HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	ControlPanel	popcorn72.exe rundll.dll LoadMouseProfile	"Added by the DLOADER-RA TROJAN!"
X	ControlPanel	svcc.exe	"WorldSearch adware - re-directing searches to ""world-search.biz"""
X	ControlPanel	popcorn320.exe rundll.dll LoadMouseProfile	"Added by a variant of the DLOADER-RA TROJAN!"
X	ControlPanel	private.exe internat.dllLoadMouseCarpetProfile	"Detected by Norman Virus Control as W32/Downloader. Creates the files sdfff fdsf and zxczxc. In the C:\WINDOWS\SYSTEM32 directory creates the files d.exe s.exe and r.exe. Note - the ""private.exe"" file is found in %System%"
X	ControlPanel	twink64.exe internat.dllLoadKeyboardProfile	"Added by the DLOADER-BW TROJAN. Note - the ""twink64.exe"" file is found in %System%"
X	ControlServiceMgr	csmsv.exe	"Added by the AGENT-XC TROJAN!"
U	Cookie Cop 2	CookieCop.exe	"Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return"
U	Cookie Pal	CPBRWTCH.EXE	"Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return"
U	CookieJar	Cookiejar.exe	"Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return. No longer being actively supported"
U	CookiePatrol	CookiePatrol.exe	"CookiePatrol - cookie interceptor stopping spyware cookies that used to be part of PestPatrol before CA's aquisition"
U	CookieWall	cookie.exe	"CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return"
U	Cool Desk	cdesk.exe	"Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you"
X	CoolDownloads	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
U	CoolMon	CoolMon.exe	"""CoolMon monitors vital system stats and almost anything else you wish to display on the desktop"""
X	CoolMP3	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
U	CoolSwitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
N	Coolwallpaper	cwm_tray.exe	"Cool Wallpaper software allows you to manage high quality photos as desktop wallpaper and screen savers"
X	coolwebprogram	clrssn.exe	"CoolWebSearch Smartsearch parasite variant"
N	Copernic Desktop Search	DesktopSearch.exe	"Copernic Desktop Search - ""Easily search your entire hard drive in less than a second to pinpoint the right file e-mail music or pictures"""
U	Copernic Desktop Search 2	DesktopSearchService.exe	"Copernic Desktop Search - search agent"
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
Y	Copperhead	razerhid.exe	"Razer Copperhead mouse driver"
U	Copy handler	Copy Handler.exe	"Copy Handler lets you copy between hard disks floppies local networks CDs and many other storage media. Copy Handler gives you the power to pause resume restart and cancel during the copying and moving processes"
N	Copyright	mwcpyrt.exe	Displays copyright information on IBM ThinkPads
X	Core Process Aplication	ccapl.exe	"Detected by Kaspersky as a variant of the RBOT WORM! See here"
X	Core Process Aplication x16	ccapl16.exe	"Added by a variant of the SLAPER TROJAN!"
X	Core Process Aplication x32	ccapl32.exe	"Detected by Kaspersky as the SRAMLER.E TROJAN! See here"
X	Core System Hardware	syscorehd.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	CoreCenter	CoreCenter.exe	MSI Core Center - motherboard utility for monitoring CPU speed voltages temperatures and fans speeds as well as overclocking
U	CoreCenter	CORECE~1.EXE	MSI Core Center - motherboard utility for monitoring CPU speed voltages temperatures and fans speeds as well as overclocking
N	Corel Colleagues & Contacts Reminders	cffrem.exe	Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings maintaining addresses etc. Part of the now defunct Corel Print Office
N	Corel Desktop Application Director	dadx.exe	The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
N	Corel Family & Friends reminders	CFFREM.EXE	Corel Family & Friends - all-in-one calender address book and list manager. Part of the now defunct Corel Print House Magic
N	Corel Photo Downloader	MediaDetect.exe	"Related to Corel Photo Album"
N	Corel Registration	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Registration Reminder	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBrowser.exe	Registration reminder for CorelDRAW 10
N	CorelCENTRAL 10	I_26dadCC.exe	"CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs"
X	CorelDraw Toolbox	CorelDraw.exe	"Added by the SDBOT-VZ WORM!"
