Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Domain Name Resolve Service dnsresolver.exe"Added by the KIMAN.A WORM!"
X DomPlayer Service wakeservice.exe"DomPlayer adware"
U Don't Panic dontpanicdemodp.exe"30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite.""
U Don't Panic Pop-Up Stopper dpps2.exe"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
U Don't Panic! DP.EXE"Don't Panic! privacy software from Panicware. ""Clean up Internet tracks and quickly hide personal documents with this privacy suite"""
X Dontworry mysaym.exe"Added by the SDBOT-RC WORM!"
U Dopus dopus.exe"Directory Opus - a file manager from GPSoft"
N DoroServer DoroServer.exe"Doro PDF Writer from The SZ Development. All what you need for creating pdf files"
X dos dos64.exeAdware downloader trojan
X Dos Prompt Loader cygwin.exe"Added by the SDBOT-VV WORM!"
? Dosbat ??"??"
X Dot1XCfg Dot1XCfg.exe"Added by the AGOBOT.EA TROJAN!"
U DoubleDesktop dd.exe"""DoubleDesktop is a smart and elegant system tray utility that effectively doubles the width of your Windows desktop"""
N DoUWantIt duwi.exeDoUWantIt - online shopping assistant. Start it manually
X Dowmingzu Dowmingzu.dll.vbs"Added by the SOLOW-E WORM!"
X down hlp32.exe"Added by the DLOADER.BG TROJAN!"
X down [trojan filename]"Added by the SMALL-QJ TROJAN!"
U Down2Home Down2Home.exe"Down2Home - ""monitors your ADSL/Cablemodem/Dialup traffic and provides you with usefull statistics about the amount of data your PC has transferred"""
N Download Accelerator Manager Free Edition dam.exe"Download Accelerator Manager Free Edition from Tensons Corp"
N Download Accelerator Plus 5.0 DAP.exe"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
X Download Plus DownloadPlus.exe"DownloadPlus adware"
N Download Wonder DownloadWonder.exe"Download Wonder from Forty Software. Download manager for resuming downloads
N DownloadAccelerator DAP.EXE"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
X DownloadLegalMusic "rundll32.exe MSA64CHK.dllDllMostrar"
X DownloadMP3 "rundll32.exe MSA64CHK.dllDllMostrar"
X DownloadsAndMP3 "rundll32.exe MSA64CHK.dllDllMostrar"
X DownloadWare dw.exe"DownloadWare adware"
X DownloadWare Engine Dwe.exe"DownloadWare adware"
X downs downs.exe"Added by the BCKDR-MNR TROJAN!"
X Downxz Downxz.bat"Added by the MYDOOM.W WORM"
Y DpAgent dpagent.exe"Part of the DigitalPersona range of fingerprint authentication applications - which are use to replace passwords with fingerprint recognition. Included on some Dell laptop models (such as the Vostro 1720) for example"
N DPAgnt DPAgnt.exe"digitalPersona fingerprint scanner"
Y DPAS DPASNT.exe"DefenderPro AntiSpy spyware remover - now incorporated Defender Pro 15-in-1 and 5-in-1"
Y DPASUpdate DPASAutoUpdate.exe"Automatic updates for DefenderPro AntiSpy spyware remover - now incorporated Defender Pro 15-in-1 and 5-in-1"
Y Dpcnav dpcnav.exe"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
N DPConfig DPConfig.exe"Compuware DevPartner Studio Configuration Utility
X dpcproxy dpcproxy.exe"Added by the GOLDENP-A TROJAN!"
Y DPCProxyLoadOnStartup dpcstart.exe"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y Dpcstart dpcstart.exe"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
X dpi dpi.exe"Delfin Media Viewer or ""Promulgate"" adware"
X dpnsvr32 dpnsvr32.exe"Added by the AOLPASS-B TROJAN!"
U dpps2 dpps2.exe"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
X dps dps.exe"SmartestSearch parasite - poses as a foistware
N dptracker dptracker.exe"CamTrack webcam software that enhances the way people video chat"
U DpUtil TEDTray.exe"Main executable for TOSHIBA DualPoint Utility Main Module. It is a system tray icon program that provides configuration options for dual pointing device"
X dpzProtect n.vbe"Added by the RUNAUTO.H WORM!"
X DR service [path to worm]"Added by the RBOT-CZT WORM!"
X Dr. Guard drguard.exe"Dr. Guard rogue security software - not recommended
N Drag'n'Drop_Autolaunch Autolaunch.exe"Iomega HotBurn - CD-RW burning software"
N Drag-to-Disc DrgToDsc.exe"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
? DragDrop DragDrop.exe"??"
N DragnDrop_Autolaunch Autolaunch.exe"Iomega HotBurn - CD-RW burning software"
X DRam Monitor 23 tskman3.exe"Added by a variant of the RBOT WORM!"
