b.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	"aimb.exe"" -h"	aimb.exe	"IMSufSentinel is a spy program which can record IM conversations
X	.nvsvcb	smssb.exe	"Added by the BOXED.CG TROJAN!"
Y	accrdsub	accrdsub.exe	"ActivIdentity ActivClient - security software from ActivIdentity Corporation which ""enables organizations to secure workstations with smart cards and smart USB tokens while enforcing strong authentication for desktop access and network login"""
?	ADSLSYSTEMTRAY	SystemtrayV100B.exe	"Apparently Annex A ADSL modem related. What does it do and is it required?"
U	AdSubtract	adsub.exe	"AdSubtract blocks ads
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
U	AppExtender	AppExtCB.exe	"Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received"
U	Argentum Backup	ab.exe	"Argentum Backup - a small backup program that lets you easily back up your documents and folders"
U	AS00_WN511B	WN511B.exe	"Netgear RangeMax NEXT wireless adapter configuration utility"
Y	AspireTimeMachine	acertmb.exe	"System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP
N	ASUS Probe	AsusProb.exe	ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U	AtiPTA	Atiptaab.exe	"Control panel for the ATI series of video cards allowing access to such features as display resolution
Y	atwtusb	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
N	AudioHQ	Ahqtb.exe	For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
X	avguard3876	000b09274b.exe	"AntiVirus ransomware security software - not recommended
X	b.exe	b.exe	"Added by the SDBOT.BND WORM!"
U	Backup4all OTB Agent	B4AOTB.exe	"""Backup4all is an award-winning data backup software for Windows. This backup utility was designed to protect your valuable data from partial or total loss by automating backup tasks
N	BackWeb	backweb.exe	Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
U	BAUSB	BAUSB.exe	"Boston Acoustics Audio
X	Bharatayuda	GNB.exe	"Added by the BHARAT.A WORM!"
X	bin32hpu	ppstub.exe	"PrecisionPop adware"
X	Brct	trdb.exe	"Detected by Kaspersky as the PURITYSCAN.Y TROJAN!"
X	Bron-Spizaetus	bronstab.exe	"Added by the RONTOKBRO.C WORM!"
X	Bron-Spizaetus	ElnorB.exe	"Added by the RONTOKBRO.D WORM!"
X	Cas2Stub	cas2stub.exe	"CasinoClient adware"
X	CasStub	casstub.exe	"Added by the CASS-A TROJAN!"
X	cjb	cjb.exe	"Added by the AGENT.ALZE TROJAN!"
X	ClickTheButton	CTB.EXE	"ClickTheButton adware"
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See the entry for Compaq Message Server
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
X	delmsbb	delmsbb.exe	"180Search adware"
?	DHNUXB	DHNUXB.exe	"??"
X	dnam	d140113.a.Stub.EXE	"Added by the STUB_A TROJAN!"
X	Drivers for Internet Explorer	accesweb.exe	"Added by the STARTPAGE.FW TROJAN!"
X	DSB	DSB.exe	"EnergyPlugin adware"
N	Easy Start Button	esb.exe	Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
X	EasyDates_gb	EasyDates_gb.exe	"""Edate-A"" premium rate adult content dialler"
U	ECenter	gtb.exe	Dell E-Center/Google Toolbar related
X	eMakeSV	EMAKE2B.EXE	"""Switch"" adult content dialer"
X	empin	e121307.Stub.exe	"Delfin Media Viewer adware related"
X	Eptr	nopdb.exe	Added by an unidentified WORM or TROJAN!
U	ESB	esb.exe	Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
U	EZ-DUB Finder	EZ-DUB.exe	"Support software for the Lite-On EZ-DUB external DVD writer from Lite-On IT Corporation"
?	gnub	gnub.exe	"??"
X	grgtgvgb.exe	[random].exe	"Added by the AGENT-EBF TROJAN!"
?	hpScannerFirstBoot	scannerfb.exe	"HP scanner related"
X	icrosoft Visual InterDevc	zvslmqb.exe	"Added by the RBOT-AYP WORM!"
X	IExplorer32 Java Scripting	IExplore32b.exe	"Added by the RBOT.ABO WORM!"
X	IExplorer32c Java Scripting	IExplore32cb.exe	"Added by the RBOT.ABN WORM!"
