Arcade File Downloads UsenetGeeks
Email
Confirm email
Articles Spyware Removal File Help Startup DB Tips Service DB News Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Microsoft Features msie.exe"Added by a variant of the RBOT WORM!"
X Microsoft File Demand Manager wmgrdf.exe"Added by a variant of the RBOT WORM!"
X Microsoft Find Fast Findfast.exeComplete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
X Microsoft Firewall firewallsp2.exe"Added by the RBOT-MC WORM!"
Y MICROSOFT FIREWALL CLIENT ISATRAY.EXE"MS Internet Security and Acceleration Server - see here"
X Microsoft FixUp pevblbvr.exe"Added by the RBOT.DWK WORM!"
X Microsoft FixUp wnpzjpuw.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Games gamemanager.exe"Added by the SPYBOT.AHQ WORM!"
X Microsoft Generic Update Manager wupdate.exe"Added by the RBOT-AWC TROJAN!"
X Microsoft Gina V Encryption MSGINAV.EXE"Added by an unidentified VIRUS
N Microsoft Greetings Reminder MHPRMINF.EXEYou really want to be reminded about somebody's birthday at the expense of resources?
N Microsoft Greetings Reminders MHPRMIND.EXEMicrosoft Home Publishing greetings reminder
N Microsoft Greetings Workshop Reminder Gwremind.exeYou really want to be reminded about somebody's birthday at the expense of resources?
X Microsoft Help svh0st.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Help Support mshelp32.exe"Addded by the KELVIR-BF WORM!"
X Microsoft Help SVC msnmngr.exe"Added by the SDBOT-PQ WORM!"
X Microsoft Help System mshelp32.exe"CoolWebSearch parasite variant"
X Microsoft Host Protocol svhost.exe"Added by a variant of the RBOT WORM!"
X Microsoft Hosting Service WINHOSTING.EXE"Added by the RBOT.AEV WORM!"
X Microsoft Hosts Service Isass.exe"Added by a variant of the RBOT WORM!"
U microsoft hotmail monitor mshotmon.exe"Added by the MYTOB.LY WORM!"
X Microsoft Hyptertext Helper mshtha.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft IDCN mshe1p.exeAdded by an unidentified TROJAN!
X Microsoft IE Iexplore.exe"Added by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X Microsoft IE Execute shell IEExec.exe"Added by the ALADINZ.N TROJAN!"
X MicroSoft IE Sasser ISASS.EXE"Added by the SDBOT.MX WORM!"
X Microsoft IIS syshost.exe"Added by the FRANCETTE WORM!"
X Microsoft IIS [filename]"Added by the FRANCETTE-S WORM!"
X Microsoft Inc. iexplorer.exe"Added by a variant of the LOVGATE WORM!"
X Microsoft Incroporate mfs.exe"Added by the RBOT-ANF WORM!"
X Microsoft Inet Xp.. teekids.exe"Added by the BLASTER.C WORM!"
X Microsoft Instant Messenger msngmsngr32.exe"Added by the SPYBOTER.GEN TROJAN!"
X Microsoft Int Service MsIntSrv.exe"Added by a variant of the RBOT WORM!"
U Microsoft Intellitype Pro speedkey.exeAdditional keyboard shortcuts on MS programmable keyboard
X Microsoft Internal AntiVirus Systems dIlhost.exe"Added by the RBOT-AEV WORM!"
X Microsoft Internet expl0rer.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Internet windows32.exe"Added by the SDBOT-F WORM!"
X Microsoft Internet wincfg16.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Internet Acceleration Utility iau.exe"EasySearch adware"
X Microsoft Internet Acceleration Utility [path to file]"Added by the AGENT-CX TROJAN!"
X Microsoft Internet Acceleration Utility [path to trojan]"Added by the SMUTSRCH-A TROJAN!"
X Microsoft Internet Exp iiexplorer.exe"Added by the RBOT-KX WORM!"
