Dave's Tech World

Windows Tasks and definitions

 

Task List
Name

PROGRAM &
MANUFACTURER

WHAT IT IS
AND WHAT YOU CAN DO

     

3cdminic

3CDMINIC.exe

(3Com)

3Com DMI Agent (DMI = Desktop Management Interface).  This task is installed when you install the full driver suite for many 3Com network cards – it runs as a background task on Windows 9x/ME and as a service on Windows NT4/2000/XP/2003.  This version of the 3Com DMI Agent allows any DMI management browser to access information about your 3Com network card such as the driver version, size and  statistics on number of packets sent, CRC receive errors, and much more.  DMI also enables your network card to be remotely configured for features such as Remote Wake Up, OS‑absent alerts, and the 3Com Managed PC Boot Agent.

Recommendation :
The main purpose of this task/service is to provide statistical and troubleshooting information to the Network Administrator in large organisations, particularly at times when there are network performance issues or application issues on parts of the network or on specific PCs .  Ironically, however, our recommendation is that if you are using Windows NT4/2000/XP/2003 and you experience unexplained random illegal operations, access violation errors, or Dr Watson crashes, then this is one of the first services to set to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter  when troubleshooting the problems !   While we have yet to come across error messages or data which emphatically points to  3CDMINIC  as the culprit, our empirical evidence seems to show that the crashes lessen or disappear altogether if this service is disabled.  Other than the above, if you are a home user with 3Com network cards, or you operate a small company network, you most probably will have no need for this task/agent, in which case you can either de‑install the  3Com DMI Agent  in the  “Add/Remove Programs”  icon in the Control Panel, or you can decide to initially simply disable the task on the  Startups  tab of The Ultimate Troubleshooter in Windows 9x/ME, or set the startup mode of this service to  Disabled  on the  Services  tab of The Ultimate Troubleshooter in Windows NT4/2000/XP/2003  (look for the  3Com DMI Agent  service).  In all cases, if you are simply an end-user, you should consult your Network Administrator before  permanently  de-installing or disabling this task/service.

3cmlnkw 3CMLnkW.exe

(US Robotics / now 3Com)
Essential background task for some US Robotics 56K WinModem software-based modems.

Recommendation :
Leave alone.

3dfxman

3dfxMan.exe

(3dfx Interactive Inc)

3dfx Tools Task Manager.  System Tray task installed by the drivers for 3dfx graphics cards, or Voodoo graphics cards from the Voodoo 3 onward.  It enables you to manipulate and configure the various features of your 3dfx/Voodoo graphics cards straight from the System Tray.

Recommendation :  
Down to end-user preference.  Unless you are a gamer, we recommend you disable it with  The Ultimate Troubleshooter as you will rarely, if ever, make use of it and yet it adds to the clutter of the System Tray.

 

 A

Aaar

Aaar.exe

See   IWAR.
 

Aasd

Aasd.exe
 

See   IWAR.

Absr Absr.exe

(?)
Auto Browser component of the Backdoor.Autoupder virus.

Recommendation :
Immediately update your antivirus software and then run a full virus scan of your PC.

Acao

Acao.exe
 

See   IWAR.

Acbtnmgr_x63

Acbtnmgr_x73

Acbtnmgr_x83

AcBtnMgr_X63.exe

AcBtnMgr_X73.exe

AcBtnMgr_X83.exe

(Jetsoft for Lexmark)

Lexmark X63/X73/X83 Button Manager, also called  “Lexmark Scan & Copy Control Program”.  System Tray icon for the Lexmark X63/X73/X83 multifunction printer/scanner/copier.  Through that icon you can access from your PC all the functions available on the control pad of your Lexmark X63/X73/X83 :  scan, scan to e‑mail, scan and fax, scan to OCR, copy, scanning resolution settings. 

Recommendation :  
Down to end-user preference.  This program is not strictly necessary for the proper operation of your Lexmark X63/X73/X83 as you can use most of the above features via the printer’s control panel.  However you need this System Tray program to scan to e-mail, fax, or OCR, and to change the machine’s defaults, such as the default scanning resolution, the email address to scan and e-mail to, etc...  Should you decide to disable this task on the  Startups  tab of  The Ultimate Troubleshooter, you can start it at any time via 
“Start \ Programs \ Lexmark X63/X73/X83 \ Lexmark Scan & Copy Control Program”.

Acbtnmgr_x84-x85

AcBtnMgr_X84-X85.exe

(Jetsoft for Lexmark)

Lexmark X84/X85 Button Manager, also called  “Lexmark Scan & Copy Control Program”.  System Tray icon for the Lexmark X84/X85 multifunction printer/scanner/copier.  Through that icon you can access from your PC all the functions available on the control pad of your Lexmark X84/X85 :  scan, scan to e‑mail, scan and fax, scan to OCR, copy, scanning resolution settings. 

Recommendation :
Down to end-user preference.  This program is not strictly necessary for the proper operation of your Lexmark X84/X85 as you can use most of the above features via the printer’s control panel.  However you need this System Tray program to scan to e-mail, fax, or OCR, and to change the machine’s defaults, such as the default scanning resolution, the email address to scan and e-mail to, etc…  Should you decide to disable this task on the  Startups  tab of  The Ultimate Troubleshooter, you can start it at any time via  “Start \ Programs \ Lexmark X84/X85 \ Lexmark Scan & Copy Control Program”.

Acmonitor_x63

Acmonitor_x73

Acmonitor_x83

ACMonitor_X63.exe

ACMonitor_x73.exe

ACMonitor_x83.exe

(Jetsoft for Lexmark)

Lexmark X63/X73/X83 Button Monitor.  Background task installed by the drivers for the Lexmark X73 or X83 multifunction printer/scanner/copier.  This background task monitors the X63/X73/X83 for activity and interacts with  ACBTNMGR_X73/83  above for operations involving the PC (e.g. scan to e-mail).  Also, for large copy jobs it relays the current copy count back to  ACBTNMGR_X63/X73/X83  so you can view it on your PC.

Recommendation :  
In the main this task is necessary, so leave it alone.

Acmonitor_x84-x85

ACMonitor_X84-X85.exe

(Jetsoft for Lexmark)

Lexmark X84/X85 Button Monitor.  Background task installed by the drivers for the Lexmark X84 or X85 multifunction printer/scanner/copier.  This background task monitors the X84/X85 for activity and interacts with  ACBTNMGR_X84/85  above for operations involving the PC (e.g. scan to e-mail).  Also, for large copy jobs it relays the current copy count back to  ACBTNMGR_X84-X85  so you can view it on your PC.

Recommendation :  
In the main this task is necessary, so leave it alone.

Acrord32 AcroRd32.exe

(Adobe)
The Adobe Acrobat Reader program itself.  Adobe Acrobat Reader will open automatically if you click on a PDF file in Windows Explorer, or if you start it via "Start \ Programs".  Adobe Acrobat Reader also gets started in integrated manner if you click on a web page link to a PDF file – when you do that your browser starts Adobe Acrobat Reader in "integrated manner" (plugin) and presents you the PDF document as if it were a web page.  Once started in this manner, ACRORD32 does not terminate, even when you close your browser, and it continues to run transparently in the background so that it can open faster the next time you click on a PDF web link – it will only disappear from your Task List if you do an "End Task" on it, or if you reboot your PC.

Recommendation :
Leave alone unless you are troubleshooting a problem.  If you are, and you do not have Adobe Acrobat Reader visibly opened, then do an "End Task" on ACRORD32.
Acrotray AcroTray.exe

(Adobe)
Adobe Acrobat Assistant.  This background task is installed when you install the full version of Adobe Acrobat.  It comes into action when you create PDF files from non Adobe applications through the "Watched Folders" feature of Acrobat Distiller.

Recommendation : 
Usually harmless.  Only disable with  The Ultimate Troubleshooter  if you specifically experience problems with it.

Acsd

AolAcsDaemon1

Aolacsd

ACSd.exe

AOLacsd.exe

(AOL)

AOL Connectivity Service.  Background task introduced with version 9.0 of AOL and which supposedly reconnects you to AOL if you lose your connection while online.  It runs as a task in Win9x/ME, and as a service under WinNT4/2000/XP/2003.

Recommendation :  
At the time of writing, 15‑Dec‑2003, this task is an annoying feature of the latest AOL.  For a start the concept itself beggars belief since we cannot see how the task can check for loss of connection without constant pinging of a particular Internet address (be ready for ACSD firewall alerts!) – in short unnecessary traffic on your connection; the very sort of behaviour normally attributed to spyware !   But that is the least of the problems :  this task is responsible for boot-up errors on some PCs, constant autodials on boot-up of some PCs, it is incompatible with some programs on others (you have to terminate ACSD to use the programs without problems), on other PCs it uses inconsiderable amounts of memory for what its role is, on some Win2000/XP PCs we have found it running away with CPU resources and incredibly slow PCs as a result, and, worse, it stays around when you have deliberately closed your Internet connection.  This, in our opinion, is  TerribleWare !   Unfortunately, at the time of writing we do not have a solution to the problem :  even if you disable this task on the  Startups  tab of  The Ultimate Troubleshooter  on Win9x/ME, or set the service to manual on WinNT4/2000/XP/2003, opening AOL starts the task anyway.  Out of frustrations some users have reverted back to AOL 8.0.  The advice for those who stay with version 9.0 is that it is unthinkable that AOL will not eventually address the problem, so keep downloading those AOL updates whenever you are prompted by the software. 
Update (16-Jul-2004) :
   from our records, sometime in March 2004 AOL finally fixed the worst problems with this task in AOL 9.0 Optimized and in the process gave it a new name too – AOLACSD.EXE.

Actionagent

ActionAgent.exe

(Dell)

Part of Dell’s OpenManage Client Instrumentation software which allows the user or system administrator to view, and sometimes set, various statistics, characteristics, configuration, and performance data of specific hardware components in your Dell PC.  This task/service is used to  set and reset  configuration parameters of a particular hardware item  (e.g. your network card).

Recommendation :
Such software is not critical to the good running of your PC, so you may decide to disable it on the  Startups  tab of  The Ultimate Troubleshooter  in Windows 9x/ME,  or set the startup mode of this service to  Disabled  on the  Services  tab of The Ultimate Troubleshooter in Windows NT4/2000/XP/2003.  Note :  if you are troubleshooting problems with your PC or server, then we strongly suggest that if you fail to home in on the cause of your problems, you should also try disabling this task/service during your investigations.

Activation Activation.exe

(Microsoft)
Microsoft’s Activation module for their Windows XP and Microsoft Office XP/2002 products.

Recommendation :
Leave alone. We are not yet sure as to how exactly ACTIVATION.EXE works;  however, given the problems one can run into with inactivated Windows XP / Office XP / Office 2002 products at the best of times, we do not recommend doing anything with this background task.

Ad-watch

Ad-Watch.exe

(Lavasoft Sweden)

There is no better description of Ad‑Watch (an option available only with the paid version of Ad-Aware) than Lavasoft’s own description :   Ad‑Watch is a real time monitor add‑on included in the Ad‑Aware Plus  and  Ad‑Aware Professional  software programs.  It runs silently in the background, waiting for adware, spyware, and other parasites that may try to install themselves or modify your system.  While Ad‑Aware detects and cleans your system from known malware and advertising parasites, Ad‑Watch goes even further by catching these programs before they even integrate in your system.  If malware/parasites are detected, Ad‑Watch pops up, unloads the particular module and launches Ad‑Aware.  You can change the action taken by Ad‑Watch in the Preferences menu.”.

Recommendation :  
Down to end-user preference.  In our view, however, Ad-Watch should only be used by advanced users as they alone will be able to work out at all times which programs should be allowed to modify the Windows Registry, and which ones should not.  All other users, through insufficient technical knowledge of such issues and through insufficient experience in understanding all the consequences of a particular action, run the risk of preventing software that they actually need, from running properly or at all (even to the point of the much needed software running into intractable installation problems).  Should you want to, you can disable Ad‑Watch by going into Ad‑Aware, clicking  Settings,  then  Ad‑Watch,  and then unchecking 
Load Ad‑Watch on Windows startup.

Addrbook

Addrbook.exe

(Novell)

Novell GroupWise Address Book.  This task appears when you first use the GroupWise Address Book and remains after you have closed the Address Book – the intention here is that the Address Book will open up quicker the next time you call it up.

Recommendation :  
If you have closed the GroupWise Address Book, and you are in the process of troubleshooting a problem, then terminate this task.  Otherwise leave it alone as it does speed up the opening of the Address Book the second time you use it.

Adgjdet ADGJDET.exe

(Creative Labs)
Jet Detection background task.  What a description – for a moment we got excited with thoughts of advanced flight simulation !  Not to be, though.  This task, installed with the drivers for Creative’s SoundBlaster Live and Audigy soundcards, detects when something changes on one of the soundcard’s ports.  One of the applications is that if it detects that you have plugged headphones into the Live! drive, it then shuts off the rear speakers output jacks.

Recommendation :
Clever features.  We have not had any negative reports about this task yet, so you might as well leave it running.

Admillikeep

AdmilliKeep.exe

(???)

Trojan virus.  This virus first appeared on the scene in late December 2004 and at the time of writing, 17‑Jan‑2005, most antivirus programs do not pick it up as a problem yet.  We do not yet know how it gets picked up but, typically, the users who have been infected with it have consistently told us they  clicked on something they shouldn’t have !  This is a very strange pest as it both makes itself very easy to uninstall but impossibly difficult to stop !!   For example :  if you try to stop this program,  ADMILLIKEEP,  then its  “brother”,  ADMILLISERV,  restarts it, and vice versa.  Similarly, if you try to remove these from the  Startups  tab of  The Ultimate Troubleshooter,  they get added back in immediately !

Recommendation :  
Get rid of this immediately :

1)   Restart your PC into Safe Mode by pressing  F8  continually after turning your PC ON till you get a menu where  “Safe Mode”  is one of the options  (if you are unable to start your PC into Safe Mode, then try the following in Normal Mode).

2)   Go to  “Add/Remove Programs”  in the Control Panel and uninstall  Admilli Service  if you find it in there.

3)   Next, start  The Ultimate Troubleshooter  and go to the  Startups  tab and for each instance of either  ADMILLIKEEP  or  ADMILLISERV, if they still exist, do the following :  right-click on it and choose  Delete from the hard disk the file that this Startup points to;  next, right-click on this entry again and this time choose  Delete this Startup entry.

5)   Click the big green  APPLY  button to make your changes stick.

6)   Reboot your PC into Normal Mode.

7)   Download  Ad-Aware  or  SpyBot  from our  Downloads  library and run it to eliminate all possible adware and spyware.

8)   Make sure you have an up-to-date reputable antivirus program and run a full virus scan on your PC.
 

Admilliserv

AdmilliServ.exe

(???)

Trojan virus.  This virus first appeared on the scene in late December 2004 and at the time of writing, 17‑Jan‑2005, most antivirus programs do not pick it up as a problem yet.  We do not yet know how it gets picked up but, typically, the users who have been infected with it have consistently told us they  clicked on something they shouldn’t have !   This is a very strange pest as it both makes itself very easy to uninstall but impossibly difficult to stop !!   For example :  if you try to stop this program,  ADMILLISERV,  then its  “brother”,  ADMILLIKEEP,  restarts it, and vice versa.  Similarly, if you try to remove these from the  Startups  tab of  The Ultimate Troubleshooter,  they get added back in immediately !

Recommendation :  
Get rid of this immediately :

1)   Restart your PC into Safe Mode by pressing  F8  continually after turning your PC ON till you get a menu where  “Safe Mode”  is one of the options  (if you are unable to start your PC into Safe Mode, then try the following in Normal Mode).

2)   Go to  “Add/Remove Programs”  in the Control Panel and uninstall  Admilli Service  if you find it in there.

3)   Next, start  The Ultimate Troubleshooter  and go to the  Startups  tab and for each instance of either  ADMILLISERV  or  ADMILLIKEEP, if they still exist, do the following :  right-click on it and choose  Delete from the hard disk the file that this Startup points to;  next, right-click on this entry again and this time choose  Delete this Startup entry.

5)   Click the big green  APPLY  button to make your changes stick.

6)   Reboot your PC into Normal Mode.

7)   Download  Ad-Aware  or  SpyBot  from our  Downloads  library and run it to eliminate all possible adware and spyware.

8)   Make sure you have an up-to-date reputable antivirus program and run a full virus scan on your PC.
 

Adobe Gamma Loader Adobe Gamma Loader.exe

(Adobe)
Adobe Gamma installs with Adobe Photoshop 5.0 or later.  You use it to colour calibrate your monitor at system level and create ICC profiles that describe how your monitor reproduces colour.  Any application that uses ICC profiles can use these profiles.  Colour calibration of one’s monitor is used primarily in the printing industry (magazine designers, etc..) to ensure that colours are represented in the same way by all of the designer’s equipment :  monitor, scanner, colour printer.  Adobe Gamma Loader enables you to colour calibrate your monitor and then saves that calibration.  When you next boot up it automatically loads the calibration settings for you.

Recommendation :
Unless you are designing jobs to print and you know about colour calibration, this feature will be of little use to you, so you might as well disable it with  The Ultimate Troubleshooter.  If you do know about calibration and intend to use it, make sure you do not have two calibration utilities running at the same time (some monitors come with their own calibration utilities) as they will clash with each other.

Adservice

ADService.exe

(Iomega)

Active Disk Service.  See  ADUSERMON  below.

Recommendation :
Disable on the  Startups  tab of  The Ultimate Troubleshooter  in Windows 95/98/ME,  or set the startup mode of this service to  Disabled  on the  Services  tab of The Ultimate Troubleshooter.

Adusermon ADUserMon.exe

(Iomega)
Active Disk User Monitor.  Background task installed when you install the full set of drivers for your Iomega Zip drive.  This task supports the Iomega Active Disk feature which allows developers to produce Zip disk based software which will run, fully self-contained, immediately on insertion of the software Zip disk into the Active Disk aware Zip drive.

Recommendation :
In December 2002, to all intents and purposes Iomega’s Active Disk is a dead technology – the proliferation of CD-ROM drives on almost every PC has made sure of that.  Active Disk is therefore a facility you can safely get rid of by disabling ADUSERMON with  The Ultimate Troubleshooter.

Advchk

Advchk.exe

(Symantec)

Advanced Tools Integrity Check.  This is purely a startup task which is included with Norton SystemWorks or Norton AntiVirus 2003 Professional.  This task checks, when your PC starts up, whether the Windows Registry or some of the crucial components of your Norton security software may have been compromised by a virus.  If the components all check OK, the PC continues, otherwise a warning is issued to the end-user.  Either way, the task terminates once it has done its job of checking the integrity of components.

Recommendation : 
Given the function of this startup task we classify it as essential as it ensures that you do not use security products which may have been stealthily compromised by a virus or Trojan task – Leave it alone therefore.  If, however, you experience startup problems with your PC, then you should disable this startup on the  Startups  tab of  The Ultimate Troubleshooter  as part of your troubleshooting experiments.

Aerr

Aerr.exe

See   IWAR.
 

Agentsvr AgentSvr.exe

(Microsoft)
Microsoft Agent Server.  Microsoft Agent Server is an ActiveX control which software developers can use to add character animation to their software or web pages, text to speech facilities, or end-user voice commands capability.  In layman terms it is Microsoft software which other programmers can use to talk to you, display a talking animated character, or listen to voice commands from you.  The most famous of those animated characters is that "paper clip" Microsoft Office assistant which most users turn off.

Recommendation :
If it is running in your Task List then it is because some software you are using requires it.  Leave alone.
Agsatellite AGSatellite

(AudioGalaxy)
This program is a Napster clone.  Just like Napster, and most other Napster clones, you can minimize the program to the System Tray.  Many users, however, do not realise that when they think they have closed the program, the program is actually still running in the background and showing as an icon in the System Tray.

Recommendation :
Unless you have queued some downloads, right-click on the icon and close the program as, otherwise, some of your PC resources are being wasted unnecessarily, and a significant portion of your Internet bandwidth could be taken up through someone downloading MP3s from your PC in the background !
Agtexe16 Agtexe16.exe

(Atomica)
Essentially this task provides the same  Alt+Left-click  feature as AGTSERV below, but for older 16-bit Windows programs, of which there are still quite a few out there (and some are a mixture of both 32-bit and 16-bit code).  This task is installed by the Atomica software on Windows 9x/ME systems only. If 32-bit and 16-bit are technical terms that mean nothing to you, simply continue on to the "Recommendation" section below.

Recommendation :
You could try disabling it with  The Ultimate Troubleshooter  – if you find that you never have an instance when  Alt+Left-click  does not work, then you do not have 16-bit or 32-bit/16-bit programs where you need the Alt+Left-click facility and you can leave AGTEXE16 disabled, otherwise simply re-enable it.
Agtserv AgtServ.exe

(Atomica)
Background task for the Atomica online reference software (Atomica Personal, Atomica Pro, Atomica Slingshot).  Atomica is an extremely useful product which enables you to position your mouse on a word on the screen so that with an Alt+Left-click you can get an instant popup window with dictionary + encyclopaedia + reference articles information on that word – the Internet at its best !  However, you have to be permanently connected to the Internet to get the best out of this product.  AGTSERV is the background task which handles the  Alt+Left-click  and goes and fetches the appropriate information.

Recommendation :
If you use Atomica a lot, keep this task – we have not heard of any problems with it.  If you disable the task with  The Ultimate Troubleshooter,  you have to go and actually type into the Atomica AnswerBar the word that you want information on.
Ahqinit AHQInit.exe

(Creative Labs)
We are not yet 100% sure but it seems to be the Windows 2000/XP equivalent of AHQTB below.

Ahqtb

AHQtb.exe

(Creative Labs)

Audio HeadQuarters for SoundBlaster Live! Sound cards !!   In layman terms :  System Tray application installed with the drivers for Creative Labs’ SoundBlaster Live! Sound cards and which enables you to bring up that utility from the System Tray.

Recommendation :
There are many reported problems with AHQTB, from startup error to crashes under Windows XP.  If you absolutely want to start this application from the System Tray, then make sure you have the very latest updates and patches for your SoundBlaster Live! Software !   Otherwise we recommend strongly that you disable this item on the  Startups  tab of  The Ultimate Troubleshooter  since you can run it from  “Start \ Programs”.

Ahqtbu

AHQTbU.exe

(Creative Labs)

Audio Headquarters for SoundBlaster Live! Sound cards !!   In layman terms :  System Tray application installed with the drivers for Creative Labs’ SoundBlaster Live! Sound cards and which enables you to bring up that utility from the System Tray so you can set/unset various settings on your soundcard.

Recommendation :
There are many reported problems with AHQTB and AHQTBU, from startup error to crashes under Windows XP.  If you absolutely want to start this application from the System Tray, then make sure you have the very latest updates and patches for your SoundBlaster Live! Software !   Otherwise we recommend strongly that you disable this item on the  Startups  tab of The Ultimate Troubleshooter  since you can run it from  “Start \ Programs”.

Aim

AIM.exe

(AOL)

AOL Instant Messenger.  This is AOL’s own Internet chatting software, equivalent to MSN Messenger, Yahoo Messenger, ICQ, and many others.  You either have it currently open or minimized to the System Tray as an icon.

Recommendation :
As a startup item it is down to end‑user preference.  If you do not want AOL Instant Messenger started automatically, or if you do not use it at all and only have it there because it was installed by default when you installed AOL, then open AOL Instant Messenger and configure the preferences so that it does not start with Windows.

Alarmapp

AlarmApp.exe

(Palm)

System Tray background task which ensures that you get on your PC/laptop the alarms that you have either set in the Palm Desktop software, or that you set on your Palm organizer and then transferred to your PC through a hotsync.

Recommendation :
Essential if you want your Palm alarms notifying you when working on your PC.  You can enable/disable this option in the  “Tools \ Options \ Alarms”   tab in the Palm Desktop software, or through disabling this task on the  Startups  tab of The Ultimate Troubleshooter.  This task has a history of problems (crashes, strange error messages, and worst, non-notification of alarms!!), particularly under Windows XP.  Most of those problems, however, were resolved in version 4.1 or later of the Palm Desktop software.  If you have version 4.1 or later of the Palm Desktop software and are experiencing problems with this task, do a hotsync to ensure both your PC and your Palm are in sync, then fully de-install the Palm software through the  “Add/Remove Programs”  icon in the Control Panel, delete this task from the  Startups  tab of The Ultimate Troubleshooter (if it is still there), reboot your PC, re-install the latest version of the Palm Desktop software, re-hotsync with your Palm, and then set the options in the  “Tools \ Options \ Alarm”  tab in the Palm Desktop software to re-enable this task.  At the time of writing, 28‑Mar‑2004, this usually solves most problems associated with this task.

Alertsvc AlertSvc.exe

(Symantec)
Norton AntiVirus Alert Service present in older versions (NAV 5.0, NAV 2000, NAV 2001) of Norton AntiVirus for Windows NT4/2000.

Recommendation :
Essential for the full functioning of your Norton AntiVirus product.  If you experience the not uncommon problem of ALERTSVC consuming excessive CPU time, make sure you do a manual LiveUpdate to pick up the latest program updates.
Alg ALG.exe

(Microsoft)
Application Layer Gateway service found only on Windows XP.  ALG is an integral part of ICS (Internet Connection Sharing) and ICF (Internet Connection Firewall) in Windows XP.  Microsoft’s description :  "Provides support for 3rd Party protocol plug-ins for ICS and ICF".

Recommendation :
If you use Windows XP’s Internet Connection Firewall, you must have ALG running.  If you use a 3rd Party firewall, set ALG to manual in "Control Panel \ Administrative Tools \ Services".
Alogserv ALogServ.exe

(McAfee)
Background task installed with McAfee VirusScan and whose purpose is to log all McAfee background virus scanning activities. As of February 2002 there is nothing positive we can say about this program !  Since its introduction with VirusScan 5.x, this program has caused end-users endless problems and McAfee has had to issue fixes and help documents for it.  It has been responsible for gobbling up all resources, with the result being a PC which slows down to a crawl and eventually locks up completely.  In other instances ALOGSERV appears many times in the Task List.  This is silly :  antivirus protection is necessary these days, it is not optional, and the least one would expect from an antivirus software publisher is higher standards of testing to ensure that its antivirus software does not behave..... like a virus !!!

Recommendation :
If you have McAfee VirusScan, visit their website to ensure you have the very latest software updates (as opposed to virus updates).  If you are experiencing performance related problems, lockups, or other problems which you cannot explain, then disable ALOGSERV with  The Ultimate Troubleshooter  – VirusScan will still work fine without it in the background.  Note, however, that if you start VirusScan manually through "Start \ Programs", VirusScan will in turn start ALOGSERV.  Thus, once you have stopped using VirusScan and exited out of it, remember to do an End Task on ALOGSERV.
Alunotify ALUNotify.exe

(Symantec)
Automatic LiveUpdate Notification for Symantec’s Norton AntiVirus.  Through the LiveUpdate options settings you can configure Norton AntiVirus to automatically update itself over the Internet, either silently in the background (the best method if you have a broadband connection), or through notifying you whenever there are updates available for you to manually download (the recommended setting if you have a dial-up modem or ISDN connection).  You will only see ALUNOTIFY in your Task List if you have configured Norton AntiVirus to "notify" you.

Recommendation :
Essential for the proper protection of your PC against viruses – leave alone. If you need to "tinker" with this task, do so via the LiveUpdate option in Norton AntiVirus.

Amra

Amra.exe

See   IWAR.
 

Annclist

Annclist.exe

(Microsoft)

Microsoft Announcement Listener task for Microsoft WebTV.   Microsoft WebTV was first introduced in Windows 98, and was also part of Windows Millennium.   At the time of writing however, 14‑Dec‑2003, Microsoft WebTV is an obsolete technology that has been superseded by Windows Media Player and Windows Media Streaming.

Recommendation :  
Unless you use Microsoft WebTV, disable or delete this task with  The Ultimate Troubleshooter.

AOL Companion Companion.exe

(AOL)
See COMPANION in these pages.

