Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	Telnet24	[random filename]	"Added by the RBOT-ARD WORM!"
U	TELUS eCare	matcli.exe	"TELUS Resolution Assistant. ""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city state etc and gets written to a log file"". Resolution Assistant is required to run with the Help and Support program. If you uncheck Resolution Assistant and and then run Help and Support it will add another Resolution Assistant in the startup menu. If you remove the Resolution Assistant in the add/remove program some help menus in help and support will not be available. You decide"
Y	TELUS Security service	freedom.exe	"Freedom Internet Security & Privacy - anti-virus personal firewall and parental control. It also blocks ads safeguards your personal information encrypts your passwords and much more. No longer available for sale"
X	TempCom	[randomname].com	"Added by the TRAXG WORM!"
X	tempx	tempx.exe	Added by the TEMPEX.A TROJAN!
X	Tencent QQ	Rund1132.exe qq.dll Rundll32	"Added by the QQPASS.F TROJAN!"
N	Tencent QQ	QQ.exe	"Tencent QQ Asian instant messanger program"
X	Terminal Services	mstscc.exe	"Added by the SDBOT-CZW WORM!"
X	Terminal Update	biosefui.exe	"Added by the PPDOOR-O TROJAN!"
X	Terminate Popup	fpuk.exe	Popup killer - foistware proven to install the Regsvc32 homepage hijacker
X	Terminate Popup	ZPU.exe	"Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here"
U	TEscKey	TEscKey.exe	Toshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
N	Tesco.net	rundll32 [path] RyDial.dll QuickStart	"Tesco.net dial-up ISP software - not required"
?	Tesla	TESLA.EXE	"??"
X	test	i love you.exe	"Added by the SINGU-T TROJAN!"
X	test	zistro.exe	"Added by the KIMAT-C TROJAN!"
X	Testing 123	msdata.dat	"Added by the NITS.A WORM!"
X	testit.exe	testit.exe	"ISTBar adware"
?	TExBUtil Registry	TExBUtil.exe	"??"
N	TextAloud	TextAloudMP3.exe	"TextAloud MP3 - convert text into spoken words and MP3s"
N	Textbridge Instant Access OCR	telepath.exe	"TextBridge from Nuance (was Scansoft). OCR (optical character recognition) software for scanning documents into popular editing applications. Available via Start -> Programs"
X	TEXTCONV	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process which should not appear in Msconfig/Startup!"
X	TEXTCONV	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
U	TFncKy	TFncky.exe	Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
U	TFNF5	TFNF5.exe	Toshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5> a window appears showing the displays that can be chosen ? LCD LCD + CRT CRT TV
Y	tfswctrl	tfswctrl.exe	"Drive letter access to a UDF packet writer for CD-RW - from HP Veritas an others. Similar to Roxio's DirectCD and does the same thing. From HP - ""This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"""
X	TFTP***	tftp***	"Added by a variant of the SPYBOT WORM! where *** can be any number"
U	TFunckey	TFuncKey.exe	Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
N	TgAddServer	tgfix.exe	"Software from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech)) and ISPs (such as Comcast Cox and Charter (Pipeline Support Agent)) that allows them to offer on-line support - to update drivers fix faults etc. Can cause a deterioration in a PC's peformance (see here). This part does the protection and ""self-healing"". Uninstallation is recommended by most people - especially for System Restore users (WinME/XP). If not available via Add/Remove try here"
X	tgbcde	module32.exe	"Added by the REIGN.R TROJAN!"
U	Tgcmd	tgcmd.exe	"See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
U	tgcmd	hcenter.exe	"Bellsouth help center. See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
U	tgcmdprovidersbc	tgcmd.exe	"See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
N	TGCMG	??	Related to Rogers@Home causes errors in WinSock32.dll. Not required for connection to work
X	TGDC IE Plugin	tgdc.exe	"ShopForGood spyware - see here"
X	tgkill	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
N	TGPro Office	IdxOffice.exe	"With IdiomaX Office Translator ""you can translate documents directly from your favorite text editor (Microsoft Word WordPerfect or Lotus WordPro)"""
U	Tgsetsite	tgfix.exe	"See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
?	Thdetrf	thdetr32.exe	"Appears to be related to Lycos advertising"
X	ThE	wind0s.exe	Added by an unidentified WORM or TROJAN!
