Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77
78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99
If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Version"NVIDIA Compatible Windows Vista Display driverU"RUNDLL32.EXE NvCpl.dll
Version"NVIDIA Compatible Windows7 Display driverU"RUNDLL32.EXE NvCpl.dll
Version"NVIDIA Driver Helper ServiceU"RUNDLL32.EXE nvsvc.dll
Version"NVIDIA nView Control PanelNnwiz.exe
XAti Display Settingsatividx.exe"Added by the RBOT-GAS WORM!"
XATI Video Driver Controlatigfx.exe"Added by the RBOT-FWL WORM!"
XATI Video Driver Controlbtorrent.exe"Added by a variant of the IRCBOT TROJAN!"
XATI Video Driver Controls[path to worm]"Added by the SDBOT-DDS WORM!"
XATI VIDEO REGKEYati2vid.exe"Added by the SDBOT.UR WORM!"
Xavidrvdrvsc.exe"Detected by Kaspersky as the AGENT.PH TROJAN!"
Xcaseyvideocaseyvideo.exeMalware causing adult content popups
Xcaseyvideo[*] [* = digit]caseyvideo[*].exe [* = digit]Malware causing adult content popups
NCompaq Video CD Watcher??For Compaq PC's. MPEG viewer
XDirector Videobtnmgern.exe"Added by the MYTOB-KL WORM!"
XDirectX Video Driverdxterm5.exe"Added by the WILAB-A TROJAN!"
XDIVX Video PlayerDIVXPloyer.exeAdded by an unidentified WORM or TROJAN!
XDvVideo32dvvid32.exe"Added by the TINY.FD TROJAN!"
Xdxviddxvid.exe"Added by the DLUCA-Y TROJAN!"
UEvidence Cleanerecleaner.exe"Evidence Cleaner cleans up tracks left by your PC and Internet activities"
NEvidence Eliminatoree.exe"Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis"
XHvidHvid.exe"Added by the GEMA TROJAN!"
XInstallProvidernewsoftware2007install.exe"Part of WinAntiVirusPro 2007 and Privacy Protector rogue security software (and possibly others) - not recommended"
NIntervideo Win Cinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo Win Cinema ManagerWINCIN~1.EXE"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinCinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinCinema ManagerWINCIN~1.EXE"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinSchedulerWinScheduler.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NIntervideo WinSchedulerSchSvr.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NLogitech VidVid.exe"""Logitech Vid™ is the fast
YLogitechRegisterVideoApplicationsInstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software
ULogitechVideoRepairISStart.exe"Installed with Logitech's QuickSmart and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present
ULogitechVideoTrayLogiTray.exe"System Tray access to My Logitech Pictures
ULogitechVideo[inspector]InstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications
XMicrosoft Nvidia Videonvidia.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Update Managerscvideo.exe"Added by the SDBOT-CVP TROJAN!"
XMicrosoft Video Capture ControlsMSsrvs32.exe"Added by the SDBOT-AAK WORM!"
XMicrosoft Video Controlstskmsgr.exe"Added by a variant of the SPYBOT WORM!"
XMicrosoft Video Drivervideodrv.exe"Added by the SDBOT-AGP WORM!"
NmiroVIDEO Tray Toolmisitray.exe"Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed
UMSN Video EnhancedMSNVE.exe"""MSN Video Enhanced can play videos that have dramatically improved video quality and sound. It can play the latest high-quality videos at the best possible quality."" No longer appears to exist"
XMSVSyncvideosync.exe"Added by a variant of the SPYBOT WORM!"
Xnovsvida.exenovsvida.exe"GlobalAccess dialer"
Xnsdcmd vid processnsdcmdwin.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XNT LM Security Support ProviderWinNTLM.exe"Added by a variant of the SDBOT WORM!"
XNvid[8 random charachters]Unidentified adware
XNvid32Nvid32.exe"Added by the GEMA TROJAN!"
XNvidex32Nvidex32.exe"Added by the GEMA TROJAN!"
YNVIDIA ActiveArmorntrayfw.exe"System Tray access to the the NVIDIA ActiveArmor hardware-optimized firewall built into some older nForce 3 and 4 series motherboard chipsets"
XnVidia Application Driversnvidiav32.exe"Added by a variant of the IRCBOT BACKDOOR!"
XNvidia Control Daemonnksvc32.exeAdded by an unidentified WORM or TROJAN!
XNvidia Control Panelncsvc32.exe"Added by an unidentified VIRUS
XNVIDIA DisplayDisplayMonitor.exe"Added by the ABI.C WORM! Note - this is not a legitimate nVidia entry"
XnVidia Display Drivernvsvc64.exe"Added by the IRCBOT-YK WORM! Note - this is not related to any nVidia based graphics card"
XnVidia Display Drivers (x86)nvsys86.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XNVIDIA DriverMSPMSPSU.EXE"Added by the WOOTBOT.Y WORM!"
