dw

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	'AdwarePro'	'AdwarePro'.exe	"AdWarePro rogue security software - not recommended"
U	802.11b+g USB Wireless LAN Utility	ZDWlan.exe	802.11b+g USB Wireless LAN Utility
X	ADS Adware Remover	ADS Adware Remover.exe	"ADS Adware Remover
U	Adware Agent	adware agent.exe	"Adware Agent popup blocker"
X	Adware Punisher	AdwarePunisher.exe	"Adware Punisher rogue spyware remover - not recommended
X	Adware Punisher Monitor	AdwarePunisher_monitor.exe	"Adware Punisher rogue spyware remover - not recommended
X	Adware Spy	AdwareSpy.exe	"AdwareSpy rogue adware remover - not recommended
U	AdwareAlert	AdwareAlert.Exe	"Adware program
X	AdwareDelete	adwaredelete.exe	"AdwareDelete rogue adware remover - not recommended
X	AdwareKiller_schedules	schedules.exe	"EAdwareKiller rogue spyware remover - not recommended
X	AdwareKiller_tray	tray.exe	"EAdwareKiller rogue spyware remover - not recommended
X	AdwareProMFC	Ad-Ware Pro.exe	"Ad-Ware Pro rogue security software - not recommended"
X	AdwareProMFC	AntiTrojan Pro.exe	AntiTrojan Pro rogue security software - not recommended. Variant of Ad-Ware Pro
X	AdwareProtector	AdwareProtector.exe	"Part of rogue security tools
X	AdwareRemover2007	AdwareRemover2007.exe	"AdwareRemover2007 rogue security software - not recommended
X	AdwareSpy	AdwareSpy4.exe	"AdwareSpy rogue adware remover - not recommended
X	Adware_ProNET	Adware_Pro.exe	"Adware Pro rogue security software - not recommended
X	Adwarz Spy Remover	ADWARZ.EXE	"Added by the SPYBOT-EV WORM!"
X	Andware Defence	Zsoft32.exe	"Added by the GAOBOT.OO WORM!"
Y	Apvxd	APVXDWIN.EXE	"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y	Apvxdwin	APVXDWIN.EXE	"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y	APVXDWIN	ClShield.exe	"""Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam
N	Bandwidth Meter Pro	BandwidthMeterPro.exe	"System Tray access to Bandwidth Meter Pro - ""an easy-to-use network software for bandwidth usage monitoring and reporting. It monitors traffic of all network connections on your computer and displays graphical and numerical download and upload speeds in real-time"""
U	Bandwidth Monitor Pro	Bandwidth Monitor Pro.exe	"Bandwidth Monitor Pro - utililty to track your current download/upload limit that may be set by your ISP"
N	BandwidthMeterPro	BandwidthMeterPro.exe	"System Tray access to Bandwidth Meter Pro - ""an easy-to-use network software for bandwidth usage monitoring and reporting. It monitors traffic of all network connections on your computer and displays graphical and numerical download and upload speeds in real-time"""
Y	BDWizReg	bdwizreg.exe	"Configuration wizard for BitDefender internet security products. Only runs once the product has been installed. Guides you through the steps necessary to configure the BitDefender modules
Y	BigPondWirelessBroadbandCM	BigPond_CM.exe	"Related to BigPond_Wireless_Broadband Service by Telstra"
Y	BitDefender 12	bdwizreg.exe	"Configuration wizard for BitDefender internet security products. Only runs once the product has been installed. Guides you through the steps necessary to configure the BitDefender modules
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
X	Bwddwss	[path to trojan]	"Added by the RANKY.BD TROJAN!"
X	Core System Hardware	syscorehd.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
Y	D-Link D-Link DWA-125	AirGCFG.exe	"D-Link DWA-125 Wireless 150 USB adapter driver and configuration utility"
Y	D-Link D-Link RangeBooster N DWA-140	AirNCFG.exe	"D-Link DWA-140 RangeBooster N USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless 108G DWA-120	AirPlusCFG.exe	D-Link DWA-120 Wireless 108G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless 108G DWA-520	AirPlusCFG.exe	D-Link DWA-520 Wireless 108G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-110	AirGCFG.exe	D-Link DWA-110 Wireless G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-510	AirGCFG.exe	D-Link DWA-510 Wireless G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless N DWA-130	AirNCFG.exe	"D-Link DWA-130 Wireless N USB adapter driver and configuration utility"
Y	D-Link D-Link Xtreme N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
X	DamedWare Services	dwdrce.exe	"Added by the RBOT-AOJ WORM!"
X	DASDS VSAVdjs	dsabdw.exe	"Added by the SDBOT-RE WORM!"
