Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 012 3 4 5 6 7 8910 11 12 13 14 15 161718 19 20 21 22 23 242526 27 28 29 30 31 323334 35 36 37 38 39 40
414243 44 45 46 47 48 495051 52 53 54 55 56 575859 60 61 62 63 64 656667 68 69 70 71 72 737475 76 77
78 79 8081 82 83 84 85 8687 88 89 90 91 9293 94 95 96 97 9899

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Msnarrator msnarrator.exe"Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware"
X MSNavWH MSWkwrH.exe"Added by the ANAV-A WORM!"
X msndrvsys msndrvsys.exe"Added by the BROGGER-D TROJAN!"
X MSNET msnet.exe"Added by the BOA WORM!"
X MsnExplorer winagent.exe"Added by the BDOOR-EQ BACKDOOR!"
X MsnExplorer MSEXPLOREN.EXE"Added by the BDOOR-EB BACKDOOR!"
X MsnExplorer SHCH.EXE"Added by the BDOOR-EB BACKDOOR!"
X MsnExplorer SVCHST.EXE"Added by the BDOOR-EB BACKDOOR!"
X MsnExplorer msnexploren.exe"Added by the TACTSLAY.B TROJAN!"
X MsnExplorer sdhch.exe"Added by the TACTSLAY.B TROJAN!"
? MsnFixer msnfixjs.js"Located in the HPbinmsnfix directory of a HP PC"
X MSNGrabber MSNgrabber.exe"Added by the ENVID.A WORM!"
X msngta32 msngta32.exe"Added by a variant of the RBOT WORM!"
N MSNIA MSNIASVC.EXEAdded with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
X msnload32.exe msnload32.exe"Added by the BANCOS.M TROJAN!"
X MSNMESENGER Main.exe"Added by the PRORAT TROJAN!"
X msnmessenger msnmessenger.exe"Added by the BANCBAN-KJ TROJAN!"
X msnmgr msnmgr.exe"Added by the BIFROSE-K WORM!"
X msnmsg asgag.exe"CoolWebSearch parasite variant"
X msnmsg TBC.exeAdded by an unidentified TROJAN!
X msnmsg msnmsg.exe"Added by the BANKER-CLX TROJAN!"
X msnmsg.exe mscmd32.exeAdded by a variant of the AGENT.AH TROJAN!
X msnmsg.exe msnmsg.exe"Added by the BANCBAN-KN TROJAN!"
X msnmsgq32 msnmsgq.exe"Added by the TACTSLAY.H TROJAN!"
X msnmsgq32 msnmsgq32.exe"Added by the TACTSLAY.F TROJAN!"
X msnmsgq32 sssasasb32.exe"Added by the TACTSLAY.F TROJAN!"
N msnmsgr msnmsgr.exe"MSN Messenger (now superseded by Windows Live Messenger) utility. If you don't use MSN Messenger this can be annoying. Available via Start → Programs. Go to MS Messenger → Too"
X MsnMsgr MsnMsgrs.exe"Added by the NETSKY.AD WORM!"
X MsnMsgr msnmsgr.exe"Added by the ANNEW-FAM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
X msnmsgr32-.exe msnmsgr-.exe"Added by a variant of the SPYBOT WORM!"
X MSNMSGR5 MSNMSGR5.exe"Added by the RBOT.PQ WORM!"
X MSNMSGRE swef.batIRC backdoor TROJAN or WORM!
X MSNMSGRR swin.batIRC backdoor TROJAN or WORM!
X MSNMSGRS swe.batIRC worm or backdoor trojan!
X MSNMSGRS swiss.batIRC worm or backdoor trojan!
X MSNMSGRS1 swed.batIRC backdoor TROJAN or WORM!
X msnmsgs.exe msnmsgs.exe"Added by the BANKER-HK TROJAN! Note - not to be confused with msmsgs.exe the well known MSN Instant Messaging application!"
X msnmsgsgs msnmsgsgs.exe"Added by the ""Catal"" alias Spy.Delitall.B backdoor TROJAN!"
X msnmsgy [path to file]"Added by the BANKER-EQ TROJAN!"
X msnnt winampb.exe"Chinese originated adware - detected by Kaspersky as the AGENT.TL TROJAN!"
X msnnt winampf.exeAdded by the SMALL.DTS TROJAN!
