HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	lxdwmon.exe	lxdwmon.exe	Lexmark 7600 Series printer device monitor
N	LXSUPMON	LXSUPMON.EXE	"Lexmark printer related. The printer should work fine without it but what does it do?"
?	lycosInside	Lyc_SysTray.exe	"Lycos eMail related - what does it do and is it required?"
U	LyraHD2TrayApp	LYRAHD2TrayApp.exe	Related to RCA Lyra MP3 Player
X	LzioMediaUpdater	LzioMediaUpdater.exe	"LZIO.com adware downloader"
?	M Player Post Installer	postinstallm.exe	"??"
X	M S DVD DirectX Dll Drivers	msxdl.exe	"Added by the SDBOT-BJN WORM!"
N	M-Audio Delta Taskbar Icon	DeltTray.exe	M-Audio Delta Control Panel for M-Audio brand Delta series audio cards. System Tray access to audio settings - available through Control Panel
U	M-Audio MobilePre Control Panel Launcher	MPTask.exe	"Control Panel Launcher for MobilePre USB bus-powered preamp and audio interface from M-Audio"
U	M-Audio Taskbar Icon	DeltaIITray.exe	"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
X	M-soft Office	M-soft Office.hta	HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X	M1cr0s0ft S3rcurity	systemconfig.exe	"Added by the RBOT.BKB WORM!"
X	M1cr0s0ft Upd4t4zS	update32.exe	"Added by the RBOT-MI WORM!"
X	m32info	m32info.exe	"Added by the CRYPTER.A TROJAN!"
X	M3Development_WhenUSave_Installer	M3Development_WhenUSave_Installer.exe	"WhenU.Save adware"
N	M3Tray	m3tray.exe	"Movielink - internet movie rental System Tray access"
U	MAAgent	MAAgent.exe	"Related to MarkAny - a solution to prevent is unauthorized distribution of information through Floppy CD email etc"
U	MacDrive	MacDrive.exe	"MacDrive 7 & MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Version 6 is not Vista compatible but doesn ""include support for striped Mac arrays created with ATTO ExpressStripe software."""
U	MacDrive application	MacDrive.exe	"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista XP and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types including CDs DVDs hard drives floppy Zip Jaz and more!"""
?	MacDrive7.0.4TimeOutPatch	TimeOutPatch.EXE	"Part of MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista XP and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types including CDs DVDs hard drives floppy Zip Jaz and more!"" Interim patch for an older version? Is it no longer required?"
X	Macfee Security Patch	Mpfsheild.exe	"Added by the RBOT-NP WORM!"
U	Machine Debug Manager	mdm.exe	"Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to ""hang"" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable"
X	Machine Debug Manager	msdn.exe	"Added by a variant of the RBOT WORM!"
X	Machine Update Soft	wusas.exe	Added by an unidfentified WORM!
X	machine-debugger	WMIPRVSW.exe	"Added by the AGOBOT.WW WORM!"
X	MachineTest	CMagesta.exe	"Added by the SDBOT TROJAN!"
X	mackfy.exe	msms.exe	"Added by the SDBOT-DID WORM!"
N	MacLic	MacLic.exe	"Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks"
N	MacLicense	MacLic.exe	"Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks"
N	MacName	MacName.exe	"Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks"
X	Macromedia 8	Flash Player.exe	"Added by the JAMBU-A WORM!"
X	Macromedia Critical Updater	rarww.exe	"Added by a variant of the RBOT WORM!"
X	Macromedia Dreamweaver XM	macdwXM.exe	"Added by the AGOBOT-RI WORM!"
X	Macromedia Drive	Iexplor32.exe	"Added by a variant of the RBOT WORM!"
X	Macromedia Flash Update	scvhost.exe	"Added by a variant of the RBOT WORM!"
U	MACVNTFY	MACVNTFY.EXE	"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7 this version is not Vista compatible but does ""include support for striped Mac arrays created with ATTO ExpressStripe software."""
