HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	ssgrate.exe	wintems.exe	"Added by the MITGLIEDER.Q TROJAN!"
U	SSh32	SSh32.exe	"2Spy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	SSK Service	winssk32.exe	"Added by the SOBIG.E WORM!"
X	SSL	svchost.exe	"Added by an unidentified VIRUS
U	ssmmgr	ssmmgr.exe	"Samsung printer monitor - for checking ink levels
X	ssms.exe	SSMS.EXE	"Added by the GISMOR WORM!"
X	SSPY	SSYTEM.EXE	"SurfingSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	sssasasb32	sssasasb32.exe	"Added by the TACTSLAY.F TROJAN!"
X	sstata	dwdas.exe	"Added by the DASDA TROJAN!"
X	sstata	[path to trojan]	"Added by the RANCK-DF TROJAN!"
X	SStb.exe	SStb.exe	"Adpowerzone.com ""ServerSide"" keyword hijacker"
N	sstray	sstray.exe	nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
X	SSUpdate	SSUpdate.exe	"MoneyTree parasite - ActiveX control used to download premium-rate dialers"
X	ssvchost	ssvchost.exe	"Added by the HELIOS.B TROJAN!"
X	SSWPlauncher	comet.exe	"Comet Cursor adware"
N	Stacmon	Stacmon.exe	Installed with the drivers for a SigmaTel C-Major Audio card (on a Dell Inspiron 600m PC for example). Appears as though it can be disabled with no ill effects
N	StacSysTray	StacSysTray.exe	System Tray control panel for SigmaTel C-Major on-board audio - as used on some Dell and Packard Bell PCs
X	standalone.exe	standalone.exe	"Added by the AGOBOT-ADS WORM!"
U	StarSkin	starskin.exe	"StarSkin allows you to change the view and appearance of your Windows XP box with the use of publically available themes"
Y	Start	Quick95.exe	"For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone"
X	Start	windows.vbs	Homepage hijacker
?	start	start.exe	"??"
X	start	sdcc.exe	Added by the AGENT.CSX TROJAN!
X	Start aThx Roll	f0mered.exe	"Added by the RBOT.AAV WORM!"
X	start extracting	spoolvse.exe	"Added by the RBOT-XF WORM!"
X	start extracting	spoolvs.exe	"Added by the RBOT.AKC WORM!"
N	Start Getright	getright.exe	See Getright Tray Icon
X	Start It Upping	svchosets.exe	"Added by a variant of the RBOT WORM!"
U	Start Network Scanner Tool	sdFTP.exe	"Part of Start Page	http://find.naupoint.com	"Naupoint browser hijacker"
X	Start Page	svcnt32.exe	"Homepage hijacker
Y	Start RF Wireless Keyboard	ktrexe.exe	Yuanxun Electronics RF wireless keyboard driver
Y	Start RF Wireless Mouse	cm20.exe	Yuanxun Electronics RF wireless mouse driver
U	Start Service	upssrv.exe	"Cyber Power PowerPanelPlus software. ""In the event of a power outage
U	Start Up Cop	startcop.exe	"start uploading	smsss.exe	"Added by a variant of the SDBOT WORM!"
X	Start Upping	taskmrg.exe	"Added by the RBOT-MA WORM!"
X	Start Upping	SVCHOSTES.EXE	"Added by the RBOT-NB WORM!"
X	Start Upping	taksmgr.exe	"Added by the RBOT-QK WORM!"
X	Start Upping	mcrt32.exe	"Added by a variant of the SPYBOT WORM!"
X	Start Upping	windupds.exe	"Added by the SDBOT.AFH WORM!"
X	Start Upping	windupdts.exe	"Added by a variant of the RBOT WORM!"
X	Start Upping	xdcc.exe	"Added by the SPYBOT.OY WORM!"
X	Start Uppings	svcchosts.exe	"Added by the SDBOT.VY WORM!"
X	Start Uppings	mssupdate.exe	"Added by a variant of the RBOT WORM!"
