HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	Soundmx	Soundmx.exe	"CoolWebSearch Tapicfg parasite variant"
X	soundtask	soundtask.exe	"Added by the AGOBOT-MD WORM!"
X	soundtasks	soundtasks.exe	"Added by a variant of the CRYPTER.C TROJAN!"
X	soundtctrls	soundtctrls.exe	"Added by the AGOBOT-ZV WORM!"
X	SoundView	msdview32.exe	Trojan downloader
X	sounofts	sounofts.exe	"Added by the AGOBOT-ND WORM!"
X	sountskmanager	sountaskmgr	Added by an unidentified WORM or TROJAN!
N	SourcePath	gwreg.exe	Used to update Gateway registry settings for System Restoration Kit and Web update programs
X	sp	sp.reg	IE search hijacker - changes the default search to http://www.gocybersearch.com/
X	sp	regedit-s .... sp.dll	"Malicious javascript annoyance that changes the default search engine in IE to one of many including ""topsearcher"". See here for more and a fix"
X	sp	se.dllDllInstall	"STARTPAGE.M hijacker"
X	sp	rundll32 (Path to Trojan DLL) DllInstall	"Added by the ABLANK-W and ABLANK-Z TROJANS!"
U	SP TimeSync	SP TimeSync.exe	"SP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server)"
X	SP00LSV	Sp00lsv.exe	"Added by the GRAYBIRD.E TROJAN!"
U	SP2 Connection Patcher	SP2ConnPatcher.exe	Changes limit of concurrent TCP connections of Windows Service Pack 2
X	SP2 data	[path] repcale.exe [path] apc.exe	"Added by a variant of the RANDON.AN WORM!"
X	SP2 Firewall/Internet Updater	crssrs.exe	"Added by the RBOT.BJO WORM!"
X	sp2chk.exe	sp2chk.exe	"Added by the ALUROOT.A TROJAN!"
X	sp2ctr	sp2ctr.exe	"Added by the DLUCA-M TROJAN!"
X	sp2fwxp	sp2fwxp.exe	Added by the SMALL.ABW TROJAN!
X	sp2svc	sp2svc.exe	"Added by a variant of the RBOT WORM!"
X	sp2update	sp2update.exe	"SP2Update adware! Tracks URLs visited and search terms entered into Internet Explorer"
X	Spam Blocker for Outlook Express	SBInst.exe	"Hotbar adware"
X	SPAM FIREWALL	mfirewall.exe	"Added by the SDBOT.AOU WORM!"
U	Spam Sleuth	SpamSleuth.exe	Spam Sleuth E-mail spam detection program
X	SpamBlocker	SbOEAddOn.exe	"Hotbar adware"
U	SPAMfighter Agent	SFAgent.exe	"SPAMfighter anti email spam filter"
U	spamihilator	spamihilator.exe	"Spamihilator - spam filter"
U	SpamPal	spampal.exe	"SpamPal - anti-spam tool"
U	SpamSubtract	SpamSubtract.exe	"Intermute SpamSubtract - junk email detection and removal program"
U	spamsubtract	SpamSub.exe	InterMute™ SpamSubtract - junk email detection and removal program. InterMute™ is now part of Trend Micro and their products are no longer supported
U	Spare Backup	SpareBackup.exe	"Spare Backup - ""Once Spare Backup is installed backups are automatic. With Spare Backup it's easy you don't even have to select files for backup Spare Backup does it for you"""
U	Spark	Spark.exe	"Spark instant messaging client"
N	SparVoip	SparVoip.exe	"SparVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
X	spa_start	Rundll32.exe spads.dll	"IconAds adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""spads.dll"" file is located in the Winnt or Windows folder"
X	spa_start	sprt_ads.dll	"Superiorads adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""sprt_ads.dll"" file is located in %System%"
?	SPC610NC_Monitor	Monitor.exe	"Related to the Philips SPC610NC webcam. What does it do and is it required?"
N	spc_w	hcm.exe	"NetZero Search Enhancement related"
N	spc_w	blspc.exe	"NetZero Search Enhancement related"
N	spc_w	nzspc.exe	"NetZero Search Enhancement related"
N	Spdstart	Spdstart.exe	Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications such as Word and Excel."
U	Speaking Clock Deluxe	SpClDlx.exe	"Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date and be repeated daily weekly monthly and yearly"
X	Special Firewall Service	avguard.exe	"Added by the NETSKY.G WORM! Note - do not confuse with AntiVir® antivirus which uses the same filename. This one is located in %Windir%"
X	SpecialOffers	SpecialOffers*.exe [* = digit]	"SpecialOffers adware"
X	SpecialOffers	SpecialOffers.exe	"SpecialOffers adware"
X	specific	specixic.exe	"Added by a variant of the SDBOT WORM!"
