HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	dumprep	spoolc.exe	"Detected by Kaspersky as a variant of the AGENT.CXF TROJAN!"
N	dumprep 0 -k	dumprep 0 -k	Used in connection with memory dumps - you can disable these by - right clicking on My Computer selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
N	dumprep 0 -u	dumprep 0 -u	Used in connection with memory dumps - you can disable these by - right clicking on My Computer selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
X	DUN_SERVICES3	dun3.exe	"Added by the SOKIRON TROJAN!"
X	Duweculey	yujixit.exe	"Added by the SDBOT.BRP WORM!"
X	Duwee wong Cerbon	Cirebons.exe	"Added by the BHARAT.A WORM!"
X	DVD Upgrade	dvdupgd.exe	"Added by a variant of the IRCBOT BACKDOOR!"
N	dvd43	DVD43_Tray.exe	"DVD43 is ""a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies"""
U	DVD43	DVD43.exe	"DVD43 is a small tool that overrides CSS copy-protection found on DVD movies"
X	dvd98	windvd98.exe	"Added by the CULT.P WORM!"
N	DVD@ccess	DVDAccess.exe	"Part of DVD Studio Pro from Apple Inc. - ""The DVD@CCESS feature allows you to add additional interactivity to your DVD title when it is played on a computer"""
U	DVDBitSet	DVDBitSet.exe	DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
?	DVDCheck	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
X	Dvdcompat	Dvdcompat.exe	"Added by the GEMA TROJAN!"
N	DVDLauncher	DVDLauncher.exe	"Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion"
N	DVDSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching they decided to implement an anti-spyware service. Run manually before installation starts
N	DVDTray	DVDTray.exe	HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware
N	DVDUpgrade	DVDUpgrd.exe	"Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs"
N	DVDXGhost	DVDGhost.EXE	"DVD Ghost - ""utility to make your software DVD players and DVD copy/backup softwares restriction-free and copy/backup DVD to hard disk"""
U	dvHighMem	cfgmng32.exe	"Related to PureSight PC - designed to offer maximum flexibility and choice as families manage their internet use"
Y	Dvp95	Dvp95.exe	"Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine"
Y	dvpapi9x	DVPAPI9X.exe	Command AntiVirus for Windows 95/98/Me
Y	DvpInitExe	Dvpinit.exe	"Command Antivirus related"
Y	dvprpt	Dvprpt.exe	"Command Antivirus related"
X	dvraudio	dvraudio.exe	"Added by a variant of the CRYPTER.C TROJAN!"
X	dvsfss	fbsfsdrs.exe	"Added by the SDBOT-QA WORM!"
U	DVSync	dvsync.exe	DVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC
X	DvVideo32	dvvid32.exe	"Detected by Trend Micro as the TINY.FD TROJAN! See here"
X	Dvx	wsxsvc.exe	"Delfin Media Viewer or ""Promulgate"" adware variant"
X	dw	dw.exe	"DownloadWare adware"
N	DW4	Weather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature conditions alerts etc"
N	DW4	DesktopWeather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature conditions alerts etc"
N	DW6	DesktopWeather.exe	"Desktop Weather 6 by The Weather Channel - provides current temperature conditions alerts etc"
U	DWHeartbeatMonitor	DWHeartbeatMonitor.exe	DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
N	DwlClient	support.exe	Download manager for Dell support alerts
Y	DWQueuedReporting	dwtrig20.exe	"Related to System Event Notification Services from Microsoft. Required for Efficient Mobile Network Computing"
N	dwStart	FireWall.exe	"The Shield firewall from pcsecurityshield.com. Not recommended by some (see here) and there are better free alternatives out there such as Zone Alarm"
X	DW_Start	rwwnw64d.exe	Identified as a variant of the AdWare.Win32.ZenoSearch.am malware
X	Dx	sys*.exe [* = random number]	"Added by the DEXTER.A WORM!"
X	Dx8compat	Dx8compat.exe	"Added by the GEMA TROJAN!"
X	dxdiag diagnose	msidxdia.exe	"Added by a variant of the RBOT WORM!"
X	dxdiags.exe	dxdiags.exe	"Added by the CERTIF-G TROJAN!"
X	DxDialog	dxdlg32.exe	"Added by the VB-CXT TROJAN!"
X	dxdll32	ntxdll.exe	"Added by the GAOBOT.CPX WORM!"
N	DXDllRegExe	dxdllreg.exe	"Created when you select ""Yes"" to check the ""WHQL Digital signatures"" in the DirectX9 files at the first time you open it"
X	DxLoad	DX3DRndr.exe	"Added by the GIBE.B WORM!"
