HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	PrecisionTime	PrecisionTime.exe	"PrecisionTime - clock synchronizing software containg spyware by Claria/GAIN"
X	precpop2	starter.exe	"PrecisionPop adware"
X	Prein	APP****.tmp [* = random char or digit]	Unidentified adware
Y	Preload	Preload.exe	Millenium Multi-Function Keyboard driver
?	PreloadApp	hphprld.exe	"HP PhotoSmart printers related. What does it do and is it required?"
X	Premeter	nrpr.exe	"NetRatings Premeter spyware"
X	Premeter	prmt.exe	"NetRatings Premeter spyware"
X	Preview AdService	PrevAdServ.exe	Windupdates adware variant
Y	PrevxHome	SAGUI.exe	"PrevX Home intrusion prevention software"
Y	PrevxOne	PXConsole.exe	"Prevx intrusion prevention software"
Y	PrevxPro	SAGUI.exe	"PrevX Home intrusion prevention software"
X	prgtect	prgtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	Pribi.exe	Pribi.exe	"FastFind adware variant"
N	Price Patrol	neo.exe	"Price Patrol by Half.com - internet shopping companion for finding the best on-line prices"
?	PrimaLauncher	Launcher.exe	"Associated with PrimaScan scanners. Is it required?"
U	Primax 3D Mouse	3dmoused.exe	Enables the scroll button on the Primax 3-D Scroll mouse
?	Primsta	Primsta.exe	"Linksys Wireless CompactFlash Card driver related. Is it required?"
X	Print Driver Helper Service	crsrr.exe	"Added by the AGENT-BC TROJAN!"
N	Print Master Event Reminder	PMremind.exe	"Print Master Gold - calander feature that pops up reminders
N	Print Screen Deluxe	psdeluxe.exe	"Utility allows "Print Scrn" or "Print Screen" key to capture
X	Print Services	spolserv32.exe	"Added by the RBOT.ZP WORM!"
X	print sharing	start.bat	"Added by the ZCREW TROJAN!"
X	print sharing	[path] hidden32.exe [path] explorer.exe	"Added by the ZCREW.B TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually!"
X	Print Spooler	Spoolsv.exe	"Added by the CIADOOR.B TROJAN! Note - ""Spoolsv.exe"" is located in the Windows or Winnt directory
X	Print Spooler	spoolsvc32.exe	"Added by the SDBOT.BB TROJAN!"
X	Print Spooler	spools.exe	"Added by the RBOT-LD WORM!"
X	Print Spooler	spool.exe	"Added by the IS TROJAN!"
X	Print Spooler	spoolsv32.exe	"Added by the RBOT.SW WORM!"
N	Printer	Spyassault.exe	"Spyware remover - not recommended
X	Printer	[path to file]	"Added by the LOWTAPER TROJAN!"
X	Printer	dipset.exe	"Added by a variant of the FBSR TROJAN!"
U	printer	SpyAssaultScanner.exe	"SpyAssault keystroke logger/monitoring program - remove unless you installed it yourself!"
N	printer	SpyAssaultScanner.exe	"Spyware remover - not recommended
X	Printer	vmmon32.exe	"Added by the RBOT-CSB WORM!"
X	Printer Monitor	webprinter.exe	"Added by the IRCBOT-Z TROJAN!"
X	Printer Spool	updater.exe	"Added by a variant of the RBOT WORM!"
X	Printer spool Service	spool.exe	"Added by the RBOT-ACP WORM!"
X	printer spooler	commonaccess.exe	"Added by the DELF-LB TROJAN!"
X	Printer Spooler Subsystem	spoolss.exe	"Added by a variant of the RBOT WORM! - Note - this is NOT the legitimate Windows spoolss.exe process
?	Printer Update	CFGREG.EXE	"Maybe a registration reminder or automatically updates drivers or application software for a printer?"
X	PrinterSpool	[path] RESTORE.EXE [path] SPOOL.EXE	"Added by the ALADINZ.K TROJAN!"
X	Printing Driver	msprint.exe	"Added by the RBOT.JH WORM!"
N	Printkey2000	printkey2000.exe	Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
X	PrintMngr	system.exe	Added by an unidentified TROJAN!
N	printnow	printnow.exe	"PrinTray	Printray.exe	Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
N	PrintScreen	UNWISE.EXE	"Gadwin PrintScreen - utility to capture
N	Printscreen 95	PRT95MIN.EXE	"Printscreen 95 - utility to capture
X	PrintSpoolSv	System.exe	"Added by the BDOOR-S TROJAN!"
U	PRISMSTA.EXE	PRISMSTA.EXE	Creates a system tray icon for accessing information about Intersil Prism Wireless Settings. Intersil silicon is used by Trendware/Trendnet for example
U	PRISMSVR	PRISMSVR.EXE	Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
N	Privacy Eraser Pro	PrivacyEraser.exe	"Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities"
U	PrivacyKeyboard	PrivacyKeyboard.exe	"PrivacyKeyboard is a product ""that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices
X	PrivacyScanner	pscan.exe	"Privacy Champion
X	PrivateNet	[various filenames]	Premium rate adult content dialler
U	Privoxy	privoxy.exe	"Privoxy - web proxy with advanced filtering capabilities for protecting privacy
X	PrizeSurfer	prizesurfer.exe	"""PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!"" Stealth installed malware"
X	prjtect	prjtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prktect	prktect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prltect	prltect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prmt	prmt.exe	"NetRatings Premeter spyware"
X	prmtect	prmtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
U	PrnSys Executable	PrnSys.exe	"Print screen utility bundled with some HP printer software - not required
X	pro	[path to file]	"Added by the SPYWAD-F TROJAN!"
