Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Xabtump3serch.exe"Loads the executable for Lop.com - final version"
Xabtulopsearch.exe"Loads the executable for Lop.com - beta version"
UAcBtnMgr_X63AcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X63.exeAcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X73AcBtnMgr_X73.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X83AcBtnMgr_X83.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X84-X85AcBtnMgr_X84-X85.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAdSubtractadsub.exe"AdSubtract blocks ads
XATI Video Driver Controlbtorrent.exe"Added by a variant of the IRCBOT TROJAN!"
?BBDialBT Broadband.exe"Part of BT Broandband - is it required?"
NBitTorrent DNAbtdna.exe"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
XBluetooth Configbtwindin32.exe"Added by the SDBOT-DFN WORM!"
UBluetooth Connection AssistantLBTWiz.exe"Bluetooth connection manager for Logitech based bluetooth wireless products"
UBluetoothAuthenticationAgent"rundll32.exe bthprops.cpl
XBron-SpizaetusnorBtok.exe"Added by the RONTOKBRO.B WORM!"
XBT[path to trojan]"Added by the LITEBOT-B TROJAN!"
UBT Broadband Basic Helpmatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
UBT Broadband Desktop Helpmatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
UBT Broadband Helpmatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
XBT00003*abcdefg23.exe"Added by the VB-VT TROJAN where * = 5
XBT00003*hiklmnop27.exe"Added by the VB-VT TROJAN where * = 2
Ubtbb_wcm_McciTrayAppMcciTrayApp.exe"System tray access to Motive's Broadband 2.0 configuration and repair utility"
UBtcMaestroKMaestro.exeMultimedia keyboard manager. Required if you use the multimedia keys
Nbtdnabtdna.exe"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
Nbtdna.exebtdna.exe"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
?btinstbtinst.exe"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
UBTModemProtectionBTModemProtection.exe"BT Privacy Online modem protection software
Xbtmsre.exebtmsre.exe"Added by the SDBOT.AM WORM!"
UBTopenworldDialBTYahoo.exeBT Yahoo! internet connection manager
?BTSETBOOTKEYBTSetBootKey.exe"Related to a USB Bluetooth adaptor. What does it do and is it required?"
UBtStartbtstart.exe"Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software"
UBTTrayBTTray.exe"System tray icon which shows the status of a Bluetooth wireless module (either integrated or via an adapter). Most systems with such a module installed can enable/disable the module and the icon changes from blue/white to blue/red when the module is turned off. Also allows access to explore bluetooth places
YBTUSRBDGBtUsrBdg.exe"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
YBTUSRBDGFBtUsrBdg.exe"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
XBTVbtv.exe"BroadcastPC adware"
XBtvCbtvclean.exe"BroadcastPC adware"
UButton Serverbttnserv.exe"Found on a Compaq PC
UChicoSyswebtmr.exe"Child Control parental control software"
Xclcbt.execlcbt.exe"Added by the AGENT.CBA TROJAN!"
UCP32NOTCP32BTN.EXEFor the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
NCplBTQ00CplBTQ00.EXERelated to EZbutton quick launcher for the Media player app that comes with certain laptops
XDanBtR270414DanBtR270414.exe"Added by the VB-NIB WORM!"
UDell Photo AIO Printer 922dlbtbmgr.exeSystem Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons
XDirector Videobtnmgern.exe"Added by the MYTOB-KL WORM!"
YDLBTCATS"rundll32 [path] DLBTtime.dll _RunDLLEntry@16"
NDNAbtdna.exe"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
XETB Testeretbtest.exe"Added by the RBOT-ABR WORM!"
Xf73cdc8ee94ebtsendto.exeAssociated with mysearchnow.com/searchbar.html
UFLMLABTECMOUSEmouse32A.exeMouse utility for a Labtec brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
UGBTrayGBTray.exe"System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users
UGoBackGBTray.exe"System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users
UGoBack Tray IconGBTray.exe"Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users
UInstallBuddyIbtna.exe"InstallBuddy - automatically translates and installs your desktop documents
XLBTWiz.exeLBTWiz.exe"Added by the SDBOT-DHY WORM! Note - this is not the legitimate Logitech file which is normally located in %Program Files%\Logitech\SetPoint or %Program Files%\SetPoint. This one is located in %Windir%"
ULexmark 5200 serieslxbtbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 5200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X63 Button ManagerAcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X73 Button ManagerAcBtnMgr_X73.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X83 Button ManagerAcBtnMgr_X83.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X84-X85 Button ManagerAcBtnMgr_X84-X85.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULG Direct Media Button ServiceLGDMEBTN.exe"Supports the Direct Media button on LG Notebooks that support it - such as the S1 PRO EXPRESS DUAL. Pressing this button launches the application for watching movies or listening to music"
Xlibtec"rundll32.exe libtec.dllstart"
ULoadBtnHndBtnHnd.exeFujitsu Siemens Lifebook laptops have some buttons on the case that can be programmed to execute specified programs (like hotkeys). The buttons can also be used as a combination lock input
ULogitech BT WizardLBTWiz.exe"Bluetooth connection manager for Logitech based bluetooth wireless products"
YLXBTCATS"rundll32 [path] LXBTtime.dll _RunDLLEntry@16"
Nlxbtmon.exelxbtmon.exeLexmark 5200 Series printer device monitor
YLXDBCATS"rundll32 [path] LXDBtime.dll _RunDLLEntry@16"
XMicrosoft Directxspdirectxbt.exe"Added by a variant of the RBOT-GHT WORM!"
