Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
U1455 Scan2PCScan2pc.exeScan to PC application for the scanning function of the Samsung SCX1455 multifunction printer
U2335dn Scan2PCScan2pc.exeScan to PC application for the scanning function of the Dell 2335 multifunction laser printer
U3170 Scan2PCScan2pc.exeScan to PC application for the scanning function of the Samsung CLX3170 multifunction laser printer
U4x26 Scan2PCScan2pc.exeScan to PC application for the scanning function of the Samsung SCX4x26 multifunction laser printers
U4x28 Scan2PCScan2pc.exeScan to PC application for the scanning function of the Samsung SCX4x28 multifunction laser printers
U6200 Scan2PCScan2pc.exeScan to PC application for the scanning function of the Samsung CLX6200 multifunction laser printer
XActiveScan AntivirusActiveScan.exe"Added by the RBOT-FKQ WORM!"
Xantispyscan.exe"IE AntiVirus rogue security software - not recommended
Yavast! Web ScannerAshwebsv.exe"Web scanning part of avast! Antivirus. Starts via a registry ""Run"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
XAVG AntiVirus Scanneravgscnx.exe"Added by the SILLYFDC.BBE WORM! Note - this is not a legitimate AVG entry"
Xavscanavscan.exe"Added by the SILLYFDC.BCR WORM! The file is in the users %Temp% directory"
XAVScanwinav.exeUnidentfied rogue security software
XAvScanavscan.exe"Antivirus System PRO and Spyware Protect 2009 rogue security software. The file is located in %ProgramFiles%\<rogue name>"
XavscanUsbconeted.exe"Added by the PROVIS-A TROJAN!"
YAVSchedScanSCHSC9X.EXE"Command Antivirus related"
UAXIS Print System DriverScannerDriverScanner.exe"Part of AXIS Print System from AXIS Communications - ""adds printer discovery
YBitDefender Scan Serverbdss.exe"BitDefender antivirus"
XBlockScannerBlockScanner.exe"BlockScanner rogue security software - not recommended. A member of the WiniGuard family"
XBymer.ScannerWininit.exe"Added by the BYMER WORM!"
XBymer.ScannerMsinit.exe"Added by the BYMER WORM!"
?CardScan AutoSyncCSyncCfg.exe"Related to the CardScan business card reader range of products. May be related to synchronization with E-mail software and mobile devices (see here)?"
XCheckScan32regload16.exe"Added by the AEBOT.K WORM!"
UELBERTRicoh_S2PScan2pc.exeScan to PC application for the scanning function of the Ricoh MFP Type 104 multifunction printer
UELBERT_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung SCX-5x30 Series multifunction printers
YEmailScanmcvsescn.exeRelated to McAfee AntiVirus suite - used to automatically scan incoming e-mails
YeScan MonitorAVKWCTL9X.EXE"MicroWorld eScan antivirus"
UeScan Scheduleravkserv.exe"MicroWorld eScan antivirus scheduler"
UeScan UpdaterTrayicos.exe"MicroWorld eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads"
UHijackThis startup scanHijackThis.exe"""HijackThis is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware
NHP Precision Scanhpmdlbwx.exeHP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
UHP ScanPatchHPScanFix.exe"Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used
NHP ScanPicturehpsplmwa.exeHP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
UHPSCANMonitorhpsjvxd.exeHP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner
?hpScannerFirstBootscannerfb.exe"HP scanner related"
XIE-Securityiescan.exe"IE-Security rogue spyware remover - not recommended
XIE-Securitywdscan.exe"IE-Security rogue spyware remover - not recommended
UIJNetworkScanUtilityCNMNSUT.EXENetwork utility available for some Canon scanners and multifunction devices. Allows the device to see computers on a network and those computers running the utility to control scanning via the Control Panel on the scanner - which saves you having to run back and forth between the scanner and your computer
UInventory ScanLDISCN32.EXE"LANDesk® Management Suite software component"
UIRIS_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung CLX-3160 Series multifunction laser printer
UIRIS_XRX_S2PScan2pc.exeScan to PC application for the scanning function of the Xerox Phaser 6110MFP multifunction laser printer
ULogan_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung SCX-4500 Series multifunction printer
XLTM2winscan.exe"Added by the LITMUS-B TROJAN!"
YMailScan DispatcherLaunch.exe"MicroWorld MailScan Dispatcher splits each e-mail message into various components such as the header
XMalware ScannerMalScr.exe"Malware Scanner rogue security software - not recommended
UMaple_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung CLX-216x Series multifunction printers
XMcafee Anti ScanNortonScn.exe"Added by a variant of the RBOT WORM!"
