Arcade File Downloads UsenetGeeks
Email
Confirm email
Articles Spyware Removal File Help Startup DB Tips Service DB News Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
U Microsoft Webserver svctrl.exePersonal web server program which enables you to create and host a web server from your computer. Not required for most people
X Microsoft WIN32 DOS MSdos32.exe"Added by a variant of the SDBOT WORM!"
X Microsoft WIN32 Security MSsec32.exe"Added by the RBOT-DOQ TROJAN!"
X MicroSoft Wind0ws Updater winsupdater.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows mstask0.exe"Added by the SDBOT.FQ WORM!"
X Microsoft Windows atup"Added by a variant of the RBOT WORM!"
X Microsoft Windows Microsoft Windows.htaHTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X Microsoft Windows explorar.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows [path to file]"Added by the LI TROJAN!"
X Microsoft Windows bootini.exe"Added by the VANEBOT-K WORM!"
X Microsoft Windows 128bit Subsystem system12.exe"Added by the RANCK-CZ TROJAN!"
X Microsoft Windows 16Bit mswinn16.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Windows 2000 Winupdsdgm.exe"Added by the GAOBOT.AO WORM!"
X Microsoft Windows 32Bit mswinn32.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows 64 Bit mswin32.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Client Firewall msclt.exe"Added by the VANEBOT-F WORM!"
X Microsoft Windows Communicator for NT/XP wincomm.exe"Added by the RBOT.ATH WORM!"
X Microsoft Windows Control mswctl32.exe"Added by the RBOT.JP WORM!"
X Microsoft Windows CSRSS csrss.exe"Added by the KALEL-A WORM! Note - this is not the legitimate csrss.exe process
X Microsoft Windows DHCP ___r.exe"Added by the MASLAN.A or MASLAN.C WORMS!"
X Microsoft Windows DLL 32-BIT msncheck32.exe"Added by the SDBOT-XX WORM!"
X Microsoft Windows DLL Services mwindll.exe"Added by the SDBOT-VX WORM!"
X Microsoft Windows DLL Services Configuration newdll.exe"Added by the SDBOT-ZR WORM!"
X Microsoft Windows DLL Services Configuration newdll2.exe"Added by the SDBOT-ABD WORM!"
X Microsoft Windows DLL Services Configuration poker.exe"Added by the SDBOT-ZY WORM!"
X Microsoft Windows DLL Services Configuration poker3.exe"Added by the SDBOT-AAH WORM!"
X Microsoft Windows DLL Services Configuration proxy.exe"Added by the SDBOT-ZL WORM!"
X Microsoft Windows DLL Services Configuration windir32.exe"Added by the SDBOT.BHF WORM!"
X Microsoft Windows DLL Services Configuration windir32a.exe"Added by a variant of the SDBOT.BHF WORM!"
X Microsoft Windows DLL Services Configuration windll32.exe"Added by the SDBOT.BHD WORM!"
X Microsoft Windows DLL Services Configuration winDSL.exe"Added by the SDBOT-ZG WORM!"
X Microsoft Windows DLL Services Configuration dllmanager32.exe"Added by the SDBOT-BTU WORM!"
X Microsoft Windows DLLHandler bitpaint.exe"Added by the SDBOT.AHG WORM!"
X Microsoft Windows Drivers windrv.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows DVR windvr.exe"Added by the RBOT-AXD WORM!"
X Microsoft Windows Explorer iexplorer.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Files Loader cgy32win.exe"Added by the RBOT-AXR WORM!"
X Microsoft Windows Game Updater msgame32.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows GUI Windowz.exe"Added by the RANDEX.AEV WORM!"
X Microsoft Windows GUI msmonk32.exe"Added by the SDBOT-PE WORM!"
X Microsoft Windows Kernel Services winkrnl386.exe"Added by the ZEBROXY TROJAN!"
X Microsoft Windows Loader wloader.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
X Microsoft Windows Logon Process winlogon.exe"Added by the PROXYSER-R TROJAN! Note - this is not the legitimate winlogon.exe process
X Microsoft Windows Media Player mediaplayer.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Media Player wimp.exe"Added by the RBOT-FN WORM!"