X	pro	SpySheriff.exe	"Added by the SPYWAD-I TROJAN!"
U	Pro PCL Status Monitor	PENGSS.EXE	Xerox printer/fax/copier status monitor (PCL = printer control language)
?	ProArt	ProArt.exe	"??"
X	Proc992	[path to file]	"Added by the IXBOT-C WORM!"
X	Proc993	wqxfne.exe	"Added by the IXBOT-D WORM!"
X	process.exe	process.exe	"Added by the BANCOS.P TROJAN!"
U	ProcessGovernor	processgovernor.exe	"Process Supervisor ""is a technology designed to automatically configure and manage processes on one or more computers for the goal of maintaining system stability and responsiveness
U	ProcessSupervisorGUI	ProcessSupervisor.exe	"Process Supervisor ""is a technology designed to automatically configure and manage processes on one or more computers for the goal of maintaining system stability and responsiveness
U	ProcessTamer	ProcessTamerTray.exe	"Mouser's Software Process Tamer ""is a tiny (140k) and super efficient utility for Microsoft Windows XP/2K/NT that runs in your system tray and constantly monitors the cpu usage of other processes"""
X	procmon	procmon.exe	"Added by the BIONET.40A TROJAN!"
?	Prodigy DSL	EnterNetDUN.Exe	"Prodigy EnterNet DUN PPPoE Client - is it required?"
N	ProdikeysAutorun	Prodload.exe	"Creative Prodikeys software. ""an interactive music entertainment device which not only functions as a full-featured
N	ProDsl	ProDsl.exe	Intel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
X	Profile	Profile.vbs	"Added by the WHITEHO VIRUS or TRAPPY WORM!"
N	Profiler	Profiler.exe	"Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
X	profiler	liteout.exe	"Added by the ZAPCHAS-G WORM!"
X	profiler	prof.exe	"Added by the ZAPCHAS-G WORM!"
X	Prog	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
X	Prog	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
X	Program File	Progmon.exe	"Added by the PEEPER TROJAN!"
X	Program in Windows	iexplore.exe	"Added by the LOVGATE-W WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process
U	Program Neighborhood Agent	pnagent.exe	"Citrix Program Neighborhood Agent"
?	ProgramWindow	more comp.exe	"??"
N	projselector	projselector.exe	Roxio Project Selector - can be started manually
N	Promon.exe	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X	PromulGate	PgMonitr.exe	"Delfin Promulgate adware variant"
N	PRONoMgr.exe	PRONoMgr.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U	PRONoMgrWired	PRONoMgr.exe	Intel's Pro 100 Ethernet card manager
U	Propel Accelerator	PropelAC.exe	"Propel Internet Accelerator"
U	ProPort Startup	ProPort.exe	"Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill
X	ProSiteFinder	prositefinder.exe	"180Solutions adware"
X	Proteção de tela	ssmaze.scr	"Added by the BANCBAN-FB TROJAN!"
U	Protect	SHVRTF.EXE	"PC Angel takes a 5-second snapshot of the current system registry each time the PC boots up. In the event of a crash
X	protect	protect.scr	"Added by the DLOADER-TQ TROJAN!"
X	Protected Storage	RUNDLL32.EXE MSSIGN30.DLL ondll_reg	"Added by the LOVGATE-W WORM!"
X	Protection	[path] runtask.exe [path] protection.exe	Added by a variant of the AGENT.3.AU TROJAN!
X	Protection	Protection.exe	"Added by the FEBELNECK-A WORM!"
X	Protection	Firewall.exe	"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X	Protection	IExplore .exe	"Added by the ELIPTER.D WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process as there is a space before the "".exe"""
X	Protection	Norton Internet Security.exe	"Added by the ELITPER.E WORM!"
X	ProtocolDiskChk	ssrms.exe	"Added by the ML TROJAN!"
X	ProtocolEventTsk	csrwjd.exe	"Added by STINX-N TROJAN!"
X	Provan Security	psecure.exe	"Added by the RBOT.BRV WORM!"
Y	proxim_orinoco_11abg	orinoco.exe	"Proxim ORiNOCO 11a/b/g PCI Card wireless configuration utility"
N	PROXOMITRON	PROXOMITRON.EXE	HTML proxy
N	PROXOMITRON	PROXOM~1.EXE	HTML proxy
U	ProxyWay	proxyway.exe	"ProxyWay anonymous proxy surfing software"
U	PRPCMonitor	PRPCUI.exe	"Intel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power
X	prqtect	prqtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prrtect	prrtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prstect	prstect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prtcct	prtcct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prttect	prttect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutcct	prutcct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutdct	prutdct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutgct	prutgct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	pruthct	pruthct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutict	prutict.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutlct	prutlct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutpct	prutpct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prutsct	prutsct.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prvtect	prvtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	prxtect	prxtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	ps1	ps1.exe	"PacerD Media/Pacimedia.com adware"
U	PS2	ps2.exe	"Multimedia Keyboard companion on HP computers. If this is prevented from starting
X	psaload32	psaload32.exe	"Added by the RBOT-ADL WORM!"
X	PSD Tools Channel	ChannelUp.exe	"BuddyLinks adware"
Y	PSDrvCheck	PSDrvCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
X	PService	svcnow32.exe	"Added by the SPYBOT-DJ TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list