U	Installstub	installstub.exe	"Tool for Outlook and Outlook Express from Plaxo for organising and keeping contacts organised and updated and providing online access to your contacts and access from PDA or mobile phone"
X	Intel Physical Routine 1.2A	stnetlib.exe	"Added by the BACKDR-AS BACKDOOR!"
X	iPOD USB Driver	IPODUSB.EXE	"Added by a variant of the RBOT WORM!"
X	ish-b.exe	ish-b.exe	"Added by the IRCBOT-ACZ TROJAN!"
X	Jreg	Jreg2b.exe	"FlashEnhancer adware"
U	KBD	KbdStub.EXE	Key Watcher from HP - watches for Multimedia Keys on HP keyboards
U	KEMailKb	KEMailKb.EXE	"Controls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the buttons - like volume control or shut down"
X	laltin	L90112201.Stub.exe	"Delfin Media Viewer adware related"
U	LOAD WB	LOADWB.EXE	"Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars
X	media_stub	stub.exe	"Mini-Player
X	Microsoft Cab Manager	cab.exe	"Added by the DELF-JJ TROJAN!"
X	Microsoft Driver Setup	Jwrb.exe	"Added by the AUTORUN-AOB WORM!"
X	Microsoft PCHealth32	NDDENB.exe	"Added by the PWSYAHOO-A TROJAN!"
X	Microsoft Security Monitor Process	web.exe	"Added by the EGGDROP.V BACKDOOR!"
X	Microsoft Standard Executions Library	win32lib.exe	"Added by the RBOT-AUK WORM!"
X	Microsoft System Checkup	Wnetlib.exe	"Added by the DONK.C WORM!"
X	Microsoft System Checkup	dbnetlib.exe	"Added by the DONK.L WORM!"
X	Microsoft Update	wuamgrb.exe	"Added by the RBOT-AZE WORM!"
X	Microsoft Update Machine	wftestb.exe	"Added by the RBOT-AFZ WORM!"
X	Microsoft Windows Express	windowslogonb.exe	"Added by the SDBOT.ABOO WORM!"
N	Microsoft Works Portfolio	WksSb.exe	The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file. Can be prevented from starting from a setting within Portfolio
X	Micrsoft DerSystem	uqieelpb.exe	"Added by the RBOT-GRI WORM!"
X	Mircrosoft Windows Config DLL	rundllc32b.exe	"Added by the RBOT-ZY WORM!"
U	mkb.exe	mkb.exe	"MomKnowsBest surveillance software. Uninstall this software unless you put it there yourself"
U	MoodBook	mb.exe	"MoodBook is a free Windows utility that brings art to your desktop"
X	morphstb	morphstb.exe	"Adware - detected by Kaspersky as the STUBBY.C TROJAN!"
N	Motive SmartBridge	MotiveSB.exe	"System tray icon for the Virtual Assistant from AT&T Broadband
N	MotiveSB	MotiveSB.exe	"System tray icon for the Virtual Assistant from AT&T Broadband
X	motoin	mm15201518.Stub.exe	"Delfin Promulgate adware variant"
X	MS Unix Binary	win32ttb.exe	"Added by the SPYBOT.OQ WORM!"
X	MS-Connect	web.exe	"Adult content dialler - see here"
X	msbb	msbb.exe	"180Search adware"
X	Msbb.exe	Msbb.exe	"Added by the SDBOT.QJ WORM!"
X	MSIE Parsers	MSIE32ab.exe	"Added by the SDBOT.MV WORM!"
X	MsMon32	MsMon32b.exe	"Added by the SDBOT.O BACKDOOR!"
X	msnnt	winampb.exe	"Chinese originated adware - detected by Kaspersky as the AGENT.TL TROJAN!"
X	OB Updater	ob.exe	"Added by the AGOBOT-IH WORM!"
X	Omega AntiVir	OM83b.exe	"Omega AntiVir rogue security software - not recommended
U	Pando Media Booster	PMB.exe	"Pando Media Booster from Pando Networks
X	PGStub.exe	[various filenames]	Unidentified adware
U	PopSubtract	PopSub.exe	"PopSubtract - pop-up killer"
X	Protector GB	protectgb.exe	"Added by the BANKER.EIE TROJAN!"