X MSNPluginSrIvcs n3vasap23.exe"Added by a variant of the RBOT WORM!"
X MSNPluginSrvcs p6.exe"Added by the SDBOT.AKJ or RBOT-VJ WORMS!"
X MSNPluginSrvcs sagate.exe"Added by the SDBOT.AKJ WORM!"
X MSNPlus msnplus.exe"Added by the BANKER-DAN TROJAN!"
X MSNS PLUS XP2 msdupd.exe"Added by the RBOT-BCE WORM!"
X msnsched2 msnsched2.exe"Added by the SPYBOT.NNT WORM!"
X MSNService MSNService.exe"Added by the CARPET.C WORM!"
X msnsgs msnsgs.exe"Added by the CHEUKO-B TROJAN!"
X msnshed msnshed.exe"Added by the RBOT-YN WORM!"
X msnsmgr MsnMsr.exe"Added by the LOONY-N TROJAN!"
N msnsyslog msnappm.exe"Related to Messenger Applications. When you uninstall the trial version the msnappm keeps saying (You have xx days left) this is adware and it very annoying"
X MSNSysRestore pc32.exeAdded by a variant of the MASTAK VIRUS!
X msnToolbaar msnmsgesc.exe"Added by the RBOT.BMF WORM!"
X msnupdt kolie.exe"Added by a variant of the RBOT WORM!"
X MSObject32 MSObject32.js"Added by the PUN TROJAN!"
X Msoffice msoffice.htaHijacker - redirecting to Searchdot.net
X MSOffice services.exe"Added by the DLOADER-EU TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in an ""MSOffice"" subfolder"
X MSOffice32 msjcf.exe"Added by the RAKER-A TROJAN!"
X MSOfficeCfg msocfg.exePremium rate adult content dialer
X MSOfficeCfg navchk.exePremium rate adult content dialer
X MSOfficeCfg qservice.exePremium rate adult content dialer
X MSOfficeCfg shman.exePremium rate adult content dialer
X MSOfficeCfg ssvr.exePremium rate adult content dialer
X msoffwz msoffwz.EXE"Added by the BANCBAN-HQ TROJAN!"
X msoft-updater23 mssysstems.exe"Added by the RBOT-ATU WORM!"
X msoft-updater23 slssystem.exe"Added by the RBOT-ASR WORM!"
X MSOleath32 winss.exe"Added by the KATHER TROJAN!"
X MSOOBD MSOOBD.EXE"Added by the MAGISTR.A VIRUS!"
X msoupdater msoupdater.exe"Added by the DLOADER.GBD TROJAN!"
X mspaint.exe check32.exe"Added by the AGENT.AH TROJAN!"
X Mspatch69 [path to trojan]"Added by the MPROX TROJAN!"
X Mspatch89 cnqmax.exe"Added by the RANDEX.P WORM!"
X MSPetServ PET32.EXE"Added by the IRCBOT-VE WORM!"
X msping msping.exe"Added by the FLOODBLACK TROJAN!"
X msping.exe msping.exe"Added by the BDOOR-MZ BACKDOOR!"
X MSPluginSrvc p3.exe"Added by the RBOT-WV WORM!"
X MSPLUS msplus32.exe"Added by the MYTOB-AM or MYTOB-CL WORMS!"
X MSPP System Update 64 wiaadmgr.exe"Detected by Kaspersky as the RANKY.GEN TROJAN!"
X MSPQFile MSA****.TMP [* = random char]Homepage hijacker
X MsPrint32D MsPrint32D.exe"Added by the WINKO.AO WORM!"
X MSPRO32 [path to worm]"Added by the IBERIO WORM!"
X MSPRO32 pnp.exe"Added by the ZOTOB.O WORM!"
X MSprotect.exe MSprotect.exe"Added by the DABYREV.A VIRUS!"
U mspwr pupstman.exe"""Transparent icon background"" feature of Ashampoo'sPowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me)"
U mspwr pupxpman.exe"Related to Ashampoo's PowerUp XP"
U mspwr pwrupst.exe"Ashampoo's PowerUp XP is a ""tool for fine-tuning your Windows NT4 2000 2003 Server and XP configuration"""
U mspwr PuXpMan2.exe"Related to Ashampoo's Magic Defrag Utility"
N MSPY2002 ImScInst.exePart of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE Outlook and Word
X msqssr msqssr.exe"Detected by Kaspersky as the DLUCA.GEN TROJAN!"