N	The Assistant	eSched.exe	"Related to WinTotal from a la mode inc. FormFiller for appraisers"
U	The Easy Bee's Hive	ATCEgSvr.exe	The Easy Bee is a software that allows you to record Internet navigation sequences which can include form filling and button clicking and to attach a replay schedule to each sequence
X	The Ethernet	ethernet.exe	"Added by a variant of the SDBOT WORM!"
X	The Ethernet	intranet.exe	"Added by a variant of the SDBOT WORM!"
X	The Intranet	intranet.exe	"Added by a variant of the SDBOT WORM!"
N	The Proxomitron	Proxomitron.exe	"A free highly flexible user-configurable small but very powerful local HTTP web-filtering proxy - see here"
X	The Spy Guard	spyguard.exe	"The SpyGuard spyware remover - not recommended see here"
X	The Spy Guard Monitor	spyguard_monitor.exe	"The SpyGuard spyware remover - not recommended see here"
X	TheBestMP3	rundll32.exe MSA64CHK.dll DllMostrar	"MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""MSA64CHK.dll"" file is located in the Winnt or Windows folder"
X	TheLastDefender	LastDefender.exe	"TheLastDefender spyware remover - not recommended see here"
?	TheMainStart	N/A	"??"
X	TheMonitor	[path to trojan]	"Added by the DLOADR-LO TROJAN!"
X	TheMonitor	Duce6.exe	"YourEnhancement downloader"
X	TheSpyBot	TheSpyBot.exe	"TheSpyBot rogue spyware remover - not recommended see here"
U	THGuard	TH_Guard.exe	"Resident memory scanning for TrojanHunter"
U	THGuard	THGuard.exe	"Resident memory scanning for TrojanHunter"
X	Think-Adz	[random filename]	"Zeno Think-Adz adware"
X	This is a virus please delete it	bigbadvirus.exe	"Added by the RANDEX.F WORM!"
U	Thoosje Vista Sidebar	Thoosje Vista Sidebar.exe	"Thoosje's Vista Sidebar - sidebar and skins for microsoft Windows XP and Vista"
U	THOTKEY	THotkey.exe	Associated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked like the one that regulates the volume of the system beep but others didn't like the one that immediately blackens your screen
Y	ThpSrv	thpsrv.exe	Toshiba Hard Drive Protection Utility - moves the Hard Drive head to a safe position in case of shock or vibration to reduce the risk of damage that could be caused by head-to-disk contact
X	Threaded	intcp32.exe	"Added by the RANDEX.UG WORM!"
U	ThreatFire	TFTray.exe	"System Tray access to PC Tools ThreatFire - no-signature anti-malware"
U	ThrustTSR	TMTMTSR.exe	"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
X	Thumbs Plus .	thmbplus**.exe	"Added by the AGOBOT-AAF WORM! ** is a combination of a random digits and characters"
U	TI WLAN	TIWLANCu.exe	"Texas Instruments TI wireless LAN products"
X	tibs3	tibs3.exe	"Premium rate adult content dialler - see here"
X	tibs5	tibs5.exe	"Premium rate adult content dialer - see here"
?	Ticket API Monitor	tktmon.exe	"Syntegra Device Identification Logger. What does it do and is it required?"
X	Tiger	Shine.exe	"Added by the HAPPYLOW (or NISHE-A) VIRUS!"
U	TiKL	tikl.exe	"TinyKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	TileFree	Tilecomfree.com	Added by the RBOT.CQE WORM!
X	Tilerun	Tilecom32.com	"Added by a variant of the SDBOT WORM!"
X	Time Manager	TimeManager.exe	"Added by the MYTOB-BV WORM!"
X	Time Zone Synchronization	wscript zshell.js	"Added by the NETDEX-A TROJAN!"
