Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
YAcer Launch ToolAlaunch"Part of Acer eRecovery - ""a powerful utility that does away with the need for recovery disks provided by the manufacturer
Ualaala.exe"Access Lock - ""an easy-to-use system-tray security utility you can use to secure your desktop when you are away from your computer. Just configure the program
Uala.exeala.exe"Access Lock - ""an easy-to-use system-tray security utility you can use to secure your desktop when you are away from your computer. Just configure the program
UAlarm ManagerAlarmapp.exePalm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?AlarmWatcherAlarmWatcher.exe"Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?"
YAlaunchAlaunch"Part of Acer eRecovery - ""a powerful utility that does away with the need for recovery disks provided by the manufacturer
UChikkaDefaultChikkaLauncher.exe"Chikka PC text messanger and IM client"
XData Layer 2datalayer.exe"Added by the RBOT-BNF WORM! Note - do not confuse with the legitimate Nokia file sharing the same filename - this one is located in %System%"
YDataLayerDataLayer.exe"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
YDataLayerDATALA~1.EXE"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
NECenterEULALauncher.exeEnd User License Agreement (EULA) launcher - related to Dell E-Center/Google Toolbar
XHELPERnew_zealand.exe"AsdPlug premium rate adult content dialer variant"
UHomeAlarmHomeAlarm.exe"Chameleon Clock - system tray clock replacement"
YLaunchAppAlaunch"Part of Acer eRecovery - ""a powerful utility that does away with the need for recovery disks provided by the manufacturer
XLoginlala.exe"Added by the BUGSPR-A TROJAN!"
XMalwareAlarmMalwareAlarm.exe"MalwareAlarm rogue security software - not recommended
XMicrosoft Update Machinezonealarm.exe"Added by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program!"
UMyVitalAgentVtlAgent.exe"MyVitalAgent from Lucent Technologies. Replacement for Net.Medic
YNokia PC SuiteDataLayer.exe"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
XOperalaunchvmm.exe"Added by the AGENT-IBD WORM!"
XPaladin Antiviruspav.exe"Paladin Antivirus rogue security software - not recommended
XPersonalAntiSpy Freepas.exe"PersonalAntiSpy rogue spyware remover - not recommended
XPersonalAVpav.exe"PersonalAV rogue security software - not recommended. Detected as the FAKEAV.FT TROJAN by Trend. Located in %ProgramFiles%\PersonalAV"
UPlus! Alarm ClockAlarmClock.exeAlarm Clock function of Microsoft Plus! Digital Media Edition (which is no longer available)
?PrimaLauncherLauncher.exe"Associated with PrimaScan scanners. Is it required?"
Xreal scheduler.htaRealAudio.exe"Added by the CEEGAR TROJAN! Note - this is not associated with the popular RealPlayer media player"
XRealAudioRealAudio.exe"Added by the CEEGAR TROJAN! Note - this is not associated with the popular RealPlayer media player"
XRealaudio Playerrealaudio32.exe"Added by the AGOBOT.AFR WORM!"
XRealAV.exeRealAV.exe"Real Antivirus rogue security suite - not recommended
NSalaatTimeSalaatTime.exe"""Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world"""
USkinClockAtomicAlarmClock.exe"Atomic Alarm Clock - ""Alert yourself about important events with different alarms and replace your computer tray clock using different skins. Computer Alarm clock that will play any MP3 file. It can also run a program
Ntoolbar_eula_launcherEULALauncher.exe"Related to Google Desktop"
NUltra Hal Assistant 4.5 StartupHalAsst.exe"Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion"
XVdat Updatelalaa.exe"Added by a variant of the RBOT WORM!"
XVirus AlarmVAlarm.exe"Virus Alarm rogue security software - not recommended
Xw32alanismope.scr"Added by the SINALA WORM!"
XWindows Secure talal32[7 random letters].exe"Added by the RBOT.HTP TROJAN!"
XWinsock2 driverZONEALARM.EXE"Added by the SDBOT.T TROJAN! Note - ZONEALARM.EXE is not the valid Zone Labs firewall program"
XWinsock32driverZoneAlarmPr0.exe"Added by the HACKARMY-B TROJAN!"
XYa SalamNancyAjram.exe"Added by the JALABED WORM!"
XZone Alarmvsmon.exe"Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector"
Xzone alarm securityzlclint.exe"Added by the NIRBOT WORM!"
YZoneAlarmzonealarm.exe"Firewall program from Zonelabs - free version"
Xzonealarm[random filename]"Added by an unidentified VIRUS
XZonealarmRemoveme.exe"Added by the FORBOT-BG WORM!"
XZonealarmiexplore.exe"Added by the FORBOT-CP WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
YZoneAlarm Pluszaplus.exe"Firewall program from Zonelabs - paid for version"
YZoneAlarm ProZapro.exe"Firewall program from Zonelabs - paid for version"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.