HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	minimo	[path to file]	"Added by the MOSUCK-X TROJAN!"
N	MiniNote	MININOTE.EXE	"Mini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software"
N	Miniphone	glophone.exe	"VoiceGlo Glophone - ""an affordable and convenient way to call friends and family throughout the world using a dial-up or broadband Internet connection on your computer"" using the VoIP (Voice over Internet Protocol). No longer available"
X	miniport	usb2chk.exe	"Added by the LAZAR-A TROJAN!"
X	MiniPortRt	miniport_mp.exe	"Malware - see here"
U	MiniReminder	MiniReminder.exe	"""MiniReminder is a small fast and simple program for Microsoft Windows to remind yourself of important yearly events like birthdays anniversaries renewals etc"""
X	MiniServer.exe	MiniServer.exe	"Added by the LITTLEW-E TROJAN!"
U	MinMaxExtender	Mmext.exe	"MinMaxExtender - window handling tool"
X	Mioft Wiws Seice ent	[worm filename].exe	"Added by the RBOT-GIJ WORM!"
X	Miosf Update	wimsqaad.exe	"Added by the SDBOT.AG TROJAN!"
U	MioSync	mioSync.exe	"Related to Mio GPS navigation devices"
N	Mirabilis ICQ	NDetect.exe	If connected to the internet automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
N	Mirabilis ICQ	icq.exe	If connected to the internet automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
N	Mirabilis ICQ	ICQNet.exe	If connected to the internet automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
U	Miramar Systems Inc.	atmsg.exe	Miramar PC/Mac networking software
N	Miranda IM	miranda32.exe	"Miranda instant messaging client"
X	Mirate Sp 2 Information	miratesp2.exe	"Added by the RBOT.QH WORM!"
X	Mircosoft DNS Service	svchost.exe	"Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""drivers"" subfolder"
X	Mircosoft Sockets SP2	mssck.exe	"Added by the MYTOB.ET WORM!"
X	Mircosoft Update	wuampkd.exe	"Added by a variant of the SDBOT WORM!"
X	Mircrosoft Svchost32	svchost32.exe	"Added by the RBOT-AZW WORM!"
X	Mircrosoft Windows Config DLL	rundllc32b.exe	"Added by the RBOT-ZY WORM!"
N	miroVIDEO Tray Tool	misitray.exe	Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed another program (mv-ctrl) is also closed but mv-ctrl does not have its own EXE file. Only needed when using the capture card e.g. for the above actions
U	Mirra	Mirra.Client.exe	"Mirra Personal Server from Seagate Tech - ""a powerful hardware/software solution that integrates high-capacity storage with content protection remote access sharing and multi-computer synchronization"""
U	MirrorFolderShell	mrfshl.exe	"MirrorFolder backup software"
X	Mirsoft sdcE	taskmegr.exe	"Added by the RBOT-AWY WORM!"
X	Mirsoft sdcE	taskmegr.exe	"Added by the RBOT.DFQ WORM!"
X	Miscrosoft Windows Explorer	IEEXPLORER.exe	Reported as the SDBOT.YX WORM!
?	misiCTRL	misiCTRL.exe	"Miro video driver related. Is it required?"
?	misiTRAY	misiTRAY.exe	"Miro video driver related. Is it required?"
X	Mismo	win32x.exe	"Added by the RBOT-JP WORM!"
N	Mixer	Mixer.exe	C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
N	Mixersel	mixersel.exe	Configuration for Realtek audio devices
N	Mixghost	mixghost.exe	Management software for Altec Lansing speakers. If a change is needed the user can launch it from the Start menu
X	MJ	te32.exe	Added by the AGENT.HAA TROJAN
X	mjc	mjc.exe	"Detected by Trend Micro as the AGENT.AKCI TROJAN! See here"
X	ml00!.exe	ml00!.exe	"Malware detected by Panda as the BWD TROJAN!"
U	ML1HelperStartUp	ML1Helper.exe	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	ML1HelperStartUp	ML1HEL~1.EXE	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	ml34	[path to trojan]	"Added by the MAILBOT-BH TROJAN!"
X	Mlcr0s0ftf DDEs C0ntr0i	WAed.pif	"Added by the RBOT-BJW WORM!"
X	mlibsysmc	comzcinc.exe	"Added by the SDBOT-CXS WORM!"
X	mload	lxmstart.exe	Added by an unidentified VIRUS WORM or TROJAN!
