Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
NAccuWeather.comŽ DesktopAccuWeatherDesktop.exe"Desktop weather from AccuWeather"
NAccuWeatherDesktopAlertsAccuWeatherDesktopAlerts.exe"Weather alerts for AccuWeather.com Desktop which ""provides you with the most accurate
UActive Desktop CalendarADC.EXE"XemiComputers Active Desktop Calendar"
XActiveDesktopsystray32.exe"Added by the DABOOM WORM!"
XAdsBlockerstopAds.exe"AdsBlocker - detected by NOD32 as DIALER.DW!"
NAlienAutopsyTest_BS.exe"Alienware computer technical support software"
UAluria's Pop-Up Stoppereps.exeAluria Pop-Stopper
UAlwaysOnTopMakerAlwaysOnTopMaker.exe"Always On Top Maker - utilty to enable an application to always be displayed ""on top"" of others on the desktop"
UAOL TopSpeedMonitoraoltsmon.exe"AOL's TopSpeed ""web-acceleration technology speeds up your web-browsing experience by storing and reusing elements of web pages that you visit
UATI Desktop ComponentATIPTAXX.EXE"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution
UATI Technologies Inc. HydraVision Desktop ManagerHydraDM.exe"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
XAutoDiscovery/AutoPurge (ADAP) Servicewmiadapi.exe"Added by the RBOT.FLT WORM!"
XAutopdateAutopdate.exe"Added by the RBOT-AGL WORM!"
NAUTOPROPREGPROP.EXE WMPADDIN.DLL"Both the files are in the MS Office/Bots/FP_WMP directory. Apparently
XAutoProtectAutoProtect.vbs"Added by the KILLBAT-C WORM!"
XAUTOPROTECTUnavapq32.exeAdded by an unidentified WORM or TROJAN!
UBT Broadband Desktop Helpmatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
UBTopenworldDialBTYahoo.exeBT Yahoo! internet connection manager
NCopernic Desktop SearchDesktopSearch.exe"Copernic Desktop Search - ""Easily search your entire hard drive in less than a second to pinpoint the right file
UCopernic Desktop Search 2DesktopSearchService.exe"Copernic Desktop Search - search agent"
NCorel Desktop Application Directordadx.exeThe Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
?desk-top-servicedesk-top-service.exe"??"
XDesktop"rundll32.exe msconfd.dllRestore ControlPanel"
Xdesktopdesktop.exe"Added by the SDBOT.MD WORM!"
XDesktopDesktop.com"Added by the VB-DRN WORM!"
Xdesktopdesktop.ini.vbs"IE-Title malware"
NDesktop ArchitectDATRAY.EXE"Desktop theme manager available
YDesktop ArmorDesktopArmor.exe"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
UDesktop CalendarDesktop Calendar.exe"Desktop Calendar - ""Desktop Calendar is a highly customizable calendar program that turns your desktop into a traditional wall calendar
XDesktop Defender 2010Desktop Defender 2010.exe"Desktop Defender 2010 rogue security software - not recommended
UDesktop iCalendarCalendar.exe"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
UDesktop iCalendarDesktop iCalendar Lite.exe"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
UDesktop iCalendarDesktop iCalendar.exe"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
UDesktop iCalendar LiteDesktop iCalendar Lite.exe"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
UDesktop iCalendar Lite.exeDesktop iCalendar Lite.exe"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
UDesktop iCalendar.exeDesktop iCalendar.exe"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
UDesktop Maestrodeskmech.exe"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
UDesktop Maestro Vista TrayRMTray.exe"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
NDesktop PlantAZARE10S.PLT"Vritual plant from here - this version is an Azalea
XDesktop Searchdesktop.exe"iSearch adware"
XDesktop Security 2010Desktop Security 2010.exe"Desktop Security 2010 rogue security software - not recommended
NDesktop Service CentreDSC.exeOptusNet DSL or Dial-Up connection software
NDesktop WeatherTHE WEATHER CHANNEL.exe"Desktop Weather by The Weather Channel - provides current temperature
NDesktop Weather 3THE WEATHER CHANNEL.exe"Desktop Weather 3 by The Weather Channel - provides current temperature
NDesktop Weather 3THEWEA~1.EXE"Desktop Weather 3 by The Weather Channel - provides current temperature