Aoldial

AOLDial.exe

(AOL)

Dialer introduced with AOL 9.0 Optimized and which enables you to connect to the Internet via AOL without first having to start your main AOL software and connect to your email.

Recommendation :  
The installation of AOL 9.0 Optimized automatically inserts the dialer as a startup item.  The problem with this is that not everyone necessarily wants to connect to the Internet immediately after turning the PC ON, and on PCs which use modem connections rather than broadband this task can not only add significantly to the boot-up time of the PC, but, worse, on some PCs, because of timing issues, it will give errors either on boot-up or on shutdown, or both.  On such PCs our recommendation is to disable this task on the  Startups  tab of  The Ultimate Troubleshooter  and simply let your browser connect you when you decide to go onto the Internet.

Aolfix AOLFix.exe

( ???)
You have the QHOSTS trojan virus.

Aolsp scheduler

AOLSP Scheduler.exe

(AOL)

AOL Spyware Protection task introduced with AOL 9.0 Optimized and which is AOL’s contribution to the anti‑spyware and anti‑adware movement.  Once a week this task scans the PC’s hard disk(s) for known spyware and adware.  You can modify the frequency of the scans within AOL 9.0 Optimized, and you can also turn it off altogether.

Recommendation :   
At the time of writing, 18-Jul-2004, we have some reservations about AOL Spyware Protection and our main reservation is that it is made by Aluria Software whose own anti-spyware offerings think, in some versions, at the time of writing, that our product, The Ultimate Troubleshooter,  is spyware and as a result prevent it from opening !!    Basically, unlike with antivirus software, we believe that most anti‑spyware programs are not yet safe enough to be run in the background and unattended.  Our reasons for this are that in this day and age of Internet enabled software, there are hundreds of  safe programs  out there which communicate over the Internet  legitimately  and which are not spyware.  Yet, from our experience and our research there are few anti‑spyware programs which are rigorous enough in their research to have a very high degree of accuracy in only ever targeting  known spyware programs and tasks  and  never  making guesses.  SpyBot is one such program in our opinion, but there are others.  Unfortunately, at the time of writing, Aluria Software’s anti‑spyware products are not products we would trust to run in the background and unattended.  The last thing you want is to find that a program that is important to you, and which is actually safe, has been incorrectly identified as spyware, and disabled, and you have no idea that that is what happened because it ran in the background and you did not check the results.  Our recommendation, therefore, is that you disable automatic spyware protection scanning within AOL, disable this task on the  Startups  tab of  The Ultimate Troubleshooter,  and simply manually run the  AOL Spyware Protection  as necessary.  How often you should do this depends on how often you download and install from the Internet, how often you open emails from unknown sources, and whether you use file sharing programs such as KaZaA.  Note :  On 20‑Jul‑2004, the Director of Operations of Aluria Software swiftly acknowledged to us that Aluria Software was indeed incorrectly identifying some components of The Ultimate Troubleshooter as adware/spyware, and indicated that the problem would be resolved in updates later in the same week.  He also stated  “False positives do occur with the best programs out there including antivirus programs, it is not a case of guesswork but unfortunate similarity”.  Aluria’s Director of Operations then named a few products which have recently had the same problem.  At this point, from experience, we disagree.  After a careful initial selection, years ago we used to use Dr Solomon AntiVirus both in-house and at our corporate customers, and never experienced a single  “false positive”  in years of usage.  Then Dr Solomon got bought out and, alas, we experienced such nightmares with the product within a month or two of it having been bought out, that we had to move to a different product.  This time, again after a careful and lengthy evaluation of all leading products on the market, we homed in on Norton AntiVirus.  Well, in the 5+ years since we have used it, in‑house and at our corporate customers, we have not once experienced a single  “False Positive”.  Not once !   Sure, we have had the occasional problems with the product, rectified with updates, but not once have we had Norton AntiVirus identify a legitimate program as a virus or spyware/adware.  If Dr Solomon can do it, if Norton AntiVirus can do it, then our view is that that has to be the yardstick for this particular industry.

Aoltpspd

Aoltpspd.exe

(AOL)

AOL TopSpeed  background task which implements AOL’s new web caching technology introduced in AOL 9.0 Optimized and which results in significant speed gains when accessing the Internet via dial‑up modem 
(note that independent tests have shown that AOL TopSpeed technology also results in faster access on broadband lines although the gains are not as significant as they are over dial-up – around 10% gain)
.

Recommendation :   
An essential component of AOL 9.0 Optimized without which you cannot browse the Internet through the AOL browser.  Leave alone.

Aoltsmon

AOLTSMon.exe

(AOL)

AOL TopSpeed Monitor  service installed on Windows 2000/XP and introduced in AOL 9.0 Optimized.  We do not yet know the exact purpose of this service, but we do know that without it you cannot browse the Internet using the AOL browser.

Recommendation :  
As an AOL user you should in general leave this task alone.  If you are an advanced user and do not use AOL’s own browser but use, instead, a browser like Mozilla or FireFox which both have inbuilt web acceleration caching of the type used by AOL TopSpeed technology, then you can disable this service by setting its  Startup Mode  to  Manual  on the  Services  tab of  The Ultimate Troubleshooter.

Aoltray AOLTray.exe

(AOL)
America Online’s System Tray icon from version 5.0 onward. This icon enables you to start AOL through a double-click.  A single click, on the other hand, brings up a number of options which enable you to access specific AOL features, such as your Address Book, your Personal Filing Cabinet, etc...  The "System Information" option on this menu is one of the better "System Information" options around.

Recommendation :
We have not had any reports of problems with AOLTRAY.  Therefore, since e-mail is a core application nowadays you probably will want to keep it running.  If not, then you can disable it with  The Ultimate Troubleshooter.

Aornum

Aornum.exe

Aornumsp.exe

Ornum.exe

(iWon.com)

Background data collecting task from iWon.com which connects back to iWon servers to supply them with miscellaneous information about your Internet browsing and which also pulls up popup advertisements when you are browsing the Internet with Internet Explorer.  An extract from iWon.com’s Privacy Policy on 13‑Apr‑2003 : “If you elect to install certain software products (the “iWon Software Products”) provided by iWon to its users, such as iWon PLUS, the iWon Messenger, or iWon Co-Pilot, iWon may collect additional information about you. This happens because iWon Software Products automatically communicate over the Internet with iWon’s servers and, in order to provide you with information or services, may convey to iWon certain information regarding your activities, including, for example, the URL of sites you visit. iWon Software Products may also upgrade their functionalities from time to time without further action on your part, and some of these functionalities may expand the scope of the information that is communicated to iWon’s servers.”.  In short, what we call adware and, also, potentially spyware.  AORNUM, which appeared on the scene around August 2002, used to originally only be installed if you installed the iWon Prize Machine software.  As per the above extract, it is nowadays also installed by iWon Plus and other iWon software products.

Recommendation :
If you absolutely want to play iWon’s $1 million game, you have no alternative but to keep AORNUM on your PC.  If, on the other hand, you have no time for it then you should de-install  all  iWon programs that you find in  “Add/Remove Programs”  in the Control Panel (note that, in addition to sending information about you, AORNUM significantly slows down the boot-up period of your PC, it often prevents ScanDisk and Defrag from completing, and on some PCs it consumes 100% of CPU resources, effectively locking up the PC).  Unfortunately, a  full de‑installation of all iWon software is only the beginning of the cleanup operation as, totally unacceptably, the AORNUM software still remains after de‑installation of iWon software and in many cases is even concealed by being renamed !!  This is unacceptable.  To fully rid yourself of AORNUM after de‑installation of all iWon software, run SpyBot Search & Destroy from our  Downloads  page.

Apasserv

APASServ.exe

(Sunbelt Software)

Sunbelt Software’s Auto-Start service for the  AutoPilot  software – Windows XP only.  AutoPilot  is automatic “System Tuning” software which claims to tune your XP system for peak performance on-the-fly taking into consideration at all times the PC’s changing workload and its CPU specific capabilities and fine tuning facilities (Intel and AMD).

Recommendation :
This service is essential for the proper functioning of the AutoPilot software.

Apntex ApntEx.exe

(Alps Electric Co)
Alps Pointing Device Driver for Windows NT4/2000/XP.  This task will be found on laptops which use TouchPads made by Alps Electric (e.g. Sony Vaio laptops). Both this task and APOINT below are needed for the TouchPad to work properly.

Recommendation :
Required if you use or may use the TouchPad – leave alone.
Apoint APoint.exe

(Alps)
Driver for Alps manufactured touchpads found in some laptops.  On Windows NT4/2000/XP both this task and APNTEX above are required for the TouchPad to work properly.

Recommendation :
Essential if you use the touchpad, which you may do some day if your mouse malfunctions, or you forgot to take it with you.  We suggest you leave it alone.
Appservices AppServices.exe

(Iomega???)
Windows 2000/XP service which seems to be installed by the Iomega Zip drive drivers.  We do not know what this task does.

Recommendation :
The only recommendation we can make is that if you no longer use an Iomega Zip drive then you should try setting this service to Manual or Disabled in "Administrative Tools \ Services" in the Control Panel.

Apropos

Apropos.exe

(POP! – PeopleOnPage)

Advertising Internet Explorer add-on installed by the software from POP!, or PeopleOnPage.  PeopleOnPage’s own description of themselves :  “We are the first company to develop the technology necessary to make one‑on‑one chatting possible on any website on the world wide web - not just on specialist chat sites or on sites with added chat features.  So for the first time ever, instead of having to visit a particular community or dating website to chat, you can TAKE chat to any website.  To get started, you simply download a basic item of software to let you see the profiles of other POP! users on the same site as you - whichever site that happens to be.  Then, if you want to contact them, you simply click to email or chat with them, right there and then.”.

In addition, as of 25-Jan-2004 the license agreement for downloading and installing PeopleOnPage’s software, specifically states :  “POP! World is being provided to you free of charge in exchange for your agreement to download and view advertising served via Apropos (a proprietary browser-based advertising delivery system).  Apropos will deliver advertising on your computer screen on behalf of POP advertising clients.  These advertising clients may be competitors of the publishers whose Web pages users may be viewing or may have viewed recently.  By viewing advertisements served via Apropos ("Apropos Ads"), POP is able to subsidize the cost of providing you POP! World.”.

Recommendation :  
From the explanations above, Apropos is clearly advertising software, or adware – if you are experiencing annoying popup or pop-under ads, then this task will be one of the culprits.  Additionally, as per the license agreement this task will sometimes  “collect anonymous computer usage information and/or update user information” – what we call spyware (sending information from your PC out to PeopleOnPage).  From this point on the decision to keep APROPOS is yours :  if you use PeopleOnPage, then you are required to keep both POP! and APROPOS, as per the license agreement.  If you do not use PeopleOnPage, then get rid of this software immediately.  Aside from being adware and spyware, it is responsible for Internet Explorer lockups and severe slowdown in the PC’s operation with programs taking much longer than usual to open, or with APROPOS showing as  “not responding”.  To remove APROPOS, use the  Add/Remove Programs icon in the Control Panel and remove  POP  and  AM Server  if the latter does not get removed automatically when you remove POP. 
Next, use  The Ultimate Troubleshooter  to remove any  APROPOS  startup entries that may still be left behind.  Finally, reboot your PC.

Aptezbp Aptezbp.exe

(IBM)
Part of IBM’s Aptiva EZ Buttons software.  The EZ Buttons software enables the user to customize and use the rapid access buttons on the Aptiva’s Rapid Access Keyboards.  Typically these keyboards include up to 14 rapid access buttons which enable the user to directly access specific Windows functions, such as Help, your CD player, audio functions, Suspend mode, etc...  Four of the buttons can be customized to start whichever application you wish to start at the push of a button.

Recommendation :
This task is an essential part of the EZ Button software.  If you use the Rapid Access buttons, you need to have APTEZBP running.  APTEZBP uses a relatively large amount of memory and has caused problems on PCs with only 32Mb of RAM.  If you have 64Mb or more, however, APTEZBP should not cause you any problems.
Apwheel Apwheel.exe

(Alps)
Mouse wheel software for Alps wheel mice.

Recommendation :
Not necessary under Windows 98SE or later as the wheel is handled properly by Windows without additional software.  However, as with all such software, there are "bells and whistles" (additional features) which some users use.  If you do not use any of these additional features then you should be able to disable APWHEEL with  The Ultimate Troubleshooter  and still have your wheel work properly.  Note that APWHEEL will sometimes clash with the installation of software programs causing an "ISINST30 General Protection Fault".  If you experience this, do an End Task on APWHEEL, install your software, and then reboot your PC for APWHEEL to be restarted with Windows.
Armon

Armon32

Armon32a
Armon32.exe

Armon32a.exe

(Inverse Technologies)
Access Ramp Monitor.  Monitoring software which is installed by many ISPs’ software and which supposedly monitors your Internet connection. Here is the MindSpring ISP explanation of ARMON32A :

"Inverse AccessRamp provides technology allowing us to accurately measure availability and performance of our network from the perspective of our customers.  The technology consists of a client that resides on our customers PC’s and servers residing within the MindSpring network.  The client collects data on our customers’ real Internet experience with MindSpring. It includes information such as failed connection attempts, error codes, connection speeds, redials, and time to login.  Other key physical information such as POP, customer ID and modem type are also collected.  This data is then sent to servers within MindSpring and aggregated across the entire MindSpring customer base allowing an accurate depiction of our customers experience with the our service.  This allows our Network Engineers and Technical Support departments to more effectively and proactively address problems both within and outside the MindSpring enterprise."

Recommendation :
While it may not be used for that purpose, this sort of software has "spyware" potential.  Additionally, ISPs actually do not need this type of feedback in order to be able to work out where things are going wrong on their network – there are many monitoring technologies available which do not involve software sitting on end-user PCs.  Finally, ARMON32A conflicts with some software packages, Intuit’s QuickBooks amongst others.  For all these reasons we recommend disabling ARMON32A with  The Ultimate Troubleshooter  – it really does nothing for you, the end-user, and could be detrimental anyway !
Arupld32 ARUpld32.exe

(Visual Networks)
Browsing History Uploader application from Visual Networks.  This application gets installed when you install some ISPs’ CDs.  Its purpose is understood to be to enable the ISP manage its network through the feedback it receives from this utility about your web browsing habits.  We call this spyware and we are completely against the use of such programs. As if this weren’t enough, we have seen many cases of end-users experiencing low resources problems, or Windows Protection Errors on shutdown after the installation of this program and whatever else the ISP’s CD also installs on the end-user’s PC.

Recommendation : 

Disable or Delete using  The Ultimate Troubleshooter.  If you do not find any entry in  The Ultimate Troubleshooter, then search your hard disk for ARUPLD32.EXE and rename it by adding ".old" at the end of the name – this will prevent it from being loaded. You may have to boot your PC into Safe Mode in order to be able to rename ARUPLD32.EXE – with most versions of Windows this is achieved by holding the CTRL key down as your PC is booting up.  Finally, note :  AT&T customers – ARUPLD32.EXE may be necessary for you to be able to access the Internet through your AT&T subscription.  If that is the case, complain extremely strongly to AT&T about their use of spyware on your PC, then obtain a firewall like Norton’s Personal Firewall or Zone Alarm to prevent this process from sending information out of your PC.
Asdscsvc ASDSCSVC.exe

(BrightStor, now part of Computer Associates)
ARCServe Discovery Service installed by the ARCServe Windows NT4/2000/2003 fileserver backup software.

Recommendation :
We are not sure what this service does.  In some Windows NT4 Server installations this service sometimes consumes excessive amounts of CPU time – some installations have set it to "Manual" rather than "Automatic" and have not experienced any problems with the ARCServe software.

Aspnet_state

ASPNet_State.exe

(Microsoft)

The ASP State Service provides support for out‑of‑process session states for ASP – Windows XP/2003.  Microsoft’s explanation :  “ASP has a concept of session state – a listing of values associated with the client session is accessible from ASP pages through the Session property.  There are three options provided to store session data : In process; SQL database; and out-of-process.  The ASP State Service stores session data out-of-process.  The service communicates with ASP using sockets.”.

Recommendation : 
Essential if you want your PC/server to be able to process out of process ASP session requests or if you use  Norton Ghost v9.  Unless you work with ASP, or you use Norton Ghost v9, this service is usually not necessary and its  Startup Mode  may be set to  Manual  on the  Services  tab of  The Ultimate Troubleshooter
Note :  if you change the startup mode from its default, do not set it to  “Disabled”, keep to our recommendation of merely setting it to  Manual  as this ensures that if another program on your PC needs this service, it will be able to start it when it finds that it is not running.

Aspnet_wp ASPNET_WP.exe

(Microsoft)
ASP.NET Worker Process.  This the process which implements all functions of ASP.NET.

Recommendation :
Essential for the proper functioning of ASP.NET.  If you experience problems with this process, however, first ensure that you have the latest patches, and then also read the Microsoft Tech articles on the best way to run this process.
Atdialler1
Atdialler2
Atdialler3
ATDialler1.exe
ATDialler2.exe
ATDialler3.exe

(???)
Internet connection dialler that is part of the Freeserve Connection Kit (from the UK ISP "Freeserve").  The purpose of the dialler is to automatically try other numbers if the main connection number for your selected dial-up service is engaged or is experiencing temporary technical problems.  The number at the end of the program name indicates the version of the Freeserve Connection Kit that you are using – ATDIALLER3 indicates, therefore, that you are using the most recent version of the kit.  ATDIALLERx shows up as an icon in the System Tray.

Recommendation :  
At the time of writing, 3-Oct-2003, this application is problematic at best.  The problems :  Engaged numbers followed by many retries, 56K connections working at no more than 33K, conflict with some programs, e.g. FreeCell, crashes of the dialler if connection problems are encountered, and the need to reboot the PC if the dialler does crash.  A very poor piece of software, in our opinion, which we always recommend de-installing (Note, one more problem :  de-installing this software sometimes causes unexpected problems!!).  If you are technically advanced and you know how to manually create a connection to an ISP, our advice is that you obtain your Freeserve connection number(s) from our Internet Service Providers page, de-install the Freeserve Connection Kit, and create your Freeserve connections manually.
Ati2cwxx ATI2cwxx.exe

(ATI Technologies)
Part of ATI display drivers for some ATI or ATI-chipset based graphics cards.  Often seen in laptops as part of the VGA drivers for the onboard ATI graphics card, particularly DELL and Compaq laptops.

Recommendation :
At this stage we are not completely sure of the role of this background task;  however disabling it does not seem to cause any problems whatsoever.

Ati2evxx

Atievxx

Atipolab

ATI2evxx.exe

ATIevxx.exe

(ATI Technologies)

ATI External Event Utility EXE Module.  Another background task which gets installed when you install ATI display drivers.  Under Windows NT4/2000/XP/2003 the service registers as the  “ATI Hotkey Poller”  and further investigation shows that it is related to the handling of various ATI Hotkeys which bring up specific ATI utilities.  Not only is this facility useless to 99.99% of users, but there is also no documentation anywhere on those ATI hotkeys !!   Additionally some of our more inquisitive users have been able to prove that  ATI2EVXX  can sometimes be an incredible resource hog using up to 85% of CPU utilization !!  Older versions of this background task show up as  ATIPOLAB  in the Task List.

Recommendation :
Disable on the  Startups  tab of  The Ultimate Troubleshooter  in Windows 95/98/ME.  If you cannot find it on the  Startups  tab, then read about  ATIPTAXX  below and disable that task as it often is the task that starts ATI2EVXX.  In Windows NT4/2000/XP, go to the  Services  tab of The Ultimate Troubleshooter, find the  ATI Hotkey Poller  service and set its  Startup Mode  to  Disabled.

Ati2mdxx

ATI2mdxx.exe

(ATI Technologies)

ATI 2D Mode Component task installed by the drivers for graphics cards using the ATI Radeon chipset.

Recommendation :  
We do not yet know the role of this task, so we an only recommend that you leave it.

Ati2plab ATI2plab.exe

(ATI Technologies)
Part of ATI display drivers for some ATI or ATI-chipset based onboard graphics cards.  Seen mostly in laptops, particularly DELL, Compaq, or MITAC laptops.

Recommendation :
At this stage we are not sure of the role of this background task, so leave it untouched.
Ati2plxx ATI2plxx.exe

(ATI Technologies)
Part of ATI display drivers for some ATI or ATI-chipset based onboard graphics cards.  Seen mostly in laptops, particularly DELL, Compaq, or MITAC laptops.

Recommendation :
At this stage we are not sure of the role of this background task, so leave it untouched.

Ati2s9ag

ATI2S9AG.exe

(ATI Technologies)

ATI SmartGART startup task installed by the drivers for ATI Radeon graphics cards on Windows 95/98/ME. ATI’s own description :  “SMARTGART is an advanced diagnostics tool that automatically determines and configures the optimal AGP and PCI bus settings for the most stable graphics performance. SMARTGART will run a series of tests on the first reboot after a driver install.  During the test SMARTGART may blank the screen.”.  Additionally :  if you, as the end-user, decide to go and modify some of your ATI graphics card settings through the Control Panel ATI icon, these settings will be saved but on the next reboot this startup task will run and check whether the new settings will work without stability problems.  If ATI’s SmartGART startup task believes that the new settings will make the PC unstable, it corrects the relevant settings accordingly.

Recommendation :
Leave alone – this startup task only runs during Windows boot.  Once it has performed all the checks mentioned above, it stops, which is why you will never see it in your Task List.  Note for gamers and advanced users :  if you find that some settings that you set through the ATI icon in the Control Panel, do not stick, it is most probably because  ATI2S9AG  performed its function and decided to modify the settings you had set on account that it felt they would lead to instability.  Thus, if this causes you problems because you want specific settings  regardless  of what ATI SmartGART thinks, then disable this startup task on the  The Ultimate Troubleshooter  to prevent SmartGART from changing your specifically chosen settings.

Ati2sgag

ATI2SGAG.exe

(ATI Technologies)

ATI SmartGART Service installed by the drivers for ATI Radeon graphics cards on Windows 2000/XP/2003. ATI’s own description :  “SMARTGART is an advanced diagnostics tool that automatically determines and configures the optimal AGP and PCI bus settings for the most stable graphics performance. SMARTGART will run a series of tests on the first reboot after a driver install.  During the test SMARTGART may blank the screen.”.  Additionally :  if you, as the end-user, decide to go and modify some of your ATI graphics card settings through the Control Panel ATI icon, these settings will be saved but on the next reboot this service will run and check whether the new settings will work without stability problems.  If ATI’s SmartGART service believes that the new settings will make the PC unstable, it corrects the relevant settings accordingly.

Recommendation :
Leave alone – this service only runs during Windows boot.  Once it has performed all the checks mentioned above, it stops, which is why you will almost never see it with a status of  “Running”.  Note for gamers and advanced users :  if you find that some settings that you set through the ATI icon in the Control Panel, do not stick, it is most probably because  ATI2SGAG  performed its function and decided to modify the settings you had set on account that it felt they would lead to instability.  Thus, if this causes you problems because you want specific settings  regardless  of what ATI SmartGART thinks, then set this service to  Manual  or  Disabled  on the  Services  tab of  The Ultimate Troubleshooter  to prevent SmartGART from changing your specifically chosen settings.

Aticwd32 ATIcwd32.exe

(ATI Technologies)
Driver enhancement for some ATI VGA cards.

Recommendation : 
We have never seen an instance where this background task is needed.  Delete in  The Ultimate Troubleshooter.
Atikey ATIKey32.exe

(ATI Technologies)
Another hotkey handler by ATI which runs in the System Tray – comes with the drivers for ATI ultra cards.  It watches for ATI scheme hotkeys and enables the user to program the hotkeys as well as switch between the schemes.  This program autoloads ATIICON.

Recommendation :
Useless and a nuisance.  It gives "General Protection Fault" with some HP drivers and is responsible for slow boot-up times on some PCs. Delete with  The Ultimate Troubleshooter.
Atiptaab ATIptaab.exe

(ATI Technologies)
Part of ATI display drivers for some ATI or ATI-chipset based onboard graphics cards.  Seen mostly in laptops, particularly Compaq laptops.

Recommendation :
At this stage we are not sure of the role of this background task, so leave it untouched.

Atiptaxx

ATIPtaxx.exe

(ATI Technologies)

ATI Task Bar Icon.  This is a System Tray icon which gets installed when you install the ATI drivers.  All this icon does is enable you to bring up the Display Properties from the System Tray.  Since the Display Properties can be invoked in many other ways, this icon simply adds to the clutter of the System Tray.

Recommendation :
Go into the Display Properties  (Display icon in the Control Panel) and take the tick off the  “Enable ATI Task Bar Icon”  option.  You will have to seek out this option as it is in different places for different ATI drivers.  Typically, however, you need to go to the  Settings  tab, then click the  ADVANCED  button, and then find the option on one of the tabs that have the  ATI  icon as part of the tab name.  Also, particularly with the recent drivers from ATI, once you have found that option you may find that the option is already unchecked but that the ATI icon is still showing in the System Tray.  When that is the case, check the option, click APPLY, and then uncheck the option again and click APPLY again.  Once you have unchecked that option, delete the  “ATIptaxx.exe”  line on the  Startups  tab of  The Ultimate Troubleshooter – this will prevent  ATIPTAXX  starting at boot-up.  Note, however, that  ATIPTAXX  will still get started automatically every time you call up Display Properties, but at least it will not start automatically at boot-up.  If you want to totally disable  ATIPTAXX  from starting  at any time,  and you are familiar with editing the Windows Registry, then home in on the following registry key  HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\Desktop,  then the sub-key  NoAtipta  and set it to  1  instead of its 0 default (our Thanks to the AnswersThatWork user who told us about this).

Atiqipcl

AtiQiPcl.exe

(ATI Technologies)

This is one of the oddest startup entries we have ever come across.  You will never find this program in your Task List , you will only ever find it as a startup item.  The bizarre thing, however, is that in our experience the program file  ATIQIPCL.EXE  can never ever be found on the hard disk !   We believe, therefore, that  ATIQIPCL.EXE  is a program installed purely at driver installation time, which, thanks to this startup entry, runs on the first reboot after you have just installed the ATI drivers, does what it needs to do, and then deletes itself from your hard disk.

Recommendation :
Click on this entry on the  Startups  tab of  The Ultimate Troubleshooter.  If TUT tells you that the file does not exist, then simply delete this entry.

Atisched AtiSched.exe

(ATI Technologies)
Part of the ATI software suite that gets installed with the drivers for some ATI video cards.  The perfect explanation, from ATI themselves :  "ATISCHED, the ATI Scheduler, is one of a number of components of the ATI Video Player.  ATISCHED is the component that remains resident in memory and automatically launches the ATI Video Player at a user selected time and date.  Some of the features include the ability to open ATI TV, on a specified channel, at a specific time in order to watch a favourite program or playing an AUDIO CD at a specified time.  ATISCHED is loaded (from the StartUp folder) every time Windows starts.  Deleting the shortcut from the StartUp folder prevents ATISCHED from loading into memory.  If features of the ATI Video Player that require the ATI Scheduler are enabled, the ATI Player program will re-establish the shortcut automatically."

Recommendation :
If you do not use the ATI Scheduler, you can disable it with  The Ultimate Troubleshooter.
Atitask ATITask.exe

(ATI Technologies)
Another ATI Task Bar process.  Why ATI cannot name their task bar icon task the same across all their VGA cards, escapes us.  This particular background task gets installed with the ATI Rage range of drivers.  All this background task does is enable you to access the Display Properties from the System Tray.

Recommendation :

In addition to being useless in most cases, this particular ATI background program also has the unwelcome side effect of making Scandisk and Defrag restart endlessly.  We therefore recommend that you disable it with  The Ultimate Troubleshooter.  However, if you need to adjust gamma and colours to compensate for monitor colour peculiarities or problems, then you will need to keep ATITASK enabled as one of its jobs is to load your colour and gamma changes on Windows boot-up.
Atix10 ATIX10.exe

(ATI Technologies)
System Tray icon for the remote control sensor task.  Some ATI All-in-One video capture tuner cards come with a remote control.  ATIX10 is the System Tray task that must be running for the USB connected remote control sensor to detect when the remote control is being operated.  You can also double-click or right-click on the icon to configure the remote control buttons and change some options.