N	CorelMedia FoldersIndexer8	MFindexer.exe	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
N	CorelMedia FoldersIndexer8	MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
X	CoreSrv	coresrv.exe	"Some IRC trojans/worms use this - see here for more information"
?	CORESYS	coresys.exe	"??"
X	Corporate Microsoft Update	uptask.exe	"Added by the RBOT-GVB WORM!"
N	CorrectConnect	CConnect.exe	Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
X	cosine	cosine.exe	"Added by the RBOT-SW WORM!"
U	CostAware	niIPCApp.exe	"NetInternals CostAware - download quota measuring tool"
X	Counterstrike Service Agent	czrzns.exe	"Added by the MEDBOT.AR WORM!"
N	Country Select	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (DellCompaq HP etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
N	CountrySelection	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (DellCompaq HP etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
?	Coupon Offers	??	"??"
X	couponica	couponica.exe	"Adware - see here"
?	CP	CopyProtectionNotifier.exe	"Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition"
U	CP32NOT	CP32BTN.EXE	For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
U	CP4HPOT	OneTouch.EXE	One Touch keyboard driver. Required if you use the additional keys
N	CP888M1	CP888M1.EXE	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
?	CPA9P2PSERVER	CPA9P2PS.exe	"Found on a Compaq Presario but what is it?"
X	cpanel	winlogin32.exe	"Added by the RBOT-FOY WORM!"
U	CPATR10	CPATR10.EXE	Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba Compaq) to translate special hotkeys such as Play/Pause and Constrast
U	CPBrWtch	CPBrWtch.exe	"Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return"
Y	CPD_EXE	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*
X	cpl	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	browse.exe	"Added by the TACTSLAY.C TROJAN!"
N	CplBTQ00	CplBTQ00.EXE	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
N	CPLDBL10	CPLDBL10.exe	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
X	cpntmgc	wincomp.exe	"Added by the WINTRIM.A TROJAN!"
X	cpntmgc	simcss.exe	"Added by the MAGICON.A TROJAN!"
X	cpntmgc	navpmc.exe	"Added by the SIMCSS TROJAN!"
X	cpntmgc	winmgts.exe	"Added by the WINTRIM-B TROJAN!"
?	CPortPatch	cppatch.exe	"CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?"
Y	CPQAcDc	CPQAcDc.exe	Compaq PowerCon power management software for laptops
U	CPQAlert	CPQAlert.exe	"Compaq's Insight Manager Agent - a tool that allows for ""fault performance and configuration management"". Recommended for corporate users only. It's best removed if installed but not wanted rather than disabled at startup. See here for more information"
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See the entry for Compaq Message Server
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
U	CPQEASYACC	cpqeadm.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	CPQEASYACC	StartEAK.exe	"Easy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys"
U	CPQEASYACC	STARTDRV.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqeaui	cpqeaui.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqek	kcpqek.exe	"For Compaq PC's. Easy Access button support for the keyboard"
U	CPQInet Runtime Service	CpqInet.exe	"For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers"
N	CPQINKAGENT	cpqinkag.exe	That is the Compaq Ink Agent for some inkjet printers it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Cpqset	Cpqset.exe	Default settings software in Hewlett Packard notebook
Y	CPQSTUTFIX	stutfix.exe	"For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton"
U	CPQTEAM	cpqteam.exe	This program is bundled with HP servers. When loaded a system tray icon will be available that launches the HP Network Configuration Tool
X	cpr	cpr	Adroar.com adware downloader
X	cprocsvc	cproc.exe	Added by MSIL.AGENT.C TROJAN!
X	CPU Manager	cpumgr.exe	"Added by the PANDEM.B WORM!"
X	CPU Temp Control	wuitgurd.exe	"Added by the RBOT-AHV WORM!"
X	CPU Watcher	rundll32.exe cpu.dllload	"Added by the DLOADER-LO TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""cpu.dll"" file is located in %Windir%"
X	CPU Windows Status	cpustats.exe	"Added by a variant of the RBOT WORM!"