N	DXM6Patch_981116	p_981116.exe	"Win32 cabinet self extractor. More info here"
X	dxmsrv	dxmsrv.exe	Added by an unidentified WORM or TROJAN!
X	Dxsty	Dxsty.exe	"Added by the GEMA TROJAN!"
X	Dxupdate.exe	Dxupdate.exe	"Added by the MAFEG WORM!"
X	dxvid	dxvid.exe	"Added by the DLUCA-Y TROJAN!"
X	DyFuCA	optimize.exe	"Adult content dialler - see here"
X	DyFuCA Active Alert	actalert.exe	"Adult content dialler - see here"
X	Dynamic DHCP	dydhcp.exe	"Added by the RINBOT.B TROJAN!"
X	Dynamic Dns Binary	dynitora.exe	"Added by the RBOT-WT WORM!"
X	Dynamic Dns Binary	CMD16.EXE	"Added by the RBOT-XM WORM!"
X	Dynamic Dns Binary	winxp34.exe	"Added by a variant of the RBOT WORM!"
X	Dynamic Dns Binary	WinHelpcfn.exe	"Added by a variant of the RBOT WORM!"
X	Dynamic Link Library loader	Loader32.exe	"Added by the KOL TROJAN!"
U	DynDNS Updater	DynDNS.exe	Dynamic DNS IP address updater tool used as a client for Dynamic DNS service providers such as http://www.DynDNS.org
N	DynDNS-Updater Traytool	ddutray.exe	"DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually"
X	DynHttp Dns Binary	dynizari.exe	"Added by a variant of the RBOT WORM!"
U	DynSite	DynSite.exe	"DynSite - dynamic DNS client also called an automatic IP updater"
U	Dynu Basic Client	dynubas.exe	"Dynu online dynamic IP update client. Useful when using a dial up modem"
?	DZKillMe	DZSAVEME.EXE	"??"
U	D_V_T	dvt.exe	"DICOM Validation Tool - ""DICOM is increasingly being used as the standard communication mechanism when integrating various medical products in a hospital environment"""
?	D_V_T	dvt.exe	"Installation could be a crack/hack to NOD32 here. Seen and removed in many logs. Investigate it further and if this file is present C:d_v_t.reg then it should be fixed. Not to be confused with the DICOM entry here. Both files are located in the Windows/Windir directory"
X	E-Card	ecard.exe	"Added by the YODI WORM!"
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
N	E-Color Registration	SonnReg.exe	"Registration for Colorific® and 3Deep® monitor calibartion sofware from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™"
X	E-nrgyPlus	E-nrgyPlus.exe	"Energyplus - tracks internet activity including websites visited and queries made at popular search engines. This information along with some system information is sent to a remote site"
X	e-Surveiller Station	estation.exe	"ESurveiller spyware. Note - ESurveiller is spyware that monitors and records keystrokes and mouse clicks instant message conversations Internet activity and applications used must be manually installed"
U	E06DXLRD_7604703	EDICT.EXE	"Related to Microsoft Encarta dictionary functions"
N	E6TaskPanel	TaskPanl.exe	"Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet E-mail and web-space"
N	EA Core	Core.exe	"Electronic Arts EA Link software - ""gives you a secure yet simple way to download EA PC games and patches as well as other exclusive content"""
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X	Eac Download	download.exe	"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
U	EACLEAN	eaclean.exe	"For Compaq PC's. Easy Access button support for the keyboard"
X	Eac_Cnry	canary.exe	"Added by the CANARY TROJAN!"
?	Eac_rnvdl	ANTIVIRUS_INSTALL.EXE	"??"
U	EanthologyApp	EANTHO~1.EXE	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
U	EanthologyApp	eanthology.exe	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
U	eanthology_install.exe	eanthology_install.exe	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
U	eanth_critical_update_alert	sys_alert.exe	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
U	eanth_system_patcher	sys_alert.exe	"eAcceleration Stop-Sign security software related. Previously not recommended see here"
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
N	EAPCISETUP	wizard.exe	Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
Y	Earthlink Protection Control Center	elnk_pcc.exe	"EarthLink Protection Control Center - ""powerful integrated security program makes it easier than ever to protect yourself against viruses spyware and hackers-all from one convenient location"""
N	EarthLink ToolBar 5.0	etoolbar.exe	EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar but you can delete these or add more buttons any time
U	Easy Key	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
N	Easy Start Button	esb.exe	Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
U	Easy-PrintToolBox	BJPSMAIN.EXE	A utility to launch the applications that are bundled with a Canon bubblejet printer
X	EasyAV	EasyAV.exe	"Added by the NETSKY.S or NETSKY.T WORMS!"
