Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Trust Cleaner TrustCleaner.exe"Smitfraud variant"
X TrustCop TrustCop.exe"TrustCop rogue security software - not recommended
X TrustDoctor TrustDoctor.exe"TrustDoctor rogue security software - not recommended
X TrustedAntivirus pgs.exe"TrustedAntivirus rogue security software - not recommended. A member of the AVSystemCare family"
X TrustFighter TrustFighter.exe"TrustFighter rogue security software - not recommended
X TrustIn Popups TrustInPopups.exe"TrustInPopups adware"
X TrustNinja TrustNinja.exe"TrustNinja rogue security software - not recommended
? trustras.exe trustras.exe"Trust ADSL modem related. Is it required?"
X TrustSoldier TrustSoldier.exe"TrustSoldier rogue security software - not recommended
X TrustWarrior TrustWarrior.exe"TrustWarrior rogue security software - not recommended
X TrustyHound-TS TrustyHound-TS.exe"TrustyHound spyware"
X TS tsc.exe"Total Security rogue security software - not recommended
X tsa tsm.exe"TargetSaver adware"
X Tsa2 tsm2.exe"TargetSaver adware"
X TsAdbot TSADBOT.EXETimeSink Add Client - advertising spyware
? TSBxLogon TMESBS2.EXE"Found on a Toshiba laptop. May be related to TMESBS?"
U TSClientMSIUninstaller tscuinst.vbs"Related to Terminal Services Client Remote Desktop Connection Software from Microsoft"
X tserv tserv.exe"Added by the STRATION.AD WORM!"
U TSE_PLUtil PLBkMon.exe"Prolific USB Flash Disk Log On Application"
X Tsk Mng Hlp wins32.exe"Added by the AGOBOT-JB WORM!"
X tskdbg tskdbg.exe"Added by the FLOOD.E TROJAN!"
X Tsklist tsklist32.exe"Detected by Kaspersky as the BANCOS.SP TROJAN!"
U TSkrMain TSkrMain.exe"TOSHIBA Accelerometer Utilities - hardware utilities that work with the motion sensors built into their Tablet PCs. Detect the way you are holding it at any given moment
X Tsl tsl.exe"Uploader-R adware"
X Tsl2 tsl2.exe"TargetSaver adware"
? TSMAgent TSMAgent.exe"Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required?"
N TSMsger TSMsger.exe"Epson scannner software - required for ""one-touch"" operation. Can be launched manually"
N tsnp2std tsnp2std.exeDigital camera related
Y tsnpstd3 tsnpstd3.exe"Related to Sonix Inc. Camera Monitor MFC Application"
? TSPower spower.drv"Found on a Toshiba laptop. Related to power management?"
X tsrv t2serv.exe"Added by the WAREZOV.AT WORM!"
X tsrv tsrv.exe"Added by the WAREZOV.W WORM!"
? TSService NSSERVICE.EXE"??"
X tsvcin n20050308.exe"Delfin Media Viewer adware related"
X tsx regedlt.exe"Added by the SDBOT-KA BACKDOOR! Note the lower case ""L"" in place of the lower case ""I"" in the command"
? tsyssmon tsyssmon.exe"Found in a Toshiba\sysstability directory"
X TSystem [trojan filename]"Added by the NSYS-A TROJAN!"
X ttaa tata.exe"Added by the LINEAGE-T TROJAN!"
? ttasq ttasq.exe"??"
X ttool scvc.exe"Added by the BCKDR-OWM BACKDOOR!"
X ttool [random numbers].exe"Added by the BCKDR-QII BACKDOOR! The filename seen most often is ""9129837.exe"""
X ttool sa23sl.exe"Added by the BCKDR-QZZ TROJAN!"
X ttool essledv.exe"Added by the ZBOT-KM TROJAN!"
X ttool sr882388.exe"Added by the BACKDR-AX TROJAN!"
X ttool essldev.exe"Added by the AGENT-LWB TROJAN!"
X TTS Sync testtts.exe"Added by the SDBOT.BVA WORM!"
