Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
NCompaq Internet Setupinetwizard.exeFor Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
UCPQInet Runtime ServiceCpqInet.exe"For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers"
YFltProcessmsinet.exe"Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done"
XINETinetsync.exe"Meplex adware"
XInet DataBaseInetdbs.exe"Added by the QEDS WORM!"
XInet Deliveryinetdl.exe"Inet Delivery adware"
XInet Deliveryinetdl_2.exe"Inet Delivery adware"
XInetapiNetapi.exe"Added by the NETDEVIL.14 TROJAN!"
XInetChkms[random value].exe"Added by the AGENT-IRL TROJAN!"
Uinetcntrlinetcntrl.exeBsafe Online - internet filter
?InetConfinetconf.exe"??"
UInetdINETD32.EXE"Windows Inet Daemon from Hummingbird Communications. ""Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons"". Provides PCs with the full functionality of a UNIX workstation"
Uinetinfo.exeinetinfo.exe"Executable used by MS Internet Information Server (IIS). If it's running
Xinetinfomon managerinetinfomon.exe"Added by the DONBOMB.A TROJAN!"
Xinetmgrinetmgr.exe"Actual Names (AdvSearch) Internet Keywords parasite"
XInetMSNmsnet.exe"Added by a variant of the SDBOT TROJAN!"
XInetServiceswsock32.exe"Added by the WOCK32-A TROJAN!"
XInternet Serverinetsrv.exe"Added by the STARTPA-EM TROJAN!"
XISSinet.exe"Meplex adware"
Xload=inetinfo.exe"Added by the PROXY-GG TROJAN!"
XMachineTestCMagesta.exe"Added by the SDBOT-NE WORM!"
XMicrosoft Inet Xp..teekids.exe"Added by the BLASTER.C WORM!"
XMicrosoft Internet Dumping Protocolinetdump.exe"Added by the IRCBOT.BLL BACKDOOR!"
XMicrosoft Internet Syncinginetsync.exe"Added by the IRCBOT.BLL BACKDOOR!"
XMicrosoft Kinetik Svcmsftksvc.exe"Added by the AGENT.AGDO TROJAN!"
XMicrosoft System Checkupinetman.exe"Added by the DONK.O WORM!"
XMMicrosoft Security Managementinetforn.exe"Added by the RBOT.AFZ WORM!"
XMsinetMsinet.exe"Added by the RBOT-AOA WORM!"
NOnlineTimeonlinetime.exe"OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs"
Xruninetinfo.exe"Added by the BINGHE TROJAN!"
XRundll32_8"rundll32.exe inetp60.dll DllRunServer"
XSecurity Antivirus Xp 1inetfor.exe"Added by the SDBOT.BAV WORM!"
Xsvchostinetinfo.scr"Added by the ODELUD WORM!"
XSysteminetinfo.exe"Added by the PARDROP-A TROJAN!"
XSystem Update2wininet.exe"Added by the AUTOTROJ-C TROJAN!"
XSystem64inet.exe"Added by the DENGLE-A TROJAN!"
XWindows Internet Servicewininet.exe"Added by the RBOT-AUX WORM!"
XWindows Updateinetinf.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XWinINetservices.exe"Added by the SOBER.R WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus and note the space at the beginning of the ""Startup Item"" field"
Xwininetwininet.exe"Added by the STUBBOT-C WORM!"
Xwininet.dllregperf.exe"Added by the ZLOB TROJAN and variants!"
Xwininet32wininet32.exe"Added by the RAZNEW-A TROJAN!"
Xwininetdwininetd.exe"Added by the WINET TROJAN!"
XWins Service Driverwinet.exe"Added by the RBOT-APV WORM!"
X_WinINetservices.exe"Added by the SOBER.R WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.