XnVidia DriversnVidiaDrvers.exe"Added by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card"
XNVidia Drivers[path to trojan]"Added by the RANCK-R TROJAN! Note - this is not related to any nVidia based motherboard or graphics card"
UNVIDIA Media Center Library"RunDLL32.exe NvMCTray.dllNvTaskbarInit"
XNVIDIA Media Center Librarywinlogon.exe"Added by the AUTORUN-AZK WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
NNVIDIA nForce APU1 UtilitiesNVATray.exe"nVidia's nForce Audio Processing Unit (APU)- ""provides 3D positional audio and DirectX 8.0 compatibility
UNVIDIA nTunenTune.exe"Older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
UNVIDIA nTunenTuneCmd.exe"Now part of NVIDIA System Tools under the ""Peformance"" tag. NVIDIA nTune is utilty for monitoring and modifying the settings (such as temperatures
XNvidia Startup Managerksvc32.exe"Added by the AGENT-IWD TROJAN!"
XnVidia System Driversnvsys32.exe"Added by an unidentified WORM or TROJAN! See here"
UNVIDIA System MonitorNVMonitor.exe"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
UNVidia System UtilityNVSystemUtility.exe"NVidia System Utility - older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
XNVIDIA Video driversvideo_32D.exe"Added by the AGOBOT.KV WORM!"
XNVIDIA Video driversvideo_32sD.exe"Added by the RBOT-BB WORM!"
XNvidia32nvidia32.exe"CoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!"
XNVidiaDrvnvfsvm.com"Added by the DELF-A BACKDOOR!"
XNviDiaGTlsass.exe"Added by the AUTORUN-DV WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
NNvidiaQuickTweak"rundll32.exe NvQtwk.dll NvTaskbarInit"
UNVIDIAŽ NVRAIDnvraidservice.exe"Part of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors"
Xnvidll32nvidll32.exe"Added by the RBOT-XK WORM!"
Xnvviddrv32[random filename]"Added by the RBOT-HT BACKDOOR!"
XNvVideoCenterNvVid.exe"Added by the HAXDOOR-DO TROJAN!"
XPaintingRoom evidence monitorpaintingroom.exePaintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
NPAL Evidence EliminatorCleaner.exe"PAL Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis"
?PathNvidiaTVpatchnvidiaTVout.exeRelated to a Gigabyte Nvidia based video card - typical file location is %ProgramFiles%\Gigabyte\Nvidia
XRealplayer VideoRealPlay.exe"Added by a variant of the RBOT WORM!"
Xrxres32ati2vid.exe"Added by the RBOT-FL WORM!"
Xryan1918servidevice.exe"Added by the RBOT-GVR WORM!"
NSpeedBitVideoAcceleratorVideoAccelerator.exe"""SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups"""
Xsqlpdroprovidd.exe"Added by the AGENT-LXF TROJAN!"
?SVIDC32MSVIDC32M.exe"??"
XsVideo2[path to dialler]"""Switch-D"" premium rate adult content dialler"
Xsysdxvidsysdxvid.exe"Added by the DLUCA-S TROJAN!"
XSystemTraVideo.EXE"Added by the LOVGATE.E WORM!"
XTelephony ProviderIexplore.exe"Added by the FORBOT-DF BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
Utgcmdprovidersbctgcmd.exe"Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
XUKVideo2ukvideo2.exeAdult content dialler
NvidVid.exe"""Logitech Vid™ is the fast
Xvid32cntlvid32cntl.Exe"Added by the CRYPTER.A TROJAN!"
NVidaliaVidalia.exe"Vidalia is a cross-platform GUI controller for the Tor anonymityn package. Using Vidalia
Xvidcntlvidcntl.Exe"Added by the CRYPTER.A TROJAN!"
XVidcompatVidcompat.exe"Added by the GEMA TROJAN!"
Xvidctrlvidctrl.exe"Delfin Promulgate adware variant"
XVideoexplored.exe"Added by the GAOBOT.RF WORM!"
XVideowinamp32.exe"Added by the AGOBOT-NG WORM!"
XVideo Camera Frogwcamfrog.exe"Added by a variant of the IRCBOT TROJAN! See here"
XVideo Card Driver (do not remove)tsasi.exe"Added by the SPYBOT-EF WORM!"
XVideo DisplayVDISP.EXE"Added by the AGOBOT-KE WORM!"
XVideo Driversvchost.exe"Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
XVideo DriverMsregdrv32.exe"Added by the SPIGOT BACKDOOR!"
XVideo Lan PlayerVideoLanPlayer.exe"Added by the RBOT-MY WORM!"