Recommendation :
If you do not use the remote control, you can disable this task with  The Ultimate Troubleshooter as it is not needed for your ATI card to work properly.
Atrack Atrack.exe

(Symantec)
Symantec's Alert Tracker task which is part of their Norton Internet Security or Norton Personal Firewall products.  Alert Tracker appears as a half-globe on the right-hand side of your screen.  You can move it up and down that right-hand side all the way up to the top of the screen, or all the way down till just above the Task Bar.  Its purpose :  "To provide instant notification of events as they happen. This way when a rule is triggered, or an access to the Internet is made, you know about it immediately rather than when you look at the logs".

Recommendation : 
It is unusual for Symantec to come up with utterly useless icons but this is definitely as utterly useless as you can get.  This icon is not only useless, it is annoying, and its position and shape is also very confusing as, until they read about it, users think something went wrong during the installation of Norton Internet Security (NIS) or Norton Personal Firewall (NPF).  Yet its function is fully duplicated by the System Tray icon for NIS/NPF which displays an unmissable flashing red exclamation mark when an event you should know about has occurred.  Disable by clicking on the System Tray icon for NIS/NPF and choose the "Hide Alert Tracker" menu option.
Attune_ce Attune_ce.exe

(Aveo Inc)
Aveo’s Attune Client Engine.  We first came across this when trying to correct resource hog problems on a 400MHz PC.  We checked Aveo’s site and here is what they say :  "Attune is a revolutionary service which provides end-users with targeted, "plain-English" messages (called "Intelligrams") to help them avoid common computer problems.  Attune may also let users know when they need a specific product, service, or upgrade to optimize the use of their computer.  Attune runs quietly in the background and automatically updates its Intelligrams when users connect to the Internet.  Subsequently, when a user is about to encounter a situation that is known to cause problems, Attune displays the Intelligram that contains the solution."  23-Mar-2002 update :  Aveo seem to have gone out of business as their site now has an "under construction" banner !

Recommendation : 
De-install Aveo Attune ! 
While we leave you to make your own interpretation of the above, our experience of Attune at specific customers, and our experience of many other similar products, is that they are resource hogs, and it is our pragmatic belief that such products will never be able to predict the vast majority of problems that end-users experience.  23-Mar-2002 update :  with Aveo having seemingly gone out of business, Aveo Attune is now guaranteed to be of no use whatsoever to anybody !

Au

Au.exe

(???)

You have the   W32.Beagle.B@mm  /  W32.Alua@mm  /  W32.Bagle.b@mm  virus.

Aupdate AUpdate.exe

(Symantec)
Automatic LiveUpdate Module.  AUPDATE is entirely to do with Norton’s LiveUpdate, whether you have Norton AntiVirus, Norton PCAnywhere, Norton Personal Firewall, or Norton Internet Security.  It only appears in your Task List if you have configured your Norton software to update automatically and you happen to bring up the Task List at the very moment that Norton’s LiveUpdate is in the process of downloading updates.

Recommendation :
Do nothing.  As soon as LiveUpdate finishes downloading updates in the background, AUPDATE will disappear from your Task List.
Ausvc Ausvc.exe

(?)
Backdoor.Autoupder virus.

Recommendation :

Update your antivirus software immediately and then run a full virus scan on your PC.
Autochk AutoChk.exe

(imagineLAN)
System Tray icon which is part of imagineLAN’s ConfigSafe product.  ConfigSafe is a product which does near enough the same job as the System Restore feature first introduced by Microsoft in Windows Millennium, and improved further in all subsequent versions of Windows :  Windows XP Professional, Windows XP Home, Windows 2003.  It enables you to backup your Windows Registry together with specific vital Windows system files, so that you can return at any point to a specific and known good "Windows state" should you experience critical problems after performing a task that modifies your Windows environment (such as installing software, de-installing software, installing or de-installing devices, etc...).  Roxio’s GoBack is another such products. These products are excellent for Windows 95/98/2000 users where the Microsoft System Restore facility does not exist.

Recommendation :
Down to end-user preference – you can disable this System Tray icon with  The Ultimate Troubleshooter. We do not know of any problems with this task at this stage.
Avconsol AVConsol.exe

(McAfee)
AntiVirus Console for McAfee VirusScan 4.  This is the McAfee Task Scheduler in VirusScan 4 which enables you to schedule virus scans of your hard disks, download of virus definition updates, etc...  AVCONSOL sits in the System Tray in the shape of a McAfee icon.

Recommendation :
AVCONSOL is temperamental (read "unreliable").  We recommend that you do not rely on AVCONSOL having properly downloaded the latest updates from the McAfee websites.  We have seen AVCONSOL appear to be working only to find that the virus DAT file never really gets updated.  In our experience, remembering to regularly manually update your version 4 of McAfee VirusScan is a far more reliable process than relying on AVCONSOL doing it automatically !  If you follow our recommendation, and do not have hard disk virus scans scheduled, then you can disable AVCONSOL with  The Ultimate Troubleshooter.

Avgcc

AVGCC.exe

(Grisoft)

AVG 7.0 AntiVirus Control Center.  You either have the Control Center currently open, or it is running in your System Tray (the pretty 4-colour icon – Black, Yellow, Green, Red).  When running in the System Tray, the icon enables you to open the AVG 7.0 Control Center from the System Tray.  From the Control Center you can then fully customize AVG or start the AVG virus scanner itself.

Recommendation :
  
At the time of writing, 2‑Jan‑2005, our advice is that it is  not  a good idea to have the AVG 7.0 Control Center automatically load into the System Tray at startup as on some PCs it causes significant problems :  from  “Not responding”  errors to excessive consumption of memory, extreme slowness of the PC, shutdown problems, inability to go on Standby, and even full computer freezes.  This is not good.  Our advice, therefore, is to disable this task from starting on the  Startups  tab of  The Ultimate Troubleshooter.  You can still start the AVG Control Center through   “Start \ Programs”  if you need to open it to configure AVG or start a virus scan, and your PC will continue to be protected against viruses by AVG irrespective of whether or not  AVGCC  starts automatically at Windows startup.

Avgcc32 AVGCC32.exe

(Grisoft)
AVG Control Center.  System Tray application for the AVG antivirus software.  It enables you to open the AVG Control Center from the System Tray.  From the Control Center you can then customize AVG or start the AVG virus scanner itself.

Recommendation :
Essential as, bizarrely, this System Tray application also includes the essential AVG "Resident Shield" which scans files for viruses as you open them.  In our opinion it would have been a better design to have the "Resident Shield" functionality in a background task which is not part of the System Tray Control Center as the Control Center can easily be exited by mistake by end-users. AVGCC32 also needs to be running for AVG to automatically update itself with the latest virus definitions – leave it alone therefore.
AVGCtrl AVGCtrl.exe

(H+BEDV Datentechnik gmbH)
Background task of the AntiVir antivirus program which scans files transparently in the background as you access, create, or save them.

Recommendation : 
Essential to the proper functioning of AntiVir. Leave alone.

Avgemc

AVGEmc.exe

(Grisoft)

AVG AntiVirus Email Scanner which scans incoming and outgoing emails.

Recommendation :  
Required if you have email scanning enabled within AVG, otherwise if you have disabled email scanning and this task is still running, then you can in turn disable it on the  Startups  tab of  The Ultimate Troubleshooter.

Avgserv

AVGServ.exe

(Grisoft)

Background service for the  AVG antivirus  software when installed on Windows NT4/2000/XP.  It displays notification messages and also scans incoming e-mails for virus attachments.

Recommendation :
Essential – leave alone.

Avgserv9 AVGServ9.exe

(Grisoft)

Background task for the AVG antivirus software which displays notification messages and which also scans incoming e-mails for virus attachments.

Recommendation :
Essential – leave alone.

Avguard  (1)

AVGUARD.exe

(H+BEDV Datentechnik GmbH)

AntiVir Real-time Scanner  service for Windows NT4/2000/XP.  If you have configured your AntiVir antivirus software to scan files for viruses as and when they are accessed, created, or downloaded (ie. the safest setting), this service is the process which, in the background, scans all files as and when you access them.

Recommendation :
Absolutely essential to the effective functioning of your AntiVir antivirus software – Leave alone.

Avguard  (2)

Special Firewall Service

AVGuard.exe

(???)

You have the   W32.Netsky.G@mm  virus.

Avgw

Avgw.exe

(Grisoft)

You have the   AVG Antivirus  main program currently open.

Recommendation :  
If this items shows on the  Startups  tab of  The Ultimate Troubleshooter, then you can disable it (and eventually delete it) as it is usually put there at installation time so that the AVG main program opens (for you to configure it) when you reboot after installing the software.  It is configured to run once only  (hence the  /RUNONCE  switch in the  Command  column) and does not come up again on future boot‑ups.

Avserve

Avserve.exe

(???)

You have the   W32.Sasser.Worm   virus.

Avserve2

Avserve2.exe

(???)

You have the   W32.Sasser.B.Worm   or   W32.Sasser.C.Worm   virus.

Avsynmgr AVSynMgr.exe

(McAfee – Network Associates)
McAfee VirusScan Synchronization Manager.  We are not yet sure about the role of this task but we believe it to be to synchronize the workstation’s virus definitions with those collected from McAfee’s site by the central fileserver on network versions of McAfee VirusScan.

Recommendation :
Since we are not sure of this task’s role, our recommendation can only be to leave it alone.
Avsynmgr32

MSMcAfeee
Avsynmgr32.exe

(???)
You have the Trojan.Framar virus.

 B

B3dupdate B3DUpdate.exe

(Brilliant Digital)
Background auto-update program for Brilliant Digital’s B3D Projector.  B3D Projector is what we call adware – Brilliant Digital’s own description :  "The B3D Projector is a free viewer that plays the b3d animations created through b3d Exporter and b3d Studio.  Available as a plug-in for Internet Explorer or Netscape Navigator, or as a self-contained installation for CD distribution, the b3d Projector plays b3d files streamed over the Internet or distributed on CD-ROM....  Of course you may want to get revenue for all that content you’re creating, so you’ll be pleased to know that the Projector offers many e-commerce features, including auto-refreshing banner ads, interstitial ads, and an optional end-of-movie HTML page that can direct traffic back to your web site."  Our translation :  a program which you can use to offer your own software free of charge while obtaining revenue from advertising through B3D Projector’s ability to display ads.

At the time of writing, 26-May-2002, B3D Projector and other Brilliant Digital software come embedded in the popular Kazaa file sharing program, with the worrying following paragraph in the licensing agreement displayed during the installation :  "You hereby grant (Brilliant) the right to access and use the unused computing power and storage space on your computer/s and/or Internet access or bandwidth for the aggregation of content and use in distributed computing.  The user acknowledges and authorizes this use without the right of compensation."

Recommendation :
Get rid of any Brilliant Digital software which we have classified as adware.  We are against adware as adware consumes bandwidth (it significantly reduces the speed at which you access the Internet or download from the Internet) and most adware also results in interminable and unbelievably irritating popup advertisements.  Additionally, in the specific case of Brilliant Digital, their products often do not get de-installed when you de-install the software that originally installed them.  Download SpyBot Search & Destroy from our Downloads library to get rid of B3D Projector.  Note that doing so may incapacitate the program that originally installed B3D Projector.  If that program is Kazaa, then you will find a good alternative in WinMX also available from our Downloads Library.
Backwebagent

Backweb
BackWeb.exe

(Backweb Technologies)
BackWeb started life as push technology software which enabled you to subscribe to various information channels of your choice so that your selected information channels would pop up on your screen with the latest world news, entertainment news, etc…,  whatever you might have chosen  You can configure the original BackWeb to download the news for later viewing, to display the news as desktop background, ticker, or popup window.

This did not take off as well as expected and, crucially, it was also not paying for itself.  As a result BackWeb quickly went into other markets, two of them significant ones.  (1) Advertising adware where websites, ISPs, or software manufacturers include BackWeb on their site, in their ISP software, or in their software and, whenever you connect to the Internet, BackWeb also connects to retrieve advertisements which are then displayed on your screen or in your browser.  (2) BackWeb is also routinely installed on new PCs by specific computer manufacturers with the aim being that BackWeb will automatically check for vital updates to the PC’s setup whenever the end-user connects to the web. Such manufacturers include Compaq, Hewlett-Packard, LogiTech, Kodak, although some or all of these may have stopped this practice at the time of writing of this entry (April 2002).

Recommendation :
Unless you are using BackWeb for news content, we strongly recommend de-installing it.  It is often a serious resource hog, in most cases it is also advertising adware, it slows down your Internet connection, unacceptably if you connect by modem, and it has the potential for sending out information from your PC.  De-install via the "Add/Remove Program" icon in the Control Panel, or disable with  The Ultimate Troubleshooter.
Bargains Bargains.exe

(Exact Advertising)
Main executable task of the Bargain Buddy advertising software (adware) from Exact Advertising (Exact Advertising started as the advertising sales division of Net2Phone Inc till it was spun off in a management buyout).  Bargain Buddy is software which, based on your Internet browsing habits, generates popup advertisements whenever you browse the web – it gets installed mostly as part of other products such as Net2Phone (no, surely not!), some versions of the LimeWire file sharing software, some versions of the email alert program from www.mail.com, and other software titles.

Recommendation :
If like us you do not like popup ads, de-install Bargain Buddy from the "Add/Remove Programs" icon in the Control Panel (if it shows up in there).  Next, run Spybot Search & Destroy which you can find in our
Downloads page.

Bartshel

Bartshel.exe

(PeoplePC???)

This task seems to have appeared on the scene in June 2003.  It is installed in the folder structure created by the remote dialup software from the  PeoplePC  ISP, so we can safely assume that it gets installed when you install the PeoplePC software.  While we are not yet sure as to what this task does, what we have observed is as follows :  if we tell the end-user to disable it on the  Startups  tab of  The Ultimate Troubleshooter, the endless popup advertisements that the end-user was complaining about, disappear for good.  If the end-user re‑enables BARTSHEL, they come back !   We leave you to put 2 and 2 together .......

Recommendation :  
In addition to the popup ads, some versions of BARTSHEL also generate scripting error and other crashes in Internet Explorer on some PCs – even more reasons to avoid this task !   What you do next depends on your version of  BARTSHEL.  Try first disabling it on the  Startups  tab of  The Ultimate Troubleshooter.  If you do not find  BARTSHEL  in The Ultimate Troubleshooter, then rename  BARTSHEL.EXE  to  BARTSHEL.EXE.RENAMED !   You can do a search for it but, typically, it will be located in either  “C:\Program Files\ISP40\bin”  or in  “C:\Program Files\ISP50\bin”In our experience disabling BARTSHEL usually does not cause any problems with the PeoplePC connection.  That said, if this solution gives you problems with your PeoplePC connection, then simply re‑enable  BARTSHEL.  If you are a technically advanced user, then try re-creating your PeoplePC connection manually rather than with the PeoplePC CD and see if you can connect through that.

BBC Ticker

BBCTicker
BBCTicker.exe

(British Broadcasting Corporation – BBC)
Floating horizontal News Toolbar from The BBC, the UK broadcasting service.  If you have a permanent connection to the Internet, it flashes news headlines throughout the day – clicking on a particular headline opens your Internet browser onto the corresponding news page on the BBC website.

Recommendation :
Down to end-user preference.

Bbeagle

d3dupdate.exe

Bbeagle.exe

(???)

You have the   W32.Beagle.A@mm / I-Worm.Bagle / W32/Bagle@MM / Win32.Bagle.A   virus.

Bcdetect BCDetect.exe

(Creative Labs)
This is a startup item rather than a background task (it starts with Windows, does its job, then terminates).  As yet we do not know what this startup item does.

Recommendation :
We always disable this item with  The Ultimate Troubleshooter  and have never noticed any problems caused by doing so !
Bcmdmmsg Bcmdmmsg.exe

(Broadcom)
Broadcom Modem Messaging.  Background task installed with the drivers for "BCM V.90 Modems".  Broadcom modems are OEM modems which other companies put their names to (e.g. "Gateway").

Recommendation :
Broadcom modems are almost always 100% software controlled modems.  Thus, while we are not totally sure about the role of BCMDMMSG, it is highly likely that this background task is essential to the proper functioning of your modem – leave alone.

Bcmsmmsg

BCMSMMsg.exe

(Broadcom)

Broadcom Soft Modem Messaging Applet.  Background task installed by the drivers for Broadcom’s range of v92 soft modems.  Broadcom modems are OEM modems which other companies put their names to  (e.g.  “Gateway).

Recommendation :   Essential to the proper functioning of your modem – Leave alone.

Benetns BENetNS.exe

(Veritas)
Backup Exec Agent Browser Service, part of Veritas’ Backup Exec for Windows Servers backup software – this service runs on Windows NT4/2000/2003 servers.  This service allows the Backup Exec Engine, the service that actually does the backing up, to discover Backup Exec Agents that are available on the network (ie: on end-user workstations) and which might want to interact with Backup Exec on the server (to submit a workstation backup, to view the logs of server backups, etc...).

Recommendation :

This service is only needed if you want to allow interaction between some workstations and the Backup Exec process on your server(s).
Bengine BEngine.exe

(Veritas)
Backup Exec Job Engine service, part of Veritas Backup Exec for Windows Servers backup software – this service runs on Windows NT4/2000/2003 servers.  This is the service that actually performs the backing up of data to tape – it runs the defined backup jobs.

Recommendation :
Essential – Leave alone.  Note :  there is often a more recent full install version of the Backup Exec software for your Windows server on the Veritas website, plus patches too.  Thus, if you experience problems with BENGINE.EXE, check the Veritas website for updates.
Benser BENSer.exe

(Veritas)
Backup Exec Naming Service, part of Veritas Backup Exec for Windows Servers backup software – this service runs on Windows NT4/2000/2003 servers.  This service maintains a list of all Backup Exec fileservers on your network.

Recommendation :
This service is needed irrespective of whether you have just the one server running Backup Exec, or you have multiple servers each running Backup Exec – Leave alone.
Beserver BEServer.exe

(Veritas)
Backup Exec Server service, part of Veritas Backup Exec for Windows Servers backup software – this service runs on Windows NT4/2000/2003 servers. This service implements backup job schedules, Backup Exec configuration changes, and it maintains job histories, and services the Backup Exec Management SDK.

Recommendation :
Absolutely essential – Leave alone.

Billmind

Billminder

Billmind.exe

(Intuit)

Quicken Billminder task automatically installed by default in the Startup folder.   It reminds the user, on Windows boot-up, of impending bills to pay, impending inputs (e.g. salary), and any other impending financial events the user might have set up in Quicken.

Recommendation :  
Entirely down to end-user preference – some users like to be reminded of such things whenever they turn their PC on (in which case keeping BILLMIND in the Startup folder is necessary), while others prefer to be reminded only when they open Quicken, through the Quicken Reminder window.  This task can be disabled either within Quicken or with  The Ultimate Troubleshooter.

Bjcfd BJCFD.exe

(BroadJump Inc, now Motive)
BroadJump Foundation Client from BroadJump.com, now Motive.  After reading the description of this product on the BroadJump website, it is clear that some of the functions of this software are what we call adware (software which collects information on your Internet activity and sends it to your ISP so that your ISP can serve you advertisements related to the type of sites you visit).  This program typically gets installed when you install software from the Comcast ISP (which took over @Home and MediaOne), although at the time of writing, 31-Mar-2003, Comcast is not the only ISP which uses BroadJump’s software (Southwestern Bell DSL, BellSouth, Charter).

Recommendation :
We are against this type of spyware/adware software, as you know. Additionally CFD creates conflicts on Windows XP which result in users experiencing problems or lack of Internet access when logging off and logging back on as a different user.  Again on XP, CFD has been seen to slowly but surely gobble up resources and memory, ending up running at 95% of CPU resources and an impossibly slow PC.  You’ve guessed it :  de-install "Broadjump Client Foundation" through "Add/Remove Programs" in the Control Panel, and/or disable BJCFD, or its newer incarnation, CFD, with  The Ultimate Troubleshooter.  Those users who have done so have reported no ill-effects whatsoever.  You can also run Ad-Aware or Spybot Search & Destroy who will both rid your PC of the Broadjump software.
Bkupexec BkupExec.exe

(Veritas)
You have the Veritas Backup Exec program open on-screen.  On a standalone PC this will be the program which you use to backup your PC.  On a network fileserver, this will be the Administrator program which enables the network administrator to set up backup jobs, view the history and logs, prepare media, etc..,  with the actual backing up of the data being performed by BENGINE.EXE.

Blengine

BLMessaging
Integration

Blengine.exe

(ClickSpring)

Task which is dropped onto your PC when you run the free  “hidden pornography”  scanner from PuritySCAN.com.  This file is found in a folder called  “PSD Tools”.  At the time of writing, 9‑May‑2004, PuritySCAN.com purports to scan your PC for hidden pornography and help you remove it.  For a start, at the time of writing, 9‑May‑2004, the scan for pornographic content is a total scam and downright dangerous.  The scan will reports files like  ASSETS.GIF  and  ASSETS.EXE  as files containing pornographic material because, wait for it, because ..... the names of the files contain the word  “ass”.  Shocking, shocking, shocking.  If we had gone ahead and  “cleaned”  our test hard drive of the reported files, we would have lost  “ASSETS.GIF”  which is a graphic file that is part of Microsoft Office 2000, and we would have lost  “ASSETS.EXE”  which is asset management software !!  And it gets worse :  STRIPED.GIF will also have been deleted because the filename has the letters  “strip”, and, unbelievably, SUNBANNA.GIF will have been deleted because the filename contains the letters .......... “Anna” !   There are no words to describe a scam like this one. 

It gets worse still :  what this software also does do is drop this file together with a second one onto your PC (The Ultimate Troubleshooter  will also highlight the second file), sets both up as startup entries, and the PC then gets inundated with popup advertisements and also experiences serious Internet browsing performance issues.  As much as it irritates us to be, to be fair there is a license agreement which states, amongst other things, that you agree to receive advertising :  “By installing PurityScan you understand and agree that PurityScan will make the following changes to your Internet Browser:  Several PROMOTIONAL CONSOLES (daughter console/interstitial) may be launched for the duration of time you spend online. These consoles may continue to be launched as long as you have PurityScan installed on your machine. PurityScan does not monitor the activities or collect information from users once they have left PurityScan.  By downloading PurityScan, you understand that these changes cannot be reversed without running the removal executable of PurityScan.  If you try to change the items above manually, your changes will be lost when you reboot or turn off your computer.”

This is nightmarish adware posing as a  free service to the Internet community – the publishers know full well that 90% of users never read License Agreements and that they will therefore get conned into running a not only useless but dangerous scan, and they will also get infected with adware (advertising software) !   Since its introduction in 2002 this task not only constantly changes name, to evade detection, but it has also appeared in the Task List of users who have never accessed PuritySCAN.com, so we suspect that ClickSpring have an Affiliates programme which allows unscrupulous websites to co‑brand the PuritySCAN program so they can lure users into running scans of their PCs while at the same time dropping onto those PCs this task which will continually pull up popup advertisements about their products !   Through investigation and talking to infected users, we even have strong circumstantial evidence that this task is obtained, of all places, on pornographic websites which provide a free  “tool to erase all traces of the user’s visit to those sites” !!

Finally, we have also noticed that all users who had this task and who did not have adequate antivirus protection, were all infected with the  Badtrans  virus – we are not yet sure of the reason for this strange coincidence.

Recommendation :
Get rid of this task immediately. 
1) Terminate  BLENGINE  (or its equivalent) on the  Tasks  tab of  The Ultimate Troubleshooter
2) Terminate the second task which The Ultimate Troubleshooter will have also identified as being ClickSpring software.
3) Switch to the  Startups  tab and note the location of the  BLENGINE.EXE  file (or its equivalent) and of the other task identified by The Ultimate Troubleshooter as being ClickSpring software. 
4) Search and Delete both files from your hard disk. 
5) Search your hard disk for a file called PURITYSCAN.EXE.  If you find it, delete it.
6) Delete both ClickSpring entries from the  Startups  tab of The Ultimate Troubleshooter. 
7) Finally, make sure you have a reputable antivirus product, manually update it fully, then reboot your PC into Safe Mode and run a full virus scan of your PC.

Bmqnzkg

Casdvqwa

Bmqnzkg.exe

(???)

You have the  W32.Randex.BE  virus.

Bmouse BMouse.exe

(Kensington)
Kensington ValuMouse Scroll.  Background task which is installed by the drivers for the Kensington ValuMouse range of mice and which handles the scroll wheel.

Recommendation :
This software is only necessary under Windows 95 which does not have support for scroll buttons/wheels.  As we have not had reports of problems with BMOUSE, it is up to you as to whether you decide to keep it or de-install the mouse software.

Bootwarn

BootWarn.exe

(Symantec)

Norton AntiVirus Boot Warning.  This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation.  We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating.

Recommendation :
Start Norton AntiVirus from  “Start \ Programs \ Norton AntiVirus”.  If Norton AntiVirus comes up without problems, then delete this entry from the  Startups  tab of  The Ultimate Troubleshooter – it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages.

Bpcpost Bpcpost.exe

(Microsoft)
Microsoft TV Viewer Post Setup program.  We have at this stage no idea as to what this program actually does.

Recommendation :
If you never use Microsoft TV disable this program with  The Ultimate Troubleshooter.
Brad32 Brad32.exe

(Network Associates)
Component of Network Associates’ Total Virus Defense Network Suite, Management Edition.  Total Virus Defense will also be known to some as a Dr Solomon product, which it was till Network Associates acquired Dr Solomon.  BRAD32 runs on the workstations and executes requests sent from the network fileserver – these requests will mainly be to install virus updates, product updates, or to run virus scans.  BRAD32 is a nightmare.  In fact, in our experience most Dr Solomon products produced around the time that Dr Solomon were acquired by Network Associates, either side of the acquisition date, have proved to be full of problems (yet we used to swear by Dr Solomon before then!).  In the case of BRAD32 the problems range from 100% CPU utilization, intolerable delays in opening files on the fileserver, or unbelievable performance problems when running programs which open many files, whether these files are local or not (such as temporary work files, etc..).  Network Associates produced Management Edition 2.0 after its acquisition of Dr Solomon whose last version was 1.5. Version 2.5 was then introduced which no longer used BRAD32.

Recommendation :
In our experience most users running BRAD32 will experience very significant performance gains by getting rid of it.  However, if you are a network administrator and you want to retain control over the antivirus implementation in your organisation, then our advice is to upgrade to a current version of Management Edition whenever you can afford it.  Getting rid of BRAD32 depends on how it is implemented – if you are an end-user, liaise with your network administrator as BRAD32 may be run by system policies (POLEDIT).  If BRAD32 is not run by system policies, then you can disable it with  The Ultimate Troubleshooter.
BrowserWebCheck LoadWC.exe

(Microsoft)
Read LOADWC.
Brqikmon Brqikmon.exe

(Brother)
Print job customizing applet which gets installed with most of the post-2000 printer drivers.  In the more up-to-date versions of those printer drivers, this little program sits in the tray and enables you to specify special print job instructions, such as printing 2, 4, 8, or 16 pages in contact-sheet manner onto the one page, printing double-sided, printing on special paper, etc..

Recommendation :
A brilliant and very useful little utility in most environments.  Leave untouched unless you work with Citrix as we have had reports that, under Citrix, it interferes with the way in which Citrix handles print jobs.
Btstackserver BTStackServer.exe

(Widcomm)
Widcomm’s Bluetooth Stack COM Server.  Background COM server task that is essential to the proper running of the other programs within Widcomm’s Bluetooth software, such as BTTRAY below.

