Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
UACWLIconACWLIcon.exe"Part of the ThinkVantage Access Connections connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
NADSL Diagnostic Toolsmapiicon.exeSystem tray access to ADSL modem diagnostic tools. Available via Start -> Programs
NAGEIA PhysX SysTrayTrayIcon.exe"System Tray access to display properties for AGEIA PhysX graphics cards. Unless you change your desktop resolution
NAmerica Online *.* Tray Iconaoltray.exe"Adds the AOL icon in the System Tray (*.* denotes version if present) for versions of AOL up to and including 9.0. Start AOL via the desktop or quick launch shortcuts or via Start → All Programs"
UAmIcoSinglunAmIcoSinglun.exe"Single LUN Icon Utility - System Tray access/notification for card readers using controllers from Alcor Micro which incorporate Single LUN
XASDPLUGINmexico.exe"AsdPlug premium rate adult content dialer"
XASP.NET State Serviceservicos..exe"Added by the DADOBRA-I TROJAN!"
XAuto File System Conversion Utilityscricon.exe"Added by the SDBOT.EYB WORM!"
UAXIS Print System TrayIconTrayIcon.exe"System Tray access to AXIS Print System from AXIS Communications - ""adds printer discovery
UBoingo Wireless UtilityIcon###XXX#X#.exe"Starts the Boingo Wireless utility
UCacheBoosttrayicon.exe"CacheBoost ""optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers
UCCUTRAYICONCCU_TrayIcon.exe"Related to Traybar Launcher from Intel Corporation belonging to Intel® Viiv®"
UChangeICONSPMSMON.EXECard reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem
UChicoSyswebtmr.exe"Child Control parental control software"
XCli Confgcliconfig.exe"Added by a variant of the SPYBOT WORM! See here"
XCLICONFGCLICONFG.EXE"Added by the OPASERV.T WORM!"
UDesktopIconToyDesktopIconToy.exe"""Desktop Icon Toy is an easy to use desktop icon enhancement tool
NDiskeeperSystrayDkIcon.exe"DisKeeper defragmentation software - can be started manually"
NDisplayTrayIconTrayIcon.exe"System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution
UDriveIconsDriveIcon.exe"Drive Icons from Realtek - shows a specific icon for each card type for their card reader controllers"
UDrvIconDrvIcon.exe"""Vista Drive Icon changes the drive icons shown in Windows ""My Computer""
UE-colorIconMgr.ExeSets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
UEicon NetworksLAN_DAEMONwatch.exe"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
UEicon TechnologyLAN_DAEMONwatch.exe"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
UELBERTRicoh_S2PScan2pc.exeScan to PC application for the scanning function of the Ricoh MFP Type 104 multifunction printer
UEnterra Icon KeeperIcnKeepr.exe"Icon Keeper - ""tool to save and restore icon positions on the desktop"""
UeScan UpdaterTrayicos.exe"MicroWorld eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads"
NEvent Planner Reminders Tray IconPLNRnote.exePart of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
UFujitsu MenuFjMnuIco.exe"From the ""Fujitsu Menu"" tray icon you have instant access to the Control Panel
UGetRight - Tray Icongetright.exe"Entry added with older versions of the GetRight download manager from Headlight Software
UGoBack Tray IconGBTray.exe"Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users
NGsiconexeGsicon.exe"ADSL modem monitor from Eicon Networks (as used by BT for its Broadband internet service for example). Can safely be disabled without affecting the connection - all this does is give an indication of connectivity and access to the diagnostic facilities"
?HsuGuiControlHsuGuiControl.exe"Part of the Starband Internet satellite client. What does it do and is it required?"
UICOICO.EXE"Found on some Sony Vaio
NIcon AnimationHDE.EXEPart of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
NIcon Hearit 95hearit95.exeAudio desktop customization utility from Moon Valley Software. Resource hog
NIcon Hearit 98hearit98.exeAudio desktop customization utility from Moon Valley Software. Resource hog
XIcon lptt01icon.exe"RapidBlaster variant (in a ""Icon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XIcon ml097eicon.exe"RapidBlaster variant (in a ""Icon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Yiconcacheicon.bat"Related to the Vista Customization Pack"
YICONCLNTiconclnt.exe"APC PowerChute® Personal Edition tray icon"
UICONDESKICONDESK.EXESmall utility which will allow you the option of hiding or showing your desktop icons
NIconfig.exeIconfig.exeIcon for LS-120 "Superdisk"
XiConfigLoaderDIIhost.exe"Added by the GAOBOT.AO WORM!"