YDesktopArmorDesktopArmor.exe"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
UDesktopIconToyDesktopIconToy.exe"""Desktop Icon Toy is an easy to use desktop icon enhancement tool
UDesktopMaestrodeskmech.exe"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
UDesktopMaestroRMTray.exe"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
Ndesktopmgrdesktopmgr.exe"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds
XDesktopUpdate"rundll32.exe MSA64CHK.dllDllMostrar"
UDesktopXDESKTOPX.EXE"A program that replaces the regular Desktop and Taskbar
YDirectory Opus Desktop Dblclkdopusrt.exe"Directory Opus - an advanced file manager. ""Directory Opus goes beyond the simple file manager metaphor
Xdjtopr1150.exedjtopr1150.exe"WebRebates adware"
UDon't Panic Pop-Up Stopperdpps2.exe"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
UDoubleDesktopdd.exe"""DoubleDesktop is a smart and elegant system tray utility that effectively doubles the width of your Windows desktop"""
NDW4DesktopWeather.exe"Desktop Weather 4 by The Weather Channel - provides current temperature
NDW6DesktopWeather.exe"Desktop Weather 6 by The Weather Channel - provides current temperature
NEnigmaPopupStopEnigmaPopupStop.exe"Part of Enigma SpyHunter - not recommended
YF-StopWF-StopW.exe"F-Prot anti-virus background scanner by F-Risk Software"
XFlyswatDesktopflydesk.exeAdvertising spyware
UFresh Desktopfreshdesktop.exe"Fresh Desktop is a utility that lets you manage vast collections of wallpapers for your desktop with ease. When run on bootup it changes the desktop wallpaper at startup or at specified intervals"
UGoogle DesktopGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
UGoogle Desktop SearchGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
UGoogleDesktopGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
?gramdate2Stop.exe"??"
XHP Desktopccappms.exe"Added by the SDBOT-TG WORM!"
UHPBootOpHPBootOp.exe"""HP Boot Optimizer intelligently and dynamically launches software during startup
UHPLaptopGamesActiveMenuActiveMenu.exeWild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
UHydarVisionDesktopManagerdesk95.exe"ATI's HydraVision desktop management software
UHydraVisionDesktopManagerdesk98.exeATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
UHydraVisionDesktopManagerHydraDM.exe"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
UiDesktopidesktop.exe"Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse"
NInControl Desktop ManagerDMHKEY.EXEFor Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
XInfeStopInfeStopRemover.exe"InfeStop rogue spyware remover - not recommended
XLaptop AccessSage.exe"Added by the SDBOT-NB WORM!"
NLDMLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
XLogitech DesktopApPache.exe"Added by the RBOT-YP WORM!"
XLogitech DesktopIPCONN.EXE"Added by the SDBOT-WE WORM!"
XLogitech Desktop Controllerwrcam.exe"Added by a variant of the RBOT WORM!"
NLogitech Desktop Messengersetup-8876480.exe"Installer for Logitech Desktop Messenger included with older versions of the software for Logitech products - which automatically checks for software upgrades and new products
NLogitech Desktop Messengerldmconf.exe"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
NLogitech Desktop MessengerLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
NLogitech Desktop Messenger Agentldmconf.exe"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
NLogitechDesktopMessengerLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
YLook 'n' Stoplooknstop.exe"Look 'n' Stop personal firewall"
YLto ManagerDesktopLtoManager.exe"Related to Global Positioning System (GPS) found on HP iPAQ hw6500 unit and others"
XMalwareStopperMalwareStopper.exe"Malware Stopper rogue security software - not recommended"
YMcAfee Desktop Firewall TrayFireTray.exe"McAfee Desktop Firewall"
YMcAfee Managed Desktop AgentMYAGTSVC.EXE"Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
NMicroangelo DesktopMuamgr.exe"Using MicroAngelo On Display
XMicrosoft Desktop Managermsdesk32.exe"Added by a variant of the RBOT WORM!"
