HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	MSMSGNER	zzgf.exe	"Added by the PWS-CCB TROJAN!"
X	msmsgr	msmsgss.exe	"Detected by Kaspersky as the RBOT.AJJ WORM!"
U	MSMSGS	msmsgs.exe	"Windows Messenger utility. If you don't use Windows Messenger this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts""
X	MSMsgs	msmessgs.exe	"Added by the SMALL-EW TROJAN!"
X	msmsgs	msmsgs.exe	"Added by the SCLOG-AL TROJAN!"
X	MSMSGS	winlogon.exe	"Added by the RAHIWI.A WORM!"
X	MSMSGS	winlogon.exe	"Added by the BRONTOK-BS WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS"
X	MsMsgSrv	msmsgsrv.exe	"Added by the CQO TROJAN!"
X	MSMsgSvc	MSMSGSVC.exe	Browser hijacker identified by some antiviruses as a variant of the StartPage.QC TROJAN!
X	msmsngr	msmsngr.exe	"Added by the DOPBOT-B WORM!"
X	msn	system32.exe	"Added by the KITRO.A WORM!"
X	msn	msnmsg.exe	"Added by the RBOT-GO WORM!"
X	MSN	msnmsgs.exe	"Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe the well known MSN Instant Messaging application!"
X	MSN	ctfmoons.exe	"Added by the SPYBOT.HI WORM!"
X	MSN	msnmesengers.exe	"Added by the RBOT-ME WORM!"
X	MSN	MSN.exe	"Added by the MINIT WORM!"
X	MSN	msnmsgr.exe	"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
X	msn	msnsvc.exe	"Added by a variant of the SDBOT WORM!"
X	MSN	msn16.exe	"Added by the SDBOT-VN WORM!"
X	MSN	msnsgr.exe	Added by an unidentified WORM or TROJAN!
X	MSN	install.exe	"Added by the AGENT-GDO TROJAN!"
X	MSN	netstats.exe	"Detected by PCTools as the IRCBOT.UXP WORM! See here"
X	MSN	scvhost.exe	"Added by the IRCBOT-ZW WORM!"
X	MSN	wdlrss.exe	"Added by a variant of the SDBOT TROJAN!"
X	MSN	wkssvr.exe	"Added by the PUSHBOT.S WORM!"
X	MSN	iTuneshelp.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	lsass32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	msscomd.exe	"Added by a variant of the SPYBOT WORM! See here"
X	MSN	systems.exe	Identified as a variant of the Backdoor.PosionIvy keylogging malware
X	MSN	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	wkssvrs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	wksvr.exe	"Added by the IRCBOT-XU WORM!"
X	MSN	wmev.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Msn 8.0 Live	msn.exe	http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BANKER.EIE
X	MSN 9.0 Plus	[random letters].exe	"Added by the RBOT-ALY WORM!"
X	MSN Administration For Windows	msnadp32.exe	"Added by the BROPIA.W WORM!"
X	MSN ang	cssrss.exe	"Added by the FORBOT-CE WORM!"
X	MSN Auto-Updater	msnaupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Auto-Updater	msnupdates.exe	"Added by the AUTORUN.WORM.GEN WORM!"
X	MSN BETA	service.exe	"Added by the RBOT.AUU WORM!"
X	MSN Booster	msnbooster.exe	"Added by a variant of the SDBOT WORM! See here"
X	Msn Boot	msnbootcfg.exe	"Detected by Trend Micro as the IRCBOT.BFU TROJAN! See here"
X	MSN Checker	msnchecker.exe	"Added by the SDBOT-AGB WORM!"
X	MSN Client Manager	msnclimgr.exe	"Added by the AUTORUN-FV WORM!"
X	MSN CNF Manager	msncnfmgr.exe	"Added by the VUNDO TROJAN!"
X	MSN Communication Manager	msncommgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Msn Config	msngf.exe	"Added by the RBOT-QG WORM!"
X	MSN Configuration	msnconfig.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Msn Configuration Loader	msngms.exe	"Added by the KELVIR.T WORM!"
X	MSN CST Manager	mancstmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Database Client	msndbcli.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Debug Mgr	msndebugs.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN Explorer	msnexplorer.exe	"Added by the AGENT-CAX TROJAN!"
X	MSN Explorer	explorer..exe	"Dropper for the Ciadoor.cb TROJAN!"
X	MSN File & Folder Sharing App	msnfileshare.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN File Configuration	msnfilecfg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN File Sharing	msnusr.exe	"Detected by Trend Micro as the SLENFBOT.AM WORM! See here"
X	MSN File Sharing Wizard	msnsharewiz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN File Sharing!	msnuser.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Funny Images	imsngsr.exe	"Added by the AGOBOT-TT WORM!"
X	MSN Gaming Zone	Twain.exe	"Detected by Kaspersky as the AGENT.BEA TROJAN! See here"
X	MSN Hostn	msnhostn.exe	"Added by a variant of the IRCBOT BACKDOOR!"