X DRam prmaessor [random filename]"Added by the RBOT.CSG WORM!"
X DRam prosesor [random filename]"Added by the SPYBOT.EE WORM!"
X DRam prosessor [random filename]"Added by the RBOT.CSG WORM!"
X DRam prosessor plscd.exe"Added by the RBOT.CYA WORM!"
X DRam prosessor HWAPI.exe"Added by a variant of the RBOT WORM! Note - this is not the McAfee HackerWatch process which has the same filename"
X DRam prosessor WindowsUpdate.exe"Added by the RBOT-BBZ WORM!"
X DRam prosessor msupdate.exe"Added by the DELF-FAW TROJAN!"
X DRam prosessor winupl.exe"Added by the RBOT-BCQ WORM!"
X DRam rar proc winupdaterar.exe"Added by a variant of the IRCBOT TROJAN!"
X DRam rare proc updaterarwin.exe"Added by the RBOT-GQW WORM!"
X DRan posessor DAP.exe"Added by a variant of the SDBOT WORM!"
X DrAntispy DrAntispy.exe"DrAntiSpy rogue security software - not recommended"
X DrCache MSTDC.EXE"Added by the BDOOR-JM BACKDOOR!"
X dreams server.exe"Added by a variant of the SDBOT WORM!"
X DrefIW SysDrefIWv2.exe"Added by the DREF-C WORM!"
X DrefIW SysDref.exe"Added by the DREF-D WORM!"
? dregfix ph_finder.exe"??"
N DrgToDsc DrgToDsc.exe"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
? dried.exe dried.exe"??"
X drin [path to trojan]"Added by the SMALL.DPB TROJAN!"
X DriveCleaner 2006 Free UDC2006.exe"DriveCleaner rogue security software - not recommended
X DriveCleaner Free UDC.exe"DriveCleaner rogue security software - not recommended
X DriveDefender GDC.exe"DriveDefender rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
U DriveIcons DriveIcon.exe"Drive Icons from Realtek - shows a specific icon for each card type for their card reader controllers"
U DriveLED OODLed.exe"O&O DriveLED - hard disk monitoring and crash prevention"
X Driver gbot.exe"Added by the JUNTADOR.K TROJAN!"
X Driver32 Scam32.exe"Added by the SIRCAM WORM!"
X DriverCheck svchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
X DriverConf dvrconf.exe"Added by the AGOBOT-IY WORM!"
X DriverDB svcmdx32.exe"Added by the BERPI TROJAN!"
X DriverLoad svchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
U DriverMagicLogon dmschedule.exe"Part of DriverMagic - ""the easiest way to locate device drivers"""
N DriverMax devices.exe"DriverMax from Innovative Solutions - ""a new tool that allows you to download the latest driver updates for your computer. No more searching for rare drivers on discs or on the web or inserting one installation CD after the other"""
X DriverModule csrnvrt.exe"Added by the IRCBOT.I TROJAN!"
X DriverPath system32.exe"Added by the PRORAT-S TROJAN!"
X Drivers for Internet Explorer accesweb.exe"Added by the STARTPAGE.FW TROJAN!"
X Drives swap AV1i.exe"Anti-Virus Number-1 rogue security software - not recommended
N DriveSelect driveselect.exe"DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs"
X DriveSystem maxpaynowti1.exe"Added by the TIBS.AZT TROJAN!"
U drkly16j "rundll32.exe drkly16j.dll ServiceCheck"
X DRM Upgrade drmupgd.exe"Added by the IRCBOT.AWU BACKDOOR!"
U dRMON SmartAgent SmartAgt.exe"Part of the network monitoring program group for 3Com NIC cards. See here for more info"
X drmsrv32 stmhosts.exe"Added by the AGENT.AGWU TROJAN!"
X drmu W95Mm.exeHomepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise
X Drmupgds Drmupgds.exe"Maxfiles adware"
X drocher d.exeAdult content dialler
X DropSpam Lifestyle dslifestyle.exe"Dropspam adware"
X DrProtection DrProtection.exe"DrProtection rogue security software - not recommended"
X drvddll.exe drvddll.exe"Added by the BEAGLE.AP WORM!"
X Drvddll_exe drvddll.exe"Added by the BEAGLE.X WORM!"
U DrvIcon DrvIcon.exe"""Vista Drive Icon changes the drive icons shown in Windows ""My Computer""
? DrvListnr DrvListnr.exe"Analog Devices SoundMAX soundcard related. What does it do and is it required?"
U drvlsnr drvlsnr.exeCompaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
U DrvMon.exe DrvMon.exe"Alcor drive monitor software"
X drvnetw drvnetw.exe"Added by the BROGGER-B TROJAN!"