?	MM Install	setup.exe	"Possibly Money Manager from Moneysoft?"
X	MMB2	explorer.exe	Added by an unidentified WORM or TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
X	MMC	inisys.exe	"Added by the OSCABOT-I WORM!"
X	mmcndmgr	mmcndmgr.exe	Added by an unidentified VIRUS WORM or TROJAN!
N	MMCWINMGMT	winmgmt.exe	"Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth ""scheduler"" - refer here"
X	mmemdrv	mmemdrv.exe	"SecondSight spyware. Note - SecondSight is spyware that captures keystrokes and screen shots and logs user activity on the compromised computer. The risk can then send the logged information to a remote attacker via email must be manually installed"
U	MMERefresh	MMERefresh.exe	"Part of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R"
X	Mmessenger	messenger.exe	"Added by the AGOBOT.GM WORM!"
X	Mmgsvc	mmgsvc.exe	Mmgsvc spyware
U	MMhid	mmhid.dll	"This is the Human Interface Device Server for Win98 it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP"
?	MMHK	mmhk.exe	"A driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?"
N	MMHotKey	MMHotKey.exe	Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
X	MMicrosoft Security Management	inetforn.exe	"Added by the RBOT.AFZ WORM!"
U	MMKeybd	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	Mmm	Mmm.exe	"Hace Mmm - free utility to configure your Windows menus and move and remove menu-items you never use"
X	mmod	mmod.exe	"eZula TopText adware"
N	mmpti	m1mmpti.exe	Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
N	MMReminderService	MMReminderService.exe	"Mind Manager from Mindjet - ""easy way to organize ideas and information"". Registration reminder"
?	MMRun	mmrun.exe	"??"
X	mmsass	mmdmm.exe	"Added by a variant of the SDBOT WORM! See here"
X	mmsddlx	[random filename]	"Added by a variant of the SLAPER TROJAN!"
?	mmsys	recover.exe	"??"
X	MMSystem	RunDll32	Added by the FUNNER-A WORM!
Y	MMTASK	mmtask.tsk	A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI etc
N	mmtask	mmtask.exe	"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
X	MMtask Service	mmtask.exe	"Added by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename"
N	MMTray	mm_tray.exe	"MusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator"
N	MMTray	MMTray.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
N	MMTray2K	MMTray2K.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
N	MMTrayLSI	MMTrayLSI.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
?	mmusrstp	procrun.exe	"??"
X	mmxp2passion.exe	mmxp2passion.exe	"MediaMotor adware"
X	mmxrun	msosa.exe	Added by an unidentified TROJAN or WORM!
X	mmxrun	mswinindex.exe	"TwoSeven spyware"
U	mm_server	mm_server.exe	"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
X	mnklins	mnklins.exe	"VX2.Transponder parasite updater/installer related"
X	MNPol	mnpol.exe	"Added by the DLUCA.B TROJAN!"
U	MNS	MNS.exe	"Mobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the correct drive mappings printer settings IP settings and much more"
X	mnsa	mnso.exe	"Added by the LINEAG-AI TROJAN!"
X	mnsvc	mnsvc.exe	"Added by the AUTOUPDER TROJAN!"
X	mnsvcsp	mnsvcsp.exe	Added by an unidentified VIRUS WORM or TROJAN!
?	mnu	igomnu.exe	"Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?"
U	Mobile Phone Suite	MobilePhoneSuite.exe	Logitech Mobile Phone Suite
U	mobile PhoneTools	mPhonetools.exe	"Motorola Phone Tools"
U	Mobipocket Reader Notifications	readernotify.exe	"Part of Mobipocket Reader - ""Store all your eBooks eNews & self-published eDocs on your PC. Download eBooks in Mobi format from your favorite ebookstores to read on your smartphone PDA laptop or on your desktop PC"""
U	Mobipocket Web Companion	webcomp.exe	"Related to Mobipocket eBook Reader"
N	mobsync	mobsync.exe	"MS Syncrhonization Manager - updates the network copy of materials that were edited offline such as documents calendars and e-mail messages. Find more information about its use here"
X	MOBSYNC32.EXE	mobsync32.exe	"Added by the FINERO TROJAN!"
N	MOD	muamgr.exe	"Using MicroAngelo On Display you can easily select the icon images that you prefer rather than the default icons displayed by Windows. On Display provides a consistent and elegant method to customize the icon display for almost every icon on your system"
X	Modem	locatesvc.exe	"Added by a variant of the SPYBOT WORM!"
