HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	svchost	svchost.exe	"Added by the ES TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""Microsoft"" subfolder"
X	svchost	svchost.exe	"Added by the DLOADER-EV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""Arquivos de programas"" folder"
X	svchost	winhelp.exe	"Added by the GAOBOT.GEN!POLY WORM!"
X	SVCHOST Generic application	svchost.exe	"Added by the DAEMONI-K TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder"
X	svchost Netware Manager	svchost.exe	"Added by the EXVID.A WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	Svchost Windows Remote Services	svhost.exe	"Added by the IRCBOT-IV WORM!"
X	svchost.exe	svchost32.exe	"CoolWebSearch Svchost32 parasite variant"
X	SVCHOST.EXE	SVCHOST.EXE	"Added by the WRMSCAN-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder"
X	svchost.exe	[path to executeable]	"Added by the BANKER-MO TROJAN!"
X	svchost.exe	svchost.exe	"Added by the ZAPCHAS-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""drivers"" subfolder"
X	svchost1	svchost1.exe	"Added by the AGOBOT.ZZ WORM!"
X	SvcHost32	svchost32.exe	"Added by the MIMAIL.I or MIMAIL.J WORMS!"
X	svchost64	svchost64.exe	Added by the SDBOTER.G VIRUS!
X	svchosta	svchosta.exe	"Added by the SNIFFER-I TROJAN!"
X	svchostb	svchostb.exe	"Added by the SNIFFER-J TROJAN!"
X	svchostdll.scr	svchostdll.scr	"Added by the BANCBAN-FM TROJAN!"
X	SvcHosto	v1rg1n.exe	"Added by the AGOBOT-TK WORM!"
X	svchostr	svchostr.exe	Added by an unidentified WORM or TROJAN!
X	svchosts	svchosts.exe	"Added by the BANCBAN-DC or BANKER-ED TROJANS!"
X	svchosts.exe	svchosts.exe	"Added by the AGOBOT-JN WORM!"
X	svchosts.scr	svchosts.scr	"Added by the BANCBAN-DQ TROJAN and variants!"
X	SVCHOT	SVCHOT.exe	"Added by the QQROB-U TROJAN!"
X	svchst	svchst.exe	"Added by the KBROY-C TROJAN!"
X	svcinfo	svcinfo.exe	"Added by the CRYPTER.A TROJAN!"
X	Svclhost	svcchost.exe	Added by an unidentified WORM or TROJAN!
U	svcmon	svcmon.exe	"Added by PersonInspect surveillance software. Remove unless you installed it yourself"
X	svcroot	svcroot.exe	"Added by the KEYLOG-AC TROJAN!"
X	SvcSys	[path to file]	"Added by the BANCOS.Z TROJAN!"
X	Svcsys Registry Manager	svcsysreg.exe	"Recognized by Kaspersky antivirus as Trojan-Clicker.Agent.cv"
X	svcsys32	svcsys32.exe	"Added by the AGOBOT-LL WORM!"
X	svctask	svctask.exe	"Added by the CHUCKYB-A TROJAN!"
X	svcwinprocess32	[path to worm]	"Added by the UPERING WORM!"
X	SVHOST	svhost.exe	"Added by the MYDOOM.I WORM!"
X	SVHOST	SVHOST.EXE	"Added by the ZORI.A VIRUS!"
X	Svhost Loader	svshost.exe	"Added by the AGOBOT.G WORM!"
X	svhost updates	Svhost.exe	"Added by a variant of the RBOT WORM!"
X	svhost windows services	svhost8.exe	"Added by the RBOT-WQ WORM!"
?	SVIDC32M	SVIDC32M.exe	"??"
X	sVideo2	vxdrun6.exe	"""Switch"" premium rate adult content dialler"
X	sviload32	sviload32.exe	"Added by the RBOT-AAS WORM!"
?	SVM Pop	svmpop.exe	"??"
X	svnlitup32	svnlitup32.exe	"Added by the RBOT.CBJ WORM!"
X	svnloader	svnload32.exe	"Added by the RBOT-ACU WORM!"
X	svphost.exe	svphost.exe	"Added by the AGENT.CS TROJAN!"
