HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
Y	NettGain2000 Verifier	NettGain2000 Verifier.exe	Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed
U	NetTime	NETTIME.EXE	From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols e.g. NTP."
U	NetTurbo	netturbo.exe	"NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled"
X	Netunit32	wunit32.exe	Added by an unidentified WORM or TROJAN!
X	netupdate32	netupdate32.exe	"Added by the RBOT-GQZ WORM!"
X	NETVISIONAdulti	[random filename]	"Trafficadvance dialer"
X	NETVISIONPasse-partout	Passe-partout.exe	"Added by the DIALCAR-M DIALER!"
X	netw	svw.exe	"Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware"
X	NetWatch32	netwatch.exe	"Added by the MIMAIL.C WORM!"
N	Netword Agent	nwant33.exe	An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
X	NetWork	csrs.exe	"Added by the AGOBOT.JJ WORM!"
X	Network Access	winssh.exe	"Added by a variant of the SDBOT WORM!"
X	Network Administration	NAS.exe	"Added by the ANTILAM.20.Q TROJAN!"
X	Network Administration Service	rsvc32.exe	"Added by the RBOT.ABH WORM!"
U	Network Associates Error Reporting Service	TBMon.exe	Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
X	Network Connections	internat.exe	"Added by the VB-ZD TROJAN!"
X	network device driver	msfirewall.exe	"Added by the DELF-LB TROJAN!"
U	NetWork Device Switch	NetDevSW.exe	Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X	Network Host Controller	[path to trojan]	"Added by the WHISPER TROJAN!"
X	Network Host Service	msmnart32.exe	"Added by the RBOT-CJV WORM!"
X	Network Host Service	[random]32.exe	"Added by the RBOT-BAB WORM!"
X	Network maneger	svchost.exe	"Detected by Trend Micro as the AGENT.BX BACKDOOR! See here. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Network Protocol Service	wuamgrd.exe	"Added by the RBOT.EA WORM!"
X	Network protocol service	wintcp.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Provisioning Service	WinNPS.exe	Added by an unidentified WORM/TROJAN!
X	Network Security	secsvc.exe	"Added by the RBOT-ALX WORM!"
X	Network Security	NSecurity.exe	"Added by the IRCBOT.AAV WORM!"
X	Network Security Guard	**********.exe [* = random char]	"CoolWebSearch parasite variant"
X	Network Security Guard	[path to trojan]	"Added by the COLEM-A TROJAN!"
X	Network Security XP	nvsvc86.exe	"Added by the RBOT-GUI WORM!"
X	Network Service	svchost.exe	"Added by the STARTPA-CC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Network Service	svhost.exe	"Added by the HACDEF-K TROJAN!"
X	Network Service	MccTrayApp.exe	Added by an unidentified WORM or TROJAN!
X	Network Service Manager	netsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Translation System Service	ntss.exe	"Added by the UNPDOOR TROJAN!"
X	NetworkAssociates Inc	internet.exe	"Added by the LOVGATE.AB WORM!"
X	NetworkClient	NetworkClient.exe	"Added by the LEMUR WORM!"
X	NetworkKey	netkey.exe	"Added by the IRCBOT-AJ TROJAN!"
X	Networks Configurator	NetConfs.exe	"Added by the RBOT-OX WORM!"
X	Networks Controler	Netsis.exe	"Added by the RBOT-NG WORM!"
N	NetworkSetup	dlink.exe	"D-Link System Tray icon"
X	netx	svx.exe	"Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware"
X	netzip	svzip.exe	"Detected by PCTools as the DELF.ZWL TROJAN! See here"
X	Netzip Smart Downloader	npnzdad.exe	Advertising spyware
N	NetZIPFolders	nzfprop.exe	"Netzip Classic zip file manager"
X	NeuroMedia(IESpeaker)	NeuroMedia.exe	"Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available"
N	NeuroSpeech OESpeaker	OEMonitor.exe	"Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not"
X	New Anti Virus	System.exe	"Added by the BRONTOK-CH WORM!"