X Microsoft Windows Secure windocs.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows Secure windocs.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows Secure Server rpcxWindows.exe"Added by the RBOT-LL WORM!"
X Microsoft Windows Secure Update rpcxwinupdt.exeAdded by an unidentified WORM or TROJAN!
X Microsoft Windows Securety wurguar.exe"Added by the RBOT-KY WORM!"
X Microsoft Windows Security spvsper.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows Security wscndrives.exe"Added by the RBOT-AJK WORM!"
X Microsoft Windows Service winsys.exe"Added by the RBOT-ADP WORM!"
X Microsoft Windows Service Pack winspkn.exe"Added by the RBOT-AYD WORM!"
X Microsoft Windows Session Manager Subsystem smss.exe"Added by the PROXYSER-R TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X Microsoft Windows Storage Machine Service winms.exe"Added by the RBOT-AHK WORM!"
X Microsoft Windows System srwhost.exe"Added by a variant of the RBOT-ASW WORM!"
X Microsoft Windows System syshost.exe"Added by the RBOT-ASW WORM!"
X Microsoft Windows System Service Manager winsvc.exe"Added by the SPYBOT.LR WORM!"
X Microsoft Windows Task Management mstasks.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows Task Manger Mstosk.exe"Added by the SDBOT-WW WORM!"
X Microsoft Windows Updata scvhost.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Update rundlls.exe"Added by the HABRACK WORM!"
X Microsoft Windows Update msoffice2.exe"Added by the RBOT-GB WORM!"
X Microsoft Windows Update spools.exe"Added by the SDBOT.TD WORM!"
X Microsoft Windows Update svchos.exe"Added by the SDBOT.AC WORM!"
X Microsoft Windows Update svcshost.exe"Added by the FORBOT-CF WORM!"
X Microsoft Windows Update svmhost.exe"Added by the FORBOT-CH WORM!"
X Microsoft Windows Update svshost.exe"Added by the WOOTBOT.CJ WORM!"
X Microsoft Windows Update msnmessenger.exe"Added by the SDBOT.AJ WORM!"
X Microsoft Windows Update msnwun.exe"Added by the SDBOT-RM WORM!"
X Microsoft Windows Update scvvhost.exe"Added by the FORBOT-DH WORM!"
X Microsoft Windows Update swwhost.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Update MSNMSGR.EXE"Added by the SDBOT-WM WORM!"
X Microsoft Windows Update svzhost.exe"Added by the FORBOT-EV WORM!"
X Microsoft Windows Update sccvhost.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows Update scrhost.exe"Added by the RBOT-AOW WORM!"
X Microsoft Windows Update mnswinsx.exe"Added by the RBOT-AWH WORM!"
X MICROSOFT Windows update pdate.exe"Added by the RBOT.BZT WORM!"
X Microsoft Windows Update Application wuap.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Update Logon win-logon.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Update Service wupdmgr32.exe"Added by the DOS.AUTOCAT TROJAN!"
X Microsoft Windows Update XP64 ********.exe [* = random char]"Added by a variant of the RBOT WORM!"
X Microsoft Windows Updater winupdgm.exe"Added by the GAOBOT.BI WORM!"
X Microsoft Windows Updater WINIUPDATES.EXE"Added by the RBOT-KK WORM!"
X Microsoft Windows Updater WINUPDATE.EXE"Added by the SDBOT-PU WORM!"
X Microsoft Windows Updater TMNTSrv.exe"Added by a variant of the RBOT WORM!"
X Microsoft Windows Updater win32upd.exe"Added by the RBOT-EC WORM!"
X Microsoft Windows Updater msnupdateit.exe"Added by the AGOBOT-RL WORM!"
X Microsoft Windows Updater windates.exe"Added by the SDBOT.TE WORM!"
X Microsoft Windows Updater spoolvs.exe"Added by the RBOT.ACQ WORM!"
