Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
UACROMOUSEACROMAPP.exe"Related to ACROMOUSE Laser mouse control"
?AidemHotKeyKEYAPP.EXE"Keyboard related"
UAlarm ManagerAlarmapp.exePalm alarm event reminder that coordinates what is on your Palm with settings on your desktop
XApp.EXEName[path to worm]"Added by the BODIRU WORM!"
UBayMgrDockApp.exeHot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
UBestSync 2008BestSyncApp.exe"System Tray access to BestSync® 2008 from Risefly Software - ""a professional utility for synchronizing files between your local folders and Network Drives
NBLSTAPPblstapp.exePuts access to Creative's BlasterControl in the System Tray
Ubtbb_wcm_McciTrayAppMcciTrayApp.exe"System tray access to Motive's Broadband 2.0 configuration and repair utility"
YccAppccApp.exe"Part of earlier versions of Norton AntiVirus - Auto-protect and E-mail check will not function without this"
YCommon ClientccApp.exe"Part of earlier versions of Norton AntiVirus - Auto-protect and E-mail check will not function without this"
NCONNECTAUTrayAppCONNECTAUTrayApp.exe"System Tray access to change update settings for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
UCostAwareniIPCApp.exe"NetInternals CostAware - download quota measuring tool"
YDadAppdadapp.exe""DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required
UDetectorAppDetectorApp.exe"Related to Roxio MyDVD (was Sonic) DVD authoring software"
NDMISLAPPDMISLAPP.exe"DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information"
?fgl23DoubleScreenHooksf23happ.exe"Related to the now discontinued ATI Fire GL3 graphics card. What does it do and is it required?"
UFingerPrintSoftwarefpapp.exeSupports the fingerprint reader on selected IBM/Lenovo Thinkpad notebooks
NGhostStartTrayAppGhostStartTrayApp.exe"System Tray access to Norton Ghost - added from the 2003 version"
UHotkeyAppHotkeyApp.exe"Programmable keys on Acer
Yiamappiamapp.exe"AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago
UIMOLIMOLApp.exe"IncrediMail for Office Outlook Add-On"
UKN_PanelAppPanelApp.exe"KnowledgePanel online survey software"
ULaunAppLaunApp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
ULManagerHotkeyApp.exe"Programmable keys on Acer
ULyraHD2TrayAppLYRAHD2TrayApp.exeRelated to RCA Lyra MP3 Player
UMPSExemscifapp.exeMcAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"
Xnavappnavapp.exe"NavExcel adware variant"
XNetwork ServiceMccTrayApp.exeAdded by an unidentified WORM or TROJAN!
Unmappnmapp.exe"Pure Networks ""Network Magic eliminates common frustrations and saves time by simplifying and automating set up
XNorton Auto-ProtectccApp.exe"Added by the AKHER.D WORM! Note - for the valid Norton AV entry the filename is ""navapexe"". This is also not the valid Norton AV file with the same filename"
Xntfyappntfyapp.exe"Added by the ZHELATIN WORM!"
UOmniPassscureapp.exe"OmniPass from Softex Inc. - secure password management software"
UPanasonic HotKey ManagerHKEYAPP.EXEHotKey management for Panasonic rugged mobile PCs
NPtUDFAppPtUDFApp.exe"Sony abCD program
YRapAppRAPAPP.EXE"Application protection component of BlackICE PC Protection (was Defender) firewall
URemote Accessrnaapp.exe"Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie
Xsappsapp.exe"NCase adware"
XscAppscApp.exe"Added by the STANDO-E WORM!"
USCDEmuApp.exeSCDEmuApp.exe"Related to PowerISO - CD/DVD image file processing tool"
YSDTraySDTrayApp.exe"System Tray access to an older version of Spyware Doctor antispyware from PC Tools"
YServer Application for MFP ServerServoApp.exe"Multi Function Printer (MFP) Server Agent for Belkin's Wirless G All-in-One Print Server and ZyXEL's NPS-520"
XSmileyAppstbapp.exe"DoubleD adware"
NSony Auto Update Tray ApplicationCONNECTAUTrayApp.exe"System Tray access to change update settings for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
XSymantecccapp.exe"Added by the REATLE WORM! Note - this is not a Symantec file"
XSymantec ServiceccApp.exe"Added by the AKHER.D WORM! Note - this is also not the valid Norton AV file with the same filename"
UWebExRemoteAccessAgentraagtapp.exe"Related to Web Meetings from WebEx Communications
XWinApp32msapp.exe"Added by the RSBOT TROJAN!"
Xwincmapwincmapp.exe"CasClient adware variant - also detected as the CMAPP TROJAN!"
XWindows Media APwinmapp.exeAdded by an unidentified WORM or TROJAN!
XWindows Media APPwmapp.exeAdded by an unidentified WORM or TROJAN!
X[executed file name]App.exe"Added by the WAXPOW WORM!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.