HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	MSRegSvc	regsvc32.exe	Homepage hijacker that changes your homepage to an adult content site
X	msresear	[path to trojan]	"Added by the WEASYW-B TROJAN!"
X	msresearch	msresearch.exe	"TROJAN! - 180SearchAssistant adware related"
X	msresearch	tool3.exe	"Spy Sheriff/SpywareNO malware
X	msrundll	msrund1l32.exe	"Added by the BINGHE TROJAN!"
X	msrunocx32	msrunocx32.exe	"Added by the SKUS WORM!"
U	MSSCDL	MSSCDLL.exe	"SpyCapture keystroke logger/monitoring program - remove unless you installed it yourself!"
X	msserv	msserv.exe	"Added by the BLACKLOG-A TROJAN!"
X	msserv	lvsrev.exe	"Added by the BROWMON-B TROJAN!"
X	msserv32	msserv32.exe	"Added by the RBOT-ACK WORM!"
X	msservice	msserv.exe	"Added by the HYD WORM!"
X	mssfos	sfool.exe	"Added by the RANDEX.EUS WORM!"
X	MSSGisg	[path to file]	"Added by the RANKY.N TROJAN!"
X	MSShow	MSShow.exe	"Added by the QQROB-M TROJAN!"
X	MSSHVC	MSSHVC.exe	"Added by the NUFFY.A WORM!"
X	mssonfig	winupdate.exe	"Added by a variant of the SDBOT WORM!"
X	mssoul	msmscc2.exe	"Added by the DAPIZL.A banker WORM! (A ""banker worm"" is designed to pillage banking information and send it back to the perpetrators!)"
X	mssp3	mssp22.exe	"Added by the IBANK-D TROJAN!"
X	MSSQL	Mssql.exe	"Added by the SDBOT TROJAN!"
X	MSSQL for Windows NT & XP	mssqlsnt.exe	"Added by a variant of the SDBOT WORM!"
X	Msstart	msstart.exe	"Added by the LIVUP.C TROJAN!"
X	MSStartOptimizer	Iexpres.exe	"Added by the DASMIN-E TROJAN!"
X	MSStartOptimizer	WINUPD.EXE	"Added by the DASMIN-E TROJAN!"
X	MSStartOptimizer	SCVHOST.EXE	"Added by the DASMIN-E TROJAN!"
X	msstask	msstask.exe	"Added by the MYPARTY WORM!"
X	mssurfer lptt01	mssurfer.exe	"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	mssurfer ml097e	mssurfer.exe	"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	mssvc	[path to trojan]	"Added by the PSK TROJAN!"
X	MSSVC	svcsys.exe	"Added by the FATOOS-C TROJAN!"
Y	MSSVC.EXE	MSSVC.EXE	"Stealthdisk - hides folders
X	mssvc32	mssvc32.exe	"Added by the AGOBOT-ME WORM!"
X	mssys	mssys.exe	"Added by the MYSS.B TROJAN!"
X	mssysint	Iexplore .exe	"Added by the PWSTEAL.ABCHLP and PSPIDER.310.B TROJANS! Note - this is not the legitimate Internet Explorer (iexplore.exe) process as there is a space before the "".exe"""
X	mssysint	comime.exe	"Added by the NETSNAKE-I TROJAN!"
X	mssyslanhelper	msmsgri32.exe	"Added by the RANDEX.D WORM!"
X	MsSystem	msdos.exe	"Adult content downloader - see here"
X	MsSystem	mssys.exe	"Added by the VANTA.A TROJAN!"
X	MSSYSTEM	svcsys.exe	"Added by the FATOOS-C TROJAN!"
U	Mstapi	Mstapi.exe	Keystroke logger/monitoring program - remove unless you installed it yourself!
X	Mstask	mstask.exe	"Added by the OPASERV.N WORM! Note - this is not the legitimate mstask.exe system file and the executable resides in C:Windows or C:WINNT"
X	mstask	mstask.exe	"Browser hijacker - redirecting to find-more.net. Note - this is not the legitimate mstask.exe system file"
X	MSTask	run dll.exe	"Yuupsearch adware"
X	MStask	svchost.exe	"Added by the LDPINCH-BV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder!"