U	TimeCalendar	tc.exe	"TimeCalendar digital planner"
N	Timed Backups Manager Startup	BACKTIME.EXE	"Backup Plus - backup software"
U	TimeLeft	TimeLeft.exe	"TimeLeft is a countdown reminder clock alarm clock stopwatch timer sticker and time synchronization utility which uses Winamp skins to show digits and text"
U	Timemanager.exe	Timemanager.exe	"Time Manager will let you track billable and non-billable time by customer by category and by associate and then integrate directly to our custom billing package"
N	TimeOnline	TIMEONLINE.EXE	Lightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
X	TIMER	TIMER.EXE	"Added by the TIMESE.AG WORM!"
X	Timer	comm.exe	"Added by the BDOOR-IP BACKDOOR!"
X	Timer	timed.exe	"Added by the BDOOR-LV BACKDOOR!"
X	Timer	msncomm.exe	"Added by the WEBDOR.AK TROJAN!"
X	TimeService	trun.exe	"TlfLic-A premium rate adult content dialler"
X	TimeSink Add Client	TSADBOT.EXE	Advertising spyware
X	timessquare	timessquare.exe	"Detected by Kaspersky as the STARTPAGE.AW TROJAN!"
X	timestamp	timeapr32.exe	"Added by the AGENT-DRU TROJAN!"
X	TimeSyncApp	TimeSynchronize.exe	"DealHelper adware"
N	TimeUp	Timeup.exe	"TimeUp - internet online timer"
U	Timezone	TimeZone.exe	"Microsoft Daylight Saving Time Update Utility - see here"
X	TIMHost	TIMHost.exe	"Added by the PWS-ANT TROJAN!"
U	TimounterMonitor	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
N	TINTSETP	TINTSETP.EXE	Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE Outlook and Word
X	Tiny AV	fooding.exe	"Added by the NETSKY.I WORM!"
Y	Tiny Personal Firewall	persfw.exe	"Tiny Personal Firewall"
N	Tiny Watcher Logon Time	Watcher.exe	"Tiny Watcher detects changes to your system. It will not prevent your system from being modified or corrupted. It will only tell you that something suspicious happened. Think of it as an early CAT scan against system tumors. Better to install a tool that will detect and remove bad items"
U	tinySpell	tinyspell.exe	"Tinyspell - ""allows you to easily and quickly check the spelling of words in any Windows application. Monitors your typing on the fly alerts you whenever it detects a misspelled word and checks the spelling of every word you copy to the clipboard"""
U	TiomanExe	Tioman.Exe	Agate Tioman - warm and hot swap removable bay device manager for IBM laptops
N	Tips	mousetips.exe	Suggests tips on using your mouse
U	TiTleBarClock	TiTleBarClock.exe	"TitleBarClock - displays Day Time Date Month Year FreeMem and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus"
U	TitleTime	TiTime.exe	"""TitleTime adds the current date and/or time to the Caption of the currently active application window. Additional options are a second clock (with a different time) week number GMT/UTC time Swatch Internet Time and Sounds at each full half or quarter hour"""
N	Tivoli	LCFEP.EXE	"Tivoli 'TME' System Tray icon - ""'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"""
?	TivoNotify	TiVoNotify.exe	"Part of Tivo Desktop. What does it do and is it required?"
U	TivoServer	TiVoServer.exe	"Tivo Server - installed with the TiVo Home Media Option. It streams audio files to your television/home theater from your PC"
U	TivoTransfer	TivoTransfer.exe	"Tivo Transfer Service. TiVo Desktop is an easy-to-use application that lets you publish and share digital music photos and TiVo recordings between your networked TiVo Series2 DVR and your computer"
X	tiwi	tiwi	"Added by the RAHIWI.A WORM!"
U	TIxDSL	tidslmon.exe	Actiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start -> Programs
N	TizzleTalk	TizzleTalk.exe	"TizzeTalk is a dialect translator for Yahoo MSN AOL Instant Messengers. Bundles adware hence not recommended. From their EULA : ""As a result of installing the Company's Software you will see occasional banner ads pop-up or pop-under ads or other types of ads selected based on your online activities .../... Occasionally we may automatically or through other remote means update upgrade patch or uninstall the Company's Software including the Company's advertising-supported software without further notice to you. These upgrades also may include installation of additional applications from the Company as well as third party applications"""
X	tjstartup	[path to file]	"Added by the TJSERV.C TROJAN!"