X Microsoft Windows Updater suvhost.exe"Added by a variant of the SDBOT WORM!"
X Microsoft Windows updaterD log32zx.exe"Added by the MYDOOM.W WORM!"
X Microsoft Windows Updates explorer32.exe"Added by the SDBOT.VQ WORM!"
X Microsoft Windows Updating System msresource.exe"Added by the RBOT-EAM WORM!"
X Microsoft Windows W32 Services mssw32.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft Windows WinSaSS Management winsass.exe"Added by the RBOT-APW WORM!"
X Microsoft Windows WKS Service gt.exe"Added by the SDBOT.FV WORM!"
X Microsoft Windows Workstation devcode.exe"Added by the RBOT-AWL WORM!"
X Microsoft Windows XP Configuration Loader m32svco.exe"Added by the SDBOT.WORM.48548"
X Microsoft WINGS32 Protocol WinSGR32.exe"Added by the RBOT-APU WORM!"
X Microsoft WinRaR winrar.exe"Added by the RBOT-AEC WORM!"
X Microsoft Winsock mswinsck.exe"Added by the RBOT-ANK WORM!"
X Microsoft Winsock Service msusvc.exe"Added by the RBOT-ANS WORM!"
X Microsoft Winsock Wrapper ws2_32s.exe"Added by a variant of the SPYBOT WORM!"
X Microsoft WinSound [random filename]"Added by a variant of the RBOT WORM!"
X Microsoft WinUpdate mntcgf032.exe"Added by the RBOT-PF WORM!"
X Microsoft WinUpdate svh0st.exe"Added by the SPYBOT.DL WORM!"
X Microsoft WinUpdate syslx32.exe"Added by an unidentified VIRUS
X Microsoft WinUpdate syswin32.exe"Added by the RBOT-HO WORM!"
X Microsoft WinUpdate spfix.exe"Added by a variant of the RBOT WORM!"
X Microsoft WinUpdate Winamp61.exe"Added by a variant of the RBOT WORM!"
X Microsoft WinUpdate Winupd32.exe"Added by the RBOT.MQ WORM!"
X Microsoft WinUpdate WinNTinit32.exe"Added by the RBOT.VS WORM!"
X Microsoft WinUpdates serm32.exe"Added by the RBOT.GE WORM!"
X Microsoft WM mswm32.exe"Added by the BCKDR-AM TROJAN!"
X Microsoft Word BootSector.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
X Microsoft Word Profissional csrss.exe"Added by the BANCBAN-DB TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""s1613"" subfolder"
X Microsoft Word Profissional Java Plug In close.exe"Added by the BANKER-EL TROJAN!"
X Microsoft Word Profissional csrss.exe"Added by the BANKER-DJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""protect"" subfolder"
X Microsoft Word Profissional csrss.exe"Added by the BANKER-DJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""JavaVM"" subfolder"
N Microsoft Works Calendar Reminders wkcalrem.exeProduces a pop-up reminder of events scheduled using the MS Works Calendar
N Microsoft Works Portfolio WksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
N Microsoft Works Update Detection wkdetect.exeChecks for updates to MS Works
X Microsoft World Service winworld.exeAdded by an unidentified IRC worm with backdoor capability!
X Microsoft Wxdate Syswu32.exe"Added by the SPYBOT.HZ WORM!"
X Microsoft X Update wuamkoppnp.exe"Added by the RBOT-ANI WORM!"
X microsoft xdaemon 2.0 xdaemon.exe"Added by the DELF.D TROJAN!"
X Microsoft XML Service msxmlx.exe"Added by the RBOT.KS WORM!"
X Microsoft Xp Systems loader winsystem32xp.exe"Added by the KELVIR.W WORM!"
X Microsoft Xp Systems loaders win32xpsys.exe"Added by the SPYBOT.NYT WORM!"
X Microsoft XPSP Protocol xp386.exe"Added by a variant of the RBOT WORM!"
X Microsoft xpsp2 Networksystem.exe"Added by a variant of the SDBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list