U	SVPWUTIL	SVPWUTIL.exe SVPwUTIL	Part of Toshiba Hardware Setup
X	svrrun	svrrun.exe	Adware hailing from Deskwizz.com
X	svsekin	svsekt.exe	"Added by the QQPASS.G TROJAN!"
X	svshost	svshost.exe	"Added by the CHODE-H WORM!"
X	svshost	messenger.exe	"Added by the LOONY-G TROJAN!"
X	Svshost Update Service	svcbind.exe	"Added by the MYTOB.LH WORM!"
X	svshost32	msgrsv32.exe	Added by the RANKY.AJ TROJAN!
X	svshost32	svshost32.exe	"Added by a variant of the SDBOT WORM!"
X	svshostdriver	svshost.exe	"Added by the SDBOT-HN TROJAN!"
X	svtcin	n20050308.a.Stub.EXE	"Added by the N20050308 TROJAN!"
X	svwin32	unninst32.exe	"Added by the AGOBOT-NF WORM!"
X	SVX Control Service	svxhost.exe	"Added by the FORBOT-K WORM!"
U	SW20	sw20.exe	"Related to MSI's Dynamic Overclocking Technology"
U	SW24	sw24.exe	"Related to MSI's Dynamic Overclocking Technology"
N	Swap Nut	javaw.exe	"javaw.exe can be loaded by other programs at startup but in this instance it's SwapNut
X	SWCaller	SWcaller.exe	"Swporta homepage hijacker"
X	SWCaller	Swcaller2.exe	"Swporta homepage hijacker"
X	Swchost	Swhost.exe	"Added by the MP TROJAN!"
U	SWClient	swsys.exe	"ActivMonAgent keyboard logger/monitoring program - remove unless you installed it yourself"
X	swcroot	swcroot.exe	"Added by the SOLENO-A TROJAN!"
N	SWd	winwd.exe	"PC Security from Tropical Software - lock files
Y	Sweep95	ICLOAD95.EXE	"Part of Sophos ant-virus sofware"
N	SweetIM	SweetIM.exe	"vSweetIM - send fancier smiley-faces and IM graphics to friends who are using MSN Messenger. They are only able to see these advanced smiley-faces if they also have SweetIM installed"
X	Swf32	AVupdate.exe	"Added by the MERKUR.E WORM!"
X	Swf32	_backup.exe	"Added by the SYMTEN WORM!"
U	swg	GoogleToolbarNotifier.exe	"Companion to the Google Toolbar that lets you keep Google as your default search engine and prevents this setting from being changed without your consent. Shouldn't remain in memory after the feature is disabled as it's a bug - see here"
X	SwimSuitNetwork	SwimSuitNetwork.exe	Advertising spyware
X	swingsys	SWINGSYS.EXE	"Added by the BANCOS-CX TROJAN!"
U	Switch Off	swoff.exe	"Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer
N	Switchboard.com Toolbar	AtHoc.exe	"Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com"
U	Switcher	Switcher.exe	"""On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
X	switp	switpa.exe	"OfferAgent adware component"
U	SWL	rundll32.exe [path] SWL.dll rdl	"StealthWeblog surveillance software. Uninstall this software unless you put it there yourself"
U	SWN2	swnxt.exe	"Spyware removal program by TrekBlue. Previously not recommended but the latest version was delisted here"
X	sws.exe	[random filename]	"Haldex type adult content dialler"
X	sws.exe	gd-dial.exe	"Globaldialer adult content premium rate dialer"
N	SwTray	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it
N	SWTrayV4	SWTrayV4.exe	MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
?	SXGDSENU	sxgdsenu.exe	"Yamaha SXG soundcard driver"
N	SxgTkBar	sxgtkbar.exe	Yamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration
?	Sxplog	sxpstub.exe	"Part of CA Unicenter Software Delivery - manage software across various systems
X	sxrrv	sxrrv.pif	"Added by the VAX-A TROJAN!"
X	SyBot v2.1 By Sky-Dancer	HPSV.exe	"Added by the ZOTOB.I WORM!"
X	SYDNEY	[file path]	"Added by the SYNEY WORM!"
X	syelimS-esreveR-troppuS	[filename]	"Added by the LITBOT.C TROJAN!"
