HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	SpyShredder	SpyShredder.exe	"SpyShredder spyware remover - not recommended see here"
X	SpySpotter	SpySpotter.exe	"SpySpotter spyware remover - not recommended see here"
X	SpySpotter System Defender	Defender.exe	"SpySpotter spyware remover - not recommended see here"
U	SpyStopper	spystopper.exe	"SpyStopper - blocks intrusive spyware Web bugs worms scripts advertisements and cookies. Protects you from being profiled and tracked"
U	SpySubtract	SpySub.exe	"SpySubtract - multi spyware removal tool"
U	SpySweeper	SpySweeper.exe	"Spy Sweeper - detects and removes spyware"
U	SpySweeper	SpySweeperUI.exe	"Spy Sweeper - detects and removes spyware"
U	SpySweeperEnterprise	SpySweeperUI.exe	"User interface for Spy Sweeper Enterprise edition - ""a centrally managed scalable enterprise solution that provides best of breed protection against all types of malicious spyware adware and other harmful intruders"""
X	SpyTrooper	SpyTrooper.exe	"SpyTrooper rogue spyware remover - not recommended see here"
X	Spyware	Spyware.exe	"BPS spyware remover - not recommended see here"
U	Spyware Begone	SpywareBeGone.exe	"Spyware BeGone - spyware removal utility. Previously not recommended see here"
U	Spyware Begone	freescan.exe	"Spyware BeGone - spyware removal utility. Previously not recommended see here"
U	Spyware Doctor	spydoctor.exe	"Spyware Doctor spyware remover"
U	Spyware Doctor	swdoctor.exe	"Spyware Doctor spyware remover"
U	Spyware Guard Control Panel	spywar~1.exe	"""SpywareGuard provides a real-time protection solution against spyware"""
U	Spyware Nuker	swn2.exe	"Spyware removal program by TrekBlue. Previously not recommended but the latest version was delisted here"
U	Spyware Nuker Installer	SpywareNukerInstaller.exe	"Spyware removal program by TrekBlue. Previously not recommended but the latest version was delisted here"
X	Spyware remover	Remove_spyware.exe	Unidentified but not known to belong to any known spyware remover and strongly suspected to be adware related!
N	Spyware Scanner	AseScanner.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU the well known adware company see here and here"
U	SpyWare Shield	Shield.exe	"Acronis Privacy Expert Spyware Shield prevents spyware and other suspicious programs from being installed on PCs"
X	Spyware Slayer	SpywareSlayer.Exe	"Spyware Slayer spyware remover - not recommended see here"
X	Spyware Soft Stop	Spyware Soft Stop.exe	"SoftStop misleading security software - not recommended see here"
X	Spyware Stormer	SpywareStormer.Exe	"Spyware Stormer spyware remover - not recommended see here"
X	Spyware Striker Pro	SpywareStriker.exe	"Ascentive Spyware Striker Pro rogue spyware remover - not recommended see here"
X	Spyware Sweeper	SpywareSweeper.exe	"SpywareSweeper spyware remover - not recommended see here"
U	Spyware Vanisher	FreeScanner.exe	"Spyware Vanisher - spyware removal utility. Previously not recommended see here"
U	Spyware X-terminator	SpywareX.exe	"Spyware X-terminator - spyware remover"
X	Spyware-Cop	Spyware-Cop.exe	"Spyware-Cop spyware remover - not recommended see here"
X	SpywareBomb	SpywareBomb.exe	"SpywareBomb spyware remover - not recommended see here"
X	SpywareBot	SpywareBot.exe	"SpywareBot spyware remover - not recommended see here"
U	spywarefighterguard	spfprc.exe	Spyware Fighter - anti spyware program
U	SpywareGuard	sgmain.exe	"""SpywareGuard provides a real-time protection solution against spyware"""
