Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
XATI Video Driver Controlatigfx.exe"Added by the RBOT-FWL WORM!"
XATI Video Driver Controlbtorrent.exe"Added by a variant of the IRCBOT TROJAN!"
XATI Video Driver Controls[path to worm]"Added by the SDBOT-DDS WORM!"
XATI VIDEO REGKEYati2vid.exe"Added by the SDBOT.UR WORM!"
Xcaseyvideocaseyvideo.exeMalware causing adult content popups
Xcaseyvideo[*] [* = digit]caseyvideo[*].exe [* = digit]Malware causing adult content popups
NCompaq Video CD Watcher??For Compaq PC's. MPEG viewer
XDirector Videobtnmgern.exe"Added by the MYTOB-KL WORM!"
XDirectX Video Driverdxterm5.exe"Added by the WILAB-A TROJAN!"
XDIVX Video PlayerDIVXPloyer.exeAdded by an unidentified WORM or TROJAN!
XDvVideo32dvvid32.exe"Added by the TINY.FD TROJAN!"
NIntervideo Win Cinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo Win Cinema ManagerWINCIN~1.EXE"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinCinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinCinema ManagerWINCIN~1.EXE"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinSchedulerWinScheduler.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NIntervideo WinSchedulerSchSvr.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
YLogitechRegisterVideoApplicationsInstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software
ULogitechVideoRepairISStart.exe"Installed with Logitech's QuickSmart and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present
ULogitechVideoTrayLogiTray.exe"System Tray access to My Logitech Pictures
ULogitechVideo[inspector]InstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications
XMicrosoft Nvidia Videonvidia.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Update Managerscvideo.exe"Added by the SDBOT-CVP TROJAN!"
XMicrosoft Video Capture ControlsMSsrvs32.exe"Added by the SDBOT-AAK WORM!"
XMicrosoft Video Controlstskmsgr.exe"Added by a variant of the SPYBOT WORM!"
XMicrosoft Video Drivervideodrv.exe"Added by the SDBOT-AGP WORM!"
NmiroVIDEO Tray Toolmisitray.exe"Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed
UMSN Video EnhancedMSNVE.exe"""MSN Video Enhanced can play videos that have dramatically improved video quality and sound. It can play the latest high-quality videos at the best possible quality."" No longer appears to exist"
XMSVSyncvideosync.exe"Added by a variant of the SPYBOT WORM!"
XNVIDIA Video driversvideo_32D.exe"Added by the AGOBOT.KV WORM!"
XNVIDIA Video driversvideo_32sD.exe"Added by the RBOT-BB WORM!"
XNvVideoCenterNvVid.exe"Added by the HAXDOOR-DO TROJAN!"
XRealplayer VideoRealPlay.exe"Added by a variant of the RBOT WORM!"
NSpeedBitVideoAcceleratorVideoAccelerator.exe"""SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups"""
XsVideo2[path to dialler]"""Switch-D"" premium rate adult content dialler"
XSystemTraVideo.EXE"Added by the LOVGATE.E WORM!"
XUKVideo2ukvideo2.exeAdult content dialler
XVideoexplored.exe"Added by the GAOBOT.RF WORM!"
XVideowinamp32.exe"Added by the AGOBOT-NG WORM!"
XVideo Camera Frogwcamfrog.exe"Added by a variant of the IRCBOT TROJAN! See here"
XVideo Card Driver (do not remove)tsasi.exe"Added by the SPYBOT-EF WORM!"
XVideo DisplayVDISP.EXE"Added by the AGOBOT-KE WORM!"
XVideo Driversvchost.exe"Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
XVideo DriverMsregdrv32.exe"Added by the SPIGOT BACKDOOR!"
XVideo Lan PlayerVideoLanPlayer.exe"Added by the RBOT-MY WORM!"
XVideo Managervideomgr.exe"Added by the PANDEM.C WORM!"
XVideo Multimedia Driverndrives32.exe"Added by the RBOT-DK WORM!"
XVideo Poeswinii.exe"Added by the AGOBOT-CP WORM!"
XVideo Proceswinaps.exe"Added by the AGOBOT.HD WORM!"
XVideo Processsysconf.exe"Added by the GAOBOT.GEN!POLY or GAOBOT.UM or GAOBOT.ADX WORMS!"
XVideo ProcessMS32x16.exe"Added by the RBOT.RH WORM!"
XVideo Processnetsvcs.exe"Added by the AGOBOT.LH WORM!"
XVideo ProcessMSlti64.exe"Added by the AGOBOT.UE WORM!"
XVideo Process[random filename]"Added by the RBOT-LM WORM!"
XVideo Processwinasp.exe"Added by the AGOBOT-IS WORM!"
XVideo Processmsn5.exe"Added by the AGOBOT-TW WORM!"
XVideo ProcessMStli32s.exe"Added by the RBOT-GAD WORM!"
XVideo Processwincert32.exe"Added by the AGOBOT.JT WORM!"
XVideo Processntsystm.exe"Added by the GAOBOT.ZX WORM!"
XVideo ProcessNivopsvc.exe"Added by the AGOBOT-GT WORM!"
XVideo Processwincrt32.exe"Added by the AGOBOT-GR WORM!"
XVideo ProcessAvg123.exe"Added by the AGOBOT-MS WORM!"
XVideo ProcessNavapsvcc.exe"Added by the SPYBOT-CW WORM!"
XVideo Processormsconfsys88.exe"Added by the AGOBOT-QG WORM!"
XVideo Proeswinaii.exe"Added by the AGOBOT-FH WORM!"
XVideo Servicesexplore.exe"Added by the GAOBOT.GL WORM!"
XVideo Servicesvideol_32.exe"Added by the AGOBOT-DM WORM!"
XVideo Servicessys32.exe"Added by the AGOBOT.PS WORM!"
XVideocntlVideocntl.exe"Added by a variant of the GEMA.D TROJAN!"
XVideoDriver[filename]"Added by the GSPOT20.A TROJAN!"
XVideoDrivervideodrv.exe"Added by the MIMAIL.A WORM!"
XVideoDrivergspotbot.exe"Added by the SPIGOT.C TROJAN!"
XVideoDriverHookvmdriver.exe"Added by the BCKDR-PSS BACKDOOR!"
XVideool32VIDEOL32.EXE"Added by the AGOBOT.EC WORM!"
Xvideopcivideopci.exe"Added by the AGENT-W TROJAN!"
Xvideoporno.exevideoporno.exePremium rate adult content dialer
YVideoraVideora.exe"Video Holding personal video downloading program"
XWin32 Configurationvideosd32.exe"Added by the SDBOT.TT WORM!"
XWindows Servicevideo.exeAdded by an unidentified TROJAN!
XWindows Servicevideo2.exeAdded by the DOWNLOADER.SMALL.MY TROJAN!
XWindows videovide_32.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XWindows Video Acquisition (WVA)wvsvc.exe"Added by the AGOBOT.YM WORM!"
XWindows Video Componentwvcsvc.exe"Added by a variant of the IRCBOT TROJAN!"
XWindows Video Driversvideons32.exe"Added by the GAOBOT.AZT WORM!"
XWindows Video DriversVIDEONS3.EXE"Added by the AGOBOT-KZ BACKDOOR!"
XWindows Video Inputviwsvc.exe"Added by the SLENFBOT.GS WORM!"
XWinsystemFreevideo5.EXE"Added by the AGENT.FZS WORM!"
Xxxxvideoxxxvideo.exe"AccessPlugin premium rate adult content dialler"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.