N	Start Wingman Profiler	lwtest.exe	"Logitech Wingman software required to operate Logitech joysticks and gamepads.  Unless you're a hard-core gamer
N	Start Wingman Profiler	lwemon.exe	"Logitech Wingman software required to operate Logitech joysticks and gamepads.  Unless you're a hard-core gamer
U	Startacc	startacc.exe	"Launches Webroot's Accelerate 2000 software that ""speeds up your Internet connection by up to 300%"". Leave enabled if you find it improves internet connection"
Y	StartEAK	StartEAK.exe	"Easy Access Button Support for Compaq PCs. Required if you use these"
X	starter	scvhosting.exe	"Added by the IRCBOT.E TROJAN!"
X	Starter	scvhosting.exe	"Added by the SDBOT.RU WORM!"
X	starter	scvhostingg.exe	"Added by the FORBOT-FB WORM!"
X	starter	iexplore.exe	"Added by the FORBOT-DU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process
U	StartFoxie	StartFoxie.exe	"Foxie Suite from Softonic International. ""This suite of free tools comes in the form of an Internet Explorer add-on and includes a mix of powerful security enhancements"""
X	startkey	svcmgr.exe	"Added by the HIPPER-B TROJAN!"
X	startkey	update.exe	"Added by the BIFROSE-DG TROJAN!"
X	startkey	XMCHAI.EXE	"Added by the BIFROSE-AO TROJAN!"
X	startkey	explore32.exe	"Added by the MT TROJAN!"
X	startkey	CKOTS.exe	"Added by the BIFROSE-HM TROJAN!"
X	StartKey	pligde.exe	"Added by the BIFROSE.E TROJAN!"
X	startkey	RunWinRaR.exe	Added by a variant of the BIFROSE-LV TROJAN!
X	startkey	Mysia.exe	Added by the CEP TROJAN!
N	startl.exe	startl.exe	"Lingocom LingoWare - translates any application into your language"
X	StartMenu	s_menu.exe	Added by a variant of the DELF-A TROJAN!
X	StartMenu	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	StartMenu	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	StartMenu	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	StartMenu	browse.exe	"Added by the DROWSY-C TROJAN!"
X	startpage	startpage.exe	Browser hijacker - redirecting to pages2start.com
U	STARTPAGE	start1.exe	"NoSpy.org - prevents spyware from changing your startpage and other browser properties. The start1.exe file is located in a NOSPY.ORG folder"
U	StartStop	STARTSTOP.EXE	"StartStop from TFI Technology - startup manager"
U	StartSurfing	STARTS.exe	"Start Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows
N	Startup	??	Related to an Iomega drive
X	Startup	WinlogonStartup	Unidentified malware
X	Startup	mirc.exe	"Added by the FLOOD-EU TROJAN! An uninstall option for mirc.exe can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as mIRC. This one puts 10 files in the Windows or Winnt folder"
X	Startup Configuration	[six character filename]	"Added by the RBOT-ARV WORM!"
X	Startup Configuration	wztoid.exe	"Added by the RBOT-ASD WORM!"
?	Startup Launcher GUI	GUI.exe	"Startup manager?"
U	Startup Manager Scanner	StartupMonitor.exe	"Startup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans
Y	Startup Scan	Sensor.EXE	"AntiVirus Quick Heal - scheduling agent"
X	Startup Update	Cvshost.exe	"Added by the GAOBOT.AO WORM!"
X	StartupBin	iwnujdss.exe	"Added by the SDBOT-XZ WORM!"
U	StartupMonitor	StartupMonitor.exe	"Mike Lin's StartupMonitor
X	startwin	startwin.exe	"Added by the ANTIMAN.A WORM!"
X	startwindowskeyuser	rundle2.exe	"Added by the JAVAKILLER TROJAN!"
N	Stat 'n' Perf	StatnPerf.exe	"Stat 'n' Perf monitors your internet connection and displays information about sent and received bytes"
X	StatBar	STATBAR.exe	"StatBar (system status bar) allows you to quickly get an overview of your system's condition (memory
X	State Service	csrss.exe	"Added by the DADOBRA-CP TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
U	StationPlaylistStudio	SPLStudio.exe	"StationPlaylist Studio - ""simple to use on-air broadcast playback software for the studio and/or DJ"" for small to medium sized radio broadcasters
X	Statistics	statslist.exe	"Added by the OPANKI-S WORM!"