XMcAfee Online virus Scanneravp.exe"Added by the RBOT-GCV WORM! Not to be confused with Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory"
XMcAfee Online Virus Scannernzm.exe"Added by the IRCBOT.XV WORM!"
YMcAfee VirusScanmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
YMcAfee VirusScanmcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
YMcAfee VirusScanoasclnt.exe"On-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access
XMcafee VirusScan Managermvcsvm.exe"Added by the SILLYFDC.BBV TROJAN!"
XMcAfeeScanPlusMcAfeeScanPlus.exe"Added by the MEPCOD TROJAN! This trojan file does not belong to any McAfee Antivirus Software and is found in the Windows or Winnt folder"
YMcAfeeVirusScanServiceAvsynmgr.exe"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
YMcAfeeWebscanXWebScanX.exe"From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs
XMemScannerMemScanner.exe"Part of Enigma SpyHunter - not recommended
YMessengerSCANMSG.EXE"AntiVirus Quick Heal - virus protection"
UMFP1815_S2PScan2pc.exeScan to PC application for the scanning function of the Dell Laser MFP 1815 multifunction printer
XMicrosoftrtvcscan.exe"Added by the RBOT-GGU WORM!"
XMicrosoft Disk Scannerscansdisk.exe"Added by the WOOTBOT.DT WORM!"
XMicrosoft Scanregmicrosoftscanreg.exe"Added by the FRANRIV.A WORM!"
UMicrotek Scanner FinderScannerFinder.exeMonitors whether a scanner is present. Provided with Microtek scanners
UMSRegScanSGP.exe"SpyGator surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanSSDemo.exe"SupremeSpy surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanETNKL.exe"ComKeylogger surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanKSPDemo.exe"KeyStalker PRO surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanDDSSDemo.exe"SystemSleuth surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanESP+.exe"ESP surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanESPDemo.exe"Eye Spy Pro surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanSBPDemo.exe"SpyBoss Pro surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanYEKPND.exe"EyeCandy Computer Monitor surveillance software. Uninstall this software unless you put it there yourself"
UMSRegScanYKPND.exe"YKPMD surveillance software. Uninstall this software unless you put it there yourself"
Xmsscan.exemsscan.exe"Microsoft Security Adviser rogue security software - not recommended"
Umwavscanmwavscan.com"MicroWorld Anti Virus Toolkit is a free anti-virus scanner that runs on-demand. You can choose to scan your entire system
XMySLScanmsvc32.exe"Added by the FORBOT-EH WORM!"
XNAV Scan ServiceNAVSCAN32.EXE"Added by the SDBOT.VG WORM!"
XNavScan[filename]"Added by the OBSORB TROJAN!"
XNAVSCAN32.EXENAVSCAN32.exe"Added by the SDBOT-DO WORM!"
XNAVSCANNER32NAVSCANNER32.EXE"Added by the RBOT.QC WORM!"
UNBKeyScanNBKeyScan.exe"This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup"
XNI.USYPSysProtectScannerInstall.exe"Installer for the SysProtect rogue security software
XNI.UWFX5WinFixer2005ScannerInstall.exe"WinFixer 2005 web installer - ""foistware""
YNOD32POP3Pop3scan.exe"POP3 E-mail part of Eset's NOD32 virus-scanner"
XNorton Antiviral Scannernavscnr.exe"Added by the DELBOT-K WORM!"
XNvCplScanmsc32.exe"Added by the FORBOT-DD WORM!"
XNvCplScanwinasp.exe"Added by the FORBOT.BZ WORM!"
XNvCplScannvsc32.exe"Added by the BROPIA.N WORM!"
XNvCplScankav32.exe"Added by the FORBOT-EW WORM!"
XNvCplScannetstat32.exe"Added by the SDBOT.BRL WORM!"
XNvCplScandllmanager.exe"Added by the FORBOT.R WORM!"
YOfficeScan95pccwin97.exe"Trend Micro antivirus OfficeScan"
YOfficeScanNT Monitorpccntmon.exe"Trend Micro OfficeScan Antivirus real-time scan monitor"
UP3000x_S2PScanToPc.exeDell Laser MFP 1600N network application for scanning files to the PC
NPC SpeedScan ProPCSpeedScan.exe"Ascentive PC SpeedScan Pro registry optimizer - not recommended
XPDASCANpdascan.exe"Added by the AGOBOT-QY WORM!"
