely securely and silently!"""
U bugwatcher service bugwatcher.exe"Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide if available any known solutions to the crashes. It doesn't take up any room in memory just activates in the event of certain program failures"
N BuildBU bldbubg.exePart of Dell Alerts which provides customers with an update on latest updates for his/her system
X BuildLab services.exe"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process which should not appear in Msconfig/Startup!"
X BuildLab winlogon.exe"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
X BuildLabs csrss.exe"Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X BuildLabs lsass.exe"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
U Bulldog Service upsd.exeBelkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
N BulletProof FTP Server bpftpserver.exe"BulletProof FTP Server"
Y BullGuard mgui.exe"Part of Bullguard antivirus"
Y BullGuard BullGuard.exe"Part of BullGuard antivirus"
U BullGuard Update avxlive.exe"Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions"
Y BullGuard XComm XCOMMSVR.EXE"Part of Bullguard antivirus"
Y BullGuardInit AVXINIT.EXE"Part of Bullguard antivirus"
Y BullguardoptIn bulldownload.exe"Part of Bullguard antivirus"
X BullsEye bargains.exe"BargainBuddy adware"
X BullsEye Network bargains.exe"BargainBuddy adware"
? BullsEye Tracker BeTrack.exeBullseye - intelligent research assistant
X Bunx beagle.exe"Added by the LEBREAT-E WORM!"
X buritos buritos.exeIdentified as a variant of the Downloader.FraudLoad.C malware
N BurnQuick Queue BQTray.exe"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility hence the U recommendation. Create your own desktop shortcut to start manually"
U Button Server bttnserv.exeFound on a Compaq PC for the extra buttons on the keyboard for the speaker volume media player sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them then it isn't required
N ButtonKey ButtonKey.exe"CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut"
N Buzme Bmui.exe"Buzme by RingCentral Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem"
U BuzMe RCUI.exe"Display Client for the BuzMe Internet Call Waiting Service"
U Buzof.exe buzof.exe"Buzof from Basta Computing "enables you to automatically answer close or minimize virtually any recurring window including messages prompts and dialog boxes""
X BVWORSFM bvworsfm.exe"Added by the DLUCA-AD TROJAN!"
N bwprnmon.exe bwprnmon.exe"FaxServe network fax software"
X bxproxy bxproxy.exe"Added by the BXPROXY TROJAN!"
X bxproxy [random].dll"Spyware Soft Stop misleading security software - not recommended see here and here"
X bxsx5 RunDLL32.EXE bsx5.dll DllRun"BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""bsx5.dll"" file is located in the Winnt or Windows folder"
X bxxs5 RunDLL32.EXE bxxs5.dll dllrun"BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""bxxs5.dll"" file is located in the Winnt or Windows folder"
X Bymer.Scanner Wininit.exe"Added by the BYMER WORM!"
X Bymer.Scanner Msinit.exe"Added by the BYMER WORM!"
U BySoft FreeRAM FreeRAM.exe"""Bysoft FreeRAM is a program that frees up ram manually or automatically. It shows current memory status memory load and CPU usage graphically"". MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X c c:archiv~1win.com"Added by the CUYDOC TROJAN!"
U C-Media Echo Control EchoCtrl.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer
N C-Media Mixer Mixer.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U C2K CYB2K.EXECYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
U c32cs2 c32cs2.exe"Cyber Sentinel - internet filtering software"
X C7 [path to worm]"Added by the MEDIAKILL.A WORM!"
U C:Program FilesNetMeterNetMeter.exe NetMeter.exe"""Net Meter is a small customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP but it should work just as well on all other Win32 operating systems"""
X C:WINDOWSIEXPLOR.EXE IEXPLOR.EXE"""Pop Marketing"" adware"
X C:WINDOWSsystem32SetupCmd.exe SetupCmd.exe"Detected by Kaspersky as the AGENT.AAW TROJAN!"