N	Status Monitor	BrMfcWnd.exe	Brother scanner status monitor - can be started manually
N	Status Monitor XE	ENGSS.EXE	The Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start -> Programs
?	StatusClient	StatusClient.exe	Part of Hewlett Packard network printer drivers
?	StatusClient 2.6	StatusClient.exe	Part of Hewlett Packard network printer drivers
N	StatusView	StatusView.exe	"Status View intra-office messaging"
N	Stay Connected!	StayCon.exe	"More than just a pinger
U	StayAlive	StayAlive.Exe	"Part of RealSPEED - tweaking utility to speed-up your internet connection. Stay connected even after a period of inactivity on the net"
U	StayAlive	sa.exe	"StayAlive from TFI Technology. "This top-notch tool intercepts crashes when they happen
?	STBVision	STBVisn.exe	"Related to the STB Velocity graphics card. What does it do and is it required?"
N	STBWEBTV	STBWEBTV.EXE	Used to display TV on your PC
X	stcinstaller	id53.exe	"Added by the SCTHOUGHT.L TROJAN!"
X	stcloader	stcloader.exe	Popup adware by 2ndThought software
X	stcloader	STCLOA~1.exe	Popup adware by 2ndThought software
X	STCLOA~1	stcloader.exe	Popup adware by 2ndThought software
X	STCLOA~1	STCLOA~1.exe	Popup adware by 2ndThought software
Y	STCPO	STCPO.exe	Sophos Sweep antivirus software
X	stdlib	[filename]	"Added by the PERDA-E TROJAN!"
Y	STDSB	STDSB.exe	"Scrollbar driver for notebooks. If taken out of the Startup
U	Stealth Anonymizer 2.5	stealth25.exe	"Now named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy"
X	stealth.dcom.exe	stealth.dcom.exe	"Added by the THEALS.A WORM!"
X	stealth.ddos.exe	stealth.ddos.exe	"Added by the THEALS.A WORM!"
X	stealth.exe	stealth.exe	"Added by the THEALS.A WORM!"
X	stealth.injector.exe	stealth.injector.exe	"Added by the THEALS.A WORM!"
X	stealth.stat.exe	stealth.stat.exe	"Added by the THEALS.A WORM!"
X	stealth.wm.exe	stealth.wm.exe	"Added by the THEALS.A WORM!"
X	stealth.worm.exe	stealth.worm.exe	"Added by the THEALS.A WORM!"
N	Steam	steam.exe	"Valve Software's STEAM broadband game client. Steam is Valve's new way of getting games into your hands ASAP. Games like Half-Life
X	steam	steam.exe	"Added by the RBOT-AJT WORM! Note - the file steam.exe will be found in the WindowsSystem folder and is not associated with Valve Software's game client"
X	SteFanie	SteFanie.vbs	"Added by the STEFAN WORM! Note - make sure you check the hyperlink as this one copies it's self to numerous dirves and folders"
?	stgclean	w32main2.exe	"Related to IBM Standard Software Installer. What does it do and is it required?"
N	Stickies	STICKIES.EXE	"Stickies - utility that allows you to put yellow "Post-It" type messages on your desktop and can be used to set reminders. Available via Start -> Programs"
N	Sticky Notes	stikynot.exe	Microsoft Sticky Notes - virtual sticky notes tool
U	Sticky Pad	StickyPad.exe	"Sticky Pad from Green Eclipse. Place sticky notes on your desktop"
N	StickyNote	StickyNote.exe	Utility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start -> Programs
U	StillImageMonitor	Stimon.exe	"Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example
X	stisrv	stisrv.exe	"Added by the RBOT.BQF WORM!"
X	stlbdist	"rundll32exe stlbdist.DLL	DllRunMain"
X	stlbupdt	"rundll32.exe stlbupdt.DLL	DllRunMain"
N	STManager	drst.exe	"Dr. SpeedTouch is some sort of diagnostics software which sends out information to a server which then relays the information back to the program to test the network to see if the SpeedTouch ADSL modem connection is working properly. Not required if connected via Ethernet (and probably USB). Can cause a slow down in Win2K - see here"
X	stmha	wkfxi.js	"Added by the SPETH WORM!"
X	stonedrv	stonedrv.exe	"Added by the COSIMA-K TROJAN!"
U	StopSignSsTsMon	"sstsmon.dll	VerifyStatus"
U	StopSignStatus	stopsinfo.dll	"eAcceleration Stop-Sign security software related. Previously not recommended

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list