HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	STOPzilla	Stopzilla.exe	"StopZilla! - pop-up killer"
U	STOPzilla Service	SZNTSVC.EXE	"StopZilla! - pop-up killer"
U	StorageGuard	sgtray.exe	"StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop)
?	STPMGR	STPMGR.EXE	"Part of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs"
X	stratas	xmconfig.exe	"Added by the RBOT-AHR WORM!"
X	stratas	lockx.exe	"Added by the SDBOT-ADD WORM!"
X	Stratas	ggfig.exe	"Added by the OPANKI.W WORM!"
U	StreamZap Remote	zremote.exe	"StreamZap PC Remote - control Windows Media Player
U	StrgSync.exe	StrgSync.exe	"SimpleTech Inc's StorageSync backup software - backs up an entire PC
X	strmsnmgrs	msnxmsgrsc.exe	"Added by the SDBOT.JDR WORM!"
X	strmsnmsgr	msnmsgrs.exe	"Added by the RBOT-ACQ WORM!"
X	strmsnmsgrs	msnmsgrsc.exe	"Added by a variant of the RBOT WORM!"
X	strmsnnms	msnmegrs.exe	"Added by the SDBOT-YU TROJAN!"
X	strmsnnrs	msnmcgrs.exe	"Added by the RBOT-ACT TROJAN!"
X	strmsoums	msnmegrse.exe	"Added by the SDBOT-ZK TROJAN!"
X	Strng32	strngbox.exe	"Added by the STRANO WORM!"
U	StrokeIt	strokeit.exe	"StrokeIt is an ""advanced mouse gesture recognition engine and command processor"""
X	strtas	lock1.exe	"Added by the SDBOT-ADQ WORM!"
X	strtas	lockx.exe	"Added by the SDBOT-AEB WORM!"
X	strtas	l074.exe	"Added by the AGENT-II TROJAN!"
X	strtas	loc1.exe	"Added by the RBOT-AZU TROJAN!"
X	strto	strto.exe	"Added by the KILLPROC-F TROJAN!"
X	strto	[path to trojan]	"Added by the KILLAV-AP TROJAN!"
X	Sts	iwnujdss2.exe	"Added by the SDBOT-YI WORM!"
X	Stubbish	Stubbish.exe	"Added by the STUBBOT-A WORM!"
X	StubPath	Sservice.exe	"Added by the PRORAT TROJAN!"
X	stup	138762763.exe	"Added by the FIRESPY-A TROJAN! It will attempt to register the dropped component as a Firefox plugin and begin monitoring the user's browsing habits
N	StupAssist	StupAssist.exe	Associated with Nikon digital cameras
X	stxrmsgms	mstats.exe	"Added by the IRCBOT-AE TROJAN!"
U	StyleXP	StyleXP.exe	"StyleXP allows you customize the way WinXP looks. If disabled via msconfig it re-instates itself at reboot
X	SubAH	SubAH.exe	Added by the SUBAH TROJAN!
U	Subliminal Power	Subliminal.exe	"Subliminal Power - displays subliminal messages of your choice on your computer screen"
N	Subtract the Ads	AdSub.exe	Removes adverts from web pages. Although useful - not required
X	suck	l0ad.exe	"PurityScan/Clickspring adware"
U	Suitcase Startup	Suitcase.exe	"Suitcase. System font manager start up utility. Used for dynamic managment of fonts on your system"
X	Suite	SuiteOffices.exe	"Added by the LAZAR TROJAN!"
X	SULFNBJ.EXE	SULFNBJ.EXE	"Added by the PE_MAGISTR.DAM VIRUS!"
X	Sun Java Console for Windows NT & XP	jconsole.exe	"Added by the VANEBOT-C WORM!"
U	Sunasdtserv	Sunasdtserv.exe	"CounterSpy by Sunbelt Software - adware/spyware protection"
U	sunasServ	sunasServ.exe	"CounterSpy by Sunbelt Software - adware/spyware protection"
X	SunJavaSched	ccEvtMngr.exe	"Added by the SDBOT-YP WORM!"
X	SunJavaSched Updater	avamx.exe	"Added by the RBOT-ABJ WORM!"
X	SunJavaUpdate	smvss.exe	"Added by the DEDLER-G TROJAN!"
N	SunJavaUpdateSched	jusched.exe	"Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel"
X	SunJavaUpdateSched	scvhost.exe	"Added by the SDBOT-AVX WORM!"
X	SunJavaUpdateSched	javamx.exe	"Added by the SDBOT-WI WORM!"
