HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	CLICONFG	CLICONFG.EXE	"Added by the OPASERV.T WORM!"
U	Client Access API Daemon	cwbappcd.exe	"IBM iSeries Client Access see here"
N	Client Access Check Version	cwbckver.exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources"
?	Client Access Express Welcome	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop browser and wireless access to iSeries servers. What does it do and is it required?"
N	Client Access Help Update	cwbinhlp.exe	"Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries"
N	Client Access Service	CwbSvStr.Exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources"
U	Client Access Taskbar	cwbuitsk.exe	"IBM iSeries Client Access taskbar see here"
X	Client Agent	ipxwping.exe	"Added by the PPDOOR-N TROJAN!"
X	Client Agent	photes.exe	"Added by the PPDOOR-P TROJAN!"
X	Client Agent	[path to file]	"Added by the PPDOOR-J TROJAN!"
?	Client agent for ARCserve	W95AGENT.EXE	"Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?"
X	Client for Microsoft Networks	msclient32.exe	"Added by the SDBOT-BXQ WORM!"
X	Client Server Control Process	[path to trojan]	"Added by the AGENT-HR TROJAN!"
X	Client Server Run Time Proccess	csrsrv.exe	"Added by a variant of the SDBOT WORM!"
X	Client Server Runtime	[path to worm]	"Added by the POEBOT-KR WORM!"
X	Client Server Runtime Process	csrsss.exe	"Added by the SDBOT-LD WORM!"
X	Client Server Runtime Process	csrs.exe	"Added by the LINKBOT.M WORM!"
X	Client Server Runtime Process	smmss.exe	"Backdoor TROJAN! Possible SDBOT-GEN variant"
X	Client Update	wup.exe	"Added by the OPANKI.O WORM!"
X	ClientMan1	mscman.exe	"ClientMan parasite variant"
N	Clik Status Monitor	toolsclickstat.exe	Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
X	Clip Service Manager	clipmg.exe	"Detected by Kaspersky as the DELF.DXJ TROJAN! See here"
X	Clip Servicer	clipsrvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Clip Srv	clipsv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	clipboard.exe	clipboard.exe	Added by an unidentified WORM or TROJAN!
N	Clipbook Service	Clipsrv.exe	Supports Windows XP ClipBook Viewer which allows pages to be seen by remote ClipBooks
U	clipdiary	clipdiary.exe	"Clipdiary from Softvoile - ""Free Clipboard Manager for keeping the clipboard history"""
N	ClipMate5x	ClipMt5x.exe	"Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs"
N	Clipmate6	CLIPMT60.EXE	"Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs"
N	ClipMate7	ClipMate.exe	"Clip Mate 7 by Thornsoft - utility that allows you to store more than one item in the clipboard"
N	Clipomatic	Clipomatic.exe	"Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied and allows you to retrieve the old data"
N	Clipsrv	Clipsrv.exe	Supports Windows XP ClipBook Viewer which allows pages to be seen by remote ClipBooks
X	ClipSrv	clipserv.exe	"Added by the SDBOT-AAV and SDBOT-AFE WORMS!"
X	ClipSrv	CLIPBRD3D.EXE	"Added by the MOFEI-D WORM!"
X	Clipsvc	clipsv.exe	"Added by the BLACKHOLE.F BACKDOOR!"
N	ClipTrak	ClipTrak.exe	"ClipTrak - clipboard extender"
N	ClipTrakker	ClipTrakker.exe	"Cliptrakker - clipboard extender"
N	CLISTART	CLIStart.exe	Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
X	clkhost	[path to trojan]	"Added by the WIXUD-B TROJAN!"
U	CLMFrontPanel	clmpanel.exe	System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled connection status is lost
?	clnwall	rundll.exe setupx.dll InstallHinfSection ..delwall.inf	"??"
X	clock	[various filenames]	"LiveChat Adware - known file names include: mssetup.exe kstatus.exe spoolsv.exe sptsupd.exe osk.exe msswchx.exe netdde.exe msbkup.exe"
X	Clock Manager	amsngr.exe	"Added by the SDBOT-XM TROJAN!"
X	ClockSync	Sync.exe	"ClockSync - synchronizes your system clock with an internet time server. It's by WhenU the makers of the Save Now spyware and they're usually seen in tandem so it's advised to replace it with one of may spyware free alternatives available"
U	ClockWise	CLOCKWISE.EXE	"ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync"
U	ClocX	ClocX.exe	"ClocX - places a clock on the desktop that can be moved and then changed into a calendar plus you can set alarms etc?"