X	MsTask	wstask32.exe	"Added by the MYTOB-FE WORM!"
X	MSTaskbar 32	tbsvc32.exe	"Added by the RBOT.BQZ WORM!"
X	mstasks	mstasks.exe	"Added by the MULTIDR-AY TROJAN!"
?	Mstcgww	MSTCGWW.EXE	"??"
X	mstg32.exe	mstg32.exe	Added by the AGENT.BI TROJAN!
N	MSTMON_N	MSTMON_N.EXE	Generates an error message on startup if a Konica Minolta printer is not turned on and ready
N	MSTMON_Q	MSTMON_Q.exe	Generates an error message on startup if the Konica Minolta PagePro 1350W printer is not turned on and ready
X	Mstng32	MSTng32.exe	"Added by the TANG WORM!"
X	msupd	msupd.exe	"Added by the IEACCESS DIALER!"
X	MSUpdate	wupd.exe	"Added by the ALADINZ.M TROJAN!"
X	MSUpdate	svchosthlp.exe	"Added by the BLASTER.T WORM!"
X	msupdate	msupdate.exe	"Added by the RBOT-MZ WORM!"
X	MSUpdate	criticalUpdate.exe	"Affilred adware"
X	msupdate	update.exe	"Added by a variant of the SDBOT WORM!"
X	Msupdate	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	Msupdate	outIook.exe	"Added by the TACTSLAY.A TROJAN!"
X	Msupdate	svchosts.exe	"Added by a variant of the TACTSLAY TROJAN!"
X	Msupdate	svcrhost.exe	"Added by the TACTSLAY.A TROJAN!"
X	Msupdate	svcshost.exe	"Added by the TACTSLAY.A TROJAN!"
X	MSupdate.exe	N/A	"CoolWebSearch parasite variant - resets home page to an adult content site"
X	MSUpdateDevKit	axfd.exe	"Added by the SDBOT-ZD WORM!"
X	MsUpdater System	udpsys32.exe	"Added by the RBOT.AAA WORM!"
X	MSupdater.exe	N/A	"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
X	msupdater25	lsasser.exe	"Added by the RBOT-ATS WORM!"
X	msupdates	msupdt.exe	"Added by the RBOT-JO WORM!"
X	MSUpdSrv	msupdsrv.exe	"Browser hijacker
X	msurl	msurl32.exe	"Added by the CRYPTER.A TROJAN!"
X	msuser32.exe	msuser32.exe	"Added by the ANDROV TROJAN!"
X	MsVBdll	sys32dll.exe	"Added by the AIMDES.B or AIMDES.C WORMS!"
X	MsVBdll	MsVBdll.pif	"Added by the AIMDES.A WORM!"
X	MSVBVM60	MSVBVBM60.pif	"Added by the SCOLD-B WORM!"
X	msvc32	msvc32.exe	"ClientMan parasite variant"
X	msvc32	msvc32.exe	"Added by the AGOBOT-NT WORM!"
X	msvcc	msvchost.exe	"Added by the XOMBE TROJAN!"
X	msvcc25	svcchost.exe	"Added by a variant of the SDBOT WORM!"
X	MSVersion	INTERNETFEATURES.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	MSVersion	clrschp038.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	msvhost	aig.exe	"Added by the AIMBOT-BC TROJAN!"
X	msvload32	msvload32.exe	"Added by the RBOT-ACI WORM!"
X	msvsc32	msdev.exe	"Added by the RBOT-GJ WORM!"
X	MSVsmt	rpcxctx.exe	Added by an unidentified WORM or TROJAN!
X	MSVSync	videosync.exe	"Added by a variant of the SPYBOT WORM!"
X	MSVXD	MSVXD.EXE	"Added by the DATOM.A WORM!"
X	mswave	mswave.exe	"Added by the CRYPTER.A TROJAN!"
X	Mswavedll	mswavedll.exe	"Added by the CRYPTER-C TROJAN!"
