Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
NAlienAutopsyTest_BS.exe"Alienware computer technical support software"
YCCDoctorLogonTestingccdoctor.exe"Checks your system to make sure it's configured properly for running IBM Rational ClearCase
NChristmas Music PlayerTTEST6.EXE"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
XETB Testeretbtest.exe"Added by the RBOT-ABR WORM!"
XHELLBOT TEST1hellbot.exe"Added by the MYDOOM.BO WORM!"
XHot InsideHottest Story Ever.exe"Added by the BHARAT.A WORM!"
NHP Parallel Port Testhppt.exeAssociated with a HP ScanJet scanner
UKASPOESpamTest.exe"Kaspersky Anti-Spam"
?LoadWatcherTest.exe"Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct?"
ULotus SuiteStartsuitest.exePuts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs
NLwinst Run Profilerlwtest.exeLogitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
XMachineTestCMagesta.exe"Added by the SDBOT-NE WORM!"
XMicrosoft Update Machinewftestb.exe"Added by the RBOT-AFZ WORM!"
XMonitor Test[random filename]"Added by the SDBOT-NC WORM!"
XMonTestvccxzq.exe"Added by the SDBOT-EA WORM!"
UOESpamTestOESpamTest.ExE"Kaspersky Anti-Spam"
XRNBc Testwf32vbs.exe"Added by the RBOT-AGR WORM!"
XRNBc Testbvldv32.exe"Added by the RBOT-AJF WORM!"
XRNBz Testwf32vbc.exe"Added by the RBOT-AEY WORM!"
XRNDc Testwf32b.exe"Added by a variant of the SDBOT WORM!"
XServer Runtime Processwbemstest.exe"Added by the SDBOT-DDB WORM!"
NStart Wingman Profilerlwtest.exe"Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer
XSystemtesttestt.exe"Added by the DWNLDR-ZLC TROJAN!"
XSystemToolstesttestt.exe"Added by the DWNLDR-ZLC TROJAN!"
USystestSystest.exe"Clean Space internet evidence eliminator"
Xtesti love you.exe"Added by the SINGU-T TROJAN!"
Xtestzistro.exe"Added by the KIMAT-C TROJAN!"
Xtestestfxxxh.exe"Added by the SDBOT-MK WORM!"
XTesting 123msdata.dat"Added by the NITS.A WORM!"
Xtestit.exetestit.exe"ISTBar adware"
XTTS Synctesttts.exe"Added by the SDBOT.BVA WORM!"
XUpdatestatsUpdatestats.exe"Statblaster adware"
XUpdateStatsUpdateStats.exe"SeekSeek search hijacker related - see here"
XWin32 Testbleatest.exe"Added by a variant of the RBOT WORM!"
XWINDOWS SYSTEMtest.exe"Added by the MYTOB.DJ WORM!"
XWINDOWS SYSTEMtest2.exe"Added by the MYTOB.DJ WORM!"
XWINDOWS SYSTEMtest3.exe"Added by the MYTOB.DV WORM!"
XWinsock32 driverTESTING.EXE"Added by the SPYBOT-B WORM!"
XWTF Testwtftest.exe"Added by the RBOT-ACM WORM!"
X[various names]Testimonials.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.