U	DDWMon	ddwmon.exe	"Direct Disc Writer Event Monitor from TOSHIBA"
X	Device Hardware	devicehnd.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
N	DigitalWizard Monitor	dwMon.exe	"InstallShield's DigitalWizard - free
N	Download Wonder	DownloadWonder.exe	"Download Wonder from Forty Software. Download manager for resuming downloads
X	DownloadWare	dw.exe	"DownloadWare adware"
X	DownloadWare Engine	Dwe.exe	"DownloadWare adware"
X	DVAScvssdfa	AsSDdwd.exe	"Added by the LIOTEN.IP TROJAN!"
X	dw	dw.exe	"DownloadWare adware"
N	DW4	Weather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature
N	DW4	DesktopWeather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature
N	DW6	DesktopWeather.exe	"Desktop Weather 6 by The Weather Channel - provides current temperature
U	DWHeartbeatMonitor	DWHeartbeatMonitor.exe	DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
N	DwlClient	support.exe	Download manager for Dell support alerts
X	dwqblwppx.exe	[random].exe	"Okcashbackmall adware"
X	dwqblwpvl.exe	[random].exe	"Okcashbackmall adware"
X	dwqblwrsq.exe	[random].exe	"Okcashbackmall adware"
U	DWQueuedReporting	dwtrig20.exe	"Used to launch Microsoft Error Reporting (DW20.exe) - if
N	dwStart	FireWall.exe	"The Shield firewall from pcsecurityshield.com. Not recommended by some (see here) and there are better free alternatives out there such as Zone Alarm. Located in %ProgramFiles%\PCSecurityShield\The Shield Firewall"
U	dwtrig20	dwtrig20.exe	"Used to launch Microsoft Error Reporting (DW20.exe) - if
X	DW_Start	rwwnw64d.exe	Identified as a variant of the AdWare.Win32.ZenoSearch.am malware
N	eBot	DownloadWizard.exe	"eBot from Digital River - ""helps ensure your computer always has the latest technology
U	Edwizard	Edwizard.exe	"SafeGuard Easy - ""provides total company-wide protection for sensitive information on laptops and workstations. Boot protection
U	ETDWare	ETDCtrl.exe	Elantech smart-pad touchpad driver for the Asus Eee PC range
N	Gadwin PrintScreen	PrintScreen.exe	"Gadwin PrintScreen - utility to capture
X	GuardWWW	GuardWWW.exe	"GuardWWW rogue security software - not recommended
U	Hardware Doctor	Hwdoctor.exe	"Winbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds
X	Hardware Monitor Service	mshms.exe	"Added by the WOLLF-A TROJAN!"
X	Hardware Profile	hxdef.exe	"Added by the LOVGATE.AB WORM!"
X	Hardware Profile	hxdef.exe...	"Added by the LOVGATE.Z WORM!"
U	Hardware Sensors Monitor	hmonitor.exe	Utility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
X	Hardware Shell Detection	WinHSD.exe	"Added by a variant of the RBOT WORM!"
X	hpSdwxmark	Gaddw.exe	"Added by the SDBOT-RB WORM!"
N	IDW Logging Tool	idwlog.exe	Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
X	iedwa104	iedwa104.exe	"Added by the DLOADR-BBW TROJAN!"
?	iPodWatcher	iPodWatcher.exe	"Associated with Apple's iPod® player. Detects when the iPod® is connected?"
U	Kernel and Hardware Abstraction Layer	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
U	Lavasoft Adwatch	Ad-watch.exe	"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
U	LOAD WB	LOADWB.EXE	"Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars
N	load=	adw30.exe	After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
?	LoadWatcher	Test.exe	"Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct?"
X	LoadWatcher	watcher.exe	"Watcher spyware"
X	loadwin	winset.exe	"Added by the QQPASS-I TROJAN!"
X	loadwin	winsys.exe	"Added by the QQPASS-J TROJAN!"
X	LoadWindowsFile	Kernel32.exe	"Added by the DELF.B TROJAN!"
X	LoadWindowsFile	winreg.exe	"Added by the HUPIGON.A BACKDOOR!"
U	Logitech Hardware Abstraction Layer	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
U	lxdwamon	lxdwamon.exe	Lexmark 7600 Series printer device monitor
U	lxdwmon.exe	lxdwmon.exe	Lexmark 7600 Series printer device monitor
X	Macromedia Dreamweaver XM	macdwXM.exe	"Added by the AGOBOT-RI WORM!"
X	mdwmdmsp	mdwmdmsp.exe	"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
U	MediafourGettingStartedWithMacDrive6	MacDrive.exe	"MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
X	MediaLoads	dw.exe	"Medialoads adware"
X	MediaLoads Installer	dw.exe	"Medialoads adware"
X	Mfqneqfeb	vdddwq.exe	"Added by the RANDEX.AP WORM!"
