Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X.mscsblsvhost.exe"Added by the CMQ TROJAN!"
X.nvsvcbsmssb.exe"Added by the BOXED.CG TROJAN!"
X6-susilo bsby.exe"Added by the BRONTOK-CR WORM!"
U802.11b+g USB Wireless LAN UtilityZDWlan.exe802.11b+g USB Wireless LAN Utility
UACU_QSBACU.exe"Atheros wireless Client Utility"
XAdobesysbat32.exe"Added by the LOWZONES.T TROJAN!"
XAdsBlockerstopAds.exe"AdsBlocker - detected by NOD32 as DIALER.DW!"
YAiptek Graphics Tablet (USB)atwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
?AliUSBfixGREENMK.exe"May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?"
YAlps Electric USB ServerMonserv.exe"Alps Electric USB Server - required according to this article"
XAntiSpyBossasb32.exe"AntiSpyBoss rogue security software - not recommended
XAntivirusBESTInstaller.exe"Installer for the AntivirusBEST rogue security software - not recommended. Removal instructions here"
XAntivirusBESTabest.exe"AntivirusBEST rogue security software - not recommended
XApplicationProtocolRunsmsbvl32.exe"Added by the IRCBOT-CX TROJAN!"
Yatwtusbatwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
XavscanUsbconeted.exe"Added by the PROVIS-A TROJAN!"
?Bart Stationstation.sbrt"Related to PeoplePC ISP. May be a dialler for dial-up accounts?"
UBAUSBBAUSB.exe"Boston Acoustics Audio
XBcvsrv32msbvd32.exe"Added by the AGOBOT-SR WORM!"
UBelkin F5D8053 N Wireless USB Adapter UtilityBelkinwcui.exe"Wireless configuration utility for the Belkin F5D8053 N Wireless USB Adapter"
UBelkin Wireless USB UtilityBelkinwcui.exe"Wireless configuration utility for the Belkin F5D7050 Wireless G USB Adapter"
YBigPondWirelessBroadbandCMBigPond_CM.exe"Related to BigPond_Wireless_Broadband Service by Telstra"
YBredbandsbolagetservicecenter.exe"Related to the Brebband Swedish Broadband provider"
XCasino Royalejamesbond.exe"Added by the RBOT-FZO WORM!"
UCDLoadersb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
YD-Link Air USB UtilityAirCFG.exeD-Link Air USB wireless driver and configuration utility
Xdelmsbbdelmsbb.exe"180Search adware"
?Disable EHCInousb20.exe"??"
?Dosbat??"??"
XDSBDSB.exe"EnergyPlugin adware"
UDT 11Mbps WLAN USB StationDTUSBMonitor.exe11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
NEapcisetupsbsetup.exeRockwell RipTide soundcard application software. Sound works without it
NEasy Start Buttonesb.exeProvides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
XEasySearchBarESBUpdate.exeEasySearchBar adware downloader
UELSBLaunchELSBLaunch.exe"EarthLink SpamBlocker"
UESBesb.exeEasy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
UFTMSFLT(USB)FTMSFLTU.EXEFujitsu's Touch Panel Message Notifier
Xgdagdgajsbbsbw.exe"Added by the SDBOT-QX WORM!"
UGene USB MonitorUSBMonit.exeMonitors USB ports for insertion of Sandisk USB flashdrives
YGenie USB MonitorUSBmonitor.exePort monitor for an external USB hard drive. Required to enable access to the drive
UHPDJ Taskbar Utilityhpztsb01.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb02.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb04.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb05.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb07.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb09.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb06.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb08.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb03.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb10.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb11.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb12.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb13.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsb02hpztsb02.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsb04hpztsb04.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsb05hpztsb05.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsb07hpztsb07.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsb09hpztsb09.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
Uhpztsbolhpztsbol.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UInstant Wireless Configuration UtilityWUSB11cfg.exe"Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
XiPOD USB DriverIPODUSB.EXE"Added by a variant of the RBOT WORM!"
XiPod USB ServiceiPODService.exe"Added by a variant of the RBOT WORM! Do not confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the %ProgramFiles%\iPod\bin folder and is implemented as a system service
XIPOT USB Service DRIVERhpsebc087.exe"Added by the SDBOT-WA WORM!"
XIPOT USB Service DRV32hpsebc08.exe"Added by the SDBOT-WH WORM!"
