HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	Task Catcher	tasktrap.exe	"Task Catcher - utility that will block unwanted programs from running"
U	Task Catcher Real-Time Detector	tasktrap.exe	"Task Catcher - utility that will block unwanted programs from running"
X	Task Commander	regsvc32.exe	"Added by the AGOBOT-RX WORM!"
X	Task Debugger	sysdll.exe	"Added by the RBOT-CQ WORM!"
X	Task Help	wualcts.exe	"Added by a variant of the RBOT WORM!"
X	Task Manager	taskmngr.exe	"Added by the RBOT.Y WORM!"
X	Task Manager	taskman.exe	"Added by the FORBOT-T WORM!"
X	Task Manager	prcview.exe	"Added by the AGOBOT-RT WORM!"
X	Task manager	taskemngr.exe	"Added by the RBOT-AGA WORM!"
X	Task manager	TikTo.exe	"Added by the RBOT.LV WORM!"
X	Task manager	taskmngr.exe	"Added by the RBOT-AYZ WORM!"
X	Task Monitoring Service	svchost.exe	"Added by the CONE.D WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""tasks"" subfolder of the Winnt or Windows folder"
X	Task Scheduler Engine	schedsvc32.exe	"Added by the RBOT-ASJ WORM!"
X	task service	taskservices.exe	"Added by a variant of the RBOT WORM!"
X	Task service	taskmgs.exe	"Added by a variant of the RBOT WORM!"
X	TASK SETUP	tasksetup.exe	"Added by the RBOT-YR WORM!"
N	Taskbar	Taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
N	TaskBar	CTLTask.exe	"Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects
N	Taskbar Display Controls	"RunDLL deskcp16.dll	QUICKRES_RUNDLLENTRY"
X	Taskbar Service	taskbar.svc	Unidentified adware
X	Taskbar System	tasksys.exe	"Added by a variant of the SDBOT WORM!"
N	Taskbar++	TaskbarPP.exe	"Taskbar++ is a software that allows you to sort (move) the buttons of the Windows taskbar by Drag & Drop"
X	Taskbell.exe	Rund1.exe	"Added by the YIPID TROJAN!"
X	taskdir	taskdir.exe	"Added by the LAGER.AQ TROJAN!"
X	TaskList	tasklist32.exe	"Added by the BANCOS-DX TROJAN!"
X	TaskMan	rundll32.exe	"Added by the DVLDR TROJAN! Note - this is not the valid ""rundll32.exe"" as it's in the WindowsFonts directory"
X	taskmanager	taskmgr.com	"Added by the BEREB WORM!"
X	taskmanager	taskmanager.exe	"Added by the AGOBOT-TF WORM!"
X	TaskManager	[path to trojan]	"Added by the LDPINCH-CF TROJAN!"
X	taskmanger	taskmanger.exe	"Added by a variant of the RBOT WORM!"
X	Taskmgo	[path to file]	"Added by the BANCBAN-T TROJAN!"
X	Taskmgr	Taskmgr.exe	System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory
X	Taskmgr	tskmgr32.exe	Homepage hi-jacker
X	taskmgr	taskmgr.exe	"Added by the Startpage.G hijacker. Note - this is NOT the Windows Task Manager file!"
X	Taskmgr	system.exe	"Added by the PAKES.G TROJAN!"
X	taskmgr	explorer.exe	"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System folder"
N	taskmgr.exe	taskmgr.exe	"Windows Task Manager in Windows XP. If run from the Startup folder
X	taskmgr.exe	paint.exe	Added by a variant of the AGENT.AH downloader TROJAN!
X	taskmgr.exe	mirc.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmgr.exe	paintms.exe	Added by a variant of the AGENT.AH TROJAN!
X	TASKMGRU	TASKMGRU.EXE	"Added by the CWS-M TROJAN!"
X	taskmngr	[path] msnve.exe [path] task.exe	"Added by the FLOOD-EK TROJAN!"
X	taskmngr lptt01	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	taskmngr ml097e	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	TaskMon	taskmon.exe	"Added by the MYDOOM.A or MYDOOM.J WORMS! Note - this is not the legitimate Win9x/Me file of the same name which resides in C:Windows as this version resides in C:WindowsSystem (Win9x/Me)
X	Taskmon driver	winampa.exe	"Added by the LOONY-I TROJAN! Note - this is NOT the popular Winamp media player which has the same filename"
X	taskmone	taskmone.exe	"Added by the SINGU-S TROJAN!"
U	TaskMonitor	taskmon.exe	"The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
X	TaskMrg	csrss.exe	"Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	taskmrg.exe	taskimg.exe	"Added by the DLOADER-QZ TROJAN!"
X	taskopen.exe	taskopen.exe	Added by the HIDD.C TROJAN!
N	TaskPlus	TASKPLUS0.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
N	TaskPlus	TASKPL~1.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
X	TaskReg	[random filename]	"Added by the CBLAD WORM!"
X	TaskS manager	taskmgrs.exe	"Added by the AGOBOT.QU WORM!"
X	Taskschd	TRAYWND.EXE	"Added by the LITMUS.002 TROJAN!"
U	TaskScheduler	TaskSch.exe	"ProSeries accounting software related"
N	taskswitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
X	tasksys	tasksys.vbs	"Added by the BYRON WORM!"
N	Tasktray	CTLTray.exe	Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon.  Also allows you to launch the Taskbar via right-click -> Show Taskbar. The tasktray can be accessed via Start -> Programs -> Creative -> Sound Blaster Audigy -> Taskbar
X	Tasmgr	Taskmgr.bat	"Added by the YPSAN.G WORM!"
