Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.


  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

Startup Name Process Name Details
X852EBF20-A95D-4F1F-B9C2-B2CD24350F3Esysodkcs.exe"Added by the FAKEALERT-AH TROJAN!"
Xaupdsysvcs.exe"Added by the ABWIZ.C TROJAN!"
Xaupdsywsvcs.exe"Added by the ORSE-M TROJAN!"
UCalendarscopecs.exe"Calendarscope calendar software"
UCitiUCSCitiUCS.exe"Citibank Virtual Account Numbers - ""With this free service for Citi cardmembers
NClickSight Launchercs.exe"Launcher for the ClickSight® marketing tool from ClickStream Technologies - which ""is a patented data-collection technology that helps independent software vendors understand the current and future usage of their product"""
Xcmdbcscmdbcs.exe"Added by the LINEAG-GKW TROJAN!"
XCseccs.exe"Cyber Security rogue security software - not recommended
Xcsrcscsrcs.exe"Added by the AGENT-HUA TROJAN!"
XGuardPcs.exeGuardPcs.exe"GuardPcs rogue security software - not recommended
NHPUProvenTactics.exe"Proven Internet Marketing software"
XIECheckMSDTCs.exe"Added by the TIRBOT-D WORM!"
YKodakCCSKodakCCS.exeKodak DC File System Driver
XMedia Software UPdatersscs.exe"Added by the RBOT-ABE WORM!"
XMicrosoft (R) Windows Vista/NT Runtime Compatibility Servicenrcs.exe"Added by the RANKY.X TROJAN!"
XMicrosoft Windows Securewindocs.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Windows Securewindocs.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Windows Updateservcs.exe"Added by the SDBOT.AL BACKDOOR!"
Xmsbcsmsbcs.exe"Added by the DADOBRA-G TROJAN!"
Xmsiexecsmsiexecs.exe"Added by the SILLYFDC.BBB WORM!"
Xmsiexecs.exemsiexecs.exe"Added by a variant of the SDBOT WORM!"
XMsvcServicemsvcs.exe"Added by the RBOT-RK WORM!"
XNetwork Servicesnetsvacs.exe"Added by the GAOBOT.AIS WORM!"
XProtectPcs.exeProtectPcs.exe"ProtectPcs rogue security software - not recommended
XRapdataravsecs.exe"Added by the QQPASS-V TROJAN!"
XSecurity Mechaniclsascs.exe"Security Mechanic rogue security software - not recommended
XServices Managementsservcs.exe"Added by the RBOT-GUC WORM!"
Xservicsservics.exe"Added by the SINGU-J TROJAN!"
Xsmilewcs.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
Xsomewcs.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XSpy Protectorlsascs.exe"Spy Protector rogue security software - not recommended
XSpyBlocsSpyBlocs.exe"SpyBlocs spyware remover - not recommended
XSystem Protectorlsascs.exe"System Protector rogue security software - not recommended
XUateoocs.exe"PurityScan adware"
XUltimateServicesultsvcs.exe"Added by the AGENT-LGT TROJAN!"
XVideo Processnetsvcs.exe"Added by the AGOBOT.LH WORM!"
XWildFlicsWildFlics.exe"Direct-B premium rate adult content dialler"
XWindows Custom ServicesCSRCS.EXE"Added by the SPYBOT-EI WORM!"
XWindows Graphics Loaderswingraphics.exe"Added by the SPYBOT.JG WORM!"
XWindows Image Acquisition (WIASC)WIAcs.exe"Added by the RIZO.A TROJAN!"
XWindows IP Security Serviceipsecs.exe"Added by the RBOT.BPW WORM!"
XWindows Remote Launcherwnpmcs.exe"Added by the IRCBOT.ASX BACKDOOR!"
XWindows Update serviceswins32svcs.exe"Added by a variant of the RBOT WORM!"
XWindows Zero Spoolernmvcs.exe"Added by the SLENFBOT.JQ WORM!"
Xwinexecswinexecs.exe"Added by the SILLYFDC.BBB WORM!"
XWMI Standard Event Consumer - Scriptingscrcs.exe"Added by a variant of the RBOT-GRD WORM!"
XWSAConfigurationcsrsvcs.exe"Added by the AGOBOT.VI WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.