NIconoidIconoid.exe"Iconoid is a desktop icon manager"
NIconsaverIconsaver.exe"IconSaver is a desktop icon manager"
UImgIconImgIcon.exe"Displays Iomega icons in Explorer/My Computer
NIntel PROSet Tray Iconpromon.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
UIomega Disk IconsIMGICON.EXE"Displays Iomega icons in Explorer/My Computer
UIomega Drive IconsIMGICON.EXE"Displays Iomega icons in Explorer/My Computer
UIomega ImIconXPimiconxp.exe"Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system
UIW_Drop_Iconiwctrl.exe"Pinnacle Systems InstantWrite enables you to use your CD-R
UJOYTECH USB Neo S ControllerJoytechNeoSTrayIcon.exe"System Tray access to Joytech Neo S PC gamepad controller software"
UKONICA MINOLTA magicolor 2400W STDMSTMON_S.EXEKonica Minolta Magicolor 2400W colour printer monitor
?KYE_Showiconshwicon.exe"Card reader for memory cards from digital cameras. Is it required? "
NLIURubicon.exe"Logitech Internet Update. Used to update drivers/software for Logitech's Wingman
NM-Audio Delta Taskbar IconDeltTray.exeM-Audio Delta Control Panel for M-Audio brand Delta series audio cards. System Tray access to audio settings - available through Control Panel
UM-Audio Taskbar IconDeltaIITray.exe"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
XMCMAGICON.EXE"Added by the MAGICON.A TROJAN!"
UMCI USB IconUSBIcon.exeMCI USB software used for managing a USB card reader
UMediafour XPlay Tray Notification IconXptryicn.exe"Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod"
UMediafour XPlay Tray Notification IconXptryicn.exe"Xplay 2 from Mediafour Corporation - ""expands what you can do with any iPod
XMicosoft Data Corerunservice.exe"Added by the IRCBOT.BK WORM!"
XMicosoft Data Core stuffsvshosts.exe"Added by the RBOT.FZA WORM!"
XMicosoft Startupsyscall.exe"Added by the SDBOT-JI WORM!"
XMicosoft Startupsystall.exe"Added by the SDBOT-GM BACKDOOR!"
XMicrosoft Officemsoicons.exe"Added by the RBOT-ZI WORM! - NOTE - do no confuse with the legitimate Msoicons.exe file described here. The latter wil not be listed among your startups!"
XMicrosoft Update MachineMSOICONS.EXE"Added by the RBOT.AWS WORM! Note - do no confuse with the legitimate Msoicons.exe file described here. The latter should not normally figure in Msconfig/Startup!"
UMouse Suite 98 DaemonICO.EXE"Found on some Sony Vaio
XMSI Configurationmsiconf.exe"Added by the AGENT.AKSZ TROJAN!"
Xmsiconf.exemsiconf.exeAdded by a variant of the FAKEALERT TROJAN!
UMyEmoticonsMYEMOTICONS.EXE"MyEmoticons from Persona Ltd - add icons (emoticons) to your E-mail"
NNeroNETTrayIconNNServiceCtrl.exe"System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network"
XObjectDockBrico.cmd"Added by the BOBANDY-A WORM!"
NPaperQuote System Tray IconPQTRAY.EXEPaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation
UPicoZipPicoZipTray.exe"System tray access to PicoZip - ""an easy to use Zip and UnZip utility that runs on all 32-bit Windows platforms such as Windows 95
NPocketCam 3Mega MonitorICON.exeInstalled with the Aiptek PocketCam 3Mega digital camera. Automatically invokes an import process if the camera is connected and has media on it
UPowerTools Tray Iconpttray.exe"PowerTools - add-on for AOL"
UQchex Tray IconQchex.exe"Related to G7 Productivity Systems Check Software"
UQCWLICONQCWLICON.EXE"Part of IBM Access Connections - forerunner to the current ThinkVantage verison. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
UR2Ricoh_S2PScan2pc.exeScan to PC application for the scanning function of the Ricoh MFP Type 103 multifunction printer
Ureadericonreadericon45G.exeTray icon to set various configuration settings for Sunkist (and maybe other) media card readers
?readericon10readericon10.exe"Related to a multimedia card reader - possibly based upon an Alcor Micro chipset. What does it do and is it required?"
