Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
?a2dservicea2dservice.exe"Related to the Air2Data Wireless HISA (High-Speed Internet Access) service. What does it do and is it required?"
XAdobeReaderProservice.exe"Added by the RBOT-BCA WORM!"
UADServiceADService.exe"Part of Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk. Appears as a service in XP/Vista and under the ""RunServices"" registry key in Win98/ME"
?Air2Dataa2dservice.exe"Related to the Air2Data Wireless HISA (High-Speed Internet Access) service. What does it do and is it required?"
?AspireServiceAspireService.exe"Found on Acer laptops
UBoost XP Servicebxservice.exe"Boost XP from Systweak - WinXP tweaking utility"
XBoot Servicebootservice.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XBrowseProxyFindService.exe"Actual Names (AdvSearch) Internet Keywords parasite"
XClean upservice.exe"Added by the AGENT-FPY TROJAN!"
XConfigservice.exe"Added by the ISRAZ.B WORM!"
XConfiguration LoaderService.exe"Added by the GAOBOT.AO WORM!"
UCopernic Desktop Search 2DesktopSearchService.exe"Copernic Desktop Search - search agent"
NCyberlink PowerCinema 3.0PCMService.exe"Part of Cyberlink's PowerCinema - which can be used to watch movies
?desk-top-servicedesk-top-service.exe"??"
XDirectX For Microsoft Windowsdtxservice.exe"Added by the PROGENT TROJAN!"
XDirectX for Microsoft WindowsFservice.exe"Added by the PRORAT TROJAN!"
XDirectX for Microsoft WindowsSservice.exe"Added by the PRORAT TROJAN!"
XDirectX For Microsoft® Windowsfservice.exe"Added by the PRORAT-P TROJAN!"
XDirectX For Microsoft® Windowsfservice.exe"Added by the PRORAT-L TROJAN!"
YDkServiceDkService.exe"From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. It's recommended to leave this enabled
XDomPlayer Servicewakeservice.exe"DomPlayer adware"
?EverioServiceEverioService.exe"Related to the Cyberlink software supplied with JVC's Everio camcorders. What does it do and is it required?"
UFieldForms SyncSyncService.exe"Resco FieldForms. A solution for building of mobile forms that can be viewed or filled in on the run
UFilmLoopFilmLoopService.exe"Related to FilmLoop - a photocasting network. Share your pictures with your family and friends"
Xfoxwudy9912service.exe"Added by the BANCOS-BT TROJAN!"
?GACServiceGACService.exe"Related to a Gemplus product. What does it do and is it required?"
XGet-Torrent Servicewakeservice.exeGet-Torrent bittorrent client - Installs LOP adware
NGhostStartServiceGhostStartService.exe"Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard"
?HerculesCamServiceCamService.exe"Related to the Hercules Dualpix HD Webcam. What does it do and is it required?"
XHservicemsservice.exe"Added by the AUTORUN-KL WORM!"
XIEService.exeIEService.exe"FastFind adware variant"
YIKE Service 95IKEService.exe"Associated with PGP. The PGP Tray can be disabled
XiNoticeiservice.exeAdded by a variant of an MSN worm that tries to lure people to an infected site by using nude pictures and videos
XInstant Messenger Serviceimservice.exe"Detected by Kaspersky as the HEUR TROJAN!"
XiPod USB ServiceiPODService.exe"Added by a variant of the RBOT WORM! Do not confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the %ProgramFiles%\iPod\bin folder and is implemented as a system service
UiRiver AutoDBMLService.exe"Associated with the iRiver Music Manager"
NLicCrtlrunservice.exe"Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running
ULogServiceLogService.exe"SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
UMaxBackSchedulemaxbackservice.exeBackup scheduler for the Maxtor (now Seagate) range of external hard drives - part of Maxtor Quick Start
XMDNSservice.exe"Mirar adware variant"
UMediaLifeServiceMediaLifeService.exe"Related to MediaPlay Cordless Mouse from Logitech"
XMicosoft Data Corerunservice.exe"Added by the IRCBOT.BK WORM!"
XMicrosoftsqlservice.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoft SecuritywinService.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Security Monitor Processservice.exe"Added by the DELF.BERW BACKDOOR!"
XMicrosoft Serviceservice.exe"Added by the IRCBOT-XX BACKDOOR!"
XMicrosoft Startup Managersysservice.exe"Added by the AVALANEC TROJAN!"
XMicrosoft System Servicednservice.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft Updatentservice.exe"Added by the AGENT-DIS TROJAN!"
XMicrosoft Updateservice.exe"Added by a variant of the RBOT WORM! See here"
XMicrosoft Updatesservice.exe"Added by the POISON.HPT BACKDOOR!"
NMMReminderServiceMMReminderService.exe"Mind Manager from Mindjet - ""easy way to organize ideas and information"". Registration reminder"
XMS servicemsservice.exe"Added by the RBOT-ZG WORM!"
XMSNmsservice.exe"Added by the IRCBOT-ABZ TROJAN!"
XMSN BETAservice.exe"Added by the RBOT.AUU WORM!"
XMSN Messenger Service Startupmsnservice.exe"Added by a variant of the RBOT WORM! See here"
XMsn Messenger updatemsnservice.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Service!msnservice.exe"Added by a variant of the RBOT WORM! See here"
XMSN Servicesmsnservice.exe"Added by the IMPARD-A TROJAN!"
XMSNServiceMSNService.exe"Added by the CARPET.C WORM!"
