Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X252winmgr.exe"Added by the LEGMIR-AT TROJAN!"
UAcBtnMgr_X63AcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X63.exeAcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X73AcBtnMgr_X73.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X83AcBtnMgr_X83.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
UAcBtnMgr_X84-X85AcBtnMgr_X84-X85.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
XCaptionMgr32crssr.exe"Added by the ZAR.A WORM!"
NConmgrconmgr.exeStarts Winfax pro at startup
UConMgr.execonmgr.exeConnection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
UE-colorIconMgr.ExeSets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
XIPC Spool Managerwnmgre.exe"Added by the SDBOT-ZC WORM!"
Xirc sessionsessionmgr.exe"Added by the SDBOT-ACE WORM!"
ULexmark X63 Button ManagerAcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X73 Button ManagerAcBtnMgr_X73.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X83 Button ManagerAcBtnMgr_X83.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X84-X85 Button ManagerAcBtnMgr_X84-X85.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
YMcAfeeVirusScanServiceAvsynmgr.exe"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
XMicrosoft Synchronization Manager___synmgr.exe"Added by the MASLAN.A or MASLAN.C WORMS!"
XMicrosoft Update Machinewinmgr.exe"Added by a variant of the RBOT WORM!"
XMSMcAfeeeAvsynmgr32e.exe"Added by the FRAMAR TROJAN!"
XMSMcAfeehAvsynmgr32h.exe"Added by the FRANGO TROJAN!"
XMSMcAfeeSAvsynmgr32S.exe"Added by the VOLAC or VOLAC.DR TROJANS!"
XMSN Managermsnmgrsv.exe"Added by the IRCBOT.BAZ BACKDOOR!"
XMSN Messagermsnmgr.exe"Added by the IRCBOT-ACD WORM!"
XMsn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
XMSN Messenger Servicesmsnmgr.exe"Added by the RBOT.ADF TROJAN!"
XMSN Messenger Servicesmsnmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN servicemsnmgr16.exe"Added by a variant of the RBOT WORM!"
Xmsnmgrmsnmgr.exe"Added by the BIFROSE-K WORM!"
Xnmgrnnmgr.exe"FFToolBar adware toolbar"
XRun Msn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
Xstrmsnmgrsmsnxmsgrsc.exe"Added by the SDBOT.JDR WORM!"
UWD Button ManagerWDBtnMgr.exeButton manager installed with a western digital external disk drive. Allows you to back up your system with one click
UWD Drive ManagerWDBtnMgrUI.exe"System Tray access to the WD Drive Manager management software for selected external drives in the My Book and My Passport range. Hovering over the icon displays health status (temperature
XWindows Pcwinmgr.exe"Added by the BIBOT-A WORM!"
XWindows Timewinmgr.exe"Added by the RBOT-XC WORM!"
XWindows UDP Control Centerwinmgrs.exe"Added by the PUSHBOT.MY WORM!"
XWindows Workstation Start Servicemslanmgr.exe"Added by a variant of the RBOT WORM!"
XWINMGRtaskgmgr.exe"Added by the MYTOB.AN WORM!"
XWinMgrwinmgr32.exe"Added by the VB-EDY TROJAN!"
XWinmgr.exescvhost.exe"Added by the AGOBOT.AFG WORM!"
XWinMgr32winmgr32.exe"Added by the MIMAIL.P WORM!"
XWinsocks2 drivermznmgr.exe"Added by a variant of the SDBOT WORM!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.