X	EasyDates	EasyDates.exe	Premium rate adult content dialler
X	EasyDates_gb	EasyDates_gb.exe	"""Edate-A"" premium rate adult content dialler"
X	EasyDates_nl	EasyDates_nl.exe	Adult content dialler
U	EasyKey	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
U	EasyKeyboardLogger	EasyKeyboardLogger.exe	"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
U	EasyLinkAdvisor	LinksysAgent.exe	"Linksys EasyLink Advisor - ""the free application that provides and easy way to setup view manage and repair your network"""
U	EasyMessage	em2.exe	"Easy Messenger instant messenger for MSN AOL ICQ and Yahoo. See here"
X	EasySearchBar	ESBUpdate.exe	EasySearchBar adware downloader
X	easyServ	Server.exe	"Added by the EASYSERV TROJAN!"
X	EasySpywareCleaner	EasySpywareCleaner.exe	"EasySpywareCleaner spyware remover - not recommended see here"
U	EasySync Pro	XCPCMenu.exe	"""IBM® Lotus® EasySync® Pro is a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - 3CmPlm	AutoDet.exe	"3Com Palm PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - LtNts4	NtsAgent.exe	"Lotus Notes 4 specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - PocketPC	AUTODE~1.EXE	"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasySync Pro - PocketPC	AutoDetect.exe	"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
U	EasyTuneIII	EasyTune.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U	EasyTuneIV	ET4Tray.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U	EasyTuneV	GUI.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
X	easywww	easywww2.exe	Added by an unidentified VIRUS WORM or TROJAN!
U	eAudio	eAudio.exe	Acer eAudio Management provides centralized control over notebook audio and specialized audio modes for movies music and games
X	EbatesMoeMoneyMaker	wjview ...Code	"Ebates adware"
X	EbatesMoeMoneyMaker0	EbatesMoeMoneyMaker0.exe	"Ebates adware"
X	eBay Toolbar	EBAYTBAR.EXE	"eBay Toolbar - reportes as spyware as it "phones home""
U	eBayToolbar	eBayTBDaemon.exe	"eBay toolabar related - also contains eBay account Guard which monitors for fraudulent eBay sites"
X	ebmmm	ebatesmmmv.exe	"Ebates adware"
U	eBoard	Eboard.exe	eMachines multimedia keyboard manager. Required if you use the extra keys
N	eBot	DownloadWizard.exe	"eBot from Digital River - ""helps ensure your computer always has the latest technology fixes add-ons upgrades and 'cool stuff'."" Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs"
U	EC21	EZQ.EXE	"Related to EC21 ""the world's largest B2B marketplace to facilitate online trades between exporters and importers from all around the world"""
U	ECenter	gtb.exe	Dell E-Center/Google Toolbar related
N	ECenter	EULALauncher.exe	End User License Agreement (EULA) launcher - related to Dell E-Center/Google Toolbar
X	ecko	claro.exe	"Added by the DLOADR-AQJ TROJAN!"
?	ecpe	ECPE.EXE	"??"
U	eDataSecurity Loader	eDSloader.exe	"Part of Acer Empowering Technology. ""Acer eDataSecurity Management is a handy file encryption utility that protects files from being accessed by unauthorized persons using passwords and advanced encryption algorithms"""
N	edexter	edexter.exe	"eDexter supplements internet filtering by substituting local images for filtered images in order to prevent browser stalls and other annoyances. Can be activated manually when starting the browser"
X	editpad	editpad.exe	"Added by the CONSPER-B TROJAN!"
N	EDLoader	DTLoader.exe	Effective Desktop from MiniStars Software - desktop management software no longer being supported
U	eDonkey2000	edonkey2000.exe	File sharing network - not recommended as the free version of this application should be avoided as it installs without permission New.Net Webhancer WebSearch Toolbar and WinTools
U	EDRestore	??	"Set Point from Easy Desk Software - ""small utility that automatically sets System Restore points for WinME/XP"""
X	educational writer	[random filename]	"Added by the RBOT-LZ WORM!"
U	Edwizard	Edwizard.exe	"SafeGuard Easy - ""provides total company-wide protection for sensitive information on laptops and workstations. Boot protection pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"""
X	EDxMC110	Isass.exe	"Added by the VB-NIA WORM!"
X	Edzy AntiVirus	dppsfa.exe	"Added by a variant of the RBOT WORM!"
N	EEventManager	EEventManager.exe	"Part of the Epson Creativity Suite supplied with their multi-function printer/scanners Event Manager launches File Manager or PageManager for EPSON automatically when you press the B&W Start or Color Start button on the control panel in Scan mode"
X	Efata	[random 5 characters].exe	"Added by the FLUKAN-D WORM!"