N	MSN Internet Access	trayclnt.exe	Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
X	MSN Live Client	msnlvclient.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Live Messanger	msnlivegs.exe	"Added by the RBOT-FSG WORM!"
X	MSN Manager	cvss.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN Manager	mscmgr.exe	Unidentified malware - causes multiple browser windows to open
X	MSN Manager	msnmgrsv.exe	"Detected by Trend Micro as the IRCBOT.BAZ WORM! See here"
X	MSN Manager	usnmsn.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Msn Message Acount Helper 7.7	msnmessage7.7.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Message Background loader	msnmesg.exe	"Added by a variant of the RBOT WORM!"
X	MSN Message Service	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Messager	msnmsgr.exe	"Added by the DOWNLOADER.19456.C TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
X	MSN Messager	msnmgr.exe	"Added by the IRCBOT-ACD WORM!"
X	MSN Messages	msnmesg.exe	"Added by the RBOT-ACN WORM!"
X	MSN Messages	msnmessgs.exe	"Detected by Trend Micro as the AGENT.ITG TROJAN! See here"
X	MSN Messanger	msnmsng.exe	"Added by the SDBOT.XN WORM!"
X	MSN messanger	msnmsgsm.exe	"Added by the RBOT-FMP WORM!"
X	MSN Messanger	msnmsgsmn.exe	"Added by the RBOT-FOQ WORM!"
X	Msn Messanger	crsss.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Msn Messanger	msnmsgem.exe	"Detected by Kaspersky as the RBOT.BLL BACKDOOR! See here"
X	MSN Messanger Live	winntmsn.exe	"Added by the RBOT-FSO WORM!"
X	Msn Messeng	windns.exe	"Added by a variant of the RBOT WORM!"
X	Msn Messenge	IExplorer.exe	"Added by the DELF-LL TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	MSN messenger	messenger.exe	Added by an unidentified TROJAN! Note - this is not the real MSN Messenger
X	Msn Messenger	msnmsgs.exe	"Added by the LOONY-P TROJAN! Note - not to be confused with msmsgs.exe the well known MSN Instant Messaging application!"
X	MSN Messenger	Reosmsngr.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN MESSENGER	msmmsgr.exe	"Added by the KELVIR.Q WORM!"
X	MSN Messenger	msmsgs.exe	"Added by the DLOADER-LN or ZLOB-C or ZLOBDROP-C TROJANS! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name!"
X	MSN Messenger	msnmsgr.exe	"Added by the AGOBOT.AOQ WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
X	MSN Messenger	msmsgs.exe	"Added by the ZLOB TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name!"
X	MSN Messenger	msnmsngr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger	IExplorer.exe	"Added by the BANKER-EU TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Msn Messenger	msnmsnr.exe	"Added by the BANKER-GG TROJAN!"
X	MSN Messenger	PIC1324.exe	"Added by the CHOKE.C WORM!"
X	MSN Messenger	explorer..exe	"Dropper for the Ciadoor.cb TROJAN!"
X	Msn Messenger	nkbf.exe	"Added by the RBOT-GMQ WORM!"
X	MSN Messenger	live.messenger.com	"Detected by Trend Micro as the DELF.AOI TROJAN! See here"
X	Msn Messenger	msnmgr.exe	"Added by the AGOBOT.HA WORM!"
X	MSN Messenger 32	msniu.exe	"Added by the RBOT-AWB WORM!"
X	MSN Messenger 323	msniu3.exe	"Added by the RBOT-AXB WORM!"
X	MSN Messenger 6.2	tyd.exe	"Added by a variant of the RBOT WORM!"
X	MSN MESSENGER 9.0	messengerr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger Inbox Loader	msninbox.exe	"Detected by Trend Micro as the SHEUR.BTY TROJAN! See here"
X	MSN Messenger Live Login	msnmessengerlive.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Messenger Live Windows	messengerlive.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN messenger service	mssgs.exe	Added by an unidentified TROJAN!
X	Msn Messenger Service	msnmsg.exe	"Added by the SDBOT.BMU WORM!"
X	MSN Messenger Service Starter	msnmgsr.exe	"Added by the RBOT-AOS WORM!"
X	MSN Messenger Service Startup	msnservice.exe	"Added by a variant of the RBOT WORM! See here"
X	MSN Messenger Services	msnmgr.exe	"Added by the RBOT.ADF TROJAN!"
X	MSN Messenger Services	msnmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Messenger Update	msnupdate.exe	"Added by a variant of the RBOT WORM!"
X	Msn Messenger update	msnservice.exe	"Detected by Kaspersky as the AGENT.AOX TROJAN! See here"
X	MSN Messenger User Controls	msmsgr.exe	"Added by the KELVIR.HI WORM!"
X	Msn Messengers	MSNMSGR.EXE	"Added by the RBOT.KX WORM!"
X	MSN Messengger	MsRun32.exe	"Added by the IMAUT.CO WORM!"
X	Msn Messsenger	regsvr.exe	"Added by the AGENT-GXM TROJAN!"
X	MSN MMISSENGER	mssmmspgr.exe	"Added by the KELVIR.AJ WORM!"
