Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77
78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99
If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
U802.11b+g USB Wireless LAN UtilityZDWlan.exe802.11b+g USB Wireless LAN Utility
YAiptek Graphics Tablet (USB)atwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
?AliUSBfixGREENMK.exe"May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?"
YAlps Electric USB ServerMonserv.exe"Alps Electric USB Server - required according to this article"
XAntivirusBESTInstaller.exe"Installer for the AntivirusBEST rogue security software - not recommended. Removal instructions here"
XAntivirusBESTabest.exe"AntivirusBEST rogue security software - not recommended
Yatwtusbatwtusb.exeUSB interface for Aiptek Graphics Tablet (USB)
XavscanUsbconeted.exe"Added by the PROVIS-A TROJAN!"
UBAUSBBAUSB.exe"Boston Acoustics Audio
UBelkin F5D8053 N Wireless USB Adapter UtilityBelkinwcui.exe"Wireless configuration utility for the Belkin F5D8053 N Wireless USB Adapter"
UBelkin Wireless USB UtilityBelkinwcui.exe"Wireless configuration utility for the Belkin F5D7050 Wireless G USB Adapter"
YD-Link Air USB UtilityAirCFG.exeD-Link Air USB wireless driver and configuration utility
?Disable EHCInousb20.exe"??"
UDT 11Mbps WLAN USB StationDTUSBMonitor.exe11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
UFTMSFLT(USB)FTMSFLTU.EXEFujitsu's Touch Panel Message Notifier
UGene USB MonitorUSBMonit.exeMonitors USB ports for insertion of Sandisk USB flashdrives
YGenie USB MonitorUSBmonitor.exePort monitor for an external USB hard drive. Required to enable access to the drive
UInstant Wireless Configuration UtilityWUSB11cfg.exe"Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
XiPOD USB DriverIPODUSB.EXE"Added by a variant of the RBOT WORM!"
XiPod USB ServiceiPODService.exe"Added by a variant of the RBOT WORM! Do not confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the %ProgramFiles%\iPod\bin folder and is implemented as a system service
XIPOT USB Service DRIVERhpsebc087.exe"Added by the SDBOT-WA WORM!"
XIPOT USB Service DRV32hpsebc08.exe"Added by the SDBOT-WH WORM!"
Nipwusbipw.exe"Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to ""make and receive free Internet calls on your regular phone"" whilst ""at the same time
UJOYTECH USB Neo S ControllerJoytechNeoSTrayIcon.exe"System Tray access to Joytech Neo S PC gamepad controller software"
UMCI USB IconUSBIcon.exeMCI USB software used for managing a USB card reader
XMicrosoft Update USB2wuammgrd32.exe"Added by the RBOT-ADT WORM!"
XMicrosoft Updates 2 USBwgafixer.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Updates 5 USBsp3fixer.exe"Added by the RBOT-ADS WORM!"
XMicrosoft USB Windows2 Driverusbautotuner.exe"Added by the SILLYFDC.BCL WORM!"
XMicrosoft USB2 Drivercrmss.exe"Added by the RBOT-VK WORM!"
Xminiportusb2chk.exe"Added by the LAZAR-A TROJAN!"
XMS USB 2.0 Windows Supportmsusb32.exe"Added by a variant of the RBOT WORM!"
UMy Essentials Wireless USB UtilityO-Maxwcui.exe"Belkin My Essentials Wireless USB Utility"
UNUSB3MONnusb3mon.exe"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
NOfotoNow USB Detection"Rundll32.exe OFUSBS.DLL WatchForConnection OfotoNow"
NPP****usbFBDirect.exe"Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan
?PspUsbCfPspUsbCf.exe"??"
UReproPRDPrdUsb.exe"Thrustmaster Corporation Presets application - a game controller driver
URun Nintendo Wi-Fi USB Connector Registration ToolNintendoWFCReg.exe"Related to Wi-Fi USB Connector from Nintendo"
?RUSBHOLoader"rundll32.exe RUSBHOLoader.dll AutoRegister"
USbUsb AudCtrl"RunDll32 sbusbdll.dll RCMonitor"
?ShowIcon_Justrams_USB Product Driver v2.12r012shwicon.exe"Related to Just Rams USB product driver. Is it required?"
?ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051shwicon.exe"Card reader for memory cards from digital cameras. Is it required? "
USinus 1054 data WLAN ManagerWifiusb.exeWireless management utility for the T-Com Sinus 1054 Data WLAN adapter
NSiSUSBRGSiSUSBrg.exeSiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP
USpeedport W 100 Stick WLAN ManagerWifiusb.exeWireless management utility for the Speedport W 100 Stick WLAN USB stick
USpeedtouch USB DiagnosticsDragdiag.exeFor an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
Xsystems usb driverWindows2.exe"Added by a variant of the RBOT WORM!"
UT-Com WLAN ManagerTS154USB.exeWireless management utility for the T-Com Sinus 154 Data II WLAN adapter
UTurboHddUsbTurboHddUsb.exe"LaCie USB Boost or PQI TurboHDD advanced driver for their range of USB hard disks which increases USB performance by up to 53%. Not required unless you use a supported external drive frequently"
XUniversal USB Servicesvchost32.exe"Added by the KELVIR.R WORM!"
?UsbUsb.exe"HP related - not sure whether it's required"
XusbSASS.EXE"Added by the FUNSTA-A TROJAN!"
XUSB 2.0 DriverupdateXPSPC.exe"Added by the AGOBOT-RJ WORM!"
XUSB 2.0 DriverWinsys32.exe"Added by the AGOBOT-QM WORM!"
XUSB 2.0 DriverupdateXP.exe"Added by the AGOBOT-QP WORM!"
XUSB 2.0 Driverwinsystem.exe"Added by the AGOBOT-QS WORM!"
XUSB 2.0 DriverUpdateXPSP.exe"Added by the AGOBOT-QD WORM!"
XUSB 2.1 Driverwinupdate1.exe"Added by a variant of the RBOT WORM!"
UUSB 3.0 Monitornusb3mon.exe"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
XUSB controllerSvcmm32.exeSvcMM backdoor parasite downloader
XUSB Deviceservicelog.exe"Added by the WOOTBOT.CB WORM!"
XUSB Devicewin32usb.exe"Added by the FORBOT-BQ WORM!"
XUSB Device Server!usbserver.exe"Added by a variant of the IRCBOT TROJAN!"
XUsB drivermsjavx86.exe"Added by the AGOBOT-PQ WORM!"
XUSB Driver4UpdateXP*.exe [* = random digit]"Added by a variant of the SDBOT WORM!"
XUSB Drivers1msupdate.exe"Added by a variant of the RBOT WORM!"
XUSB Driverz2msnplus1.exe"Added by the SDBOT-XQ WORM!"
XUSB Fix 1.1wuservices.exe"Added by a variant of the SDBOT WORM!"
XUSB Fixeswuafix.exe"Added by the RBOT-ABV TROJAN!"
XUSB Hardware MonitoringUSBhardware.exe"Added by the RBOT-NN WORM!"
XUSB Hardware326 MonitoringUSBhardware326.exe"Added by a variant of the SPYBOT WORM!"
XUSB Hardware32c MonitoringUSBHARDWARE32C.EXE"Added by the RBOT-UU WORM!"
XUSB Host Serviceusbsvc.exe"Added by the RBOT-GG WORM!"
?USB Hub Keyboard PatchSKBPATCH.EXEUSB HUB Update
XUSB MS UpdateUSBS.exe"Added by a variant of the RBOT WORM!"
YUSB SECURITY DEVICE CoInstallerJupitCo.exe"ButterflyMedia USB Flash drive related - required for the password security feature to work"
XUSB Updatesmservices.exe"Added by a variant of the SDBOT WORM!"
XUSB Updatesmsfirewalls.exe"Added by a variant of the RBOT WORM!"
XUSB Updates 2wugfixx.exe"Added by a variant of the RBOT WORM!"
XUSB2.0usb-hi.exe"Added by the AGENT.US WORM!"