X	SpywareGuard	winproc32.exe	"Startpage adware Trojan"
X	SpywareGuard	deinst_qfe001.exe	"Added by a variant of the Win32.Small TROJAN! - Do NOT confuse with the legitimate SpywareGuard application"
X	spywareguard	spywareguard.exe	"Spyware Guard rogue spyware remover - not recommended see here"
X	Spywareguard lptt01	Spywareguard.exe	"RapidBlaster variant (in a ""Spyguard"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Spywareguard ml097e	Spywareguard.exe	"RapidBlaster variant (in a ""Spyguard"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	SpywareGuardPlus	winmm64.exe	StartPage.ht homepage hijacker
X	spywareisolator	spywareisolator.exe	"SpywareIsolator spyware remover - not recommended see here"
X	SpywareKilla	SpywareKilla.exe	"SpywareKilla spyware remover - not recommended see here"
X	SpywareLocked	SpywareLocked.exe	"SpywareLocked spyware remover - not recommended see here"
X	SpywareLocked 3.5	SpywareLocked 3.5.exe	"SpywareLocked spyware remover - not recommended see here"
X	SpywareNo	SpywareNo.exe	"SpywareNo spyware remover - not recommended see here"
X	SpywareQuake	SpywareQuake.exe	"SpywareQuake spyware remover - not recommended see here"
X	SpywareRemover	SpywareRemover.exe	"SpywareRemover spyware remover - not recommended see here"
X	SpywareStop	SpywareStop.exe	"SpywareStop rogue spyware remover - not recommended see here"
X	SpywareStrike	SpywareStrike.exe	"SpywareStrike spyware remover - not recommended see here"
X	SpywareSweeper	SpywareSweeper.exe	"SpywareSweeper spyware remover - not recommended see here"
U	SpywareTerminator	SpywareTerminatorShield.exe	"Spyware Terminator - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
X	SPYWATCH	SpyWatch.exe	"BPS spyware remover - not recommended see here"
X	SpyWatchE	SpyWatchE.exe	"SpyWatchE spyware remover - not recommended see here"
X	SQConfigChecker	cc.exe	"Xupiter SQWire toolbar related. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
X	SQInstaller	SQInstaller.exe	"Xupiter SQWire toolbar related. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
X	SQL	server.exe	"Added by the PUNYA-B WORM!"
N	SQL Server	scm.exe	SQL Server Service Control Manager. Available via Start -> Programs
X	SQL Server Service	sql.exe	"Added by the RBOT-ADF"
X	sqservices	wins32.exe	"Added by the PROGENT-B TROJAN!"
X	SQUpdatesChecker	uc.exe	"Xupiter SQWire toolbar related. Use Spybot S&D Adware or similar to detect and remove and to prevent it re-installing in the future see here"
X	sqvynikp	sqvynikp.exe	Free_Scratch_Cards foistware
Y	SR Agent	AGENTSVC.EXE	"Related to Secure Resolutions - desktop virus protection"
Y	Sr Agent	SrLogon.exe	"Related to Secure Resolutions - desktop virus protection"
?	sr1exe	updtSup3.exe	"Found on a Dell computer in Documents and Settings\All Users\Application Data\DellAlert2"
X	sr64	[path to trojan]	"Added by the AGENT.X TROJAN!"
X	SrchfstUpdate	srchupdt.exe	SearchFast adware downloader
X	sre	rundll32.exe sre.dll Register	"CoolWebSearch parasite variant - also detected by Kaspersky as the AGENT.FC TROJAN!"
?	srePostpone	rundll32.exe [path] srescan.dll DoSpecialAction	"Related to ZoneAlarm. What does it do and is it required?"
?	SRFirstRun	rundll32 srclient.dll CreateFirstRunRp	"Created by execution of the Windows XP sr.inf file which installs the Windows XP System Restore feature needed for example when installing System Restore into Windows Server 2003. Does this indeed need to run at every bootup?"
