Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.


  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

Startup Name Process Name Details
X*WindowsAudiosystemupd.exe"Added by the AGENT-TH WORM!"
?AgenteRemupd.exe"Part of an older version of Panda Antivirus. Is this an update reminder (guess because of the name)
Nautoupdautoupd.exeRaxco Software auto update utility
Xautoupdautoupd.exe"Added by an unidentified VIRUS
XCmeUPDCMEupd.exe"Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
NCriticalUpdateWucrtupd.exe"MS Windows Critical Update Notification. If you want to keep Windows up-to-date
XCriticalUpdatewucrtupd.exe"Added by the NOALA.B WORM! Note - this file is located in the Windows or Winnt folder
NFJUPDNV_Chitosefjdvrupd.exeDriver update for a Fujitsu Siemens Lifebook laptop
Xjpupdjpupd.exe"Added by the DIALER.CM TROJAN!"
XKaspersky Email Securityjavaupd.exe"Added by the SWARLEY.A WORM!"
XMicrosoft Windows Updaterwin32upd.exe"Added by the RBOT-EC WORM!"
XMS Updatesaupd.exeSpyware web downloader
XMSMessngermsnupd.exe"Added by the RBOT-ADY WORM!"
XMSNS PLUS XP2msdupd.exe"Added by the RBOT-BCE WORM!"
XMSStartOptimizerWINUPD.EXE"Added by the DASMIN-E TROJAN!"
Xmsupdmsupd.exe"Added by the IEACCESS DIALER!"
XMSUpdatewupd.exe"Added by the ALADINZ.M TROJAN!"
XMSWinupdwinupd.exe"Added by the DLOADER-YE or DLOADR-AAA or DLOADER-ZF TROJANS - and others"
NNewsUpdnewsupd.exe"For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here."
XReal player updaterrealupd.exe"Added by the PARLAY TROJAN!"
XRealUpdaterrealupd.exe"Added by the PARLAY or MITGLIEDER.I TROJANS!"
XShareSearcherwsusupd.exe"Added by the ENCLAG-A TROJAN!"
XSystemwinupd.exe"Added by a variant of the SDBOT WORM!"
XSystemTrayWindowsupd.exe"Added by a variant of the IRCBOT TROJAN!"
NSystemUpdSystemUpd.exe"Updater for
XSysUpdSysupd.exe"VirtuMonde adware"
XUninstall****upd.exeAdult content based screen saver where **** can be any number
Xupd.exeupd.exe"Added by the DELF-AJW BACKDOOR!"
XUpdateSysupd.exeAdded by the SLACKBOT VIRUS!
XUpdate Exploreriexploreupd.exe"Added by a variant of the RBOT WORM!"
XUpdateComponentCNF UPD.EXEAdded by the SPYBOT.GEN VIRUS!
XUpgrade Servicewinupd.exe"Added by the TOFGER-U TROJAN!"
XWin32 Debug Managermicrosoftupd.exe"Added by the RBOT-GRJ WORM!"
XWin32 Ms Auto UpdaterAutomsUPD.exe"Added by a variant of the RBOT WORM!"
XWindows Network ControllerWinxPupd.exe"Added by the FORBOT-DK WORM!"
XWindows Performance Monitorwmscupd.exe"Added by the IRCBOT_GEN WORM!"
XWindowsAudiosystemupd.exe"Added by the AGENT-TH WORM!"
XWinsock6 MIC driverieservicesupd.exe"Added by the SPYBOT.AFZ WORM!"
Xwinupdwinupd.exe"SearchNew adware"
Xwinupd.exewinupd.exe"Added by the BEAGLE.M or BEAGLE.N WORMS!"
Xwin_upd.exeWINdirect.exe"Added by the MITGLIEDER.M TROJAN!"
XWSAConfigurationwin32upd.exe"Added by a variant of the RBOT WORM!"
Xwupd32wupd.exe"Added by the STRATION.EL WORM!"
X[random name]w?crtupd.exe"PurityScan adware"
X[random name]wucrtupd.exe"PurityScan adware. Do not confuse with the legitimate Windows Critical Update Notification (wucrtupd.exe) process"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.