X	New Csnm Manager	csmn.exe	"Added by the SDBOT.BZS WORM!"
X	New.net Startup	rundll32 [path] NEWDOT~1.DLL ClientStartup	"NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	New.net Startup	rundll32 [path] NEWDOT~1.DLL NewDotNetStartup	"NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	New.net Startup	rundll32 [path] NEWDOT~2.DLL ClientStartup	"NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	New.net Startup	rundll32 [path] NEWDOT~2.DLL NewDotNetStartup	"NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	Newman	playavi.exe	"Added by the LINEAGE-AT TROJAN!"
X	newname	[path to trojan]	"Added by the DRSMARTL-S TROJAN!"
?	News Service	ispnews.exe	"F-Secure antivirus related. However is this particular item required?"
N	Newsalrt	NEWSALRT.EXE	MSNBC News system tray utility to alert you to new news
X	Newsgroup lptt01	newsgroup.exe	"RapidBlaster variant (in a ""newsgroup"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Newsgroup ml097e	newsgroup.exe	"RapidBlaster variant (in a ""newsgroup"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	NewsUpd	newsupd.exe	"For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here."
X	NewtonKnowsUpd	NewtKnow.exe ...NewtnUpd.dll runkey	"NewtonKnows hijacker"
X	Nex	nex.exe	"Added by the AGENT-FPQ TROJAN!"
U	NexusServer	PNXSERVR.exe	"Related to ProCoder 2.0 from Canopus. ""ProCoder 2.0 software combines speed and flexibility into a streamlined video conversion tool for professionals. Featuring extensive input/output options advanced filtering batch processing and an easy-to-use interface ProCoder 2.0 is the ideal solution for high-quality multi-format video creation"""
U	NFM Service	NPDOR9x.exe	"Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required"
X	Nfo	nfomon.exe	"Delfin Media Viewer adware related"
N	nForce Tray Options	sstray.exe	nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
U	NGClient	ngctw32.exe	"Symantec Ghost Server software - needed for a ""a Ghost multicast"" (transfer images to multiple machines). Can be launched manually"
X	ngpw36	ngpw36.exe	"AdBlaster adware variant"
N	NGServer	ngserver.exe	Symantec/Norton Ghost Console service
X	NI.UERSM_0001_N68M1602	UERSM_0001_N68M1602NetInstaller.exe	"ErrorSafe misleading security software - not recommended see here"
N	NI.UGDC_0002_N108M1007	installer_en.exe	"MyContentAssistant security program not recommend - see here"
N	NI.UGES_0001_N108M2006	setup_en.exe	"MyContentAssistant security program not recommend - see here"
X	NI.UGES_0001_N122M2111	mofugclq.exe	Added by an unidentified misleading security program - not recommended
X	NI.UWA6P_0001_N56M1001	WinAntiVirusPro2006Installer.exe	"WinAntiVirus Pro 2006 misleading virus software - not recommended see here"
X	NI.UWA6P_0001_N69M0303	WinAntiVirusPro2006Installer[1].exe	"WinAntiVirus Pro 2006 misleading virus software - not recommended see here"
X	NI.UWA6P_0001_N73M1004	WinAntiVirusPro2006FreeInstall.exe	"WinAntiVirus Pro 2006 misleading virus software - not recommended see here"
X	NI.UWA6P_0001_N91M1807	winantiviruspro2006freeinstall[1].exe	"WinAntiVirus Pro 2006 misleading virus software - not recommended see here"
X	NI.UWA7P_0001_N91M0809	winantiviruspro2007freeinstall[1].exe	"WinAntiVirus Pro 2007 misleading virus software - not recommended see here"
X	NI.UWAS5LP_0001_0811	UWAS5LP_0001_0811NetInstaller.exe	"WinFixer web installer. Winfixer is ""Foistware"" pretending to be system optimization protection and recovery software - stealth installed see here"
X	NI.UWAS6_0001_N57M1312	WinAntiSpyware2006FreeInstall.exe	"WinAntiSpyware 2006 rogue spyware remover - not recommended see here"
X	NI.UWAS6_0001_N68M2301	UWAS6_0001_N68M2301NetInstaller.exe	"WinFixer web installer. Winfixer is ""Foistware"" pretending to be system optimization protection and recovery software - stealth installed see here"
X	NI.UWFX5	UWFX5NetInstaller.exe	"WinFixer web installer. Winfixer is ""Foistware"" pretending to be system optimization protection and recovery software - stealth installed see here"
X	NI.UWFX5T	UWFX5TNetInstaller.exe	"Added by the DOWNLDR-BO TROJAN!"