Recommendation :
Leave alone.  Note, however, that we have had reports of crashes needing a reboot for Bluetooth to work – so check the device manufacturer website in our Drivers section for more recent drivers.
Bttnserv Bttnserv.exe

(Compaq)
See CPQEAUI
Bttray BTTray.exe

(Widcomm)
Widcomm’s Bluetooth Tray Application.  Widcomm’s Bluetooth for Windows software, BTW, comes bundled with many Bluetooth devices, e.g. TDK Bluetooth PCMCIA cards, Epox motherboards with embedded Bluetooth connectivity, etc.  BTTRAY is the actual user interface of the software, and it sits in the System Tray where it enables the user to discover/detect and connect nearby Bluetooth devices.  You can also configure security and every single feature of the Bluetooth software through this icon.

Recommendation :
There is no "Exit" option for this icon, and the reason is that the System Tray is the only place where the software runs from.  So, if you are using Bluetooth devices on a regular basis, leave this task alone – if you want to disable it, however, you can do that through  The Ultimate Troubleshooter.
Bvt BVT.exe

(?)
Browser Event component of the Backdoor.Autoupder virus.

Recommendation :
Immediately update your antivirus software and then run a full virus scan on your PC.

 C

Calcheck

CalCheck.exe

(ULead Systems)

ULead Photo Express Calendar Checker (versions 2 & 3).  This tray icon gets installed when you install the ULead Photo Express software which comes with many scanners.  Ulead’s own description of the Calendar Checker :  “If you create multiple Weekly/Monthly/Yearly calendars to be your wallpaper, Photo Express will replace the wallpaper automatically. Thus there is a calendar checker in Photo Express 2.0/3.0, which checks the dates of the system, and you don’t need to change the wallpaper manually.”.

Recommendation : 
An interesting feature in theory, not so good in practice.  CALCHECK often comes up with errors at boot-up under Windows 2000/XP, particularly XP.  Additionally, it is responsible for very slow boot-up times as it checks whether the wallpaper needs to be switched.  We strongly recommend not using this feature of ULead Photo Express and deleting this entry with  The Ultimate Troubleshooter.

Capfax CapFax.exe

(BVRP Software)
Fax Driver background task installed by BVRP’s Phone Tools and Classic Phone Tools software suites which come bundled with many fax modems. Often found on Gateway PCs.

Recommendation :
Essential if you fax from your PC, otherwise you can disable it with  The Ultimate Troubleshooter.  Note :  there have been problems with CAPFAX – if you experience problems, try downloading some of the patches that have been issued by BVRP Software (you will find BVRP on our Drivers page).
Captainhook CaptainHook.exe

(Novell)
Part of Novell Secure Login v3.x.  At this stage we are not yet sure of its exact role.

Recommendation :
Essential to the proper functioning of Novell Secure Login – Leave alone.
Carpserv CArpServ.exe

(Conexant)
Task installed by the drivers for certain types of 56K HSF SoftK56modems based on the Conexant 11252 chipset.  It can be found on many Gateway PCs.

Recommendation :
We are not sure as to what this task does, so can only recommend to leave it alone.  That said, this startup item will sometimes open up a DOS Windows on startup after a PC has been upgraded to Windows 2000 or XP, or Windows updates were performed.  When this happens, de-installing and re-installing the modem seems to solve the problem.
Ccapp ccApp.exe

(Symantec)
Symantec’s Common Client Application for Norton AntiVirus 2003/4, Norton Personal Firewall 2003/4, and Norton Internet Security 2003/4. This task is, effectively, the "master" task in these products as its role is to call the different program features of the above products.  For example, if Auto-Protect and E-mail Scanning are enabled, then CCAPP makes sure that those programs are running.  If CCAPP is disabled, then Auto-Protect and Email Scanning will not run.

Recommendation :
Leave well alone – this task is crucial to the proper working of your Norton 2003/4 security product.  We recommend, however, that you do a manual LiveUpdate every so often in order to pick up software updates (and not just virus definitions updates) as this task has had a few irritating bugs in the past.
Ccd CCD.exe

(Broadjump Foundation, now Motive.com)
Broadjump’s CorrectConnect Engine – Broadjump is now "Motive".  Software installed with the DSL (ADSL) Connection Manager of many ISPs, amongst them SBC Global, NTL, Telewest. "CorrectConnect is a software solution that automates common support functions such as monitoring, testing and repairing a subscriber's service, thus greatly reducing the need for live help desk support.  By diminishing the time, cost, and complexity associated with providing technical support, BroadJump's CorrectConnect will help ISPs consistently provide a superior standard of service management to their growing base of subscribers. With this tool, ISPs can also send messages directly to their subscribers notifying them about important network maintenance activities or industry information such as software virus warnings.  This information, in certain situations, can then allow the user to take the appropriate steps to avoid that issue.  These specific customer support functions will help ISPs establish an ongoing relationship with their subscribers and further expand a market advantage.".

Recommendation :
This software is DEFINITELY not needed to have a working DSL connection, but it is usually inextricably linked to the connection manager software that you may have installed from your ISP’s disk.  Thus, in most cases, you cannot de-install this software without adversely affecting your DSL connection manager software.  That said, read about CMANAGER further down this page for more details and to see if you want to do anything about this task.  If you de-install your Connection Manager software, you can then elect to de-install CCD.
Ccevtmgr ccEvtMgr.exe

(Symantec)
Common Client Event Manager Service for Norton AntiVirus 2003/4, Norton Personal Firewall 2003/4, and Norton Internet Security 2003/4.  This task is responsible for keeping track of all events that are occurring within the above products and then writing the details of those events to the Activity Log.  The end-user can view the Activity Log through the Reports section.

Recommendation :
Leave alone – essential to the proper functioning of your Norton 2003/4 security product.
Ccmon CCMON.exe

(Stöhmann E+V GmbH)
CAPI Call Monitor System Tray task that is installed by the drivers for some ISDN modems.  It displays two lights in the System Tray which enable the user to monitor the traffic of data going through the ISDN modem.

Recommendation :
We like it.  It is unobtrusive, does not take much memory, and is a very useful visual confirmation of whether data is going through the modem or not. We recommend you keep it.

Ccproxy  (1)

ccProxy.exe

(Symantec)

Common Client Network Proxy Service.  Background task/service (Windows 2000/XP/2003) seemingly introduced by Symantec with the 2004 version of Norton Personal Firewall and Norton Internet Security.  From what we have seen this task seems to be the 2004 version of the  CCPXYSVC  service in the 2003 version of the same products.

Recommendation :
We do not know what this task/service actually does, but we do know it is essential to the proper functioning of the firewall, so leave it alone.

Ccproxy  (2)

CCProxy.exe

(YoungZSoft)

Main component of  CCProxy  the Internet Connection Sharing software from YoungZSoft.  CCProxy enables you to share an Internet connection so that all the PC on a network access the Internet through the PC that is connected to the Internet and which is running CCProxy.  In short CCProxy is an alternative to Microsoft’s Internet Connection Sharing which comes bundled with Windows 98/ME/2000/XP.

Recommendation :

Absolutely essential for the proper working of CCPROXY – Leave alone.

Ccpwdsvc ccPwdSvc.exe

(Symantec)
Common Client Windows Account Validation Service. Task which is part of the Norton 2003/4 security products (AntiVirus, Personal Firewall, Internet Security) and used on Windows 2000/XP/2003.  Although we are not 100% certain, from what we have observed CCPWDSVC is used when you configure the Norton Firewall to only allow access to the Internet to specific users.  When that is the case, and when the Norton Firewall has been configured to check a user’s username and password against the ones defined on the Windows PC, then this task is invoked to validate the password entered by the user who is trying to access the Internet.

Recommendation :
Essential – leave alone.

Ccpxysvc

ccPxySvc.exe

(Symantec)

Common Client Proxy Service.  This task is found in Norton Personal Firewall 2003 and Norton Internet Security 2003 under Windows 2000/XP.  We do not yet know what it does.

Recommendation :
We do not know what this task/service actually does, but we do know it is essential to the proper functioning of the firewall, so leave it alone.  That said, this task is often seen “not responding” on some PCs;  when this happens, start any Norton program and do a  manual LiveUpdate  to pick up the latest software updates (as opposed to virus definitions which are the only item “Automatic LiveUpdates” pick up) – this usually solves the problem.

Ccregvfy ccRegVfy.exe

(Symantec)
Common Client Registry Integrity Verifier.  This is not a Task List item, it is purely a startup task which, on Windows boot-up, checks the integrity of the Windows Registry entries for Norton AntiVirus 2003/4 and Norton Internet Security 2003/4 in case they may have been modified by a hacker or a new as yet unknown virus.  Once done, this task terminates.

Recommendation :
Leave alone – essential to the safety of your PC.
Ccsetmgr ccSetMgr.exe

(Symantec)
Task introduced in the 2004 edition of Norton’s security products (AntiVirus, Personal Firewall, Internet Security).  We do not yet know what this task does.

Recommendation :
In the absence of information about this task, we can only recommend to leave it alone.
Cd_load CD_Load.exe

(Cydoor Desktop Media)
Ad serving software for the Cydoor "adware".  Cydoor Desktop Media specializes in "delivering targeted banner, button, pop-up, or keyword ads and messages".  It markets itself with software developers who include Cydoor within their software :  this enables them to allow you to use the software free of charge while they get revenue through advertisements displayed either within their software, or while you are browsing the Internet.  Cydoor’s website indicates that products such as Opera, Kazaa, iMesh, and JetAudio use Cydoor.  CD_LOAD, part of the Cydoor software, runs in the background to detect the presence of an Internet connection.  As soon as you are connected to the Internet, it downloads ads for you to view.

Recommendation :
Get rid of it. As always :  by connecting to advertising servers and pulling up advertisements, any adware software slows down your Internet connection.  Additionally no-one likes popups or obtrusive advertising which is what we term products like Cydoor.  Banner advertising or side bar advertising on websites is fine, but ads which pop up in your face as extra windows while you browse are an absolute nightmare in our opinion.  You can get rid of Cydoor with SpyBot Search & Destroy which you will find in our Downloads section.  Note :  Getting rid of Cydoor can often totally disable the product that it came with.  That product may be vital to you, so, as an alternative you may want instead to initially disable Cydoor software with  The Ultimate Troubleshooter  while you ascertain which product it came with.
Cdac11ba Cdac11ba.exe

(C-Dilla, bought by MacroVision)
Background task which is an integral part of MacroVision’s SafeCast copy protection software (software which enables other software manufacturers to protect their products from illegal copying).  SafeCast is used in many products such as Intuit’s TurboTax (from version 2002 onward) and quite a few games.

Recommendation :
Leave alone or you may disable the product that came with it.  Note, however, that if you intend to register via the Internet rather than by phone, and if you have a firewall, you may need to enable CDAC11BA to go through your firewall. We have heard reports that CDAC11BA interferes with the use of CD-Writers but have been unable to confirm them.  Note also :  because SafeCast may be in use in more than one product from the same software manufacturer, in almost all cases de-installing the product that came with SafeCast, will not de-install SafeCast – you have to go and manually de-install it yourself through "Add/Remove Programs" in the Control Panel if you are sure you do not have other products using it (de-install anything called C-Dilla, or SafeCast, or MacroVision SafeCast). Lastly, anti-spyware/adware products, like Spybot Search & Destroy and Ad-Aware, may list the SafeCast software as spyware/adware, so make sure you do not have those anti-spyware products remove SafeCast if you know you have products using it (such as Intuit’s TurboTax).
Cdock CDock.exe

(Compaq)
Docking support background task for the Compaq Armada E500 laptop.  This task detects if the laptop is connected to its docking station, and if it is, CDOCK makes certain peripherals available within Windows.

Recommendation :
Essential if you use a docking station, otherwise you can disable it with  The Ultimate Troubleshooter.
Cfd CFD.exe

(Broadjump, now Motive)
Application Client Foundation.  This is the newer name for BJCFD written up elsewhere in these pages.

Please refer to BJCFD.
Cfgdll32

Microsoft Runtime
Cfgdll32.exe

(???)
You have the W32.Randex.BD virus.
Cg16eh CG16eh.exe

(Symantec)
Norton Crash Guard Deluxe.  This program gets installed with Norton Utilities 3.0.

Recommendation : 
Norton Crash Guard is automatically installed with Norton Utilities 3.0 and there is no option not to install it.  If CG16EH causes you a problem, upgrade to the latest version of Norton Utilities.
Cgmenu CGMenu.exe

(Symantec)
Norton CrashGuard Monitor.  Norton CrashGuard is a program which was released in the early days of Windows 95 when users first started to experience the wonderful new world of "Blue Screen" crashes (Blue Screen of Death – BSOD), "Illegal Operations", etc...  The idea behind Norton CrashGuard, and umpteenth other programs of the same ilk from other software authors, was that they would watch out for conditions that might lead to crashes and would either prevent crashes or would at the very least enable the end-user to recover "gracefully" from a crash.  Hmmm!  Well, reality caught up and once it became clear that no program can ever successfully always prevent crashes, companies like Symantec withdrew their products from the market – in the case of Symantec CrashGuard was withdrawn in September 2000 when it was no longer included as part of SystemWorks 2001 (the "official line" is probably different to what we say it is!).

Recommendation :
Norton CrashGuard causes more problems than it ever solves or catches – the list :  startup problems, conflicts with installation programs, freezes, general protection faults, and...  increased system crashes (!!!!!!).  Our recommendation to anyone still running Norton CrashGuard is that they should de-install it (or at the very least disable it within the older versions of Norton Utilities or SystemWorks).

Channelup

ChannelUp.exe
 

See   IWAR.

Chcenter

Chcenter.exe

(IMSI)

Part of the Image Capture module of IMSI’s Hijaak series of graphics software.

Recommendation :  
We do not yet know what this program does, so we can only recommend to leave it alone.

Chkfont ChkFont.exe

(Ulead Systems)
Ulead Photo Express 2 Special Edition Check Fonts program.  This background task is installed by the Ulead Photo Express 2 Special Edition CD that comes bundled with many scanners.  In  The Ultimate Troubleshooter  this task has a Win9x/ME display name of "PE2CKFNT SE".

Recommendation :
We have never been able to find out what exactly this task does, and as a result we have always disabled it with  The Ultimate Troubleshooter  (without any adverse effect).
Chknet CHKNET.EXE

(Microsoft)
Truly ancient item of networking software which used to come with Microsoft’s LAN Manager 2.x Enhanced Workstation software.

Recommendation :
If you are still running this piece of software, then check with your network manager as you are unlikely to still be on a LAN Manager network in 2002, and the presence of CHKNET.EXE probably means an incorrectly configured network card.  CHKNET.EXE in a Win9x/ME environment can result in serious performance degradation.
Chkras ChkRAS.exe

(NetZero)
CHKRAS and ZCAST are two background processes installed by the NetZero software. NetZero is the largest free ISP in the US.  In return for free Internet Access with NetZero, you are required to view advertisements while online.  This is done by means of the NetZero banner advertising window.  CHKRAS and ZCAST ensure that that window is always showing.  If it is not, because you terminated it through terminating CHKRAS, the window is restarted by ZCAST.  CHKRAS also in turn checks that ZCAST is running – if you closed ZCAST, CHKRAS restarts it !

Recommendation :

Interfering with either ZCAST or CHKRAS is in contravention of your agreement with NetZero, so if you want to enjoy free Internet Access through NetZero, you will have to put up with the advertising banner window.
Chotkey CHotKey.exe

MK9805.exe

(Cherry??? / Chicony???)
Background task and System Tray icon which enables the end-user to program keyboard hotkeys.

Recommendation :
If you have programmed keyboard hotkeys, then you need to keep this task running as it ensures that the hotkeys your programmed, will work.  Otherwise you can disable it with  The Ultimate Troubleshooter.
Cidaemon CiDaemon.exe

(Microsoft)
Windows NT4/2000/XP task which is part of the Microsoft Index Server (NT4) or its replacement, the Microsoft Indexing Service (2000/XP).  The Indexing Service is a background process which catalogues files so that you can then do searches for any piece of text across your entire file system, or across a specific range of folders. The Indexing Service works differently on server operating system than it works on desktop operating systems.  On fileservers running Windows NT4/2000-server/XP-server, the Indexing Service, which needs to be set up, configured, and started, is used to construct library catalogues which end-users on the network can then search to find specific documents – in short, it is an Intranet tool. On desktop operating systems (Windows 2000 Professional, Windows XP Home or Professional), the Indexing Service runs by default and simply catalogues in the background all files on your PC so that when you do a "Search for Files or Folders", the results come back much faster as Windows 2000/XP gets its results from the catalogues (indexes) that were built by the Indexing Service rather than through trawling your entire disk for every search you make.

Recommendation :
In most cases you should leave it alone on desktops;  however, there are cases where CIDAEMON runs amok and consumes excessive amounts of memory and CPU and the PC slows down as a result – when that is the case, setting the Indexing Service as a disabled or manual start service in "Services" in the Control Panel (WinNT4) / Administrative Tools (Win2000/XP) should solve your problem.  On fileservers, on the other hand, most problems are resolved with the most recent Support Packs, particularly on NT4 (SP6) and 2000 (SP3).
Cij3p2ps Cij3p2ps.exe

(Compaq from Lexmark)
LXP2PS MFC Application.  This task is installed by the drivers of Lexmark OEM printers re-badged as Compaq printers, such as the Compaq IJ300. While we do not know what this task does, "MFC Application" background tasks tend to be server tasks which provide services to other foreground or background tasks, and which are therefore needed.

Recommendation :
We have only come up against this task once and the printer did not work correctly when we disabled it, exactly as expected given that it is an "MFC Application". We suggest you leave it running.

Cissi

Cissi.exe

(???)

You have the  W32.Cissi.A@mm  virus.

Cisvc CISvc.exe

(Microsoft)
Content Index Service first seen in Windows 2000 Server with Microsoft Index Service 3, and then in Windows XP.  CISVC is a safeguard process which monitors the memory consumption of CIDAEMON above.  If CIDAEMON exceeds 40Mb of memory usage, CISVC automatically terminates CIDAEMON and then restarts it.  This mechanism prevents the PC/Server from reaching a low memory situation and a resulting slow down in processing.

Recommendation :

Leave alone.
Cjstcom Cjstcom.exe

(Canon)
Canon Bubble Jet Status Monitor.  From what we can make out this task sits in the background and relays status information between the printer itself and CJSTLST below, but we are not completely sure about that.

Recommendation :
Since we are not certain about the role of this task, our recommendation is to leave it alone.
Cjstlst Cjstlst.exe

(Canon)
Canon Bubble Jet Printer Monitor, installed by the drivers for some of the Canon Bubble Jet printers (BJC600, BJC1000, BJC6200, etc.) and which sits in the System Tray where it enables the user to monitor print jobs, check ink levels, clean print heads, etc...

Recommendation :
Useful as with modern inkjet printers that is often the only way to check ink cartridge levels.

Clipsrv

ClipSrv.exe

(Microsoft)

Windows NT Clipboard DDE Server.  Windows NT4/2000/XP/2003 service, installed by default as an Automatic service under Windows NT4 but as a Manual service from Windows 2000 onward.  It enables ClipBook Viewer to store information and share it with remote computers.

Recommendation :  
In 2003 there are very few instances, if any, where this service would ever be used.  It is a relic from the Windows LanManager and NT 3.5 days and is available purely for backward compatibility purposes – it has been replaced by other technologies.  If it is not already set to Manual, set it to Manual through  “Control Panel \ Services”  in Windows NT4,  or through  “Control Panel \ Administrative Tools \ Services”  in Windows 2000/XP/2003.

Clipsync ClipSync.exe

(Zita Farm Ltd)
ClipSync is an extremely useful piece of software which enables the user to transfer text, images, and memos via the Windows clipboard and Hotsync to their Palm device running Palm OS.  It runs as a background task.

Recommendation :
Essential if you use ClipSync.
Clrschp038 ClrSchP038.exe

(???)
See STCLOADER elsewhere in these Task List pages.
Cmagent CMAgent.exe

(Cybermedia Inc, now McAfee)
Definitely a Cybermedia program which we believe to be part of First Aid 98.  Read FA_GD32 for more details.

Recommendation :
CMAGENT is often responsible for illegal operations, particularly on Windows 95/98 PCs that have had various software upgrades since the demise of Cybermedia (such as Internet Explorer upgrades, DirectX, Windows Update, etc...).  Thus, if after reading FA_GD32 you decide not to de-install First Aid 98, you should at least disable this background task with  The Ultimate Troubleshooter.
Cmanager Cmanager.exe

(SBC ???)
Connection Manager application for the SBC Yahoo DSL Internet access service.  The Connection Manager enables you to start and connect your SBC Yahoo DSL connection.  Note : Connection Manager is often bundled with Broadjump’s CorrectConnect (CCD.EXE).

Recommendation :
PC lock-ups, high CPU usage, and slow Internet connection are the main problems we have seen reported for this task, which beggars belief as we would have expected any ISP to ensure that the software they give their end-users would make their DSL service feel so fast and reliable that the users would recommend it to others.  Not a bit of it here !  If you are technically advanced and know how to set up a dial-up connection to SBC Yahoo DSL, de-install Connection Manager via the "Add/Remove Programs" icon in the Control Panel and set up your connection manually instead.
Cmcp16 CMCp16.exe

(CyberMedia Inc, now McAfee)
Background task that is part of the CyberMedia First Aid 98 suite of programs.

Recommendation :
Often responsible for Windows Explorer crashes on PCs that have had various software upgrades/updates since the demise of CyberMedia (such as Internet Explorer, DirectX, Windows Update, etc...).  Read FA_GD32 for more details about First Aid 98 software.
Cmesys Cmesys.exe

(Gator)
Background program which is part of the Gator GAIN software (Gator Advertising and Information Network).  Gator GAIN is what we call adware (advertising spyware).  Gator GAIN is used by software manufacturers to enable them to offer you the FREE use of their software – instead, they receive advertising revenue through the advertisements displayed by the Gator GAIN add-on whenever you are using their software.

Recommendation :
We are against all adware.  Download SpyBot Search & Destroy from our Downloads area and use it to remove Gator and any other adware or spyware.  Note, however, that in some cases removing adware will totally disable the application which installed it, and this maybe an application which is important to you, so you may want to initially only disable this with  The Ultimate Troubleshooter  while you ascertain how Gator Gain got into your PC.
Cmgrdian CMGrdian.exe

(McAfee)
McAfee System Tray icon in pre-version 6 releases of the product which enables you to access all the McAfee AntiVirus features.

Recommendation :
Down to end-user preference.  You can disable it with  The Ultimate Troubleshooter.
Cmmon32 Cmmon32.exe

(Microsoft)
Microsoft Connection Manager Monitor. Little known Microsoft program on which there is no documentation.  We have only ever seen it used in conjunction with the Internet dialler provided by some ISPs – we still do not know what it actually does.

Recommendation :
There seems to be a definite impact on the performance of the PC when this background task is running.  We do not have a specific recommendation yet, but in our case, whenever we have terminated the task the PC’s performance has improved, the Internet connection has stayed up, and we have observed no consequences as a result of terminating CMMON32.
Cmmpu CMMPU.exe

(C-Media Inc)
C-Media’s MPU-401 Emulator for MIDI driver for the CMI-8330 and CMI-8338 C-Media chipsets.

Recommendation : 
This is a Windows 95 only driver, and is necessary only under Windows 95.  If you are running a later version of Windows and are not experiencing any problems with sound or CMMPU, then leave it alone.  Otherwise de-install the drivers, then delete CMMPU with  The Ultimate Troubleshooter, and finally go through the DRIVERS section of this website to download more up-to-date C-Media drivers.
Cnfrm CNFRM.exe

(???)
You have the W32.Mimail.D@mm virus.
Cnxdsltb CnxDSLTB.exe

(Conexant)
Conexant DSL TaskBar Application.  System Tray icon which shows the connection status of your Conexant AccessRunner DSL modem (your modem may be re-badged under a different manufacturer’s name, but still be based on the Conexant chipset).  The icon has two green LEDs which show the traffic of data.  You can also double-click on the icon to disconnect and re-connect your modem from the ADSL signal (as a different process from connecting to and login in to your ISP’s server).

Recommendation :
We feel it is quite reassuring to have the data traffic LEDs showing, particularly when troubleshooting an ADSL problem, so we ourselves tend to always leave this task enabled.

Combobutton

ComboButton.exe

(Maxtor)

Maxtor’s OneTouch Detection background task installed with the software for Maxtor’s  OneTouch  range of USB and FireWire backup drives.  This task detects when the user has pressed the  Backup  button on the drive and immediately activates the Maxtor backup software  (a rebadged version of Dantz’s Retrospect Backup software)  to start the relevant backup.

Recommendation :
Essential if you want your OneTouch Maxtor backup drive to work exactly as designed and expected.

Companion

AOL companion

Companion.exe

(AOL)

AOL Companion.  AOL startup task which brings up a mini-AOL screen from which you can access all AOL programs and functions.  First introduced with AOL 8.0.

Recommendation :  
There is nothing good we can say about this task as it is responsible for an interminable wait at boot-up from the moment that the  START  button appears till the time you can actually use your PC.  And when you can start using your PC, absolutely everything runs slowly when this application is around – shocking.  Since, in addition to the Companion, the installation of AOL also installs a System Tray icon which enables the user to call AOL programs, we cannot understand why AOL thought it a good idea to introduce this terrible task.  Disable immediately either with  The Ultimate Troubleshooter, or by clicking on  Settings  on the mini‑screen and unchecking  Autolaunch AOL Companion  that comes up when you choose Exit.

Comsmd COMSMD.exe

(3Com)
3Com Tray icon installed by the drivers for the 3Com 3C9xx series of network cards.  That tray icon gives you access to various 3Com diagnostics for your 3Com network cards.

Recommendation :
A waste of time, it just adds to the clutter and sometimes is actually the cause of [minor] boot-up errors on NT4.  Disable or Delete with  The Ultimate Troubleshooter.

Comsocks

ComSocks.exe

(Linkbyte)

ComSocks Internet proxy/NAT and simple firewall program.

Recommendation :
Essential.  Leave alone.

Config32

Config32.exe

(LGS/Telegraphics)

System Tray icon installed by the drivers for some Internet mice, notably Mitsumi.  It enables the end‑user to configure the buttons on the mouse as well as other aspects of the behaviour of the mouse.

Recommendation :
Down to end-user preference.  Most users simply use their mouse in its default configuration and never bother with the more advanced functions that their mouse is capable of – for these users this System Tray icon is of little or no use and can be disabled on the  Startups  tab of  The Ultimate Troubleshooter.  Note that in 2004 these LGS/Telegraphics’ mouse drivers are no longer supported and may not work properly on versions of Windows that are more recent than Windows 95 and Windows 98 (original edition).  Thus, for Windows 98SE or later, our advice is to de-install these drivers altogether via the  “Add/Remove Programs”  icon in the Control Panel (look for XMOUSE drivers) and to delete this entry from the  Startups  tab of The Ultimate Troubleshooter if it still remains after the de-installation of the drivers.

Conmgr ConMgr.exe

(Earthlink??)
Internet Access Connection Manager used by some ISPs, most notably Earthlink.  CONMGR is installed if you run the Earthlink installation CD to set up your Earthlink connection.  Advanced users will normally set up their Internet connection without running the installation CD and so will never see CONMGR in their Task List.

Recommendation :
Depending on which version of the Earthlink installation CD you have, CONMGR is often configured to start as Windows starts, often resulting in extremely annoying behaviour where it is constantly trying to connect to Earthlink even though you might not want to.  If you have such problems, disable CONMGR with  The Ultimate Troubleshooter  and simply double-click on the Earthlink icon on your desktop whenever you want to connect.
Couponica Couponica.exe

(??)
As of 12-Apr-2003, where we do not as yet have detailed information about this task, it looks like this task is adware.

Recommendation :
Use either Ad-Aware or SpyBot from our Downloads section to see if it gets removed (update either product online before running it).
Cpdclnt

Cpd
CPDClnt.exe

CPD.exe

(McAfee)
Background task from the ConSeal Private Desktop Firewall which was originally developed by Signal9 Solutions.  McAfee acquired Signal9 Solutions in 1999 and ConSeal Private Desktop became McAfee Personal Firewall.  CPDCLNT/CPD implements the firewall security features (CPDCLNT in some versions, CPD in newer versions).

