Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X1234klsjdc uiar924c afsxgnsvuxct.exe"Added by the FAKEALERT-AM TROJAN!"
UAd-Protectad-protect.exe"Ad-Protect spyware and spam monitoring tool"
XAntiVirProtectAntiVirProtect.exe"AntiVirProtect rogue security software - not recommended
XAPCProtect.exeAPCProtect.exe"APCProtect rogue security software - not recommended
UAshampoo Core Tunerct.exe"Ashampoo® Core Tuner from Ashampoo GmbH & Co. KG - a utility which helps you to get the most out of a multi-processor (or dual core) computer. ""For instant results you just need to select Auto-Optimize to optimize all the programs you are running or Boost to give more power to a single program"". This entry loads Core Tuner with Windows (required if you use any optimized profiles) and gives System Tray access"
NATI DeviceDetectATIDtct.EXEUtility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled
UBCDetectbcdetect.exeBcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
?Boots Insert DetectInsDetect.exe"Part of Boots Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
XBrO_AcTBrO-AcT.exe"Added by the SILLYFDC-D WORM!"
UCamera DetectorCamdetect.exe"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
?checktimect.exe"Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?"
NCorel Photo DownloaderMediaDetect.exe"Related to Corel Photo Album"
NCorrectConnectCConnect.exeBroadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
NCreative DetectorCTDetect.exe"Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player
UCSINJECT.EXECSINJECT.EXE"Part of Quarterdeck/Norton CleanSweep. ""Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes"""
Yctct.exect.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it
Udetectidetect.exe"iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled"
?detectturbodetect.exe"??"
UDevice DetectorDevDetect.exe"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
XDirectx Startup Driversdirect.exe"Added by the RBOT.UXL WORM!"
?Dixons Insert DetectInsDetect.exe"Part of Dixons Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
NDriveSelectdriveselect.exe"DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs"
?Duane Reade Insert DetectInsDetect.exe"Part of Duane Read Picture Suite & Digital Image Pack. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
UE06DXLRD_7604703EDICT.EXE"Related to Microsoft Encarta dictionary functions"
UEasySync Pro - PocketPCAutoDetect.exe"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
UELSAChipGuardelsavect.exe"ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed
NEN4060C Taskbaren4060ct.exeComes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
UFBDirectFBDirect.exe"Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan
NFree DVD DirectFreeDVDDirect.exe"Free DVD Direct - provides a program to access a peer-to-peer (P2P) file-sharing network (see here)"
NHCDetectHCDetect.exe"MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification
XHtProtectAVprotect.exe"Added by the NETSKY.L WORM!"
?iHP-100iHPDetect.exe"Drive Letter Searcher
XIP Packet Redirect Serviceipredirect.exe"Added by the FORBOT.SM WORM!"
NIPPDetectIPP4Detect.exe"Part of Presto! Mr.Photo - ""an ideal program for creating
?Jessops Insert DetectInsDetect.exe"Part of Jessops Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
XLiveProtectLiveProtect.exe"System Live Protect rogue security software - not recommended
UMDDiskProtectMDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
UMDDiskProtect.exeMDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
UMediafour MacDriveMDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
NMicrosoft Works Update Detectionwkdetect.exeChecks for updates to MS Works
NMirabilis ICQNDetect.exe"If connected to the internet
Xmsdirect.exemsdirect.exe"Added by the CERTIF-L TROJAN!"
UMSKDetectorExeMSKDetct.exe"Part of McAfee Spamkiller"
XMSprotect.exeMSprotect.exe"Added by the DABYREV.A VIRUS!"
Xmsxctmsxct.exe"eXact Advertising (NaviSearch
XNAV Auto Protectnavprotect.exe"Added by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec"
XNorton Antivirus AVFVProtect.exe"Added by the NETSKY.P WORM! Note - this is not the popular AV software!"
XNorton Protectnpprotect.exe"Added by the RBOT-WW WORM!"