X Ttt Ttt.exe"Added by a variant of the SDBOT WORM!"
X ttupt ttupt.exe"eZula TopText adware"
? Tukati TukatiRedistributor.exe"Tukati Digital Content Distribution. Is it required?"
N tunebite tunebite.exe"""Tunebite lets you make unprotected copies of copy-protected music files by recording them while they are being played"". Can be launched from it's Start Menu shortcut"
U TuneUp MemOptimizer memoptimizer.exe"Part of ""TuneUp Utilities""
N Turbine Download Manager Tray Icon TurbineDownloadManagerIcon.exe"Turbine Download Manager (TDM) - download manager associated with the game ""The Lord of the Rings Online™"""
X TurBo System.Trubo.vbs"Added by the AUTOM-C WORM!"
U TurboExplorer TE.exe"Web accelerator - ""TurboExplorer 2.x is a real-time web surfing accelerator specifically designed for Internet Explorer 4/5 to achieve a faster and more effective approach to the internet"". Only needed if you find it improves web browsing"
U TurboHddUsb TurboHddUsb.exe"LaCie USB Boost or PQI TurboHDD advanced driver for their range of USB hard disks which increases USB performance by up to 53%. Not required unless you use a supported external drive frequently"
U TurboLaunch Tlaunch.exe"TurboLaunch is a tool-bar style application that can be set up to run many programs and perform certain pre-programmed actions"
U TurboMemoryCharger turbomemorycharger.exe"Turbo Memory Charger - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X TurboNet [path to trojan]"Added by the RENOS-EA TROJAN!"
N TurboNote tbnote.exePost-It's on your desktop. Available via Start -> Programs
U TurboTop TurboTop.exe"TurboTop - make any window ""Always on top"""
X TurvaPC GDC.exe"TurvaPC Finnish rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X TURXP Protocol sps32.exe"Added by a variant of the SDBOT WORM!"
X tutcdchk2 tutcdchk2.exe"Added by the HAXDOOR ROOTKIT!"
X TV Media Tvm.exe"TVMedia adware"
U TV Now TvNow.exeApplication supplied with HP notebooks. It activates the S-Video port and is said to improve the quality of the output signal (resolution/timeouts)
U TV Scheduler TVSCHL.EXE"ProLink PlayTVpro TV tuner software scheduler"
U TV878 Remote Control C7XRCtl.exe"Related to Kworld TV878 Tuner"
? TVAgent TVAgent.exe"Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required?"
X tvctray tvctray.exeAdded by the VB.QJ TROJAN!
X TVMD tvmd.exe"Total Velocity - ""Secure commerce company that enables the 'checkout' process for our customers in order to safely and securely purchase our award winning software"". Autointsalling spyware"
U TvNow TvNow.exeApplication supplied with HP notebooks. It activates the S-Video port and is said to improve the quality of the output signal (resolution/timeouts)
U TvrRemote Remote.exe"Remote Control driver for LifeView internal and external TV products"
U TvrSchedule Schedule.exe"Scheduler for Mercury Ez View TV Tuner Card"
N Tvs TvsTray.exe"Toshiba Virtual Sound on a notebook. Allows you to change sound settings on the fly - default setting is ""build-in speaker"". You can also select external speaker
X tvs_b tvs_b.exe"BroadcastPC adware"
X tvs_b tvs_ln.exe"BroadcastPC adware variant"
X tvs_re tvs_re_inst.exe"BroadcastPC adware"
U TVT Scheduler Proxy scheduler_proxy.exe"Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates)
X TVTMD TVTMD.EXE"Total Velocity variant - autoinstalling spyware"
U TVTunerLib TVTLInstTool.exeRelated to Sony installer tool for Sony TV tuner library
N TVWakeup tvwakeup.exeMS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
? Tvwatch tvwatch.exe"Associated with the TV-oOut option on Asus AGP or Intel graphics cards. Is it required?"