X drvr32h drvr32h.exe"Added by an unidentified VIRUS
X drvrmanager drvrquery32.exe"Added by the BOOHOO WORM!"
X DrvStart HPMedia.exe"Added by the BANCBAN-QE TROJAN!"
X drvsys.exe drvsys.exe"Added by the BEAGLE.W WORM!"
X drvsyskit hidr.exe"Added by the BAGLE.HR WORM!"
X drvsyskit hldrrr.exe"Added by the BAGLE.QU TROJAN!"
X drvupd rundll32 ..drvupd.inf"Hijacker - drvupd.inf file installs a ""searchforge.com"" hijack"
X drv_st_key hidn.exe"Added by the BEAGLE.FF WORM!"
X DrWatson drwatson_.exe"Added by the LOHAV-S TROJAN!"
X DrWatson drwatson_32.exe"Added by the LOHAV-S TROJAN!"
X DrWeb Antivirus DRWEBAV.EXEAdded by an unidentified WORM or TROJAN!
Y Drwebscheduler Drwebscd.exe"DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications
X DR_S DR_S.exe"IstBar adware"
X ds ds.exe"Added by the SPYMON TROJAN!"
U DS Clock dsclock.exe"Digital desktop clock including synchronization with atomic servers - see here"
X dS35DLL ffqca.exe"Added by the SDBOT-KV WORM!"
X dsa dsa.exeHomepage hijacker - redirecting to downseek.com
X DSAcass [path to file]"Added by the RANKY.M TROJAN!"
X dsadlsa14 dsakfsak14.exe"Added by the ONLINEG-P TROJAN!"
X DSB DSB.exe"EnergyPlugin adware"
U dscactivate dsca.exeDell Support Agent offers additional support and update features for your Dell computer or laptop
X dsd zz.exe"Added by the RBOT-FOX WORM!"
N DSentry DSentry.exe"Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching
X dsfghjgj keepSafe.exe"Added by the KILLAV.KAX TROJAN!"
X dsgb lcsass.exe"Added by the AGENT.TGZ BACKDOOR!"
X Dsi dp-******.exeAdded by an unidentified adware where ****** are random characters
X Dsi dp-him.exe"Added by the MULTIDR-AH TROJAN!"
X Dskcompat Dskcompat.exe"Added by the GEMA TROJAN!"
U DSKEY DsKey.exe"Part of PC PhoneHome - ""secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection"". Security software from Brigadoon Security Group for tracking down lost/stolen computers"
X DSKEY [path to trojan]"Added by the STARTER-G TROJAN!"
N DSL Monitor spdstrm.exeComes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y DSLagentexe DSLagent.exe"Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection"
Y dslmon dslmon.exeSagem DSL modem related. Apparently needed to detect the modem
U DSLSTATEXE dslstat.exeSystem tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example)
X DsmSer dsm.exe"Added by the SERFLOG.B WORM!"
X DsmSer msmpatch.exe"Added by the SERFLOG.B WORM!"
X DsmSer svosm.exe"Added by the SERFLOG.B WORM!"
X DsmSer sysup.exe"Added by the SERFLOG.B WORM!"
Y DSndUp DSndUp.exe"Utility that only runs once after installing the drivers for Analog Devices SoundMax integrated soundcards. It's exact purpose is unknown at the present time but from the filename it's probably used to configure the default or generic speaker arrangement for the system it's used on"
X DsplObjects windspl.exe"Added by the BEAGLE.DN WORM!"
X DSS dssagent.exe"Registration reminder for Mattel Interactive (Broderbund) applications and games. Spyware as it sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info"
X DSS [path to trojan]"Added by the DSSDOOR-C TROJAN!"
X DSService dmrss.exe"Added by the AGOBOT-XX WORM!"
? DSSSGENS dssagens.exe"??"
X dstiosys plsitctl.exe"Added by the MAILBOT-BX TROJAN!"
X DSystemDriver windrv.exe"Added by the DELF.WG TROJAN!"
U DT 11Mbps WLAN PC Card Station DTCARDMonitor.exe11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
U DT 11Mbps WLAN USB Station DTUSBMonitor.exe11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
U DT HPW DTHtml.exe"HP My Display from HP. Rebranded version of Display Tune from Portrait Displays
U DT Task DTHtml.exe"Display Tune from Portrait Displays
N DTAgent DTAgent.exe"System Tray access to DAEMON Tools Pro from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
N DTlite DTlite.exe"Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
N DU Meter DUMETER.EXE"Hagel Technologies internet bandwidth monitor"
U DualCoreCenter StartUpDualCoreCenter.exe"Unified control center for overclocking both the graphics card and the CPU
? Duane Reade Insert Detect InsDetect.exe"Part of Duane Read Picture Suite & Digital Image Pack. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
X duck duck.exe"Added by the AGOBOT-AVG WORM!"
