HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	MSControl31	winnsyst.exe	"Added by the RBOT.CFY WORM!"
X	MSControl3d1	isasse.exe	"Added by the RBOT.CGU WORM!"
X	MSCORE	syscnfg.exe	"Added by an unidentified VIRUS
X	Mscsgs	MSCSGS.EXE	"Added by the ZEZER WORM!"
X	Mscsgs32	MSCSGS32.EXE	"Added by the ZEZER WORM!"
X	mscsvc.exe	mscsvc.exe	"Added by the BANCOS.T TROJAN!"
X	Msctrl32	Msctrl32.scr	"Added by the REDIST WORM!"
X	MSCVT	MSCVT.exe	"Added by the SLIDESHOW WORM!"
X	MSDcom	MSDcom.exe	"Added by a variant of the SDBOT WORM!"
X	msdev	msdev.exe	"Added by the FORBOT-CR WORM!"
X	msdev	msconfig.exe	"Added by the AGOBOT.AAU WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting"
X	msdirect.exe	msdirect.exe	"Added by the CERTIF-L TROJAN!"
X	MSDLL	syscnfg.exe	"Added by an unidentified VIRUS
X	Msdmxm	msdmxm.exe	"Added by the DLOAD-DC TROJAN!"
X	MSDN	nese.exe	Added by the SDBOT.AHY WORM!
X	MSDN for Windows NT & WinXP	msdnxp.exe	"Added by the IRCBOT-PE WORM!"
X	MSDN for Windows with NT's	msdn-nt.exe	"Added by the RBOT-EWD WORM!"
X	MSDN HELP	msdn.exe	"Added by the AGOBOT.AIB WORM!"
X	MSDOS Security Service	msdos.pif	"Added by the RBOT-AMP WORM!"
X	MSDOS Service	MSDOS.PIF	"Added by the RBOT-AIY WORM!"
X	MSDOS Windows Service	MSDOS.PIF	"Added by the RBOT-AKF WORM!"
X	Msdos32	Msdos32.pif	"Added by the RECORY WORM!"
X	msdos423	msdos423.exe	"Added by the MENACE.A WORM!"
N	MSDosdrv	msdosdrv.exe	"Added by the BACROS WORM!"
N	MSDTC	msdtc.exe	MS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
X	Msemu32	Msemu32.exe	Unidentified spyware/adware/hijacker
X	mservices.exe	mservices.exe	"Added by the SDBOT.WJ WORM!"
X	Msfind	Msfind.exe	"CoolWebSearch parasite variant"
X	MSFind32	msfind32.exe	"Added by the CAYAM WORM!"
X	msfindosa.exe	msfindosa.exe	"Added by the DOWNLOADER-BS TROJAN!"
X	MSFTP Service Config	r3grun.exe	"Added by a variant of the SDBOT WORM!"
X	MSFWAVTSM	FTPDev.exe	"Added by the RBOT-ACF WORM!"
X	Msg Fixage	msgfixed.exe	"Added by the SDBOT.ZD WORM!"
X	MsgApi	[path to file]	"Added by the DEDLER-D TROJAN!"
X	msgb1	msgb1.exe	Added by the DLUCA.GEN TROJAN!
N	MsgCenterExe	RealOneMessageCenter.exe	"RealNetworks RealPlayer related - disabling this application will not affect Real Player in any way"
X	msgex32	msgex32.exe	"Added by the APPFLET-A WORM!"
X	Msgmgr	[path to worm]	"Added by the BABYBEAR WORM!"
X	msgserv_	Syss.exe	"Added by the FANTA TROJAN!"
X	msgsm32	msgsm32.exe	"Added by the RBOT-ASG WORM!"
X	Msgsrv16	Msgsrv16.exe	"Added by the DELF family of TROJANS!"
Y	MSGSRV32.exe	msgsrv32.exe	"Windows 32-bit VxD Message Server. For more information on its function and why it's needed
X	MsgSvcMgr32	cmdzxdll.exe	"Added by the RBOT-AEK WORM!"