U	CloneCD	CloneCDTray.exe	"System tray for the now discontinued CloneCD. The only useful option is ""Hide CDR Media"" only available via this tray. Has additional unknown functions in later versions"
U	CloneCDElbyCDFL	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
U	CloneCDTray	CloneCDTray.exe	"System tray for the now discontinued CloneCD. The only useful option is ""Hide CDR Media"" only available via this tray. Has additional unknown functions in later versions"
?	Clotusorgreg0	prtStart.exe [path] Orgprt.exe	"IBM Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?"
X	Clre	mmdc.exe	"Added by the PURSCAN-AI TROJAN!"
X	ClrSchLoader	[path to file]	"ClearSearch adware"
X	CLSID	com.exe	Adult content dialler
X	CLSID	dll.exe	Adult content dialler
X	CLSID	msgplus.exe	Adult content dialler
X	CLSID	plugin.exe	Adult content dialler
X	CLSID	sed.exe	Adult content dialler
X	CLSID	msgplus.exe	Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension
X	CLSRSS	LSACS.EXE	"Added by the SILLYFDC-X WORM!"
?	CM-SmWizard	SmWizard.exe	"SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?"
U	cma	cma.exe	"DeskSite CMA siftware - ""retrieves new content from the DeskSite Data Center"""
X	CMAPP	cmappclient.exe	"CasClient adware - also detected as the CMAPP TROJAN!"
N	Cmaudio	Rundll32 cmicnfg.cpl CMICtrlWnd	System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel
X	Cmd	cmd32.exe	"Added by the TANKED WORM!"
X	cmd32	configs.exe	"Hijacker also detected as the QURL-2 TROJAN!"
X	cmd64	cmd64.exe	"CoolWebSearch Msconfd parasite variant"
X	cmdbcs	cmdbcs.exe	"Added by the LINEAG-GKW TROJAN!"
X	cmdcon	cmdcon.exe	"Added by the CRYPTER.A TROJAN!"
X	cmds	vtsqn.dll	"Added by a variant of the VUNDO TROJAN!"
X	CmdShell.exe	CmdShell.exe	"Added by the BCKDR-QHY BACKDOOR!"
X	CME	cme.exe	"Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	CmeSYS	CMEsys.exe	"Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	CmeUPD	CMEupd.exe	"Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	CMFibula	CMFibula.exe	"CASClient adware"
N	CmFlywaveName	CmFlywav.exe	"Driver for Linksys Wireless-G Music Bridge"
N	CMGrdian	CMGrdian.exe	McAfee's QuickClean an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
U	CMGShieldUI	CMGShieldUI.exe	"UI for CMG (CREDANT Mobile Guardian) Shield from Credant Technologies. ""The CMG Shield resides on devices and external media to enforce security policies even if the device is disconnected from the network."" Used to protect sensitive corporate on laptops handhelds smartphones USB drives and CD-DVDs"
X	CMMan	CMMan.exe	"Added by the CMAPP TROJAN!"
X	Cmmon32Sys	cmmon32.exe	Added by the SMALL.CL TROJAN!
X	cmonitor	startupmon.exe	"SystemDoctor misleading security software - not recommended see here"
U	CmPCIaudio	RunDll32 CMICNFG3.CPL CMICtrlWnd	Registers the Control Panel applet for a C-Media PCI sound card
U	CMPDPSRV	CMPDPSRV.EXE	"Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys Inc.). ""Printer Driver Plus seamlessly integrates all the necessary components of a printer driver plus more"". Installed with some Compaq and Lexmark printers"
X	Cmpnt	Devices2.exe	"Added by the TOMPAI-D TROJAN!"
X	Cmpnt	mainsv.exe	"Added by the TOMPAI-C TROJAN!"
X	cmrss	cmrss.exe	"Added by the DELF.DU TROJAN!"
X	cmrss	crmss.exe	"Added by the DLOADER-EK TROJAN!"
X	cmrss	[path to trojan]	"Added by the DLOADER-QQ TROJAN!"
X	cmrst	cmrst.exe	"Added by the BANCOS.S TROJAN!"
X	cmrst	cmrst.scr	"Added by the DLOADER-FP TROJAN!"
X	cms	iserver.exe	"Added by the DLOADER-WK TROJAN!"
U	CMSETTINGS	ctmn.exe	"Part of NetNanny Chat Monitor"
X	cmsound	vcpdll.exe	"Added by the TCXMEDI-D downloader TROJAN!"
X	cmsound	vcsystem.exe	"Added by the TCXMEDI-D downloader TROJAN!"
X	cmss	system.exe	"Added by a variant of the RBOT WORM!"
X	cmssapp	iexplore_.exe	"Added by the BANCBAN-CQ TROJAN!"
X	cmssapp	iexplore.exe	"Added by the BANCBAN-GF TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	cmssSystemProcess	csmss.exe	"Added by the AGENT-CO TROJAN!"
