Dx

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	asdx	xwinrpc32.exe	"Added by the AGOBOT.VO WORM!"
U	ATI 2D Component	Ati2mdxx.exe	"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the ""U"" recommendation"
X	Ati Display Settings	atividx.exe	"Added by the RBOT-GAS WORM!"
U	Ati2mdxx	Ati2mdxx.exe	"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the ""U"" recommendation"
U	ATIModeChange	Ati2mdxx.exe	"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the ""U"" recommendation"
X	ATIUpdater	atiupdxx.exe	"Added by the RBOT-ABX WORM!"
X	Audio Device Manager	WNDXP.exe	"Added by the IRCBOT.AJL BACKDOOR!"
U	Auto EPSON Stylus DX3800 Series on X	E_FATIACE.EXE	"Epson Status Monitor 3 for the Stylus DX3800 Series printer - for monitoring printer status
U	Auto EPSON Stylus DX4800 Series on X	E_FATIADE.EXE	"Epson Status Monitor 3 for the Stylus DX4800 Series printer - for monitoring printer status
U	Auto EPSON Stylus DX6000 Series on X	E_FATIBIE.EXE	"Epson Status Monitor 3 for the Stylus DX6000 Series printer - for monitoring printer status
X	autoupdate	"rundll32 DATADX.DLL	SHStart"
X	Badx	HELLRAIDER.EXE	"Added by the MINDCTRL.A BACKDOOR!"
U	CCWC7I	idxl.exe	"Moleculesoft Cache
N	Corel Desktop Application Director	dadx.exe	The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
X	DeluxeCommunications	Dxc.exe	"Deluxe Communications adware - successor to SurfSideKick"
X	Direct X Direct3D	dxd3d.exe	"Added by a variant of the SDBOT WORM!"
X	Direct X Opengl	dxopengl.exe	"Added by a variant of the RBOT-CJ WORM!"
X	DirectX Video Driver	dxterm5.exe	"Added by the WILAB-A TROJAN!"
X	DirectX9 Diag	dx9diag.exe	"Added by the RBOT-ALT WORM!"
X	DriverDB	svcmdx32.exe	"Added by the BERPI TROJAN!"
N	DVDXGhost	DVDGhost.EXE	"DVD Ghost - ""utility to make your software DVD players and DVD copy/backup softwares restriction-free
X	Dx	sys.exe [ = random number]	"Added by the DEXTER.A WORM!"
X	Dx8compat	Dx8compat.exe	"Added by the GEMA TROJAN!"
X	dxdiag diagnose	msidxdia.exe	"Added by a variant of the RBOT WORM!"
X	dxdiags.exe	dxdiags.exe	"Added by the CERTIF-G TROJAN!"
X	DxDialog	dxdlg32.exe	"Added by the VB-CXT TROJAN!"
X	dxdll32	ntxdll.exe	"Added by the GAOBOT.CPX WORM!"
N	DXDllRegExe	dxdllreg.exe	"Created when you select ""Yes"" to check the ""WHQL Digital signatures"" in the DirectX9 files at the first time you open it"
X	DxLoad	DX3DRndr.exe	"Added by the GIBE.B WORM!"
N	DXM6Patch_981116	p_981116.exe	"Win32 cabinet self extractor. More info here"
X	dxmsrv	dxmsrv.exe	Added by an unidentified WORM or TROJAN!
X	Dxsty	Dxsty.exe	"Added by the GEMA TROJAN!"
X	Dxupdate.exe	Dxupdate.exe	"Added by the MAFEG WORM!"
X	dxvid	dxvid.exe	"Added by the DLUCA-Y TROJAN!"
U	E06DXLRD_7604703	EDICT.EXE	"Related to Microsoft Encarta dictionary functions"
X	EDxMC110	Isass.exe	"Added by the VB-NIA WORM!"