N	TK8 EasyNote	EasyNote.exe	"TK8 EasyNote - desktop post-it notes"
N	TkBell.Exe	evntsvc.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
N	TkBell.Exe	realsched.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
N	TkBell.Exe	tkbell.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
N	TkBellExe	evntsvc.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
N	TkBellExe	realsched.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
N	TkBellExe	tkbell.exe	"Application Scheduler installed along with RealOne Player. Once installed it runs independently of RealOne Player. See here for more information including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable ""tkbell.exe"" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK"
X	TkNetDriver Monitor	lexbce.exe	"Added by the SDBOT-ADF WORM!"
N	tkonnect	TKONNECT.EXE	"Dialer for the Tiscali internet service provider. Available as a desktop shortcut"
X	tlc	update911.js	Hijacker installer
?	TlcR	avp.exe	"??"
U	tlntsvr	tlntsvr.exe	"Microsoft program associated with Telnet"
U	TLogonPath	tb2logon.exe	"Timbuktu Pro - remote desktop access software"
X	tlz	47681727.exe	Added by an unidentified TROJAN!
U	TM Outbreak Agent	TMOAgent.exe	Trend Micro Internet Security anti-virus software virus outbreak warnings. Notifies users of virus outbreaks and offers to update the scanner
U	TMA distribution	cfinst.exe	Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
X	tmax	pupdate.exe	Adware pop-up generator
X	tmchook	tmchook.exe	"Detected by Kaspersky as the VB.AA TROJAN!"
U	TMEEJME.EXE	TMEEJME.EXE	Toshiba TME (Toshiba Mobile Extension) Control
U	TMERzCtl.EXE	TMERzCtl.EXE	Toshiba TME (Toshiba Mobile Extension) Control
U	TMESBS	TMESBS21.exe	Toshiba Mobile Extension Selectable Bay Service for WinXP - support for docking stations. Not required if you don't use a docking station
U	TMESBS32.EXE	TMESBS32.EXE	Toshiba Mobile Extension Slim Select Bay Service. You can disable this task if you have no intention of ever taking the DVD CD-Writer out while the laptop is turned on
U	TMESRV31.EXE	TMESRV31.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
U	TMExLogon	TMESRV.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
?	Tmmkb	Tmmkysvr.exe	"Toshiba multi-media keyboard software - possibly including creating keyboard shortcuts?"
X	TmNetDriver Monitor	exbce.exe	"Added by the SDBOT-ABR WORM!"
X	Tmntsrv32	Tmntsrv32.exe	"Added by the STARTPAGE.O TROJAN!"
U	TMOUSE	tmouse.exe	Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects except disabling the scroll/zoom features of the AccuPoint
Y	tmproxy	tmproxy.exe	"Trend Micro PC-cillin 2003 antivirus software"
X	tmp_up	sample.exe	QuickBar adware
U	TMRUBottedTray	TMRUBottedTray.exe	"RUBotted (from Trend Micro) monitors your computer for suspicious activities and regularly checks with an online service to identify behavior associated with Bots. Upon discovering a potential infection RUBotted prompts you to scan and clean your computer"
U	TMTMTSR	TMTMTSR.exe	"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
U	TnPopUp	billbrz.exe	"Related to Technesis ""award-winning solutions for tracking and managing print copy fax and scan activities"""
U	TNTClk	TNTCLK.exe	Overclocking program for TNT TNT2 and other graphics cards. This program can overclock the graphics card manually after startup when needed especially before starting a gaming session. However for simplicity it can be left checked to let it run once at startup to automatically overclock the graphics card. In this case it doesn't even run in the background after doing its job
U	ToADiMon.exe	ToADiMon.exe	T-Online ISP software connection assistant
U	Toggler	toggler.exe	"""Toggler allows you to gain control over your Caps Lock Num Lock and Insert keys. It prevents you from writing in ALL CAPS when your finger has slipped to accidentally hit the Caps Lock key"""
X	Tok-Cirrhatus	IDTemplate.exe	"Added by the RONTOKBRO.A WORM!"
