init.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
N	AHQInit	ahqinit.exe	Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
Y	Aureal A3D Interactive Audio Init	A3dInit.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y	avxlni	avxinit.exe	"Anti-virus part of BitDefender virus scanner/firewall"
Y	BitDefender Live! Init	bdinit.exe	"BitDefender antivirus"
Y	BullGuardInit	AVXINIT.EXE	"Part of Bullguard antivirus"
X	Bymer.Scanner	Wininit.exe	"Added by the BYMER WORM!"
X	Bymer.Scanner	Msinit.exe	"Added by the BYMER WORM!"
?	ChronitelInitTV	CHTVINIT.EXE	"??"
Y	DvpInitExe	Dvpinit.exe	"Command Antivirus related"
Y	Initialize8x8	8x8_init.exe	Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
U	JobHisInit	JobHisInit.exe	Used by Ricoh network printers to enable network printing from the client
N	MHINIT	MHINIT.EXE	Part of the Cybermedia Clean Sweep package
X	Microsoft Security Process	wininit.exe	"Added by the RBOT-FKM WORM!"
X	Microsoft Update	wininit.exe	"Added by the RBOT-AKR WORM!"
X	Microsoft Update 32	wininit.exe	"Added by the RBOT-ANY WORM!"
X	Microsoft Update 32	wuinit.exe	"Added by the AGOBOT-UE WORM!"
X	Microsoft Update 33	init.exe	"Added by the RBOT-ATT WORM!"
X	Microsoft Updates	winit.exe	"Added by the SDBOT-CSB WORM!"
X	Microsotufed Update 32	windinit.exe	"Added by the RBOT-CTJ WORM!"
N	NInit	NInit.exe	Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
?	OEPowerPlugs	winoeinit.exe	"??"
U	PMXInit	pmxinit.exe	Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma
N	PowerQuest Startup Utility	PQINIT.EXE	"From a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up
X	run=	svcinit.exe	"CoolWebSearch parasite variant"
U	SchedulingAgent	mstinit.exe	"MS Scheduling Agent in WinNT - displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting
N	Shockwave Init	SWINIT.EXE	Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
X	SVC Service	svcinit.exe	"Added by the SINIT TROJAN!"
X	SVC Service	svcinit.exe	"CoolWebSearch parasite variant"
X	Syskey	sysinit.exe	"Added by the BEAGLE.AX WORM!"
X	System Init	systeminit.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	system32.dll	systeminit.exe	"CoolWebSearch parasite variant - re-directing to your-search.info"
X	systeminit	systeminit.exe	"Added by the SILLYFDC-AN WORM!"
U	TrojanShield	Init.exe	"TrojanShield"
X	upddateit	winit.exe	"Added by the RBOT-MS WORM!"
X	userinit.exe	userinit.exe	"Added by the HAXDOOR-DP TROJAN!"
X	virtual	winit.exe	"Added by the MUGLY.A or MUGLY.B WORMS!"
X	Win32 USB Driver	winxpinit.exe	"Added by the SDBOT.AA TROJAN!"
X	Windows Service Hosting	USERINIT.exe	"Added by the GOMMER-A WORM!"
X	WindowsUpdate	USRINIT.EXE	"Added by the MADDIS.B WORM!"
X	wininit	wininit.exe	"Added by the WOLLF.16 TROJAN!"
X	[random name]	??erinit.exe	"PurityScan adware"
X	[random name]	userinit.exe	"PurityScan adware. Do not confuse with the legitimate Userinit Logon Application (userinit.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[various names]	XTermInit.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.