Recommendation :
We have had repeated reports of CPDCLNT "not responding" and blue screens seemingly traceable to CPDCLNT.  We also have definite reports of CPD, the newer incarnation, generating run-away CPU usage of 90%+ as well as total consumption of memory, resulting in a major slow-down or virtual freeze of the PC.  Since a good firewall is crucial nowadays, if you experience such problems try updating your McAfee Personal Firewall – that may just solve the problem.  If it does not, and you have the latest updates, and McAfee cannot help, then change to a different firewall as you cannot take the risk of running without a firewall.
Cportpatch CPortPatch.exe

(Dell???)
We have no idea as to what this task does except that we have only ever found it on Dell laptops.

Recommendation :
We can only recommend to leave it alone as we do not know what it does.
Cpqeadm CPQEADM.exe

(Compaq)
See CPQEAUI below.
Cpqeaui

CPQ EasyAccess Buttons Support
CPQEAUI.exe

(Compaq)
CPQEAUI, CPQEADM, EACLEAN, and BTTNSERV, are all part of Compaq’s EasyAccess Button Support which enables you to program the extra "Easy Access keys" on the Compaq multimedia keyboards.  Without these tasks you will not be able to use those extra keys.

Recommendation :
If you decide to use a keyboard other than your Compaq multimedia keyboard, then disable CPQEAUI, CPQEADM (if present), and EACLEAN in  The Ultimate Troubleshooter, as they will no longer be of any use to you.  If, however, you are replacing the Compaq multimedia keyboard with another type of multimedia or specialist keyboard, such as the Microsoft Internet keyboard, the Microsoft Ergonomic keyboard, or some of the Logitech or Kinesis multimedia/internet keyboards, then it will become necessary that you disable the above two tasks as they will otherwise interfere with the proper working of your new keyboard.
Cpqek CPQEK.exe

(Compaq)
Part of the early versions of Compaq’s Easy Access Button Support software (version 1.x) which enables you to program the extra "Easy Access keys" on the Compaq multimedia keyboards.

Recommendation :
Disable with  The Ultimate Troubleshooter  if you do not use the Easy Access Buttons.
Cpqnpcss Cpqnpcss.exe

(Compaq)
Related to Compaq.Net, Compaq’s own Internet Service introduced in 1999.  Aside from that we do not know for certain what this task does.

Recommendation :
If you do not subscribe to Compaq.Net, you can definitely disable or delete this task with  The Ultimate Troubleshooter.
Cpunumber Cpunumber.exe

(Compaq)
Intel Pentium 3 Serial Number Blocker.  This background task which can be seen on Pentium 3 based Compaq PCs and laptops, prevents programs from obtaining the serial number of your Pentium 3 CPU.

Recommendation : 
Leave alone – no known conflicts.
Crashmon Crashmon.exe

(CyberMedia Inc, now McAfee)
Crash Monitor background program part of the CyberMedia First Aid 98 suite of programs.

Recommendation :
Read CGMENU, the Symantec equivalent, but most of all, FA_GD32, to see what we feel about such software.
Crauto Crauto.exe

(Paragon Software)
Background task of the Paragon Encrypted Disk software which enables you to have encrypted virtual hard disks to store sensitive data.  It auto-mounts encrypted virtual disks at boot-up and also provides the right-click "Mounting" Encrypted Disk option in Windows Explorer.

Recommendation :
Although not entirely necessary in theory, in practice this task is essential for anyone who uses Paragon Encrypted Disk regularly, so we recommend you leave it alone.

Createcd

CreateCD.exe

(Adaptec / Roxio)

System Tray icon for Adaptec Easy CD Creator.  This icon enables you to start Easy CD Creator from the System Tray.

Recommendation :
This task often gets in the way of other Windows programs which need to use the CD‑Writer, yet you can start Easy CD Creator through  “Start \ Programs”.  Delete on the  Startups  tab of  The Ultimate Troubleshooter

Createcd50

CreateCD50.exe

(Roxio)

This is either the Roxio Project Selector System Tray icon for Roxio Easy CD Creator 5, or you have the Project Selector window currently open.  The System Tray icon enables you to either start the Project Selector through a double-click, or to choose a particular Easy CD Creator task through a right-click.  The Roxio Project Selector itself, when open, is an easy to use menu which prompts the user as to what he wants to do – create a CD or DVD, data or music or video, or copy a CD – and then starts Easy CD Creator in the appropriate mode.

Recommendation :
If this item shows on the  Startups  tab of  The Ultimate Troubleshooter  then it is down to your own preference – if you are totally at ease with Easy CD Creator and on how to use it in different modes, and do not feel you need the Project Selector as a  “mode chooser”, then reduce System Tray clutter and disable this icon by right-clicking on it in the System Tray and then choosing  Disable Project Selector Icon.  You can re‑enable the icon by starting the Project Selector through  “Start \ Programs \ Roxio Easy CD Creator \ Project Selector”  and then clicking the icon in the top left corner of the Project Selector and choosing  Icon in System Tray.

Creative Launcher CTLauncher.exe

(Creative Labs)
This is the Creative Launcher toolbar which is installed with the drivers for some of the Creative sound cards.  When active the toolbar appears every time you take the mouse to the top of your screen and you are then presented with a toolbar which enables you to launch some of the Creative audio programs.

Recommendation : 
This is the most irritating toolbar ever – the toolbar appears when your mouse nears anywhere the top of your screen, and it overlays the whole area at the top of your screen (till you realise you may be able to move it).  This means you cannot close programs, you cannot minimize them, etc...  What an irritant !!  Delete or Disable with  The Ultimate Troubleshooter  – you can launch all those audio programs from Start \ Programs.

Crypserv

CrypServ.exe

(CrypKey (Canada) Inc, formerly Kenonic Controls)

Background server task/service for the CrypKey Software Licensing System.  If you have this task running on your PC it is because you are using software which is protected against piracy through CrypKey (Canada)’s  CrypKey  software protection system.

Recommendation :  
Essential for the proper operation of one of the programs that you use – Leave alone.  If you terminate this task/service, one of the programs you are currently using will not work.

Csinject CSInject.exe

(Symantec)
Component of the Norton Clean Sweep software.  In our experience CSInject is sometimes incompatible with other software, and at other times causes serious performance problems, if not outright crashes.

Recommendation :
 
Disable using  The Ultimate Troubleshooter.
Csinsm32

Csinsmnt
Csinsm32.exe

CsinsmNT.exe

(Symantec)
Norton Clean Sweep Install Monitor.  It monitors the installation of programs on your PC so that it can fully de-install them when you decide to de-install them.  CSINSM32 is the Windows 9x/ME task while CSINSMNT is the Windows NT4/2000/XP task.

Recommendation :
The purpose of programs like Clean Sweep is that they run in the background and "kick in" as and when required, obviating the need for the end-user to remember to use them.  So, although you could run this program via "Start \ Programs", we recommend leaving it alone if you are happy with Norton Clean Sweep.

Csksvr

Csksvr.exe

(LinkByte)

ComSocks Service on Windows NT4/2000/XP.  This service is installed by the  ComSocks  Internet sharing (via NAT) and firewall software.

Recommendation :
Absolutely essential for the proper functioning of ComSocks – Leave alone.

Csrss  (1)

Csrss.exe

(Microsoft)

Windows NT4//2000/XP/2003 only.  CSRSS is the Client Server Runtime SubSystem.  CSRSS is started by SMSS.  When the user application makes a Win32 API call, it is usually CSRSS which communicates with the operating system’s Kernel to execute the API call.  CSRSS is also known as the Win32 Subsystem.

Recommendation :
An integral part of the operating system, leave alone.

Csrss  (2)

BagleAV

Key Logger

Csrss.exe

(???)

You have the   Trojan.Gutta   or   W32.Netsky.AB@mm   or   W32.Buchon.A@mm   virus if you have Windows 95/98/ME or if the full path to this program is  either  C:\Windows\csrss.exe  or  C:\WinNT\csrss.exe.

Css_1630

CSS_1630.exe

(Authentium)

One of the central programs of the  Command AntiVirus  software for Windows NT4/2000/XP.

Recommendation :
Essential to the proper functioning of your Command AntiVirus software – Leave alone.

Css-avs

CSS-AVS.exe

(Authentium)

CSS AVScheduler Service of the Command Antivirus software.  This service runs scheduled antivirus scans of the hard disk using the  F-PROT32.EXE  program.

Recommendation :
Down to end-user preference.  If you do not have any schedules defined for antivirus scans of your system, then you can set this service to  Disabled, otherwise leave it alone.

Ctdvddet

CTDVDDet.exe

(Creative Labs)

Background task installed when you install the full suite of software for Creative’s  SoundBlaster Audigy 2  soundcards.  This task detects the insertion of a DVD in your DVD drive and starts up Creative’s DVD Audio.

Recommendation :
If you do not have a DVD drive, you can disable this task straightaway on the  Startups  tab of  The Ultimate Troubleshooter, otherwise this is down to end-user preference.  For the record, in our case, because of our generally troublesome historical experiences with Creative background CD detection tasks over the years, in April 2004 we still always disable this task.

Ctfmon  (1)

CTFMon.exe

(Microsoft)

CTFMon comes with Microsoft Office XP and Windows XP – it activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar.   As long as the  Text Services & Speech  are enabled in the Control Panel, this program will force itself back into your list of background programs.

Recommendation :
Disable  “Text Services & Speech”  in the Control Panel if you are not using them.  Then, disable CTFMon using Startup Manager.  (Note that if you use Word, Excel or PowerPoint to write in different languages, eg. English and Arabic, then you will be using  “Text Services & Speech”  facilities).

Ctfmon  (2)

Ctfmon.dll

(???)

You have the   W32.Mydoom.B@mm   virus.

Cthelper CTHelper.exe

(Creative Labs)
CTHELPER is a background task that is a plug-in manager for Creative drivers.  It first appeared with Creative’s SoundBlaster Live and Audigy soundcards.  The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities.  One of the very first uses of this interface has been for InterVideo’s WinDVD in the shape of a fix called "WinDVDPatch" and, at the time of writing 12-Jan-2003, there have not been other uses for it yet.

Recommendation :
Given its purpose CTHELPER would normally be classified as a "leave alone" background task.  Unfortunately, as with many other Creative background tasks in these pages, there are often problems with CTHELPER.  The most common complaint is random excess CPU utilization, up to 100% !  We have also had complaints of PCs freezing when CTHELPER is around, although that is probably also 100% CPU utilization.  Additionally, on PCs running Intel’s Pentium 4 Hyper-Threading CPUs, the sound stutters.  In short :  CTHELPER is far more trouble than it is a help.  Disable with  The Ultimate Troubleshooter.

Ctltray

CTLTray.exe

(Creative Labs)

System Tray icon installed by the drivers for Creative SoundBlaster Audigy soundcards.  This icon enables you to access some of the Creative utilities that get installed at the same time, and it also allows you to configure some of your soundcard settings (volume, equalizer, effects, etc...).

Recommendation :
While this task does not cause problems for many users, we ourselves do not trust it as our own experience on a number of PCs (but not all) is one of boot‑up errors with  CTLTRAY  complaining that the soundcard is not installed properly when it actually is installed properly and works !   Since very very few users have a need to tweak their soundcards on a regular basis, if ever, we disable or delete this task on the  Startups  tab of  The Ultimate Troubleshooter.  The features available via this System Tray icon can all still be accessed through the  “Start \ Programs \ Creative...”  program group and through the Creative SoundBlaster icon that gets installed in the Control Panel.  Your choice !

Ctmix32 CtMix32.exe

(Creative Labs / Creative Technology)
System Tray Mixer which gets installed by the drivers for some of Creative Labs’ soundcards.  When present it goes and replaces the standard Windows mixer (Yellow speaker in Win9x/NT4/ME/2000, Black speaker in WinXP) and enables the user to change settings specific to his Creative soundcard (in addition to the standard mixer and volume settings).

Recommendation :
In our experience there have been problems with CTMIX32 throughout its history, from some features not working, to KERNEL32 errors, illegal operations, the lot !  If you like it, and it does not give you problems, fine.  If on the other hand you are having recurring problems with it, see if you can disable it with  The Ultimate Troubleshooter.  If you cannot, then the likelihood is that it is installed as your default Windows Mixer, in which case editing of the Registry is required – before you do that, however, see if the latest drivers for your soundcard get rid of your problems.
Ctnmrun CTNMRun.exe

(Creative Labs)
Creative’s Nomad Detector.  This is a System Tray icon which automatically starts the Creative PlayCenter 2.x software whenever you power on your Nomad Jukebox (connected to your SoundBlaster Live soundcard).

Recommendation :
Down to end-user’s preference.  If CTNMRUN is not running, you will have to start PlayCenter manually but you will still able to access your Nomad Jukebox through it.  If you experience errors with CTNMRUN, as some users do, then do disable it with  The Ultimate Troubleshooter  or right-click on the icon in the System Tray and uncheck "Enable Nomad Detector".
Ctnotify CTNotify.exe

(Creative Technology)
"Disc Detector" from Creative Technology.  This System Tray icon gets installed with the drivers of some of the Creative Sound Cards and, wait for it, detects when you insert a CD !

Recommendation : 
This is the worst type of System Tray software – a useless program which causes problems to end users.  In every single case that we have ourselves seen this program in the Task List, the end-user could not use the Windows CD Player (Win95/98) or the Windows Media Player (WinME/2000) to play music CDs.  No sound would come out.  In some cases the mere presence of this task prevented any sound coming out of the ..... Creative sound card !!!  Software this bad defies belief.  Delete with  The Ultimate Troubleshooter.
Ctsvccda CTsvcCDA.exe

(Creative Technology)
Creative Services for CD-ROM Access.  This background task gets installed by the Windows 9x/ME drivers of some Creative SoundBlaster soundcards.  It also sometimes gets installed, in error, on Windows 2000 by non-driver related Creative software suites, such as Creative Jukebox, etc..

Recommendation :
With modern CD-ROM drives (36-speed and above) this task is of no use to any system, so we recommend you disable it with  The Ultimate Troubleshooter  and let Windows handle everything to do with your CD-ROM drive.  If you have just upgraded from Win9x/ME to Windows 2000/XP, this task (converted to a service during the upgrade) will give you endless error messages.  Disable it by setting it to Manual in "Control Panel \ Administrative Tools \ Services" – even better still, remove that service.

Ctsysvol

CTSysVol.exe

(Creative Technology)

System Tray Volume Control icon installed by the drivers for Creative  SoundBlaster Audigy 2  soundcards and which replaces the standard Windows volume control.  You can double-click on it to bring up the Creative mixer controls, or you can right-click on it to access some of the more advanced features.

Recommendation :
Down to end-user preference.  Gamers may experience the odd conflict between this task and some of their games.  If that is the case, simply disable this task on the  Startups  tab of  The Ultimate Troubleshooter.

Cusrvc

Cusrvc.exe

(Novell)

Novell Client Update Service.  First introduced with version 4.90 SP1 of the Novell Client for Windows NT4/2000/XP (For the layman :  the Novell Client is the software which allows you to logon to your Novell server through the red Username & Password dialogue box, and which allows you to use your Novell network to its full capabilities).  This service, which by default starts automatically at Windows boot-up, implements the settings set on the  Update Agent  tab of the Properties for the Novell Client in  Network Connections.  It takes care of downloading updates to the Novell Client, if you have configured it to do so, prompting you for the installation of the updates and/or installing the downloaded updates.

Recommendation :
Another dreaded automatic update feature.  Apart from antivirus and firewall software, our position on automated software updates is :  Never.   Buggy updates have the potential of totally crippling a PC that was previously working absolutely fine.  A case in point, in our experience, was version 4.83 SP2 of the Novell Client for Windows NT4/2000/XP which we had to uninstall and replace with 4.83 SP1 within an hour of first installing it !   Imagine the nightmarish scenario of having 5 or 6 software products on your PC all set to automatically update themselves and coming one morning and finding your PC just does not work – it may take you hours before you start thinking that the problem may have been an automated update, and when you do, which one was it ?   As you will have gathered by now, our recommendation is that you do not set the Novell Client to auto-update, and that you set this service to  Disabled  in  “Control Panel \ Services”  in Windows NT4  or  “Control Panel \ Administrative Tools \ Services”  in Windows 2000/XP.  Look for the service called :   Client update service for Novell.  Manually download updates as and when you actually need to, or when you want to bring yourself up to date, but always keep a copy of the client you are replacing, just in case.......!

 D

Dad8 DAD8.exe

(Corel)
Corel’s Desktop Application Director 8. System Tray icon installed with Corel WordPerfect Suite 8 and which enables you to access from the System Tray all the programs within the Corel Suite :  WordPerfect, Quattro Pro, Presentations, Address Book.  You can right-click on the DAD8 icon bank in the System Tray to customize it to include other programs, or to reduce the number of programs that it shows.

Recommendation :
Down to end-user preference.  Note, however, that it is not uncommon for DAD8 to cause illegal operations, or other errors, on boot-up.  If this is your experience, make sure you install Service Pack 7 for WordPerfect Suite 8, available on the Corel website.  If that still does not cure the problem, then do not waste time fighting the problem, disable DAD8 with  The Ultimate Troubleshooter  and configure the various applications either onto your Start Menu or onto your Quick Launch taskbar toolbar depending on your personal preferences.
DadApp DadApp.exe

(Dell)
Dell AccessDirect Applet. Background task found on Dell laptops and which implements the programmable buttons that you can set up for your laptop.  The setting up of those buttons is done via the Access Direct software which you can start either from the Dell Applications icon in the Control Panel, or from the Dell AccessDirect icon in the System Tray (DADTRAY).

Recommendation :
Unless you see yourself using the programmable keys, you can disable this task with  The Ultimate Troubleshooter. Note, however, that once you disable it, if you decide at a later stage to re-enable it you will in most cases need to program again your programmable keys with the Access Direct software as in our experience the settings seem to get lost when DADAPP is disabled.
Dadtray DadTray.exe

(Dell)
Dell AccessDirect Tray.  System Tray icon which enables you to run the "programmable keys" Access Direct software from the System Tray. Read DADAPP above for more details.

Recommendation :
As per DADAPP above.
Daemon14 Daemon14.exe

(Microsoft)
Program which is part of Microsoft’s Strategic Commander game and which seems to be related to the handling of the joystick.

Recommendation :
As we do not yet know the full facts on this task, we can only recommend to leave it alone.
Damon DAMon.exe

(Dell)
Dell Alert Monitor which is part of the Dell Support software suite.

Recommendation :
We do not yet know what DAMON does exactly as, at the time of writing, 3-Aug-2003, getting information on this task from Dell Support Technicians or their Knowledgebase has been like squeezing water out of a stone.  But we do know two things :  it tries to communicate with specific servers on the Internet, and on some PCs its very presence can result in startup problems, or programs not opening up when you try to open them.  In-house our view is very clear on this one :  that is the first item we get rid of !  You can try disabling it with  The Ultimate Troubleshooter, but that often does not get rid of it coming up.  The best way to get rid of this task is to de-install "Dell Support" through the "Add/Remove Programs" in the Control Panel – you will still be left with the valuable Dell Solutions Center.
Dap DAP.exe

(SpeedBit Ltd.)
Download Accelerator Plus which runs in the System Tray once it has been started.

Recommendation :
Because of what it does we feel that the System Tray is indeed where Download Accelerator should be minimised to, so leave it be.

Datalayer

DataLayer.exe

Datala~1.exe

(Nokia)

Nokia Data Layer Module support task that is needed by  NCLTRAY  and by the Nokia Connection Manager for either to work properly.

Recommendation :  
Whatever you do with  NCLTRAY, you should do with this task.  If, for example, you decide to terminate  NCLTRAY  because it is causing conflicts with other communications programs, or with your laptop docking station or touchpad, as it sometimes does, then you should also terminate  DATALAYER, and SERVICELAYER,  to ensure that all the conflicts disappear.

Datemanager DateManager.exe

(The Gator Corporation)
You are browsing the web.  Suddenly something pops up in the middle of your screen.  Annoyed you hurriedly check for a Cancel button.  There is no Cancel button,  and the wording seems to indicate that the popup popped up as a result of something you did, something you wanted, so you click OK, again in a hurry.  You’ve been "got".  Through one of their clever popup ads The Gator Corporation have managed to trick you into installing Date Manager, Precision Time, and their adware (in this context we call "adware" software which communicates back to an advertising server and pops up advertisements as you are browsing the Internet).  From now on your browsing experience becomes an absolute nightmare of endless advertising popup windows.

Recommendation :

Date Manager is actually a nifty piece of software – a well designed System Tray calendar with a reminder facility.  However, we object to end-users being tricked into installing software without realising that that is what is happening.  And when that software also installs adware, then it becomes totally unacceptable.  Worse still, programs randomly stop responding temporarily with this software installed, and then start working again.  This is software we hate !  De-install "Date Manager" and "PrecisionTime" from the "Add/Remove Program" icon in the Control Panel, then download SpyBot Search & Destroy from our Downloads section and run it to get rid of the Gator adware  (Note :  at the time of writing, 3-June-2002, the de-installation process connects you back to the Date Manager home page and then displays "You have now un-installed Date Manager /Precision Time" !!  Unreal.).
Datray DATray.exe

(Ken Foster)
System Tray icon for the DeskTop Architect desktop themes management software.

Recommendation :
If you use Desktop Architect, the most convenient way to access all its functions is via this System Tray icon, so we suggest you keep this background task.
Davcdata DavCData.exe

(Microsoft)
HTTP-DAV Common Data application.  We do not yet know what this does except that is linked to Internet services on, seemingly, Windows 2000/XP/2003 platforms only...

Recommendation :
As we have no idea yet as to what it does we can only recommend to leave it alone.
Dbserver DbServer.exe

(gravis.com)
Gravis AppAware Loader.  Background task loaded by the drivers for your Gravis game controller, joystick, or game pad, and which implements the controller, joystick or game pad button configurations that you set up and configured.

Recommendation :
Essential for the use of your Gravis game hardware – leave alone.
Dcfssvc DcFsSvc.exe

(Kodak)
Kodak DC (Direct Connection) File System Driver.  Part of Kodak Digital Camera software.  All information which follows is courtesy of extensive research by AnswersThatWork users.  DCFSSVC is essential to the operation of the Kodak digital cameras that it is associated with.  It runs in the background and fools the operating system into thinking that the camera connected to the PC via the USB port is in fact a hard disk drive, thereby allowing the end-user to transfer pictures from the camera to his PC.

Recommendation :
Essential to the proper interfacing of your Kodak camera with your PC.  However, DCFSSVC interferes with drive imaging software such as PowerQuest’s Drive Image, Symantec’s Norton Ghost, or StorageSoft’s ImageCast, as these packages get confused when trying to figure out what type of hard drive they are dealing with.  If you intend to use any drive image software, disable DCFSSVC with  The Ultimate Troubleshooter, then reboot your PC before using the drive image software.
Ddcman DDCMan.exe

(Wild Tangent)
Digital Distribution Channel Manager.  This task is installed with Wild Tangent’s GameChannel software.

Recommendation :
This task is often responsible for startup and shutdown errors, and also slow boot-ups – we recommend its de-installation via "Add/Remove Programs".  However, read first about GAMECHANNEL elsewhere in these pages before making up your mind.
Ddhelp DDHelp.exe

(Microsoft)

Microsoft’s DirectDraw Helper – DirectDraw is a component of DirectX.  DirectX is a Windows technology which enables higher performance in graphics and sound when you are playing games, watching videos, or using some graphics software packages.  DirectX does this by providing software writers with a platform (a programming layer) which enables them to access all the advanced features of modern graphics and sound cards (3D rendering, 3D sound, audio effects, graphics acceleration) without having to write code specific to every single graphics or sound card out there – all the software manufacturer needs to do is specify, for example, that this game will only run on a 32Mb 3D graphics card.  DirectDraw is a major component of the DirectX architecture and is effectively the "interpreter" between the software you are running and the display driver for your graphics card.  Under Windows 95/98/ME DirectDraw is loaded into memory and managed by DDHELP.  DDHELP runs as a transparent process – you can only see it through a program like  The Ultimate Troubleshooter.

Recommendation :
Essential – leave alone.

Deam

Deam.exe
 

See IWAR.
Defwatch DefWatch.exe

(Symantec)
Norton’s Definitions Watch Service for Norton Corporarte Edition (NAVCE) on Windows NT4/2000/XP platforms.  DEFWATCH monitors the VirusDefs folder for new virus definitions or older virus definitions (rolled back) and upon detection of a change starts the Defwatch Wizard which will attempt to repair quarantined files as well as do the other tasks defined in the Defwatch Wizard.

Recommendation :
Essential – leave alone.
Delay

Delayrun
Delay.exe

Delayrun.exe

(John Hysted ???)
Used to delay the start of an application which loads automatically as Windows loads. In our experience this program is found solely on HP Pavilion PCs.  HP’s own description :  "This program is a program that is used to help prevent conflicts or timing issues on fast computers. Do not prevent from starting".  Although we may be wrong, we feel this program may be an adaptation of John Hysted’s free DELAYRUN which was written so as to be run from RunServices where it gave his system a few more seconds to actually display the password box before Microsoft’s TweakUI would try to automatically fill in the password on the logon screen.

Recommendation :
If HP put it there, leave it. Someone at Hewlett-Packard had very good reasons for doing so.

Delldmi

DellDMI.exe

(Dell)

Dell’s  DMI Service Provider  service.  A DMI Service Provider layer task/service is needed for DMI system management software (Dell’s OpenManage software suite in this case) to be able to access DMI enabled hardware.  In layman terms, the DMI Service Provider is the interface between the System Management software and the hardware items being managed.

Recommendation :
This service is crucial to the proper operation of the  ACTIONAGENT  and  EVENTAGT  services of the Dell OpenManage software.  Thus, if you use Dell’s OpenManage software, you need this service running, otherwise you can disable it by setting its startup mode to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.

Desk98 Desk98.exe

(ATI Technologies)
Part of the Hydravision software that comes with some of the ATI Radeon cards.  The Hydravision software enables users to use two monitors as one;  it also allows the user to have different virtual desktops which behave differently, and to switch between each desktop via the software’s System Tray icon.  That System Tray icon is Desk98.

Recommendation :
Unless you use some of the above features, disable DESK98 with  The Ultimate Troubleshooter.  Some of the early versions cause illegal operations (if that’s you, upgrade to the latest version of Hydravision), and all versions sometimes exhibit conflicts when the user prints to HP or Lexmark printers.

DeskAdKeep

DeskAdKeep.exe

(???)

Nightmarish adware which has appeared on the scene in January 2005.  This program is responsible for endless popup and popunder advertisements and a slow Internet connection.  At the time of writing, 8‑Jan‑2005, we do not know much more about it except that it is most definitely picked up through file sharing activities, particularly if using KaZaA.  In all cases that we have seen thus far the PC is also infected with other adware, spyware, and, worse, viruses.

Recommendation :  
Get rid of this pest as follows :

1)  Restart your PC into Safe Mode by pressing  F8  continually after turning your PC ON till you get a menu where  “Safe Mode”  is one of the options  (you  must  start your PC in Safe Mode as you will not be able to remove this program in any other way).

2)  Go to  “Add/Remove Programs”  in the Control Panel and see if there is a  “DeskAd ....”  entry.  If there is, remove it.

3)  Go to the  Startups  tab of  The Ultimate Troubleshooter  and for  DESKADKEEP  and  DESKADSERV, do the following in turn :  right-click and choose  Delete from the hard disk the file that this Startup points to;  next, right-click on the entry again and this time choose  Delete this Startup Entry.

4)  Click on the big green  APPLY  button to make your changes stick.

5)  Start  Windows Explorer  or  My Computer, whichever you’re most comfortable with, and delete the following folder :  C:\Program Files\DeskAd Service.

6)  Restart your PC into Normal Mode.

7)  Make sure you have up‑to‑date reputable antivirus software and run a full virus scan on your PC.