X MSR msr.exe"Added by the AGOBOT.RT WORM!"
X Msrc Msrc.exeAdded by the KRYPTONIC GHOST TROJAN!
X msrdc msrdc.exe"Added by the SDBOT-CXO WORM!"
X msreg.exe msrege.exe"Added by the ZINX TROJAN!"
X msReg32 Loader msreg32.exe"Added by the AGOBOT.IU WORM!"
X MSREGIT Msgp.exe"Added by the KRYPGHOS.13 TROJAN!"
U MSRegScan SGP.exe"SpyGator surveillance software. Uninstall this software unless you put it there yourself"
X MSRegScan SSDemo.exe"Supremespy spyware"
U MSRegScan ETNKL.exe"ComKeylogger surveillance software. Uninstall this software unless you put it there yourself"
X MSRegSvc regsvc32.exeHomepage hijacker that changes your homepage to an adult content site
X msresear [path to trojan]"Added by the WEASYW-B TROJAN!"
X msresearch msresearch.exe"TROJAN! - 180SearchAssistant adware related"
X msresearch tool3.exe"Spy Sheriff/SpywareNO malware also detected as the SPYHOAX-A TROJAN pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE NS6281400.so CVXH8JKDQ2.EXE down3.exe sefe.exe winstall.exe and tool2.exe"
X msrundll msrund1l32.exe"Added by the BINGHE TROJAN!"
X msrunocx32 msrunocx32.exe"Added by the SKUS WORM!"
X Mss Serv msssrv.exe"Detected by Trend Micro as the SLENFBOT.AA WORM! See here"
X Mss VC mssvc.exe"Added by the CHECKOUT WORM! See here"
X mssaru mssaru.exe"Added by the AGENT.AM TROJAN! Note - example names include ""XviD"" ""Winamp Remote"" ""Windows Media Player"" and ""Futuremark"""
X msscan.exe msscan.exe"Detected by Kaspersky as the AGENT.ANQ TROJAN! See here"
U MSSCDL MSSCDLL.exe"SpyCapture keystroke logger/monitoring program - remove unless you installed it yourself!"
X mssdbsrv msupdtck.exeAdded by a variant of a password stealing TROJAN!
X msserv msserv.exe"Added by the BLACKLOG-A TROJAN!"
X msserv lvsrev.exe"Added by the BROWMON-B TROJAN!"
X msserv32 msserv32.exe"Added by the RBOT-ACK WORM!"
X MsServer msfun80.exe"Added by the VB-CYG WORM!"
X MSServer Rundll32.exe [random].dll#1"Unidentified malware! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The file is typically found in either %System% or the Windows ""Temp"" folder"
X msservice msserv.exe"Added by the HYD WORM!"
X MSService_v1.0 realsched.exe"EHU adware. Note - this is not the legitimate RealOne Player (realsched.exe) application of the same name"
X MSService_v1.0 vfp02.exe"NewWeb adware"
X mssfos sfool.exe"Added by the RANDEX.EUS WORM!"
X MSSGisg [path to file]"Added by the RANKY.N TROJAN!"
X Msshield.exe Msshield.exe"Added by a variant of the IRCBOT TROJAN!"
X MSShow MSShow.exe"Added by the QQROB-M TROJAN!"
X MSSHVC MSSHVC.exe"Added by the NUFFY.A WORM!"
X mssonfig winupdate.exe"Added by a variant of the SDBOT WORM!"
X mssoul msmscc2.exe"Added by the DAPIZL.A banker WORM! (A ""banker worm"" is designed to pillage banking information and send it back to the perpetrators!)"
X mssoul msmscc.exe"Added by the BANCOS.HKT TROJAN!"
X mssp3 mssp22.exe"Added by the IBANK-D TROJAN!"
X MSSQL Mssql.exe"Added by the SDBOT TROJAN!"
X MSSQL for Windows NT & XP mssqlsnt.exe"Added by a variant of the SDBOT WORM!"
N mssSort msssort.exe"Maxtor (now Seagate) ""Drag and Sort"" for their external storeage - ""Just drag documents onto the Shared Storage II icon and Maxtor?s Drag and Sort organizes your files placing them in appropriate shared folders"""
X Msstart msstart.exe"Added by the LIVUP.C TROJAN!"