X	Modem Driverz Updates	mdmdrv.exe	"Added by a variant of the SDBOT WORM!"
U	MODEMBTR	MODEMBTR.EXE	"Modem Booster from inKline Global to improve ISP connections"
X	Modeminf	Modeminf.exe	"Added by a variant of the CRYPTER.C TROJAN!"
U	ModemOnHold	MOH.EXE	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
U	ModemOnHold	netWaiting.exe	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
N	ModemUtility	mdmsetpe.exe	System Tray configuration icon for Aztech modems
X	Modifiet Amateur HTPB	wuaclt.exe	"Detected by Trend Micro as the IRCBOT.AYS WORM! See here"
U	ModPS2	ModPS2Key.exe	"Hotkey drivers for Chicony keyboard. Required if you use the hotkeys"
X	ModularConfig	syscnfg.exe	"Added by an unidentified VIRUS WORM or TROJAN! ""syscnfg.exe"" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside"
X	Module Call initialize	RUNDLL32.EXE reg.dll ondll_reg	"Added by the LOVGATE.C WORM!"
X	Modulo 00FE0F01 Host Internet	syschost.exe	"Added by the DELF-KW TROJAN!"
X	MonAppli	[random filename]	"Detected by Kaspersky as the DELF.IF TROJAN! See here"
N	Money Express	moneyexpress.exe	Part of MS Money. Available via Start -> Programs
N	MoneyAgent	money express.exe	Part of MS Money. Available via Start -> Programs
N	MoneyAgent	mnyexpr.exe	Microsoft Money
N	MoneyStartUp	Money Startup.exe	Microsoft Money
N	MoneyStartUp10.0	Activation.exe	Part of MS Money 2002. Available via Start -> Programs
X	monitor	monitor.exe	Browser hijacker redirecting to NCM Search
U	Monitor	SD Monitor.exe	"""Transfer data quickly between your memory card and your computer with SanDisk's Readers Writers and Adapters"""
U	Monitor Apache Servers	ApacheMonitor.exe	Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
U	Monitor Helper	monitor.exe	"MyLittleSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	Monitoring Service	svchost.exe	"Added by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""tasks"" subfolder of the Winnt or Windows folder"
X	Monitormgt	Monitormgt.exe	"Added by the GEMA TROJAN!"
U	MonitorSD	SDMonitor.exe	"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
X	MONPluginSrIvcs	n3monap23.exe	"Added by a variant of the RBOT WORM!"
N	Monstersoundtray	Freectrl.exe	Diamond Multimedia sound card control panel
X	MonTest	vccxzq.exe	"Added by the SDBOT-EA WORM!"
U	MoodBook	mb.exe	"MoodBook is a free Windows utility that brings art to your desktop"
N	moon phase	moon.exe	"Moon Phase - tray icon that indicates the phases of the moon"
X	MooNlight	MySqld-nt.cmd	"Added by the BOBANDY-A WORM!"
X	MoreContent	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	MoreResults	MoreResults.exe	"MoreResults adware"
N	Morpheus	morpheus.exe	MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free and a visitor quotes "I have seen no instance of any since using it"
X	morphstb	morphstb.exe	"Adware - detected by Kaspersky as the STUBBY.C TROJAN!"
X	mosearch	mosearch.exe	"Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here"
X	Motherboard Config	Ati2xxx.exe	"Added by the RBOT-AIK WORM!"
X	MotherBoard Sounds	Sounds.exe	"Added by the RBOT-AAP WORM!"
N	Motive SmartBridge	mpbtn.exe	System tray icon for the Virtual Assistant from AT&T Broadband used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
N	Motive SmartBridge	MotiveSB.exe	System tray icon for the Virtual Assistant from AT&T Broadband used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
N	Motive SmartBridge	BTHelpNotifier.exe	System tray icon for help from BT Broadband used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
U	MotiveMonitor	motmon.exe	Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
N	MotiveSB	MotiveSB.exe	System tray icon for the Virtual Assistant from AT&T Broadband used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
U	MotMon	motmon.exe	Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
X	motoin	mm15201518.Stub.exe	"Delfin Promulgate adware variant"
U	Motorola Desktop Suite	DesktopSuite.exe	"Related to Motorola Desktop Suite - PC software managing Motorola mobiles such as the A1000"
U	Motorola Desktop Suite mRouter Config	mRouterConfig.exe	"Configuration for Intuwave's mRouter - ""that enables easy connectivity between mobile devices and PCs across Bluetooth Infrared USB and serial cable connections"". An integral component of Symbian OS that is provided to all Symbian licensees"
U	Motor_Tracking_Tool	MTTool.exe	"Sweex Motion Tracking Webcam utility. ""The motion tracking function ensures that the camera can follow all your movements. So you can move and chat without disappearing from view"""
U	Mount Safe & Sound	Fbmount.exe	From McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
U	mount.exe	mount.exe	"Part of ""GiPo@FileUtilities - GiPo@Mount ""Provides advanced substitutional and mounting services. It allows to attach a local drive to an empty folder on an NTFS volume (only for Windows 2000/XP) and to substitute a local folder for a drive letter"""
X	mouse	mouse.exe	"Added by the RBOT-AHJ WORM!"