8)  Download  Spybot  or  Ad-Aware  from our  Downloads  library and scan your PC for adware and spyware.
 

DeskAdServ

DeskAdServ.exe

(???)

Nightmarish adware which has appeared on the scene in January 2005.  This program is responsible for endless popup and popunder advertisements and a slow Internet connection.  At the time of writing, 8‑Jan‑2005, we do not know much more about it except that it is most definitely picked up through file sharing activities, particularly if using KaZaA.  In all cases that we have seen thus far the PC is also infected with other adware, spyware, and, worse, viruses.

Recommendation :  
Get rid of this pest as follows :

1)  Restart your PC into Safe Mode by pressing  F8  continually after turning your PC ON till you get a menu where  “Safe Mode”  is one of the options  (you  must  start your PC in Safe Mode as you will not be able to remove this program in any other way).

2)  Go to  “Add/Remove Programs”  in the Control Panel and see if there is a  “DeskAd ....”  entry.  If there is, remove it.

3)  Go to the  Startups  tab of  The Ultimate Troubleshooter  and for  DESKADSERV  and  DESKADKEEP, do the following in turn :  right-click and choose  Delete from the hard disk the file that this Startup points to;  next, right-click on the entry again and this time choose  Delete this Startup Entry.

4)  Click on the big green  APPLY  button to make your changes stick.

5)  Start  Windows Explorer  or  My Computer, whichever you’re most comfortable with, and delete the following folder :  C:\Program Files\DeskAd Service.

6)  Restart your PC into Normal Mode.

7)  Make sure you have up‑to‑date reputable antivirus software and run a full virus scan on your PC.

8)  Download  Spybot  or  Ad-Aware  from our  Downloads  library and scan your PC for adware and spyware.
 

Deskup

Deskup.exe

(Iomega)

Background task installed by the full IomegaWare drivers for your Iomega drive.  When this background task is running your desktop will show an icon for each Iomega drive that you have, with the icon showing whether the drive is plugged in or not.

Recommendation :   
Down to end-user preference.  Many users like the ability to backup their files by simply dragging them straight onto the Iomega drive icon on the desktop.  Advanced users, on the other end, will know how to create a  “send-to”  icon on the desktop and may therefore decide not to have this task running by disabling it with  The Ultimate Troubleshooter.

Detector Detector.exe

(LG)
System Tray program which constantly monitors for the presence of an LG scanner connected to your USB port. If your LG scanner is connected, and DETECTOR is running, you can press the one-touch scan button on your scanner to begin scanning (if your scanner has such a button). This System Tray program also enables you to run the LG scanning software from the System Tray.

Recommendation :
If you use the LG software to scan and you use it a lot, then keep this program in your System Tray – we have not heard of problems with it.  If you do not use the LG software, or you do not scan very often, then disable DETECTOR with  The Ultimate Troubleshooter.
Devdtct2 DevDtct2.exe

(Olympus Corp)
Device Detector 2. System Tray application which gets installed by the Olympus DSS Player Pro (Digital Speech Standard) voice playback software.  Using a USB or Serial connection, DSS Player Pro enables the user to download onto his PC, digital voice recordings made on an Olympus DS-3000; the software also enables you to email the recordings directly from the DS-3000.  Device Detector 2, DEVDTCT2, automatically detects when the end-user has come back to base and plugged his DS-3000 into his PC, at which point it starts the application that was set up to handle the DS-3000 and its stored digital voice recordings, typically DSS Player Pro.

Recommendation :
As of November 2002 this System Tray application is a nightmare – it causes many programs to freeze, Outlook in particular, and sometimes the whole PC freezes.  When the problems occur, the only way to properly recover is in most cases to reboot the PC.  Avoid – disable with  The Ultimate Troubleshooter  and manually start the Olympus DSS Player Pro software through "Start \ Programs".
Devgulp Devgulp.exe

(Compaq)
System Tray application which implements the Compaq Digital Dashboard.  The Compaq Digital Dashboard has two main functions :  time synchronization from the Internet so that your PC always shows the right time, and turning on the mail LED when there is mail for you to collect at your ISP. Both these features are configurable through the System Tray icon or in the Control Panel.

Recommendation :
Essential if you use Compaq’s Digital Dashboard. Otherwise you can disable it with  The Ultimate Troubleshooter.
Devldr Devldr.exe

(Creative Labs)
Found on Windows 2000/XP.  It really does not matter how Creative call this task/service, DEVLDR, DEVLDR16, or DEVLDR32, it is a thorough nightmare whatever its name, and DEVLDR does not disappoint.  What does this task do – we do not know, it is such a frustrating task we care little about what it does.

Recommendation :
"Not responding"
on shutdown or problems at startup are the most common problems associated with this task.  There are some workarounds that sometimes work.  For both Windows 2000 and XP a solution that often works is to remove all sound items from "Control Panel \ Administrative Tools \ Device Manager", de-install any Creative SoundBlaster software from "Add/Remove Programs", then search your hard disk for DEVLDR.EXE and rename or delete it, then delete/disable it in "Control Panel \ Administrative Tools \ Services", and finally download and install the latest SoundBlaster Live software.  Under Windows XP, instead of installing the latest SoundBlaster Live software you can opt to restart your PC, and when prompted for the drivers for the re-detected soundcard, use the Windows XP CD so that the XP drivers are used rather than the Creative drivers (the same sometimes works with Windows 2000 SP3, although no CD is required in that case).  Walking away from Creative Labs has also been suggested to us as an option...

Devldr16

Devldr16.exe

(Creative Labs)

Background task installed with the drivers for some Creative Labs sound cards – it provides SoundBlaster 16 emulation for DOS applications and games.  Without it, your DOS games will not have any sound.  Disabling this program, however, often gives problems with the general behaviour of sound and of the Creative sound utilities on your PC.

Recommendation :
This is another Creative program which is the cause of many frustrations for AnswersThatWork users.  Once upon a time “Creative Labs” used to be synonymous with quality !  Some users experience unexplained crashes of this program where it is impossible to clear it off the screen;  others experience occasional to total inability to start Windows 98/ME;  some find that their modem no longer works properly;  others experience strange behaviour of their software (Photoshop);  others find that menus do not open up when clicking on them and that the only way to recover is to restart;  some find that the mouse pointer disappears, till a reboot;  some experience unexplained general instability problems;  the list goes on.  Shocking!   For the technically minded all these problems are due to the fact that  DEVLDR16  emulates old ISA sound cards which do not have the ability to share resources in the way that the newer PCI cards can. If you do not use DOS games,  and you want to get rid of this task, the only way we have found to safely disable this task is as follows : 
1)  Disable on the  Startups  tab of  The Ultimate Troubleshooter.  
2)  Next, in Device Manager (through the SYSTEM icon in the Control Panel), in the Sound section or under  “Creative Miscellaneous Devices”, disable  Creative SB16 Emulation.
Note, however, that this is not necessarily possible on all PCs where DEVLDR16 can be found – sometimes the only way out of this nightmare is to get a new sound card !

Devldr32 Devldr32.exe

(Creative Labs)
Creative Ring3 NT Interface!!  Runs solely on Windows 2000/XP.  Just when you thought you’d got rid of DEVLDR16, along comes your SoundBlaster Live! soundcard’s DEVLDR32 which is just as problematic !  As one website puts it "Rumours that Creative's driver team is composed entirely of gorillas enthusiastically beating on their keyboards with their feet have not been confirmed !".  Although we do not know yet what purpose DEVLDR32 serves, it seems to be crucial to the audio input, the Creative Mixer, the PlayCenter, and the AudioHQ application.  Most of the problems with DEVLDR32 are created by the installation of the Creative Liveware 3.0 software, as the DEVLDR32 loaded by that software creates endless conflicts.

Recommendation :
The list of problems is so long we will concentrate here on the major ones.  If you have a shutdown problem, with DEVLDR32 hanging, try disabling the "Shutdown sound".  If sound is at Max level every time you boot up, even though you adjusted it down, try the liveserviec.com fix (search the web for it).  If you have some programs which do not work properly unless DEVLDR32 is killed off through an End Task, try de-installing Liveware, and then downloading and installing the latest version.  Also try that remedy if you experience blue screens, or other severe problems.  If that still does not work, try de-installing the Liveware (or SBLive) software altogether.  Good Luck !

Dfssvc

Distributed File System

DFSSvc.exe

(Microsoft)

Windows NT Distributed File System Service – Windows NT4 Server, 2000 Server, and 2003 Server.  The Distributed File System (DFS) Service manages logical volumes distributed across many servers on a local or wide area network.  Logical volumes enable the network manager in a large organisation to pool similar sets of data into single access points (one drive letter in Windows, ie. H: ) for the convenience of the users of that data.  For example, you could have an organisation with 5 offices, each office having their own fileserver, but all servers linked via a wide area network.  On each server you might have a network share called  HELPDESK  where each office saves helpdesk-type documents for users to search through.  In order to allow some users (eg. enterprise managers) to search through the help documents for the entire organisation when needed, you might create a logical volume which includes all the  HELPDESK  shared folders on each of the servers, thereby enabling those end-users to do an organisation‑wide search through just one mapped drive rather than search the HELPDESK share on Server-1, then the one on Server-2, then the one on Server-3, etc...  The DFSSVC service manages and maintains such logical drives.

Recommendation :
If you do not use DFS, such as in the case of single server organisations, then you can set this service to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.

Diagent DiAgent.exe

(Creative Labs)
Creative Diagnostics Agent. System Tray icon which gets installed by the SoundBlaster Live drivers for Creative SoundBlaster soundcards.  This application enables the user to test the proper functioning of the soundcard and speakers.

Recommendation :
Why Creative Labs believe that it is necessary to clutter the System Tray with extremely rarely used icons, is beyond us.  DIAGENT is the sort of application which is needed only when you have issues with your soundcard, and you can access it via "Start \ Programs". Disable immediately with  The Ultimate Troubleshooter.
Digstream Digstream.exe

(Disney)
Disney Internet Group Streaming.  System Tray background downloading task from ESPN Motion, the online sports channel, MOVIES.COM, or ABC TV (all part of the Disney Group).  This task downloads in the background videos that you will watch or are likely to watch when you access, or next access ESPN Motion, Movies.com, or ABC TV.  It is through this invisible background downloading that these services achieve their seemingly seamless, no-buffering, and uninterrupted, video streaming when you watch a video.

Recommendation :
Down to end-user preference as regards home users.  To be avoided in many cases in a corporate network environment.  At the time of writing, 4-Dec-2003, we have as yet not found a way to limit the amount of video files downloaded in the background by DIGSTREAM.  The result is two-fold :  we are not sure about the storage implications of constantly having DIGSTREAM running in the background.  More importantly, however, on a corporate network the use of DIGSTREAM by a number of users very quickly reduces the Internet bandwidth of the network with serious implications for those users who rely on speedy Internet access for their work.  In such environment it is vital to involve your network manager so that he/she can assess the likely impact of the use of DIGSTREAM on the corporate network.  Removing the software from any of the above 3 content providers is done through the "Add/Remove Programs" icon in the Control Panel.
Directcd DirectCD.exe

(Adaptec / Roxio)
This is the DirectCD software which enables you to drag files onto a CD-R directly from Windows Explorer, or to save onto CD directly from within applications like Microsoft Word, without using the CD Recording software that came with your CD-Writer (Easy CD Creator). While a great and potentially very useful concept, the limitations of DirectCD CDs (CDs created with DirectCD are only ever guaranteed to be readable in CD Writers that are the same model as the CD Writer in which the CD was created – it is not unusual not to be able to read a CD created via DirectCD, in another CD-ROM drive), and the many conflicts that we have seen DirectCD create, lead us to always recommend its removal.  We advocate to instead always use its sister product, Easy CD Creator, to create CDs, as that is the only method that guarantees that you will be able to read the CDs you create in any other CD, CD-Writer, or DVD drive – a crucial consideration if you are using CDs for data backups !

Recommendation :
Unless you do make use of DirectCD, remove it via "Add/Remove Programs" in the Control Panel. Otherwise right-click on it in the System Tray and temporarily disable it whenever you need to use other software that will want to write to your CD Writer.

Djfgucxr

Djfgucxr.exe

(???)

You have the  W32.Gluber.B@mm  virus.

Dkservice

DKService.exe

(Executive Software)

Background scheduling task which belongs to Diskeeper and Diskeeper Lite and which runs Diskeeper as scheduled.

Recommendation :
Essential if you have scheduled Diskeeper to run at specific times on specific days.  If, however, you always run Diskeeper manually, then disable this task on the  Startups  tab of  The Ultimate Troubleshooter  in Win95/98/ME or, if you have Windows 2000/XP, then set the  Startup Mode  of this service to  Disabled  on the  Services  tab of The Ultimate Troubleshooter.

Dl

Dial32

Dl.exe

(???)

Trojan horse undetected by most antivirus programs and which, in our experience, is picked up through the use of KaZaA or through kids downloading supposedly free games from specific websites.  When running, this task attempts to connect to a particular IP address and attempts to install additional parasite and insecure software which, luckily, gets picked up by most firewalls.  We are not yet sure about what else it does, but we do know you should get rid of it immediately.

Recommendation :
Since this task does not get picked up by antivirus products, do as follows :
1)  Terminate this task on the  Tasks  tab of  The Ultimate Troubleshooter
2)  Next, switch to the  Startups  tab, right‑click on the startup entry for this task, and choose the  “Delete the file that this Startup points to”  option to erase this dangerous parasite from your hard disk. 
3)  Next, delete the startup entry for this program.
4)  Finally, either empty your Recycle Bin, or at the very least delete this particular file permanently from your Recycle Bin and PC.

Dlg

Dlg.exe

(BVRP Software)

Digital Line Detection background task installed with BVRP Software’s Classic Phone Tools software suite which offers, amongst other things, a Phone Book, Faxing, Emailing, Answering Machine, and more.  The majority of PCs which have Classic Phone Tools installed will have had it bundled with the fax modem that came with the PC.  DLG, the Digital Line Detection background task, is a task that is present when Classic Phone Tools is bundled with modems with a Conexant chipset (for example :  a Conexant D480 MDC v92 modem – many DELL PCs come with such modems).  When you install or use Classic Phone Tools, this task detects whether you are connected to a normal analogue telephone line which your modem can work with, or a digital line, such as an ISDN line or a PBX/PABX line as found in offices.  If you are connected to a digital line, something which your analogue fax modem cannot handle, a message is displayed telling you that you will not be able to use your modem on that line, because it is digital, and to connect your modem to a normal analogue line.

Recommendation :
If you know for certain that you have an analogue line compatible with normal fax modems, then you absolutely do not need this task, particularly since it has a history of errors on boot‑up (failure to initialize) and numerous bug-fix software releases – disable it with The Ultimate Troubleshooter.  If you are using your PC in an office where there is a mixture of PBX/PABX and analogue lines, and you will need to use your fax modem, then you may wish to temporarily enable this task so that if you plug your modem into a digital line because you cannot tell from the socket, then at least this task will save you a lot of frustration trying to locate an analogue line.  Once you have located an analogue line that your modem will work with, disable the task again.

Dllcmd32 DLLCmd32.exe

(Hewlett-Packard)
System Tray icon for the Configure Live Menu interface to the Efax faxing module which gets installed as part of the JetSuite software that comes with the LaserJet 3100/3150 series of HP laser printers.

Recommendation :
This module is needed by the efax print driver under Windows NT4/2000/XP, but is optional under Windows 95/98/ME where you can disable it through the Configure Live Menu settings.  We have no reports of problems with this background task, so we suggest leaving it alone for Windows NT4/2000/XP users.
Dllhost DLLHost.exe

(Microsoft)
DCOM support module for DLL based COM objects (DCOM = Distributed Component Object Model).  DCOM is a software architecture model which is an intrinsic part of Windows, of most Microsoft products, and of many non-Microsoft products.  In most cases you should never see DLLHOST in your Task List, as, typically, DLLHOST starts, does what it has to do, and then terminates.  However, sometimes, if a Java COM object runs (this could happen if you are browsing the Internet and come to a page which has Java code), DLLHOST may not terminate, which is when you would see it in your Task List.

Recommendation :
Do not "End Task" it as there is no way to determine whether DLLHOST has completed its task or not.  For the more advanced users, however, deleting the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Java VM\MSDebug" can often solve the problem of DLLHOST constantly appearing in the Task List.  Finally, if you keep getting DLLHOST errors on a Windows 2000/XP/2003 PC, then you may have the Welchia virus.

Dlm

Dial33

Dlm.exe

(???)

Trojan horse undetected by most antivirus programs and which, in our experience, is picked up through the use of KaZaA or through kids downloading supposedly free games from specific websites.  When running, this task attempts to connect to a particular IP address and attempts to install additional parasite and insecure software which, luckily, gets picked up by most firewalls.  We are not yet sure about what else it does, but we do know you should get rid of it immediately.

Recommendation :
Since this task does not get picked up by antivirus products, do as follows :
1)  Terminate this task on the  Tasks  tab of  The Ultimate Troubleshooter
2)  Next, switch to the  Startups  tab, right‑click on the startup entry for this task, and choose the  “Delete the file that this Startup points to”  option to erase this dangerous parasite from your hard disk. 
3)  Next, delete the startup entry for this program.
4)  Finally, either empty your Recycle Bin, or at the very least delete this particular file permanently from your Recycle Bin and PC.

Dlt

DLT.exe

(Dell)

Dell Legacy Translator – Part of the Dell OpenManage system management software.  This service receives UDP packets (User Datagram Protocol) from hardware items which work through TCP/IP rather than DMI, collects those packets, and then calls corresponding OpenManage Client Instrumentation modules to handle them.

Recommendation :
If you use Dell’s OpenManage software, you need this service running, otherwise you can disable it by setting its startup mode to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.

Dmadmin

DMAdmin.exe

(Microsoft)

Logical Disk Manager Administrative Service for Windows NT.  Windows 2000/XP/2003.  This essential service is used and started only during the detection, configuration, or partitioning of a hard disk, or the management of hard disk volumes.  Once all such activities have been completed, the service stops.

Recommendation :
Essential – Leave alone.  In most cases this service will show as  Stopped  anyway.  If you get  “Disk Manager has generated errors and will be closed by Windows”  when trying to perform Disk Management tasks, update your PC with the latest Service Pack  (at the time of writing, Service Pack 4 for Windows 2000, and Service Pack 1a for Windows XP).

Dmcenter DMCenter.exe

(Diamond Multimedia)
Diamond Multimedia "InControl" Tools.  System Tray icon which gets installed with some of the [now defunct] Diamond VGA card drivers.  As with all such programs, all the icon does is give you access to the Display Properties.

Recommendation :
Useless, it just clutters up the System Tray – you can access the Display Properties in many other ways.  Delete using  The Ultimate Troubleshooter.
Dmhkey DMHKey.exe

(Diamond Multimedia)
Diamond Hotkey handler module of the Diamond Multimedia InControl tools that get installed when you install the drivers for some of the Diamond Stealth graphics cards.  The InControl Tools enable you, amongst other things, to define keyboard hotkeys as quick shortcuts to applications.  DMHKEY is the background task which makes this possible.

Recommendation :

If you do not use any of the user programmable keys feature of the InControl Tools, disable DMHKEY with  The Ultimate Troubleshooter  as it is sometimes known to clash with certain applications and cause Illegal Operation crashes.

Dockapp

DockApp.exe

(Dell)

Docking support background task found on Dell laptops (particularly the Inspiron range).  This task detects if the laptop is connected to its docking station, and if it is, it makes the docking station peripherals available within Windows.

Recommendation :
Essential if you use a docking station, otherwise you can disable it with  The Ultimate Troubleshooter.

Dp-k13w13

Dsi

DP-K13w13.exe

(???)

We have no idea as to what this task is or does.  What we do know, however, is that   a) you do not need it, and  b) that we have found it only on PCs which have or have had KaZaA installed !

Recommendation :
We normally disable this task, restart the PC, delete the program from the hard disk, and then delete this entry from the  Startups  tab of  The Ultimate Troubleshooter.  We recommend you do the same.

Dpi

Dpi.exe

(The Delfin Project)

Background task for the PromulGate line of advertising products from The Delfin Project from 2004 onwards.  This is what we call adware.  Worse, this is some of the worst type of adware there is – together with PCSVC it is directly responsible for incredibly slow PCs, “unhandled exception” errors on boot-up on Windows 2000/XP PCs, illegal operations on boot-up on Windows 9x/ME PCs, interference with your Internet connection, and more.  This is TerribleWare !   DPI  is, in most cases that we have seen, installed by KaZaA.

Recommendation :
Get rid of it straight away.  Make a note first of the  DPI  folder that is shown in the path to  DPI.EXE  on the  Tasks  tab of  The Ultimate Troubleshooter.  Next, de‑install any Delfin or PromulGate product listed in  “Add/Remove Programs”  in the Control Panel (e.g. Delfin Media Viewer).  Restart your PC and delete the  DPI  folder if it is still there.  Next, download and install  “Spybot Search & Destroy”  from our  Downloads   section, click on  “Online”  to update it, and then run it to fully rid your PC of spyware and adware such as DPI.  Note that the de‑installation of Delfin products may incapacitate your copy of KaZaA.

Dpmw32 Dpmw32.exe

(Novell)
This program runs in the background if you are running the Novell Client to connect to a Novell NetWare network and you have installed the Novell Distributed Print Services (NDPS) part of the client.  The Novell Client is the software which presents you with the familiar red Novell login box when you login to your company’s NetWare network.  It also transparently provides a closer integration of your Windows PC with your Novell network, particularly as regards to automated configuration of network drives and applications when you login to your server, printing, access to NetWare security features, and lots more.

Recommendation :
We have found that in many non-NDPS NetWare networks, on Win9x/ME platforms and with versions of the Novell client pre-version 3.32, this process will on some PCs sometimes prevent other programs from working properly,  e.g. GroupWise, PageMaker, and it will at other times make the PC hang, or it will cause illegal operations.  This problem is cured completely in version 3.32 and later, of the Novell Client.  If you are not running Novell Distributed Print Services (most NetWare installations do not – ask your Network Administrator), disable this process with  The Ultimate Troubleshooter regardless of which version of the Novell Client you are running.
Dpps2 Dpps2.exe

(Panicware)
Don’t Panic! Popup control background task from Panicware.  Don’t Panic enables you to block those annoying popup advertising ads from displaying while you are browsing the Net.

Recommendation :
The use of Don’t Panic!, and its sister products from Panicware, can result in seemingly strange behaviour of your e-mail software (hyperlinks not working), or of Windows Explorer (new explorer windows not opening up).  This may in fact be expected behaviour, so make sure therefore that you acquaint yourself properly with Panicware’s FAQ on their products so that you know what to do if you experience any of the above.
Dragdiag Dragdiag.exe

(Alcatel)
Tray icon application installed by the drivers for Alcatel’s ADSL (DSL) modems. These Alcatel ADSL modems, which look like green manta rays, are distributed by many ISPs who offer ADSL Internet Access.

Recommendation :
Not needed, but also harmless.  You can leave it or disable/delete it with  The Ultimate Troubleshooter.

Drgtodsc

DrgToDsc.exe

(Roxio)

Roxio’s  Drag‑to‑Disc  background task which also shows as an icon in the System Tray.  Drag‑to‑Disc, introduced with Easy CD & DVD Creator 6 and also seen in Easy Media Creator 7 (the successor to Easy CD & DVD Creator 6), is the new name for what used to be called  DirectCD  in versions 4 and 5 of Easy CD Creator.  It enables you to drag files onto a CD‑RW or DVD‑RW directly from Windows Explorer, or to save onto CD/DVD directly from within applications like Microsoft Word, without using the CD Recording software that came with your CD/DVD‑Writer (Easy CD & DVD Creator 6  or  Easy Media Creator 7), or you can drag files onto the Drag‑to‑Disc window for Drag‑to‑Disc to then write the files to the CD‑RW/DVD‑RW – this type of feature is also called  “Packet Writing”  software.  While a great and often very useful concept, the limitations of Drag‑to‑Disc CDs and DVDs (CDs and DVDs created with Drag‑to‑Disc are only ever guaranteed to be readable in CD/DVD Writers that are the same model as the CD/DVD Writer in which the CD/DVD was created – it is not unusual not to be able to read a CD/DVD created via Drag‑to‑Disc, in another CD/DVD‑ROM drive), and the many conflicts that we have seen Drag‑to‑Disc create, not to mention lost data or messed up hard drive letters, lead us to always recommend its removal.  We advocate to instead always use its sister products, Easy CD & DVD Creator 6 or Easy Media Creator 7, to create CDs and DVDs, as that is the only method that guarantees that you will be able to read the CDs and DVDs you create, in any other CD drive, CD‑Writer, DVD drive, or DVD‑Writer – a crucial consideration if you are using CDs or DVDs for data backups !

Recommendation :
Make no mistake about it :  it is our view that in April 2004 packet writing software, whether from Roxio or its competitors, is still inherently unsafe – it will work reliably most times but you can bet your bottom dollar that the day it won’t work it will be on an absolutely crucial CD/DVD and you will only find out days, weeks, or months later when you need to retrieve data from it, and at that point it will too late !   Packet writing software is there as a selling point because  the competition does it  and it is a  very attractive  feature for first-time users.  Our recommendation is that if you are used to using  Drag‑to‑Disc,  continue to use it but at the same time educate yourself to becoming totally proficient and at ease with the full Roxio product,  Easy CD & DVD Creator  or  Easy Media Creator, so that you can eventually use it confidently and as a result feel safe in the knowledge that all your CDs and DVDs will be reliable and usable across all ranges of CD/DVD‑ROM and CD/DVD‑Writer drives.  Once you have reached that stage, remove Drag‑to‑Disc via  “Add/Remove Programs”  in the Control Panel.

Drvsys

Drvsys.exe

(???)

You have the   W32.Beagle.W@mm  \  W32/Bagle.z@MM  \  W32/Bagle-W   virus.

Dsentry

Dsentry.exe

(Dell)

DVD Sentry.  Background task which watches for the insertion of a software DVD into your DVD drive, and then presents the end‑user with the choice of either using Dell’s own installation software to install the software held on that DVD, or using the DVD’s own installation program.  If the DVD does not have its own installation program (extremely rare), or the  “Auto‑insert”  notification on the DVD drive has been turned off, then  DSENTRY  presents just the one option :  using Dell’s own installation program.

Recommendation :
Down to end-user preference.  This task was clearly written to help non-technical users in cases where the  “auto-insert”  notification for the DVD-Drive is turned OFF, with the result that when the end-user inserts a software DVD, without  DSENTRY  running the DVD will not auto‑start as per the installation instructions that it came with.  Technically advanced users will probably prefer to have one less task running and will want to disable it on the  Startups  tab of  The Ultimate Troubleshooter.

Dshmap DSHMap.exe

(Intel)
Background task which gets loaded with the drivers for Intel’s range of AnyPoint broadband products.

Recommendation :
We do not at this stage know what this task does.  The only recommendation we can make therefore is to leave it alone.
Dslaunch DSLaunch.exe

(Yamaha)
System Tray icon installed with the DS-XG drivers for Yamaha DS-XG based soundcards.  It enables the users to tune some of the features of his soundcard.

Recommendation :
Next to useless as there is no detailed help and so most of the settings mean nothing to the vast majority of users.  This icon simply clutters up the System Tray.  Disable it with  The Ultimate Troubleshooter.
Dssagent Dssagent.exe

(Broderbund)
Spyware/Adware.  DSSAGENT is a tool which "officially" allows software developers to send you updated "splash screens", news updates, and latest product offerings, whenever you are connected to the Internet.  Our translation :  sending you advertising !  DSSAGENT is installed by some of the Broderbund software titles, and also by software products from other publishers.