XMicrosoft Update Machineubthec.exe"Added by the AGENT.AWZ TROJAN!"
UMODEMBTRMODEMBTR.EXE"Modem Booster from inKline Global to improve ISP connections"
NMotive SmartBridgempbtn.exe"System tray icon for the Virtual Assistant from AT&T Broadband
NMotive SmartBridgeBTHelpNotifier.exe"System tray icon for help from BT Broadband
XMSN Update Cfgmsnupdbt.exe"Added by an unidentified WORM or TROJAN! See here"
XNBT System alias[path] repcale.exe [path] beird.exe"Added by a variant of the RANDON.AN WORM!"
XNetbios Helpernbthlp.exe"Added by the BANKER.Y TROJAN!"
UOracle Web-to-Gowebtogo.exe"""
UOrbOrbTray.exe"Related to Orb Tray from InstallShield Software Corporation now owned by Macrovision"
UOWCCardbusTrayocbtray.exeIcon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface
YPhiBtnPhiBtn.exeSnapshot and Launch button application from Philips belonging to Philips SPC 900NC Camera
UPopSubtractPopSub.exe"PopSubtract - pop-up killer"
UQT4StBtnSwiftBtn.EXE"SwiftBtn - installed alongside the system drivers on Fujitsu Siemens notebooks and allows extra keyboard support"
UQuickDVBTQuickDVB-T.exe"AVerTV_DVB-T connects Digital TV with your PC or Notebook and allows you to watch free-to-air digital terrestrial television channels with no subscription to pay"
?run=LXBTppls.exe"Reportedly part of Lexmark printer software - what does it do and is it required?"
Urundll32"rundll32.exe bthprops.cpl
USpamSubtractSpamSubtract.exe"Intermute SpamSubtract - junk email detection and removal program"
UspamsubtractSpamSub.exeInterMute™ SpamSubtract - junk email detection and removal program. InterMute™ is now part of Trend Micro and their products are no longer supported
USpySubtractSpySub.exe"SpySubtract - multi spyware removal tool"
USSCFBTN.EXESSCFBTN.EXE"Samsung smarthru software
Xstartiebtm.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
NSTBWEBTVSTBWEBTV.EXEUsed to display TV on your PC
NSubtract the AdsAdSub.exeRemoves adverts from web pages. Although useful - not required
Xsysfbtraybill102.exe"Added by the VB-ENI TROJAN!"
Xsysfbtraybill106.exe"Added by the MDROP-CLV TROJAN!"
UTabletTiptabtip.exeThis is the Tablet PC Input Panel for Windows XP Tablet PC Edition. This utility allows you to use a pen (in conjunction with a touchscreen or tablet) to enter text into a document or input field (such as a URL in a browser) using either handwriting or the on-screen keyboard. This utility is also included with Windows 7 and Vista but only appears to run at startup if using the XP Tablet PC version. This cannot be confirmed at present
NTBTraytbtray.exeVLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel
?TCDPbtnTCDPbtn.exe"Found on a Toshiba laptop"
?TWBbtnN/A"Found on a Toshiba laptop"
Xtwhewbta.exe"PurityScan adware"
NUSBTAusbtapnp.exe"System Tray access for the BeWAN Gazel 128 USB ISDN adapter"
?USBToolTipUSBTip.exe"Related to Pinnacle Systems Inc. What does it do and is it required?"
UWD Button ManagerWDBtnMgr.exeButton manager installed with a western digital external disk drive. Allows you to back up your system with one click
UWD Drive ManagerWDBtnMgrUI.exe"System Tray access to the WD Drive Manager management software for selected external drives in the My Book and My Passport range. Hovering over the icon displays health status (temperature
YWebTrap.exeWebTrap.exe"Part of Trend Micro web-security products - PC-cillin 2000 and Virus Buster 2001. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating"
YWebTrapNT.exeWebTrapNT.exePart of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating
XWindows USB 2.0 Driverusbtskmgr.exe"Added by the RBOT-BKG WORM!"
Uxbtlbootldr.exe"Active Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X[12 random characters]bthserv1.exe"IeDriver adware variant"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.