X Microsoft Internet Explorer iexplore.exe"Added by the POEBOT-J WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder"
X Microsoft Internet Explorer iexplorer.exe"Added by the SDBOT-XN WORM!"
X Microsoft Internet Explorer crsys32.exe"Added by the RBOT.UZ WORM!"
X Microsoft Internet Explorer movies.exe"Added by the BANCOS-DZ TROJAN!"
X Microsoft Internet Explorer svzhost.exe"Added by a variant of the RBOT WORM!"
X Microsoft Internet Explorer mccagent.exe"Added by the DLOADER-UD TROJAN!"
X Microsoft Internet Explorer sysini.exe"Added by the DELF-LN TROJAN!"
X Microsoft Internet Explorer svchost.exe"Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""drivers"" subfolder"
X Microsoft Internet Explorer lEXPLORE.EXE"Added by the RBOT-AMM WORM!"
X Microsoft Internet Firewall Manager GMT16.exe"Added by the RANDEX.AT WORM!"
X Microsoft Internet Services Smss32.exe"Added by the RBOT.MS WORM!"
X Microsoft Intrenet Explorer goaw.pif"Added by the RBOT-API WORM!"
X Microsoft Intrenet Explorer Soundsyst.exe"Added by the RBOT-AQU WORM!"
X Microsoft Intrenet Explorer cnsg.pif"Added by the RBOT-ARO WORM!"
X Microsoft Intrenet Explorer wcumrg.exe"Added by the SDBOT-AFD WORM!"
X Microsoft IPC system.exe"Added by the NULLBOT TROJAN!"
X Microsoft IPC svshost.exe"Added by an unidentified VIRUS
X Microsoft IT Update win64.exe"Added by the RBOT.GA WORM!"
X Microsoft IT Update [random filename]"Added by a variant of the RBOT WORM!"
X Microsoft IT Update IEserv.exe"Added by a variant of the RBOT WORM!"
X Microsoft IT Update msupdate.exe"Added by a variant of the RBOT WORM!"
X Microsoft IT Update winn43.exe"Added by a variant of the RBOT WORM!"
X Microsoft IT Update svchsst.exe"Added by the RBOT-DH WORM!"
X Microsoft IT Update win43.exe"Added by the RBOT-SA WORM!"
X Microsoft IT Update windows.exe"Added by the RBOT-GL WORM!"
X Microsoft IT Update winsyst32.exe"Added by the RBOT-FC WORM!"
X Microsoft Java Virtual Machine winscr32.exe"Added by a variant of the WOOTBOT WORM!"
X Microsoft Java Virtual Machine MsConfiG.exe"Added by the FORBOT-DV WORM!"
X Microsoft Java Virtual Machine msjvm.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Java Virtual Machine javavm.exe"Added by a variant of the RBOT WORM!"
X Microsoft Java Windows Update [filename]"Added by the RBOT-DZ WORM!"
X Microsoft JavaVM msjarun.exe"Added by the RBOT-JW WORM!"
X Microsoft Kernel Windows_kernel32.exe"Added by the NETSKY.AE WORM!"
X Microsoft LAN32 Protocol lanXp.exe"Added by the RBOT-SS WORM!"
X Microsoft Lmhosting Service lmhosts.exe"Added by the RBOT-RC WORM!"
X Microsoft Locals 332 [random filename]"Added by the RBOT-KU WORM!"
X Microsoft Login winlogin.exe"Added by the RBOT-AJP WORM!"
X Microsoft LSA layer MSLSA32.exe"Added by the RBOT-AKZ WORM!"
X Microsoft LSASS386 Protocol scvhost32.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft LV [path to file]"Added by the BDL TROJAN!"
X Microsoft Machine winjava.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
X Microsoft Macro Protection SubSsy msacroprots386.exe"Added by the RBOT-KE WORM!"
X Microsoft Macro Protection Subsystems msmacroprotxz.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Macro Protection Subsystems Msmacroprot32.exe"Added by the RBOT.KN WORM!"
X Microsoft Management lmas.exe"Added by the FORBOT-CZ WORM!"
