Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
?ab EazySchedulerezsched.exe"??"
UAcronis Scheduler Helperschedhlp.exe"Part of Acronis True Image backup software. Co-operates with the ""schedul2.exe"" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images"
UAcronis Scheduler2 Serviceschedhlp.exe"Part of Acronis True Image - backup software. Co-operates with the ""schedul2.exe"" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images"
NALU Scheduler ServiceALUSchedulerSvc.exeSymantec LiveUpdate scheduler for programs such as Norton AV or Internet Security
XAnti-Virus Update Scheduler[path to trojan]"Added by the SPAMMIT-A TROJAN!"
XAnti-Virus Update Schedulerwinsp3.exe"Malware - detected by Kaspersky as the AGENT.FP TROJAN!"
XAnti-Virus Update Scheduler V1.39.12R[path to trojan]"Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe
UAOL Spyware ProtectionAOLSP Scheduler.exeAOL's spyware protection program
XApplication Layer Scheduleragtsvc.exe"Added by the IRCBOT.BJJ BACKDOOR!"
NASE SchedulerASE Scheduler.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
NATI SchedulerAtisched.exeComponent that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
XAVSchedulerAVSCHSVC.EXE"Part of the WinAntiVirus Pro 2005 rogue security software when installed in Win98/Me - not recommended
UBackup NOW! SchedulerSchdlr32.exe"Scheduled backups for the NTI Backup Now archiving utility. If a backup job has been scheduled
UBackupExecSchedulerbesch.exe"Veritas ""Back Up My PC"" software"
UComproSchedulerDTVComproSchedulerDTV.exe"VideoMate TV tuner and capture card - scheduler"
NCONNECTAuto UpdateCONNECTScheduler.exe"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
NCONNECTSchedulerCONNECTScheduler.exe"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
?CreativeTaskSchedulerCTSched.exe"Creative Task Scheduler. What does it do and is it required?"
UDell DataSafe SchedulerDataSafeOnlineScheduler.exe"Scheduler for Dell DataSafe™ Online which ""helps protect your music
NDMASchedulerDMAScheduler.exe"Related to DigitalMedia Plus Archiver. This program is non-essential process to the running of the program
YDrwebschedulerDrwebscd.exe"DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications
UeScan Scheduleravkserv.exe"MicroWorld eScan antivirus scheduler"
UFRISK FP-SchedulerF-Sched.exe"Scheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis"
UHP Health Check ScheduleHPHC_Scheduler.exeHP Health Check Scheduler from Hewlett-Packard
?HP IDSchedulerHPIDSCHD.exe"HP Instant Delivery Scheduler"
NIntervideo WinSchedulerWinScheduler.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NIntervideo WinSchedulerSchSvr.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NIomega Backup Schedulerdtiom98.exe"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
NISUSSchedulerissch.exe"InstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis"
ULapLink schedulerLlsched.exeUtility that automatically performs file transfers as unattended background operations
UMRU-Blaster Schedulerscheduler.exe"Scheduler for MRU-Blaster - ""a program made to do one large task - detect and clean MRU (most recently used) lists on your computer"""
UNorton Program Schedulernsched32.exe"Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95
UNorton Program SchedulerNPSsvc.exe"Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95
?Norton Program Scheduler Event Checkernpscheck.exe"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker"
UNovastorSchedulerdSCHENGD.EXENovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
UNTI Backup NOW! SchedulerSchdlr32.exe"Scheduled backups for the NTI Backup Now archiving utility. If a backup job has been scheduled
UOpSchedulerOpScheduler.exe"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
NPagis SchedulerMonitor.exeScheduler for the Pagis scanning suite from Scansoft (now Nuance)
UPanda Schedulerpavsched.exe"Scheduler for older versions of Panda Antivirus. Required if you have scans scheduled on a regular basis"
UPandaSchedulerpavsched.exe"Scheduler for older versions of Panda Antivirus. Required if you have scans scheduled on a regular basis"
UPBKSchedulerPBKScheduler.exe"Scheduler for CyberLink PowerBackup - archiving/backup utility"
UPC Pitstop Optimize SchedulerPCPOptimize.exe"Scheduler for the Optimize system optimization utility from PC Pitstop"
NPowerReg SchedulerPowerReg Scheduler.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
NPowerReg SchedulerPowerReg Scheduler V3.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
NPowerReg Scheduler V3PowerReg Scheduler V3.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
NPowerReg SchedulerV2PowerReg SchedulerV2.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
NPowerReg SchedulerV3PowerReg SchedulerV3.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
?PPSchedulerPPScheduler.exe"Part of Nuance (ScanSoft) PaperPort - ""scan
XPrint Schedulerusnsvc.exe"Added by a variant of the KOBOT-C WORM!"