Y	MAD.EXE	MAD.EXE	MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
N	MadExe	LaunchRA.exe	"Part of Dell Resolution Assistant - ""a diagnostic program that allows you to contact Dell. When factory-installed by Dell it allowed you to perform hardware and software diagnostics that provided alerts to potential problems and enabled real-time communication with Dell RA techs. You can now use RA only to contact Dell by e-mail"""
U	MAFWTaskbarApp	MAFWTray.exe	Drivers for the M-Audio Firewire Audiophile - Interface
U	Magentic	Magentic.exe	"Magentic by Incredimail - wallpaper/screensaver manager"
U	MagicDisc	MagicDisc.exe	"MagicISO - ""very helpful utility designed for creating and managing virtual CD drives and CD/DVD discs"""
U	MagicDsk	MAGICDSK.EXE	Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
U	MagicKeyboard	PreMKBD.exe	"Related to Samsung laptops. Provides ability to program keys to perform specific functions"
U	MagicLinker3	MagicLnk.exe	"ThaiSoftware Thai Dictionary"
N	Magitime	Magitime.exe	"Magitime - connection tracking utility which monitors online time expense data transfer"
X	mahmud	mahmud.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
?	Mail.com	mcalert.exe	"Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?"
U	MailBell	mailbell.exe	"MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)"
U	Mailbox Verifier	mboxvrfy.exe	"Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)"
U	MailCleaner	MAILCLEANER.EXE	"MailCleaner ""protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all incoming files downloaded by Internet Explorer Netscape Navigator ICQ and iMesh"". Not recommended as it bundles GAIN adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	mailman.exe	mailman.exe	"Added by the CERTIF-E TROJAN!"
Y	MailScan Dispatcher	Launch.exe	"MicroWorld MailScan Dispatcher splits each e-mail message into various components such as the header body and attachment. Compressed formats (ZIP ARJ etc.) are scanned for viruses and cleaned"
X	MailSkinner	mailskinner.exe	"MailSkinner - an application by Electronic Group notorious for its premium rate ""drive by"" installed adult content dialers (see here)"
X	Mail_Check	Mail_Check.exe	"Added by the PANOIL.C WORM!"
U	MAIN	main.exe	"SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan"
X	main drive Loader	wininfo.exe	"Suspected malware as it appears in 3 different registry locations - see here"
?	Main Executable (HP)	HP05T0R5.exe	"HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?"
X	main16	main16.exe	"Added by the CRYPTER.A TROJAN!"
X	main32	main32.exe	"Added by the CRYPTER.A TROJAN!"
X	MainStart	svcmfte32.exe	"Added by the STINX-A TROJAN!"
X	mainviewex	mainviewex.exe	"Added by the GEMA.D TROJAN!"
X	main_module	drvmmx32.exe	"Added by the DILA TROJAN!"
X	Major Microsoft Windows Driver Boot loader	bpool.exe	"Added by the MYTOB.AJ WORM!"
U	Malware Sweeper	MalSwep.exe	"Malware Sweeper - ""Protects the user from malicious malware and monitors the sanity of the running programs"""
X	Malware-Wipe	Malware-Wipe.exe	"Malware remover - not recommended see here"
X	Malware-Wiped	Malware-Wiped.exe	"Malware remover - not recommended see here"
X	MalwareAlarm	MalwareAlarm.exe	"MalwareAlarm malware remover - not recommended see here"
X	MalwareBot	MalwareBot.exe	"MalwareBot spyware remover - not recommended see here"
X	MalwareCrush	MalwareCrush.exe	"MalwareCrush spyware remover - not recommended see here"
X	MalwareStopper	MalwareStopper.exe	"MalwareStopper malware remover - not recommended see here"
X	MalwareWipe	MalwareWipe.exe	"MalwareWipe malware remover - not recommended see here"
X	MalwareWiped	MalwareWiped.exe	"MalwareWiped malware remover - not recommended see here"
X	MalwareWiper	MalwareWiper.exe	"MalwareWiper malware remover - not recommended see here"
Y	Mamutu Guard	mamutu.exe	"Mamutu from Emsi Software - behaviour based protection that ""recognizes new and unknown Trojans Worms and Viruses (Zero-Day attacks) without daily updates"""
U	ManageDesk Lite	ManageDesk Lite.exe	"ManageDesk Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use"
X	ManageProtocolCtrl	csmsv.exe	"Added by the LOOKSKY.B TROJAN!"
