HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	MDSA Sentinel X	smss.exe	"Added by SentinelX spyware. Note - SentinelX is spyware that logs keystrokes. It also monitors and records Web sites visited and applications used. The risk can capture periodic screen shots and may be configured so as to block access to specific Web sites and chat rooms
X	mdwmdmsp	mdwmdmsp.exe	"Adware - recognized by Kaspersky antivirus as TrojanDownloader.Win32.Agent.am"
N	MECA	Meca.exe	"Meca cross-platform communications technology
X	MedGS	MEDGS1.exe	"PacerD_Media/Pacimedia.com adware"
X	Media Access	MediaAccK.exe	"Windupdates MEDIAPAS.A adware"
X	Media Access	MediaAccK.exe	"Added by the PODROP-C TROJAN!"
X	Media Gateway	MediaGateway.exe	"180Solutions Windupdates adware variant - also see here"
X	Media Load	msn32.exe	Added by a unidentified WORM or TROJAN!
U	Media Manager Indexer	AIRSVCU.EXE	"Part of MS Visual InterDev
X	Media Pass	MediaPassK.exe	"MediaPass adware"
X	Media Pass	MediaPass.exe	"WindUpdates MediaPass adware"
X	Media Player	media.exe	"Added by the FLDMEDIA-A TROJAN!"
X	Media Player	wmplayer.exe	"Added by the AGOBOT-BM WORM!"
X	Media Player	Sysdll.exe	"Added by the BANKER-BR TROJAN!"
X	Media Player	Sysnet.exe	"Added by the BANKER.MW WORM!"
X	Media Player Update	xpsp1mfh.exe	"Added by a variant of the RBOT WORM!"
X	Media Plug x.1.2	msdm.exe	Added by the MULDROP.352 VIRUS!
X	Media Service	msn64.exe	"Added by the SPYBOT.EV WORM!"
X	Media service	msnmsgxr.exe	"Added by the SDBOT.TF WORM!"
X	Media service	SYSTEM64.EXE	"Added by the RBOT.QV WORM!"
X	Media service	notpad.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Media Software UPdater	sscs.exe	"Added by the RBOT-ABE WORM!"
X	Media X Services	MSNGRx.exe	"Added by the RBOT.AUL WORM!"
X	Media-XP-Service-Pack3	msnzx.exe	"Added by the SDBOT-ACW WORM!"
X	MEDIA32	[path to trojan]	"Added by the PURSCAN-Z TROJAN!"
N	MediaFace Integration	Sethook.exe	"Fellowes Neato™ cd label design software. ""Launch NEATO's MediaFACE II label making software directly from the productname toolbar"""
U	Mediafour Mac Volume Notifications	Macvntfy.exe	"Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod"
U	Mediafour XPlay Tray Notification Icon	Xptryicn.exe	"Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod"
U	MediaKey	MediaKey.exe	"Multimedia keyboard manager. Required if you use the multimedia keys"
X	MediaLoads	dw.exe	"Medialoads adware"
X	MediaLoads Installer	dw.exe	"Medialoads adware"
N	MediaMonitor	Mediam~1.exe	Installed by Smartdisk MVP CD burning software. Software will work fine without it
X	mediamotor.exe	mmups.exe	"Added by the AGENT-BY TROJAN!"
X	MediaPath	Proyecto1.exe	"Added by the GRUEL WORM!"
X	MediaPath	Root.exe	"Added by the GRUEL WORM!"
X	MediaPipe P2P Loader	mpp2pl.exe	"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
X	mediapluscash.exe	mediapluscash.exe	"MediaGateway adware"
N	MediaRing Talk	mrtalk.exe	"Media Ring Talk
X	MediaXPServicePack	mxpsp.exe	"Added by the SDBOT.CDT WORM!"
X	media_driver	media_driver.exe	"Added by the TUPEG VIRUS! Note - this malware actually changes the default value data of the Registry ""Run"" key in order to force Windows to launch it at boot. Name field may be empty"
X	media_manager	mediaman.exe	"Mini-Player
X	media_stub	stub.exe	"Mini-Player
X	Meeting Connection	comsutil.exe	"Added by the PPDOOR-E TROJAN!"