URemote Data Backups TaskBar IconCBSysTray.exe"System Tray access to Remote Data Backups online system/data backup utility"
NRoboFormRoboTaskBarIcon.exe"Roboform - password manager and web form filler. Will work without this startup entry
USabre Task Tray IconSabstart.exe"Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines
NSandIconSandIcon.exe"SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds
Xservicoservico.exe"Added by the BANKER-DKE TROJAN!"
XServicosAdobeLanc.exe"Added by the BANKER-EHR TROJAN!"
XServicosSystem.exe"Added by the BANCOS-BCM TROJAN!"
?ServUTrayIconServUTray.exe"System Tray icon for Serv-U FTP server. Is it required?"
NSetIconSetIcon.exe"Installed by a 6-in-1 (4 Media Card slots
Nshicoxpshicoxp.exeInstalled with the drivers for multi card readers of various brands. To differentiate between the various card slots on multi slot readers the shicoxp.exe file assigns and loads unique drive icons for the various card slots that are displayed in Windows Explorer
?ShowIcon_Justrams_USB Product Driver v2.12r012shwicon.exe"Related to Just Rams USB product driver. Is it required?"
UShowIcon_PNY_PNY Attachéshwicon.exe"PNY Attaché USB flash memory stick System Tray icon - shows when the device is plugged in"
?ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051shwicon.exe"Card reader for memory cards from digital cameras. Is it required? "
XSicomSicom.exe"Added by the NETLIP WORM!"
NSnsiconSnsicon.exeLaunches a screensaver program from Second Nature
USunkistshwicon98.exe"Card reader for memory cards from digital cameras
USunkist2kshwicon2k.exe"Card reader for memory cards from digital cameras
USunKistEMshwiconem.exe"Used by your computer to communicate with your Alcor Micro Multimedia Card Reader - necessary if you're using this software"
UTallyGenicom PanelMgrSSMMgr.exe"Monitors ink levels
UThinkVantage Access ConnectionsACWLIcon.exe"Part of the ThinkVantage Access Connections connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
Utranicontranicon.exe"A Tweak-XP component (only in the registered version)
UTransparentIconstranicon.exe"A Tweak-XP component (only in the registered version)
YTridentTVIcontvicon.exe"Trident Microsystems
UTrue Internet Color Iconinternetcolor.exe"Part of 3Deep® from E-Color (now superseded by 3DxWizzard™) - ""With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"""
NTurbine Download Manager Tray IconTurbineDownloadManagerIcon.exe"Turbine Download Manager (TDM) - download manager associated with the game ""The Lord of the Rings Online™"""
?tweakicotweakico.exe"May be a HP program to control their icons?"
UUberIconUberIcon Manager.exe"Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders"
XVagiconlinevadaSq.exe"Added by the SDBOT-TD WORM!"
NWar FTPD Tray Iconwartray.exe"War-ftpd - FTP server"
XWifi Configurationwificonfig.exe"Added by the IRCBOT.AWB BACKDOOR!"
XWifi Configuration!wificonfigs.exe"Added by the IRCBOT.AWB BACKDOOR!"
XWifi Connectionwificon.exe"Added by the SLENFBOT.AC WORM!"
XWifi Connection!wificonnect.exe"Added by the IRCBOT.XEL BACKDOOR!"
XWindows Icons Managerwicomgr.exe"Added by the RBOT-AIF WORM!"
XWinsock2 LoaderWICONF.EXE"Added by the SDBOT-LA WORM!"
XWINTASKyahooicons.exe"Added by the MYTOB-HM WORM!"
NWOOTASKBARICONGestMaj.exe TaskbarIcon.exe"Wanadoo broadband ISP (now rebranded as Orange) taskbar icon - not required"
UXemiCoADC.EXE"XemiComputers Active Desktop Calendar"
UXemiComputers SchedulerScheduler.exe"Smooth Program Scheduler from XemiComputers ""will start any program you want at a scheduled time"""
?xiconxicon.exe"Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?"
NYBrowserybrwicon.exeSBC Yahoo! Browser system tray icon
YZENRC Tray Iconzentray.exe"Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Best left alone"
UZipDisk IconsIMGICON.EXE"Displays Iomega icons in Explorer/My Computer


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.