XVideo Managervideomgr.exe"Added by the PANDEM.C WORM!"
XVideo Multimedia Driverndrives32.exe"Added by the RBOT-DK WORM!"
XVideo Poeswinii.exe"Added by the AGOBOT-CP WORM!"
XVideo Proceswinaps.exe"Added by the AGOBOT.HD WORM!"
XVideo Processsysconf.exe"Added by the GAOBOT.GEN!POLY or GAOBOT.UM or GAOBOT.ADX WORMS!"
XVideo ProcessMS32x16.exe"Added by the RBOT.RH WORM!"
XVideo Processnetsvcs.exe"Added by the AGOBOT.LH WORM!"
XVideo ProcessMSlti64.exe"Added by the AGOBOT.UE WORM!"
XVideo Process[random filename]"Added by the RBOT-LM WORM!"
XVideo Processwinasp.exe"Added by the AGOBOT-IS WORM!"
XVideo Processmsn5.exe"Added by the AGOBOT-TW WORM!"
XVideo ProcessMStli32s.exe"Added by the RBOT-GAD WORM!"
XVideo Processwincert32.exe"Added by the AGOBOT.JT WORM!"
XVideo Processntsystm.exe"Added by the GAOBOT.ZX WORM!"
XVideo ProcessNivopsvc.exe"Added by the AGOBOT-GT WORM!"
XVideo Processwincrt32.exe"Added by the AGOBOT-GR WORM!"
XVideo ProcessAvg123.exe"Added by the AGOBOT-MS WORM!"
XVideo ProcessNavapsvcc.exe"Added by the SPYBOT-CW WORM!"
XVideo Processormsconfsys88.exe"Added by the AGOBOT-QG WORM!"
XVideo Proeswinaii.exe"Added by the AGOBOT-FH WORM!"
XVideo Servicesexplore.exe"Added by the GAOBOT.GL WORM!"
XVideo Servicesvideol_32.exe"Added by the AGOBOT-DM WORM!"
XVideo Servicessys32.exe"Added by the AGOBOT.PS WORM!"
XVideocntlVideocntl.exe"Added by a variant of the GEMA.D TROJAN!"
XVideoDriver[filename]"Added by the GSPOT20.A TROJAN!"
XVideoDrivervideodrv.exe"Added by the MIMAIL.A WORM!"
XVideoDrivergspotbot.exe"Added by the SPIGOT.C TROJAN!"
XVideoDriverHookvmdriver.exe"Added by the BCKDR-PSS BACKDOOR!"
XVideool32VIDEOL32.EXE"Added by the AGOBOT.EC WORM!"
Xvideopcivideopci.exe"Added by the AGENT-W TROJAN!"
Xvideoporno.exevideoporno.exePremium rate adult content dialer
YVideoraVideora.exe"Video Holding personal video downloading program"
XVidiaDrivers[path to trojan]"Added by the RANKY.U TROJAN!"
XvidmonVIDMON.EXE"Delfin Media Viewer adware related"
XVido Pesvmwa32.exe"Added by the AGOBOT-GU WORM!"
NVidSvrvidsvr.exeMS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
XVividGalutVividGalut.exeAdult content related web downloader
XWin32 Configurationvideosd32.exe"Added by the SDBOT.TT WORM!"
XWin32 NVIDIA DriverMSPMSPSU.EXE"Added by a variant of the WOOTBOT.Y WORM!"
XWindows Event Providerwposvc.exe"Added by a variant of the IRCBOT TROJAN! See here"
XWindows Servicevideo.exeAdded by an unidentified TROJAN!
XWindows Servicevideo2.exeAdded by the DOWNLOADER.SMALL.MY TROJAN!
XWindows videovide_32.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XWindows Video Acquisition (WVA)wvsvc.exe"Added by the AGOBOT.YM WORM!"
XWindows Video Componentwvcsvc.exe"Added by a variant of the IRCBOT TROJAN!"
XWindows Video Driversvideons32.exe"Added by the GAOBOT.AZT WORM!"
XWindows Video DriversVIDEONS3.EXE"Added by the AGOBOT-KZ BACKDOOR!"
XWindows Video Inputviwsvc.exe"Added by the SLENFBOT.GS WORM!"
XWinsystemFreevideo5.EXE"Added by the AGENT.FZS WORM!"
XWireless Provider Serverwpsvr.exe"Added by the FORBOT-AD WORM!"
Xxxxvideoxxxvideo.exe"AccessPlugin premium rate adult content dialler"
X[12 random characters]bootvid4.exe"IeDriver adware variant"
X[12 random characters]bootvid2.exe"IeDriver adware variant"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Copyright 2003-2013 iamnotageek &/or Martin Krohn.