UPop-Up_ScannerPopupscn.exe"Panicware popup blocker"
XPower Scanpowerscan.exe"Foistware by Integrated Search Technologies - the people behind ISTBar adware"
YPP2000 Real Time ScanPPVstop.exeProtector Plus anti-virus software - real time scanner
XprinterSpyAssaultScanner.exe"SpyAssault spyware remover - not recommended
XPrivacyScannerpscan.exe"Privacy Champion
YQuick Heal Startup ScanQHSTRT32.EXE"Quick Heal - virus scanner"
UR2Plus_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung SCX-4x20 Series multifunction printers
UR2Ricoh_S2PScan2pc.exeScan to PC application for the scanning function of the Ricoh MFP Type 103 multifunction printer
XRegistry Scannerregscanr.exe"Added by a variant of the OPTIX TROJAN!"
XRegscanregscanr.exe"Added by the OPTIX-SE TROJAN!"
XRegScanDLLSRV32.EXE"Added by the AGOBOT.AEW WORM!"
XRegScanRegscan.exe"Added by the TALEX TROJAN!"
XReg_WFTscanreg32.com"Added by the SENNASPY-F TROJAN!"
Nreminder-ScanSoft Product Registrationremind32.exeRegistration reminder for ScanSoft products such as PaperPort
Xscanmscman.exe"ClientMan parasite variant"
?Scan DetectorPmxdetect.exe"Associated with PrimaScan scanners. Is it required?"
XScan Registerssms.exe"Added by the RBOT-AT WORM!"
?Scan Wizardbutton.exe"Associated with Scan Wizard as supplied with Microtek scanners - see also the Scanner Detector and Sdetect entries. What does it do and is it required?"
UScan2pcScan2pc.exe"Scan to PC application for the scanning function of multiple multifunction printers from Dell
XScanDiscsatan.exeAdded by the GREGSTAR TROJAN!
XScanDiskScanDisk.exe"Added by the GANDA.A WORM! Note - this is not the valid ""ScanDisk"" Win9x/Me standard disk error checker"
Xscands32.exescands32.exe"Added by a variant of the ADCLICKER TROJAN!"
XScandsk2scandsk2.exe"Added by the AGOBOT-PK WORM!"
Xscandskx.exescandskx.exe"Added by the DLOADR-ARM TROJAN!"
?ScanFile??"??"
YScanInicioInicio.exe"Part of Panda Antivirus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active"
NScanner DetectorSDetect.exe"ScanSuite Scanner Detector - part of ScanWizard
YScanner File UtilityNsCatCom.exe"Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation"
?ScanPanelScanPanel.exe"Trust Easy Webscan scanner related - what does it do and is it required?"
XScanreg[filename]"Added by the QQPASS.E TROJAN!"
XScanRegistrynsrvnt.exe"Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe"
XScanRegistryscanregv.exe"Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe"
YScanRegistryScanregw.exeScans the Win98/Me system registry and makes back-ups at start-up - important should the registry become corrupt. Located in %windir%
XScanRegistryScanregw.exe"Added by the STATOR WORM! Note - this is not legitimate ScanRegistry entry - which is a vital Windows file. The executable ""Scanregw.exe"" is located in %System%. Runs from the registry RunServices key as opposed to the Run key"
XScanRegistryN/A"Added by the DINOXI or DINOXI.B WORMS!"
XScanRegistryscanregw.exe"Added by the NYXEM-D WORM! Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines. This worm file is found in %System%"
XScanRegistryupdate.exe"Added by the DWNLDR-FZY TROJAN!"
NScanSoft OmniPage SE 4.0-reminderEreg.exe ereg.ini"Registration reminder for Ominpage SE version 4 from Scansoft (now Nuance)"
NScanSoft PaperPort 7 Registration ReminderNAVBrowser.EXE"Registration reminder for PaperPort 7 from Scansoft (now Nuance)"
NScanSoft PDF Professional 4-reminderEreg.exe Ereg.ini"Registration reminder for PDF Converter Professional version 4 from Scansoft (now Nuance)"
XScanSpywareScanner.exe"ScanSpyware rogue security software - not recommended
XScanSpyware v3.2Scanner.exe"ScanSpyware rogue security software - not recommended
XScanSpyware v3.5Scanner.exe"ScanSpyware rogue security software - not recommended
UScanSys32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
UScreen Guard Message Scansgms.exe"Part of Access Denied security and privacy software"
XSdScans**stup_tmp.#32"Added by the SDSCAN.A TROJAN - where ** are random upper case letters"
XSecurityScannerss2008.exe"Security Scanner 2008 rogue security software - not recommended
USpyCop ScanCheckMAIN.EXE"SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan"
XSpyOnThisScannerSpyOnThis.exe"SpyOnThis rogue spyware remover - not recommended"
USpyware Begonefreescan.exe"Spyware BeGone - spyware remover. Previously not recommended
NSpyware ScannerAseScanner.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
USpyware VanisherFreeScanner.exe"Spyware Vanisher - spyware remover. Previously not recommended
Xspywarescannerspywarescanner.exe"Spyware Scanner 2008 rogue security software - not recommended
?srePostpone"rundll32.exe [path] srescan.dll DoSpecialAction"
UStart Network Scanner ToolsdFTP.exe"Part of
UStartup Manager ScannerStartupMonitor.exe"Startup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans
YStartup ScanSensor.EXE"AntiVirus Quick Heal - scheduling agent"
XSwiftCleanerSwiftCleanerScanner.exe"SwiftCleaner rogue cleaning utility - not recommended
XSymantec Autoscan[random filename]"Added by the RBOT-AJO WORM!"