NUSB2CheckPCLECoInst.dll"Related to Pinnacle Systems Inc. CoInstaller - you can execute the USB2.0 interface check program (Usb2Check.exe file) to check if your system is a USB2.0 enabled system"
UUsbBoostTurboHddUsb.exe"LaCie USB Boost advanced driver for their range of USB hard disks which increases USB performance by up to 33%. Not required unless you use a supported external drive frequently"
XUSBcillinUSBcillin.exe"Added by the USBCILL-A TROJAN!"
XUSBConfigration2wmmndir.exe"Added by the AGOBOT-SV WORM!"
XUsbDsmss32.exe"Adware - detected by Kaspersky as the AGENT.CJ TROJAN!"
XUsbDsvhost32.exe"Added by the AGENT.IB TROJAN!"
XUsbdusb_d.exe"Added by the CIDRA-A TROJAN!"
XUsbD[path to trojan]"Added by the CIDRA-F TROJAN!"
UUSBDetectorUSBDetector.exeUSBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware
UUSBDetectorUDetect.exeUSB tray icon/detection for external Belkin (and maybe other makes) under Win98
XUSBDrivesmsfirewalI.exe"Added by the RBOT-ABP WORM!"
Xusbdrvservicetask.exe"Added by a variant of the SDBOT WORM!"
XUSBHWDRVgam.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWDRVmsdc.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWDRVsst4.exe"Added by a variant of the LOWZONE-I TROJAN!"
XUSBHWINFOmac.exe"Added by the LOWZONE-I TROJAN!"
XUSBHWINFO[path to trojan]"Added by the LOWZONE-I TROJAN!"
XUSBHWINFOsst6.exe"Added by the LOWZONE-I TROJAN!"
UUSBMMKBDusbmmkbd.exeUSB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version no longer pings a server when on-line wheras the older version did but did not transmit any user information
UUSBMonit.exeUSBMonit.exeMonitors USB ports for insertion of Sandisk USB flashdrives
Xusbnusbn.exe"Adult content dialer - detected by Kaspersky as the SMALL.AFA TROJAN!"
Xusbn[path to trojan]"Added by the HOGIL-C TROJAN!"
UUSBPhoneforSkypeUSBPhoneforSkype.exe"USBPhoneForSkype uses Skype to dial out from a generic USB phone"
YUSBPNPUSBPNP.exeSiPix digital camera Twain USB driver
NUSBTAusbtapnp.exe"System Tray access for the BeWAN Gazel 128 USB ISDN adapter"
?USBToolTipUSBTip.exe"Related to Pinnacle Systems Inc. What does it do and is it required?"
XVirusBurstVirusBurst.exe"VirusBurst rogue security software - not recommended
XVirusBursterVirusBurster.exe"VirusBursters rogue security software - not recommended
XVirusBurstersvirusbursters.exe"VirusBursters rogue security software - not recommended
XvirusbyevirusbyeUpdater.exe"VirusBye rogue security software - not recommended"
XWIN USB 2.0usbsystem.exeAdded by an unidentified WORM of TROJAN!
XWIN USB 2.0winusb.exe"Added by a variant of the RBOT WORM!"
XWin USB 2.0 USB DriverHPPrint.exe"Added by the SPYBOT.DNB WORM!"
XWIN USB SUPPORTgrxsrv.exe"Added by a variant of the RBOT WORM!"
XWin32 USB Driverwinxpinit.exe"Added by the SDBOT.AA TROJAN!"
XWin32 USB Drivermvsecn.exe"Added by the FORBOT-BK WORM!"
XWin32 Usb Driversvhosint32.exe"Added by the FORBOT-BE or FORBOT-J WORMS!"
XWin32 Usb Driverusb32.exe"Added by the SDBOT-OV WORM!"
XWin32 Usb DriverAvpG.exe"Added by the FORBOT-BX WORM!"
XWin32 USB Driverrundll.exe"Added by the FORBOT-BN WORM! Note - this is NOT the Win9x/Me system file of the same name as described here"
XWin32 USB2wins32.exe"Added by a variant of the RBOT WORM!"
XWin32 USB2 Driverwin32usb.exe"Added by the SPYBOT.DHV WORM!"
XWin32 USB2 Driversmsc.exe"Added by the SDBOT.FO WORM!"