U	CPUcool	Cpucool.exe	Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
N	CPUMon	CPUMon.exe	"""CPUMon continuously displays the updated system statistics in a floating window as well as in system tray area"""
X	Cpusave	Cpusave.exe	"Added by the GEMA TROJAN!"
X	Cpusave32	Cpusave32.exe	"Added by the GEMA TROJAN!"
X	CPVHOST Settings	cpvhost.exe	"Added by a variant of the SDBOT TROJAN!"
X	cpyt	hidep.exe	"Added by the MIRJACK-A TROJAN!"
X	cqlyg	world_cup_.bat	"Added by the WCUP.A WORM!"
?	CQSCP2P SERVER	??	""Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed"
?	CQSCP2PS	??	""Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed"
X	Cr**.exe [* = random char]	Cr**.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples see this log"
X	Cr**32.exe [* = random char]	Cr**32.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples see this log"
U	cracked_windows1	cracked_windows1.exe	"Cracked Windows popup killer"
N	CrazyTalk Serve	rundll32.exe CrazyTalk.dll DIIServeMediaFile	"CrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS"
U	CRBroadCasting	CRBroadCasting.exe	"CardReader2 from On Track Inovations Ltd. USB Card Reader"
X	CRC Value Verifier	crsss32.exe	"Added by a variant of the RBOT WORM!"
X	CRC Value Verifier	Crsss64.exe	"Added by the RBOT-NY WORM!"
X	CRC Value Verifier	svchost32.exe	"Added by the RBOT-OA WORM!"
X	CRC Value Verifier	crsss.exe	"Added by the SPYBOT.UK WORM!"
X	Crc32stats Dependencies	Crc32stats.exe	"Added by the MYTOB.GT WORM!"
X	CRCSS	crcss.exe	"Added by the IRCBOT-TH WORM!"
U	Creata Mail	JMSrvr.exe	"Creata_Mail. Smileys stationary and more for you email. Required if you want to access the program from Outlook or Outlook Express"
X	Create A Monster	createAMonster.exe	"Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related"
N	CreateCD	Createcd.exe	Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
N	CreateCD50	Createcd50.exe	Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
X	Creates stractures for system management	stacture.exe	"Added by the SDBOT-DHS WORM!"
N	Creative AGP Wizard	agpwiz.exe	Part of Creative's BlasterControl
X	Creative Audio Drivers	creative.exe	"Added by the RBOT-FKR WORM!"
N	Creative Detector	CTDetect.exe	Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player selecting Tools then uncheck the Auto Start box. It should not start up automatically again
N	Creative Launcher	CTLauncher.exe	For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
U	Creative Live! Cam Manager	CTLCMgr.exe	"Creative Live! Cam Manager"
U	Creative MediaSource Go	CTCMSGo.exe	"Creative MediaSource Go! is a combination of a short-cut bar and launcher for the Creative MediaSource™ player/organizer - which ""enables you to manage your entire digital music collection on both your computer and your Creative portable music player effortlessly"""
U	Creative MediaSource Go	CTCMSGoU.exe	"Creative MediaSource Go! is a combination of a short-cut bar and launcher for the Creative MediaSource™ player/organizer - which ""enables you to manage your entire digital music collection on both your computer and your Creative portable music player effortlessly"""
N	Creative PCI Audio Configuration Utility	starter.exe	"System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer"
N	Creative Service for CDROM Access	Ctsvccda.exe	Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
N	Creative Software Update	AutoUpdate.exe	Auto-updater for Creative Labs software
N	Creative WebCam Tray	Camtray.exe	Creative WebCam tray control - can be started manually
X	Creative.exe	Creative.exe	"Added by the PROLIN WORM!"
N	CreativeDiscNotifier	CTNOTIFY.EXE	For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM DVD-ROM etc. Available via Start -> Settings -> Control Panel
U	CreativeMixer	CTMIX32.EXE	Creative soundcard System Tray access to for example volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon
?	CreativeTaskScheduler	CTSched.exe	"Creative Task Scheduler. What does it do and is it required?"
X	Critical Error Safe32	GetWaylayer32.exe	Added by the RBOT.IAL WORM!
X	Critical Update Check	battlenet.exe	"Added by the DELF-LB TROJAN!"