X Microsoft Management Console lssas.exe"EasySearch adware"
X Microsoft Management Console [path to trojan]"Added by the SMUTSRCH-A TROJAN!"
X Microsoft Manager msmanager.exe"Added by the MYTOB.LF WORM!"
X Microsoft Map PC mappc.exe"Added by a variant of the RBOT WORM!"
X Microsoft Mapped PC mappedpc.exe"Added by a variant of the RBOT WORM!"
X Microsoft media winmplayers.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Media player 9 msmedia32.exe"Added by the RBOT-ADO WORM!"
X Microsoft media services Iassd.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
X Microsoft media services winmplayer.exe"Added by the RBOT.ZO WORM!"
X Microsoft MediaScope winmes.exe"Added by the RBOT-XU WORM!"
X Microsoft Message Machine msmesg32.exe"Added by the SPYBOT.BI WORM!"
X Microsoft Messenger Management Controls msmgmctl.exe"Added by the RBOT-APA WORM!"
X Microsoft Messenger Service msmsg32.exe"Added by the RBOT.BOK WORM!"
X Microsoft Messenger XP MSMSN32.exe"Added by the RBOT-ZP WORM!"
X Microsoft MicroP Protocol wdgmr32.exe"Added by a variant of the RBOT WORM!"
X Microsoft Movie Maker Mmaker.exe"Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program"
X Microsoft MSGPLUS32 Protocol msgplus32.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft MSNGR32 Protocol msngr32.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft msnseru msnseru.exe"Added by the RBOT-APB WORM!"
X Microsoft MsnST msnst32.exe"Added by a variant of the RBOT WORM!"
X Microsoft MSUPDATE SpoolSvc.exe"Added by the SXTB-A TROJAN!"
X Microsoft Neser Experience nese.exe"Added by the RBOT-YH WORM!"
X Microsoft Netview gesfm32.exe"Added by the RANDEX.C WORM!"
X Microsoft Netview mssvc32.exe"Added by an unidentified VIRUS
X Microsoft Netview Component v5.1 msnv32.exe"Added by the RANDEX.F WORM!"
X Microsoft Network msnet.exe"Added by the MOCKBOT.A WORM!"
X Microsoft Network Networksystem.exe"Added by the SDBOT-AAI WORM!"
X Microsoft Network Daemon for Win32 Netd32.exe"Added by the SDBOT.R TROJAN!"
X Microsoft Network Host svc0host.exe"Added by the SDBOT-AEN WORM!"
X Microsoft Network Services Controller mmsvc32.exe"Added by the NANPY-A WORM!"
X Microsoft Networking Agent For SP2 msnac32.exe"Added by the SPYBOT.PEN WORM!"
X Microsoft NotePad notepad.exe"Added by a variant of the RBOT WORM!"
X Microsoft NT Drivers ntdrv.exeAdded by the SDBOT.AJN TROJAN!
X Microsoft NT Update winexec32.exe"Added by a variant of the RBOT WORM!"
X Microsoft Nvidia Video nvidia.exe"Added by a variant of the SDBOT WORM!"
N Microsoft Office Osa.exe"Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog
N Microsoft Office Msoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
X Microsoft Office MSMSGR.exe"Added by the GAOBOT.BB WORM!"
N Microsoft Office Osa9.exe"Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog
X Microsoft Office lserv.exe"Added by the SDBOT.MH WORM!"
X Microsoft Office Microsoft Office.htaHTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X Microsoft Office msoicons.exe"Added by the RBOT-ZI WORM! - NOTE - do no confuse with the legitimate Msoicons.exe file described here. The latter wil not be listed among your startups!"
X Microsoft Office Nxcao.exe"Added by the RBOT-ZE WORM!"
X Microsoft Office nxcxtpr.exe"Added by the RBOT-YG WORM!"
X Microsoft Office svxhost.exe"Added by a variant of the RBOT WORM!"
X Microsoft Office msoffice32.exe"Added by a variant of the RBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list