N	Speed racer	CTSRReg.exe	Software for a Creative sound card
U	Speed Tec	speedtec.exe	"Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled"
N	SpeedBitVideoAccelerator	VideoAccelerator.exe	"""SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups"""
X	SpeedBoss	[worm filename]	"Added by the OPASERV.AD WORM!"
U	SpeedItUp	SPEEDITUP.EXE	"Speed It Up - ""all in one Speed Booster designed to significantly increase the speed of your computer and boost your PC available memory"". Installs PC-Checkup and Search Defender (which is detected by DrWeb as the STARTPAGE.ORIGIN TROJAN) without permission"
U	SpeedItUpEX	SpeedItUpEx.exe	"""Speed-It-Up Extreme is designed to speed of your computer up to 3 times faster and boost your PC available memory"""
U	Speedkey	SPEEDKEY.EXE	Additional keyboard shortcuts on MS programmable keyboard
U	SpeedMeter	SpeedMeter.exe	Application measuring upload and download speed
U	SpeedOptimizer	spo.exe	"SpeedOptimizer is designed to optimize and speed-up your Internet data transmission including browsing streaming downloading uploading and e-mail communication"
U	Speedport W 100 Stick WLAN Manager	Wifiusb.exe	Wireless management utility for the Speedport W 100 Stick WLAN USB stick
X	SpeedRunner	SpeedRunner.exe	Identified as a variant of the TrojanDownloader.Matcash malware
U	SpeedswitchXP	SpeedswitchXP.exe	"SpeedswitchXP is a CPU frequency control for notebooks running Windows XP"
U	Speedtouch USB Diagnostics	Dragdiag.exe	For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
U	SpeedUpMyPC	speedupmypc.exe	"Older version of SpeedUpMyPC from Uniblue - which ""lets you monitor and control all your PC resources with easy one click instructions. System settings internet usage disk clutter RAM and CPU are all automatically scanned cleaned and optimized for peak performance"""
X	Spees1	speedy.scr	"Added by the OPASERV.Y WORM!"
X	Spees2	Speedy.bat	"Added by the OPASERV.AD WORM!"
X	Spees3	SPEEDY.PIF	"Added by the OPASERV.AD WORM!"
N	Spellex Anywhere	sa.exe	"Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used"
U	Spiceworks	spicetray_silent.exe	"System Tray access to Spiceworks - which ""combines everything you need to manage IT in one easy-to-use application"""
Y	SpIDerMail	spiderml.exe	"DrWeb antivirus Spider Mail e-mail scanner"
N	Spinner Plus	spinner.exe	"Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed which helps eliminate sound distortion or choppiness". Available via Start -> Programs
X	SPINX	Wscript.exe OXNEY.B.VBS	"Added by the YENO.B and YENO.C WORMS! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""OXNEY.B.VBS"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
?	SPIRun	Rundll32 SPIRun.dll RunDLLEntry	"Related to Creative audio products. What does it do and is it required?"
X	SPnt	SPnt.exe	Premium rate adult content dialler
U	SpokeSysTray	SpokeSysTray.exe	"Spoke Software client application. Spoke ""uses data in your e-mail and other enterprise information systems to discover the existing relationships of people in your enterprise. It then builds a private secure relationship network for each user without any additional manual data entry"""
X	spoo1sv	spoo1sv.exe	"Added by the SOULJET TROJAN!"
X	Spool	[path to trojan]	"Added by the RANKY.R TROJAN!"
X	Spool	wys.exe	"WhileUSurf adware"
X	SPOOL Configuration	spoolsvc.exe	"Added by the SDBOT-KD WORM!"
X	Spool Loader	spool.exe	"Added by a variant of the RBOT WORM!"
X	Spool LoadKIt	spoolv.exe	"Added by a variant of the RBOT WORM!"
X	Spool lptt01	spool.exe	"RapidBlaster variant (in a ""spool"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Spool Manager	spoolsrv.exe	"Added by the BANKER-FR TROJAN!"
X	Spool ml097e	spool.exe	"RapidBlaster variant (in a ""spool"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Spool32	pool32.exe	"Added by the ASSASIN-F TROJAN!"
X	spoolax	[path to trojan]	"Added by the PERDA-D TROJAN!"
X	Spooler Host	smhost.exe	"Detected by PCTools as the IRCBOT.BSQ TROJAN! See here"
X	Spooler Service	Spoolsrv.exe	"Added by the JOINER.C1 TROJAN!"
X	Spooler Subsystem	spoolsub.exe	"Added by the SDBOT-ABG TROJAN!"
X	Spooler SubSystem App	spoolsvc.exe	"Added by the POEBOT-J WORM!"
X	Spooler SubSystem App	spooIsv.exe	"Added by the LINKBOT.M WORM!"