X	msgsvr32	msgsvr32.exe	"Added by the DEADHAT.B WORM! Note - not to be confused with the valid ""msgsrv32.exe"" file which resides in the same directory (C:WindowsSystem) on a Win9x/Me machine"
U	MSGTAG	MSGTAG.exe	"MSGTAG is an application that tells you when your emails have been received and opened"
X	Msgtray	sys16.exe	Added by an unknown VIRUS!
X	Mshelp32	mshelp32.exe	"CoolWebSearch parasite variant"
X	MSHT@	MSHT@.EXE	"Added by the MAGISTR.A VIRUS!"
X	msident	msident.exe	Unidentified adware or trojan
X	msidle	msidle.exe	"Added by the OPASERV-O WORM!"
X	MsIdle32.exe	MsIdle32.exe	"Added by the VERIFY TROJAN!"
X	MSIdll	winmp.exe	"Added by a variant of the RBOT WORM!"
X	MSIE Parsers	MSIE32ab.exe	"Added by the SDBOT.MV WORM!"
X	msiew	mseiw.exe	"Added by the LITTLOG TROJAN!"
X	MSIEXEC	MSIEXEC32.exe	"Added by the AINESEY.A WORM!"
X	MSIEXEC	MSIEXEC.EXE	"Added by the YOSENIO-A VIRUS!"
X	MSIMN32	MSIMN32.EXE	"Added by the CWS-M TROJAN!"
?	MSIN	MSin.exe	"??"
X	Msinet	Msinet.exe	"Added by the RBOT-AOA WORM!"
X	MSInfo	msinfo.exe	"Added by the ALADINZ.M TROJAN!"
X	MSInfo	AVBgle.exe	"Added by the NETSKY.O WORM!"
X	MSInstall	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	msjava service	xpcd.exe	"Added by the SDBOT.VM WORM!"
U	MSKAGENTEXE	MskAgent.exe	"Part of McAfee Spamkiller"
X	MSKCES32	[random filename]	"Added by the CLONER TROJAN!"
U	MSKDetectorExe	MSKDetct.exe	"Part of McAfee Spamkiller"
X	MSKernel32	MSKernel32.vbs	"Added by the LOVELETTER (I LOVE YOU) VIRUS!"
X	MSkernel32	System.exe 4820	"Added by the TUXDER TROJAN!"
U	MSKExe	spamkiller.exe	"McAfee Spamkiller"
X	mskj	mskj.exe	"Added by the KAEMON TROJAN!"
U	MSKServerExe	MSKSrvr.exe	"Part of McAfee Spamkiller"
X	mslagent	mslagent.exe	"Added by the WINTRIM-F TROJAN!"
X	MSLARISSA	MSLARISSA.pif	"Added by the ASSIRAL.B WORM!"
?	MSLIB32	mswatch32.exe	"??"
X	MSLog	MicrosoftLog.exe	"Added by a variant of the SDBOT WORM!"
X	Mslogon lptt01	mslogon.exe	"RapidBlaster variant (in a ""Mslogon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Mslogon ml097e	mslogon.exe	"RapidBlaster variant (in a ""Mslogon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	MsManager	msmgr32.exe	"Added by the YAHA.AF WORM!"
X	msmanager32	msmngr32.exe	"Added by the RANDON-R (or WOMANIZ.A) WORM!"
X	msmautoprotect	msmssgs.exe	"Added by the BIFROSE-AJ TROJAN!"
X	msmc	mscpbo.exe	"ClientMan parasite variant"
X	msmc	msgdmf.exe	"ClientMan parasite variant"
X	msmc	msongn.exe	"ClientMan parasite variant"
X	msmc	msmc.exe	"ClientMan parasite variant"
X	msmc	ms****.exe [* = random char]	"ClientMan parasite variant"
X	MSMcAfeee	Avsynmgr32e.exe	"Added by the FRAMAR TROJAN!"
X	MSMcAfeeh	Avsynmgr32h.exe	"Added by the FRANGO TROJAN!"