X	Meeting Connection	wowdache.exe	"Added by the PPDOOR-D TROJAN!"
X	Meeting Connection	hgakdl32.exe	"Looks like a variant of the PPDOOR-E TROJAN!"
U	MegaPanel	HSTrans.exe	"Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen"
X	Members area	******.exe [* = random digit]	Premium rate adult content dialer
X	MemConfig	SetupIE.com	"Added by the TAPLAK WORM!"
N	Memento	Memento.exe	"Memento - simple app to keep text notes on your desktop"
U	MemMonster	memmnstr.exe	"MemMonster - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U	MemoKit	MK.EXE	"Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	memory	outlookrem.exe	"Added by the NOPIR.C WORM!"
X	Memory Check	memore.exe	"Added by the KILLAV.C TROJAN!"
X	Memory manager	himem32.exe	"Added by the MANCSYN TROJAN!"
X	Memory Service	freememory.exe	Added by the RBOT.GEN WORM!
N	Memory Stick Monitor	MSTAT.exe	"Used with the Sony floppy disk adapter for memory sticks
U	Memory Stick Monitor	MSstat.exe	Sony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive
X	Memory Watcher	MemoryWatcher.exe	"MemoryWatcher spyware"
U	Memory+	tfimemsr.exe	"Memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U	MemoryBoost	MemoryBoost.exe	"MemoryBoost - memory optimizing program made by Tenebril Inc. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/ME. See this article and make up your own mind"
U	MemoryCardManager	MemCard.exe	"Memory Card Manager - for removable memory cards found on Dell or Lexmark photo printers"
X	MemoryMeter	MemoryMeter.exe	"Autoinstalling spyware by Total Velocity"
U	MemoryZipperPlus	memzip.exe	"Memory Zipper Plus - ""optimizes the memory management of your system and boost-up its performance amazingly!"""
X	memreader.exe	memreader.exe	"Added by the AGOBOT-TY WORM!"
X	MEMreaload	MEMreaload.exe	"Added by the LAZAR TROJAN!"
N	MemScanner	MemScanner.exe	"Part of Enigma SpyHunter - not recommended
U	MemTurbo	memturbo.exe	"MemTurbo memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
N	MenuSnap	MenuSnap.exe	"MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe"
N	Mercora	MercoraClient.exe	"Mercora MusicSearch ""Search
X	Message Queuing	msmqs.exe	"Added by the FREEFORS TROJAN!"
N	MessagerStarter Freeserve	StartMessager.exe	Freeserve Messenger
U	Message_Blocker	messageblock.exe	"Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation
X	Messanger	trillian.exe	"Added by the RBOT.CKA WORM!"
X	Messanger	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	Messanger	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
Y	Messanger	s menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	Messenger	messenger.exe	"Added by the KUTEX TROJAN!"
X	Messenger	ntsubsys.exe	"Added by the SDBOT.BGE WORM!"
X	Messenger	Wmsngr.exe	"Added by a variant of the RBOT WORM!"
Y	Messenger	SCANMSG.EXE	"AntiVirus Quick Heal - virus protection"
X	Messenger Block	msngrblock.exe	"Added by the PATOO WORM!"
X	Messenger Protocol	netsender.exe	"Added by the SDBOT-ACC WORM!"
X	Messenger Service	msmsgs.exe	"Added by the SDBOT-ZB WORM!"
X	Messenger Service	nvhost.exe	"Added by the JLOK-A WORM!"
X	Messenger Service Updater	svshost.exe	"Added by the MYTOB.GC WORM!"
X	Messenger start-up	Msgran.exe	"Added by the GRAMOS WORM!"
X	Messenger6	command.pif	"Added by the INZAE.B WORM!"
U	MessengerDiscovery	MessengerDiscovery.exe	"MessengerDiscovery is a MSN Messenger add-on - adding over 70 new features"
N	MessengerPlus	MsgPlus.exe	"MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that ""sponsor program""!"