Nipwusbipw.exe"Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to ""make and receive free Internet calls on your regular phone"" whilst ""at the same time
UISBMgr.exeISBMgr.exeRelated to Sony ISB Utility
UJOYTECH USB Neo S ControllerJoytechNeoSTrayIcon.exe"System Tray access to Joytech Neo S PC gamepad controller software"
Xkfienqmasbl.bat"Added by the KIFER TROJAN!"
ULanguageMonitorOplmsb01.exeOKI Printer language support monitor
?Lasbewat.exe"??"
Ylsburnwatcherlsburnwatcher.exe"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
YLSBWatcherlsburnwatcher.exe"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
UMCI USB IconUSBIcon.exeMCI USB software used for managing a USB card reader
UMicrosoft Broadband NetworkingMSBNTray.exeMicrosoft Broadband Networking Tray Application
XMicrosoft Buffer Appmsbuffer.exe"Added by the SLINBOT.NQ BACKDOOR!"
XMicrosoft Service Bootsboot.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft SpAr Servicewinsbsd32.exe"Added by the RBOT-RN WORM!"
XMicrosoft Update USB2wuammgrd32.exe"Added by the RBOT-ADT WORM!"
XMicrosoft Updates 2 USBwgafixer.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Updates 5 USBsp3fixer.exe"Added by the RBOT-ADS WORM!"
XMicrosoft USB Windows2 Driverusbautotuner.exe"Added by the SILLYFDC.BCL WORM!"
XMicrosoft USB2 Drivercrmss.exe"Added by the RBOT-VK WORM!"
NMicrosoft Works PortfolioWksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file. Can be prevented from starting from a setting within Portfolio
Xminiportusb2chk.exe"Added by the LAZAR-A TROJAN!"
NMotive SmartBridgeMotiveSB.exe"System tray icon for the Virtual Assistant from AT&T Broadband
NMotiveSBMotiveSB.exe"System tray icon for the Virtual Assistant from AT&T Broadband
XMS USB 2.0 Windows Supportmsusb32.exe"Added by a variant of the RBOT WORM!"
XMSbackupsbackups.exe"Added by the BANLOAD-TL TROJAN!"
Xmsbbmsbb.exe"180Search adware"
XMsbb.exeMsbb.exe"Added by the SDBOT.QJ WORM!"
Xmsbcsmsbcs.exe"Added by the DADOBRA-G TROJAN!"
XMsBootMgr.exeMsBootMgr.exe"Added by the VERIFY TROJAN!"
Xmsbsc[path to trojan]"Added by the BANKER-DF TROJAN!"
Xmsnmsgq32sssasasb32.exe"Added by the TACTSLAY.F TROJAN!"
UMSRegScanSBPDemo.exe"SpyBoss Pro surveillance software. Uninstall this software unless you put it there yourself"
UMy Essentials Wireless USB UtilityO-Maxwcui.exe"Belkin My Essentials Wireless USB Utility"
XMy Web Search BarMWSBAR.DLL"MyWay - an IE Browser Helper Object used by adware WebSearch to add an IE toolbar to provide search features
XNLS MonBoardNSBARD.EXE"Added by the SPYBOT.T TROJAN!"
UNUSB3MONnusb3mon.exe"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
NOfotoNow USB Detection"Rundll32.exe OFUSBS.DLL WatchForConnection OfotoNow"
UOops!BackupOopsBackup.exe"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
UOopsBackupOopsBackup.exe"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
UOopsBackup.ManagerOopsBackup.exe"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
NPP****usbFBDirect.exe"Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan
?PspUsbCfPspUsbCf.exe"??"
URapid Restorerrpcsb.exe"XPoint ""Rapid Restore PC"" - ""a Managed Recovery solution that enables IT Administrators to protect the corporate image
URegUpdatesb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XRemote Terminal Taskrtsbsvc.exe"Added by the IRCBOT.AUZ BACKDOOR!"
UReproPRDPrdUsb.exe"Thrustmaster Corporation Presets application - a game controller driver
URun Nintendo Wi-Fi USB Connector Registration ToolNintendoWFCReg.exe"Related to Wi-Fi USB Connector from Nintendo"
?RUSBHOLoader"rundll32.exe RUSBHOLoader.dll AutoRegister"
USandboxieControlSbieCtrl.exe"""SandBoxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer"""
USBSB.exeAcer Soft Button on Acer Tablet PCs
XSBSpywareBomber.exe"SpywareBomber rogue spyware remover - not recommended
NSB Audigy 2 Startup Menu/l:eng"Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup
XSB WatchdogSBWatchdog.exeSpyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank
XSB13miniRYZO32.EXE"Added by the SPYBOT-EJ WORM!"