X	cmssSystemProcess	mcsmss.exe	"Added by a variant of the AGENT.EI TROJAN!"
X	cmssSystemProcess	csms.exe	"Added by the AGENT-Y TROJAN!"
X	CMSystem	CMSystem.exe	"CASClient adware"
X	cmt101	cmt101.exe	"Added by a variant of the CRYPTER.C TROJAN!"
?	CmUCRRun	CmUCReye.exe	"Related to Medion Display Information. What does it do and is it required?"
X	cmx32	cmx32.exe	"Added by the GEMA.D TROJAN!"
X	Cn323	cnfrm33.exe	"Added by the MIMAIL.G WORM!"
X	Cn911	ODBCJET.exe	"Added by the BIFROSE-PR TROJAN!"
X	CNBABE	CNBABE.EXE	Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
N	cnet	kontiki.exe	"Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops"
Y	cnfgCav	CMain.exe	"Part of Comodo Antivirus"
X	Cnfrm32	cnfrm.exe	"Added by the MIMAIL.D WORM!"
X	CnsMax	Internat.exe	"Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%"
X	CnsMin	Rundll32.exe [path] CNSMIN.DLL Rundll32	"CnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
Y	CnwiDeviceAgent	cnwida.exe	"Part of the Canon imagePROGRAF W8400 printer management software"
Y	CnxAdslL	CnxAdslL.exe	DLink Zoom or Conexant modem driver
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
U	Cobian Backup 8 interface	cbInterface.exe	"""Cobian Backup is a backup program that can be executed in 2 ways: as a normal application or as a Windows Service. The program can schedule automatic backups for files and directories locally or to FTP servers and can use compression and encryption"""
X	CodeClean	CCIntro.exe	"CodeClean spyware remover - not recommended see here"
U	Codename Dashboard	dashboard.exe	"Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework it is a host for interchangeable components through which C.D. allows you to have any information you want on your desktop all the time""
X	cof.updit	[random filename]	"Added by a variant of the SDBOT WORM!"
U	CognizanceTS	rundll32.exe [path] AsTsVcc.dll RegisterModule	"Cognizance Corp Identity And Access Management suite"
X	Coldlife -icmp	Systray.exe	"Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process"
N	CollaborationHost	p2phost.exe	"People Near Me Microsoft? Windows? Peer-to-Peer Networking platform for Windows Vista"
U	coloreal	coloreal.exe	Makes colours sharper and brighter but will only work with coloreal capable monitors
N	Colorific	Hgcctl95.exe	"Colorific® from E-Color - ""delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor."" Now superseded by ColorWizzard™"
N	Colorific Control Panel	Hgcctl95.exe	"Colorific® from E-Color - ""delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor."" Now superseded by ColorWizzard™"
X	COM Service	mscom32.com	"Added by the BEASTY.H TROJAN!"
X	COM Service	msynvr.com	"Added by the BEASTY.G TROJAN!"
X	COM Service	msjclh.com	"Added by the BEASTY.E TROJAN!"
X	COM Service	msdrce.com	"Added by the BEASTY.I TROJAN!"
X	COM Service	msflyx.com	"Added by the BEASTDO-O TROJAN!"
X	COM+ Event System	DRWTSN16.EXE	"Added by the LOVGATE.AB WORM!"
X	COM+ EventSystem Services	ECSERVER.EXE	"Added by a variant of the SDBOT WORM!"
X	Com+ Sys	csrs.exe	"Added by the FORBOT-BT WORM!"
X	COM+ System Applications	lsas.exe	"Added by the AGOBOT.SE WORM!"
X	COM++ System	exploier.exe	"Added by the LOVGATE.Z WORM!"
X	COM++ System	suchost.exe	"Added by the LOVGATE-F WORM!"
X	COM++ System	svchost.exe...	"Added by a variant of the LOVGATE WORM!"
N	COM-IP	COMIP.EXE	COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
U	com.codeode.cactusspamfilter	cactusspamfilter.exe	"Cactus Spam - free easy-to-use spam blocker"
U	com.codeode.privacymantra	privacymantra.exe	"""Privacy Mantra keeps your computer clean from online and offline tracks"""
U	ComAgent	ComAgent.exe	"ComAgent - MDaemon's instant messaging client"
X	combo.exe	combo.exe	"Added by the CHIMO-C TROJAN!"
X	combop.exe	combop.exe	"Added by the BOWFEED-A TROJAN!"
X	Comcast Network	ribiva.exe	"Added by a variant of the IRC TROJAN!"
X	ComcastSUPPORT	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
X	COMCFG	comcfg.exe	"Added by the TOADCOM.A TROJAN!"
