Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
XAPcSafeAPcSafe.exe"APcSafe rogue security software - not recommended
YCAISafeisafe.exe"Part of Computer Associates eTrust EZ Antivirus"
UCertificateRegistrationSafeSignCertReg.exeSafeSign Certificate Registration Utility for Microsoft Crypto applications
UConfigSafeCFGSAFE.EXE"ConfigSafe - lets you identify changes to the registry
UConfigSafeAUTOCHK.EXE"ConfigSafe - lets you identify changes to the registry
XCritical Error Safe32GetWaylayer32.exeAdded by the RBOT.IAL WORM!
XcvhnykzxkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
UDell DataSafe SchedulerDataSafeOnlineScheduler.exe"Scheduler for Dell DataSafe™ Online which ""helps protect your music
XderyheruxckeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XdsfghjgjkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XError Safeers.exe"ErrorSafe rogue system error and cleaning utility - not recommended"
XError Safe Freeuers.exe"ErrorSafe rogue system error and cleaning utility - not recommended"
XErrorSafeers.exe"ErrorSafe rogue system error and cleaning utility - not recommended"
XErrorSafeFreeUERS.exe"ErrorSafe rogue system error and cleaning utility - not recommended"
YeSafe ProtectESPWatch.exe"eSafe from Aladdin - internet security for gateway and E-mail servers"
XhfdtubvnxkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XhgkytwekeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XilortgdgkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XiSafeAViSafeAV.exe"iSafe AntiVirus rogue security software - not recommended
XKernel Safe Modesmss.exe"Added by the 78CRACK-A TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XLinkSafenessLinkSafeness.exe"LinkSafeness rogue security software - not recommended
XMicrosoft Safe Mode Managersafemode.exe"Added by the IRCBOT.HM BACKDOOR!"
XMicrosoft Visual SourceSafeservices.exe"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
XMicrosoft Visual SourceSafewinlogon.exe"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
XMicrosoftSourceSafecsrss.exe"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
XMicrosoftSourceSafelsass.exe"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
UMount Safe & SoundFbmount.exeFrom McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
UNetScreen-RemoteSafeCfg.exe"NetScreen Remote VPN client software"
?Packard Bell EverSafe Tray ControlTrayControl.exe"Packard Bell EverSafe software. What does it do
NQD FastAndSafeQDCSFS.exeAutomatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
?Qdsafe??"??"
XSafeSafeWin.exe"Added by the FOCOSENHA TROJAN!"
XSafe[path to trojan]"Added by the BANKER-DT TROJAN!"
XSafeFighterSafeFighter.exe"SafeFighter rogue security software - not recommended
XSafeguard 2009sf2009.exe"Safeguard 2009 rogue spyware remover - not recommended
XSafeGuard Popup Blocker Updaterregsvr32 sfgupd.dll"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
XSafeGuard Popup Blocker Updater (required)regsvr32 sfg****.dll [* = ramdom char]"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
XSafeGuard Popup Updater (required)regsvr32 sfg****.dll [* = random char]"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
XSafeGuard Popup Updater (required)regsvr32 PDF****.dll [* = random char]"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
XSafeguard.exeSafeguard.exe"Super Spyware Killer rogue spyware remover - not recommended"
XSafeHardDriveSysRep.exe"SafeHardDrive rogue system error and cleaning utility - not recommended
USafeHouseSystemTraySDWTRAY.EXE"SafeHouse ""Personal Privacy"" system tray icon - PP protects and hides your private and personal photos
NSafeInstall.exeSAFEIN~1.EXEMonitors a download and ensures an newer version of a file isn't replaced by an older one
NSafeOFFSafeOff.exeProvides protection that if user accidentally presses the power switch a dialog will pop up for confirmation
XSafePcAvSafePcAv.exe"SafePcAv rogue security software - not recommended
XSafePCToolSysRep.exe"SafePCTool rogue system error and cleaning utility - not recommended
XSafeSearchsafesearch.exe"SafeSearch.A adware"
YSafeSpaceSafeSpaceSysTray.exe"Part of SafeSpace (from Artificial Dynamics) which ""protects computers from Internet malware infection without the need for signature updates or regular maintenance"""
XSafeStripSafeStrip.exe"SafeStrip rogue security software - not recommended
XSafeStripReminderSafeStripReminder.exe"SafeStrip rogue security software - not recommended
XSafeSurfingUpdateSSUpdate.exe"MoneyTree parasite - ActiveX control used to download premium-rate dialers"
XSafeSysSafeSys.exe"Added by the AUTORUN.DMI WORM!"
XSafety Anti-Spyware 3Safety Anti-Spyware 3.exe"Safety Anti-Spyware rogue security software - not recommended
XSafetyCenterprotector.exe"Safety Center rogue security software - not recommended
XSafetyKeeperSafetyKeeper.exe"SafetyKeeper rogue security software - not recommended
USafetyNetipcTray.exe"Safety.Net from Netveda - ""offers Internet security
USafetyNet_NotifieripcLn.exe"Safety.Net from Netveda - ""offers Internet security
USafeworldFreedom.exeSafeWorld Internet Security - now no longer available
XShieldSafenessShieldSafeness.exe"ShieldSafeness rogue security software - not recommended
NShopSafeShopSafe.exe"Created by Orbiscom for MNBA (now Bank of America) - ShopSafe creates a temporary card number each time you make an online purchase"
XSoftSafenessSoftSafeness.exe"SoftSafeness rogue security software - not recommended
USystemSafeSyssafe.exe"System Safety Monitor - system monitoring tool with additional application firewalling"
XTXMouiekeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XvcbbjfkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
UWindows Live Family Safety Filterfsui.exe"System Tray access to and notifications from Windows Live Family Safety - optionally installed as part of Windows Live Essentials. ""With Family Safety
UWindows Live™ OneCare™ Family Safetyfssui.exe"System Tray access to and notifications from Windows Live OneCare Family Safety - part of the Live OneCare range and now superseded by Windows Live Family Safety which is part of Windows Live Essentials. Allows you to decide how your kids experience the Internet by limiting searches
XxcfdhtyjkxkeepSafe.exe"Added by the KILLAV.KAX TROJAN!"
XxSafexSafe.exe"Added by the SILLYFDC.BAY WORM!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.