USBAutoUpdatesbautoupdate.exe"SpywareBlaster auto-updater"
USBC RoamingClientSBCFL.exe"Part of AT&T FreedomLink Wi-Fi connection software"
USBC Self Support Toolmatcli.exe"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
NSBC Yahoo! Connection ManagerConnectionManager.exeUsed to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection
YSBCSTraySBCSTray.exe"System Tray access to CounterSpy antispyware software"
USBDrvDetSBDrv.exe"Detects the ""Easy Front-Panel Audio Connectivity Drive Internal Drive Bay"" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one"
Nsbdrvdetsbdrvdet.exeChecks to see if Creative sound card driver should be updated
XSBHCsbhc.exe"SuperBar parasite - uninstall available here"
XSBIinstall_sbd_**.exe"Installer for a number of rogue security products and error fixing tools - where ** represents a 2 letter language code
XSBMPOPSBMPop.exeSearchByMedia adware
NSBMXsbmx.exeSoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
XSBR2009FSystemBooster2009.exe"SystemBooster2009 rogue system suite - not recommended
Xsbss Launchersbss.exe"SideBySide adware"
USbUsb AudCtrl"RunDll32 sbusbdll.dll RCMonitor"
UScanSys32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
YScriptBlockingSBServ.exe"Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information"
USecurePCSolutionsBootCheckBootCheck.exe"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
XShellexplorer.exe msbnc.exe"Added by the AGENT-PL BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""msbnc.exe"" file is located in %System%"
?ShowIcon_Justrams_USB Product Driver v2.12r012shwicon.exe"Related to Just Rams USB product driver. Is it required?"
?ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051shwicon.exe"Card reader for memory cards from digital cameras. Is it required? "
USinus 1054 data WLAN ManagerWifiusb.exeWireless management utility for the T-Com Sinus 1054 Data WLAN adapter
NSiSUSBRGSiSUSBrg.exeSiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP
XSpam Blocker for Outlook ExpressSBInst.exe"Hotbar adware"
XSpamBlockerSbOEAddOn.exe"Hotbar adware"
USpeedport W 100 Stick WLAN ManagerWifiusb.exeWireless management utility for the Speedport W 100 Stick WLAN USB stick
USpeedtouch USB DiagnosticsDragdiag.exeFor an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
NSSBkgdUpdateSSBkgdupdate.exe"Automatic updates for ScanSoft (now Nuance) products such as OmniPage and PaperPort. Can be disabled using the main program's options. Note - if you have a Soundblaster Audigy2 ZS soundcard installed on your computer and the volume of your sound system is turned on extremely high disabling this will solve the problem"
Xsssasasb32sssasasb32.exe"Added by the TACTSLAY.F TROJAN!"
Xsssasasb32msnmsgq32.exe"Added by the TACTSLAY.F TROJAN!"
Xstartsbmntr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
YSTDSBSTDSB.exe"Scrollbar driver for notebooks. If taken out of the Startup
XSurfBuddyrundll32 [path] sbuddy.dll"SurfBuddy adware - not to be confused with the legitimate SurfBuddy application by SurfApps!. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
USysBkup[path to file]"Keyspy keystroke logger/monitoring program - remove unless you installed it yourself!"
XSysBootsyskernel.exe"Added by the AUTORUN-EY WORM!"
USysbotsysbot.exe"Spector - spying (or monitoring) software to record internet activity"
USysCheck32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XSystem Backupsysbcp32.exe"Added by the AGOBOT-NP BACKDOOR!"
XSystem Boot Loadersysboot32.exe"Added by the SDBOT.PG WORM!"
XSystem Information ManagerMsbb.exe"Added by the SLINBOT.YR BACKDOOR!"
XSystem Redirectsysbho.exe"Downloader trojan
XSystem Update Applicationmsbuffer.exe"Added by the SDBOT.AFF WORM!"
USystem32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XSystemBooster2009sbr_updater.exe"SystemBooster2009 rogue system suite - not recommended
USystemchecksb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
Xsystems usb driverWindows2.exe"Added by a variant of the RBOT WORM!"
UT-Com WLAN ManagerTS154USB.exeWireless management utility for the T-Com Sinus 154 Data II WLAN adapter
Utgcmdprovidersbctgcmd.exe"Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
UTMESBSTMESBS21.EXEUtility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
UTMESBS.EXETMESBS21.EXEUtility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
UTMESBS.EXETMESBS31.EXEUtility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
UTMESBS.EXETMESBS32.EXEUtility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
UTMESBS32TMESBS32.EXEUtility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
XTok-Cirrhatus-1959sarcyesbron.com"Added by the BRONTOK-R WORM!"