X Twain Twain.exe"Added by the STIRAUT WORM! The file is located in %Windir%"
X Twain Twain.exe"Added by the AGENT.QKA TROJAN! The file is located in %ProgramFiles%\Twain"
X Twain image mmp32.exe"DailyWinner adware"
? TWarmBay N/A"Found on a Toshiba laptop. Related to hotswap bay management?"
U TWarnMsg twarnmsg.exe"Toshiba System Warning Function for Windows 98
? TWBbtn N/A"Found on a Toshiba laptop"
? TWBrowse TWBrowse.drv"Found on a Toshiba laptop. Possibly related to TWAIN drivers (ie
? Tweak Manager WinManager.Exe"WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed?"
X Tweak System Genderowo.exe"Added by the SILLYFDC WORM!"
U Tweak UI "rundll32.exe tweakui.cpl tweakmeup"
U Tweak UI "rundll32.exe tweakui.cpl tweaklogon"
X Tweak UI "RunDLL32 tweakUI.DLL TWEAKUI /tweakmeup"
U Tweak UI 1.33 deutsch "RUNDLL32.EXE TWEAKUI.CPL TweakMeUp"
U Tweak-Me TWEAK-ME.exe"3rd party version of Miscrosoft'sTweak UI "powertoy" with many more options and controls (plus full support)
U Tweak-xp Tweak-xp.exe"Main program for Tweak-XP - a WinXP tweaking utility"
U TweakDUN tweakdun.exeUtility to optimize your Internet Browser Software. TweakDUN promotes faster Internet data transfer rates and faster downloads by eliminating fragmentation of data packets
U Tweaki4PU twksup.exe"""Tweaki puts several Windows utilities into one easy to use program while adding hundreds of additional tweaks not found in other system tweakers"""
? tweakico tweakico.exe"May be a HP program to control their icons?"
U TweakMASTER TMTray.exe"TweakMASTER Internet Optimizer"
U TweakVI tweakvi.exe"TweakVI from Totalidea Software - ""Tweak hundreds of hidden features of Windows Vista
? TweakYC TweakYC.exe"VideoMate TV tuner and capture card related - what does it do and is it required?"
X twhe wbta.exe"PurityScan adware"
U twister twister.exe"Twister ""AntiTrojanVirus"""
N TwkSCardSrv SCardS32.ExeUsed with Towitoko SmartCard Readers for card recognition
X twunk service twunk16.exe"Added by the RBOT.BAT WORM!"
X Twunk_32exp.exe Twunk_32exp.exe"Added by the FAKEAV-BDZ TROJAN!"
X Twunk_64 twunk_64.exeSystem1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory
X TXMouie keepSafe.exe"Added by the KILLAV.KAX TROJAN!"
X tyack drive tyack.pif"Added by the RBOT-AMT WORM!"
X tymsetvc osskhbd.exe"Added by the MAILBOT-BW TROJAN!"
X type bat.exe"Added by the ANSKYA-A WORM!"
U type32 type32.exe"Microsoft IntelliType Pro utility (up to version 5.4) - required to support the multimedia keys
? TypeRegChecker TypeRegChecker.exe"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
U typeteller typeteller.exe"TypeTeller keystroke logger/monitoring program - remove unless you installed it yourself!"
N TypingSatellite KBOOST.exe"Typing Master 2002 background utility that collects typing errors and builds up customised typing lessons for your needs. Available via Start -> Programs"
X TZ Spyware Remover SpyRem.exe"TZ Spyware Remover spyware remover - not recommended
U U.S.Robotics WLAN Adapter Configuration Utility USRWLAN.exe"U.S.Robotics LAN Adapter - wireless LAN (WLAN) configuration utility"
X UADCcw UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_104911963 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_3240389055 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_3769470239 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_4242084050 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_599141581 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X UADC_815790765 UADCcw.exe"AdvancedCleaner rogue security software - not recommended
X Uate oocs.exe"PurityScan adware"
U UberIcon UberIcon Manager.exe"Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders"
U UBSShell UBSShell.exeUBS (United Bank of Switzerland) banking software
X UCmd fallfour.exe"Added by the SDBOT-AZA WORM!"
