Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.


  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

Startup Name Process Name Details
X.msfupdatemsveup.exe"Added by the ALLOCUP.A WORM!"
XASDPLUGINfullgames.exe"AsdPlug premium rate adult content dialer"
XCall Function System32sddriver.exe"Added by a variant of the SDBOT TROJAN!"
Ucapfupgradecapfupgrade.exe"CA Personal Firewall - part of the CA Internet Security Suite"
XConfiguration Loader 2confuldr.exe"Added by the AGOBOT-FC WORM!"
UDisplayFusionDisplayFusion.exe"DisplayFusion from Binary Fortress Software - ""is a fantastic application that can make your dual monitor (or triple monitor or more) life much
XDyFuCAoptimize.exe"Adult content dialler - see here"
XDyFuCA Active Alertactalert.exe"Adult content dialler - see here"
Xelement furth[path] repcale.exe [path] palsp.exe"Added by a variant of the RANDON.AN WORM! Both files are often located in %System%\vert"
XFUFUvirus.exe"Added by the VB-EJC TROJAN!"
XFuckD3w4FuckD3w4.exe"Added by the BRONTOK-DI WORM!"
XFuckerfucker.vbs"Added by the CATCHER-A WORM!"
UFujitsu Hotkey UtilityIndicatorUty.exe"Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook
UFujitsu MenuFjMnuIco.exe"From the ""Fujitsu Menu"" tray icon you have instant access to the Control Panel
Xfukerservicefukerz.exe"Added by a variant of the RBOT WORM!"
XFUKLBARbar.exe"PurityScan adware"
NFullAudioWMPImporter.exeUsed to import settings from Windows Media Player into Music Now software (from - which is no longer available) and possibly others
XFunFun.exe"Added by the COIDUNG-A WORM!"
NFusionHdtvTrayFusionHdtvTray.exe"FusionTrayAgent - main executable for DVICO FusionHDTV software. It adds an icon to system tray that allows you to easily access Fusion HDTV software"
UFusionRCFusionRC.exe"Remote control manager for DVICO FusionHDTV"
UFusionRemoteFusionRc.exe"Remote control manager for DVICO FusionHDTV"
NFusionTrayAgentFusionHdtvTray.exe"FusionTrayAgent - main executable for DVICO FusionHDTV software. It adds an icon to system tray that allows you to easily access Fusion HDTV software"
Xinfusinfus.exeAdult content dialler
UInfuzerInfuzer.exe"Infuzer - ""is a service that copies dates from the web or an email straight to your electronic calendar"". Beware of the following adware trait - ""Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them
XJufualtwinxp2.exe"Added by the SDBOT-AAB WORM!"
XJufualtsvhost.exe"Added by the SDBOT-ADJ WORM!"
XJufualtjava2.exe"Added by the SDBOT.AOE WORM!"
XK2ps_full.taskK2ps_full.exe"Added by the JUNTADOR.K TROJAN!"
XKL AntiFunLoveflcss.exe"Added by the FUNLOVE.4099 VIRUS!"
ULGODDFUfwupdate.exeAuto firmware update program for LG Electronics CD-ROM/DVD writer
ULoadFujitsuQuickTouchQuickTouch.exeMaps the keys on a Fujitsu Siemens Lifebook application panel to various programs and functions
XMicrosoft DLLfumeta.exe"Added by the RBOT-AUG WORM!"
UMindfulMindful.exe"Mindful from Felitec inc. ""Event reminder software with date and time tools in a simple to use system tray application"""
XMS System Call Functionmsscf32.exe"Added by the RBOT-GBZ WORM!"
XMSN Funny Imagesimsngsr.exe"Added by the AGOBOT-TT WORM!"
XMsServermsfun80.exe"Added by the VB-CYG WORM!"
UMulti-function keyboardGWHotkey.exe"Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail
NOfotoNow USB Detection"Rundll32.exe OFUSBS.DLL WatchForConnection OfotoNow"
XPopup Defence Updaterregsvr32 pdfupd.dll"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
NReality Fusion GameCam SERFTRay.exeReality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs
Xreg_keyFUKULAMER.exe"Added by the BEAGLE.AH WORM!"
XSDK Codre Function22sdkimddprovment2.exe"Added by the SDBOT-YJ WORM!"
XSDK Core Functionsdkimprovment.exe"Added by the RBOT.BHL WORM!"
XSDK Core Function2sdkimprovment2.exe"Added by the SPYBOT.OGX WORM!"
?SoundFusionrundll32 cwcprops.cpl"Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?"
?SoundFusion"rundll32 hercplgs.cpl BootEntryPoint"
?SoundFusion"RunDll32 cwaprops.cpl C25CrystalControlWnd"
Xstartkeyfurzi.exe"Added by the BIFROSE-OK TROJAN!"
Xsuperfuckbx.exe"Added by the LINEAGE-H TROJAN!"
USurfSecretss2-full.exe""House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray
YTBLFUNCtblmouse.exe"Aiptek HyperPen graphics tablet driver"
XTerminal Updatebiosefui.exe"Added by the PPDOOR-O TROJAN!"
UTFunckeyTFuncKey.exeDeals with the <Fn> - <Function> key combinations on a Toshiba laptop
Xuseful-softsvchst.exe"Added by the STARTPA-HH TROJAN!"
XUserinterface Reporterfuuuucktttttt.exe"Added by the MYTOB-DK WORM!"
Nwkfudwkfud.exeA marketing program for MS Works
NWorksFUDwkfud.exeA marketing program for MS Works
Xxmnfuruwkrnxntup.exe"Added by the ORCU.B TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.