X	Spooler SubSystem Application	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler SubSystem Application	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Spooler Subsytem App	spoolsvc.exe	"Added by the SDBOT-MM WORM!"
X	SpoolerSubSystemProcess	SpooI32.exe	"Added by the EHKS.21 keylogger! Note - the ""I"" between ""o"" and ""3"" is a capital ""i"" not a lower case ""L"""
X	spoolms	spoolms.exe	"Added by the LEGMIR-ARO TROJAN!"
X	Spools Service Controller	spools.exe	"Added by the KASSBOT-C WORM!"
X	spoolserv	spoolserv.exe	"Added by the SDBOT-PN WORM!"
X	SpoolService	spolsv.exe	"Added by the AGOBOT-CS WORM!"
X	spoolsrv.exe	spoolsrv.exe	Added by an unidentified WORM or TROJAN! Located in %System%
X	Spoolsv	Spoolsv.exe	"Added by the CIADOOR.121 VIRUS! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%"
X	spoolsv	scvhosts.exe	"Added by the SMALL-AW TROJAN!"
X	spoolsv	svchost.exe	"Added by the DLOADER-FI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\HELP"
X	spoolsv	spoclsv.exe	"Added by the FUJACKS-M WORM!"
X	spoolsv	spoolsv.exe	"Added by the ZAPCHAS-EE TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%\Temp\spoolsv"
X	spoolsv	spoolvs.exe	Identified by Kaspersky antivirus as a variant of the QHOST.AES TROJAN!
X	spoolsv	spoolsv.exe	"Added by the ANTINNY-BH WORM! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %ProgramFiles%\Messenger"
X	spoolsv	spoolsv.exe	"Added by the OURXIN.C TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in a ""spoolsv"" subfolder"
X	Spoolsv	spoolsv.exe	"Added by the ANTINNY.F WORM! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Program Files%\Lotus"
X	spoolsv manager	SpoolMgr.exe	"Added by the ASSIRAL WORM!"
X	spoolsv service	spoolsv32.exe	"Added by the RBOT-AHP WORM!"
X	spoolsv.exe	[random filename]	"Added by the RBOT-JB WORM!"
X	SPOOLSV32	SPOOLSV32.EXE	"Added by the CWS-I or HAZIF-B TROJANS!"
X	SPOOLSV32.exe	SPOOLSV32.exe	"Added by the STARTPAGE.O TROJAN!"
X	spoolsvc	spoolsvc.exe	"Added by the DROPPER-AT TROJAN!"
X	spoolsvr	SPOOLSVR.EXE	"Added by the RAYROB.A TROJAN!"
X	spoolsvr32	csmss.exe	"Added by the AGENT-AU TROJAN!"
X	spoolsvr32	csmss32.exe	"Added by a variant of the AGENT-AU TROJAN!"
X	spoolsvs	wintre.exe	"Added by the SDBOT.EGQ WORM!"
X	spoolsvs	wincfy.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	spoolsvs.exe	spoolsvs.exe	"Added by the DLOADER-RK TROJAN!"
X	SPOOLSVU	SPOOLSVU.EXE	"Added by the STARTPAGE.K hijacker"
X	spoolsvv	spoolsvv.exe	"Searchcentrix hijacker"
X	Spoolvs	spoolvs.exe	"Added by the SDBOT.AUS WORM!"
X	Spore	MsNews.vbs	"Added by the SORPE.A WORM!"
X	Spore.b	Scmhlpr.vbs	"Added by the SORPE.B WORM!"
?	SPP	run.exe	"??"
X	spp	regedit -s spp.reg	IE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/
?	sppbridge	sppbridge.exe	"Associated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example. Is it required or can it be started manually? "
?	SprintPort	SprintPortA.exe	"Novatel wireless modem related. What does it do and is it required?"
U	SpriteService	SpriteService.exe	"Sprite Backup is a backup application for Windows Mobile Pocket PC or Smartphone"
X	Sproc32	sproc32.exe	"Added by the SPROCIT TROJAN!"
