HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	Cdcompat	Cdcompat.exe	"Added by the GEMA TROJAN!"
X	cddrv32	cddrv32.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	CDInterceptor	cdi.exe	CD indexer for measuring the speed of CD players
X	CDriver	windrv.exe	"Added by the DELF.WG TROJAN!"
X	Cdrom Controller	cdromcntrl.exe	"Added by the BATTRY-A TROJAN!"
X	cds	cds.exe	"Added by the SPYMON TROJAN!"
N	CDTray	CDTray.exe	"On HP PCs
U	CeEKEY	CeEKey.exe	Hot Key utility included on Toshiba Satellite laptops
U	CeEPOWER	cepmtray.exe	"Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed
?	Ceic	Ceic.exe	"??"
X	Cekirge	[path to worm]	"Added by the KERGEZ.A WORM!"
X	center	[random name]32.exe	"Added by the BOFRA.A WORM!"
X	CentralProcessor	taskimgr.exe	"Added by the BANCOS.J TROJAN!"
?	CEPA	wsot.exe	"??"
U	CertReg	certreg.exe	"Related to Gemplus Card Reader"
N	CesarFTP FTP Server	server.exe	"CesarFTPd - FTP server"
X	cesmain.dll	"cmail.dll	Rundll32"
X	CEventMgr	Cell.exe	"Added by the BIFROSE-AK TROJAN!"
N	CFD	CFD.exe	"BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs"
X	CFDStart	WinMuschi.exe	"WINMUSCHI dialler"
X	cfgboost	cfgboot.exe	Added by an unidentified WORM or TROJAN!
Y	cfgintpr	cfgintpr.exe	"Configuration Interpreter - part of Tiny Personal Firewall V4"
X	cfgmgr51	"RunDLL32.EXE [path] cfgmgr51.dll	DllRun"
X	cfgmgr52	"RunDLL32.EXE [path] cfgmgr52.dll	DllRun"
N	cfgwiz	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
?	cFosDNT	cFosDNT.exe	"cFos DSL Modem driver related. What does it do and is it required?"
?	cFosInst_Check	cfosinst.exe	"cFos DSL Modem driver related. What does it do and is it required?"
U	cFosSpeed	cFosSpeed.exe	"cFos Software Internet acceleration program related. Note - may be necessary for the software to work properly"
U	CFSServ.exe	CFSServ.exe	Belongs to Toshiba's configfree utility and searches for Wireless Devices
X	cftmon32	taskmgr*.exe [* = number]	"Added by the SOWSAT.C and SOWSAT.J WORMS!"
X	cfy	cfy.exe	"Surfenhance.com SearchForIt adware variant"
X	CGI Firewall Script	CGIAGENT.EXE	"Added by the BROPIA-U WORM!"
U	CGServer	cgserver.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs"
X	Cgtask Services	cgtask.exe	"Added by the LALA.B TROJAN!"
X	Cgywin	cgywin32.exe	"Added by the RBOT-AEI WORM!"
U	ChamClock	ChamClock.exe	"Chameleon Clock - system tray clock replacement"
X	change-me-now	msgfix1.exe	"Added by the SDBOT.ZD WORM!"
U	ChangeICON	SPMSMON.EXE	Card reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem
?	ChangeLines	chngline.exe	"??"
N	Chatango	Chatango.exe	"Chatango - ""allows people to be connected in real time through their Web browsers. Include your Chatango contact link or button when you create eBay auctions
N	Chcenter	chcenter.exe	"IMSI HiJaak - ""the easiest way to convert
X	che32	che.ocx.vbs	"Added by the ADENU-B VIRUS!"
X	Cheatle	GigaByte.exe	"Added by the SHODI.B VIRUS!"
N	Check for One Touch Update	wiseupdt.exe	Checks for updates for Visioneer OneTouch scanners
N	Check for TWS Updates	WiseUpdt.exe	Interactive Brokers - check for update to their standalone Java-based trading platform
U	Check Messenger	cmesseng.exe	"Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account"
N	CheckCustomWorksUpdate	CheckCWupdate.exe	"Update checker
X	Checkdisk	mscas.exe	"Added by the VAGON-A TROJAN!"
X	CheckFaultKernel	mswdm.exe	"Added by the SMALL-CSK TROJAN!"
U	CheckIt	ToolBox.exe	"CheckIt Toolbox from CheckIt 86	CheckIt86.exe	"CheckIt 86 popup blocker"
Y	CheckMsgPlus	"MsgPlusH.dll	VerifyInstallation"
X	checkrun	elite***32.exe [* = random char]	"EliteBar adware"
X	checkrun	elitelsj32.exe	"Added by the MULTIDR-ER TROJAN!"
X	CheckScan32	regload16.exe	"Added by the AEBOT.K WORM!"
?	checktime	ct.exe	"Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?"
Y	CheckVCR	IOMagic.exe	"Driver for the I/OMagic Personal Video Recorder (DR-PCTV100)"
U	CherryKeyMan	KeyMan.exe	"Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys"
X	china11msn	CHINA11MSN.EXE	"Added by the ENVID.O WORM!"
U	ChineseStar	cstar.exe	Chinese language support software
U	CHIPDRIVEPinManager	sokscmpn.exe	"ChipDrive Smartcard software"
U	CHIPDRIVESmartcardManager	SCMgr.exe	"ChipDrive Smartcard software"
N	CHKADMIN	CHKADMIN.EXE	"Compaq Network Management System. When running
X	chkdsk	autoexec.bat	"Added by the ANPES WORM!"
X	Choke	Choke.exe-blahh	"Added by the CHOKE WORM!"
X	chope	runlli32.exe	"Added by the QQPASS-U TROJAN!"