X C:WINDOWSWinTask.exe WinTask.exe"""Pop Marketing"" adware"
U CA-AMAgent amagent.exe"Unicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery hardware inventory network inventory software inventory configuration management software usage monitoring license management and extensive cross-platform reporting"
Y CaAvTray CAVTray.exe"eTrust? EZ Antivirus system tray application from Computer Associates"
X Cabchk Cabchk.exe"Added by the GEMA TROJAN!"
X Cabchk32 Cabchk32.exe"Added by the GEMA TROJAN!"
X CABCInstall CABCInstall.exe"Ignite Technologies (was CABC) content delivery software"
X Cable Modem Adapter WindowsSec.exe"Added by the WOOTBOT.A WORM!"
U CacheBoost trayicon.exe"CacheBoost ""optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers resulting in a performance boost"""
X CacheLoader [path to trojan]"Added by the DLOADER-NZ TROJAN!"
N Cacheman Cacheman.exe"Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up"
Y CacheMgr CacheMgr.exe"Sophos Antivirus Remote Update"
U CacheSentry Pro CacheSentry Pro.exe"""CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache"""
N CACStarter cacstart.exeCash A Check - check writing software
U Caddais BackupOnDemand BODMon.exe"Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing modified files are automatically backed up to an archive location""
U Cadenza CdzSvc.exe"Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices"
U CADS cads.exe"Cyber Sentinel - internet filtering software"
U CafeStation CafeStation.exe"""CafeSuite is the solution for your internet cafe. Our software provides you with ameans to control the workstations manage customer database sell products and generate detailed reports and statistics"""
Y cafwc cafw.exe"CA Personal Firewall - part of the CA Internet Security Suite"
N CAgent CAgent.exe"Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents"
X cAgOu [filename].hta"Added by the KAKWORM WORM!"
N CahootWebcard CahootWebcard.exe"""The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details"". Run manually when needed"
X caidiysetup diynetsetupuni.exe"DIYNet adware"
Y CAISafe isafe.exe"Part of Computer Associates eTrust EZ Antivirus"
U CaISSDT caissdt.exe"Computer Associates Dashboard Tray applet"
N Cal Reminder Shortcut calrem.exeProduces a pop-up reminder of events scheduled using the MS Office Calendar
X Calc Microsoft Windows wincalc.exeAdded by an unidentied WORM or TROJAN!
X CALC32 CALC32.EXE"Added by the SPYBOT-EC WORM!"
N Calendar 200X Reminder calendar.exe"Calendar 200X - shows holidays reminders of various anniversariestasks etc"
U Calendarscope cs.exe"Calendarscope calendar software"
X calk calk.exe"Added by the STARTPA-FH TROJAN!"
X Call Function System32 sddriver.exe"Added by a variant of the SDBOT TROJAN!"
X Call32 Call32.exe"Added by the SPAMMIT-H TROJAN!"
Y CallBumping cbpopw.exe"Related to the Gazel 128 PCI ISDN adapter. Required if you use it"
U CallCenter Main Application V3calmcp.exe"""V3 Inc. CallCenter is a free 32-bit integrated fax voicemail and data communications application with a simple to use interface providing fax send and receive functionality basic (single mailbox) answering machine capability and sophistcated data communications."" Main application"
U CallCenter Printer Interface V3faxecp.exe"""V3 Inc. CallCenter is a free 32-bit integrated fax voicemail and data communications application with a simple to use interface providing fax send and receive functionality basic (single mailbox) answering machine capability and sophistcated data communications."" Fax printer"
N CallControl ftctrl32.exeFaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running any TAPI compliant application can request to use the modem from Windows
N CamCheck CamCheck.exe"NuCam camera software related"
U Cameno Cameno.exe"Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above"
U Camera Assistant Software traybar.exeCamera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam
U Camera Detector CAMDET~*.EXE"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
U Camera Detector Camdetect.exe"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
U Camera Detector DEVDET~*.EXE"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N Camio Viewer x IXApplet.exeImage viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
? CamMonitor hpqcmon.exe"From HP and related to digital imaging"
N Canada Canada.exe"Known to be a dialler - but is it maliscous or clean?"
