Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
U12Ghosts Clip12clip.exe"12Ghosts Clip - ""Screen shots made easy"""
N12Voip12Voip.exe"12Voip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
XashDip.exeashDip.exe"Added by the DROPR-CZ TROJAN!"
XAtiPanelatip.exe"Added by the TACTSLAY.U TROJAN!"
NB'sCLiPBSCLIP.exeCD recording utility that comes with a lot of CDR/CDRW drives and isn't required
UBack2zipBack2zip.exe"Back2zip is a simple and elegant backup solution which uses the industry's most powerful ZIP and ZIP-64 technologies to constantly monitor your documents and make sure that they are always properly backed up"
?BIOVCIPBIOVCIP.exe"??"
NBsCLiPBSCLIP.exeCD recording utility that comes with a lot of CDR/CDRW drives and isn't required
NBudgetSipBudgetSip.exe"BudgetSip - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
NCOM-IPCOMIP.EXECOM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
NInterVoipInterVoip.exe"InterVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
XIPIP.EXE"Added by the AGOBOT-QO WORM!"
UiProtectYouip.exe"iProtectYou - internet filtering/parental control and network monitoring software"
NJustVoipJustVoip.exe"JustVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
XLoadersHeIp.exe"Added by the SDBOT-ADB WORM!"
NLotus Organizer EasyClipeasyclip.exe""The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address
NLowRateVoipLowRateVoip.exe"LowRateVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
UMemoryZipperPlusmemzip.exe"Memory Zipper Plus - ""optimizes the memory management of your system and boost-up its performance amazingly!"""
Xnetzipsvzip.exe"Added by the DELF.ZWL TROJAN!"
NPowerStrippowerstrip.exe"PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings"
NPowerStripPSTRIP.EXE"PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings"
NReclipreclip.exe"Reclip Popup Clipboard manager"
?run=wallflip.exe"Desktop wallpaper changer?"
XSafeStripSafeStrip.exe"SafeStrip rogue security software - not recommended
NSparVoipSparVoip.exe"SparVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
XSystem IPsystemip.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
UTabletTiptabtip.exeThis is the Tablet PC Input Panel for Windows XP Tablet PC Edition. This utility allows you to use a pen (in conjunction with a touchscreen or tablet) to enter text into a document or input field (such as a URL in a browser) using either handwriting or the on-screen keyboard. This utility is also included with Windows 7 and Vista but only appears to run at startup if using the XP Tablet PC version. This cannot be confirmed at present
XTCPIP Protocolmstcpip.exe"Added by the SDBOT-LR WORM!"
Xtopatzlip.exe"Added by the FLOOD-IG TROJAN!"
?USBToolTipUSBTip.exe"Related to Pinnacle Systems Inc. What does it do and is it required?"
UVisualTooltipVisualToolTip.exe"Related to VisualTooltip. Shows a thumbnail of a window by placing the mouse cursor over a button on the taskbar"
Xw7zipw7zip.exe"Added by the BANCBAN-QB TROJAN!"
Uwait4IPwait4IP.exe"Packard Bell net2Plug allows you to network PCs anywhere in your house"
XWindows Service AgentWinTcpip.exe"Added by the SPYBOT.AP WORM!"
UWinFlipWinFlip.exe"WinFlip from Tokyo Downstairs - a 'Flip-3D' task switcher alternative to the standard Alt+Tab on Windows XP that adds the equivalent 'Aero' feature from Windows 7 and Vista. You can either click on the tray icon
UWinFlip.exeWinFlip.exe"WinFlip from Tokyo Downstairs - a 'Flip-3D' task switcher alternative to the standard Alt+Tab on Windows XP that adds the equivalent 'Aero' feature from Windows 7 and Vista. You can either click on the tray icon
Xwinzipwinzip.exe"Added by the RBOT.BDA WORM! Note - this is not part of the popular WinZip file compression utility"
XWinZip UpdateWinZip.exe"Added by a variant of the RBOT WORM! Note - this is not part of the popular WinZip file compression utility"
NYankee Clipper IIIYankClip.exe"Yankee Clipper III - 'A super powerful Windows clipboard extender/memory - now in its third generation. Handles Pictures


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.