kb

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	1234klsjdc uiar924c af	sysvtypkbjx.exe	"Added by the FAKEALERT-AM TROJAN!"
?	3Dlabs Taskbar Display Manager	3DLman.exe	"3DLabs graphics driver related. System Tray access to display settings?"
Y	AdslTaskBar	"rundll32.exe stmctrl.dll	TaskBar"
X	AdslTaskBars	taskmng.exe	"Added by the RBOT-AXZ WORM!"
U	Auto Switch	TASKBAR.exe	Related to 2-port Bitronics AutoSwitch kit from Belkin
Y	AVKBar	AVKBar.exe	"GData AntiVirusKit Anti-virus"
N	BlackBerryAutoUpdate	RIMAutoUpdate.exe	"Automatic updates for BlackBerry smartphones
U	Client Access Taskbar	cwbuitsk.exe	"IBM iSeries Client Access taskbar
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
N	cursor	Screendragon_VS_Taskbar.exe	"ScreenDragon video player"
U	default	mskbw.exe	"PC Surveillance PRO surveillance software. Uninstall this software unless you put it there yourself"
U	DefragTaskBar	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	defragTaskBar.exe	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	Dell AIO Printer A920	dlbkbmgr.exe	System Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
U	DeltaIITaskbarApp	DeltaIITray.exe	"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
N	EN4060C Taskbar	en4060ct.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
U	FLMK08KB	MMKEYBD.EXE	Multimedia keyboard manager. Required if you use the additional keys
U	FLMK08KB	KbdAp32A.exe	Keyboard utility for a Medion brand (and possibly others) keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
U	FLMTRUSTKB	KbdAp32A.exe	Keyboard utility for a Trust brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
X	freexstyle	lockbar.exe	"Added by the LOXBOT.D WORM!"
X	freexstyle	lockbr.exe	"Added by the LOXBOT.C WORM!"
U	Hot Key Kbd 2690 Daemon	SK2690DM.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	Hot Key Kbd 9910 Daemon	SK9910DM.exe	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	HPDJ Taskbar Utility	hpztsb01.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb02.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb04.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb05.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb07.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb09.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb06.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb08.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb03.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb10.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb11.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb12.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb13.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HpMmKbd	HpMmKbd.exe	HP's multimedia keyboard driver which enables the end-user to use the automation features of the HP multimedia keyboard
X	ImagePath	taskbarmngr.exe	"Added by the SDBOT-XB WORM!"
X	kb	AUTO.txt	"Added by the BRONTOK-CV WORM!"
Y	KB891711	KB891711.exe	"Installed by the Windows KB891711 critical update
Y	KB918547	KB918547.EXE	"Bug-fix for a Microsoft graphics rendering engine vulnerability - see here. Windows 98/Me only"
Y	KB926239	"rundll32.exe apphelp.dll	ShimFlushCache"
U	KBD	KBD.EXE	Multimedia keyboard manager. Required if you use the multimedia keys
U	KBD	KbdStub.EXE	Key Watcher from HP - watches for Multimedia Keys on HP keyboards
U	KBD MediaCenter	MEDIACTR.EXE	Multimedia keyboard manager. Required if you use the multimedia keys
X	kbddrv32	kbddrv32.exe	"Added by the CRYPTER.A TROJAN!"
X	kbddrvinf	kbddrvinf.exe	"Added by the CRYPTER.A TROJAN!"
U	KEMailKb	KEMailKb.EXE	"Controls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the buttons - like volume control or shut down"
U	Lexmark X1100 Series	lxbkbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X1100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	LWBKEYBOARD	KbdAp32A.exe	Keyboard utility for a Labtec brand (and possibly others) keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
N	M-Audio Delta Taskbar Icon	DeltTray.exe	M-Audio Delta Control Panel for M-Audio brand Delta series audio cards. System Tray access to audio settings - available through Control Panel
U	M-Audio Taskbar Icon	DeltaIITray.exe	"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
U	MAFWTaskbarApp	MAFWTray.exe	Drivers for the M-Audio Firewire Audiophile - Interface
U	MagicKeyboard	PreMKBD.exe	"Related to Samsung laptops. Provides ability to program keys to perform specific functions"
X	Microsoft	taskbar.exe	"Added by a variant of the RBOT WORM!"
U	mkb.exe	mkb.exe	"MomKnowsBest surveillance software. Uninstall this software unless you put it there yourself"
X	MS taskbar	crssr.exe	"Added by the RBOT-AGO WORM!"
X	MS taskbar	nts.exe	"Added by the RBOT-AGB WORM!"
X	MS taskbar	taskbars.exe	"Added by the RBOT.BRW WORM!"
X	MS Taskbars	taskbars.exe	"Added by the SDBOT-ACV WORM!"
X	Msn Messenger	nkbf.exe	"Added by the RBOT-GMQ WORM!"
X	MSTaskbar 32	tbsvc32.exe	"Added by the RBOT.BQZ WORM!"
X	MS_update_0704_KB74073.exe	MS_update_0704_KB74073.exe	"Added by a variant of the UPDATEKB TROJAN!"
U	Multimedia KBD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
N	NkbMonitor.exe	NkbMonitor.exe	"Part of Nikon PictureProject - image management for Nikon digital cameras"
?	nMTaskBarService	nMtsk.exe	"Taskbar control for ISDN NetMod modem. What does it do and is it required?"