X	manager	manager.exe	"Detected by Kaspersky as the SMALL.CVT TROJAN!"
U	Manager Monitor	monitor.exe	"MindStorm AnalyzerPro from Secure Associates. ""A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"""
X	Managment Service	[random filename]	Added by the RBOT.BIS TROJAN!
N	Mania Win Restore	RESWIN.EXE	Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
X	manrotce	manrotce.exe	Added by unidentified malware
X	Mantis	[filename]	"Added by the MANTIBE VIRUS!"
X	MapEDC	MapEDC.exe	"Added by the WaveRevenue-McBoo TROJAN!"
X	MapiDrv	mpisvc.exe	"Added by the MIPSIV TROJAN!"
X	mapisvc32	mapisvc32.exe	"Added by the KX VIRUS and also recognised by Symantec as FPAI adware"
X	mark the service	xxtra32.exe	"Added by the SDBOT.APP WORM!"
X	Martini	pinmart.exe	"Added by a variant of the SDBOT WORM!"
X	Mascro soft SDK updates2	SDKrepair2.exe	"Added by the SDBOT.BXM WORM!"
X	maskrider	maskrider2001.vbs	"Added by the SOLOW-G WORM!"
U	masqform.exe	masqform.exe	"PureEdge Viewer - provides automation framework to manage and deploy XML forms-based processes for e-business and e-government systems. PureEdge was taken over by IBM (see here) and the product became Workplace Forms"
N	Mass storage check registry	rundll32.exe MSDServ.dll check registry	Used with a USB based smartmedia card reader
X	Master	svcghost.exe	"Added by the IRCBOT.RB TROJAN!"
X	Master Card Updaate 32	Mastercard32.exe	"Added by a variant of the RBOT WORM!"
U	Master Volume Spy	MASTERVOLUMESPY.EXE	"Volume control for the Gateway Destination ""DestiVu"" media interface"
X	MasterBoot Switch	popupkill.exe	"Added by a variant of the RBOT WORM!"
U	Matador	mlfbuddy.exe	"MailFrontier - anti-spam application"
U	Matador	mantispm.exe	"MailFrontier Desktop (Matador) email spam blocker software"
U	Matrix Screen Locker	matrix.exe	"Matrix Screen Locker is a system tray application that allows for quick and secure PC lock when you wish. The screen does a ""matrix style"" scrolling characters effect when the lock is running"
X	MatrixScreen	[filename]	"Added by the MATRIXSCREEN TROJAN!"
X	MatrixScreenSaver	mss.exe	Unidentified malware
N	Matrox Color Control	hgcctl95.exe	For Matrox video cards. Quick access to changing colors
N	Matrox Control Center	mgactrl.exe	For Matrox video cards. Quick access to settings
N	Matrox Diagnostic	mgadiag.exe	For Matrox video cards. Quick access to diagnostics
N	Matrox Powerdesk	PDesk.exe	"""Matrox PowerDesk software provides extra multi-display desktop management controls"""
N	Matrox PowerDesk 8	matrox.powerdesk.exe	"""Matrox PowerDesk software provides extra multi-display desktop management controls"""
N	Matrox QuickDesk	mgaqdesk.exe	For Matrox video cards. Quick access to tweak your card to your liking
X	MAV_check	mav_startupmon.exe	"WinAntiVirus Pro 2007 misleading virus software - not recommended see here"
X	MaxAlerts	max.exe	Bonzi MaxALERT - spyware
U	MaxBackSchedule	maxbackservice.exe	Backup scheduler for the Maxtor (now Seagate) range of external hard drives - part of Maxtor Quick Start
U	MaxBlastMonitor	MaxBlastMonitor.exe	"Maxblast hard drive utility for Maxtor (Seagate) drives"
Y	MaxtorCombo	ComboButton.exe	Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
U	MaxtorOneTouch	OneTouch.exe	"Maxtor OneTouch Hard Drives/OneTouch Family hard disk backup software"
U	MaxtorReg	AUTOREG.EXE	Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
Y	MayaPan	MayaPan.Exe	"Audiotrak Maya soundcard driver"
X	mb2np	[random filename]	Added by the IRCBOT.TJ WORM!