N	ptfb	ptfb.exe	"Push the Freakin' Button - "When a dialog causes irritation
N	Push The Freakin' Button	ptfb.exe	"Push the Freakin' Button - "When a dialog causes irritation
N	QTSTUB.EXE	Qtstub.exe	Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
X	RamBooster2	rb.exe	"Added by the AKAK TROJAN!"
U	Rapid Restore	rrpcsb.exe	"XPoint ""Rapid Restore PC"" - ""a Managed Recovery solution that enables IT Administrators to protect the corporate image
Y	RavStub	ravstub.exe	"Rising antivirus"
?	RenolB	ib.exe	"??"
U	ReproPRD	PrdUsb.exe	"Thrustmaster Corporation Presets application - a game controller driver
X	RNDc Test	wf32b.exe	"Added by a variant of the SDBOT WORM!"
X	rsmb	rsmb.exe	"Added by the WAREZOV.C WORM!"
U	SB	SB.exe	Acer Soft Button on Acer Tablet PCs
X	scain	s030109.Stub.exe	"Delfin Media Viewer adware related"
X	servicestub.exe	servicestub.exe	"Added by the RBOT.CN BACKDOOR!"
X	Setting	sysweb.exe	"Added by the SDBOT.GEN TROJAN!"
X	Sex Teris	st01b.exe	"Added by the REPAD WORM!"
U	Sinus 1054 data WLAN Manager	Wifiusb.exe	Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter
U	spamsubtract	SpamSub.exe	InterMute™ SpamSubtract - junk email detection and removal program. InterMute™ is now part of Trend Micro and their products are no longer supported
U	Speedport W 100 Stick WLAN Manager	Wifiusb.exe	Wireless management utility for the Speedport W 100 Stick WLAN USB stick
X	Spooler Subsystem	spoolsub.exe	"Added by the SDBOT-ABG TROJAN!"
U	SpySubtract	SpySub.exe	"SpySubtract - multi spyware removal tool"
X	SpywareBomb	SpywareBomb.exe	"SpywareBomb rogue spyware remover - not recommended"
X	SStb.exe	SStb.exe	"Adpowerzone.com ""ServerSide"" keyword hijacker"
Y	STDSB	STDSB.exe	"Scrollbar driver for notebooks. If taken out of the Startup
N	Streamload Downloader	SlDB.exe	"Downloader for MediaMax (was Streamload) - ""gives you a private and secure place to upload
N	Subtract the Ads	AdSub.exe	Removes adverts from web pages. Although useful - not required
X	Surs	awab.exe	"PurityScan adware"
X	svchostb	svchostb.exe	"Added by the SNIFFER-J TROJAN!"
X	svtcin	n20050308.a.Stub.EXE	"Added by the N20050308 TROJAN!"
?	Sxplog	sxpstub.exe	"Part of CA Unicenter Software Delivery - manage software across various systems
X	Syslib	Syslib.exe	Adult content related downloader trojan
X	SYSsfitb	SYSsfitb.exe	"AdShooter adware"
X	system	systemdb.exe	"Barracuda Antivirus and Security Central rogue security software - not recommended
X	System Information Manager	Msbb.exe	"Added by the SLINBOT.YR BACKDOOR!"
X	System Loaderap	syst19b.exe	"Added by the AGOBOT-AT BACKDOOR!"
X	systemb	systemb.exe	"Added by a variant of the IRCBOT TROJAN!"
X	SystemFTP	VSENMB.exe	"Malware (ie
U	T-Com WLAN Manager	TS154USB.exe	Wireless management utility for the T-Com Sinus 154 Data II WLAN adapter
X	this free	bbb.exe	"Added by the VB-DZG TROJAN!"
U	Transparent	TransparentB.exe	"Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop
U	TurboHddUsb	TurboHddUsb.exe	"LaCie USB Boost or PQI TurboHDD advanced driver for their range of USB hard disks which increases USB performance by up to 53%. Not required unless you use a supported external drive frequently"
X	tvs_b	tvs_b.exe	"BroadcastPC adware"
X	udjudwq	sybqnub.exe	"Added by the SILLYFDC-AH WORM!"