X	Syga432te Pe432rsonal Firewall	MrNo4236.exe	"Added by the RBOT-AQY WORM!"
X	Sygate Peral Firewall	Syga.exe	"Added by the RBOT-AQK WORM!"
X	Sygate Personal 3	svrv.exe	"Added by the RBOT-XD WORM!"
X	Sygate Personal Block	Studio.exe	"Added by the RBOT-TW WORM!"
X	Sygate Personal Firewall	Win32x.exe	"Added by the RBOT-KZ WORM!"
X	Sygate Personal Firewall	system32.exe	"Added by the RBOT.VI WORM!"
X	Sygate Personal Firewall	sysgut.exe	"Added by the SDBOT.WM WORM!"
X	Sygate Personal Firewall	Sygate.exe	"Added by the RBOT-PN WORM!"
X	Sygate Personal Firewall	Mcafeeupdate.exe	"Added by the RBOT.YN WORM!"
X	Sygate Personal Firewall	Sygate32.exe	"Added by the SDBOT.WW WORM!"
X	Sygate Personal Firewall	MSNSRV32.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Firewall	service.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Firewall	t1ktik.exe	"Added by the RBOT-VP WORM!"
X	Sygate Personal Firewall	host32.exe	"Added by the RBOT.ALD WORM!"
X	Sygate Personal Firewall	sexy.exe	"Added by the RBOT-XY WORM!"
X	Sygate Personal Firewall	sys.exe	"Added by the RBOT-ZC WORM!"
X	Sygate Personal Firewall	syserror.exe	"Added by the RBOT.UC WORM!"
X	Sygate Personal Firewall	hostserv.exe	"Added by the RBOT.BKO WORM!"
X	Sygate Personal Firewall	msnmsgrs.exe	"Added by the RBOT.XN WORM!"
X	Sygate Personal Firewall	Sygat.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Firewall	wins.exe	"Added by the RBOT.AOB WORM!"
X	Sygate Personal Firewall	winxpstat.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Firewall	Syga.exe	"Added by the RBOT-AQD WORM!"
X	Sygate Personal Firewall Start	services32.exe	"Added by the RBOT-MB WORM!"
X	Sygate Personal Firewall Start	servic.exe	"Added by the RBOT-RY WORM!"
X	Sygate Personal Port	crss.exe	"Added by the RBOT-PX WORM!"
X	Sygate Personal Port Blocker	volume.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Port Blocker	winupdate.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personals Firewalls	ccsrn.exe	"Added by a variant of the RBOT WORM!"
U	SyGateService	sgserv95.exe	"SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs"
X	Symantec	ccapp.exe	"Added by the REATLE WORM! Note - this is not a Symantec file"
X	Symantec Anti Virus	symantec32.exe	"Added by a variant of the WOOTBOT WORM!"
X	Symantec Autoscan	[random filename]	"Added by the RBOT-AJO WORM!"
X	Symantec Configuration Loader	ccApp32.exe	"Added by a variant of the GAOBOT WORM!"
Y	Symantec Core LC	symlcsvc.exe	"Part of Norton AntiVirus 2004. What does it do?"
N	Symantec Fax Starter Edition Port	OLFSNT40.EXE	Offers a virtual printer as a fax machine. Can be run via a desktop shortcut
U	Symantec NetDriver Monitor	SNDMon.exe	"Part of Symantec's LiveUpate (eg
U	Symantec NetDriver Warning	SNDWarn.exe	Part of Symantec Live Update - displays the warning when you need to update the firewall database
X	Symantec Security	symantec32.exe	"Added by the RANDEX.PR or RANDEX.YR WORMS!"
X	Symantec Security Addon	nvsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM! Note - do NOT confuse with the legitimate NVIDIA Driver Helper Service file of the same name as described here"
X	Symantec Security Routine Addon for Microsoft Windows	navpxaw32.exe	"Added by the AGOBOT-GJ TROJAN!"
X	Symantec Service	ccApp.exe	"Added by the AKHER.D WORM! Note - this is also not the valid Norton AV file with the same filename"
X	SymAV	SymAV.exe	"Added by the NETSKY.U WORM!"
U	SymKeepAlive	CKA.exe	"Part of Norton SystemWorks 2003 - keeps a dial-up modem connection alive"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list