Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
XAlphaAVAlphaAV.exe"Alpha Antivirus rogue security software - not recommended
Xantispyieav.exe"IE AntiVirus rogue security software - not recommended
XAntivirusav.exe"Added by the SINKIN TROJAN! Resets IE start page to realphx.com"
XAntivirusvav.exe"Vista Antivirus 2008 rogue security software - not recommended
XAntivirusaav.exe"Advanced Antivirus rogue security software - not recommended
XANTIVIRUSmicroAV.exe"Micro Antivirus 2009 rogue security software - not recommended
XANTIVIRUSUltraAV.exe"Ultra Antivirus 2009 rogue security software - not recommended
XAntivirussav.exe"System Antivirus 2008 rogue security software - not recommended
XAntivirusuav.exe"Ultimate Antivirus 2008 rogue security software - not recommended
XAntiviruswav.exe"Windows Antivirus 2008 rogue security software - not recommended
Xavexpressav.exe"Express Antivirus 2009 rogue security software - not recommended
XAVScanwinav.exeUnidentfied rogue security software
NCmFlywaveNameCmFlywav.exe"Driver for Linksys Wireless-G Music Bridge"
YDpcnavdpcnav.exe"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
XDrWeb AntivirusDRWEBAV.EXEAdded by an unidentified WORM or TROJAN!
XEasyAVEasyAV.exe"Added by the NETSKY.S or NETSKY.T WORMS!"
XExtra AntivirusExtraAV.exe"Extra Antivirus rogue security software - not recommended
XFast Antivirus 2009FastAV.exe"Fast Antivirus rogue security software - not recommended
XffeqOMEvcvsav.exe"Added by the RANKY.AB TROJAN!"
NfontnavFontNav.exe"Font Navigator from Bitstream Inc. - a font management utility"
XGhost AntivirusGhostAV.exe"Ghost Antivirus rogue security software - not recommended
XHomeAVhomeav.exe"Home Personal Antivirus rogue security software - not recommended
UHPPWRSAVHPPWRSAV.EXE"Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com
Yiolo AntiVirusioloAV.exe"iolo AntiVirus"
XiSafeAViSafeAV.exe"iSafe AntiVirus rogue security software - not recommended
XKaspersky AntivirusKasperskyAV.exe"Added by a variant of the RBOT WORM!"
YKAVPersonal50Kav.exe"Kaspersky Anti-Virus Personal 5.0"
Xkviurskav.exe"Added by the SILLYFDC.BBJ WORM!"
XMcAfeeMcAffeAv.exe"Added by the NETSKY.AL WORM!"
XMcAfee AntivirusMcAfeeAV.exe"Added by a variant of the RBOT WORM!"
XMcAfee Antivirus ProtectionmcafeeAV.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Gina V EncryptionMSGINAV.EXE"Added by an unidentified VIRUS
XMicrosoft UpdateNAV.exe"Added by the RBOT-IV WORM!"
Xmsvcavmsvcav.exe"Added by the AGENT-ACR TROJAN!"
XNano Antivirusnanoav.exe"Nano Antivirus rogue security software - not recommended
XNorton Antivirusnortonav.exe"Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV!"
XNorton Antivirus Updaternortonav.exe"Added by the DELBOT-T WORM! Note - this is not the real Norton AV!"
Xnsdcmd servicesnsdcmdav.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XPaladin Antiviruspav.exe"Paladin Antivirus rogue security software - not recommended
XPAVpav.exe"Personal Antivirus rogue security software - not recommended. Located in %ProgramFiles%\PAV"
XPAV.EXE%Number%"Added by the KITRO.D (or ARGEN.A) WORM! %Number% can be any number"
YPAV.EXEPAV.EXE"PER Antivirus"
YPC Tools AntiVirus ClientPCTAV.exe"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
YPCTAVPCTAV.exe"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
YPCTAVAppPCTAV.exe"System Tray access to PC Tools AntiVirus from PC Tools - which ""provides world-leading protection against viruses
XPersonalAVpav.exe"PersonalAV rogue security software - not recommended. Detected as the FAKEAV.FT TROJAN by Trend. Located in %ProgramFiles%\PersonalAV"
XProtocol Settingskav.exe"Added by a variant of the RBOT WORM!"
XRealAV.exeRealAV.exe"Real Antivirus rogue security suite - not recommended
XSafePcAvSafePcAv.exe"SafePcAv rogue security software - not recommended
Xsearchnavsearchnav.exeSearchNav adware - IEFeatures/Popnav variant
XSecure AntiVirus Proav.exe"Secure AntiVirus Pro rogue security software - not recommended
XSecurePcAvSecurePcAv.exe"SecurePcAv rogue security software - not recommended
USiteAdvisorSiteAv.exe"Refer to the SiteAdv.exe entry. This entry only appears to originate from version 2.0.0.75 (Build 4295) of SiteAdvisor and the registry entry incorrectly points to the invalid filename ""SiteAv.exe"" - when it should be ""SiteAdv.exe"""
USiteAvSiteAv.exe"Refer to the SiteAdv.exe entry. This entry only appears to originate from version 2.0.0.75 (Build 4295) of SiteAdvisor and the registry entry incorrectly points to the invalid filename ""SiteAv.exe"" - when it should be ""SiteAdv.exe"""
XSymAVSymAV.exe"Added by the NETSKY.U WORM!"
XSysAntivirus 2009sysav.exe"SysAntivirus 2009 rogue security software - not recommended
Xsysavwinav.exe"WinPC Antivirus rogue security software - not recommended
XTRE AntiVirustreav.exe"TRE AntiVirus rogue security software - not recommended
XTrend Micro AVtrendav.exe"Added by the AGOBOT-OH WORM! Note - this is not a valid Trend Micro antivirus entry"
XWebdav.exewebdav.exeIRC DDoS bot which gives the hacker full control over your system
Uwebscanstopsignav.exe"eAcceleration Stop-Sign security software related. Previously not recommended
XWin Antispyware Centerav.exe"Win Antispyware Center rogue security software - not recommended
XWinAntiVirus Pro 2007WinAv.exe"WinAntiVirus Pro 2007 rogue security software - not recommended
XWinAntiVirusPro2006WinAV.exe"WinAntiVirus Pro 2006 rogue security software - not recommended
X[random][random]sftav.exe"Antivirus Soft rogue security software - not recommended
X[various names]clamav.exe"Wareout - malware masquerading as a spyware and dialer remover"
X[various names]SYSTRAV.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.