N	MessengerPlus2	MsgPlus.exe	"MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that ""sponsor program""!"
N	MessengerPlus3	MsgPlus.exe	"MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that ""sponsor program""!"
X	messnger	[worm filename]	"Added by the DELODER WORM!"
X	messnger	Dvldr32.exe	"Added by the DELODER.A WORM!"
N	Metacafe	MetacafeAgent.exe	"Metacafe - video sharing on the web. Note - if you subscribe make sure you read the Privacy Policy"
X	MeTaLRoCk (irc.musirc.com) has sex with printers	metalrock-is-gay.exe	"Added by the RANDEX.Q WORM!"
X	MeuPrograma	accwizz.exe	"Added by the RULAND.A WORM!"
X	Mfc**.exe [* = random char]	Mfc**.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	Mfc**32.exe [* = random char]	Mfc**32.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
?	mfgboot	??	"??"
X	mFilter	MNeck.exe	"Added by the CLICKER-AG TROJAN!"
X	mfin32	mfin32.exe	MyFreeInternetUpdate - adware downloader
?	MGA Hook	Mgahook.exe	"MATROX Graphics card related. What does it do and is it required?"
N	MGA Quickdesk	MGAQDESK.EXE	For Matrox video cards. Quick access to tweak your card to your liking
?	Mgabg	Mgabg.exe	"Matrox BIOS Guard. What does it do and is it required?"
Y	mgavctrl	mgavrtcl.exe	McAfee's Virus Scan Online
Y	mgavctrl	mgavrte.exe	McAfee's Virus Scan Online
Y	mgavrtclexe	mgavrtcl.exe	McAfee's Virus Scan Online
Y	mgavrtclexe	mgavrte.exe	McAfee's Virus Scan Online
N	MGA_CD_Install	mgasetup.exe	Matrox Millennium video driver. Not required once drivers installed
X	mgmtapi	mgmtapi.exe	Unidentified malware
X	MHDOGStart	mhdogst.EXE	"Added by an unidentified VIRUS
N	MHINIT	MHINIT.EXE	Part of the Cybermedia Clean Sweep package
X	Mi7sft sdce	b0yz.exe	"Added by the RBOT.CWG WORM!"
X	Mi7sft sdce	MNSQ.exe	"Added by the RBOT.DMU WORM!"
X	Mi7sft sdce	scorti.exe	"Added by the RBOT.ELC WORM!"
X	Mickey Mouse Cereal	[random filename].exe	"Added by the RANKY.Q TROJAN!"
X	Micr Update	soundblaster.exe	"Added by the SDBOT.NP WORM!"
X	Micr0s0ft Ms D0s	msdx.exe	"Added by the RBOT-AON WORM!"
X	Micr0s0ft Upd4t4z	svchost32.exe	"Added by the RBOT.ALF WORM!"
X	Micrcoft Exploerer	spoolsal.exe	"Added by the RBOT-AKK WORM!"
X	Micrcoft Exploerer	svchose.exe	"Added by the RBOT-ASL WORM!"
X	Micrcoft Updat	spoolsae.exe	"Added by the RBOT-AIB WORM!"
X	Micrcoft Updat	spoolsaex.exe	"Added by the RBOT-AJM WORM!"
X	Micrcoft Updat	Internet.exe	"Added by the RBOT-ANA WORM!"
X	Micro Process	appconf.exe	Added by an unidentified WORM or TROJAN!
X	Micro Update	dailin.exe	"Added by the RBOT-ER WORM!"
U	Microangelo Desktop	Muamgr.exe	"Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful
N	microAttuneDownload	atmdlusr.exe	"Application Launcher
X	MicroCQ0	explorer.exe	"Added by the LINEAGE-AK TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the Program Files folder"
U	MicroDialler	atdialler1.exe	"Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered"
X	MicroedSoft Toolbar	Smoked.exe	"Added by the RBOT-ALN WORM!"
X	Microfinder lptt01	mcf.exe	"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Microfinder ml097e	mcf.exe	"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list