Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X.protectedN/A"Smitfraud variant"
N/l:engN/A"Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup
N/sN/A"Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup
?17779Proj2002N/A"??"
NARCSolo RecoveryN/ABackup software by Computer Associates - no longer supported
NBatchreg1N/A"Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation
XccAppsN/A"Added by the KANGAROO-A TROJAN!"
?DashIEN/A"Could be related to "Dash Power Shopping" tool bar in IE?"
?DatecheckerN/A"Could be related to this?"
?DDTN/A"??"
XDLHelperEXE.exeN/ADownloader for Microgaming/Casino software - stealth installed
XHostN/A"Added by the POPDIS or STARTPAGE.F TROJANS!"
Nhpoddt01.exeN/A"Installed by the ""HP Photo and Imaging Director"" software. If you ask for the imaging software
YHWinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
YIPinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
?IZEN/A"??"
YLASTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
XMCN/A"Added by the SIMCSS TROJAN!"
XMSupdate.exeN/A"CoolWebSearch parasite variant - resets home page to an adult content site"
XMSupdater.exeN/A"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
Yn/a TpShocksTpShocks.exe"Part of the Active Protection System found on some IBM/Lenovo Thinkpad models - including the T
XnAv AGENTN/A"Added by the RIOSYS MACRO! Note the lower-case ""n"" and ""v"" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes"
?NCClientN/A"??"
UpiiserviceOEN/A"Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE"
NRecoverN/AAdded during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete
?regtmlpN/A"??"
?RTStartMuteN/A"??"
XrvdeN/ARelated to li-speed****
XScanRegistryN/A"Added by the DINOXI or DINOXI.B WORMS!"
XSchedulingAgentN/A"Added by the DINOXI or DINOXI.B WORMS!"
YSOFTinstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
XSymRunN/A"Added by the KANGAROO-A TROJAN!"
?TDockNUndockN/A"Found on a Toshiba laptop - for use with a docking station?"
?TheMainStartN/A"??"
?TWarmBayN/A"Found on a Toshiba laptop. Related to hotswap bay management?"
?TWBbtnN/A"Found on a Toshiba laptop"
YUTILsInstN/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
NWaveTop Receiver 1N/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
NWaveTop Receiver 2N/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
NWaveTop Upload ManagerN/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
XWindows Update.exeN/AHomepage hijacker
XWinlogon.exeN/A"CoolWebSearch parasite variant - resets home page to an adult content site"
NWMBootN/A"Associated with Logitech Wingman game controllers. Not required but what does it do?"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.