Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X2020Downloadermssvr.exe"2020Search Toolbar"
Xacocashfastdown.exeAdult content dialler
NAdobe Photo Downloaderapdproxy.exe"Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here)"
UAModemLockDownModemLockDown.exe"ModemLockDown - allows you to supervise internet access by disabling the modem
?AutoShutdownpssvc.exe"Utility to fix vCard Export in MS Outlook 2000 - although why are these together?"
YBullguardoptInbulldownload.exe"Part of Bullguard antivirus"
XContentDownload"rundll32.exe MSA64CHK.dllDllMostrar"
XCoolDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
NCorel Photo DownloaderMediaDetect.exe"Related to Corel Photo Album"
XDealHelperDowndownload.exe"DealHelper adware"
NDigital River eBotdownlo~1.exe"Digital River Systems EBOT for downloading software from their site. In some cases
NdlmMgrAdobeDownloadManager.exe"Adobe Download Manager - ""can prevent you from having to start from the beginning should your download process be interrupted
Xdownhlp32.exe"Added by the DLOADER.BG TROJAN!"
Xdown[trojan filename]"Added by the SMALL-QJ TROJAN!"
UDown2HomeDown2Home.exe"Down2Home - ""monitors your ADSL/Cablemodem/Dialup traffic and provides you with usefull statistics about the amount of data your PC has transferred"""
NDownload Accelerator Manager Free Editiondam.exe"Download Accelerator Manager Free Edition from Tensons Corp"
NDownload Accelerator Plus 5.0DAP.exe"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
XDownload PlusDownloadPlus.exe"DownloadPlus adware"
NDownload WonderDownloadWonder.exe"Download Wonder from Forty Software. Download manager for resuming downloads
NDownloadAcceleratorDAP.EXE"Download Accelerator Plus from Speedbit. Download manager for resuming downloads
XDownloadLegalMusic"rundll32.exe MSA64CHK.dllDllMostrar"
XDownloadMP3"rundll32.exe MSA64CHK.dllDllMostrar"
XDownloadsAndMP3"rundll32.exe MSA64CHK.dllDllMostrar"
XDownloadWaredw.exe"DownloadWare adware"
XDownloadWare EngineDwe.exe"DownloadWare adware"
Xdownsdowns.exe"Added by the BCKDR-MNR TROJAN!"
XDownxzDownxz.bat"Added by the MYDOOM.W WORM"
XEac Downloaddownload.exe"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
NeBotDownloadWizard.exe"eBot from Digital River - ""helps ensure your computer always has the latest technology
XFastDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
XFlashget Download ManagerFlashget.exe"Added by the RBOT-AGZ WORM!"
NFree Download Managerfdm.exe"""Free Download Manager"" - see here"
?Free Downloads Monitorfdcmon.exe"??"
XFreeMP3download"rundll32.exe MSA64CHK.dllDllMostrar"
XGo!Zilla Monster DownloadsGo.exeDownload manager for resuming downloads and choosing multiple download locations. Advertising spyware
XGreatDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
XHighspeeddownloaderSetupClickHere.EXE"Homepage hijacker
UInternet Download Acceleratorida.exe"Internet Download Accelerator download manager"
XInternet download manager serviceidman.exe"Added by the RBOT-BMS WORM!"
XKazaa Download Accelerator Updater (required)regsvr32 kdp****.dll [* = random char]"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
NKodak Picture Easy *.* Batch TransferPezDownload.exe"Part of ""Kodak Picture Easy"" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* represents the version"
ULightning DownloadLightning.exe"Lightning Download from Headlight Software - shareware download manager for resuming downloads. Start it manually unless you want to intercept download links from your browser"
XMainDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
NmicroAttuneDownloadatmdlusr.exe"Application Launcher
XMicrosoftUpdatedownnew.exe"Added by the TANTO-D TROJAN!"
XMP3download"rundll32.exe MSA64CHK.dllDllMostrar"
XMP3freeDownload"rundll32.exe MSA64CHK.dllDllMostrar"
XMP3freeDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
Xmswsplvnmispoisn downloader.exeSearchBarCash adware variant
XNBInstallMBDownloader_876919.exe"Added by the MIRAR_D TROJAN!"
XNetzip Smart Downloadernpnzdad.exeAdvertising spyware
XNewDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
XNiceDownloads"rundll32.exe MSA64CHK.dllDllMostrar"
NRealDownloadRealPlay.exeDownload manager. Available via Start -> Programs
XRealDownload Expressnpnzdad.exeAdvertising spyware
Xsearchbarvnmispoisn downloader.exeSearchBarCash adware variant
UShutdownawareshutdownaware.exe"Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system"
UShutDownProShutDownPro.exe"ShutDownPro - shutdown
XShutDownWindows"Rundll32.exe UserExitWindows"
XShutdownWithoutLjiasvt.exe[path to trojan]"Added by the BIFROSE.F BACKDOOR!"
NStreamload DownloaderSlDB.exe"Downloader for MediaMax (was Streamload) - ""gives you a private and secure place to upload
XSystem Download ManagerSysMgr.exe"Added by the RBOT.CIG WORM!"
NTurbine Download Manager Tray IconTurbineDownloadManagerIcon.exe"Turbine Download Manager (TDM) - download manager associated with the game ""The Lord of the Rings Online™"""
Xvnmispoisn downloadervnmispoisn downloader.exeSearchBarCash adware variant
XW32PluginsDownloaderXMLHTTPSelfClearing7520wiper.exe"Added by the PROXYSER-M TROJAN!"
UWD Spindown UtilityExSpinDn.exe"Spindown utility ""for use with all Western Digital external hard drives except for the Media Center and the Dual-option Backup drives. It is designed to give greater user control over the spindown of the external drive"""
Xwin32 security updates downloadertskmngr.exe"Added by a variant of the SDBOT WORM! See here"
XWin32.Trojan.Downloadernetstat2.exe"Added by the PAINTER TROJAN!"
Xwindownwiusyt.exe"Added by the QQPASS-M TROJAN!"
XWindows Download Managerwindlmngr.exeAdded by an unidentified TROJAN!
Uzzsecagentnewlock.exe login shutdown"Part of Access Manager


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.