XSysScanbvt.exe"Added by the AUTOUPDER TROJAN!"
XSystem Scannersystem.exe"Added by the AGOBOT-DI BACKDOOR!"
XTotalSecure2009scan.exe"Total Secure 2009 rogue security software - not recommended
YTrendMicro OfficeScan NTTMLISTEN.EXEVirus scanner
UTrojanScannerTrjscan.exe"Trojan Remover from Simply Super Software. Scans for an removes trojan viruses where anti-virus software may have not detected or removed"
XVirscannersmss.exe"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XVirus Scanvirscana.exe"Added by an unidentified VIRUS
YVirusScan Onlinemcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
?VirusScanMSCVsStat.exe"Part of McAfee VirusScan. System Tray application as with previous versions (were also VsStat.exe)
XVirusScannermnsys.exe"Added by the SDBOT-AFQ WORM!"
XVirus_ScannerVirus_Cleaner.exe"Added by the PANOL WORM!"
NVistascanvistascan.exe"Included in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users
YVrBootScanVRBScan.exe"Boot scan feature of the HAURI ViRobot series of internet security products. HAURI's ViRobot engine is included in those used by VirusTotal
Xvscanjoke.vbs"Added by the ROOKIE-A TROJAN!"
Xvscannerspooll32.exe"Added by the OPTIXPRO.10 TROJAN!"
UWebScanDEFSCANGUI.EXE"eAcceleration Stop-Sign security software related. Previously not recommended
Uwebscanstopsignav.exe"eAcceleration Stop-Sign security software related. Previously not recommended
YWebScanXWebScanX.exe"From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs
UWhitney2_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung SCX-4725 Series photocopier
UWHITNEY2_XRX_S2PScan2pc.exeScan to PC application for the scanning function of the Xerox Phaser 3200MFP multifunction laser printer
UWhitneyXerox_S2PScan2pc.exeScan to PC application for the scanning function of the Xerox WorkCentre PE220 Series multifunction laser printer
UWHITNEY_S2PScan2pc.exeScan to PC application for the scanning function of the Samsung SCX-4x21 Series multifunction printers
XWidnows Xp Web scanxpscan.exe"Added by a variant of the SDBOT WORM!"
XWin32GScandisk.com"Added by the ESTRELLA TROJAN!"
XWinAntiSpyware 2006 Scannerwas6.exe"WinAntiSpyware 2006 rogue spyware remover - not recommended
XWindows Anti Virus Control Centeravrscan.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Anti Virus Control Centerwinavscan.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Registry Scanregscan32.exe"Added by the RBOT.KE WORM!"
XWindows Registry Scantimeupdate.exe"Added by the SPYBOT.JE WORM!"
XWindows Registry Scansvcdll.exe"Added by the RBOT-TP WORM!"
XWindows Registry Scanregscan23.exe"Added by a variant of the RBOT WORM!"
XWindows Registry Scanregscan.exe"Added by the RBOT-HA WORM!"
XWindows Registry Scanwinmedia.exe"Added by the SPYBOT.GK WORM!"
XWindows Virus Scannerwinvsvc.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWlan Driveravscan.exe"Added by the WOOTBOT.DH WORM!"
UXeroxScannerDaemonXrxFTPLt.exe"Xerox Scanner Daemon - driver for Xerox Scanner model fu621d"
?XeroxScanUtilityxrxzipui.exe"Associated with a Xerox multifunction and/or scanner. What does it do and is it required?"
X[random name]scanregw.exe"PurityScan adware. Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines"
X[various names]scanSYS.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.