U Canary canary-std.exe"Canary keystroke logger/monitoring program - remove unless you installed it yourself!"
X candy command32.exe"Added by the RBOT-LV WORM!"
X candynet Taskmsg.exe"Added by the RBOT-NA WORM!"
U Canon MultiPASS Status Monitor monitr32.exeCannon Multi-Pass status monitor - your choice
? Canon PC1200 iC D600 iR1200G Status Window CAPM1LAK.EXE"Cannon printer related - is it required in startup?"
N Canon Printer Monitor BJCxxx Cjstlst.exeTrayicon for Canon printer. xxx denotes model. Available via Start -> Programs
U CanonMyPrinter BJMyPrt.exePrinter software for Canon Bubblejet printers
U CanonSolutionMenu CNSLMAIN.exe"Canon's Solution Menu dialog box leads you quickly toward documentation utilities and help files"
? CAP3ON CAP3ONN.EXE"Canon driver purpose unknown. Is it required in startup?"
Y capfasem capfasem.exe"CA Personal Firewall - part of the CA Internet Security Suite"
N Capfax capfax.exe"PhoneTools fax software"
U capfupgrade capfupgrade.exe"CA Personal Firewall - part of the CA Internet Security Suite"
U CAPing CAPing.exeCitibank Citianywhere software
Y Capon Capon.exeCanon printer driver
Y Capon Caponn.exeCanon printer driver
X CaptionMgr32 crssr.exe"Added by the ZAR.A WORM!"
X capture capture.exe"Added by the THEEF-B TROJAN!"
N Capture Express 2000 capexp.exe"Capture Express - screen capture utility"
N CaptureBat Capture.exe"!Quick Screen Capture from EtruSoft Inc. - ""allows you to take screenshots from any part of your screen in more than 10 ways and save images in BMP/JPG/GIF formats"""
N Carbonite Backup CarboniteUI.exe"""Carbonite?s online backup service starts automatically and works quietly and continuously in the background protecting your data"""
N Card Monitor REGCNT09.exeFor the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
? CardScan AutoSync CSyncCfg.exe"Related to the CardScan business card reader range of products. May be related to synchronization with E-mail software and mobile devices (see here?"
X Care20 Care20.exe"TopMoxie adware"
U Care2GTU Care2GTU.exeCare2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is thanks to over 200 company profiles from Coop America. Saves 1 square foot of rainforest every day you use it. If it works and you like it keep it
U carpserv carpserv.exe"Associated with Zoltrix and Conexant modems - enables the internal modem speaker allowing you to listen to the dial-up sounds for example"
X CARPserver CARPserver.exe"Added by the BANKER-AN TROJAN!"
U CARPservice carpserv.exe"Associated with Zoltrix and Conexant modems - enables the internal modem speaker allowing you to listen to the dial-up sounds for example"
X cartao [path to file]"Added by the DLOADER-QD TROJAN!"
X cartao conflicted.exe"Added by the DADOBRA-DV TROJAN!"
X cartao killing.exe"Added by the DLOADER-QN TROJAN!"
X CAS Client casclient.exe"CasinoClient adware"
X Cas2Stub cas2stub.exe"CasinoClient adware"
U CasAgnt CasAgnt.exeProgram by Extended Systems which allows you to sync your Casio PDA with your PC
X Casdvqwa bmqnzkg.exe"Added by the RANDEX.BE WORM!"
X caseyvideo caseyvideo.exeMalware causing adult content popups
X caseyvideo[*] [* = digit] caseyvideo[*].exe [* = digit]Malware causing adult content popups
X CashBack cashback.exe"Part of eXact Advertising Software consisting of ""CashBack by BargainBuddy"" BullsEye Network and NaviSearch"
X CashFiesta Cashfiesta.exe"CASHFIESTA.A pay-per-surf adware"
N Cashsurfers Cashbar Navigator Cashbar.Exe"Cashsurfers CashBar Navigator - ""The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"""
X CashToolbar MSCStat.exe"Added by the DOWNLOADER-MY TROJAN!"
X CashToolbar svchost.exe"BrowserAid/CashToolbar adware! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!"
