_start.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AOLStart	AOLStart.exe	"Added by the KRAIMER.12 TROJAN!"
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
U	ASUS TweakEnable	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	ATI Technology Startup	techstart.exe	"Added by the RBOT-AEU WORM!"
N	ATICCC	CLIStart.exe	Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
U	BtStart	btstart.exe	"Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software"
N	CACStarter	cacstart.exe	Cash A Check - check writing software
X	ccStart	ccStart.exe	"Added by the AGOBOT-IR WORM!"
X	Classes	mstart.exe	"""Switch"" premium rate adult content dialler variant"
N	CLISTART	CLIStart.exe	Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
?	Clotusorgreg0	prtStart.exe [path] Orgprt.exe	"IBM Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?"
?	delstart	delstart.exe	"Reportedly part of BT ISP software - what does it do and is it required in startup?"
X	dgtstart	dgtstart.exe	"DigitalNames.g adware"
X	DigitalNames	DigitalNamesStart.exe	"DigitalNames spyware variant"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y	Dpcstart	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
Y	EAFRCliStart	EAFRCliStart.exe	"Related to Encryption Anywhere hard disk encryption products from GuardianEdge"
N	eWare Startup	iWareStart.exe	"eWare iWare task bar. Not required"
X	Explorer	msrstart.exe	"Added by the SOPICLICK TROJAN!"
U	FMStart	Fmstart.exe	"GFI FAXmaker - native fax connector for Microsoft Exchange Server or for networks
Y	gStart	gStart.exe	gStart GPS software from Garmin
N	HP JetSpeed Autostart	AUTOSTART.EXE	Autostart executable for the old multiplayer game HP Jetspeed
N	ImgStart	ImgStart.exe	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
U	IMStart	IMStart.exe	"InterMute security software related"
N	Iomega Startup Options	IMGSTART.EXE	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
U	ISStart	ISStart.exe	"Installed with Logitech's QuickSmart
Y	KavStart	KAVStart.exe	"KingSoft Personal Firewall"
U	LexStart	lexstart.exe	Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
U	Logitech ClickSmart	ISStart.exe	"Installed with Logitech's QuickSmart webcam software. The exact purpose of this startup entry is unknown at present
U	Logitech ImageStudio	ISStart.exe	"Installed with Logitech's ImageStudio webcam software. The exact purpose of this startup entry is unknown at present
U	Logitech QuickCam	ISStart.exe	"Installed with older versions of Logitech's QuickCam webcam software. The exact purpose of this startup entry is unknown at present
U	LogitechGalleryRepair	ISStart.exe	"Installed with Logitech's ImageStudio webcam software. The exact purpose of this startup entry is unknown at present
U	LogitechVideoRepair	ISStart.exe	"Installed with Logitech's QuickSmart and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present
X	mload	lxmstart.exe	"Added by an unidentified VIRUS
X	Msstart	msstart.exe	"Added by the LIVUP.C TROJAN!"
U	NeroHomeFirstStart	NMFirstStart.exe	"Associated with Nero Scout
U	NMFirstStart	NMFirstStart.exe	"Associated with Nero Scout
X	Norton Start	ccStart.exe	"Added by the SDBOT-OX WORM!"
U	OAKSTART	OAKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	OM2_Monitor	FirstStart.exe	"Olympus Master 2 - digital camera management tools"
N	OM_Monitor	FirstStart.exe	"Olympus Master 1 - digital camera management tools"
N	OpenOffice.org ..*	quickstart.exe	"OpenOffice.org office suite quick start (where ""..*"" is the version number)"
U	P2kAutostart	P2kAutostart.exe	"P2kCommander a filemanager application for Motorola p2k mobile phones"
U	PLXSTART	PLXSTART.EXE	Sets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW.
U	QDM	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
U	QDMStart	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
?	RemStart	remstart.exe	"Part of McAfee's Remote Desktop 32 Agent application. What does it do and is it required?"
U	Sabre Printing Start	Sabstart.exe	"Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines
U	Sabre Task Tray Icon	Sabstart.exe	"Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines
N	SoniqueQuickStart	sqstart.exe	"Quickstart for the discontinued Sonique audio player. Available via Start -> Programs"
N	Spdstart	Spdstart.exe	"Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications
N	StartCCC	CLIStart.exe	Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
U	SynTPStart	SynTPStart.exe	Synaptics Pointing Device starter belonging to Synaptics Pointing Device Driver
U	TB2PROEXE	tb2start.exe	"Timbuktu Pro - remote desktop access software"
U	TDKSTART	TDKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	UC_SMB	ucstart.exe	Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed
U	ViStart	ViStart.exe	"ViStart (Vista Start Menu for XP) adds a Vista style Start Menu for Windows XP users and can be loaded at boot time or started manually"
U	ViStart - The Vista Start Menu	ViStart.exe	"ViStart (Vista Start Menu for XP) adds a Vista style Start Menu for Windows XP users and can be loaded at boot time or started manually"
X	WinStart	WinStart.exe	"From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words
X	winstart	winstart.exe	"Added by the SCKEYLO-AB TROJAN!"
X	wormexe	winstart.exe	"Added by the EARLYBIRD WORM!"
X	[Randomly chosen existing folder name]	_start.exe	"Added by the ANTINNY-L WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.