Recommendation :
This is a tricky one.  There is a real possibility that disabling DSSAGENT can result in the software program which installed it, not working That said we have yet to hear of this happening.  One thing is certain :  DSSAGENT is a resource hog and contributes significantly to a slower internet connection through its constant requests to the Broderbund central server. Additionally, it has the potential to send out information about your system.  We are totally against such Spyware or Adware.  And if that were not enough we have many reports of DSSAGENT causing boot-up or shutdown errors.  With all the above in mind, our recommendation therefore is that you download and install SpyBot Search & Destroy from the Downloads area of our site, run it, and delete DSSAGENT if SpyBot Search & Destroy identifies it.  If it does not, then disable DSSAGENT with  The Ultimate Troubleshooter.
Dumprep DumpRep.exe

(Microsoft)
Windows Error Reporting Dump Reporting Tool.  Found on Windows XP/2003.  It shows as a startup item whose execution line usually reads as "KernelFaultCheck" %systemroot%\system32\dumprep 0 –k.  DUMPREP creates memory dump reports that you can send to Microsoft if you answer "Yes" when prompted to send such reports.  In our experience this entry only shows up for the first time after your PC has experienced a Windows XP "dump" crash, or an Office XP or Internet Explorer 6 crash where you were prompted about sending the crash results to Microsoft.

Recommendation :
It is our experience that having Error Reporting set to ON only causes more crashes.  The mind boggles at this :  in both Netscape and Internet Explorer our experience shows that if you turn error reporting ON, you will crash often in either browser, if not sometimes always !!  You’ve guessed it, avoid Error Reporting like the plague. In both Windows XP and Windows 2003 turn it OFF by opening the SYSTEM icon in the Control Panel, choosing the ADVANCED tab, and then clicking on Error Reporting.

Dvzmsgr

DvzMsgr.exe

(DataViz)

Product updates notification task installed when you install Dataviz’s  Documents To Go  software.  “This task communicates with DataViz’s servers with information regarding your installed copy of  Documents To Go and your Palm OS device.  Using this information it then notifies you of product updates, special offers, and tips.  The information that is transmitted to DataViz includes aggregate stats which are used for development purposes.  DataViz collects these usage statistics to understand how users use Documents To Go – for example, do people view files more than they edit them ?  Which component of Documents To Go is used the most ?   This allows DataViz to allocate development efforts accordingly.”.

Recommendation :
Although DataViz clearly states the role of this task in their license agreement, it is our view that there are many less “stealthy” ways of finding out what users want out of your product, particularly when it is well known that most users do not read the License Agreement when installing software and would therefore not be aware of the role played by DVZMSGR.  We recommend therefore that you disable this task through the  “Tools \ Preferences \ Communications”  menu option, or through disabling this task on the  Startups  tab of  The Ultimate Troubleshooter.

Dw  (1) DW.exe

(DownloadWare.net)
If you came to this page searching for DW, then this entry, rather than the Microsoft’s DW, is likely to be the one you are after.  This is DownloadWare.net’s DownloadWare.  As of 30-Dec-2002 – Straight from their website :  "DownloadWare is a download accelerator that features intelligent multipart downloading technology.  DownloadWare can create, add, and modify multiple connections for each download based on your current speed and available bandwidth."  So far so good.  Then, straight from another page on their website :  "When you log on to your computer, we launch a featured download of the day.  You see this cool new download ages before your roommates get wind of it.  You're staying on the cutting edge, so you're happy.  We get paid by the company whose download you accepted.  (Thank you very much).  You're on your own to use the download you accepted or uninstall it according to the terms you read when you accepted it.  You understand that we're just an advertising network and that any and all questions need to be addressed to the company whose download you accepted."  At this point we’d like to applaud DownloadWare.net.  Bucking the trend of advertiser networks, they use plain talking, they leave you under no illusion that they are an advertising network, and they tell you straight out what they’re in it for and where your responsibilities are.  You might still want to get rid of their stuff, but at least they are not hiding behind vague, confusing and misleading statements such as  "...which will enrich your Internet experience" !

Recommendation :
Firstly, you can read DownloadWare.net’s Privacy statement here where you will learn about the sort of information they gather from your Internet browsing.  Secondly, most users never actually actively download and install DW.EXE.  It is usually installed as part of some other free software which you installed, e.g. KazaA (30-Dec-2002).  Thirdly, and most importantly, DW.EXE is often the cause of start-up "DW" error messages, "Invalid Page Fault" errors, and excessive CPU usage (70% and upward) causing the PC to slow down to a crawl.  On that basis alone we would recommend de-installing it – that’s enough serious problems to assume that there may be other as yet undiscovered problems with it.  To de-install download SpyBot Search & Destroy from our downloads page, update it online, and then run it. And lastly, if you have a DSL/ADSL or Cable Modem Internet connection, you do not need a download accelerator program.
Dw  (2) DW.exe

(Microsoft)
Microsoft’s Application Error Reporting, loosely named after DrWatson, the other Microsoft error reporting tool.  DW.EXE gets installed with Windows XP and with Microsoft Office XP.  DW.exe starts whenever an application (Windows XP) or an Office XP application crashes – it is at that point that you might see Microsoft’s DW in the Task List.  DW.exe presents the user with a dialog box that prompts for several options which include restarting the application and sending an error report.  It then shuts the application down, captures various application and operating system settings and data files relevant to the crash, makes a memory dump, and then submits it all to Microsoft (or to a location on your network).  On completion DW.exe restarts the application.

Recommendation :
In theory this program only shows up if you’ve had a Microsoft Office XP crash or a Microsoft app crash (Windows XP).  In our experience, however, the very presence of error reporting is what often makes Office XP and Internet Explorer 6 crash.  Our empirical tests prove that time and time again.  Our recommendation, therefore, is to turn off error reporting;  in Windows XP this is done via "Control Panel \ System \ Advanced Tab \ Error Reporting".  In other versions of Windows it involves editing the Registry – so get in touch with us.
Dwrcs DWRCS.exe

(DameWare Development)
DameWare Mini Remote Control Client Agent Service.  This task/service is part of the DameWare remote control utilities which enable a PC to take control of another PC somewhere on a network (internally or externally via the Internet).  DWRCS is the software that needs to be running on the target PC before it can be "taken over / remote controlled" by another PC.

Recommendation :
In a majority of cases where this task/service is running on a PC without the user’s knowledge, it is there because a network administrator purposefully installed the DameWare remote control software so that this PC could be controlled/taken-over remotely for support purposes (usually).  If you are such a user you should do two things :  firstly, find out why it is on your PC and in which circumstances your PC will be remote controlled or, possibly, spied upon (!!!) – in short, appraise yourself fully of your organisation’s policy as regards DWRCS;  secondly, if DWRCS is to remain on your PC, make sure your IT support staff are regularly updating the DameWare software with the latest updates and patches as, at the time of writing, 29-Sep-2003, some security flaws were found in July and August 2003 which could allow hackers access to an internal network from the Internet (fixes were promptly issued by DameWare for those flaws).  In all cases our recommendation is that, if your organisation allows it, you should disable this task with  The Ultimate Troubleshooter  until such time that your IT support staff needs to connect to your PC for support purposes.  If you cannot establish why this task is on your PC, nor who put it there, delete it.

Dxdllreg

DXDllRegExe

Dxdllreg.exe

(Microsoft)

Microsoft DirectX DLL Register.  This program appears primarily as a startup entry on the  Startups  tab of  The Ultimate Troubleshooter  and its prime and only role is to register with Windows the DLLs that are part of Microsoft DirectX v9.

Recommendation :
This entry is created by the installation of Microsoft DirectX v9 so that when the PC reboots at the end of the installation, the first task it will do, on restart, will be to register the new version of DirectX with Windows.  It is then supposed to delete itself from the  Startups  tab of The Ultimate Troubleshooter, but sometimes this does not happen with the result that, on some PCs, this entry generates boot‑up error messages referring to  DXDLLREG.  If this is your situation and you have recently installed DirectX 9  (DirectX is sometimes installed while installing games or graphics card drivers), then right‑click on this entry on the  Startups  tab of The Ultimate Troubleshooter and choose  Launch This Startup Entry – this will run  DXDLLREG  and may also result in this entry removing itself from the  Startups  tab.  Next, click the  REFRESH  button, to refresh the display, and then delete this entry from the  Startups  tab if it is still there.  Alternatively, if your PC has been running fine for some time with this entry there, simply delete it immediately from the  Startups  tab of The Ultimate Troubleshooter.

 E

E_s10ic1

E_s10ic1.exe

(Epson)

Epson Status Monitor 3 for the Epson Stylus C42 Series of inkjet printers.  In its version 3 flavour the Epson Status Monitor does not get installed automatically with the printer drivers – you go through a separate installation process.  When installed the Epson Status Monitor 3 appears as a printer icon in the System Tray.  Double-clicking on the icon enables you to check the ink level in the ink cartridges and also gives you all the specifications of your printer.  Right-clicking on the icon, on the other hand, enables you to perform Nozzle Checks, Head Cleaning, and Print Head Alignment checks on the printer, as well as give you access to the  “Printer Settings”  dialogue, and modify the behaviour of the Status Monitor 3 itself.

Recommendation :
The Epson Status Monitor 3 does not usually cause problems, so we would advise that you have it running, particularly since it is your only way of being able to tell how much ink there is left in your ink cartridges, as the cartridges are too opaque to be able to see the ink level, and the indicator lights on the printers themselves are also too inaccurate.  Note :  if you experience SPOOL32 errors on boot-up, then try disabling this task on the  Startups  tab of  The Ultimate Troubleshooter – if that solves the problem, then download the most up-to-date Status Monitor for the C42 from the Epson website (available via our Drivers pages).

E_s10ic2 E_s10ic2.exe

(Epson)
Epson Status Monitor 3 for the Epson Stylus C62 Series of inkjet printers.  In its version 3 flavour the Epson Status Monitor does not get installed automatically with the printer drivers – you go through a separate installation process.  When installed the Epson Status Monitor 3 appears as a printer icon in the System Tray.  Double-clicking on the icon enables you to check the ink level in the ink cartridges and also gives you all the specifications of your printer.  Right-clicking on the icon, on the other hand, enables you to perform Nozzle Checks, Head Cleaning, and Print Head Alignment checks on the printer, as well as give you access to the "Printer Settings" dialogue, and modify the behaviour of the Status Monitor 3 itself.

Recommendation :
The Epson Status Monitor 3 does not usually cause problems, so we would advise that you have it running, particularly since it is your only way of being able to tell how much ink there is left in your ink cartridges, as the cartridges are too opaque to be able to see the ink level, and the indicator lights on the printers themselves are also too inaccurate.  Note :  if you experience SPOOL32 errors on boot-up, then try disabling this task with  The Ultimate Troubleshooter  – if that solves the problem, then download the most up-to-date Status Monitor for the C62 from the Epson website (available via our Drivers pages).

E_s4i2d1

E_S4I2D1.exe

(Epson)

Epson Status Monitor 3 for the Epson Stylus C84 Series of inkjet printers.  In its version 3 flavour the Epson Status Monitor does not get installed automatically with the printer drivers – you go through a separate installation process.  When installed the Epson Status Monitor 3 appears as a printer icon in the System Tray.  Double-clicking on the icon enables you to check the ink level in the ink cartridges and also gives you all the specifications of your printer.  Right-clicking on the icon, on the other hand, enables you to perform Nozzle Checks, Head Cleaning, and Print Head Alignment checks on the printer, as well as give you access to the  “Printer Settings”  dialogue, and modify the behaviour of the Status Monitor 3 itself.

Recommendation :
The Epson Status Monitor 3 does not usually cause problems, so we would advise that you have it running, particularly since it is the only way of being able to tell how much ink there is left in your ink cartridges, as the cartridges are too opaque to be able to see the ink level, and the  “cartridge empty”  marker on the printer only points to a cartridge when that cartridge is actually empty, it does not show you the ink levels before a cartridge becomes empty.

E_s4i2f1

E_S4I2F1.exe

(Epson)

Epson Status Monitor 3 for the Epson Stylus Photo R300 Series of inkjet printers.  In its version 3 flavour the Epson Status Monitor does not get installed automatically with the printer drivers – you go through a separate installation process.  When installed, the Epson Status Monitor 3 appears as a printer icon in the System Tray.  Double-clicking on the icon enables you to check the ink level in the ink cartridges and also gives you all the specifications of your printer.  Right-clicking on the icon, on the other hand, enables you to perform Nozzle Checks, Head Cleaning, and Print Head Alignment checks on the printer, as well as give you access to the  “Printer Settings”  dialogue, and modify the behaviour of the Status Monitor 3 itself.

Recommendation :  
The Epson Status Monitor 3 does not usually cause problems, so we would advise that you have it running, particularly since it is a quick and easy way of being able to tell how much ink there is left in your ink cartridges.  Note :  if you experience SPOOL32 errors on boot-up, then try disabling this task with on the  Startups  tab of  The Ultimate Troubleshooter – if that solves the problem, then download the most up-to-date Status Monitor for the R300 from the Epson website (available via our  Drivers  pages).

E_s4i2g1

E_S4I2G1.exe

(Epson)

Epson Status Monitor 3 for the multifunction Epson Stylus CX5400 Series of inkjet printers.  In its version 3 flavour the Epson Status Monitor does not get installed automatically with the printer drivers – you go through a separate installation process.  When installed, the Epson Status Monitor 3 appears as a printer icon in the System Tray.  Double-clicking on the icon enables you to check the ink level in the ink cartridges and also gives you all the specifications of your printer.  Right-clicking on the icon, on the other hand, enables you to perform Nozzle Checks, Head Cleaning, and Print Head Alignment checks on the printer, as well as give you access to the  “Printer Settings”  dialogue, and modify the behaviour of the Status Monitor 3 itself.

Recommendation :  
The Epson Status Monitor 3 does not usually cause problems, so we would advise that you have it running, particularly since it is a quick and easy way of being able to tell how much ink there is left in your ink cartridges.  Note :  if you experience SPOOL32 errors on boot-up, then try disabling this task with on the  Startups  tab of  The Ultimate Troubleshooter – if that solves the problem, then download the most up-to-date Status Monitor for the CX5400 from the Epson website (available via our  Drivers  pages).

E_srcv02

E_srcv03
E_Srcv02.exe

E_Srcv03.exe

(Epson)
Epson Status Monitor 2, or the newer version, Epson Status Monitor 3.  The Epson Status Monitor gets installed with almost all Epson inkjet printers and, basically, gives you a progress of your print jobs as they are printing.  It also warns you when your ink cartridges are running low and it informs you of printing problems and their probable causes.  The Epson Status Monitor appears as a minimizable task on your Task Bar.

Recommendation :
Aside from rare installation problems, the Epson Status Monitor does not usually cause problems, so we would advise that you keep it running as, for long print jobs, it is a useful guide as to how long the job will take.  Also, for the new generation of Epson inkjets, the Epson Status Monitor application is the only way you have of being able to tell how much ink there is left in your ink cartridges, as the cartridges are too opaque to be able to see the ink level, and the indicator lights on the printers themselves are also too inaccurate.

Earu

Earu.exe

See   IWAR.
 

Eatmenu

EatMenu.exe

(Edgepicture.co.uk)

Background desktop application which enables you to view on your desktop the current day’s menu offered by your local  EAT  coffee shop (EAT is a chain of high quality take-out pre-packaged food and coffee shops in the United Kingdom).

Recommendation :
Down to end-user preference.  It can be disabled on the  Startups  tab of The Ultimate Troubleshooter.

Eausbkbd EAUSBKBD.exe

(Compaq)
Compaq’s Easy Access Button support task for Compaq USB Keyboards which enables you to program the extra "Easy Access keys" on the Compaq USB multimedia keyboards.  Without this task you will not be able to use those extra keys. This task is often seen in conjunction with STARTEAK.

Recommendation :
Essential if you use the "Easy Access Keys", not needed otherwise – you can disable it with  The Ultimate Troubleshooter.

Eber

Eber.exe
 

See   IWAR.

Ebot EBot.exe

(Digital River)
According to Digital River :  ‘EBot is an "electronic robot" that sits on your PC's desktop and helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and "cool stuff". EBot also helps you download, install and manage your downloadable digital products.’  EBot will typically be installed as an icon on your Windows desktop.  The "Ebot" task which shows in your Task List is the System Tray icon which enables you to start Ebot from the System Tray.

Recommendation :
Our translation of this product :  it "encourages" users to "fix" their software environment, something we are totally against.  For the great majority of users, if your PC is working fine then assume there is nothing to fix or update.  Applying fixes and updates without properly evaluating what the fixes/updates are for, can have disastrous results, as some Windows XP users have found in recent times (April/May 2002) (if you want to know what updates you should apply, check our upcoming Updates news page).  Therefore, on that count alone we would advise against EBot.  Worse, however, EBot also brings you "cool stuff".  Our translation :  advertisements.  Add to this that anything that queries a remote server, whether for ads or for software updates, is bound to reduce your Internet connection performance, we believe that EBot is not a good idea.  Unless you are a great believer of EBot, and swear by it, our recommendation is to de-install it.
Ebrr Ebrr.exe

(Epson)
Epson Bi-directional Request Router (EBRR).  This program is a component of the Epson Status Monitor program for such printers as the Stylus 640, 660, 680, 740, 870, 875, 880, etc..  This task is a background interface task which passes commands and responses back and forth between your printer and the Status Monitor program where you can monitor print jobs and see how much ink you have left in your cartridges.

Recommendation :
In some environments this task causes endless frustrations to the end-user through endless error conditions (blank error windows, Invalid Page Faults, Illegal Operations).  Thankfully Epson seem to have realised they had to do something and their later models, the Stylus C Series (C60, C62, C82, etc...), do not suffer this problem.  If you have problems with EBRR, try installing the latest drivers for your printer, if there are any available, otherwise de-install the Epson Status Monitor software and run your printer without the Status Monitor.
Echoctrl EchoCtrl.exe

(C-Media Inc.)
Task which is part of some C-Media soundcard drivers. From an AnswersThatWork user :  "ECHOCTRL is a System Tray icon which, when clicked, allows you to turn ON or OFF an echo effect for microphones plugged into C-Media soundcards. You can also increase or decrease the volume of the echo. Great for budding karaoke stars !!".

Recommendation :
Down to end-user preference – you can disable it with  The Ultimate Troubleshooter.
Edmsrv32 Edmsrv32.exe

(FileNet Corp / Novell)
This is a background program which runs when you have Novell GroupWise 5.5 running.

Recommendation : 
Essential.  Leave alone.
Edsdlv32 Edsdlv32.exe

(FileNet Corp / Novell)
This is a background program which runs when you have Novell GroupWise 5.5 running.

Recommendation : 
Essential.  Leave alone.

Eebsvc

eEBSVC.exe

(Epson)

Epson’s Bi-Directional Service on Windows 2000/XP/2003.  In our own experience this service is installed primarily by the drivers of Epson multifunction printers (printers that are a combination of printer, scanner, and sometimes fax), although it may be that it is also used by non-multifunction Epson printers.  This service is part of Epson’s Bi-Directional API software and is simply an interface between the locally attached Epson printer and a remote Status Monitor.  In layman terms :  if, for example, you have an Epson CX5400 multifunction printer attached to PC-1, and you want a second PC on your network, PC-2, to be able to use the Epson Status Monitor that sits in the System Tray so that the user of PC-2 can work out such things as the printer cartridges having enough ink, or if there is paper in the printer, directly from PC-2 without needing to get up to go to the printer or to use the Epson Status Monitor running on PC-1, then you will need  EEBSVC  running on PC-1 as it is  EEBSVC  which talks to the printer and then communicates with the Status Monitor on PC-2 to tell it everything it needs to know about the current status of the printer.  In layman terms, this is why it is called  bi-directional :  EEBSVC can accept  questions  and send  answers  back over a network.

Recommendation : 
1)  If you do not have a network, then there is no reason for this service to be running.  Simply set its  Startup Mode  to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.  

2)  Similarly, if you no longer have an Epson printer, then you certainly no longer need this service, in which case de-install all relevant Epson software from the  “Add/Remove Programs”  icon in the Control Panel – if the service still remains after de-installation, or if there weren’t any entries to de-install, then, again, set the  Startup Mode  of this service to  Disabled  on the  Services  tab of The Ultimate Troubleshooter to prevent it running in the future. 

3)  If you do need to have  EEBSVC  running because it is being used by Epson Status Monitor processes on other PCs on your network, and if you get errors, such as illegal operations mentioning  EEBSVC, then update to the latest drivers for your Epson printer. 

4)  Finally, if you do need to have  EEBSVC  running and you have a firewall that protects your PC when it is on the Internet, you may get popup alerts & warnings from your firewall telling you that  EEBSVC  is attempting to communicate – this happens because  EEBSVC  pings available ports (sorry, no short layman translation here) to discover Status Monitor processes looking for network printers to monitor (our message to Epson – “this really is not a good design!”).  If you have that situation, then make sure that your firewall’s trusted zone includes all the PCs on your network, and then have your firewall prevent  EEBSVC  from communicating outside of your network.  That normally works with most firewalls – in some cases, however, it does not and you will need to allow  EEBSVC  to communicate through your firewall.

Note :   all of the above notwithstanding, we have found that with some Epson multifunctional printers,  EEBSVC  is actually needed for the local Epson Status Monitor to run properly  (by “local” we mean the Epson Status Monitor on the PC that the printer is directly attached to).  When that is the case simply re-set the  Startup Mode  to  Automatic  on the  SERVICES  tab of The Ultimate Troubleshooter.

Elbycheck

ElbyCheck.exe

(Elaborate Bytes AG)

Background task installed by Elaborate Bytes’  CloneCD  and  CloneDVD  products and which ensures, on boot-up, that the Elaborate Bytes CD-ROM and DVD-ROM drivers are still there and have not been replaced by other drivers.

Recommendation :
Essential for the proper functioning of CloneCD and CloneDVD.  In version 4.3 and above of CloneCD, the product is now a SlySoft product and  ELBYCHECK  is no longer part of the product.  Thus, if you have SlySoft’s CloneCD v4.3 or later and  ELBYCHECK  is still showing as a Startup item, remove it with The Ultimate Troubleshooter.

Em_exec EM_Exec.exe

(Logitech)
Logitech MouseWare Tray icon program.  This program displays a mouse icon in the System Tray.  Right-clicking or double-clicking on the icon enables you to access the Control Panel Mouse properties or the MouseWare help.

Recommendation :
Once they have set their mouse preferences, most users never go back to them unless the mouse is changed.  This Tray icon is therefore superfluous and simply adds to the System Tray clutter for older Logitech mice, in which case you can disable this task (do not Delete) using  The Ultimate Troubleshooter.  With the more modern generations of Logitech mice, such as cordless optical mice, EM_EXEC is actually more than just a System Tray icon and disabling it will prevent the scroll wheel or some of the additional mouse buttons (middle and fourth when present) or features (eg. smartmove) from working properly; so you should leave it alone.

Emsw

Emsw.exe

(Alset)

Alset’s HelpExpress.  Useless background adware which tells you when you need to buy printer cartridges, and where to buy them, and all sorts of other things like that.

Recommendation :
Firstly Alset are the same crowd as Aveo who produce the similarly useless Aveo Attune.  Secondly, at the time of writing of this entry (2‑Jan‑2004), Alset and Aveo seem to have gone out of business.   Thirdly, as with Aveo Attune, some users have experienced conflicts with other software.  De‑install HelpExpress immediately via the  “Add/Remove Programs”  icon in the Control Panel.  Then, remove all references of  EMSW  with  The Ultimate Troubleshooter.

En4060ct En4060ct.exe

(Efficient Networks)
System Tray activity icon for Efficient Networks’ SpeedStream 4060 DSL modem.

Recommendation :
Pretty but not needed.  Harmless.  You can keep it, or disable it with  The Ultimate Troubleshooter.

Engutil

EngUtil.exe

(Roxio)

Roxio Engine Compatibility Utility startup task installed with Roxio’s  Easy CD & DVD Creator 6.x  (Standard and Platinum versions).  This task checks to make sure that the Roxio Engine, the set of core programs which write and read from CDs and DVDs, have not been modified and accidentally downgraded by the installation of another application  (such as a Windows Media Player update, or other Roxio products with earlier versions of the engine, or 3rd party software which uses the Roxio engine).  If the Roxio engine has been detrimentally modified, the end-user is notified.

Recommendation :
This is a task which executes at startup, does the checking mentioned above, and then terminates if everything is fine.  Leave it enabled unless you experience startup problems with it, in which case check our  Drivers  page for updates to your version of Easy CD & DVD Creator 6.x.

Enns

Enns.exe

See   IWAR.

Enternet EnterNet.exe

(Efficient Networks)
Normally ISP supplied Access Manager software which enables the ISP’s subscribers to connect to its DSL network when that DSL network uses the PPPoE DSL connection protocol.

Recommendation :
Leave alone – if your ISP supplied it, you probably need it.
Epscansv Epscansv.exe

(Epson)
Epson Scan Server System Tray icon. Scan server software which needs to run on the PC attached to an Epson networkable scanner (ie. Epson Expression 1680).  This software, usually started through the "Startup" program group, is essential as it makes the networked scanner visible to the other PCs on the network.

Recommendation : 
Leave untouched if your Epson scanner is networked for other PCs to use.
Essspk EssSpk.exe

(ESS Technologies)
Call waiting task which gets installed by the drivers for V92 modems based on ESS Technologies chipsets.  If you enable the call waiting facility, and your telephone line has the capability, and someone calls you while you are browsing the Internet, a popup comes up on the Taskbar, ESSSPK, informing you of the call and which number is calling you.  You can decide to ignore the call or to accept it :  if you accept it, your Internet connection is disconnected and your modem and/or phone rings.

Recommendation :
Some versions of ESSSPK cause Blue Screen Fatal Exceptions.  If this happens to you, see if upgrading to the latest drivers for your modem solves the problem.  If not, then disable call waiting. You can also disable this task with  The Ultimate Troubleshooter.

Euea

Euea.exe
 

See   IWAR.

Eventagt

EventAgt.exe

(Dell)

Dell Event Agent (DEventAgent) service which is part of the Dell OpenManage DMI System Management software.  This service watches out for specific events from hardware items being monitored through the OpenManage software, and relays those events accordingly.

Recommendation :
If you use Dell’s OpenManage software, you need this service running, otherwise you can disable it by setting its startup mode to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.

Eventmgr EventMgr.exe

(Microtek)
Background task for the EventManager module of the ScanWizard software that comes with some Microtek scanners.  You configure the front panel button of your Microtek scanner through EventManager and EVENTMGR.EXE runs in the background to implement the configuration options that you set up.

Recommendation :
If you use the front panel button on your Microtek scanner, then you will need to leave EVENTMGR running.  Otherwise, if you do not have a front panel button, or have one but do not use it, you can disable EVENTMGR with  The Ultimate Troubleshooter.

Evntsvc

TkBellExe

Realsched

Evntsvc.exe

or

Realsched.exe

(Real Networks)

Real Networks Scheduler which gets installed with RealOne Player.  Under Win9x/ME this task shows as  TKBELLEXE,  and as  EVNTSVC  under Windows 2000/XP or  REALSCHED  depending on which version of RealOne Player you have installed.  From our experience, everything that applies to EVNTSVC below, also applies to REALSCHED.   RNDAL  elsewhere in these Task List pages is a good starting point to read about RealOne Player.  Next, a 15-Jun-2002 extract from the RealOne Player License Agreement that is specific to EVNTSVC (the said License Agreement was updated on 25-Nov-2002 by Real Networks and EVNTSVC was replaced by REALSCHED in that version of the License Agreement) :  An application Scheduler, known as “evntsvc.exe,” is installed along with RealOne Player. Once installed, it runs independently of RealOne Player. The Scheduler does not collect personal information or communicate with RealNetworks’ servers. It is used to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. The Scheduler is also used to automatically launch RealNetworks’ Media Type Helper. The Media Type Helper ensures the system is configured for correct operation of the RealOne Player with Multi-Purpose Internet Mail Extensions (“MIME”) types, file extensions, Internet protocols and other media types. If a media type has been assigned a different action by a different application, Media Type Helper may override the association and substitute its own association.