X	NI.UWFX5[various]	[various filenames]	"WinFixer web installer. Winfixer is ""Foistware"" pretending to be system optimization protection and recovery software - stealth installed see here. Example filenames are UWFX5LP_0001_0802NetInstaller.exe UWFX5V_0001_0802NetInstaller.exe UWFX5_0001_N66M1101NETINSTALLER.EXE 1D7C.tmp WinFixerScannerInstall[1].exe"
X	NI.UWFX6_0001_N68M2301	UWFX6_0001_N68M2301NetInstaller.exe	"WinFixer web installer. Winfixer is ""Foistware"" pretending to be system optimization protection and recovery software - stealth installed see here"
X	NiceDownloads	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	NiceMP3	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	Nielsen NetRatings	insight.exe	"NetRatings Premeter spyware"
X	NIEUW	[path to dialler]	"""Switch-F"" premium rate adult content dialler"
U	NIHomeAM	LiteClientAM.exe	"A managed web based internet security service that provides comprehensive & total protection for laptops/desktops - regardless of how when or where they connect to the Internet. Made by Netintelligence Ltd"
X	nikLaus	nikLaus.exe	"Added by the NIKLAS WORM!"
N	Nikon Monitor	nkmonitor.exe	Monitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC
N	NInit	NInit.exe	Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
X	NiroFile Updated	NiroFile.exe	"Added by a variant of the IRCBOT TROJAN!"
X	nisdisa	nisdisa.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
Y	nisserv	NISSERV.EXE	Norton Personal Firewall
Y	Nisum	NISUM.EXE	Norton Personal Firewall
U	niSvcLoc	niSvcLoc.exe	"Related to National Instruments Corp. LabView"
U	Nitro PDF Printer Monitor	NitroPDFPrinterMonitor.exe	"Printer monitor for Nitro PDF Professional from Nitro PDF Inc. - ""complete affordable and easy-to-use set of tools to work with PDF documents"""
X	NJG40	NJG40.EXE	"Added by the BANCOS.D TROJAN!"
N	NkbMonitor.exe	NkbMonitor.exe	"Part of Nikon PictureProject - image management for Nikon digital cameras"
N	NkvMon.exe	NkvMon.exe	Nikon View 5 - for transferring pictures from Nikon digital cameras
N	NkVwMon.exe	NkVwMon.exe	Nikon View - for transferring pictures from Nikon digital cameras
U	NliaClient	Netpia.exe	"Netpia NLIA System - ""In the existing Internet address system the Domain Name System (DNS) layer runs on the IP address layer. In the NLIA system however the upper layer is implemented on DNS"""
X	NLS Keyboard	keyboard.exe	"Added by a variant of the SPYBOT WORM!"
X	NLS MonBoard	NSBARD.EXE	"Added by the SPYBOT.T TROJAN!"
X	NLS Monitor	nlsmon.exe	"Added by the RBOT-AXJ WORM!"