YQH Live Update SchedulerUPSCHD.EXE"Quick Heal Anti-Virus"
NQuickFinder SchedulerQFSCHD100.exeUsed in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
NQuickFinder SchedulerQFSched.exeUsed in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
NQuickFinder SchedulerQFSCHD110.EXE"Used in Corel WordPerfect Office 11 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
NQuickFinder SchedulerQFSCHD130.EXE"Used in Corel WordPerfect Office X3 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
Xreal scheduler.htaRealAudio.exe"Added by the CEEGAR TROJAN! Note - this is not associated with the popular RealPlayer media player"
URegClean Expert SchedulerRCHelper.exe"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
URegClean Expert SchedulerRCScheduler.exe"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
URetrieverSchedulerretrieverscheduler.exe"80-20 Retriever from 80-20 - ""80-20 Retriever is a powerful personal search tool that encompasses email folders
XSchedulerexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
XSchedulerMSMSGS.EXE"Added by the HOSTBANK-A TROJAN! Note - this particular msmsgs.exe file is located in %System%\Config and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
XScheduleroutIook.exe"Added by the TACTSLAY.A TROJAN!"
XSchedulersvcrhost.exe"Added by the TACTSLAY.A TROJAN!"
XSchedulersvcshost.exe"Added by the TACTSLAY.A TROJAN!"
XSchedulerwinagent.exe"Added by the TACTSLAY.B TROJAN!"
USchedulerScheduler daemon.exe"Tenebril GhostSurf or SpyCatcher related scheduler - you can schedule daily
XSchedulermsnexploren.exe"Added by the TACTSLAY.B TROJAN!"
XSchedulersdhch.exe"Added by the TACTSLAY.B TROJAN!"
XSchedulersvchst.exe"Added by the TACTSLAY.B TROJAN!"
XScheduler Servicewsass.exe"Added by the LIOTEN.KX WORM!"
XSchedulerMgrnavchk.exePremium rate adult content dialer
Uscheduler_monitorinit_scheduler.exe"Scheduler for ReaConverter advanced image converter"
Uscheduler_proxy Applicationscheduler_proxy.exe"Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates)
XScheduling AgentScheduler.exe"Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect"
XSearchAndDestroySchedulerSearchAndDestroy.exe"Search And Destroy rogue security software - see here and here"
XService Schedulerscheduler.exe"Added by the AGOBOT-PH WORM!"
YSkyBlaster SchedulerSSFSch.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
USolidWorks Task Scheduler EngineswBOEngine.exe"Task scheduler for SolidWorks 3D CAD software"
USupport.com Scheduler and Command Dispatchertgcmd.exe"Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
NsuSchedulerUCLauncher.exe"Scheduler for versions of ThinkVantage System Update (for software updates) found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks"
USystem LifeGuard SchedulerSlsched.exe"System LifeGuard scheduler"
XTask Scheduler Engineschedsvc32.exe"Added by the RBOT-ASJ WORM!"
UTaskSchedulerTaskSch.exe"ProSeries accounting software related"
UTV SchedulerTVSCHL.EXE"ProLink PlayTVpro TV tuner software scheduler"
UTVT Scheduler Proxyscheduler_proxy.exe"Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates)
UVirtual Access SchedulerVASCHD32.EXEThe scheduler for mail and usenet tool
UWinBackup SchedulerWbsched.exe"LIUtilities WinBackup scheduler - backup software"
XWindows Schedulerwmscheduler.exe"Added by a variant of the SDBOT WORM! See here"
XWindows Scheduler!scheduler.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Task Schedulerasijdie.exeAdded by an unidentified WORM or TROJAN!
NWinTOTAL Schedulerguru.exeWinTOTAL Real estate appraisal software related
UWorkstation Schedulerwm95.exe"Desktop Management Scheduler. Part of Novell's Netware Client. Schedueles NDS events. If events have been schedueled
UWSchedulerWScheduler.exe"Windows Scheduler - "schedule unattended running of applications
UXemiComputers SchedulerScheduler.exe"Smooth Program Scheduler from XemiComputers ""will start any program you want at a scheduled time"""
UZSSchedulerzsscheduler.dll"ZeroSpyware from FBM Software"
U{1290A33C-85F5-4164-A1BE-7DD299D4986A}PBKScheduler.exe"Scheduler for CyberLink PowerBackup - archiving/backup utility"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.