UTrunk32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
?TSBxLogonTMESBS2.EXE"Found on a Toshiba laptop. May be related to TMESBS?"
UTurboHddUsbTurboHddUsb.exe"LaCie USB Boost or PQI TurboHDD advanced driver for their range of USB hard disks which increases USB performance by up to 53%. Not required unless you use a supported external drive frequently"
XUniversal USB Servicesvchost32.exe"Added by the KELVIR.R WORM!"
?UsbUsb.exe"HP related - not sure whether it's required"
XusbSASS.EXE"Added by the FUNSTA-A TROJAN!"
XUSB 2.0 DriverupdateXPSPC.exe"Added by the AGOBOT-RJ WORM!"
XUSB 2.0 DriverWinsys32.exe"Added by the AGOBOT-QM WORM!"
XUSB 2.0 DriverupdateXP.exe"Added by the AGOBOT-QP WORM!"
XUSB 2.0 Driverwinsystem.exe"Added by the AGOBOT-QS WORM!"
XUSB 2.0 DriverUpdateXPSP.exe"Added by the AGOBOT-QD WORM!"
XUSB 2.1 Driverwinupdate1.exe"Added by a variant of the RBOT WORM!"
UUSB 3.0 Monitornusb3mon.exe"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
XUSB controllerSvcmm32.exeSvcMM backdoor parasite downloader
XUSB Deviceservicelog.exe"Added by the WOOTBOT.CB WORM!"
XUSB Devicewin32usb.exe"Added by the FORBOT-BQ WORM!"
XUSB Device Server!usbserver.exe"Added by a variant of the IRCBOT TROJAN!"
XUsB drivermsjavx86.exe"Added by the AGOBOT-PQ WORM!"
XUSB Driver4UpdateXP*.exe [* = random digit]"Added by a variant of the SDBOT WORM!"
XUSB Drivers1msupdate.exe"Added by a variant of the RBOT WORM!"
XUSB Driverz2msnplus1.exe"Added by the SDBOT-XQ WORM!"
XUSB Fix 1.1wuservices.exe"Added by a variant of the SDBOT WORM!"
XUSB Fixeswuafix.exe"Added by the RBOT-ABV TROJAN!"
XUSB Hardware MonitoringUSBhardware.exe"Added by the RBOT-NN WORM!"
XUSB Hardware326 MonitoringUSBhardware326.exe"Added by a variant of the SPYBOT WORM!"
XUSB Hardware32c MonitoringUSBHARDWARE32C.EXE"Added by the RBOT-UU WORM!"
XUSB Host Serviceusbsvc.exe"Added by the RBOT-GG WORM!"
?USB Hub Keyboard PatchSKBPATCH.EXEUSB HUB Update
XUSB MS UpdateUSBS.exe"Added by a variant of the RBOT WORM!"
YUSB SECURITY DEVICE CoInstallerJupitCo.exe"ButterflyMedia USB Flash drive related - required for the password security feature to work"
XUSB Updatesmservices.exe"Added by a variant of the SDBOT WORM!"
XUSB Updatesmsfirewalls.exe"Added by a variant of the RBOT WORM!"
XUSB Updates 2wugfixx.exe"Added by a variant of the RBOT WORM!"
XUSB2.0usb-hi.exe"Added by the AGENT.US WORM!"
NUSB2CheckPCLECoInst.dll"Related to Pinnacle Systems Inc. CoInstaller - you can execute the USB2.0 interface check program (Usb2Check.exe file) to check if your system is a USB2.0 enabled system"
UUsbBoostTurboHddUsb.exe"LaCie USB Boost advanced driver for their range of USB hard disks which increases USB performance by up to 33%. Not required unless you use a supported external drive frequently"
XUSBcillinUSBcillin.exe"Added by the USBCILL-A TROJAN!"
XUSBConfigration2wmmndir.exe"Added by the AGOBOT-SV WORM!"
XUsbDsmss32.exe"Adware - detected by Kaspersky as the AGENT.CJ TROJAN!"
XUsbDsvhost32.exe"Added by the AGENT.IB TROJAN!"
XUsbdusb_d.exe"Added by the CIDRA-A TROJAN!"
XUsbD[path to trojan]"Added by the CIDRA-F TROJAN!"