U	Sunkist	shwicon98.exe	"Card reader for memory cards from digital cameras
U	Sunkist2k	shwicon2k.exe	"Card reader for memory cards from digital cameras
U	SunKistEM	shwiconem.exe	"Used by your computer to communicate with your Alcor Micro Multimedia Card Reader - necessary if you're using this software"
U	SuNotification	suatshut.exe	"ShadowSurfer - ""provides a safe computing environment by creating a virtual twin of your PC. Restore the pre-ShadowMode system state no matter what changes have occurred to your PC"""
U	SunProtectionServer	SunProtectionServer.exe	"CounterSpy antispyware software"
U	SunServer	SunServer.exe	"CounterSpy antispyware software"
?	SupaDial	SupaDial.exe	"SupaNet.com modem driver related - is it required?"
N	Supastatus	status.exe	"Supanet ISP software"
X	super	fuckbx.exe	"Added by the LINEAGE-H TROJAN!"
X	super	super.exe	"Added by the AGOBOT-QT WORM!"
U	Super Popup Blocker	popkill.exe	"Saga Super Popup Blocker - pop-up stopper"
U	Super X Desktop Version 3.4	SXDesk.exe	"Super X Desktop - virtual desktop manager"
U	SuperAdBlocker	SAdBlock.exe	"SuperAdBlocker"
U	SUPERAntiSpyware	SUPERAntiSpyware.exe	"""SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware
X	SuperBar.Component	[path to services.exe]	"Added by the SMALL-AQ TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in an ""Inetsrv"" subfolder"
X	SuperBar.Component	services.exe	"Added by FakeMessage/AdRotator adware. Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in an ""Inetsrv"" subfolder"
U	Supercleaner	Supercleaner.exe	"Supercleaner - all in one disk cleaner for your computer"
U	SuperCool Compress Backup	Main.exe	""SuperCool Zip Backup software is a data backup
X	SuperHeissSex	SuperHeissSex.exe	"Added by the HeissSex premium rate adult content dialer!"
X	supernews12	newsd32.exe	"Adware
X	Supernova	[worm filename]	"Added by the SURNOVA (or SUPOVA) WORM!"
U	SuperRam	SuperRam.exe	"SuperRam memory manager. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See SuperRam article and make up your own mind"
X	superslut	msslut32.exe	"Added by the SLUTER-A WORM!"
U	SuperSpamKiller Pro	Ssk.exe	"SuperSpamKiller Pro email spam blocker"
X	Supervisor.exe	Supervisor.exe	"Has been reported to be associated with various antitrojan software like ATS and PC Doorguard. If so it's required in Startup - any further information is welcome"
X	support-reverse-smileys	[trojan filename]	"Added by the LITEBOT TROJAN!"
X	supporter5	supporter5.exe	"Part of eScorcher anti-virus software- responsible for updates of new virus bases each time you logon to the web. Used to collect information about the user and therefore treated as spyware - now the web-site is dead"
U	SureCleanProfessional	SRClean.exe	"SureClean PC and Internet tracks cleaner"
U	Sureshotpopupkiller	Stopthepop.exe	"Stop-the-Pop-Up popup blocker"
U	Sureshotpopupkiller	pusak.exe	"Stop-the-Pop-Up popup blocker"
X	SurfAccuracy	sacc.exe	"SurfAccuracy adware"
X	SurfBuddy	rundll32 [path] sbuddy.dll	"SurfBuddy adware - not to be confused with the legitimate SurfBuddy application by SurfApps!"
U	SurfChoice	SCMan.exe	"SCMan is a utility that can control services on WinNT from the command line. This utility can create
X	Surfer lptt01	surfer.exe	"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Surfer ml097e	surfer.exe	"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
U	SurfHelper	SurfHelp.exe	"Related to SurfHelper - a free tool to remove popup windows
U	SurfinGuard Pro	winsfcm.exe	"SurfinGuard Pro - internet protection software"
U	SurfSecret	ss2-full.exe	""House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray
X	SurfSideKick 2	Ssk.exe	"SurfSideKick adware"
X	SurfSideKick 3	Ssk.exe	"SurfSideKick adware"
U	SurfStream	SurfStream.exe	"Conceiva ""SurfStream lets you surf the Web faster. It contains a fully featured proxy server that lets you surf the Web significantly faster. It also blocks all pop-up windows and banner ads from Web pages. An intelligent tune-up tool automatically analyzes and optimizes your computer's Internet connection and TCP/IP settings"""
X	Surs	awab.exe	"PurityScan/Clickspring adware"
N	Surveysa	surveysa.exe	"Found on Sony laptops
U	suScheduler	UCLauncher.exe	Related to Lenovo ThinkVantage Technologies. ThinkVantage Technologies help make ThinkPad/ThinkCentre PCs less dependent on IT staff
X	Susp	Susp.exe	"VX2.Transponder parasite updater/installer related"
X	susse	hpsw.exe	"LinkMaker adware"
X	Sustem	explorer.exe	"Added by an unidentified VIRUS
X	SustemUpdate	explorer.exe	"Added by an unidentified VIRUS
X	SV00LSV	SV00LSV.EXE	"Added by the GRAYBIRD-C TROJAN!"