X	comctl32	comctl32.exe	"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
U	COMDRV32	svdhost.exe	"Orvell Monitoring 2003 surveillance software. Uninstall this software unless you put it there yourself. Note - asks for permission to contact the IP address of http://www.protectcom.com/"
U	Comm Driver	commh32.exe	"G Data ""PC Spion"". PC monitoring and surveilling software captures all users activity on the PC see here. Disable/remove if you didn't install it yourself!"
X	Command	system.exe	"Added by the GATECRASH.A or GATECRASH.B TROJANS!"
X	Command	Gotit.exe	"Added by the TITOG WORM!"
X	COMMAND	command.exe	"Added by the QQPASS.E TROJAN!"
X	command	javaw.exe	"Added by the AGOBOT-LG WORM!"
X	Command Prompt32	CmdPrompt32.pif	"Added by the ASSIRAL.B WORM!"
U	Command WorkStation 4	cws 4.exe	"EFI's Command WorkStation makes ""managing demanding workflows easier by centralizing job management. The software automatically identifies the Fiery servers on the network and offers customization options for displaying information"" - for high-end print environments"
X	command32	command32.exe	"Added by the LINEADI-A TROJAN!"
N	CommCtr	commctr.exe	"""Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!"". Available via Start -> Programs"
Y	COMMUNICATOR	Communicator.exe	"Part of Microsoft Office Communicator which is an integrated communications client that allows information workers to communicate in real time using a range of different communication options including instant messaging (IM) voice and video"
U	Comodo Firewall	CPF.exe	"Comodo Firewall"
Y	COMODO Firewall Pro	cfp.exe	"Comodo Firewall Pro"
U	Comodo Launch Pad Tray	CLPTray.exe	"System Tray access to LaunchPad as bundled with Comodo's freebie offerings such as Comodo Anti-Virus. Some allege that LaunchPad is impossible-to-uninstall adware or worse - see here"
Y	COMODO Memory Firewall	cmf.exe	"""Comodo Memory Firewall is a buffer overflow detection and prevention tool which provides the ultimate defence against one of the most serious and common attack types on the Internet - the buffer overflow attack"""
X	CompanionWizard	compwiz.exe	"WinAntiVirus 2006 misleading virus software - not recommended see here"
U	Compaq Alerter	CPQAlert.exe	"Compaq's Insight Manager Agent - a tool that allows for ""fault performance and configuration management"". Recommended for corporate users only. It's best removed if installed but not wanted rather than disabled at startup. See here for more information"
N	Compaq Computer Corp SCCenter Module	SCCENTER.EXE	For Compaq PC's. Part of Backweb
?	Compaq Computer Security	Rundll32.exe SECURE32.CPL Service	"??"
N	Compaq Connections	COMPAQ~1.EXE	"See here - ""messaging service that automatically sends you support information tips ideas and special offers from HP and our partners especially designed for HP and Compaq desktop computer owners"""
N	Compaq Connections	BackWeb-1940576.exe	"See here - ""messaging service that automatically sends you support information tips ideas and special offers from HP and our partners especially designed for HP and Compaq desktop computer owners"". * can be any digit"
N	Compaq Connections	Compaq Connections.exe	"See here - ""messaging service that automatically sends you support information tips ideas and special offers from HP and our partners especially designed for HP and Compaq desktop computer owners"""
N	Compaq DMI	cpqdmi.exe	Compaq version of the Desktop Management Interface
X	Compaq Drivers	F1rewalls.exe	"Added by the SDBOT-WD WORM!"
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
X	Compaq Jes Drivers	winjes.exe	"Added by the SDBOT-XR WORM!"
U	Compaq Knowledge Center	silent.exe & matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city state etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario Preference and Contact Technical Support". You decide
N	Compaq Message Server	COMPAQ-RBA.EXE	"Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans but fairly harmless. They send information on the ""Compaq Advisor/Compaq Message Screener"" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the ""advanced"" tab. Not required and can cause problems"
U	Compaq PK Daemon	cpqkl.exe	For Compaq laptops for programming user configurable keys. Not required unless you use them
X	Compaq Print Fax	cpqa1000.exe	"Added by the SDBOT.BCV WORM! Please take note of the difference between the legitimate Compaq Fax Utility Name (A1000 Settings Utility) and the name (Compaq Print Fax) used by this worm"
X	Compaq Service Drivers	systeminfos.exe	"Added by the SDBOT-XC WORM!"
X	Compaq Service Drivers	compq.exe	"Added by a variant of the SDBOT WORM!"
X	Compaq Service Drivers	navapqwa.exe	"Added by the SDBOT.BBQ WORM!"
X	Compaq Service Drivers	amsn.exe	"Added by a variant of the SDBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list