N Dulux WeatherShield WeatherDesk weather.exe"Dulux WeatherShield WeatherDesk - latest weather information from across Australia"
X Dumeter Services dumeter.exe"Added by the SDBOT-AEQ WORM!"
X Dump Dump.exe"Added by the ZIMUSE WORM!"
X dumprep spoolc.exe"Detected by Kaspersky as a variant of the AGENT.CXF TROJAN!"
X dumprep dump-k.exe"Added by the BUZUS-U WORM!"
X dumprep dump.exe"Added by the CODOX-A WORM!"
N dumprep 0 -k dumprep 0 -k"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
N dumprep 0 -u dumprep 0 -u"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
X DUN_SERVICES3 dun3.exe"Added by the SOKIRON TROJAN!"
X Duweculey yujixit.exe"Added by the SDBOT.BRP WORM!"
X Duwee wong Cerbon Cirebons.exe"Added by the BHARAT.A WORM!"
X DVAScvssdfa AsSDdwd.exe"Added by the LIOTEN.IP TROJAN!"
U DVD Device Lock for Win95/98/Me/2k/XP DDLAgent.exe"Loads Hide and Protect any Drives - which ""can be used to restrict read or write access to removable media devices such as CD
X DVD Upgrade dvdupgd.exe"Added by a variant of the IRCBOT BACKDOOR!"
N dvd43 DVD43_Tray.exe"DVD43 is ""a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies"""
U DVD43 DVD43.exe"DVD43 is a small tool that overrides CSS copy-protection found on DVD movies"
X dvd98 windvd98.exe"Added by the CULT.P WORM!"
N DVD@ccess DVDAccess.exe"Part of DVD Studio Pro from Apple Inc. - ""The DVD@CCESS feature allows you to add additional interactivity to your DVD title when it is played on a computer"""
? DVDAgent DVDAgent.exe"Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required?"
U DVDBitSet DVDBitSet.exeDVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
? DVDCheck DVDCheck.exe"Related to an Intervideo program. What does it do and is it required in startup?"
X Dvdcompat Dvdcompat.exe"Added by the GEMA TROJAN!"
N DVDLauncher DVDLauncher.exe"Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion"
N DVDSentry DSentry.exe"Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching
N DVDTray DVDTray.exeHP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware
N DVDUpgrade DVDUpgrd.exe"Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs"
N DVDXGhost DVDGhost.EXE"DVD Ghost - ""utility to make your software DVD players and DVD copy/backup softwares restriction-free
U dvHighMem cfgmng32.exe"Related to PureSight PC - designed to offer maximum flexibility and choice as families manage their internet use"
Y Dvp95 Dvp95.exe"Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine"
Y dvpapi9x DVPAPI9X.exeCommand AntiVirus for Windows 95/98/Me
Y DvpInitExe Dvpinit.exe"Command Antivirus related"
Y dvprpt Dvprpt.exe"Command Antivirus related"
X dvraudio dvraudio.exe"Added by a variant of the CRYPTER.C TROJAN!"
X dvsfss fbsfsdrs.exe"Added by the SDBOT-QA WORM!"
U DVSync dvsync.exeDVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC
X DvVideo32 dvvid32.exe"Added by the TINY.FD TROJAN!"
X Dvx wsxsvc.exe"Delfin Media Viewer or ""Promulgate"" adware variant"
X dw dw.exe"DownloadWare adware"
N DW4 Weather.exe"Desktop Weather 4 by The Weather Channel - provides current temperature
N DW4 DesktopWeather.exe"Desktop Weather 4 by The Weather Channel - provides current temperature
N DW6 DesktopWeather.exe"Desktop Weather 6 by The Weather Channel - provides current temperature
U DWHeartbeatMonitor DWHeartbeatMonitor.exeDWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
N DwlClient support.exeDownload manager for Dell support alerts
X dwqblwppx.exe [random].exe"Okcashbackmall adware"
X dwqblwpvl.exe [random].exe"Okcashbackmall adware"
X dwqblwrsq.exe [random].exe"Okcashbackmall adware"
U DWQueuedReporting dwtrig20.exe"Used to launch Microsoft Error Reporting (DW20.exe) - if
N dwStart FireWall.exe"The Shield firewall from pcsecurityshield.com. Not recommended by some (see here) and there are better free alternatives out there such as Zone Alarm. Located in %ProgramFiles%\PCSecurityShield\The Shield Firewall"
U dwtrig20 dwtrig20.exe"Used to launch Microsoft Error Reporting (DW20.exe) - if
X DW_Start rwwnw64d.exeIdentified as a variant of the AdWare.Win32.ZenoSearch.am malware
X Dx sys*.exe [* = random number]"Added by the DEXTER.A WORM!"
X Dx8compat Dx8compat.exe"Added by the GEMA TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list