U UCmore XP - The Search Accelerator "rundll32.exe UCMTSAIE.dll DllShowTB"
X ucookw ucookw.exe"Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples"
N ucstartup ucstartup.exe"IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers
N ucstartup.exe ucstartup.exe"IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers
N UC_SMB ucstart.exePart of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed
N UC_Start ucstartup.exe"IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers
U UD Agent UD.EXEThe United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start > Programs
X UDC6cw UDC6cw.exe"Part of the DriveCleaner rogue security software - not recommended
X UDC6_cw UDC6_cw.exe"Part of the DriveCleaner rogue security software - not recommended
X udinajkv.exe udinajkv.exeAdded by a premium rate adult material dialer!
X udjudwq sybqnub.exe"Added by the SILLYFDC-AH WORM!"
X udzok udzou.exe"Added by the SDBOT-CUS WORM!"
U Ueproc32 UEPROC32.exePart of Norton Utilities - most likely associated with the Unerase Wizard in older versions
X UERScw UERScw.exe"Part of the ErrorSafe rogue system error and cleaning utility - not recommended"
? UFD Monitor9382 ufdlmon.exe"Part of USB Flashdisk software - what does it do and is it required?"
? UFD Utility9382 UFDTool.exe"Part of USB Flashdisk software - what does it do and is it required?"
Y UfSeAgnt.exe UfSeAgnt.exe"Part of Trend Micro Internet Security"
X uga6pcw uga6pcw.exe"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
X ugac ugac.exe"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
X ugcw ugcw.exe"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
X ugdccw UGDCcw.exe"Part of SecurePCCleaner
X ugescw ugescw.exe"Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples"
? ugon aockstrs.exe"??"
X uhvjsul.dll "rundll32.exe uhvjsul.dllmrpmvyf"
N Uidler Uidler.exeUniloc Titlewave Browser used with some shareware
? UIUCU UIUCU.EXE"Universal Device Install Application from Conexant Systems
N UIWatcher UIWatcher.exe"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
U ujm nm32.exe"Stranget keystroke logger/monitoring program - remove unless you installed it yourself! Found in an ""fyt"" subfolder of the Windows or Winnt folder"
U ukl wmpusrvc.exe"Ultimate Keylogger surveillance software. Uninstall this software unless you put it there yourself"
X UKVideo2 ukvideo2.exeAdult content dialler
? Ulead AutoDetector Monitor.exe"Related to Ulead Systems Inc. programs. What does it do and is it required?"
? Ulead AutoDetector v2 monitor.exe"Related to Ulead Systems Inc.. What does it do and is it required?"
N Ulead Calendar Checker CalCheck.exe"Ulead Calendar Checker - part of Ulead Photo Express - automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually"
U Ulead Memory Card Detector Monitor.exe"Ulead Memory Card Detector - ""Automatically starts datadownload when your card is inserted into a memory card reader"""
N Ulead Photo Express Calendar Checker calcheck.exe"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
N Ulead Photo Express x.0 Calendar calcheck.exe"Ulead Calendar Checker - part of Ulead Photo Express
X Ultimate Cleaner UltimateCleaner.exe"Ultimate Cleaner rogue security software - not recommended
X Ultimate Defender UltimateDefender.exe"Ultimate Defender rogue security software - not recommended
X Ultimate Fixer UltimateFixer.exe"UltimateFixer rogue system error and cleaning utility - not recommended"
X Ultimate System Guard MainFAVProj.exe"Ultimate System Guard rogue security software - not recommended
X UltimateBuddy UltimateBuddy.exe"UltimateBuddy - installs malware
X UltimateServices ultsvcs.exe"Added by the AGENT-LGT TROJAN!"
N UltimateZip Quick Start uzqkst.exe"UltimateZip - file compression utility"
X Ultra Edit v5.1 ultraedit.exe"Added by the SDBOT-RK WORM!"