X	MSMcAfeeS	Avsynmgr32S.exe	"Added by the VOLAC or VOLAC.DR TROJANS!"
X	MSMessnger	msnupd.exe	"Added by the RBOT-ADY WORM!"
?	msmgr	msmgr.exe	"??"
X	msMGR	rtkmsg.exe	"Added by the SDBOT-BPY WORM!"
X	Msmgt	msmgt.exe	"Total Velocity adware/hijacker"
X	MSMNTGNT	MSMNTGNT.EXE	"Added by the BANKER-IE TROJAN!"
X	MSMNTJBE	MSMNTJBE.EXE	"Added by the Bancos-EF TROJAN!"
X	MSMNTJNG	MSMNTJNG.EXE	"Added by the GRABER-G TROJAN!"
X	MSMNTMTS	MSMNTMTS.EXE	"Added by the BANKER-GZ TROJAN!"
X	msmon	msmon.exe	"Added by a variant of the GEMA.D TROJAN!"
X	MsMovies	MsMovies.exe	"Malware - recognized by Kaspersky antivirus as Trojan-Dropper.Win32.WinAD.h"
?	MsmqIntCert	regsvr32 /s mqrt.dll	"Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?"
X	msmsgr	msmsgss.exe	"Recognized by Kaspersky antivirus as RBOT.AJJ"
U	MSMSGS	msmsgs.exe	"Windows Messenger utility. If you don't use Windows Messenger
X	MSMsgs	msmessgs.exe	"Added by the SMALL-EW TROJAN!"
X	MsMsgSrv	msmsgsrv.exe	"Added by the CQO TROJAN!"
X	MSMsgSvc	MSMSGSVC.exe	"Browser hijacker
X	msmsngr	msmsngr.exe	"Added by the DOPBOT-B WORM!"
X	msn	system32.exe	"Added by the KITRO.A WORM!"
X	msn	msnmsg.exe	"Added by the RBOT-GO WORM!"
X	MSN	msnmsgs.exe	"Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe
X	MSN	ctfmoons.exe	"Added by the SPYBOT.HI WORM!"
X	MSN	msnmesengers.exe	"Added by the RBOT-ME WORM!"
X	MSN	MSN.exe	"Added by the MINIT WORM!"
X	MSN	msnmsgr.exe	"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
X	msn	msnsvc.exe	"Added by a variant of the SDBOT WORM!"
X	MSN	msn16.exe	"Added by the SDBOT-VN WORM!"
X	MSN	msnsgr.exe	Added by an unidentified WORM or TROJAN!
X	MSN 9.0 Plus	[random letters].exe	"Added by the RBOT-ALY WORM!"
X	MSN Administration For Windows	msnadp32.exe	"Added by the BROPIA.W WORM!"
X	MSN ang	cssrss.exe	"Added by the FORBOT-CE WORM!"
X	MSN BETA	service.exe	"Added by the RBOT.AUU WORM!"
X	MSN Checker	msnchecker.exe	"Added by the SDBOT-AGB WORM!"
X	Msn Config	msngf.exe	"Added by the RBOT-QG WORM!"
X	Msn Configuration Loader	msngms.exe	"Added by the KELVIR.T WORM!"
X	MSN Explorer	msnexplorer.exe	"Added by the AGENT-CAX TROJAN!"
X	MSN Explorer	explorer..exe	"Dropper for the Ciadoor.cb TROJAN!"
X	MSN Funny Images	imsngsr.exe	"Added by the AGOBOT-TT WORM!"
N	MSN Internet Access	trayclnt.exe	Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
X	MSN Manager	cvss.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN Manager	mscmgr.exe	Unidentified malware - causes multiple browser windows to open
X	MSN Message Background loader	msnmesg.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messages	msnmesg.exe	"Added by the RBOT-ACN WORM!"
X	MSN Messanger	msnmsng.exe	"Added by the SDBOT.XN WORM!"
X	MSN messanger	msnmsgsm.exe	"Added by the RBOT-FMP WORM!"
X	Msn Messeng	windns.exe	"Added by a variant of the RBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list