X	UPSUtl	web.exe	"CoolWebSearch parasite variant"
?	Usb	Usb.exe	"HP related - not sure whether it's required"
X	USB Device	win32usb.exe	"Added by the FORBOT-BQ WORM!"
U	UsbBoost	TurboHddUsb.exe	"LaCie USB Boost advanced driver for their range of USB hard disks which increases USB performance by up to 33%. Not required unless you use a supported external drive frequently"
U	ViOrb	ViOrb.exe	"ViOrb (Vista Start Button for XP) adds a Vista style Start Button for Windows XP users and can be loaded at boot time or started manually"
X	ViRsLab	ViRsLab.exe	"VirusResponse Lab 2009 rogue security software - not recommended"
X	vmcleaner	gxlib.exe	"Added by the SMALL-HS TROJAN!"
X	vmlib	vmlib.exe	"Added by the LOWZONE-AQ TROJAN!"
X	vmlib	vmlib.exe	"Malware installed by different rogue security software including SpyKillerPro. Also detected as the LOWZONE-AQ TROJAN!"
X	vmtuner	gclib.exe	"Hijacker - detected by Kaspersky as the SMALL.FH TROJAN!"
X	vmtuner	gglib.exe	"Added by the QLOWZON-D TROJAN!"
X	VResLab	VResLab.exe	"VirusResponse Lab 2009 rogue security software - not recommended"
X	wab.exe	wab.exe	"Added by a variant of the SDBOT WORM!"
X	WCESMngr	spoolsb.exe	"Added by the AGOBOT-QZ WORM!"
X	Web Offer	ezPopStub.exe	"eZula TopText adware"
X	Web Offer	ezStub.exe	"eZula TopText adware"
X	Web Offer	vl_ezstub.exe	"eZula TopText adware"
X	WeirdOnTheWeb	WeirdOnTheWeb.exe	"WeirdOnTheWeb adware"
X	WIN USB 2.0	winusb.exe	"Added by a variant of the RBOT WORM!"
X	Win32 USB2 Driver	win32usb.exe	"Added by the SPYBOT.DHV WORM!"
X	win32gb	win32gb.exe	"Added by the DLUCA-F TROJAN!"
X	Win32Usr	WinCab.exe	"Added by the DEDMIR-A WORM!"
X	Windows Configuration	WINHUB.EXE	"Added by the SPYBOT-CG WORM!"
X	Windows Express	pci32b.exe	"Added by the BUZUS.C TROJAN!"
X	Windows FAT 32	WINFAT32B.exe	"Added by the SPYBOT-AGT WORM!"
X	Windows Manager Update Inc	tgb.exe	"Added by the SDBOT-ACM WORM!"
X	Windows Media Player 3.6b	WMPA36B.EXE	"Added by the RBOT-VV WORM!"
X	Windows Update	msnwinsb.exe	"Added by the RBOT-AAH WORM!"
X	Windows Update	Sqltob.exe	"Added by the DASHER.A WORM!"
X	Windows Update	SecretStub.exe	"Added by the SRAMLER.C WORM!"
X	Windows USB controler	winusb.exe	"Added by the RBOT-HR WORM!"
X	Windows USB Driver Support	Windowsusb.exe	"Added by a variant of the SPYBOT WORM!"
X	Windows USB Hub Manager	usbhub.exe	"Added by the RBOT-BJX WORM!"
X	WinNtBB	WinntBB.exe	"Added by the DULOAD.C WORM!"
X	winshell	windll32lib.exe	"Added by the BAGLE-DM WORM!"
N	WksSb	WksSb.exe	The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file
Y	wstimeb	wstimeb.exe	Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it
Y	WUSB11B.exe	WUSB11B.exe	Linksys WUSB11 WLAN USB adapter
X	wuweb	wuweb.exe	"Added by the WUWO TROJAN!"
X	XtTb.exe	XtTb.exe	Top-banners.com adware
?	zcb	zcb.exe	"??"
X	zSearch	Zstb.exe	"TotalVelocity zSearch parasite"
X	zzb	zzb.exe	"IAGold adware"
X	[random name]	?ttrib.exe	"PurityScan adware"
X	[random name]	n?pdb.exe	"PurityScan adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.