Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Xatisrc2windfind.exe"Added by the WINDFIND-A TROJAN!"
NAvaFindAvaFind.exe"AvaFind file search utility"
XBrowseProxyFindService.exe"Actual Names (AdvSearch) Internet Keywords parasite"
NCorelMedia FoldersIndexer8MFindexer.exePart of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
NCorelMedia FoldersIndexer8MFINDE~1.EXEPart of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
XDefault_Page_URLhttp://find.naupoint.com"Naupoint browser hijacker"
XDefault_Search_URLhttp://find.naupoint.com"Naupoint browser hijacker"
?dregfixph_finder.exe"??"
UEZ-DUB FinderEZ-DUB.exe"Support software for the Lite-On EZ-DUB external DVD writer from Lite-On IT Corporation"
?file indexing servicemsfindfile.exe"New version of MS FindFast and still a resource hog?"
XFindfind.exe"Added by the OPANKI WORM!"
NFind FastFindfast.exeFrom older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier. When indexing is in progress it can use lots of CPU time and memory - especially on slower/older machines
YFind Virus Launch Programfvlaunch.exe"Part of Dr. Solomon's Antivirus"
Xfindfastfindfast.exe"Added by the DLOADER.PFR TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office"
Xfindfast.exefindfast.exeIdentified as the RUNDIS.A TROJAN! Note - the is not the legitimate file of the same name installed with older versions of MS Office
XFindHack[path to worm]"Added by the KELVIR-BA WORM!"
XFirst Home Pagehttp://find.naupoint.com"Naupoint browser hijacker"
UHPLogiFinderhp_finder.exeHP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
XInstafinderinstafinder.exe"TopSearch.D adware"
XInstaFinderKInstaFinderK inst.exe"InstaFinder adware"
XLocal Pagehttp://find.naupoint.com"Naupoint browser hijacker"
XMicrofinder lptt01mcf.exe"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XMicrofinder ml097emcf.exe"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
NMicrosoft Find FastFindfast.exeFrom older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier. When indexing is in progress it can use lots of CPU time and memory - especially on slower/older machines
UMicrosoft Location FinderLocationFinder.exe"Microsoft Location Finder ""is a client-side application that turns a regular WiFi enabled laptop
UMicrotek Scanner FinderScannerFinder.exeMonitors whether a scanner is present. Provided with Microtek scanners
XMsfindMsfind.exe"CoolWebSearch parasite variant"
XMSFind32msfind32.exe"Added by the CAYAM WORM!"
Xmsfindosa.exemsfindosa.exe"Added by the DOWNLOADER-BS TROJAN!"
XProSiteFinderprositefinder.exe"ProSiteFinder adware"
NQuickFinder SchedulerQFSCHD100.exeUsed in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
NQuickFinder SchedulerQFSched.exeUsed in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
NQuickFinder SchedulerQFSCHD110.EXE"Used in Corel WordPerfect Office 11 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
NQuickFinder SchedulerQFSCHD130.EXE"Used in Corel WordPerfect Office X3 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
XSearch Pagehttp://find.naupoint.com"Naupoint browser hijacker"
XStart Pagehttp://find.naupoint.com"Naupoint browser hijacker"
Xwin32Kernelfindx.exe"Added by the BANLOA-EY TROJAN!"
XWindows Service Findwrfkuk.exe"Added by the IRCBOT-XZ TROJAN!"
NWkUFindWkUFind.exe"MS Works Update Detection. MS Picture It! (versions 7 to current) use this automatic update feature during the log on process. It can also cause your system to automatically dial into your ISP as it tries to access the internet
XZango SiteFinderZangoSiteFinder.exe"ZangoSearch adware variant"
X[various names]KeywordFinder.exe"Wareout - malware masquerading as a spyware and dialer remover"
X[various names]RtlFindVal.exe"Wareout - malware masquerading as a spyware and dialer remover"
X_x-Finder_x-Finder.exeDisconnects and redials an ISP modem to an adult content site


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.