X	Tok-Cirrhatus	smss.exe	"Added by the BRONTOK-A WORM and variants! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings#92;<User>#92;Local Settings#92;Application Data"
X	Tok-Cirrhatus	[path to file]	"Added by the BRONTOK-F WORM!"
X	Tok-Cirrhatus-1464	br3951on.exe	"Added by the BRONTOK.AD WORM!"
X	Tok-Cirrhatus-1959	br4941on.exe	"Added by the BRONTOK-J WORM!"
X	Tok-Cirrhatus-1959	[random].exe	"Added by the BRONTOK-CF WORM!"
X	Tok-Cirrhatus-1959sarc	sv711224030r.exe	"Added by the BRONTOK-R WORM!"
X	Tok-Cirrhatus-1959sarc	yesbron.com	"Added by the BRONTOK-R WORM!"
X	Tok-Cirrhatus-2454	br5931on.exe	"Added by the BRONTOK.AD WORM!"
X	Tok-Cirrhatus-2784	br6591on.exe	"Added by the BRONTOK-L WORM!"
X	Tok-Cirrhatus-2784	smss.exe	"Added by the BRONTOK-S WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings#92;<User>#92;Local Settings#92;Application Data"
X	Tok-Cirrhatus-[4 random digits]	br[4 random digits]on.exe	"Added by the BRONTOK-M WORM!"
?	TomcatStartup	hpbpsttp.exe	"Apache Tomcat web server part of HP LaserJet ""Printer Tools"" software. What does it do and is it required?"
?	TomcatStartup 2.5	hpbpsttp.exe	"Apache Tomcat web server part of HP LaserJet ""Printer Tools"" software. What does it do and is it required?"
?	Tommorrow	tomorrow.exe	"??"
N	TomTomHOME.exe	TomTomHOME.exe	"TomTom HOME - free management program for your PC to look after their GPS navigation products"
X	ToolbarInstall	MirarSetup.exe	"Mirar adware"
N	toolbar_eula_launcher	EULALauncher.exe	"Related to Google Desktop"
U	ToolBoxFX	HPTLBXFX.exe	"HP ToolBoxFX - ""provides desktop configuration status and support for every feature"". Supplied with some HP multifunction printers"
X	ToolHelp	hwpv.exe	"Added by a variant of the INFOSTEALER TROJAN!"
X	ToP	LSASS.exe	"Added by the WOWCRAFT.C TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	Top Tilecom	Tilecomtop.com	"Added by the RBOT.BXD WORM!"
?	ToPassSrv	Pktopass.exe	Related to Caere Pagekeeper scanning software (now taken over by Scansoft) Disabling is known to cause problems
X	topat	zlip.exe	"Added by the FLOOD-IG TROJAN!"
U	TopDesk	TopDesk.exe	TopDesk - puts an icon in your system tray that when clicked upon opens a pop-up menu that gives instant access to all of your desktop programs without having to minimize resize move or close other programs or files
X	Topic cPanr	cPaner.com	"Detected by Trend Micro as the SDBOT.AJP WORM! See here"
X	Topic lnternet	lnternet32.exe	"Added by the RBOT-GLZ WORM!"
X	Topic MSNGR32	MSNGR32.com	"Added by a variant of the IRCBOT TROJAN!"
X	Topic Soft	Tilesoft.com	"Detected by Trend Micro as the RBOT.GDH WORM! See here"
X	Topic Tilesys	Tilesys.com	"Detected by Kaspersky as the RBOT.AUS BACKDOOR! See here"
X	ToPicks Starter	Idhost.exe	"TOPicks adware"
U	TopmostClock	TopMostClock.exe	"TopMost Clock - transparent analog clock which displays on top of your other windows"
X	topmoxie	JavaRun.exe	"TopMoxie adware"
X	TopSearch	TopSearch.exe	"TopSearch adware variant"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.