U	MSwheel	mswheel.exe	"Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features"
X	MSWin	mswin.exe	"Added by the BANKER-CU TROJAN!"
X	Mswincfg	Mswincfg32.exe	"Added by the CYBRSPY.D TROJAN!"
X	MsWindows DRT Drivers	wsdrt32.exe	"Added by the RBOT.ALT WORM!"
X	MsWindows SSL Drivers	mssl32.exe	"Added by the SPYBOT.API WORM!"
X	MsWindows SysDate	sysmsvc.exe	"Added by the SPYBOT.FCD WORM!"
X	MSWindows Syspg	mspg32.exe	"Added by the RBOT-TB WORM!"
X	MSWindowsUpdate	Systern.exe	"Added by the RBOT-AFD WORM!"
X	MSWindowsUpdate	mswinup.exe	"Added by a variant of the SDBOT WORM!"
X	Mswinpid32	mswinpid32.exe	Added by the LAPOS.A TROJAN! This is a keylogger which emails back to China PayPal passwords and account information - thus allowing the perpetrators to steal PayPal funds in the name of the victim!
X	MSWinSrv	MSWinSrv.exe	"Added by the MTRON TROJAN!"
X	MSWinSrv32	MSWinSrv32.exe	"Added by the MTRON-B TROJAN!"
U	MSWinupd	winupd.exe	"Added by the DLOADER-YE or DLOADR-AAA or DLOADER-ZF TROJAN!"
X	MSWinupdate	winupdate.exe	"Added by the DLOADR-AAW TROJAN!"
X	MsWinVgr	msvgr.exe	"Added by the MYTOB.LE WORM!"
X	mswkork Service	msework.exe	"Added by a variant of the RBOT WORM!"
X	msword	msword.exe	"Added by the RBOT-ADR WORM!"
X	mswspl	[random filename]	"Added by the SMALL.IQ TROJAN!"
X	mswspl	searchbarcash.exe	SearchBarCash adware
X	mswspl	vnmispoisn downloader.exe	SearchBarCash adware variant
X	mswspl	plugin1.exe	"Added by the SMALL.IQ TROJAN!"
X	msxct	msxct.exe	"eXact Advertising (NaviSearch
X	Msy1 Startups	msyj32.exe	"Added by the AGOBOT-QQ WORM!"
X	msys lptt01	msys.exe	"RapidBlaster variant (in a ""Msyss"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Msys32	morfitwebentrance.exe	"Morfit ADjectPager - "uses home page rental technology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage "
X	MSysDrv	msdrv.exe	Added by the VB.WF TROJAN!
X	ms_anti_spyware	mwfirewall.exe	"Added by the GAMQOWI TROJAN!"
X	ms_anti_spywarebxp	mwfirebpx.exe	"Added by the SURILA-D TROJAN!"
X	ms_anti_spywarebxp	mwfibpx.exe	"Added by the SURILA-J TROJAN!"
X	MS_LARISSA	MS_LARISSA.exe	"Added by the ASSIRAL WORM!"
X	MS_NETD_WIN32	netd32.EXE	"Added by the RANDEX.F WORM!"
X	MS_SETUP.EXE	MS_SETUP.EXE	"Added by the CHARGE TROJAN!"
X	MS_Update Check	wdfmgr.exe	"Added by the AGOBOT-TB WORM!"
X	Mtr2	mtr2.exe	Added by the KRYPTONIC GHOST TROJAN!
U	MUAL	mual.exe	Millesky video mail updater and launcher
U	muamgr	muamgr.exe	"Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful
?	Mufix	mufix.exe	"Part of INFOConnect
U	Multi-function keyboard	GWHotkey.exe	"Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail
U	MultiCAM Initializer	MCamBoot.exe	"The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled"
X	Multimedia Codecs	mcc.exe	"Added by the DLOADER-MB TROJAN!"
X	Multimedia extensions	mservice.exe	"EasySearch adware"
X	Multimedia extensions	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
U	Multimedia KBD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	MULTIMEDIA KEYBOARD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
X	multiran	multiran.exe	"Added by the COSIAM-E TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list