Additional, on 14-Jan-2005, the following excerpt from RealNetworks’ Privacy Policy is also very educational :  “Use of Invisible GIFs.  Invisible GIFs (also known as "single pixel tags" or "action tags," or "web bugs") may be used to assist in delivering cookies on our site relating to third party advertising and research services. We use this technology to access your personally identifiable information in accordance with the other sections of this privacy policy, and to compile aggregate data. This technology is used in our email messages that are delivered by a third party advertising service. This technology transfers your e-mail address to us so that we can associate your personally identifiable information with the elements (such as links, advertisements or graphics) that you click on a RealNetworks web page. We also use this technology to compile aggregate statistics about our website. Additionally, third party advertisers and research services may share aggregated and anonymous site statistics with RealNetworks regarding the web traffic patterns of web browsers that visit certain RN sites, whether through the use of Invisible GIFs or otherwise. If you are concerned about these practices, you may opt out from receiving cookies in your browser or you may visit the URLs listed below which direct you to the privacy policy page of RealNetworks' recent advertising service providers and instructs you how to opt out from their cookies or informs you of their cookie policy.”.

Recommendation :  
If reading about  RNDAL  did not put you off, then read on.  RealPlayer Classic used to be one of the most needed pieces of software on a PC.  Its successor, RealOne Player, is vying for the title of the most hated piece of software.  For a start, on many PCs EVNTSVC/REALSCHED slows down boot-ups unacceptably, using up to 90% of CPU time at times.  There have also been reports of  EVNTSVC  dropping advertising shortcuts onto the desktop during idle times.  Next, if you try to disable EVNTSVC/REALSCHED on the  Startups  tab of  The Ultimate Troubleshooter, RealOne Player checks to see if it has been deleted or disabled in the Registry and re-instates it as an enabled startup item !   To be fair, there is a facility within RealOne Player to  “only perform automatic services while RealOne Player is in use”.  However, since RealOne Player is unfortunately needed to watch videos on many news sites, here is what we suggest you do and which works for us :

1)   Terminate  REALSCHED  on the  Tasks  tab of The Ultimate Troubleshooter.

2)   Switch over to the  Startups  tab.

3)   Right-click on  REALSCHED  and choose  Rename the file that this Startup points to.

RealOne works absolutely fine without this task running, and you can surf the web in the safe knowledge that you have successfully disabled REALSCHED !
 

Execdll32

System Executable DLL Library
Execdll32.exe

(???)
You have the W32.Randex.AZ virus.

Explore

Window

Explore.exe

(???)

You have the   W32.Gaobot.ADW  virus, or one of the many other viruses which use this task name.

Explorer  (1)

Explorer.exe

(Microsoft)

This is either your Windows Desktop or you have Windows Explorer open.

Recommendation :  
Vital !!   Leave untouched.  Note that the full path shown in  The Ultimate Troubleshooter  should be  C:\Windows\Explorer.exe  or  C:\WinNT\Explorer.exe.

Explorer  (2)

Explorer.exe

(???)

If the path of this file does  NOT  show up as  C:\Windows\Explorer.exe  or  C:\WinNT\Explorer.exe  in  The Ultimate Troubleshooter  then you most probably have a virus such as the   Trojan.Kility   virus.

Recommendation :  
Do not panic unnecessarily.  Check the path column in the upper part of the  The Ultimate Troubleshooter  screen (the path is not case sensitive).  Only worry if the path does not match the possibilities we have listed.  If you have a virus, then simply make sure you have an up‑to‑date reputable antivirus program and run a full virus scan on your PC.

Explorer.scr Explorer.scr

(???)
You have the BENJAMIN.A virus.

Exshow

Exshow.exe

(Kensington)

Mouse driver installed by Kensington’s MouseWorks software.  According to Kensington, MouseWorks provides enhanced acceleration, enhanced scrolling (e.g. horizontal scrolling), one-touch access to favourite web pages and applications, and configurability where you can configure your mouse to have different profiles for different applications or where you can specify button combinations to bring up popup menus which you configured with MouseWorks.

Recommendation :
This driver is only needed if you actually use the MouseWorks software as described above.  De-install MouseWorks from the  Add/Remove Programs  icon in the Control Panel if you do not use the software.

Exshow95 Exshow95.exe

(Kensington)
Background driver for Kensington’s Expert Mouse range of mice.  We are not sure yet as to what it does.

Recommendation :
Mice drivers are simply not needed unless you want to make use of specific features that the software has and which are not part of Windows.  Additionally, EXSHOW95 has been known to interfere with the installation of some games.  Thus, if you are not using the Kensington Expert software, de-install it via Add/Remove Programs or disable this task with  The Ultimate Troubleshooter.
Ezsp_px ezSP_Px.exe

(Easy Systems Japan Ltd)
Background task installed by the Easy Systems Drag’n Drop CD & DVD writing software found on most Japanese laptop and desktop PCs.

Recommendation :
This task is essential for the good functioning of Drag’n Drop as it provides the common routines (functions) used by the various components of Drag’n Drop.
Ezulamain EZulaMain.exe

(EZula)
This program is one of the worst parasites there can be.  Installed as part of the TOPText software which itself is installed in most cases together with the KaZaA file sharing program, this program hijacks your Internet browser and inserts advertising links in all the websites that you visit by turning specific words into links which send you to an advertiser’s site.  Between pop-up ads, pop-under ads, and this type of insidious advertising, there is very little to choose as to which is worse.

Recommendation :
Always read the License Agreement when installing supposedly FREE software ! 
If you do, in most cases you will not fall prey of nightmares like this one, as you will either cancel, or in some cases you will have the choice of selectively not installing the parasite software which has nothing to do with the main purpose of the program you are about to install.  If you can find an entry for it in "Control Panel \ Add/Remove Programs", de-install TOPText.  Next, download SpyBot Search & Destroy from our downloads page, make sure you run the online update, and then run it to fully get rid of the Ezula software.

 F

F-sched

F-Sched.exe

(Frisk Software)

F-PROT Scheduler  for the  F-PROT  antivirus software.  This scheduler runs in the System Tray and enables you to schedule unattended virus definitions updates as well as unattended virus scans of your PC.

Recommendation :
At the time of writing, 15‑Nov‑2004, this is in our opinion one of the worst designed antivirus software scheduler programs.  If during the course of a virus definitions update the scheduler determines that there is a new version of the main F‑PROT antivirus software, it waits on the screen till you click  DOWNLOAD,  at which point your web browser is opened for you to manually download the software updates.  We actually do not have a problem with having to manually download full-program updates through the web browser.  What we take extreme exception to is the fact that when the above happens you are no longer in  automatic unattended  mode – until you click either  DOWNLOAD  or  CANCEL  the updating module stays open on the screen and  does not  update your virus definitions.  You could therefore be in the situation which we have seen a number of times where you have left your PC on for hours overnight or during the day, with your email software open and automatically picking up emails as they arrive, a new virus is released during that time, Frisk Software release both virus definitions and a new version of the F‑PROT program, but because your supposed unattended automatic update is actually waiting for user input, F‑PROT does not get updated with the latest definitions and your PC gets infected through a virus email which it received while the  F‑PROT  updater was waiting for user input !   And there is more :  if you have configured the scheduler to check for virus definitions updates every hour, like we do, but it got stuck for hours waiting for user input, and you come back and give it that user input  (either through cancelling or through downloading the full F‑PROT update), then the scheduler stacks up all the update checks it was not able to do while waiting for user input, and you then get bombarded over the next hour or two of work, with endless interruptions from the scheduler checking for updates.  Unbelievable.  Lastly, unlike with other software, it is our belief that, for antivirus software, scheduled automated virus definitions updates should occur seamlessly and  unobtrusively  in the background in the way that Symantec do with Norton Antivirus – you should never have a situation where you find yourself being interrupted by a virus update while you are writing an email with the result that you end up typing in the wrong window !   So, depending on how you use your PC, and on how often you check for virus definition updates, the F‑PROT scheduler can either be  OK  or a total and absolute source of frustration which will make you want to disable this task on the  Startups  tab of  The Ultimate Troubleshooter  and use manual updates instead.  Frisk Software need to have a serious look at this.  Your choice.

F-stopw F-StopW.exe

(Frisk Software)
On-Access scanner task for the F-PROT antivirus software. If this task is running your PC is protected in real-time as this task scans in the background each file that you access.  When F-STOPW is running you can also see an icon in the System Tray – if you right-click on the icon you can enable/disable the on-access scanner.

Recommendation :
Essential for the total virus protection of your PC.

F1tray

F1Tray.exe

(FusionOne)

System Tray icon for FusionOne’s  MightyPhone  software.  MightyPhone is a great concept for synchronizing the data on your mobile phone, with your web-based or PC based organizer.  On this one we will allow ourselves to say that we hope it succeeds.  We cannot explain the concept any better than MightyPhone (FusionOne) do themselves (as of 1‑Feb‑2004) :  “MightyPhone provides the ability for end-users to add, remove, or change data on their cellular handsets without having to enter it directly into the device (via the cumbersome keypad) or sync via a cable with a PC. All independent of their carrier, be it CDMA or GSM.  MightyPhone comes in two flavours regular web‑powered MightyPhone and the downloadable MightyPhone Pro desktop application.  The web version allows users to login and enter or change contact, calendar and task data via a web browser, and then sync the updates down to their phone over‑the‑air.  The downloadable desktop sync client, MightyPhone Pro, allows over‑the‑air, 2-way synchronization of contacts, calendar and tasks directly from popular PIM applications, such as Microsoft Outlook, Outlook Express, and Lotus Notes.  The web version is worthwhile for those who have minimal contact or calendar information to track, while the Pro version is more for the professional.  The major caveat with MightyPhone is that your phone has to be supported, however MightyPhone can support any mobile phone with built-in SyncML capabilities, something that is appearing in more and more models.  MightyPhone.com.

Recommendation :
Down to end-user preference.  If you often synchronize your phone with your PC, then it makes sense to have MightyPhone Pro accessible straight from the System Tray.

F1autosync

F1AutoSync.exe

(FusionOne)

See   F1TRAY   above for details of  MightyPhone.  F1AUTOSYNC is the background task which pulls data out of your Personal Information Organizer and sends it to your phone over the web and then over‑the‑air.  It also does the reverse operation when synchronizing from your phone back to your PC.

Recommendation :  
Essential for the proper functioning of MightyPhone Pro.  You can either decide to leave it as a startup task or you can decide to disable it on the  Startups  tab of  The Ultimate Troubleshooter  since starting the MightyPhone Pro software when you next need it will in any case start this task.

Fa_gd32 FA_GD32.exe

(Cybermedia Inc, now McAfee)
First Aid 98 Windows Guardian.  Once upon a time, in the days of Windows 95/98, a number of companies thought they could write software which would prevent or warn of Windows crashes, which would fix problems in tens of thousands of programs (Gee!!) thanks to constantly updated databases, which would provide safe installation and un-installation of software, and with some of them, which would provide the "System Restore" function which is now part of Windows since Windows Millennium Edition.  Would you know, the majority of these products turned out to cause crashes themselves !!!  Right from day one we never believed in such programs, if only because it is an impossible feat to keep track of all the software produced around the world, of their bugs, of their newest bugs or corrections in their latest versions, etc...  Like most other such programs, First Aid 98 and the company that made it, Cybermedia, eventually disappeared (bought by McAfee/Network Associates in the case of Cybermedia).

Recommendation :
Given that First Aid 98 has been a defunct product for some time, running it in 2002 and beyond without the benefit of program updates that take into account nowadays software, is courting trouble.  You certainly should not run it on anything other than Windows 95/98.  Our view is that if you are still running First Aid you should de-install it.  Note, however, that because of the way in which First Aid interacts with Windows, the de-installation of First Aid may actually cause you instability problems later (catch 22!!).  So, if your PC is currently relatively stable, do not try to fix what doesn’t need fixing, keep First Aid.
Fameh32 FAMEH32.exe

(F-Secure)
F-Secure Alert and Management Extension Handler.  Part of F-Secure AntiVirus and Internet Firewall products.  We are not yet sure about what this task does.

Recommendation :
Since we have no information on this task we can only recommend that you leave it alone.
Fapiexe FAPIEXE.exe

(Thought Communications Inc.)
Part of FaxTalk Messenger Pro.

Recommendation :
We have as yet no idea as to what this task does, so our recommendation has to be to leave it alone.
Fast Fast.exe

(Microsoft)
From the little documentation we have found on this program FAST.EXE seems to be a program that gets installed only with older versions of Microsoft’s PowerToys for Windows XP.

Recommendation :
Microsoft’s recommendation is to upgrade to the latest version of PowerToys for Windows XP, available here.
Fawgrd32 FAWGrd32.exe

(Cybermedia Inc, now McAfee)
Part of First Aid 98.  Read FA_GD32 above for more details.

Faxsvc

FaxSvc.exe

(Microsoft)

Microsoft Fax service for Windows 2000/XP/2003, and also NT4 with Service Pack 4 or later.  This service implements the fax configurations you have defined in the Fax Service Management Console that you can access through the Fax icon in the Control Panel.  FAXSVC also answers fax calls and sends the faxes you send from your programs (e.g. from Word, Excel, etc...).

Recommendation :
If you do not use Microsoft faxing, you can set this service to  Disabled  in  “Control Panel \ Services”  in Windows NT4,  or in  “Control Panel \ Administrative Tools \ Services”   in Windows 2000/XP/2003.  Look for the service called  Fax Service.

Fbdirect FBDirect.exe

(Visioneer)
Background Task for Visioneer scanners whose purpose seems solely to handle the "one-touch" button of the Visioneer scanners.  It kicks in when the end-user tries to do a direct scan using that one-touch button.

Recommendation :
Since 1999 FBDIRECT has consistently caused problems to end-users :  illegal operations, not responding, "application errors", or "linked to missing export".  This is not good software writing at all. Users who experience all the above can try downloading the latest drivers from our Drivers pages, but that does not always fix the problem.  If the latest drivers do not fix the problem, then disable FBDIRECT with  The Ultimate Troubleshooter.  The only problem with doing so is that you lose the ability to do direct scans using the one-touch button on the scanner itself – you have to use the software to scan.
Find Fast FindFast.exe

(Microsoft)
Microsoft Office Find Fast.  This gets installed with Microsoft Office 95/97/2000.  The supposed benefit of Find Fast is that it will enable you to find documents faster from within Microsoft Office.  In practice :  as with TASKMON it makes no visible difference to end-users, particularly on nowadays fast PCs.  Thus, not only is Find Fast a total waste of time, but it is also a very significant annoyance too since, on many PCs, it results in the PC seemingly "freezing" for 2 to 5 seconds.

Recommendation :
Delete using  The Ultimate Troubleshooter
Also go into the FindFast icon in the Control Panel and choose the "Index \ Close and Stop" menu option.
Firedaemon Firedaemon.exe You have the Backdoor.NTHack virus.

Firewallsvr

FirewallSvr.exe

(???)

You have the   W32.Netsky.X@mm  \  W32.Netsky.Y@mm   virus.

Flashksk Flashksk.exe

(???)
Background task installed with the drivers for smartmedia card readers.  We are not sure yet as to what this task actually does.

Recommendation :
Given that we do not know the purpose of this task, we can only recommend to leave it alone.  That said, this task will sometimes generate illegal operations on shutdown or at startup, particularly on Windows 2000 PCs.  Additionally, many users have reported problems being able to eject/shutdown USB devices when this task is running – killing the task usually allows the end-user to eject/shutdown his USB devices.
Flshstat Flshstat.exe

(Toshiba)
Toshiba’s FlashPath Status Monitor software Tray icon.  The FlashPath Status Monitor software enables you to monitor the performance and possible problems with your FlashPath;  it also enables you to monitor the transfer of your photos from the camera to your PC via the floppy disk drive (using the FlashPath).

Recommendation : 
This Tray icon is not necessary for the good functioning of the FlashPath – it is purely a monitoring program. Unless you use your digital camera on a regular basis, we recommend disabling it with  The Ultimate Troubleshooter.  Whenever you want to monitor your FlashPath, simply start this monitor program through Start \ Programs \ FlashPath \ FlashPath Status.
Fotostation easy autolaunch FotoStation Easy AutoLaunch.exe

(FotoStation.com / FotoWare.com ???)
Background task installed when you install the CD that comes with Nikon digital cameras.  That CD installs, amongst other things, FotoStation Easy, a digital images management and editing software package.  FotoStation Easy AutoLaunch pre-loads part of FotoStation in memory so that FotoStation loads faster whenever you decide to run it.

Recommendation :
As with Microsoft’s FindFast, useless on nowadays’ PCs. Disable with  The Ultimate Troubleshooter.

Fpdisp4

Fpdisp4a

Fpdisp5a

FpDisp4.exe

FpDisp4a.exe

FpDisp5a.exe

(FinePrint Software)

The FinePrint Dispatcher.  This program handles the spooling of print jobs to the FinePrint printer.  “4” and “4a” indicate version 4.x of the software, while “5a” indicates version 5.x of the FinePrint software.

Recommendation :
Absolutely essential to the FinePrint software, so leave it alone.

Fppdis1

Fppdis1a

Fppdis2a

Fppdis1.exe

Fppdis1a.exe

Fppdis2a.exe

(FinePrint Software)

FinePrint pdfFactory.  This is the background task which handles the creation of  PDF  files when you print to the FinePrint pdfFactory printer.  The “1” and “1a” indicate versions 1.x, while the “2a” is version 2.x.  Both version 1.x and version 2.x of pdfFactory can co-exist on the same PC.

Recommendation :
Absolutely essential to the pdfFactory, so leave it alone.

Fs20

FreeSurfer
FS20.exe

(EMS Project)
EMS Free Surfer Companion for Internet Explorer – initially a popup stopper program, but nowadays also a safe personal information store, a cookies and cache management program, and more.

Recommendation :
Essential for the proper operation of Free Surfer – Leave alone.

Fsb

Fsb.exe

(???)

You have the   W32.HLLW.Yero.Worm  /  W32/Fesber.worm   virus.

Fsg_4104 FSG_4104.exe

(Gator / now Claria)
Gator trickler software.  The purpose of the Gator Trickler is to gather information about the websites that you visit, and transmit it to the Gator servers when you are on the Internet so that aggregate statistics derived from that information can be sold to third-party vendors about users, traffic patterns, and websites visited.  This is what we call spyware/adware as it transmits information from your PC and it is advertising related.  Historically this program is in most cases installed by KaZaA, iMesh, AudioGalaxy, and other file sharing programs.

Recommendation :
We normally would remove any such software by first looking for any Gator entries in the "Add/Remove Programs" icon in the Control Panel, and then downloading and running Spybot from our Downloads page to complete the removal. Note, however, that the removal of Gator components may totally incapacitate your free version of the file sharing program that you installed, so proceed with caution if those programs are important to you.
Ftctrl32 FTCtrl32.exe

(Thought Communications Inc.)
Background support task for Thought Communications’ FaxTalk Messenger Pro.  This task watches for incoming voice and fax calls so that fax and voice calls can be routed to the appropriate fax and voicemail mailboxes.

Recommendation :
Essential to the proper functioning of FaxTalk. Leave alone.
Ftpqueue FTPQueue.exe

(Ipswitch)
FTP Queuing utility of the WS-FTP FTP client program from Ipswitch which enables you to schedule FTP jobs for specific times and dates.  It shows up as an icon in the System Tray.

Recommendation :
Very few FTP users actually schedule FTP jobs "for later" !  Unless you are such a user, we recommend disabling FTPQUEUE in  The Ultimate Troubleshooter.

Fvprotect

Norton Antivirus AV

FVProtect.exe

(???)

You have the   W32.Netsky.P@mm   virus.

Fxredir FxRedir.exe

(Canon)
Canon MultiPASS Fax Redirector task installed by the drivers for some of Canon’s MultiPASS range of multifunction printers (fax/copier/printer/scanner).  This task enables your PC to send a fax from your PC through the fax component of your MultiPASS machine

Recommendation :
Essential if you fax through your MultiPASS printer, otherwise you can disable it with  The Ultimate Troubleshooter.
Fxssvc FxSSvc.exe

(Microsoft)
Microsoft’s Fax Service found on Windows XP and 2003.  Microsoft’s Fax enables the user to send and receive faxes.  This service is responsible for sending and receiving faxes, as well as logging various stats about your faxing loads, archiving sent faxes, and configuration of your fax device (fax modem, fax port).

Recommendation :
Set to disabled or manual in "Administrative Tools / Services" in the Control Panel if you do not use Microsoft Fax.  This is especially important given that this service uses a lot of memory and, also, it will often generate boot-up errors if it is enabled but was never configured.

 G

Gamechannel GameChannel.exe

(Wild Tangent)
Wild Tangent Web Driver – Background task installed with games from Wild Tangent.  This background task notifies you of new or updated Wild Tangent games whilst also supposedly making it faster for you to access your Wild Tangent games – it will also automatically download in the background updated version of your current games (if configured to do so).  GAMECHANNEL will also show in the Task List of new PCs (2002), such as Hewlett-Packard’s Pavilion range, as they come pre-installed with demo versions of Wild Tangent games. Some Wild Tangent games :  Atomic Pop, Betty Bad, Blackhawk Striker, Blasterball 2, BlasterBall Wild, Cannonballs, Dark Orbit, Dice Jam, Excavation, Gem Master, Hit the Pros, Honeycombs, Kublox, Men in Black II CROSSFIRE (& Extreme version), SabreWing, Slyder, Snowboard Extreme, Space Rocks, Virtual Warfare.

Recommendation :
This task consumes Internet bandwidth unnecessarily and unless you use your PC primarily for games, you should disable it with  The Ultimate Troubleshooter  (our preferred method) – it is not needed to run your games. Another way to disable it is by right-clicking the Wild Tangent icon in the System Tray, taking OFF all ticks, and clicking OK.  Other issues with this task include problems with Internet access as a result of the task crashing in the background, and Internet Explorer crashes.  If you do not play any Wild Tangent games, you should consider de-installing anything "Wild Tangent" in the "Add/Remove Programs" in the Control Panel.
Gbpoll GBPoll.exe

(Roxio)
This is the GoBack Polling Service. Read GBTRAY below for more details on Roxio’s GoBack.  According to Roxio, GBPOLL performs background services in support of GoBack’s various functions and is essential to the good functioning of the product.

Recommendation :
You have it from the horse’s mouth :   leave it alone.  That said, both GBTRAY and GBPOLL have been known to prevent ScanDisk and Defrag from completing, so you may need to temporarily disable them with  The Ultimate Troubleshooter  if you want to run ScanDisk/Defrag.
Gbtray GBTray.exe

(Roxio)
Roxio’s GoBack System Tray icon.  In a nutshell Roxio’s GoBack provides the System Restore feature of Windows Millennium Edition, and now Windows XP, with extra bells and whistles.  A great product for Windows 95/98/NT4/2000 users where the System Restore facility does not exist, but not necessary, in our opinion, for Windows ME and Windows XP users.

Recommendation :
It is essential that GBTRAY is running for GoBack to work properly. Leave alone therefore.  That said, both GBTRAY and GBPOLL have been known to prevent ScanDisk and Defrag from completing, so you may need to temporarily disable them with  The Ultimate Troubleshooter  if you want to run ScanDisk/Defrag.
Gdrive Gdrive.exe

(IBM)
Startup Task found on IBM Netvista and Aptiva PCs running Windows Millennium Edition (Windows ME).  This task sets the drive letter for the CD-ROM drive to G: .

Recommendation :
The mind boggles as to why someone at IBM thought it would be a good idea to have such a program.  It causes nothing but problems, from the inability to access a network drive set to G:  by the fileserver’s login scripts, to not being able to choose a letter of your own for your CD-ROM drive.  Utterly useless.  If, like us, this task annoys you, disable it with  The Ultimate TroubleshooterBefore you do that, however, note that this will probably result in the drive letter for your CD-ROM drive changing, probably to something like E: or F:, which may affect CD based software programs such as games, encyclopaedias, reference programs, etc…

Gearsec

Gearsec.exe

(GEAR Software)

Service installed by GEAR Software’s CD and DVD writing software on Windows NT4/2000/XP PCs.  This service shows as  Gear Security Service  on the  Services  tab of  The Ultimate Troubleshooter.  GEARSEC.EXE is the driver part of the software which allows the GEAR software (through the GEAR.wrks API) to recognize and work with recorders under Windows NT4/2000/XP.  The GEAR.wrks API is used in GEAR Software's products and, as per GEAR Software’s website on 31-Mar-2004, it is also used in several 3rd party applications such as Apple's iTunes, Cakewalk's Pyro, Audible's AudibleManager and DiscWelder by Minnetonka, MixMeister, some Kodak products, 321 Studios, etc....  At the time of writing most users who have GEARSEC running on their PCs had it installed when they installed Apple’s iTunes for their iPods.

Recommendation :
This service is essential for the software that installed it.  Thus if you have any of the products mentioned above or on the following webpage,  http://www.gearsoftware.com/partners/ strategic/index.cfm,  then you need this service to be running.  There have been reports of slow shutdown caused by  GEARSEC.  When that is the case make sure you have the latest service pack for your operating system (at the time of writing they are Service Pack 6a for Windows NT4,  Service Pack 4 for Windows 2000,  and Service Pack 1/1a for Windows XP)  and  that you have done a recent Windows update.  Next, download the latest version of the software which installed  GEARSEC  (eg. the latest version of Apple iTunes) as it may have an updated  GEARSEC  driver.  If, however, you no longer use any software which uses the  GEARSEC  driver, then set the Startup Mode of this service to  Disabled  on the  Services  tab of  The Ultimate Troubleshooter.

Ghoststartservice

Ghosts~2

GhostStartService.exe

GHOSTS~2.exe

(Symantec)

Norton’s Ghost Start Service which runs as a task under Windows 9x/ME and as a service under Windows NT4/2000/XP/2003.  This task/service gets installed if you install either the Windows portion of Ghost the standalone product, or if you install Norton SystemWorks 2002 or later and include the Ghost option.  GHOSTSTARTSERVICE is the background support task/service for Ghost for Windows.  When you use Ghost Explorer, or start Ghost tasks such as backup and restore, they are implemented in the background by  GhostStartService.

Recommendation : 
Essential for the proper functioning of Ghost for Windows (not needed if you only use the DOS Ghost program that also comes with Ghost for Windows).

Ghoststarttraya

Ghoststarttrayapp
GhostStartTrayApp.exe

(Symantec)
Norton’s Ghost System Tray icon installed when you install the Windows portion of Ghost the standalone product, or if you install Norton SystemWorks 2002 or later and include the Ghost option.  This big "Ghost" icon enables you to access the Norton Ghost functions from the System Tray.

Recommendation :
Down to end-user preference. You can disable/enable this icon with  The Ultimate Troubleshooter.

Gigabit

Gigabit.exe

(???)

You have the   W32.Beagle.U@mm \  W32/Bagle.U@mm   virus.

Gisdnlog GISDNLog.exe

(British Telecom)
ISDN Connection Event Recorder.  This task is installed by the drivers for BT’s USB ISDN modems which come integrated with the ISDN wall socket – it appears as an icon in the System Tray.  If you click on the icon you can see if you are connected, how many channels you are using, the number of bytes transmitted, etc...

Recommendation :
This task is often responsible for shutdown problems (the PC will not shut down fully) under Windows 9x/ME, and possibly under Windows 2000/XP as well – yet it is not needed for the ISDN modem to function properly. Disable with  The Ultimate Troubleshooter.
Gmt GMT.exe

(Gator)
Background program which is part of the Gator GAIN software (Gator Advertising and Information Network).  Gator GAIN is what we call adware (advertising spyware).  Gator GAIN is used by software manufacturers to enable them to offer you the FREE use of their software – instead, they receive advertising revenue through the advertisements displayed by the Gator GAIN add-on whenever you are using their software.

Recommendation :
We are against all adware.  Download SpyBot Search & Destroy from our Downloads area and use it to remove Gator and any other adware or spyware.  Note, however, that in some cases removing adware will totally disable the application which installed it, and this maybe an application which is important to you, so you may want to initially only disable this with  The Ultimate Troubleshooter  while you ascertain how Gator Gain got into your PC.