N Ultra Hal Assistant 4.5 Startup HalAsst.exe"Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion"
? UltraDVDMon DVDMon.exe"UltraDVD DVD player software - is it required?"
X UltraEdit uledit.exe"Added by the SDBOT-TO WORM!"
X Ulubione sys****.exe"Ulubione adware"
N UMAX VistaAccess vsaccess.exeVistaAccess gives you quick and easy access to scanning functions right from your desktop
U UMonit umonit.exeAlerts when USB device is plugged in
Y umxagent umxagent.exe"Tiny Personal Firewall V4 - main engine"
Y umxldra umxldra.exe"User mode executive module DLL loader - part of Tiny Personal Firewall V4"
Y UMXLDRW UMXLDRW.exe"Tiny Personal Firewall (pre V4)"
X un32info un32info.Exe"Added by the CRYPTER.A TROJAN!"
X Undefined winter.exe"Added by the KILLAV.LW TROJAN!"
X UNERI yujixit.exe"Added by the SDBOT.BOO WORM!"
U UnHackMe Monitor hackmon.exe"UnHackMe allows you to detect and remove a new generation of 'invisible' Trojan programs called ""rootkits"""
N Uniblue ProcessQuickLink 2 ProcessQuickLink2.exe"ProcessQuickLink by Uniblue Systems Ltd - gives you quick access to their Process Library entry for a currently running process via the standard Windows Task Manager (CTRL+ALT+DEL). A System Tray icon also allows you to search the library and launch the Task Manager. Run on demand"
U Uniblue Quick Access qaccess.exe"Quick Access application from UniBlue Systems Ltd - ""helps you account for all processes on your computer by providing an additional plug-in for the Windows task manager"""
N Uniblue Registry Booster RegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
N Uniblue RegistryBooster 2 RegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
N Uniblue RegistryBooster 2009 RegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
U Uniblue SpeedUpMyPC SpeedUpMyPC.exe"Older version of SpeedUpMyPC from Uniblue - which ""lets you monitor and control all your PC resources with easy
U Uniblue SpyEraser spyeraser.exe"SpyEraser from Uniblue. Spyware detection program"
U UniblueSpeedUpMyPC Launcher.exe"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
X Unigray Unigray Antivirus.exe"Unigray Antivirus rogue security software - not recommended"
? UniMessenger UNI2.exe"Possibly the UNI instant messenger for singles from Voxtel"
X uninstal regsvr32 image.dll"CoolWebSearch parasite variant. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The ""image.dll"" file is found in %System%"
X Uninstall**** upd.exeAdult content based screen saver where **** can be any number
N UninstallAbility uability.exe"UninstallAbility free uninstaller"
X UninstallHL PreUninstallHL.exe"LinkReplacer/FFinder adware"
X UninstallQL PreUninstallQL.exe"LinkReplacer/FFinder adware"
X Uninstall_TBPS TBuninst.exe"WebSearch Toolbar - HuntBar hijacker
U UniPrint SetDfltSettings.exe"Drivers for Uniprint
U UniSc Unisc.exeMcAfee UnInstaller
? uniucu uniucu.exe"??"
X Universal Plug & Play devices WinUPPD.exeAdded by an unidentified WORM/TROJAN!
X Universal USB Service svchost32.exe"Added by the KELVIR.R WORM!"
X Unix File Support init3.exe"Added by the RBOT-ZN WORM!"
X unldr16 unldr16.exe"Added by a variant of the CRYPTER.C TROJAN!"
X unldr32 unldr32.exe"Added by a variant of the CRYPTER.C TROJAN!"
X UNleaded Syn Manager Edit.exe"Added by the SLINNBOT.ALD BACKDOOR!"
U UnlockerAssistant UnlockerAssistant.exe"Related to Unlocker utility to unlock files when the OS reports the file is being used by an other person or program"
X UnSpyPC UnSpyPC.exe"UnSpyPC spyware remover - not recommended
Y untray untray.exe"Command Antivirus related"
X UnVirex UnVirex.exe"UniVrex rogue security software - not recommended

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list