HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	instit	INSTIT.BAT	"Added by the OPASERV.K WORM!"
?	InstUtlR.exe	InstUtlR.exe	"??"
X	intdctrr	idctup20.exe	"SafeSurfing adware variant"
X	Intec Service Drivers	msmsgrs.exe	"Added by the SDBOT-ADN WORM!"
U	Intel Active Monitor	imontray.exe	"System tray monitoring of fans
U	Intel File Transfer	xfr.exe	Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U	Intel PDS	pds.exe	Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
U	Intel Product Number Utility	IntelProcNumUtility.exe	"Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here"
N	Intel PROSet Tray Icon	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X	Intel Service Drivers	msconfig16.exe	"Added by the MSCONFIG16 TROJAN!"
X	Intel system tool	hookdump.exe	"Added by the SPYRE-H TROJAN!"
X	Intel system tool	winnook.exe	"Added by the SPYRE-C TROJAN!"
X	Intel system works	iis.exe	"Added by the RBOT.QGA WORM!"
X	intel32.exe	intel32.exe	"Added by the SmitFraud alias SPYJACK-B TROJAN!"
U	IntelAPMClient	amclient.exe	"LANDesk Management Suite software component"
X	InteliSys	smss.exe	"Advertisingvision adware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	intell32.exe	intell32.exe	"Added by the SmitFraud alias Desktophijack.C TROJAN!"
X	intell321.exe	intell321.exe	"Added by the SPYJACK-B TROJAN!"
X	Intelliflag_be.exe	Intelliflag_be.exe	"Added by the Intelliflag SPYWARE!"
U	IntelliPoint	point32.exe	"Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features"
U	Intellitype	type32.exe	"For MS programmable keyboards. If you disable Intellitype in Startup
U	IntelMEM	IntelMEM.exe	"Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore
U	IntelProcNumUtility	cpunumber.exe	"Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here"
Y	IntelWireless	ifrmewrk.exe	Associated with the Intel PRO/Set Wireless software
U	IntelZeroConfig	ZCfgSvc.exe	"Zero Config MFC Application
N	Intel® Common User Interface	igfxtray.exe	"Quick access to the control panel via a System Tray icon for graphics based upon the Intel® chipsets (ie
?	Intense Registry Service	IntEdReg.exe /CHECK	"Intense Educational Ltd - Language Office Software. Is it required?"
X	InterceptedSystem	[path to worm]	"Added by the ANACON-B WORM!"
Y	InterCheck Monitor	Icmon.exe	"Part of Sophos ant-virus sofware"
Y	InterCheckMonitor	ICMON.EXE	"Part of Sophos anti-virus sofware"
X	Interdll	Interdll.exe	"Added by the DELF family of TROJANS!"
X	Internal	[trojan filename]	"Added by the SMOTHER and TRANSLAT TROJANS!"
X	Internal	regedit.exe /s %windir%c:[month number]	"Added by the FORTNIGHT.D TROJAN!"
X	InternalSystray	Kazza.exe	"Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable
X	internat	internat.exe	"Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%"
X	Internat	systray.exe	"Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process. If you right-click on the real systray.exe the ""Properties"" reveal it to be a Microsoft file"
X	Internat	msgsrv32.exe	"Added by the NYRUBOT-A WORM!"
X	Internat	[trojan filename]	"Added by the CMJSPY-Y TROJAN!"
X	Internat Conf	bootconf.exe	"Homepage hijacker
N	internat.exe	internat.exe	"Microsoft language selection icon in system tray
X	Internat.exe	internat.exe	"Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) and has a ""?"" icon wheras this version resides in %windir% and has a ZIP icon"
X	internct	WinSocks5.exe	"Added by the GRAYBIRD.F TROJAN!"
X	internet	smss.exe	"Added by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	Internet	Internet.exe	"Added by the PWS-CS TROJAN!"
X	Internet	recruit.exe	"Added by the RBOT-AJG WORM!"
X	internet	[trojan filename].exe	"Added by the MIFENG-D TROJAN!"
U	Internet Answering Machine	IAMNET~1.EXE	"From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
U	Internet Answering Machine	IAM.exe	"From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
U	Internet Call Manager	ICM.EXE	"Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail"
X	Internet Config	svchosts.exe	"Added by the SDBOT TROJAN!"
X	Internet Connection Wizard	stisvsq.exe	"EasySearch adware"
X	Internet Connection Wizard	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Internet Content Publisher	ICP.EXE	"Added by the RBOT-UD WORM!"
U	Internet Download Accelerator	ida.exe	"Internet Download Accelerator download manager"
X	Internet Exploere Services	urlmon32.dll.exe	"Added by the EVIAN.C WORM!"
X	Internet Explore Microsoft	lEXPLORE.EXE	"Added by the RBOT-AOF WORM! Note - the filename is spelled with a lowercase ""L"" in place of an uppercase ""i"""
X	Internet Explorer	iexplorer.exe	"Added by the LORSIS WORM! Note - the legitimate IE (iexplore.exe) does not figure in Msconfig/Startup unless added manually and this loads from the ""RunServices"" key"
X	Internet Explorer	IEXPLORE.EXE	"Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	Internet Explorer	IExplorer.exe	"Added by the NETHIEF-O TROJAN!"
X	Internet Explorer	http.exe	"Added as part of a new potential CWS infection
X	Internet Explorer	iexpiore.exe	"Added by the RBOT-AZC WORM!"
X	Internet Explorer Configuration	IEXPLORE.EXE	"Added by the SDBOT-UL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process
X	Internet Explorer Security	iexplore.pif	"Added by the RBOT-ALQ WORM!"
X	Internet Explorer Updater	lexbac.exe	"Added by the DOWNLOAD TROJAN!"