U	Srmclean	srmclean.exe	"Srmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. According to Compaq - ""If you disable the entry from loading into startup then you will not be able to use the features of the sound card"""
X	SRNG	srng.exe	"ShopNavSearch.Srng search hijacker"
U	SRP Startup	srrpro.exe	"System Restore Remover Pro allows you to safely and easily remove System Restore and various other Windows Millennium ""features"". This is enabled if you tick the ""Remove unnecessary System Restore information on startup"" box. Available via Start -> Settings -> Control Panel"
Y	SRS Applet	SrsTray.Exe	S3 Sonic Vibes sound card drivers - if disabled you loose sound
U	SRS Audio Sandbox	SRSSSC.exe	"SRS Audio Sandbox ""provide amazing audio immersion and maximum thump for a personalized audio experience!"""
X	srshost.exe	srshost.exe	"Added by a variant of the RBOT-ASW WORM!"
U	SRUUninstall	msiexec.exe	Symantec Network Driver Update - part of LiveUpdate
X	Srv Host	srvhost.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Srv RPCrom	NClienti386.exe	"Added by the WATSOON.A TROJAN!"
X	Srv32	Srv32.exe	"Added by the OPASERV.J WORM!"
X	Srv32	Srv32.exe	"Added by the OPASERV.S WORM!"
X	Srv32 spool service	runsrv32.exe	"Topantispyware.com malware - detected by Kaspersky as the SPYRE.B TROJAN!"
X	Srv32 spool service	spoolsrv32.exe	"Added by the SPYRE-B TROJAN!"
X	Srv32 spool service	[path to trojan]	"Added by the DLOADER-LB TROJAN!"
X	Srv325	Srv325.exe	"Added by the AGOBOT-PR WORM!"
X	Srv32Old	[worm filename].PIF	"Added by the OPASERV.J WORM!"
U	Srv32Win	SpyAgent4.exe	"SpyAgent - monitoring software that creates records of everything people do on a computer ie spying or monitoring depending upon how you call it"
U	Srv32Win	Svchost.exe	"Realtime-Spy keystroke logger/monitoring program - remove unless you installed it yourself!"
U	Srv32Win	sysdiag.exe	"SpyAgent surveillance software. Uninstall this software unless you put it there yourself"
U	srv32win	win16dll.exe	"Screenspy captures screenshots silently. If you didn't install this yourself remove it"
X	Srvce Pack Updte	svcpack.exe	"Added by a variant of the RBOT WORM!"
X	srvexc.exe	srvexc.exe	"Added by the SERVSAX TROJAN!"
X	srvhost	srvhost.exe	"Added by the LIVUP.A BACKDOOR!"
U	srvprc	srvprc.exe	"ActMon surveillance software. Uninstall this software unless you put it there yourself"
N	srxTray	srxTray.exe	"Titan FTP Server - FTP server"
N	SsAAD.exe	SsAAD.exe	"Sony's SonicStage digital music manager for their range of MP3 players. It monitors your HDD for newly added music tracks and automatically offers to add them to your playlist when you connect your player"
X	ssate.exe	irun4.exe	"Added by the BEAGLE.J WORM!"
X	ssate.exe	winsys.exe	"Added by the BEAGLE.K WORM!"
N	SSBkgdUpdate	SSBkgdupdate.exe	ScanSoft OmniPage auto updater. Can be disabled using the main program's options. Note - if you have a Soundblaster Audigy2 ZS soundcard installed on your computer and the volume of your soundsystem is turned on extremely high disabling this will solve the problem
U	SSC Service Utility	ssc_serv.exe	"SSC Service Utility is a printer utility for refilled Epson cartridges"
U	SSCFBTN.EXE	SSCFBTN.EXE	Samsung smarthru softwareused with Lexmark Z82 or Samsung multifunction printers
Y	sscRun	SSCRun.exe	AOL's firewall
Y	SSC_UserPrompt	UsrPrmpt.exe	Part of Symantec's AntiVirus suite and comes usually with a product update if not on the system already. Required for essential applications to work properly
Y	Ssd	Std.exe	"Stealthdisk - file and folder hiding/locking utility"
?	ssdiag	ssdiag.exe	"Equinox (now Avocent) ""Configuration and DOS Diagnostic for DOS and Windows platforms"""
N	SSDPSRV	ssdpsrv.exe	Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. Used by Universal Plug and Play (for network device discovery). To remove this program open Add/Remove Programs select either Communications (Me) or Networking Services (XP) and remove the checkmark next to Universal Plug and Play
X	ssgrate.exe	system.exe	"Added by the MITGLIEDER.C TROJAN!"