U	OFFICEKB	kbdap32a.EXE	"Keyboard utility for a Micro Innovations brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard"
U	PDUiP6000DTskbr	PDUiP6000DTskbr.exe	"Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
Y	PP2000 Taskbar Control	PPTbc.exe	Protector Plus anti-virus software - system tray access
X	QBRSR	QuickBrowser.exe	top-banners.com adware
U	QuickBooks Database Server Manager	QBServerUtilityMgr.exe	"Part of QuickBooks Pro/Premier from Intuit - ""QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access."" See here for further information"
N	QuickBooks Delivery Agent	QBDAGENT.EXE	As far QAGENT but for QuickBooks. Can also have the version number in the name
N	Quickbooks Update Agent	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not
N	Redline Taskbar	taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
U	Remote Data Backups TaskBar Icon	CBSysTray.exe	"System Tray access to Remote Data Backups online system/data backup utility"
U	RevoTaskbarApp	RevoTask.exe	Control Application for M-Audio Revolution 7.1 sound card. The sound card will function without it - but changes to speaker setup and sound modification (Bass/Treble etc) will not be available
N	RoboForm	RoboTaskBarIcon.exe	"Roboform - password manager and web form filler. Will work without this startup entry
X	Search Bar	taskbar.exe	"Added by the OPANKI-F WORM!"
X	Server Backbone	server05.exe	"Added by the RBOT-ZM WORM!"
X	Shell	Explorer.exe kbdsys.exe	"Added by the DAPROSY WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""kbdsys.exe"" file is located in %AppData%\Microsoft\Keyboard"
U	Smart Keyboard	Smartkbd.exe	Netropa Smart Keyboard driver
X	super	fuckbx.exe	"Added by the LINEAGE-H TROJAN!"
N	SxgTkBar	sxgtkbar.exe	Yamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration
X	SystemCheck	SysCheckBop32.exe	"WINBO adware"
X	Task Bar	TASKBAR.EXE	"Added by the FRETHEM.J WORM!"
?	Task BarClient	TaskBarClient.exe	"Responsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service"
?	Task BarSvr	TaskBarSvr.exe	"Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?"
X	Task managebrkb	taskmg.exe	"Added by a variant of the SPYBOT WORM! See here"
N	Taskbar	Taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
N	TaskBar	CTLTask.exe	"Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects
Y	Taskbar Button Manager	tbm.exe	"Taskbar Button Manager from Innovative Solutions - ""is a simple utility that helps you arrange the buttons on your Windows taskbar in any way you want by using drag and drop"""
N	Taskbar Display Controls	"RunDLL deskcp16.dll	QUICKRES_RUNDLLENTRY"
X	Taskbar Service	taskbar.svc	Unidentified adware
Y	Taskbar Shuffle	taskbarshuffle.exe	"""Taskbar Shuffle is a simple
X	Taskbar System	tasksys.exe	"Added by a variant of the SDBOT WORM!"
N	Taskbar++	TaskbarPP.exe	"Taskbar++ is a software that allows you to sort (move) the buttons of the Windows taskbar by Drag & Drop"
Y	taskbarshuffle	taskbarshuffle.exe	"""Taskbar Shuffle is a simple
X	Taskbell.exe	Rund1.exe	"Added by the YIPID TROJAN!"
N	TkBell.Exe	evntsvc.exe	"Application Scheduler installed along with RealOne Player. Once installed
N	TkBell.Exe	realsched.exe	"Application Scheduler installed along with RealOne Player. Once installed
N	TkBell.Exe	tkbell.exe	"Application Scheduler installed along with RealOne Player. Once installed
N	TkBellExe	evntsvc.exe	"Application Scheduler installed along with RealOne Player. Once installed
N	TkBellExe	realsched.exe	"Application Scheduler installed along with RealOne Player. Once installed
N	TkBellExe	tkbell.exe	"Application Scheduler installed along with RealOne Player. Once installed
?	Tmmkb	Tmmkysvr.exe	"Toshiba multi-media keyboard software - possibly including creating keyboard shortcuts?"
U	TPKBDLED	TpScrLk.exe	IBM Thinkpad utility for displaying the Scroll Lock status on the System Tray - for Thinkpad's that don't have a Scroll Lock LED
N	TypingSatellite	KBOOST.exe	"Typing Master 2002 background utility that collects typing errors and builds up customised typing lessons for your needs. Available via Start -> Programs"
?	USB Hub Keyboard Patch	SKBPATCH.EXE	USB HUB Update
U	USBMMKBD	usbmmkbd.exe	USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version no longer pings a server when on-line wheras the older version did but did not transmit any user information
X	Windows Taskbar Manager	internat.exe	"Added by the PROTORIDE-H WORM!"
X	Windows Taskbar Manager	[path to file]	"Added by the PROTORIDE.B WORM!"
X	Windows Taskbar System	tasksys.exe	"Added by a variant of the SDBOT WORM!"
X	WindowsRegKey update	rkbuouoxfl.exe	"Added by the RBOT-OO WORM!"
U	WinFast_Taskbar	"rundll32.exe wftask.dll	WFDllLoadDefaultSettings"
X	Winhelp	TkBellExe.exe...	"Added by the LOVGATE.Z WORM!"
X	Winhelp	TkBellExe.exe	"Added by the LOVGATE.E WORM!"
U	Winkb6	winkb6.exe	"Part of We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content
X	WinSysStartUpWKbLw	TaskSystemDll.Exe	"Added by the BACKZAT.G WORM!"
U	WireLessKeyboard	PS2USBKbdDrv.exe	"Related to WireLess Keyboard Multimedia Combo Set by SANSUN Industries"
N	WOOTASKBARICON	GestMaj.exe TaskbarIcon.exe	"Wanadoo broadband ISP (now rebranded as Orange) taskbar icon - not required"
X	XP HOT FIS	kbx.exe	"Added by the FORBOT-GS WORM!"
Y	ZPLED	ZPKBDLED.exe	Driver for the Advent ADE-AD2 Wireless Keyboard
X	[12 random characters]	blackbox.exe	"IeDriver adware variant"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.