U	Mouse 32A	Mouse32A.exe	Mouse utility. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
N	Mouse Suite 98 Daemon	pelmiced.exe	Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
U	Mouse Suite 98 Daemon	ICO.EXE	Found on some Sony Vaio IBM Thinkpad and Dell (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Required on the Dell Inspirion 530 as without it the Dell mouse suite does not load and mouse settings are not retained on a reboot. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
X	mousebut	mousebut.exe	"Added by the CRYPTER.A TROJAN!"
X	Mousecntl	mousecntl.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	MouseCount	MC.exe	"MouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required"
X	MouseDrv	[path to worm]	"Added by the ZOLOAD-B WORM!"
X	MouseDrv	update.exe	"Added by the ZOTOB.N WORM!"
U	mouseElf	MC.exe	"Genius NetScroll mouse driver - required if you use non-standard Windows driver features"
U	mouseElf	mouseElf.exe	System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features
U	MouseImp	MImpHost.exe	MouseImp Pro - "A reliable assistant that turns your mouse into a simple native but powerful controlling device"
X	mousepad	mousepad.exe	"Added by the CLICKER TROJAN!"
U	Mousinfo	mousinfo.exe	MS mouse information tool - for troubleshooting mouse problems
X	MoussaEvil	[path to file]	"Added by the MUSANUB-A WORM!"
X	MoveSearch	Search.exe	"PigSearch adware"
N	Movielink Manager Uninstall	msvcmm32.exe	"Auto-update for Movielink - internet movie rental System Tray access"
X	MovieM	lmovie.exe	"Added by the BEAGLE.DS WORM!"
X	moviemk	moviemk.exe	"Added by the DWNLDR-GTB TROJAN!"
X	MovieNetworks	MovieNetworks.exe	"MovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:Program FilesMovieNetworks directory"
X	Movieplace	Movieplace.exe	"MoviePlace malware"
X	Mozila	mozila.exe	"Added by the DELBOT-AJ WORM!"
X	Mozila Firefox	firebox.exe	"Added by the RBOT-AIP WORM!"
X	Mozilla Firebird v0.8 Internet Browser	netstats.exe	"Added by the IRCBOT.MC TROJAN!"
X	Mozilla Firefox	F1REF0X.EXE	"Added by a variant of the SDBOT WORM!"
N	Mozilla Quick Launch	Netscp6.exe	Netscape 6 and Mozilla browsers
N	Mozilla Quick Launch	Mozilla.exe	Netscape 6 and Mozilla browsers
N	mozilla_cleanup	xpicleanup.exe	Firefox Mozilla cleans up after installation. It is invoked on a restart after installation to remove the bits and pieces resulting from the installation
U	Mozy Status	mozystat.exe	"Mozy - free backup at a secure remote location"
X	MP Tcloakss	mptclock.exe	"Added by the NACKBOT-B WORM!"
X	MP Tcloaxs	mptcloaxs.exe	"Added by the RANDEX.CT WORM!"
X	MP Tclockvv	mptclock.exe	"Added by the NACKBOT-A WORM!"
X	MP Tclockvv	mptclock.exe	"Added by the NACKBOT-A WORM!"
X	MP Tclockvv	mptclockvv.exe	"Added by the RANDEX.CJ WORM!"
N	MP3 CD Extractor	CD-Extractor.exe	"""MP3 CD Extractor is an audio CD to MP3 ripper which can extract Digital Audio tracks from Audio CDs into files on the hard disk"""
X	Mp3 Loader	Sysdata.EXE	"Added by the AVETTE-A VIRUS!"
X	MP3Collection	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	MP3download	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list