U	MilShieldSlave	ShieldWorker.exe	"Mil Shield from Mil Incorporated. It protects your privacy by removing all tracks from your online or offline computer activities"
X	mmnext06	trjdwnl.dll	"Malware installed by different rogue security software including SpyKillerPro and the XP AntiVirus series"
X	msjdqs	fddwqt.exe	"Added by the SDBOT-PO WORM!"
X	NoAdware	NoAdware.exe	"NoAdware - spyware remover. This version is not recommended - see here"
U	NoAdware3	NoAdware3.exe	"NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here"
U	NoAdware4	NoAdware4.exe	"NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here"
X	Nod29 Service	nodwr.exe	"Added by a variant of the RBOT WORM!"
U	NotebookHardwareControl	nhc.exe	"""With Notebook Hardware Control you can easily control the hardware components of your Notebook"""
X	nsdcmd vid process	nsdcmdwin.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	nvmsgdwn	NVMSGDWN.EXE	"Added by the GRABER-D TROJAN!"
X	oddworldz.exe	oddworldz.exe	"Added by the MULTIDR-EG TROJAN!"
U	PC Dynamics SdwMon32	sdwmon32.exe	"SafeHouse ""Personal Privacy"" protects and hides your private and personal photos
X	RUNGogoTools	LaunchAdware.exe	"GoGoTools adware"
U	SafeHouseSystemTray	SDWTRAY.EXE	"SafeHouse ""Personal Privacy"" system tray icon - PP protects and hides your private and personal photos
X	Savasddwq	ffasd.exe	"Added by the SDBOT-SI WORM!"
X	SiteAdware.exe	SiteAdware.exe	"SiteAdware rogue security software - not recommended
U	SolidWorks Task Scheduler Engine	swBOEngine.exe	"Task scheduler for SolidWorks 3D CAD software"
X	sstata	dwdas.exe	"Added by the DASDA TROJAN!"
U	Symantec NetDriver Warning	SNDWarn.exe	Part of Symantec Live Update - displays the warning when you need to update the firewall database
X	Systam13	speedwin.exe	"Added by the RBOT.GVH BACKDOOR!"
X	udjudwq	sybqnub.exe	"Added by the SILLYFDC-AH WORM!"
X	updwebmin	updwebmin.exe	"Added by the BACKDOOR.GEN TROJAN!"
X	USB Hardware Monitoring	USBhardware.exe	"Added by the RBOT-NN WORM!"
X	USB Hardware326 Monitoring	USBhardware326.exe	"Added by a variant of the SPYBOT WORM!"
X	USB Hardware32c Monitoring	USBHARDWARE32C.EXE	"Added by the RBOT-UU WORM!"
X	VasddwDg	zxXZwd.exe	"Added by the SDBOT-SN WORM!"
?	VCDWATCH	VCDWATCH.EXE	"Confirmed as Voyetra CD Watcher as it was found in a Compaq/Voyetra/AS2 directory but what does it do?"
U	Watson Subscriber for SENS Network Notifications	dwtrig20.exe	"Used to launch Microsoft Error Reporting (DW20.exe) - if
X	wdwctrl	wdwctrl.exe	"Added by the DLUCA.E TROJAN!"
N	Wildwire Monitor	WWMon.exe	This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem
X	Windows Recavery Adware	lsass.exe	"Added by an unidentified TROJAN - see here. Note - this is not the legitimate lsass.exe process
U	WindowsTranslator	DWinTrsl.exe	"Delta Translator® English < > Portugese (Brazilian) version - ""an automatic
U	WindowsTranslator_Espanhol	DWinTrsl.exe	"Delta Translator® Spanish < > Portugese (Brazilian) version - ""an automatic
X	Windws Configuration Loader	LEXPLORE.exe	"Added by the SODABOT WORM!"
N	WordWeb	wweb32.exe	"WordWeb - free theasaurus and dictionary. Start manually"
N	WordWeb Pro	wweb32.exe	"WordWeb Pro - theasaurus and dictionary. Start manually"
X	XHFHGEBDbadw	XHFHGEBDbadw.exe	"Added by the AGENT-NHN TROJAN!"
X	XPSoft	CVDAsDW.exe	"Added by the SDBOT-SY WORM!"
X	[32 random hex numbers]	badware-protector.exe	"Badware Protector rogue security software - not recommended
X	{1C-CC-C5-54-ZN}	dwdsregt.exe	"ZenoSearch adware"
X	{8C-C4-4A-A4-ZN}	dwdsregt.exe	"ZenoSearch adware"
X	{B7-7D-D0-08-ZN}	dwdsregt.exe	"Added by the AGENT-GBC TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.