X	tat	tatss.exe	"Delfin Promulgate adware variant"
Y	Tau monitor	Taumon.exe	""Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system.""
?	TAudEffect	TAudEff.exe	"TOSHIBA Notebook related. What does it do and is it required?"
U	TB2PROEXE	tb2start.exe	"Timbuktu Pro - remote desktop access software"
U	TBC Pro	tbcpro.exe	"TitleBarClock Pro - displays Day
U	TBC.exe	TBC.exe	"TitleBarClock software"
N	tbctray	tbctray.exe	Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
Y	TBLFUNC	tblmouse.exe	"Aiptek HyperPen driver"
X	tbon	tbon.exe	"BestOffers adware"
U	TBPanel	TBPanel.exe	Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
X	TBPS	TBPS.exe	"WebSearch Toolbar - HuntBar hijacker
N	TBTray	tbtray.exe	VLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel
?	TB_setup	TB_ANI~1.EXE	"??"
X	TB_setup	tb_setup.exe	"HuntBar hijacker
Y	tcactive	tca.exe	"Part of The Cleaner from MooSoft - stops virus trojans before they can do any damage"
N	TCASUTIEXE	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
N	TCASUTIEXE	TCASUTI.exe	Associated with the 3COM diagnostic module (3COM NIC Doctor). No further information is available
N	TCAUDIAG -off	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
?	TCDPbtn	TCDPbtn.exe	"Found on a Toshiba laptop"
?	TCDPlay	TCDPlay.drv	"Found on a Toshiba laptop - sounds like the driver for the CD-ROM but why doesn't it use the standard Windows drivers - any comments?"
U	TClock	TCLOCK.EXE	Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs
X	TClock.exe	tclock_install.exe	"TClock - distributed and installed without user permission by other rogue software or malware. TClock contains no uninstall facility through Windows. As TClock is of dubious origin and usefulness
U	TClockEx	TCLOCKEX.EXE	"Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks"
U	tcmonitor	tcm.exe	"Part of The Cleaner from MooSoft - warns of changes to the registry"
U	TCOYFReminder	tcoyftray.exe	"My ParenTime Fertility Planner Reminder. The calendar provides a quick overview of the status of your fertility"
X	Tcp Application Manager	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	tcp checker	tcpcheck.exe	"Added by the VBBOT-A TROJAN!"
X	TCP Monitoring	LanNSvc.exe	"Added by the RANDEX.AAS WORM!"
X	tcpippui	tcpippui.exe	"Added by the RBOT-APS WORM!"
X	tcpippui32	tcpippui32.exe	"Added by the RBOT-ART WORM!"
X	TCPXP Update	tcpxp.exe	"Added by the RBOT-UL WORM!"
?	TCtryIOHook	TCtrlIOHook.exe	"Toshiba laptop related. What does it do and is it required?"
X	tcupdater	tcupdater.exe	Topconverting.com/180Search adware updater
U	TDispVol	TDispVol.exe	Used on Toshiba computers to make the Fn key have control over the volume on/off
U	TDKSTART	TDKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	TDKTASK	TDKTASK.EXE	Taskbar utility for a "control panel" for a CD-RW
?	TDockNUndock	N/A	"Found on a Toshiba laptop - for use with a docking station?"
U	TDS3	TDS-3.exe	"DiamondCS TDS3 antitrojan. Can be used to scan on demand
?	TDspOff	Tdspoff.exe	"Found on a Toshiba laptop"
N	Teach In Box	teachbox.exe	Tutoring program that comes with a SystemAX Computer
Y	Tech-In-A-Box	techbox.exe	"Tech-in-a-Box ""provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs
N	Telemeter 3.0	telemeter3.exe	Internet connection bandwidth meter from a user ISP
Y	Telepath	telepath.exe	"Drivers for the WinModem versions of the US Robotics ""Telepath"" series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information"
X	Telnet	Telnet.exe	"Added by the VOUMIT-A WORM! Note - this is not the legitimate telnet.exe application which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""mirc32"" folder"
X	Telnet24	[random filename]	"Added by the RBOT-ARD WORM!"
Y	TELUS Security service	freedom.exe	"Freedom Internet Security
X	TempCom	[randomname].com	"Added by the TRAXG WORM!"
X	tempx	tempx.exe	Added by the TEMPEX.A TROJAN!
X	Tencent QQ	"Rund1132.exe qq.dll	Rundll32"
X	Terminal Update	biosefui.exe	"Added by the PPDOOR-O TROJAN!"
X	Terminate Popup	ZPU.exe	"Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here"
X	Terminate Popup	FPUK.exe	"Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here"
U	TEscKey	TEscKey.exe	Toshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
N	Tesco.net	"rundll32 [path] RyDial.dll	QuickStart"
?	Tesla	TESLA.EXE	"??"
X	test	i love you.exe	"Added by the SINGU-T TROJAN!"
X	Testing 123	msdata.dat	"Added by the NITS.A WORM!"
X	testit.exe	testit.exe	"ISTBar adware"
?	TExBUtil Registry	TExBUtil.exe	"??"
N	TextAloud	TextAloudMP3.exe	"TextAloud MP3 - convert text into spoken words and MP3s"
N	Textbridge Instant Access OCR	telepath.exe	"TextBridge from Scansoft. OCR (optical character recognition) software for scanning documents into popular editing applications. Available via Start -> Programs"
X	TEXTCONV	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	TEXTCONV	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
U	TFncKy	TFncky.exe	Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
U	TFNF5	TFNF5.exe	"Toshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5>

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list