UNPROTECTnprotect.exeNorton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid
Xntddetectntddetect.exe"Added by the AGENT-CU TROJAN!"
NPDirectPDirect.exeIBM Presentation Director software
NPP****usbFBDirect.exe"Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan
Xprdtectprdtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprgtectprgtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprjtectprjtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprktectprktect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprltectprltect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprmtectprmtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprqtectprqtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprrtectprrtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprstectprstect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprtcctprtcct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprttectprttect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutcctprutcct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutdctprutdct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutgctprutgct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xpruthctpruthct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutictprutict.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutlctprutlct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutpctprutpct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprutsctprutsct.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprvtectprvtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
Xprxtectprxtect.exe"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
XRegistry Protectorregprotect.exe"Added by the ARIVER.A WORM!"
XREGRUNMautoprotect.exeAdded by an unidentified WORM or TROJAN!
USametime ConnectConnect.exe"IBM Lotus Sametime - instant messaging and Web conferencing software"
?Scan DetectorPmxdetect.exe"Associated with PrimaScan scanners. Is it required?"
NScanner DetectorSDetect.exe"ScanSuite Scanner Detector - part of ScanWizard
NSDetectSDetect.exe"ScanSuite Scanner Detector - part of ScanWizard
Xserviceconnectserviceconnect.exe"Added by the AGOBOT.AIR WORM!"
USideACTSideACT.exe"SideACT organizer software"
NSmart Start UPPnPDetect.exe"Part of Presto! Mr.Photo - ""an ideal program for creating
USpamSubtractSpamSubtract.exe"Intermute SpamSubtract - junk email detection and removal program"
USX Virtual LinkConnect.exe"SX Virtual Link from Silex Technology America
XSystemBrO_AcT.exe"Added by the SILLYFDC-AL WORM!"
?Tesco Insert DetectInsDetect.exe"Part of Tesco Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
NtkonnectTKONNECT.EXE"Dialer for the Tiscali internet service provider. Available as a desktop shortcut"
UUSBDetectorUDetect.exeUSB tray icon/detection for external Belkin (and maybe other makes) under Win98
UViewpointPhotosDeviceConnectFotomatDeviceConnect.exe"Related to Viewpoint which is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything ""bad"". This will change from what we know in 2006 according to this article. You can remove it via Start -> Settings -> Control Panel -> Add/Remove Programs list..."
Xvirtualwinprotect.exe"Added by the MUGLY.C WORM!"
Uw98Ejectw98Eject.exe"Related to USB support for Sigmatel MP3 audio palyer (and others such as SanDisk). It's intent is to ""put away"" the ""disk"" before you unplug it from the USB port
NWebCallDirectWebCallDirect.exe"WebCallDirect - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
XWifi Connection!wificonnect.exe"Added by the IRCBOT.XEL BACKDOOR!"
XWindows File Protectionwinprotect.exe"Added by the AGOBOT.JB WORM!"
XWindows Update AutoUpdate Client Productwuauct.exe"Added by the AGOBOT.ACL WORM!"
XWindowsUpdateDirectdupadirect.exe"Added by the DUPA-C TROJAN!"
Xwinprotectwinprotect.exe"Added by the SDBOT-SB WORM!"
XWinSpywareProtectWinSpywareProtect.exe"WinSpywareProtect rogue security software - not recommended
XWinSpywareProtect (ver. 5.1)WinSpywareProtect.exe"WinSpywareProtect rogue security software - not recommended
Xwin_upd.exeWINdirect.exe"Added by the MITGLIEDER.M TROJAN!"
Xwin_upd2.exeWINdirect.exe"Added by the BEAGLE.AO WORM!"
XWireless ConectionsWireConnect.exe"Added by the SDBOT-VF WORM!"
XWireless ConnectionsWIRECONNECT.EXE"Added by the SDBOT-VM WORM!"
NWkDetectWkDetect.exeChecks for updates to MS Works
UXTNDConnect PC - PocketPCAutoDetect.exe"Windows Mobile Pocket PC specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.