XWin32 USB2 Driversvchosting.exe"Added by the FORBOT-J or SDBOT.HU WORM!"
XWin32 USB2 Driversys32.exe"Added by the WOOTBOT.X WORM!"
XWin32 USB2 Driversys32snd.exe"Added by the FORBOT-AN WORM!"
XWin32 USB2 Driverwind32.exe"Added by the FORBOT-AH WORM!"
XWin32 USB2 Driverwinupdate.exe"Added by the AGOBOT.YE WORM!"
XWin32 USB2 Driverupdatemgr.exe"Added by a variant of the FORBOT WORM!"
XWin32 USB2 Driverwinsnd32.exe"Added by a variant of the SDBOT WORM!"
XWin32 USB2 Drivermsn.exe"Added by the FORBOT-EX WORM!"
XWin32 USB2 Driversyscfg32.exe"Added by the FORBOT-R WORM!"
XWin32 USB2 Driveralgg.exe"Added by the TIBS.BF WORM!"
XWin32 USB2 Driverusb2.exe"Added by the FORBOT-Y WORM!"
XWin32 USB2 Driverwinusb32.exe"Added by the FORBOT-M WORM!"
XWin32 USB2.0 Driver386.exe"Added by the IRCBOT.D WORM!"
XWin32 USB2.0 Driverrundll16.exe"Added by the WOOTBOT.H WORM!"
XWin32 USB2.0 Driverw32usb2.exe"Added by the SPYBOT.DN WORM!"
XWin32 USB2.0 Driverservice.exe"Added by the SDBOT-QF WORM!"
XWin32 USB3 Driverwin32tool.exe"Added by a variant of the RBOT WORM!"
Xwin32usbdssrs.exe"Added by the RBOT-RA WORM!"
XWindows USB 2.0 Driverusbtskmgr.exe"Added by the RBOT-BKG WORM!"
XWindows USB 2.0 Driverusb2ctrl.exe"Added by the RBOT-BIW WORM!"
XWindows USB 2.0 Driverusbservice.exe"Added by the RBOT-BLF WORM!"
XWindows USB Control Driveriexplore.exe"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XWindows USB controlerwinusb.exe"Added by the RBOT-HR WORM!"
XWindows USB Driver SupportWindowsusb.exe"Added by a variant of the SPYBOT WORM!"
XWindows USB Hub Managerusbhub.exe"Added by the RBOT-BJX WORM!"
XWindows USB Monitorservupdate.exe"Added by the IRCBRUTE.AQ TROJAN!"
XWindows USB Printerexe.exe"Added by a variant of the RBOT WORM!"
XWindows USB Printerunqgod.exe"Added by the RBOT.BKC BACKDOOR!"
XWindows USB Printerxqteby.exe"Added by a variant of the SPYBOT WORM! See here"
XWindows USB Service666.exe"Added by the MYTOB.AR WORM!"
XWindows USB v3wsvc.exe"Added by a variant of the SDBOT WORM!"
XWindows USBDmsifirewall.exeAdded by an unidentified WORM or TROJAN!
Xwinusb.dllwinguard.exe"Added by the FORBOT-CN WORM!"
Xwinxpusbdwinxp64.exe"Added by a variant of the RBOT WORM!"
UWireLessKeyboardPS2USBKbdDrv.exe"Related to WireLess Keyboard Multimedia Combo Set by SANSUN Industries"
XWlan DrierWinusb2.exe"Added by the WOOTBOT.DC WORM!"
YWUSB11B.exeWUSB11B.exeLinksys WUSB11 WLAN USB adapter
YWUSB54GSInvokeSvc3.exeWireless-G USB Wireless Network Adapter related - would appear to be required
YWUSB54Gv2InvokeSvc3.exeWireless-G USB Wireless Network Adapter related - would appear to be required
YWUSB54Gv4WUSB54Gv4.exeWireless-G USB Wireless Network Adapter related - would appear to be required
?XWMSUSBAPIXWMSAPI.EXE"Part of the installation of a Xerox WorkCentre printer/scanner. Is it required?"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Copyright 2003-2013 iamnotageek &/or Martin Krohn.