X	MSN P2P Manager	msnp2pmgr.exe	"Detected by Kaspersky as the AUTORUN.EHF WORM! See here"
X	Msn Patch	msndp.exe	"Added by the RBOT.AAI WORM!"
X	Msn Patches	msndr.exe	"Added by a variant of the SDBOT WORM!"
X	Msn Plus Updater	msnplus.exe	"Added by the RBOT-MU WORM!"
X	MSN Popup Blocker	msnpopblck.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Processe Manager	msni32.exe	"Added by the RBOT-ADX WORM!"
N	MSN Quick View	Msndc.exe	Quick way to connect to MSN internet service
X	MSN Registry loader	msmnwin.exe	"Added by the KELVIR.FK WORM!"
X	MSN Router	msnrouter.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN RPC Manager	msnrpcmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Rx Manager	msnrxmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Security Agent	msnsecure.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Serv	msmsnserv.exe	"Detected by Trend Micro as the IRCBOT.AVF TROJAN! See here"
X	Msn Serv	msnserv.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Server	msmsnserver.exe	"Detected by Trend Micro as the IRCBOT.AUS TROJAN! See here"
X	MSN service	msnmgr16.exe	"Added by a variant of the RBOT WORM!"
X	MSN Service	amsnmsgrs.exe	"Added by a variant of the SDBOT WORM!"
X	Msn Service	matrixcam.exe	"Added by the MYTOB.JH WORM!"
X	Msn Service	raloded.exe	"Added by the MYTOB-DY WORM!"
X	MSN service	msnmsgr16.exe	"Added by the RBOT-RZ WORM!"
X	MSN service	NTDKRN.EXE	"Added by the RBOT.UJ WORM!"
X	MSN Service	msnsvc.exe	"Detected by Trend Micro as the IRCBOT.PU TROJAN! See here"
X	MSN Service Updates	winproc.exe	"Added by the KELVIR-BB WORM!"
X	MSN Service Utilities	nkn.exe	"Added by the KELVIR-BC WORM!"
X	MSN Service!	msnservice.exe	"Added by a variant of the RBOT WORM! See here"
X	MSN Servicer	msnsrv.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN Servicer	msnservicer.exe	"Detected by Trend Micro as the IRCBOT.ARO BACKDOOR! See here"
X	MSN Services	msnserv.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Services	msnservice.exe	"Added by the IMPARD-A TROJAN!"
X	MSN Settings	msnsettings.exe	"Detected by Trend Micro as the IRCBOT.AWH TROJAN! See here"
X	MSN Settings Manager	msnsetmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Setup	MSN.msn	"Added by the JAMBU WORM!"
X	MSN Software	msnsoftware.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Start	msnmsgr7.exe	"Added by the RBOT-PH WORM!"
X	Msn Startup	msnstartup.exe	"Detected by Trend Micro as the ARBOT.AA WORM! See here"
X	MSN Update	mscon.exe	"Added by the RBOT-QA WORM!"
X	MSN Update	msn32.exe	"Added by the RBOT.AHN WORM!"
X	MSN Update	DLLCON.EXE	"Added by the RBOT-EA WORM!"
X	MSN Update Cfg	msnupdbt.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Update Client	msnupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Update Client	msnupdcli.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Msn Update Manager (Sp2)	MSMSGS.EXE	"Added by the AGOBOT-NL WORM!"
X	Msn Update Service	userx.exe	"Added by the MYTOB.JF WORM!"
X	MSN Update Service	msnupdsv.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN Updater	msnms.exe	"Added by the FORBOT-CG WORM!"
X	Msn Updater	msnplugins.exe	"Added by the RBOT-HS WORM!"
X	Msn Updater	windatemanager.exe	"Added by the SDBOT.TS WORM!"
X	MSN UPDATERS	virtualmemory.exe	"Added by the RBOT-JK WORM!"
X	MSN Updating	msnupdate.exe	"Detected by Kaspersky as the QHOST.AEI TROJAN! See here"
X	MSN User	mymsnusr.exe	"Detected by Trend Micro as the IRCBOT.AVD TROJAN! See here"
X	MSN User Server	msnserver.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN User Server!	msnservices.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN User Service!	msnserv.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	MSN User Services	msnuserv.exe	"Added by a variant of the IRCBOT TROJAN! See here"
U	MSN Video Enhanced	MSNVE.exe	"""MSN Video Enhanced can play videos that have dramatically improved video quality and sound. It can play the latest high-quality videos at the best possible quality."" No longer appears to exist"
X	msn.exe	son.exe	"Added by the STARTPA-GS TROJAN!"
X	MSN32 X Service	MSN32x.EXE	Added by an unidentified WORM!
X	MSN6.1 Auto-Updater	v6msn.exe	"Added by the AUTORUN-MM WORM!"
X	MSN8m Startup	msn8m.exe	"Added by a variant of the RBOT WORM!"
X	msnager32	svchostt.exe	"Added by the WOMANIZ.E TROJAN!"
N	msnappau	msnappau.exe	"Updater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to ""update"" the toolbar"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list