X	Internet Explorer Updater	iexplorer.exe	"Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
U	Internet History Eraser	HERASER.exe	"Internet History Eraser - deletes your browsing tracks"
X	Internet Loader1	MSInstall61.exe	"Added by the KWBOT.B WORM!"
X	Internet Mail and News	msqdevl.exe	"EasySearch adware"
X	Internet Mail and News	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
U	Internet Optimizer	optimize.exe	Internet connection optimizer. Leave this enabled if you find it improves your connection
X	Internet Optimizer	optimize.exe	"Internet Optimizer parasite
X	Internet Send	More log.exe	Unidentfied adware
X	Internet Server	inetsrv.exe	"Added by the STARTPA-EM TROJAN!"
X	Internet Service	intersvc.exe	"Added by the SPYBOT-DE WORM!"
X	internet service	syscfg32.exe	"Added by the RBOT-QS WORM!"
X	internet service	ssvhost.exe	"Added by a variant of the RBOT WORM!"
X	internet service	svho0st98.exe	"Added by the RBOT.EAT WORM!"
X	Internet Services	systemdev.exe	"Added by the SDBOT-PW WORM!"
X	Internet Services	internet.exe	"Added by the MYTOB.BT WORM!"
X	Internet Services	interserv.exe	"Added by the RBOT.BNT WORM!"
X	Internet Services	Netsvc.exe	"Added by the MYTOB.MN WORM!"
X	INTERNET SERVISES	winz32.exe	"Added by the KWBOT.Z WORM!"
Y	Internet Sharing Server	iss_srvr.exe	"Intel AnyPoint internet sharing software"
X	Internet Suspention	story.exe	"Added by the WOOTBOT.HV WORM!"
N	Internet Sweeper	Sweeper.exe	"Internet Sweeper - removes unnecessart left over files after browsing the internet"
U	Internet Timer	ITIMER.exe	"Shareware dial-up connection call cost calculator from Ratsoft"
X	Internet Washer Pro	iw.exe	"Internet Washer manages temporary browser files
X	Internet.exe	Internet.exe	"Added by the MAGICCALL VIRUS!"
X	internet.exe	yinyin3345.vbs	"Added by the YINI MACRO!"
X	Internet2 Optimizer	wkfix.exe	"Added by a variant of the RBOT WORM!"
X	InternetWasherPro	iw.exe	"Internet Washer manages temporary browser files
X	INTERNET_SERVISES	winz32.exe	"Added by the SDBOT.Q TROJAN!"
U	InternodeUsage	mum.exe	Australian ISP's free monthly download meter
X	Internt	Internt.exe	"Added by the PEEPER or CARUFAX.A TROJANS!"
X	Intersoft Msngr	intersoftmsngr.exe	"Added by the AGOBOT-NW WORM!"
N	InterTrust Quick Start	it_cpq~1.exe	"InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business"
X	InterU	WINDRV.EXE	"Added by the IRCINTER.A TROJAN!"
N	Intervideo Win Cinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo Win Cinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinScheduler	WinScheduler.exe	"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
N	Intervideo WinScheduler	SchSvr.exe	"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
U	InterWARN	interwarn.exe	"InterWARN by Storm Alert Inc. Provides customized
X	Intespention	IEXPLORE.exe	"Added by the FORBOT-FL WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	Intmgr	Intmgr.exe	"Added by the GEMA TROJAN!"
X	intranet	SYS32CFG.EXE	"Added by the SPYBOT-DW WORM!"
X	Intrenat	Intrenat.exe	"Added by the LEMIR.E TROJAN!"
N	Introducing Media Manager	SPLASHA.EXE	"MS Media Manager tour. Not required"
N	Introduction-Registration	??	"For Compaq PC's. Should only run first time
X	IntruderAlert	ia99.exe	"Intruder Alert '99 from Bonzi - spyware"
U	Inventory Scan	LDISCN32.EXE	"LANDesk Management_Suite software component"
X	Ioadqm	Media Player.exe	"Added by the HAWAWI WORM!"
N	iobi	iobiClient.exe	"iobi Home - a mail/voice service by Verizon"
U	iolo Task Agent	Task_Agent.exe	"iOlo System Mechanic Task Agent. Scheduled maintenance"
N	iolo Utility Bar	SMUtilityBar.exe	"Iolo ""System Mechanic"" Utility Bar - can be launched manually"
U	ioloDelayModule	delay.exe	"Part of Iolo Technologies System Mechanic. Used to delay the start of an application which loads automatically as Windows loads"
U	Iomega Automatic Backup	ibackup.exe	"Iomega Automatic Backup - automatic backups for use with Iomega portable HDD"
U	Iomega Automatic Backup 1.0.1	ibackup.exe	"Iomega Automatic Backup - automatic backups for use with Iomega portable HDD"
N	Iomega Backup Scheduler	dtiom98.exe	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
U	Iomega Disk Icons	IMGICON.EXE	"Displays Iomega icons in Explorer/My Computer
U	Iomega Drive Icons	IMGICON.EXE	"Displays Iomega icons in Explorer/My Computer
U	Iomega ImIconXP	imiconxp.exe	"Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system
?	Iomega QuickSync	Quicksync.exe	"??"
N	Iomega Startup Options	IMGSTART.EXE	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
N	Iomega Watch	IOWATCH.EXE	Used by Iomega drives. Available via Start -> Programs
N	IomegaWare	COMMANDER.EXE	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
U	Iomon98.exe	Iomon98.exe	PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
X	IP Stack	ipstack.exe	"Added by the AGOBOT.CW WORM!"
X	IP**.exe [* = random char]	IP**.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	IP**32.exe [* = random char]	IP**32.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
N	iPalm	mon.exe	"Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded"
X	IPC Connection	ipcconn.exe	"Added by the RBOT-AEG WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list