U	nmapp	nmapp.exe	"Pure Networks ""Network Magic eliminates common frustrations and saves time by simplifying and automating set up management and repair of home networks and makes printer and file sharing effortless"""
U	NMBgMonitor	NMBgMonitor.exe	"Associated with Nero Scout added by version 7 of the Nero digital media suite (CD & DVD burning authoring etc). Thanks to Help2Go.com if you feel this is draining more resources that necessary you can disable it by clicking here"
U	nmctxth	nmctxth.exe	"Related to Pure Networks comprehensive home and small business networking software that simplifies network configuration"
U	NMFirstStart	NMFirstStart.exe	"Associated with Nero Scout added by version 7 of the Nero digital media suite (CD & DVD burning authoring etc). Thanks to Help2Go.com if you feel this is draining more resources that necessary you can disable it by clicking here"
X	nmgr	nnmgr.exe	"FFToolBar adware toolbar"
Y	NMSSupport	IntelHCTAgent.exe	"Network monitor for Intel® Hub Connect Technology"
?	NMSSvc	NMSSVC.EXE	NIC Management Service - diagnostics program for Intel Pro family network cards
Y	NMSVC	nmSvc.exe	"Covenant Eyes - surveillance software that creates records of everything people do on a computer ie spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it"
?	nMTaskBarService	nMtsk.exe	"Taskbar control for ISDN NetMod modem. What does it do and is it required?"
U	NNLL	nnll.exe	"Net Nanny internet filter"
X	nnqcouu	nnqcouu.exe	"The Abi Network adware"
U	NNSvc	nnsvc.exe	"Net Nanny internet filter"
X	No Credit Card	plugin-[random].exe	Adult content pop-up dialler
U	No-IP DUC	DUC20.exe	"Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available"
U	NoAds	NoAds.exe	Blocks advertisement banners in Internet Explorer
X	NoAdware	NoAdware.exe	"NoAdware - spyware remover. This version is not recommended - see here"
U	NoAdware3	NoAdware3.exe	"NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here"
U	NoAdware4	NoAdware4.exe	"NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here"
X	Nocana	[path to worm]	"Added by the ANACON-B WORM!"
X	Nod23 Service	nod23.exe	"Added by the RBOT-GMK WORM!"
X	Nod29 Service	nodwr.exe	"Added by a variant of the RBOT WORM!"
X	NOD32 FiX	regedt32.exe	"NodFix is a is a potentially unwanted application. This application is given an (X) status because we does not and will not support Cracks or Warez. Do not delete the regedt32.exe as it is the legitimate Windows application. NodFix interferes with the default settings of the NOD32 AV application allowing to bypass its free using period as well as changes the default update server to that eval signatures thus allowing to update NOD32 without password. Note - to avoid interfering with the NOD32 application original settings no full cleanup can be provided"
X	Nod32 Free antivirus	nod32krn.exe	"Added by the RBOT-AAO WORM! Note - not the popular free NOD32 antivirus software which shares the same filename"
X	Nod32 Runtime	sysregi.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Nod32 Service	nod64.exe	"Added by the RBOT.ESJ WORM!"
X	Nod32 Service	alserv32.exe	"Added by the RBOT.DHN WORM!"
X	Nod32 Service	AutoUpdateWin32.exe	"Added by the SDBOT-DJG WORM!"
X	Nod32 Service	nod6.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	Nod32CC	nod32cc.exe	"Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button"
Y	NOD32kernel	Nod32krn.exe	"NOD32 antivirus"
Y	nod32kui	nod32kui.exe	"NOD32 antivirus"
Y	NOD32POP3	Pop3scan.exe	"POP3 E-mail part of Eset's NOD32 virus-scanner"
X	Nod3d2 Free antivirus	N0D32KRN.EXE	"Added by the RBOT-ABQ WORM!"
?	NodeMnger	Nodemngr.exe	"Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?"
X	NoDNS	NoDNS.exe	"Detected by Kaspersky as the AGENT.KHA TROJAN! See here"
X	nodriver	AUEKXRZ.EXE	"Added by a variant of the SPYBOT WORM!"
X	NOFIIN.EXE	NOFIIN.EXE	"Added by the HAXDOOR-DP TROJAN!"
X	Noha	aasd.exe	"PurityScan/Clickspring adware"
X	Nokia Check	nokiacheck.exe	"Added by the RBOT.CDC WORM!"