X	SVA Player	SVAplayer.exe	"QuickFlicks Streaming Player - regarded as spyware. See here for details of how to disable or uninstall it"
X	Svc	svc.exe	"ClientMan parasite variant"
U	SVC	svchost.exe	"ElfSpy keystroke logger/monitoring program - remove unless you installed it yourself! Note - this is not the svchost.exe process that normally doesn't appear in Msconfig/Startup!"
X	SVC Service	svcinit.exe	"Added by the SINIT TROJAN!"
X	SVC Service	svcinit.exe	"CoolWebSearch parasite variant"
X	SVC Service	svcpack.exe	"CoolWebSearch Svcinit parasite variant"
X	SVC Service	svc32.pif	"Added by the RBOT-ASC WORM!"
X	SVC Socks	mstaskm.exe	"CoolWebSearch parasite variant"
X	Svced	Svced.exe	"Added by the DELF.F TROJAN!"
X	SvcH0st	msexploren.exe	"Added by the BACKDOOR-CGZ TROJAN!"
X	SvcH0st	SHCH.EXE	"Added by the EB TROJAN!"
X	SvcH0st	SVCHST.EXE	"Added by the EB TROJAN!"
X	SvcH0st	WINAGENT.EXE	"Added by the EB TROJAN!"
X	SVCH0ST	spoo1sv.exe	"Added by the HF TROJAN!"
X	SVCH0ST	SVCH0ST.EXE	"Added by the IK TROJAN! Note - the filename has the digit 0 rather then the uppercase ""o"""
X	SVCH0TS	sp00lvs.exe	"Added by the LINEAGE-AZ TROJAN!"
X	svchast	svchast.exe	"Added by the LINEAGE-AV TROJAN!"
X	SVCHOST	svchost.exe	"System1060 homepage hi-jacker. Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""System1060"" subfolder of the Winnt or Windows folder"
X	svchost	svchost.exe	"Added by many TROJANS amd WORMS
X	SVCHOST	mrowyekdc.exe	"Added by the GOTORM WORM!"
X	svchost	Svch0st.exe	"Added by the GRAYBIRD and GRAYBIRD.B TROJANS! Note - the filename has the digit 0 rather then the uppercase ""o"""
X	svchost	[path to trojan]	"Added by the HAZZER TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	svchost	ADMAGIC.EXE	"Added by the SMIBAG WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	Svchost	winhost.exe	"Added by the LOLAWEB.A TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	Svchost	svchost.exe	"Added by the MOZE-A WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder"
X	SVCHOST	var.txt.exe	"Added by the LDPINCH.C TROJAN!"
X	Svchost	svchosl.pif	"Added by the INZAE.A or INZAE.B WORMS!"
X	svchost	[path] SETUP.EXE	"Added by the SETCLO WORM!"
X	SVCHOST	scvhost.exe	"Added by the MYTOB.E or MYTOB.G WORMS!"
X	SVCHOST	taskgmr.exe	"Added by the MYTOB.F or MYTOB.H WORMS!"
X	svchost	olehelp.exe	"Added by the BOOKMARKER.G TROJAN!"
X	SVCHOST	updater32.exe	"Added by the RANTS.A WORM!"
X	SVCHOST	SPOOLSV.EXE	"Added by the BAITAP-A WORM! Note - ""Spoolsv.exe"" is located in the Windows or Winnt directory
X	SvcHost	svchost32.exe	"Added by the AGOBOT-TM WORM!"
X	svchost	svchost.exe	"Added by the BANCBAN-HL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""config"" subfolder of the Winnt or Windows folder"
X	svchost	[path to explorer.exe]	"Added by the UNREAL-A TROJAN!"
X	svchost	rundll16.exe	"Added by the STARTPA-PB TROJAN!"
X	Svchost	svchost.exe	"Added by the ADCLICK-AX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Program FilesInternet Explorer folder"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list