X Casino Royale jamesbond.exe"Added by the RBOT-FZO WORM!"
X Cassandra [10 to 14 random char]THD.EXE"Added by the KREPPER-AI TROJAN!"
X Cassandra cassandra.exe"SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as a variant of the KREPPER TROJAN!"
X CasStub casstub.exe"Added by the CASS-A TROJAN!"
X Catalyst Control Centre atixvdm.exe"Added by the RBOT.DMW TROJAN!"
X catsrv catsrv.exe"Added by the PAPLOK TROJAN!"
Y CAVRID CAVRID.exe"eTrust? EZ Antivirus Real Time Infection Report from Computer Associates"
Y CAVS CAVS.exe"Cheyenne (now eTrust) antivirus"
X CAZNOVAS CAZNOVAS.exe"Added by the CAZNO TROJAN!"
X CBACK.EXE CBACK.EXE"Added by the PENTA-A TROJAN!"
U CBWAttn CBWAttn.exe"Required for Bitware to answer incoming faxes can cause sleep mode problems"
U CBWHost CBWHost.exe"Required for Bitware to answer incoming faxes can cause sleep mode problems"
? CBWUser CBWDial.exe"Associated with Bitware that integrates fax voice pager and data communications on your desktop"
X CC2KUI comet.exe"Comet Cursor adware"
X Ccao regedit.exe"Probably a variant of MediaTickets adware. Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in a ""mduu"" subfolder which may change"
Y ccApp ccApp.exe"Part of Norton AntiVirus. Auto-protect and E-mail check will not function without this"
X ccApp [random filename]"Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus"
X ccApp WMADZ.EXE"Added by the RBOT-LJ WORM!"
X ccApp .EXE"Added by the RBOT-LJ WORM!"
X ccApp gcasServ.exe"Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name"
X ccApp example.exe"TwoSeven spyware"
X ccAppr svcrhost.exe"Added by the TACTSLAY.A TROJAN!"
X ccAppr expIorer.exe"Added by the TACTSLAY.A TROJAN!"
X ccAppr outIook.exe"Added by the TACTSLAY.A TROJAN!"
X ccAppr svcshost.exe"Added by the TACTSLAY.A TROJAN!"
X ccApps services.exe"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process which should not appear in Msconfig/Startup!"
X ccApps winlogon.exe"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
X ccApps N/A"Added by the KANGAROO-A TROJAN!"
X ccApps ccApps.exe"Added by the KANGAROO-B WORM!"
X ccctp HistoryJMTi.exe"Added by the GANBATE.A WORM!"
U CCD Manager DDS.EXE"Project Labs Century CD manager for their CD/DVD storage device"
N Ccdecode rundll32.exe streamci StreamingDeviceSetupPart of the closed caption decdoder/MS VBI codec. Should only run once
Y CCDoctorLogonTesting ccdoctor.exe"Checks your system to make sure it's configured properly for running IBM Rational ClearCase a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service but technically it isn't required to use the ClearCase product"
Y ccenter CCenter.exe"RAV AntiVirus"
Y CcEvtMgr ccEvtMgr.exe"Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via ""ccApp"" and was not required as a seperate entry but a recent update changed this"
X ccEvtMrg.exe ccEvtMrg.exe"Added by the RBOT.GZ WORM!"
X ccExecute bootcfg1.exe"Added by the NEMSI-B VIRUS!"
X ccHelp ccHelp.hta"Searchq adware"
U CCleaner CCleaner.exe"CCleaner from Piriform Ltd. - ""is a freeware system optimization privacy and cleaning tool."" Features include removing unused files cleaning internet history cleaning managing startup programs and a fully featured registry cleaner"
X ccpApps csrss.exe"Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X ccpApps lsass.exe"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
U ccProxy CCPROXY.EXEPart of Norton Internet Security proxy server that is used to support the parental controls. If you turn parental controls off at user level the process is not loaded. Reported to cause excessive CPU usage
X ccPrxy.exe ccPrxy.exe"Added by the SHIPUP-H WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list