XMSOfficeCfgqservice.exePremium rate adult content dialer
XMultimedia extensionsmservice.exe"EasySearch adware"
Nmumservicemumservice.exe"Software updater for Motorola products"
XMyappservice.exeHomepage hijacker
UNetscapeInstallService.exeRelated to Netscape installation
UNVIDIA® NVRAIDnvraidservice.exe"Part of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors"
UNVRaidServicenvraidservice.exe"Part of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors"
NPCMServicePCMService.exe"Part of Cyberlink's PowerCinema - which can be used to watch movies
Npdservicepdservice.exe"Part of SafeGuard PrivateDisk from Utimaco - which ""securely and transparently protects sensitive files on notebooks and desktop computers
NPDService.exepdservice.exe"Part of SafeGuard PrivateDisk from Utimaco - which ""securely and transparently protects sensitive files on notebooks and desktop computers
?PeeramidPService.exe"In a ""Koptimizer"" folder in Program Files. What does it do and is it required?"
UPGPSERVICEpgpservice.exe"PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice
NPlayMoviePMVService.exe"Part of Acer Arcade Deluxe lets you browse pictures
NPrivateDiskpdservice.exe"Part of SafeGuard PrivateDisk from Utimaco - which ""securely and transparently protects sensitive files on notebooks and desktop computers
UQPServiceQPService.exe"HP QuickPlay - ""brings your favorite music and movies to life with the touch of a button"""
Xqservicesqservice.exe"Added by the PROGENT-A TROJAN!"
XrCrondservice.exe"""Switch"" premium rate adult content dialler variant"
XRegistry Value Nameservice.exe"Added by the RBOT-AHT WORM!"
XRegkey for autostartwinservice.exe"Added by the RBOT-NU WORM!"
URunAlertAService.exe"PC Alert III - MSI motherboard monitoring software. Only required if you ""overclock"" your system. Appears as a service in XP/Vista and under the ""RunServices"" registry key in Win98/2K"
Xr_serverservice.exe"Added by the MULTIDR-CP TROJAN!"
?SA ServiceSAservice.exe"Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?"
XSecurity Service DBsecservice.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XServiceservice.exe"Added by the ALADINZ.H TROJAN!"
XService Controllerservice.exe"Added by the PREVERT TROJAN!"
Xservice managerservice.exe"Added by the DONBOMB.A TROJAN!"
XService Processservice.exe"Added by the DCMBOT-C TROJAN!"
XService.exeService.exe"""servedby.advertising"" popup generator"
Xservicemngservice.exe"Added by the TAME-C WORM!"
XServicesback32.exe ...service.exe"Added by an unidentified VIRUS
UsiService.exesiService.exe"Spam Inspector - anti email spam software"
USpriteServiceSpriteService.exe"Sprite Backup is a backup application for Windows Mobile Pocket PC or Smartphone"
XStubPathSservice.exe"Added by the PRORAT TROJAN!"
XSygate Personal Firewallservice.exe"Added by a variant of the RBOT WORM!"
XSysServiceSysService.exe"Added by the BDFORM-A BACKDOOR!"
XSystemServiceqservice.exePremium rate adult content dialler
Xsystr2SERVICE.exe"Added by the VB-DQY WORM!"
XSYS_CLEANService.exe"Added by the FLOPCOPY WORM!"
Utpopservicetpopservice.exeDirecWay two-way satellite internet service enhanced POP proxy server for email
?TSServiceNSSERVICE.EXE"??"
XUpdateServicewservice.exe"Added by the DREF-K WORM!"
XUPNPServiceWinSVCservice.exe"Added by the AGOBOT.UN WORM!"
XWin32 System Kernelwinservice.exe"Added by the SDBOT.KIN WORM!"
XWin32 USB2.0 Driverservice.exe"Added by the SDBOT-QF WORM!"
XWinDLL (service.exe)service.exe"Added by the AGENT.BX WORM! The ""service.exe"" file is found in %System%"
XWindows Logon Servicewinlogoservice.exe"Added by the SPYBOT.ANOO WORM!"
XWindows Net Cfgservice.exe"Added by a variant of the RBOT WORM!"
XWindows Reg Servicesffservice.exe"Added by the DLOADER-PL or DLOADER-XM TROJANS!"
XWindows Reg Servicesdservice.exe"Added by the PRORAT-D TROJAN!"
XWindows Reg Servicesfservice.exe"Added by the PRORAT-D TROJAN!"
XWindows Reg Servicesssservice.exe"Added by the PRORAT-D TROJAN!"
XWindows Reg Serviceslservice.exe"Added by the PRORAT-O TROJAN!"
XWindows Reg Serviceswservice.exe"Added by the PRORAT-O TROJAN!"
XWindows ScreensaverService.exe"Added by the KELVIR.P WORM!"
XWindows Serviceservice.exe"Added by the IRCBOT-ACV WORM!"
XWindows Servicesservice.exe"Added by the RANDEX.R WORM!"
XWindows Servicesw32service.exe"Added by the AUTORUN-FU WORM!"
XWindows smss serviceservice.exe"Added by the AGENT-FPY TROJAN!"
XWindows svchostservice.exe"Added by the PUSHBOT.DU WORM!"
XWindows Taskmanagerservice.exe"Added by the PUSHBOT.OR WORM!"
XWindows Timetmservice.exe"Added by a variant of the RBOT-YK WORM!"
XWindows USB 2.0 Driverusbservice.exe"Added by the RBOT-BLF WORM!"
XWindows_SerivceSERVICE.exe"Added by the WOOTBOT.AH WORM!"
XWinZix Servicewakeservice.exe"WinZix adware"
UWServiceWService.exe"Tablet client Driver for UC-Logic Pen/Graphics Tablet"
Xzsmsgsiservice.exe"Added by the BANCOS-BU TROJAN!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.