X	sprof	sprof.exe	"Detected by Kaspersky as the FRAUDLOAD.VATF TROJAN! See here"
U	sprtcmd	sprtcmd.exe	"Self-help support tool for a number of high-speed internet providers and computer suppliers such as Comcast Qwest and Dell. Identifies and automatically fixes typical problems that may occur with your high-speed internet service. Provided by SupportSoft Inc"
X	Spruce - Auto Update	Spruce.exe	"Rabio ""Search Enhancer"" adware variant"
U	SPSTEALT	SmartProtectorPro.exe	"Smart Protector Pro - internet privacy tool that erases tracks MRU lists etc"
?	spstore	storesp.exe	"Softprobe - program designed to provide managers with an analysis of an individuals computer use who are under their supervision. This program is NOT related to Winpup"
U	Spy Blocker	spyblocker.exe	"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all"
U	Spy Protector	SpyProtector.exe	"Included in the full version of Security Task Manager Spy Protector prevents keyboard and mouse monitoring warns when the registry is changed and eliminates internet activity and work traces"
X	Spy-Control	Spy-Control.exe	"Spy-Control spyware remover - not recommended see here"
U	Spy-Keylogger	skl.exe	"SpyKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	SpyAway	spyaway.exe	"SpyAway spyware remover - not recommended see here"
X	SpyAxe	spyaxe.exe	"SpyAxe spyware remover - not recommended see here. For removal instructions see here"
X	SpyBan	SpyBan.exe	"SpyBan spyware remover - not recommended see here"
X	SpyBlast	SpyBlast.exe	Spyware killer that is in effect autoinstalled foistware targeted by SpyBot among others
U	SpyBlocker	spyblocker.exe	"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all"
X	SpyBlocs	SpyBlocs.exe	"SpyBlocs spyware remover - not recommended see here"
X	SpyBlocs3.0	SpyBlocs3.0.exe	"SpyBlocs spyware remover - not recommended see herea>"
Y	SpybotDeleting*****	[cmd or command] /c del [path] [filename]	"Generated by Spybot Search & Destroy if it encounters files that cannot be deleted during runtime because they are locked by other processes. For example C:\WINDOWS\SchedLgU.Txt is the scheduler log file and is locked by Windows as long as it runs. For operating system compatibility reasons the autorun entries are generated with cmd and command. These entries should be left alone and will be removed on the next reboot/login. **** represents a combination of a single letter and up to 4 numbers"
Y	SpybotSD TeaTimer	TeaTimer.exe	"TeaTimer is a permanent process and registry monitor of the Spybot S&D system protector which perpetually monitors the processes called/initiated. Detects processes wanting to start and gives you options on how to deal with this process in the future"
U	SpyBotSnD	Spybotsd.exe	"Spybot - Search & Destroy - free multi-spyware removal tool from Safer Networking Ltd."
X	Spybott lptt01	spybott.exe	"RapidBlaster variant (in a ""Spybott"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Spybott ml097e	spybott.exe	"RapidBlaster variant (in a ""Spybott"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	SpyBurner	SpyBurner.exe	"SpyBurner spyware remover - not recommended see here"
X	SpyClean	1ClickSpyClean.exe	"1 Click Spy Clean uses a database that was stolen from SpybotS&D. Not recommended see here"
X	SpyClean	SpyClean.exe	"SpyClean spyware remover - not recommended see here"
U	SpyCop ScanCheck	MAIN.EXE	"SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan"
U	SpyEmergency	SpyEmergency.exe	"SpyEmergency security software from Netgate"
X	SpyEx	Winllogo.exe	"Added by the PRSKEY-A WORM!"
X	SpyFighterMonitor	SpyFighter.exe	"SpyFighter spyware remover - not recommended see here"
X	SpyFighterUpdate	AutoUpdate.exe	"SpyFighter spyware remover - not recommended see here"
X	SpyGuarder	spyguarder.exe	"SpyGuarder spyware remover - not recommended see here"
X	SpyHealer	SpyHealer.exe	"Spyware remover - not recommended see here"
X	SpyHeals	SpyHeals.exe	"Smitfraud variant"
X	SpyHunter	SpyHunter.exe	"Enigma SpyHunter - not recommended see note"
U	Spykiller	Spykiller.exe	"Spyware remover - older versions are not recommended see here"
X	SpyLax	SpyLax.exe	"SpyLax spyware remover - not recommended see here"
X	SpyLocked	SpyLocked.exe	"SpyLocked spyware remover - not recommended see here"
X	SpyLocked 4.3	SpyLocked 4.3.exe	"SpyLocked spyware remover - not recommended see here"
X	SpyMaxx	SpyMaxx.exe	"SpyMaxx spyware remover - not recommended see here"
X	SpyMedic	SpyMedic.exe	"SpyMedic spyware remover - not recommended see here"
X	SpyNuker	Spynuker.exe	"A ""spyware removal program"" by TrekBlue which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers 'TrekData' and 'Blue Haven Media' who distribute spyware through ActiveX drive-by-download on web pages"
X	SpyOnThis Monitor	SpyOnThisMonitor.exe	"SpyOnThis Monitor spyware remover - not recommended see here"
X	spyprodetector	spydetector.exe	Spyware Process Detector misleading security software - not recommended
X	SpyPry	SpyPry.exe	"SpyPry spyware remover - not recommended see here"
X	SpyQuake2.com	Spy-Quake2.exe	"SpyQuake2 spyware remover - not recommended see here"
X	SpyRid	Spy-Rid.exe	"SpyRid spyware remover - not recommended see here"
X	SpySheriff	SpySheriff.exe	"SpySheriff malware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list