NMicrosoft Windows Desktop Search System TrayWindowsSearch.exeSystem Tray access to Windows Desktop Search for XP from Microsoft - which adds additional search options including a search box on the Taskbar. This version (3.0.1) also includes the Windows Search (WSearch) service which indexes files and e-mails items so you can quickly find words and phrases. Disabling this entry does not affect the normal operation and this is the Windows Defender entry
NMicrosoft Windows Desktop Search Tool Tray AdminWindowsSearch.exe"System Tray access to Windows Desktop Search for XP from Microsoft - which adds additional search options including a search box on the Taskbar. For this version (2.6.*)
UMotorola Desktop SuiteDesktopSuite.exe"Related to Motorola Desktop Suite - PC software managing Motorola mobiles such as the A1000"
UMotorola Desktop Suite mRouter ConfigmRouterConfig.exe"Configuration for Motorola's version of Intuwave's m-Router - ""that enables easy connectivity between mobile devices and PCs across Bluetooth
Xmsmautoprotectmsmssgs.exe"Added by the BIFROSE-AJ TROJAN!"
XMSStartOptimizerIexpres.exe"Added by the DASMIN-E TROJAN!"
XMSStartOptimizerWINUPD.EXE"Added by the DASMIN-E TROJAN!"
XMSStartOptimizerSCVHOST.EXE"Added by the DASMIN-E TROJAN!"
XOffice Desktopsimag.exe"Added by the SPYBOT.AQR WORM!"
XOptim1regdtopt.exe"Added by the RAMVICRYPE TROJAN!"
XOptim2regdtopt.exe"Added by the RAMVICRYPE TROJAN!"
XOptim3regdtopt.exe"Added by the RAMVICRYPE TROJAN!"
XOptim4regdtopt.exe"Added by the RAMVICRYPE TROJAN!"
XOptim[NUMBER][path] egdtopt.exe"Added by the RAMVICRYPE TROJAN!"
NOptusNet Desktop Service CentreDSC.exeOptusNet DSL or Dial-Up connection software
UOutlookOnDesktopOutlookDesktop.exe"""Outlook On the Desktop is a program that displays Outlook as a transparent
UP3000x_S2PScanToPc.exeDell Laser MFP 1600N network application for scanning files to the PC
NPalm DesktopPalm.exe"Palm Desktop Software for use with Palm handheld devices. Available via Start -> Programs"
NPC Pitstop Optimize ReminderReminder.exe"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
UPC Pitstop Optimize SchedulerPCPOptimize.exe"Scheduler for the Optimize system optimization utility from PC Pitstop"
NPCPitstop Registration ReminderReminder.exe"Registration reminder for the Exterminate antimalware package from PC Pitstop"
UPCPitStopEraserPCPitStopErase.exe"""PC PitStop Erase is both a free privacy scanner and paid tracks cleaner"""
UPdaNet DesktopPdaNetPC.exe"PdaNet from June Fabrics Technology Inc. Use Windows Mobile Smartphone or PocketPC Phone as wireless modem for your PC"
UPlainSight Desktop CalendarCalendar.exe"PlainSight Desktop Calendar by Desksware - ""It can display Microsoft® Outlook® data
UPop-Up Stopperdpps2.exe"Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group"
XPopUp StopperNO POPUP.EXE"Added by the SPYBOT-DC WORM!"
UPopUpStopperCompanionPSComp.exe"PopupStopper Companion popup blocker"
UPopUpStopperFreeEditionPSFREE.EXE"Panicware's Pop-Up Stopper - free limited features version"
UPopUpStopperProfessionalPopUpStopperProfessional.exe"Panicware's Pop-Up Stopper - paid for version"
YPP2000 Real Time ScanPPVstop.exeProtector Plus anti-virus software - real time scanner
XREGRUNMautoprotect.exeAdded by an unidentified WORM or TROJAN!
URemote Desktop Computingmarspc.exe"Marspc Remote Desktop Computing"
XRemote Desktop Help Session ManagerWinRDH.exe"Added by a variant of the SDBOT WORM!"