U	EPSON Stylus DX3800 Series	E_FATIACE.EXE	"Epson Status Monitor 3 for the Stylus DX3800 Series printer - for monitoring printer status
U	EPSON Stylus DX4000 Series	E_FATIBEE.EXE	"Epson Status Monitor 3 for the Stylus DX4000 Series printer - for monitoring printer status
U	EPSON Stylus DX4400 Series	E_FATICAE.EXE	"Epson Status Monitor 3 for the Stylus DX4400 Series printer - for monitoring printer status
U	EPSON Stylus DX4800 Series	E_FATIADE.EXE	"Epson Status Monitor 3 for the Stylus DX4800 Series printer - for monitoring printer status
U	EPSON Stylus DX5000 Series	E_FATIBVE.EXE	"Epson Status Monitor 3 for the Stylus DX5000 Series printer - for monitoring printer status
U	EPSON Stylus DX6000 Series	E_FATIBIE.EXE	"Epson Status Monitor 3 for the Stylus DX6000 Series printer - for monitoring printer status
U	EPSON Stylus DX7000F Series	E_FATIBKE.EXE	"Epson Status Monitor 3 for the Stylus DX7000F Series printer - for monitoring printer status
U	EPSON Stylus DX7400 Series	E_FATICDE.EXE	"Epson Status Monitor 3 for the Stylus DX7400 Series printer - for monitoring printer status
U	EPSON Stylus DX8400 Series	E_FATICEE.EXE	"Epson Status Monitor 3 for the Stylus DX8400 Series printer - for monitoring printer status
X	fddddHOME	dxxatp.exe	"Added by the RANKY.AA TROJAN!"
Y	H2O	cledx.exe	"Related to copyright protection products by SyncroSoft"
U	Index Washer	WashIdx.exe	"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
U	IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}	NMIndexStoreSvr.exe	"Indexing service that catalogs all the media on your computer so that the files are available to all of the programs in the Nero suite of applications"
U	KADxMain	KADxMain.exe	"System Tray access to IntelliSonic Speech Enhancement - by Knowles Acoustics. Designed to render speech from a user selectable direction
N	kdx	KHost.exe	"Verisign Kontiki Delivery Management System - Windows-based client software that enables secure delivery of content to users' desktops"
X	Micr0s0ft Ms D0s	msdx.exe	"Added by the RBOT-AON WORM!"
X	Microfot Update	winldx32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update	wuamgrdx.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Microsoft Update Machine	WUAMGRDXS.EXE	"Added by the RBOT-GL WORM!"
X	Microsoft Update Machine	jkydxg.exe	"Added by the RBOT.AEA BACKDOOR!"
X	MS DirectX Sound Drivers	msdrvdx.exe	"Added by the RBOT.BCX WORM!"
X	MS DVD DirectX Dll Drivers	mdxdl.exe	"Added by the SDBOT-XI WORM!"
X	MS DVD DirectX Sound Drivers	msdrvdx.exe	"Added by the SDBOT-XJ WORM!"
X	od-stndxx	od-stndxx.exe	Adult dialler - xx can be any number
U	ODBC BackUp	fdxxl.exe	"G Data ""PC Spion"". PC monitoring and surveilling software
U	PDVDDXSrv	PDVDDXSrv.exe	"Remote Control background application for Cyberlink's PowerDVD DX - a Dell specific version of their standard PowerDVD product. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
X	Rnudll32	tadxtr.exe	"Added by the QQPASS-O TROJAN!"
X	sdxsys32	sdxsys32.exe	"Added by the BROGGER-A TROJAN!"
X	Service Manager	dxsound.exe	"Added by the PROXY-GRIC TROJAN!"
X	Sys-Stat	wuapdxe.exe	"Added by the SDBOT.HK WORM!"
X	sysdxvid	sysdxvid.exe	"Added by the DLUCA-S TROJAN!"
U	SysPilot	fdxxl.exe	"G Data ""PC Spion"". PC monitoring and surveilling software
N	TGPro Office	IdxOffice.exe	"With IdiomaX Office Translator ""you can translate documents directly from your favorite text editor (Microsoft Word
?	VDI Manager (HP)	HPO0VDX05.exe	"HP (Hewlett-Packard) related. Now - what does it do?"
U	washindex	washidx.exe	"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
X	win32Kernel	findx.exe	"Added by the BANLOA-EY TROJAN!"
X	windows Loadxm	Win_.exe	"Added by the FODDER-A TROJAN!"
X	xdxqa	dewa.exe	"Added by the SDBOT-YB WORM!"
X	Zstart	cxdxregt.exe	"ZenoSearch adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.