Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Xne.exe"Added by the IRCBOT-ZL TROJAN! Note - has a blank entry under the Startup Item/Name field"
UAdsGoneAdsgone.exe"AdsGone - pop-up stopper"
XAntiSpyZoneAntiSpyZone.exe"AntiSpyZone rogue spyware remover - not recommended"
Xblah servicewinsysengine.exe"Added by the RBOT-KI WORM!"
Xblahh servicemsengine.exe"Added by a variant of the RBOT WORM!"
XBLMessagingIntegrationblengine.exe"BuddyLinks adware"
UBlueSpace NEBlueSpaceNE.exe"""BlueSpace NE is a utility program used to run the Bluetooth function on VAIO computers that support the Bluetooth function or on VAIO computers connected to the Bluetooth USB adapter"". Shortcut available via Start -> Programs"
?ChangeLineschngline.exe"??"
Xconmswfconrnbne.exe"Added by the SDBOT-DEX WORM!"
Xcosinecosine.exe"Added by the RBOT-SW WORM!"
UEasyTuneIIIEasyTune.exeTuning (overclocking) utility for Gigabyte motherboards. Shortcut available
NESPN BottomLinebline.exe"ESPN BottomLine. ""You can dock the BottomLine to the top or bottom of your screen or drag it around on your desktop
NEye Tide Launcheroneeyetideone.exeNascar wallpaper
YezPS_PxezSP_PxEngine.exe"Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
YezShieldProtector for PxezSP_PxEngine.exe"Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
XFCEngineFCEngine.exe"CASClient adware"
UFolderClone v*.*.*folderclone.exe"Folderclone backup and synchronization software"
XITUNESitune.exe"Added by the RBOT-ZU WORM!"
XLogitech CameraSoundcane.exe"Added by the SDBOT.MUC WORM!"
NLogitech QuickCamManifestEngine.exe"Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry"
NLogitechSoftwareUpdateManifestEngine.exe"Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry"
UMacroPhonemacrophone.exe"MacroPhone is a network based telephony application that ""allows you to handle server based voice mail and fax functions for all users in your company"" and ""offers many related functions
UMacroPhone Clientmacrophone.exe"MacroPhone is a network based telephony application that ""allows you to handle server based voice mail and fax functions for all users in your company"" and ""offers many related functions
NManifestEngineManifestEngine.exe"Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry"
XMicrosoftwinline.exe"Added by the AGENT.KT TROJAN!"
NMiniphoneglophone.exe"VoiceGlo Glophone - ""an affordable and convenient way to call friends and family throughout the world using a dial-up or broadband Internet connection on your computer"" using the VoIP (Voice over Internet Protocol). No longer available"
XMS Timetimezone.exe"Added by the AGOBOT.ADY WORM!"
Xmsconfig.exeuline.exeAdded by a variant of the AGENT.AH downloader TROJAN!
UN2PTrayNet2fone.exe"An Internet telephony application. Needed only if you have an account at Net2Phone
XNetMeterNielsenOnline.exe"NetRatings software by Opistat. ""OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits"". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited
UNsengineNsengine.exe"Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here"
UnTunenTune.exe"Older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
UNVIDIA nTunenTune.exe"Older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
XOutLooksInSane.exe"Added by the SWOOP TROJAN!"
XPandaAVEnginePandaAVEngine.exe"Added by the NETSKY.R WORM!"
UPDEnginePDEngine.exe"PerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot"
XPollonpollone.exe"Added by the SPYBOT.FW WORM!"
UPowerForPhonePowerForPhone.exe"""ASUS Power 4 Phone is a telephone terminal emulation utility which can use hotkeys to handle a phone call from Skype or Modem in your notebook system."" For more information you can find a user's manual here"
XProc993wqxfne.exe"Added by the IXBOT-D WORM!"
XRavAvRavMonE.exe"Added by the RJUMPF-F WORM!"
XShineShine.exe"Added by the HAPPYLOW (or NISHE-A) VIRUS!"
USolidWorks Task Scheduler EngineswBOEngine.exe"Task scheduler for SolidWorks 3D CAD software"
USpyware BegoneSpywareBeGone.exe"Spyware BeGone - spyware remover. Previously not recommended
Xstandalone.exestandalone.exe"Added by the AGOBOT-ADS WORM!"
XSTVwinscrne.exe"Added by a variant of the SDBOT WORM!"
Xtaskmonetaskmone.exe"Added by the SINGU-S TROJAN!"
XTigerShine.exe"Added by the HAPPYLOW (or NISHE-A) VIRUS!"
NTimeOnlineTIMEONLINE.EXELightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
UTimezoneTimeZone.exe"Microsoft Daylight Saving Time Update Utility - see here"
XVGATuneVGATune.exe"Added by the RBOT-AWM WORM!"
Uvoip phonevoip phone.exe"Related to Acer Bluetooth VoIP phone - as optionally supplied with some of their notebooks such as the TravelMate 8200"
XWindows Serviceprivate-zone.exeAdded by an unidentified WORM or TROJAN!
XYahoo Messenggergphone.exe"Added by the TIOTUA-W WORM!"
UYahoo! Widget EngineYahooWidgetEngine.exe"Yahoo! Widget Engine lets you run little files called Widgets that can do pretty much whatever you want them to"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.