N	CriticalUpdate	Wucrtupd.exe	MS Windows Critical Update Notification. If you want to keep Windows up-to-date check the Windows Update site
X	CriticalUpdate	wucrtupd.exe	"Added by the NOALA.B WORM! Note - this file is located in the Windows or Winnt folder and must not be confused with the legitimate Windows process of the same name as described here"
X	crmssrlt	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	Crnsava	scrnsave.pif	"Added by the SDBOT-ZV WORM!"
X	cronos	MARCO!.SCR	"Added by the OPASERV.G WORM!"
X	CrossMenu	CrossMenu	Toshiba CrossMenu Utility - allows the user to create their own menus
X	CRP386 Networking	crp386.exe	"Added by the IRCBOT.N TROJAN!"
X	crs	crs.exe	"Added by the AGOBOT-TJ WORM!"
X	CRSSXP SysInfo	crssxp.exe	"Added by a variant of the SDBOT TROJAN!"
X	Crusty	dmcpl.exe	"Added by the RUSTY WORM!"
X	cryptdlg	cryptdlg.exe	Added by an unidentified TROJAN!
U	cryptoexpert	cexpert.exe	"CryptoExpert from SecureAction Research. Advanced on the fly encryption system"
X	Cryptographic Service	******.exe [* = random char]	"Added by the KORGO.W or KORGO.X or KORGO.AB WORMS!"
?	Crystal 3D Audio Control	CWD3DSND.EXE	"Crystal 3D Audio sound driver. Is it required?"
X	CS Update	copy /Y [path] ActivationManager.dll.upd [path] ActivationManager.dll	Added by an unidentified malware
N	csaRem	spqmdmui.exe	Compaq modem country selection
Y	CSAV_CheckViruses	vchk.exe	"Command Antivirus related"
U	csc	csc.exe	Command line compiler for Microsoft C# it gets installed with the .NET SDK
X	cscripts	cscripts.exe	"Added by the BDOOR-AAP BACKDOOR!"
X	CSCRS Value	cscrs.exe	"Added by the RBOT-AAA WORM!"
X	CSCRS Value Check	MsPMSPSd.exe	"Added by a variant of the SDBOT WORM!"
U	CSINJECT.EXE	CSINJECT.EXE	"Part of Quarterdeck/Norton CleanSweep. ""Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes"""
X	csm Win Updates	csm.exe	"Added by the ZOTOB.B WORM!"
X	CSNetManagerXp	isass.exe	"Added by the HIDER-O TROJAN!"
X	csoftok	softok.exe	"Added by the QQPASS.G TROJAN!"
X	csos	csos.exe	"Added by the SDBOT-DFE WORM!"
X	csrs	csrs.exe	"Added by the GAOBOT.GEN!POLY WORM!"
X	csrsc	csrsc.exe	Added by an unidentified VIRUS WORM or TROJAN!
X	CSRSS	CSRSS.EXE	"Search page hijacker redirecting to h**p://www.search-aide.com/. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Csrss	csrss.exe	"Added by the CHOD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder"
X	csrss	csrss.exe	"Added by the KEYLOG-AQ KEYLOGGER! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	csrss	csrss.exe	"Added by the CHODE-J WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder"
X	csrss	msmsgs.exe	"Added by the CHODE-J WORM!"
X	csrss	nwiz.exe	"Added by the CHODE-J WORM!"
U	csrss	csrss.exe	"BeyondKeylog surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Supremtec"
X	Csrss	CSRSS.EXE	"Added by the PUNYA-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS"
X	csrss	ssms.exe	Added by an unidentified malware
X	Csrss Host	csrhost.exe	"Detected by Trend Micro as the IRCBOT.BIZ WORM! See here"
X	CSRSS Loader	csrsss.exe	"Added by the AGOBOT.TX WORM!"
X	csrss.exe	csrss.exe	"Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	csrssLevel4	csrss.exe	"Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""Level4"" subfolder"
X	CSRSSU	CSRSSU.exe	"CoolWebSearch parasite variant - hijacking to Slawsearch.com. Also detected as the CWS-E TROJAN!"
X	CSRSSW	CSRSSW.EXE	"Added by the CWS-F TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list