X	ssgrate.exe	irun.exe	"Added by the MITGLIEDER.D TROJAN!"
X	ssgrate.exe	irun4.exe	"Added by the MITGLIEDER.F TROJAN!"
X	ssgrate.exe	sysdoor.exe	"Added by the MITGLIEDER.N TROJAN!"
X	ssgrate.exe	winerdir.exe	"Added by the MITGLIEDER.O TROJAN!"
X	ssgrate.exe	winsystems.exe	"Added by the BAGLEDL-J TROJAN!"
X	ssgrate.exe	wintems.exe	"Added by the MITGLIEDER.Q TROJAN!"
U	SSh32	SSh32.exe	"2Spy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	SSK Service	winssk32.exe	"Added by the SOBIG.E WORM!"
X	SSL	svchost.exe	"Added by an unidentified VIRUS WORM or TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	SSL Manager	amsnmsgs.exe	"Added by a variant of the SDBOT WORM!"
X	SSLDyn	SSLDyn.exE	"FRETHOG.MM spyware"
U	ssmmgr	ssmmgr.exe	Samsung printer monitor - for checking ink levels etc.
X	ssms.exe	SSMS.EXE	"Added by the GISMOR WORM!"
U	SSPY	SSYTEM.EXE	"SurfingSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
U	SSS7	SSS7.exe	"Steganos Security Suite 7 - ""A comprehensive collection of methods to prevent your data falling into the wrong hands and highly recommended if you have anything you feel you need to hide"""
X	sssasasb32	sssasasb32.exe	"Added by the TACTSLAY.F TROJAN!"
X	sssasasb32	msnmsgq32.exe	"Added by the TACTSLAY.F TROJAN!"
X	sstata	dwdas.exe	"Added by the DASDA TROJAN!"
X	sstata	[path to trojan]	"Added by the RANCK-DF TROJAN!"
X	SStb.exe	SStb.exe	"Adpowerzone.com ""ServerSide"" keyword hijacker"
N	sstray	sstray.exe	nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
X	SSUpdate	SSUpdate.exe	"MoneyTree parasite - ActiveX control used to download premium-rate dialers"
X	ssvchost	ssvchost.exe	"Added by the HELIOS.B TROJAN!"
X	SSWPlauncher	comet.exe	"Comet Cursor adware"
N	Stacmon	Stacmon.exe	Installed with the drivers for a SigmaTel C-Major Audio card (on a Dell Inspiron 600m PC for example). Appears as though it can be disabled with no ill effects
N	StacSysTray	StacSysTray.exe	System Tray control panel for SigmaTel C-Major on-board audio - as used on some Dell and Packard Bell PCs
X	staeck12	mfcee.exe	Added by an unidentified WORM or TROJAN!
X	staeck122	mfceee.exe	Added by an unidentified WORM or TROJAN!
X	standalone.exe	standalone.exe	"Added by the AGOBOT-ADS WORM!"
U	Stardock ObjectDock	ObjectDock.exe	"Stardock ObjectDock is a program that enables users to organize their shortcuts programs and running tasks into an attractive and fun animated Dock"
U	StarSkin	starskin.exe	"StarSkin allows you to change the view and appearance of your Windows XP box with the use of publically available themes"
Y	Start	Quick95.exe	For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
X	Start	windows.vbs	Homepage hijacker
?	start	start.exe	"??"
X	start	sdcc.exe	Added by the AGENT.CSX TROJAN!
X	start	isfmntr.exe	"Online Video Add-on - masquerades as a helper application for watching videos. In reality though it installs a rogue anti-spyware or SmitFraud application on your computer"
X	start	sbmntr.exe	Netproject malware
X	Start aThx Roll	f0mered.exe	"Added by the RBOT.AAV WORM!"
