Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.


  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

Startup Name Process Name Details
?aauclientACNUpdater.exe"Appears to be related to software from"
NAdobeUpdaterAdobeUpdater.exeAutomatic updater for Adobe software - run manually
Xaolupdater.exeaolupdater.exe"Added by a variant of the IRCBOT TROJAN!"
XAVG Grisoft Updaterupdater.exe"Added by the AGOBOT-OT WORM!"
Xewupdaterewupdater.exe"EasyWebSearch adware updater"
NGoogle UpdaterGoogleUpdater.exe"Downloads and installs updates for Google applications (Google Earth
XGP Updatergpupdater.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
NiRiver UpdaterUpdater.exe"Updates for the iRiver Music Manager - used with their digital music players"
NKODAK Software UpdaterKodak Software Updater.exe"Software updater for Kodak Easyshare digital cameras"
XLzioMediaUpdaterLzioMediaUpdater.exe" adware downloader"
XMicrosoftupdater.exe"Added by the RBOT-GHP WORM!"
XMicrosoft Internet Firewall Updateupdater.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft Updatewinupdater.exe"Added by the RBOT.BIN WORM!"
XMicroSoft Wind0ws Updaterwinsupdater.exe"Added by a variant of the RBOT WORM!"
XMicroSoft Window Updaterwinsupdater.exe"Added by the RBOT-ZZ WORM!"
XMicrosoft winsupdaterWINSUPDATER.EXE"Added by the SPYBOTER.FB BACKDOOR!"
XMS Updating Utilitymsupdater.exe"Added by the RBOT-XR WORM!"
XMSN Auto-Updatermsnaupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Update Clientmsnupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
Xmsoupdatermsoupdater.exe"Added by the DLOADER.GBD TROJAN!"
Xmsupdatermsupdater.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
XMSupdater.exeN/A"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
Xmsvupdatermsvupdater.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
XOffice MonitorsGoogleUpdater.exe"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
UOpenDNS UpdateOpenDNS Updater.exe"Updater for OpenDNS which ""is a free service that works for networks of all sizes
NOrangeSharkOSharkUpdater.exe"Orange Shark updater - online games for all ages"
NPluckSvrPluckUpdater.exe"Pluck Toolbar updater"
UPPUpdateppupdater.exe"PPUpdater - updater that used to be part of PestPatrol before CA's acquisition"
XPrinter Spoolupdater.exe"Added by a variant of the RBOT WORM!"
Xrunner1updater.exeAdded by the CRYPT.ULPM.GEN TROJAN!
XSunJavaUpdaterv13javaupdater.exe"Added by the ROUTROBOT WORM!"
Xsystem checkupdater.exeUnidentified adware downloader
USystem Files UpdaterSystem Files Updater.exe"System Files Updater from Flyakiteosx ""will transform the look of an ordinary Windows XP system to resemble the look of Mac OS X"""
XSystemBooster2009sbr_updater.exe"SystemBooster2009 rogue system suite - not recommended adware updater
XUpdateCDUpdater.exe"""Carpe Diem"" adult premium rate dialler related"
Xupdaterwupdater.exe"KeenVal adware"
XvirusbyevirusbyeUpdater.exe"VirusBye rogue security software - not recommended"
XWin UpdaterWINUPDATER.EXE"Added by the RBOT.IP WORM!"
XWindows Auto Updatewinupdater.exe"Added by the SDBOT.TF WORM!"
XWindowz Update V2.0updater.exe"Added by the YODO-C WORM!"
Xwinsupdaterwinsupdater.exe"Added by the ALCRA-F WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.