X MSStartOptimizer Iexpres.exe"Added by the DASMIN-E TROJAN!"
X MSStartOptimizer WINUPD.EXE"Added by the DASMIN-E TROJAN!"
X MSStartOptimizer SCVHOST.EXE"Added by the DASMIN-E TROJAN!"
X msstask msstask.exe"Added by the MYPARTY WORM!"
X mssurfer lptt01 mssurfer.exe"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X mssurfer ml097e mssurfer.exe"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X mssvc [path to trojan]"Added by the PSK TROJAN!"
X MSSVC svcsys.exe"Added by the FATOOS-C TROJAN!"
Y MSSVC.EXE MSSVC.EXEStealthDisk - hides folders files and applications. Will also encrypt them for better protection
X mssvc32 mssvc32.exe"Added by the AGOBOT-ME WORM!"
X mssync20 mssync20.exe"Added by the LDPINC-QC TROJAN!"
X mssys mssys.exe"Added by the MYSS.B TROJAN!"
X mssysint Iexplore .exe"Added by the PWSTEAL.ABCHLP and PSPIDER.310.B TROJANS! Note - this is not the legitimate Internet Explorer (iexplore.exe) process as there is a space before the "".exe"""
X mssysint comime.exe"Added by the NETSNAKE-I TROJAN!"
X mssyslanhelper msmsgri32.exe"Added by the RANDEX.D WORM!"
X MsSystem msdos.exe"Adult content downloader - see here"
X MsSystem mssys.exe"Added by the VANTA.A TROJAN!"
X MSSYSTEM svcsys.exe"Added by the FATOOS-C TROJAN!"
U Mstapi Mstapi.exeKeystroke logger/monitoring program - remove unless you installed it yourself!
X Mstask mstask.exe"Added by the OPASERV.N WORM! Note - this is not the legitimate mstask.exe system file and the executable resides in C:Windows or C:WINNT"
X mstask mstask.exe"Browser hijacker - redirecting to find-more.net. Note - this is not the legitimate mstask.exe system file"
X MSTask run dll.exe"Yuupsearch adware"
X MStask svchost.exe"Added by the LDPINCH-BV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X MsTask wstask32.exe"Added by the MYTOB-FE WORM!"
X Mstask kernel32.exe"Added by the STAP-C WORM!"
X Mstask MSDTC.exe"Added by the STAP-D WORM!"
X Mstask32driver Mstask32.exe"Added by the LOONY-D TROJAN!"
X MSTaskbar 32 tbsvc32.exe"Added by the RBOT.BQZ WORM!"
X mstasks mstasks.exe"Added by the MULTIDR-AY TROJAN!"
? Mstcgww MSTCGWW.EXE"??"
X mstds.exe mstds.exe"Added by the IPTABLES TROJAN!"
X mstg32.exe mstg32.exeAdded by the AGENT.BI TROJAN!
N MSTMON_N MSTMON_N.EXEGenerates an error message on startup if a Konica Minolta printer is not turned on and ready
N MSTMON_Q MSTMON_Q.exeGenerates an error message on startup if the Konica Minolta PagePro 1350W printer is not turned on and ready
X Mstng32 MSTng32.exe"Added by the TANG WORM!"
X mstsdsc.exe mstsdsc.exe"Added by the CIMUZ-CD TROJAN!"
X msupd msupd.exe"Added by the IEACCESS DIALER!"
X MSUpdate wupd.exe"Added by the ALADINZ.M TROJAN!"
X MSUpdate svchosthlp.exe"Added by the BLASTER.T WORM!"
X msupdate msupdate.exe"Added by the RBOT-MZ WORM!"
X MSUpdate criticalUpdate.exe"Affilred adware"
X msupdate update.exe"Added by a variant of the SDBOT WORM!"
X Msupdate expIorer.exe"Added by the TACTSLAY.A TROJAN!"
X Msupdate outIook.exe"Added by the TACTSLAY.A TROJAN!"
X Msupdate svchosts.exe"Added by a variant of the TACTSLAY TROJAN!"
X Msupdate svcrhost.exe"Added by the TACTSLAY.A TROJAN!"
X Msupdate svcshost.exe"Added by the TACTSLAY.A TROJAN!"
X MSupdate.exe N/A"CoolWebSearch parasite variant - resets home page to an adult content site"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list

Copyright 2003-2009 I Am Not A Geek Inc.