UUSBDetectorUSBDetector.exeUSBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware
UUSBDetectorUDetect.exeUSB tray icon/detection for external Belkin (and maybe other makes) under Win98
XUSBDrivesmsfirewalI.exe"Added by the RBOT-ABP WORM!"
Xusbdrvservicetask.exe"Added by a variant of the SDBOT WORM!"
XUSBHWDRVgam.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWDRVmsdc.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWDRVsst4.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWINFOmac.exe"Added by the LOWZONE-I TROJAN!"
XUSBHWINFO[path to trojan]"Added by the LOWZONE-I TROJAN!"
XUSBHWINFOsst6.exe"Added by the LOWZONE-I TROJAN!"
UUSBMMKBDusbmmkbd.exeUSB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version no longer pings a server when on-line wheras the older version did but did not transmit any user information
UUSBMonit.exeUSBMonit.exeMonitors USB ports for insertion of Sandisk USB flashdrives
Xusbnusbn.exe"Adult content dialer - detected by Kaspersky as the SMALL.AFA TROJAN!"
Xusbn[path to trojan]"Added by the HOGIL-C TROJAN!"
UUSBPhoneforSkypeUSBPhoneforSkype.exe"USBPhoneForSkype uses Skype to dial out from a generic USB phone"
YUSBPNPUSBPNP.exeSiPix digital camera Twain USB driver
NUSBTAusbtapnp.exe"System Tray access for the BeWAN Gazel 128 USB ISDN adapter"
?USBToolTipUSBTip.exe"Related to Pinnacle Systems Inc. What does it do and is it required?"
XVirusBurstVirusBurst.exe"VirusBurst rogue security software - not recommended
XVirusBursterVirusBurster.exe"VirusBursters rogue security software - not recommended
XVirusBurstersvirusbursters.exe"VirusBursters rogue security software - not recommended
XvirusbyevirusbyeUpdater.exe"VirusBye rogue security software - not recommended"
XWCESMngrspoolsb.exe"Added by the AGOBOT-QZ WORM!"
XWeatherOnTraySbWeatherOnTray.exe"Hotbar adware"
XWin Drivers SSL32hpwsnnsbc.exe"Added by the SPYBOT.MAR WORM!"
XWIN USB 2.0usbsystem.exeAdded by an unidentified WORM of TROJAN!
XWIN USB 2.0winusb.exe"Added by a variant of the RBOT WORM!"
XWin USB 2.0 USB DriverHPPrint.exe"Added by the SPYBOT.DNB WORM!"
XWIN USB SUPPORTgrxsrv.exe"Added by a variant of the RBOT WORM!"
XWin32 USB Driverwinxpinit.exe"Added by the SDBOT.AA TROJAN!"
XWin32 USB Drivermvsecn.exe"Added by the FORBOT-BK WORM!"
XWin32 Usb Driversvhosint32.exe"Added by the FORBOT-BE or FORBOT-J WORMS!"
XWin32 Usb Driverusb32.exe"Added by the SDBOT-OV WORM!"
XWin32 Usb DriverAvpG.exe"Added by the FORBOT-BX WORM!"
XWin32 USB Driverrundll.exe"Added by the FORBOT-BN WORM! Note - this is NOT the Win9x/Me system file of the same name as described here"
XWin32 USB2wins32.exe"Added by a variant of the RBOT WORM!"
XWin32 USB2 Driverwin32usb.exe"Added by the SPYBOT.DHV WORM!"
XWin32 USB2 Driversmsc.exe"Added by the SDBOT.FO WORM!"
XWin32 USB2 Driversvchosting.exe"Added by the FORBOT-J or SDBOT.HU WORM!"
XWin32 USB2 Driversys32.exe"Added by the WOOTBOT.X WORM!"
XWin32 USB2 Driversys32snd.exe"Added by the FORBOT-AN WORM!"
XWin32 USB2 Driverwind32.exe"Added by the FORBOT-AH WORM!"
XWin32 USB2 Driverwinupdate.exe"Added by the AGOBOT.YE WORM!"
XWin32 USB2 Driverupdatemgr.exe"Added by a variant of the FORBOT WORM!"
XWin32 USB2 Driverwinsnd32.exe"Added by a variant of the SDBOT WORM!"
XWin32 USB2 Drivermsn.exe"Added by the FORBOT-EX WORM!"
XWin32 USB2 Driversyscfg32.exe"Added by the FORBOT-R WORM!"
XWin32 USB2 Driveralgg.exe"Added by the TIBS.BF WORM!"