N	Nokia Connection Monitor	NclConf.exe	Monitors the infrared port the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK) and the tray icon shows if a phone has been connected. If you have a conflict with another program such as TV tuner card remote control monitor you can disable it and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
U	Nokia Tray Application	NclTray.exe	"Nokia PC Suite 5 - ""A collection of powerful tools that you can use to manage your phone features and data."" Synchronize the phone with for example Outlook. You can also use it to browse your phone edit the phone list and so on"
U	NOMAD Detector	ctnmrun.exe	Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
N	NomdCheck	nomdchek.exe	Part of Intel's Native Audio
U	nomtray	nomtray.exe	"System Tray access to NetMotion Wireless options - including connectivity status (see here)"
N	Nonoh	Nonoh.exe	"Nonoh - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
X	NoooH	sys.exe	"Added by the ALNUH WORM!"
X	Nord	nordsys.exe	"Added by the DREF-S WORM!"
X	Norman Worl System Ability	nwcss32.exe	"Detected by Trend Micro as the DELF.IO TROJAN! See here"
U	Norman ZANDA	ZLH.EXE	"System Tray icon for Norman Antivirus"
X	NortE Antivirus	norte.exe	"Added by the RBOT.BQQ WORM!"
X	NortE Antivirus	norten.exe	"Added by the RBOT-AFF WORM!"
X	norten Software Intrenet	norten.pif	"Added by the RBOT-AWA WORM!"
X	Norton Antiviral Scanner	navscnr.exe	"Added by the DELBOT-K WORM!"
X	Norton Antivirus	nortonav.exe	"Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV!"
X	Norton Antivirus 2004	SYMANTECAV2.EXE	"Added by the SPYBOT-DY WORM! Note - this is not the real Norton AV!"
X	Norton Antivirus 7.0a	[path to file]	"Added by the PERDA-B or RANCK-CT TROJANS!"
X	Norton Antivirus AV	FVProtect.exe	"Added by the NETSKY.P WORM! Note - this is not the popular AV software!"
X	Norton AntiVirus Sys	NAVsys32.exe	"Added by a variant of the WOOTBOT WORM!"
X	Norton Antivirus Updater	nortonav.exe	"Added by the DELBOT-T WORM! Note - this is not the real Norton AV!"
X	Norton Auto Protect	nava.exe	Added by an unidentified WORM or TROJAN!
X	Norton Auto Protect	crss32.exe	"Added by the SDBOT.ATF WORM!"
Y	Norton Auto-Protect	navapw32.exe	Norton Anti-Virus's background scanning process
X	Norton Auto-Protect	ccApp.exe	"Added by the AKHER.D WORM! Note - for the valid Norton AV entry the filename is ""navapexe"". This is also not the valid Norton AV file with the same filename"
X	Norton Auto-Protect	SERVICES.exe	"Added by the Ahker.B WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder. Also this is not part of Norton AV"
?	Norton AV Preload	Premend.exe	"Norton Antivirus related. What does it do and is it required"
X	Norton AV Protection Startup	Ati2xxx.exe	"Added by a variant of the RBOT WORM!"
N	Norton Crashguard Monitor	cgmenu.exe	Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
N	Norton Disk Doctor	Ndd32.exe	Norton Disk Doctor from Norton Utilities. Automatically runs at start-up checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
X	Norton Drive Protection	msdt32.exe	"Added by the FORBOT-GB WORM! Note - this not a valid Norton program!"
Y	Norton eMail Protect	POPROXY.EXE	Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy which serves as a proxy server on the local machine before scanning it
X	Norton Firewall	[path to trojan]	"Added by the BANKER-ET TROJAN!"
N	Norton Ghost 10.0	GhostTray.exe	"Norton Ghost tray icon - the application can be launched manually"
N	Norton Ghost 9.0	GhostTray.exe	"Norton Ghost tray icon - the application can be launched manually"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list