X	Start CurePCSolution	CurePCSolution.exe	"CurePCSolution spyware remover - not recommended see here"
X	start extracting	spoolvse.exe	"Added by the RBOT-XF WORM!"
X	start extracting	spoolvs.exe	"Added by the RBOT.BAN WORM!"
X	start extracting	mcafee.exe	"Detected by Kaspersky as the RBOT.FO BACKDOOR! See here. Note - this is not a valid McAfee program and is located in %System%"
N	Start Getright	getright.exe	See Getright Tray Icon
X	Start It Upping	svchosets.exe	"Added by a variant of the RBOT WORM!"
U	Start Network Scanner Tool	sdFTP.exe	"Part of Sharpdesk from Sharp Electronics. ""A desktop-based personal document management application that lets users browse edit search compose process and forward both scanned and native electronic documents"""
X	Start Page	http://find.naupoint.com	"Naupoint browser hijacker"
X	Start Page	svcnt32.exe	Homepage hijacker also detected as Trojan-Downloader.Win32.Delf.ks
Y	Start RF Wireless Keyboard	ktrexe.exe	Yuanxun Electronics RF wireless keyboard driver
Y	Start RF Wireless Mouse	cm20.exe	Yuanxun Electronics RF wireless mouse driver
U	Start Service	upssrv.exe	"Cyber Power PowerPanelPlus software. ""During a power failure the system automatically saves and closes open files within the battery backup time and safely powers down your computer"""
U	Start Up Cop	startcop.exe	"StartUp Cop - startup manager"
X	start uploading	smsss.exe	"Added by a variant of the SDBOT WORM!"
X	Start Upping	taskmrg.exe	"Added by the RBOT-MA WORM!"
X	Start Upping	SVCHOSTES.EXE	"Added by the RBOT-NB WORM!"
X	Start Upping	taksmgr.exe	"Added by the RBOT-QK WORM!"
X	Start Upping	mcrt32.exe	"Added by a variant of the SPYBOT WORM!"
X	Start Upping	windupds.exe	"Added by the SDBOT.AFH WORM!"
X	Start Upping	windupdts.exe	"Added by a variant of the RBOT WORM!"
X	Start Upping	xdcc.exe	"Added by the SPYBOT.OY WORM!"
X	Start Upping	spoolnt.exe	"Added by the RBOT-TM WORM!"
X	Start Uppings	svcchosts.exe	"Added by the SDBOT.VY WORM!"
X	Start Uppings	mssupdate.exe	"Added by a variant of the RBOT WORM!"
N	Start Wingman Profiler	lwtest.exe	Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer it's best to leave it unchecked
N	Start Wingman Profiler	lwemon.exe	Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer it's best to leave it unchecked
U	Startacc	startacc.exe	"Launches Webroot's Accelerate 2000 software that ""speeds up your Internet connection by up to 300%"". Leave enabled if you find it improves internet connection"
N	StartCCC	CLIStart.exe	Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
X	startdrv	startdrv.exe	"Added by the DROPRK-A TROJAN!"
U	StartEAK	StartEAK.exe	"Easy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys"
X	startemdoit	[path to trojan]	"Added by the DLOADR-AVP TROJAN!"
X	Starter	scvhosting.exe	"Added by the SDBOT.RU WORM!"
X	starter	scvhostingg.exe	"Added by the FORBOT-FB WORM!"
X	starter	iexplore.exe	"Added by the FORBOT-DU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
U	StartFoxie	StartFoxie.exe	"Foxie Suite from Softonic International. ""This suite of free tools comes in the form of an Internet Explorer add-on and includes a mix of powerful security enhancements"""
X	startkey	svcmgr.exe	"Added by the HIPPER-B TROJAN!"
X	startkey	update.exe	"Added by the BIFROSE-DG TROJAN!"
X	startkey	XMCHAI.EXE	"Added by the BIFROSE-AO TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list