Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
NAudioCommanderAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
NAudioCommander ApplicationAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
NAudioCommanderVistaAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
UBrowser LauncherCommandr.exeLogitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
Xcandycommand32.exe"Added by the RBOT-LV WORM!"
XCommandsystem.exe"Added by the GATECRASH.A or GATECRASH.B TROJANS!"
XCommandGotit.exe"Added by the TITOG WORM!"
XCOMMANDcommand.exe"Added by the QQPASS.E TROJAN!"
Xcommandjavaw.exe"Added by the AGOBOT-LG WORM!"
XCommand Prompt32CmdPrompt32.pif"Added by the ASSIRAL.B WORM!"
UCommand WorkStation 4cws 4.exe"EFI's Command WorkStation makes ""managing demanding workflows easier by centralizing job management. The software automatically identifies the Fiery servers on the network and offers customization options for displaying information"" - for high-end print environments"
Xcommand32command32.exe"Added by the LINEADI-A TROJAN!"
?encapsulated command toolwintr.com"??"
XFdr Command Modulesp2.exe"Added by the SDBOT.WP WORM!"
XFwr Command Modulefwr.exe"Added by the SDBOT-PP WORM!"
NID CommanderIDCom.exeCaller ID utility for identifying incoming telephone numbers
NIomegaWareCOMMANDER.EXE"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
XMessenger6command.pif"Added by the INZAE.B WORM!"
XMicrosoft Command Csshost.exe"Added by the RBOT-CMK WORM!"
XMicrosoft Command Cwinhost32.exe"Added by the SDBOT-BBA WORM!"
XMicrosoft Command Linewincmd.exe"Added by a variant of the RBOT WORM!"
XNet Command Senternvscvse.exe"Added by the IRCBOT!DF6280E5 VIRUS!"
XPDA Commanderstisvc32.exe"Added by the AGOBOT-TX WORM!"
XShellCommand[path to file]"Added by the REMCON-A TROJAN!"
YSpybotDeleting*****[cmd or command] /c del [path] [filename]"Generated by Spybot Search & Destroy if it encounters files that cannot be deleted during runtime because they are locked by other processes. For example
USupport.com Scheduler and Command Dispatchertgcmd.exe"Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
XSystem Efficiency Monitormscommand.exe"Added by the KWBOT.P WORM!"
XSystem Firewallscommandprompt32.exe"Added by the RBOT.BJT WORM!"
XTask Commanderregsvc32.exe"Added by the AGOBOT-RX WORM!"
UVZRemoteCommanderAvRmtCtr.exeRelated to Sony's VAIO Zone Remote Commander
XWin Commandcommand32.exe"Added by the AGOBOT.XQ WORM!"
XWindows Commandwincmd.exe"Added by the RBOT.ANV WORM!"
XWinProfileCommand.exe"Added by the BUDDY.E TROJAN!"
?WR Commandwr.exe"??"
UzBrowser LauncherCommandr.exe"For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.