X	MbarInstall	[random filename]	"Detected by PCTools as Mirar adware. See here"
U	MBkLogOnHook	LogOnHook.exe	"Related to McAfee Backup from Network Associates"
U	MBM 4	MBM4.exe	Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U	MBM 5	MBM5.exe	"Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs"
?	MBMon	Rundll32 CTMBHA.DLL MBMon	"Creative Filter AudioControlMB Module - related to the Creative Audigy line of sound cards. What does it do and is it required?"
U	MBNet	mbnet.exe	MBNet (Portugal) Credit Card Processing software
U	MBProbe	mbrpobe.exe	"MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs"
U	mbssm32	mbssm32.exe	"Reported as Micro Bill Systems foistware - but not according to the company themselves see here"
X	mbssm32	monstu.exe	"Detected by AVG as the AGENT.CNM TROJAN - see here"
X	MC	wintrims.exe	"Added by the WINTRIM TROJAN!"
X	MC	MAGICON.EXE	"Added by the MAGICON.A TROJAN!"
X	MC	N/A	"Added by the SIMCSS TROJAN!"
X	MC	WINTRIM.EXE	"Added by the WINTRIM.A TROJAN!"
X	McAfee	McAffeAv.exe	"Added by the NETSKY.AL WORM!"
X	mcafee	Win32.dll.vbs	"Added by the CATCHER-B WORM!"
X	Mcafee Anti Scan	NortonScn.exe	"Added by a variant of the RBOT WORM!"
X	McAfee Antivirus	McAfeeAV.exe	"Added by a variant of the RBOT WORM!"
X	Mcafee Antivirus Monitoring System326	VSStatmn326.exe	"Added by a variant of the SDBOT WORM!"
X	Mcafee Antivirus Monitoring System32mn	VSStatmn32.exe	"Added by a variant of the RBOT WORM!"
X	McAfee Antivirus Protection	mcafeeAV.exe	"Added by a variant of the RBOT WORM!"
X	Mcafee Auto Protect	mcafeshield.exe	"Added by the RBOT-UH WORM!"
U	McAfee Backup	McAfeeDataBackup.exe	"McAfee Backup from Networks Associates"
Y	McAfee Desktop Firewall Tray	FireTray.exe	"McAfee Desktop Firewall"
Y	McAfee Firewall	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
N	McAfee Guardian	CMGRDIAN.EXE	McAfee's QuickClean an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
X	McAfee Online virus Scanner	avp.exe	"Added by the RBOT-GCV WORM! Not to be confused with Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory"
X	McAfee Online Virus Scanner	nzm.exe	"Detected by Trend Micro as the IRCBOT.XV TROJAN! See here"
N	McAfee QuickClean Imonitor	Plguni.exe	"McAfee QuickClean 3.0 - removes internet clutter and unwanted programs"
X	mcafee Software Intrenet	mcafee.exe	"Added by the RBOT-ATR WORM! Note - this is not a valid McAfee program"
X	McAfee Windows Protection	mcafee32.exe	"Added by a variant of the SPYBOT WORM!"