URestoreDesktopRestoreDesktop.exe"Softwarium Restore Desktop ""is a Windows Context Menu addition that automatically saves and restores the icons' positions on the Windows desktop after a resolution change"""
NSetupICWDesktopicwconn1.exeAppears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
XSoftware Soft StopSpyware Soft Stop.exe"SoftStop rogue security software - not recommended"
USpyStopperspystopper.exe"SpyStopper - blocks intrusive spyware
XSpyware Soft StopSpyware Soft Stop.exe"SoftStop rogue security software - not recommended"
XSpywareSoftStopSpywareSoftStop.exe"SoftStop rogue security software - not recommended"
XSpywareStopSpywareStop.exe"SpywareStop rogue spyware remover - not recommended
UStartStopSTARTSTOP.EXE"StartStop from TFI Technology - startup manager"
XStopingSpyStopingSpy.exe"StopingSpy rogue security software - not recommended
UStopSignSsTsMon"sstsmon.dll VerifyStatus"
UStopSignStatusstopsinfo.dll"eAcceleration Stop-Sign security software related. Previously not recommended
USTOPzillaStopzilla.exe"StopZilla! - pop-up killer"
USTOPzilla ServiceSZNTSVC.EXE"StopZilla! - pop-up killer"
USuper X Desktop Version 3.4SXDesk.exe"Super X Desktop - virtual desktop manager"
USureshotpopupkillerStopthepop.exe"Stop-the-Pop-Up popup blocker"
YSymantec Backup Exec Desktop AgentDLOClientu.exe"Part of Symantec's Backup Exec backup software"
YSymantec NetBackup Desktop AgentDLOClientu.exe"Part of Symantec's NetBackup backup software"
XSysDesktopfswanQQ.exe"Added by the QQSEND-A TROJAN!"
USystem Mechanic Popup StopperPopupstopper.exe"Popup stopper part of Iolo System Mechanic utility suite"
XSystemBMessengerStopper.exe"MessStopper adware"
XToPLSASS.exe"Added by the WOWCRAFT.C TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XTop TilecomTilecomtop.com"Added by the RBOT.BXD WORM!"
?ToPassSrvPktopass.exe"Related to Caere Pagekeeper scanning software (now taken over by Scansoft)
Xtopatzlip.exe"Added by the FLOOD-IG TROJAN!"
UTopDeskTopDesk.exe"TopDesk windows management utility from Otaku Software Pty Ltd which allows you to quickly tile windows (all
?topitopi.exe"Toshiba Online Product Information. What does it do and is it required?"
XTopic cPanrcPaner.com"Added by the SDBOT.AJP WORM!"
XTopic lnternetlnternet32.exe"Added by the RBOT-GLZ WORM!"
XTopic MSNGR32MSNGR32.com"Added by a variant of the IRCBOT TROJAN!"
XTopic SoftTilesoft.com"Added by the RBOT.GDH WORM!"
XTopic TilesysTilesys.com"Added by a variant of the RBOT WORM!"
XToPicks StarterIdhost.exe"TOPicks adware"
UTopmostClockTopMostClock.exe"TopMost Clock - transparent analog clock which displays on top of your other windows"
XtopmoxieJavaRun.exe"TopMoxie adware"
XTopSearchTopSearch.exe"TopSearch adware variant"
UTurboTopTurboTop.exe"TurboTop - make any window ""Always on top"""
NUtopia AngelAngel.exe"Calculator for the online Utopia game"
NWaveTop LauncherWaveTop.exe"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
NWaveTop Receiver 1N/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
NWaveTop Receiver 2N/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
NWaveTop Upload ManagerN/A"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
XWeatherStudio DesktopWeatherStudio Desktop.exe"WeatherStudio adware"
YWebroot Desktop FirewallWDF.exe"Webroot Desktop Firewall"
Uwebscanstopsignav.exe"eAcceleration Stop-Sign security software related. Previously not recommended
XWindows Desktop Controlerwindesktop.exe"Added by the SDBOT-XH WORM!"
XWindows Desktop Daemonwinpadg.exe"Added by a variant of the SPYBOT WORM!"
NWindows Desktop SearchWindowsSearch.exeSystem Tray access to Windows Desktop Search for XP from Microsoft - which adds additional search options including a search box on the Taskbar. On earlier versions this entry also runs the indexing function at startup which indexes files and e-mails items so you can quickly find words and phrases (replaced by a service in later versions). Disabling this entry does not affect the normal operation and indexing will occur when you next perform a search
XWindows More ChoiceTopContext.exe"ZQuest adware"
Xwinltmpvwutop.exe"Added by the TCXMEDI-C TROJAN!"
UXStop95XStop95.exe"XStop - internet filter"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.