Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
U000StTHK000StTHK.exe"Toshiba Hot key functionality for the function keys (Fn-Esc
NAdvanced Tools CheckADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
NADVCHKADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
Xalgchk.exealgchk.exe"Detected by Kaspersky as the VB.ATE TROJAN!"
XAntivirus Updatesavupdchk.exe"Added by the AGOBOT-IP WORM!"
Uatchkatchk.exe"AMT Status Message from Intel. Users can manage this
?BisonHKBisonHK.exe"Related to a Bison webcam - which is used on notebooks from a number of manufacturers including Acer
XBoot Checkbootchk.exe"Added by the DELBOT-AB WORM!"
XCabchkCabchk.exe"Added by the GEMA TROJAN!"
XChckupNetverchk.exe"Covert Sys Exec malware variant"
UConfigSafeAUTOCHK.EXE"ConfigSafe - lets you identify changes to the registry
YCSAV_CheckVirusesvchk.exe"Command Antivirus related"
?Cwcdschk.exeCwcdschk.exe"IBM Thinkpad related?"
NCybercyberchk.exe"Part of Belkins ""Multimedia Cleaning Kit"" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after ""x"" amount of time has passed"
XEventApplicationCmdsmschk.exe"Added by the IRCBOT-AO TROJAN!"
Uhkhk.exe"KeyLoggerExp keystroke logger/monitoring program - remove unless you installed it yourself!"
ULPMailCheckerLPMLCHK.exe"Part of Lenovo's ThinkVantage® Productivity Center on their ThinkPad notebooks or ThinkCentre desktops. Checks for incoming e-mail and blinks the ThinkVantage button LED"
XMicrosoft Secure Messenger.NET Servicesecuritychk.exe"Added by the SDBOT.VT WORM!"
Xminiportusb2chk.exe"Added by the LAZAR-A TROJAN!"
?MMHKmmhk.exe"A driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?"
XMSOfficeCfgnavchk.exePremium rate adult content dialer
XNAVChecknavchk.exePremium rate adult content dialer
NNetline Usernetchk.exe"Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game
XP3p4chkP3p4chk.exe"Added by the GEMA TROJAN!"
UPiDunHKPIDUNHK.EXE"Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect
UPnpchkPnpchk.exe"Aztech Labs Sound 3 PnP driver"
XQTimenrchk.exePremium rate adult content dialler
XQTSvcnavchk.exePremium rate adult content dialler
XRealPlayer Ath Checkrnathchk.exe"Added by the MYTOB.AG WORM!"
XRealPlayer Ath Checkmathchk.exe"Added by the MYDOOM-AJ WORM!"
Xrunappicqchk.exe"Added by the BOMKA TROJAN!"
NS3apphkS3apphk.exeA tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems
XScheduIenrchk.exePremium rate adult content dialler
XSchedulerMgrnavchk.exePremium rate adult content dialer
Xsp2chk.exesp2chk.exe"Added by the ALUROOT.A TROJAN!"
XSystemCheckerSyschk.exe"Added by the GALIL.F WORM!"
XSystemServicenavchk.exePremium rate adult content dialler
XVirusCheckIIAVIRCHK.EXE"Added by the DASMIN TROJAN!"
Uwinchkwinchk.exe"RemoteSpy surveillance software. Uninstall this software unless you put it there yourself"
XWindows Service Agentvbsxkhk.exe"Added by the IRCBOT.AHX WORM!"
NWindows Version Checkver_chk.exe"Version checker for CyberAudioLibrary - ""a new way to exchange information through the Internet"""


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.