N	McAfee Winguage	??	Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
U	McAfee.InstantUpdate.Monitor	RuLaunch.exe	Instant Updater for McAfee's VirusScan Internet Security Quick Clean Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
Y	McAfeeFireTray	Firetray.exe	"McAfee Desktop Firewall"
X	McAfeeScanPlus	McAfeeScanPlus.exe	"Added by the MEPCOD TROJAN! This trojan file does not belong to any McAfee Antivirus Software and is found in the Windows or Winnt folder"
Y	McAfeeUpdaterUI	UpdaterUI.exe	McAfee common updater user interface
Y	McAfeeVirusScanService	Avsynmgr.exe	From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe) WebScanX (Webscanx.exe) VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
Y	McAfeeWebscanX	WebScanX.exe	From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs etc
X	Mcaffe Antivirus	Mcafeescn.exe	"Added by a variant of the SPYBOT WORM!"
X	Mcaffee	mcsheild.exe	"Added by the RBOT-FDP WORM!"
U	McAgentExe	mcagent.exe	From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon VirusScan Online may not be installed
Y	Mcappins.exe	mcappins.exe	Used by McAfee Virusscan to perform product updates. When updates are available the program will download and install them automatically. Recommended to leave enabled
X	mceipww	[8 random letters].exe	"Detected by Kaspersky as the ZHELATIN.EQ WORM! See here"
N	MChanger	MChanger.exe	Media Changer - utility that allows you to change wallpapers sounds themes etc
U	MCI USB Icon	USBIcon.exe	MCI USB software used for managing a USB card reader
N	McLogLch_exe	McLogLch.exe	"Related to McAfee security suite. This is a non-essential program but should not be disabled unless suspected to be causing problems"
X	MCM3	mcm3.exe	"ShopAtHome/SAHagent adware variant"
?	McRegWiz	mcregwiz.exe	"McAfee antivirus related. What does it do and is it required?"
X	Mcrosoftr Update	Mcrosoftr.exe	"Added by a variant of the RBOT WORM!"
Y	McShld9x	mcshld9x.exe	Part of McAfee's Virusscan Online. Must be enabled for scanning to work
Y	MCTskShd	mctskshd.exe	"Part of McAfee SecurityCenter. Runs in the background controlling critcal updates and control antivirus related actions. This program is important for the stable and secure running of your computer"
U	McUpdateExe	mcupdate.exe	From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
Y	McVsRte	mcvsrte.exe	"Part of McAfee's SecurityCenter. Must remain checked but one user reports Windows glitches with no response from McAfee as to why"
Y	mcvsshld	mcvsshld.exe	McAfee VirusScan On-line. See also the McAgentExe entry
X	MCX Update	wisp.exe	"Added by the RBOT-AQH WORM!"
X	MCX Updte	scorti.exe	"Added by the RBOT-ARP WORM!"
X	MD IE Plugin	md.exe	"Marketdart spyware"
X	MD IE Plugin	winy.exe	Adware
N	mdac_runonce	runonce.exe	Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe".
U	MDDiskProtect	MDDiskProtect.exe	"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7 this version is not Vista compatible but does ""include support for striped Mac arrays created with ATTO ExpressStripe software."""
U	MDDiskProtect.exe	MDDiskProtect.exe	"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7 this version is not Vista compatible but does ""include support for striped Mac arrays created with ATTO ExpressStripe software."""
X	mdetect	[path to trojan]	"Added by the SPABOT TROJAN!"
U	MDGetStarted	MDGetStarted.exe	"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista XP and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types including CDs DVDs hard drives floppy Zip Jaz and more!"""
U	MDGetStarted.exe	MDGetStarted.exe	"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista XP and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types including CDs DVDs hard drives floppy Zip Jaz and more!"""
X	Mdm	Mdm.vbs	"Added by the WHITEHO VIRUS or TRAPPY WORM!"
X	mdm	mdm.exe	"Added by the LYDRA-F TROJAN! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is always located in %ProgramFiles%\Microsoft Shared. This one is located in %Windir%"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list