U	eFax 4.1	J2GDllCmd.exe	"DLL Command Utility for version 4.1 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.1	J2GTray.exe	"System Tray access to version 4.1 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.2	J2GDllCmd.exe	"DLL Command Utility for version 4.2 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.2	J2GTray.exe	"System Tray access to version 4.2 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.3	J2GDllCmd.exe	"DLL Command Utility for version 4.3 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.3	J2GTray.exe	"System Tray access to version 4.3 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.4	J2GDllCmd.exe	"DLL Command Utility for version 4.4 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax 4.4	J2GTray.exe	"System Tray access to version 4.4 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax DllCmd	J2GDllCmd.exe	"DLL Command Utility for eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax DllCmd 3.5	J2GDllCmd.exe	"DLL Command Utility for version 3.5 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax DllCmd 4.0	J2GDllCmd.exe	"DLL Command Utility for version 4.0 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax Live Menu 3.3	J2GDllCmd.exe	"DLL Command Utility for version 3.3 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
N	eFax Tray Menu	HotTray.exe	"eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here"
U	eFax Tray Menu	J2GTray.exe	"System Tray access to eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax Tray Menu 3.3	J2GTray.exe	"System Tray access to version 3.3 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax Tray Menu 3.5	J2GTray.exe	"System Tray access to version 3.5 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
U	eFax Tray Menu 4.0	J2GTray.exe	"System Tray access to version 4.0 of eFax Messenger from j2 Global Communications Inc. - which ""is powerful Internet fax software that makes it easy to create annotate sign zoom and print faxes from any computer"""
N	eFax.com Tray Menu	HotTray.exe	"eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here"
X	efaxs lptt01	efaxs.exe	"RapidBlaster variant (in a ""efaxs"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	efaxs ml097e	efaxs.exe	"RapidBlaster variant (in a ""efaxs"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
U	EFI Hot Folders	hffw.exe	"""EFI Hot Folders improves productivity by simplifying the printing of PostScript and PDF files into a select drag and drop process. Once users create Hot Folders with different printing and finishing parameters files are printed without opening an application or print driver menu."" Part of EFI's high-end printing solutions"
U	EFI Job Monitor	[path] efjm.dllrun	Ricoh Imagio Printer/Scanner driver status monitor
U	Efpap.exe	Efpap.exe	"Easy File & Folder Protector. Deny access to certain files and folders or to hide them securely from viewing and searching"
Y	egui	egui.exe	"User interface for ESET NOD32 Antivirus and Smart Security"
X	ehSched	ehSched.exe	"Added by the SDBOT-DHF WORM!"
U	ehTray	ehtray.exe	System Tray access to Media Center for Windows Vista Home Premium and XP Media Center Edition
U	ehTray.exe	ehTray.exe	System Tray access to Media Center for Windows Vista Home Premium and XP Media Center Edition
X	ei10.exe	ei10.exe	"Added http://www.sophos.com/security/analyses/viruses-and-spyware/w32agobotnk.html"" target=_blank>AGOBOT-NK WORM!"
U	Eicon NetworksLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
U	Eicon TechnologyLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
X	eixfi	china.bat	"Added by the WCUP.A WORM!"
U	Elbycheck	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
U	Electron Microscope	EMIII.exe	"Electron Microscope or EM - is a program used to track Stanford's distributed computing program client called Folding at Home FAH. It will monitor up to 50 clients and give you the details about each client's progress as the FAH client runs. EM will also show you what each change in the protein looks like as the process continues"
X	Element	Element.txt	"Added by the ELEM TROJAN!"
X	element furth	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM!"
X	elitemedia	elitemediapop.exe	"Added by the LOWZONE-BB TROJAN! Also known as Elitebar/EliteToolbar/EliteSidebar adware"
N	elm	Elmenv.exe	ViaTech eLicense for securing distributing and selling music online
X	ELNKProxy	smproxy.exe	"Surfmonkey adware"
U	ELSA WINman Suite	Winmsuit.exe	Allows you to totally customize your ELSA graphics card settings including overclocking the GPU
Y	ElsaCapiCtl	Rcapi.exe	Assumed to stand for Remote Common Application Programming Interface (RCAPI) this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem
U	ELSAChipGuard	elsavect.exe	ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking
U	ELSBLaunch	ELSBLaunch.exe	"EarthLink SpamBlocker"
N	EMA.exe	EMA.EXE	Time management system which helps you to manage your time and appointments

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list