XWin32 USB2 Driverusb2.exe"Added by the FORBOT-Y WORM!"
XWin32 USB2 Driverwinusb32.exe"Added by the FORBOT-M WORM!"
XWin32 USB2.0 Driver386.exe"Added by the IRCBOT.D WORM!"
XWin32 USB2.0 Driverrundll16.exe"Added by the WOOTBOT.H WORM!"
XWin32 USB2.0 Driverw32usb2.exe"Added by the SPYBOT.DN WORM!"
XWin32 USB2.0 Driverservice.exe"Added by the SDBOT-QF WORM!"
XWin32 USB3 Driverwin32tool.exe"Added by a variant of the RBOT WORM!"
Xwin32usbdssrs.exe"Added by the RBOT-RA WORM!"
Xwindows auto updatemsblast.exe"Added by the BLASTER.B WORM!"
XWindows Bootwindowsboot.exe"Added by the IRCBOT.AZT BACKDOOR!"
XWindows bypass security SMSS ServiceSbiCvy.exe"Added by the RBOT-GRF WORM!"
XWindows System BackupSysBackup.exeUnidentified malware
XWindows System Restore ConfigurationSblhost.exe"Added by a variant of the SPYBOT WORM!"
XWindows Updatemsnwinsb.exe"Added by the RBOT-AAH WORM!"
XWindows updatemsb32.exe"Added by the GAOBOT.CG WORM!"
XWindows USB 2.0 Driverusbtskmgr.exe"Added by the RBOT-BKG WORM!"
XWindows USB 2.0 Driverusb2ctrl.exe"Added by the RBOT-BIW WORM!"
XWindows USB 2.0 Driverusbservice.exe"Added by the RBOT-BLF WORM!"
XWindows USB Control Driveriexplore.exe"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XWindows USB controlerwinusb.exe"Added by the RBOT-HR WORM!"
XWindows USB Driver SupportWindowsusb.exe"Added by a variant of the SPYBOT WORM!"
XWindows USB Hub Managerusbhub.exe"Added by the RBOT-BJX WORM!"
XWindows USB Monitorservupdate.exe"Added by the IRCBRUTE.AQ TROJAN!"
XWindows USB Printerexe.exe"Added by a variant of the RBOT WORM!"
XWindows USB Printerunqgod.exe"Added by the RBOT.BKC BACKDOOR!"
XWindows USB Printerxqteby.exe"Added by a variant of the SPYBOT WORM! See here"
XWindows USB Service666.exe"Added by the MYTOB.AR WORM!"
XWindows USB v3wsvc.exe"Added by a variant of the SDBOT WORM!"
XWindows USBDmsifirewall.exeAdded by an unidentified WORM or TROJAN!
XWindowsBackupWINDOWSBACKUP.EXE"Added by the STANG WORM!"
XWindowsBoolaimplg.exe"Added by the SDBOT-CNG WORM!"
Xwinsysban[path to trojan]"Added by the CLICKER-CD TROJAN!"
UWinSysChecksb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
Xwinusb.dllwinguard.exe"Added by the FORBOT-CN WORM!"
Xwinxpusbdwinxp64.exe"Added by a variant of the RBOT WORM!"
UWireLessKeyboardPS2USBKbdDrv.exe"Related to WireLess Keyboard Multimedia Combo Set by SANSUN Industries"
NWksSbWksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file
XWlan DrierWinusb2.exe"Added by the WOOTBOT.DC WORM!"
?wsbklitewsbklite.exe"Related to the Acer Soft Button on Acer Tablet PCs. Appears to do nothing so is it required?"
YWUSB11B.exeWUSB11B.exeLinksys WUSB11 WLAN USB adapter
YWUSB54GSInvokeSvc3.exeWireless-G USB Wireless Network Adapter related - would appear to be required
YWUSB54Gv2InvokeSvc3.exeWireless-G USB Wireless Network Adapter related - would appear to be required
YWUSB54Gv4WUSB54Gv4.exeWireless-G USB Wireless Network Adapter related - would appear to be required
?XWMSUSBAPIXWMSAPI.EXE"Part of the installation of a Xerox WorkCentre printer/scanner. Is it required?"
Xy1959saryesbron.com"Added by the BRONTOK-AK WORM and variants!"
X[random characters]rsbmsc.exe"Detected by AntiVir antivirus as the BDS/Agent.adt TROJAN!"
X[random characters]yesbron.com"Added by the BRONTOK-AI WORM and variants!"
X[various names]sbin.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.