X	chostsv	chostsv.exe	"Added by the BANPAES.C TROJAN!"
U	CHotKey	mhotkey.exe	"Enables special keys on Chicony keyboards. Special combinations include Internet
U	CHotKey	MK9805.EXE	"Enables special keys on Chicony keyboards. Special combinations include Internet
U	CHotKey	zHotkey.exe	"Enables special keys on Chicony keyboards. Special combinations include Internet
N	Christmas Music Player	TTEST6.EXE	"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
?	ChromeMark	keysh.exe	"Related to this. Don't know what keysh.exe does though and if it's required"
?	ChronitelInitTV	CHTVINIT.EXE	"??"
X	CiaBackdoor	msldr.com	Added by a VIRUS!
X	cihost.exe	cihost.exe	"Added by the LINST TROJAN!"
N	CIJxP2PSERVER	CIJxP2PS.EXE	"Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model
U	Cisco Systems VPN Client	ipsecdialer.exe	"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
N	Cisco Systems VPN Client	vpngui.exe	"Sets up IPSec communications for Cisco's VPN Client"
N	CISrvr Program	CISRVR.EXE	Related to internet setup on Compaq PC's
X	Cissi	Cissi.exe	"Added by the CISSI.A WORM!"
U	CitiUCS	CitiUCS.exe	"Citibank Virtual Account Numbers - ""With this free service for Citi cardmembers
N	CitiVAN	CitiVAN.exe	"Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again"
X	CJET	CJet.exe	"Added by the Adware.FFToolBar adware toolbar"
Y	Cjstcom	Cjstcom.exe	Canon printer BJ status language monitor
Y	ClamWin	ClamTray.exe	"ClamWin antivirus"
X	Classes	int1.exe	"""Switch"" adult content dialler"
X	Classes	intl.exe	"""Switch"" adult content dialler"
X	Classes	run_21.exe	"""Switch"" adult content dialler"
X	Classes	srv.exe	"""Switch"" adult content dialler"
X	Classes	srv2.exe	"""Switch"" adult content dialler"
X	Classes	MSTAR2.EXE	"""Switch"" adult content dialler"
X	Classes	mstart.exe	"""Switch"" adult content dialler"
X	clcbt.exe	clcbt.exe	"Added by the AGENT.CBA TROJAN!"
U	CLCLSet	CLCL.exe	CLCL clipboard caching utility
?	CleanEasyImg	cleanall.exe	"??"
?	CleanRegPath	CleanReg.exe	"Apparently Annex A ADSL modem related. What does it do and is it required?"
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	CleanSweep Useage Watch	CSUSEM32.EXE	Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
U	CleanTemp	CLEANT~1.EXEB	"CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory"
U	CleanTemp	CleanTemp.exe	"CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory"
N	Cleanup	ONICTASK.EXE	"Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet"
Y	CleanUp	mcappins.exe	Used by McAfee Virusscan to perform product updates. When updates are available the program will download and install them automatically. Recommended to leave enabled
?	CleanupProgram	cleanup.exe	"In a C:Sonysys folder - Sony Vaio related?"
X	clean_service	clean_service.cmd	"Added by the REFAZ WORM!"
X	clfmon.exe	clfmon.exe	"Added by the AGENT-BJ TROJAN!"
N	Click Radio Tuner	clickr~1.exe	"ClickRadio - subscription service playing radio music via the internet"
N	Click Tray Calendar	ClickT~1.EXE	"ClickTray Calendar - shows holidays
N	ClickMe	ClickMe.exe	"ClickM ""JOKE"" program"
U	Clickoff	Clickoff.exe	"Clickoff automatically dismisses annoying dialog boxes"
X	ClickTheButton	CTB.EXE	"ClickTheButton Downloader-MY adware"
X	ClickTheButton	csrss.exe	"ClickTheButton Downloader-MY adware! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
X	ClickTheButton	MSCStat.exe	"ClickTheButton Downloader-MY adware"
X	CLICONFG	CLICONFG.EXE	"Added by the OPASERV.T WORM!"
U	Client Access API Daemon	cwbappcd.exe	"IBM iSeries Client Access
N	Client Access Check Version	cwbckver.exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
?	Client Access Express Welcome	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	Client Access Help Update	cwbinhlp.exe	"Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	Client Access Service	CwbSvStr.Exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
U	Client Access Taskbar	cwbuitsk.exe	"IBM iSeries Client Access taskbar
X	Client Agent	ipxwping.exe	"Added by the PPDOOR-N TROJAN!"
X	Client Agent	photes.exe	"Added by the PPDOOR-P TROJAN!"
X	Client Agent	[path to file]	"Added by the PPDOOR-J TROJAN!"
?	Client agent for ARCserve	W95AGENT.EXE	"Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?"
X	Client for Microsoft Networks	msclient32.exe	"Added by the SDBOT-BXQ WORM!"
X	Client Server Control Process	[path to trojan]	"Added by the AGENT-HR TROJAN!"
X	Client Server Run Time Proccess	csrsrv.exe	"Added by a variant of the SDBOT WORM!"
X	Client Server Runtime Process	csrsss.exe	"Added by the SDBOT-LD WORM!"
X	Client Server Runtime Process	csrs.exe	"Added by the LINKBOT.M WORM!"
X	Client Server Runtime Process	smmss.exe	"Backdoor TROJAN! Possible SDBOT-GEN variant"
X	Client Update	wup.exe	"Added by a variant of the OPANKI-A WORM!"
X	ClientMan1	mscman.exe	"ClientMan parasite variant"
N	Clik Status Monitor	toolsclickstat.exe	Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
N	Clipbook Service	Clipsrv.exe	"Supports Windows XP ClipBook Viewer

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list