HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	blah service	tazkmgr.exe	"Added by the RBOT.UA WORM!"
X	blah service	FaLeH.exe	"Added by the RBOT-AES WORM!"
X	blah service	microsoft.exe	"Added by a variant of the RBOT WORM!"
X	blah service	evosys.exe	"Added by a variant of the RBOT WORM!"
X	blah service	win32.exe	"Added by the RBOT-AXO WORM!"
X	Blah service	CCAPPS32.EXE	"Added by the RBOT.TV WORM!"
X	blah services	iczw.exe	"Added by the RBOT-GMP WORM!"
X	blahh service	msengine.exe	"Added by a variant of the RBOT WORM!"
X	blahx service	msnjompa.exe	"Added by the SDBOT.AML WORM!"
X	Blank AntiViri	AUT0EXEC.BAT StartUp	"Added by the BRONTOK-CJ WORM!"
N	BlazeChanger	FBZPaper.exe	"Ember graphic file viewer manager and touch-up system"
?	BlazeServoTool	MediaDetector.exe	"Related to BlazeDVD from BlazeVideo - which is ""is leading powerful and easy-to-use DVD player software."" What does it do and is it required?"
N	bldbubg	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BLF	blf.exe	"Added by the DELBOT-M WORM!"
U	blinkx	blinkx.exe	"Blinkx Desktop ""Smart Folders"" software"
N	Blitzz BWI715	WLANmon.exe	Blitzz Technology BWI715 Wireless PC modem connection monitor
X	BLMessagingIntegration	blengine.exe	"BuddyLinks adware"
U	BlockAds	blads.exe	"A Tweak-XP component blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks"
X	BlockChecker	Block-checker.exe	"BlockChecker adware"
X	Blocker System611 Monitoring	PopUpBlocker611.exe	"Added by the RBOT.BLJ WORM!"
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
U	BLOG	rundll32.exe [path] BatLogEx.DLL StartBattLog	IBM Thinkpad battery management utility that logs changes in battery conditions such as charging discharging etc
U	blsloader	blsloader.exe	"BellSouth ISP Internet Tools"
X	blss	blss.exe	"Added by the BLARUL TROJAN!"
N	BLSTAPP	blstapp.exe	Puts access to Creative's BlasterControl in the System Tray
N	Blubster	Blubster.exe	"Related to Blubster Music sharing service"
U	Blue Frog	bluefrog.exe	"Blue Frog by Blue Security Inc. - actively fights spam by posting complaints on the sites advertised by the spam you receive"
X	Blue Service	[path to trojan]	"Added by the BANCOS-BCW TROJAN!"
?	BlueLight_uoltray	exec.exe	"Related to BlueLight Internet. What does it do and is it required?"
U	BlueSoleil	BLUESO~1.EXE	"BlueSoleil Bluetooth wireless manager from IVT Corporation"
U	BlueSpace NE	BlueSpaceNE.exe	"""BlueSpace NE is a utility program used to run the Bluetooth function on VAIO computers that support the Bluetooth function or on VAIO computers connected to the Bluetooth USB adapter"". Shortcut available via Start -> Programs"
X	Bluetooth Config	btwindin32.exe	"Added by the SDBOT-DFN WORM!"
U	Bluetooth Connection Assistant	LBTWiz.exe	"Bluetooth connection manager for Logitech based bluetooth wireless products"
?	Bluetooth HCI Monitor	RunDll32 HCIMNTR.DLLRunCheckHCIMode	"Related to the Bluetooth short-range wireless communications technology. For more information on Bluetooth see here. What does it do and is it required?"
U	BlueToothAuthentication Agent	RunDLL32.exe irprops.cpl BluetoothAuthenticationAgent	"Associated with BlueTooth software designed to allow bluetooth mobile devices to authenticate to the computer when connecting a PDA to your computer - necessary for the computer and the PDA to communicate. Should you get the error message ""Rundll irprops.cpl missing entry Bluetooth authentication agent"" click here for more information. In case you no longer have BlueTooth support installed and don't need it simply uncheck the entry in Msconfig > Startup"
U	Blueyonder Instant Support Tool	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city state etc and gets written to a log file"". Blueyonder Instant Support is required to run with the Help and Support program. If you uncheck it and and then run Help and Support it will add another Blueyonder Instant Support in the startup menu. If you remove Blueyonder Instant Support in add/remove programs some help menus in help and support will not be available. You decide"
N	BMail Installation	FTP_back.exe	"Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not"
X	Bman	BMan1.exe	Abcsearch.com/DealHelper adware variant
U	BMMGAG	Rundll32 PWRMONIT.DLL StartPwrMonitor	Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
U	BMMLREF	BMMLREF.EXE	Battery Manager for IBM ThinkPad laptops
U	BMMMONWND	rundll32.exe [path] BatInfEx.dll BMMAutonomicMonitor	Battery power management utility for Lenovo (IBM) ThinkPad laptops
U	BMO MasterCard Wallet	EWALLET.EXE	The wallet conveniently stores billing shipping and payment information on your PC
X	BMonq	bmonq.exe	"Detected by Trend Micro as the CLICKER.HZ TROJAN! See here"
N	BMupdate	BMupdate.exe	Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example and you install the driver self-install
X	bmw	bmw.exe	"Added by the AGOBOT.BBV BACKDOOR!"
X	BMZ	bmz.exe	"NCase adware"
X	Bndt32	Bndt32.exe	"Added by the LACON WORM!"
X	Bnexe	[random filename]	"Added by the KITRO.D (or ARGEN.A) WORM!"
U	BO1HelperStartUp	BO1HEL~1.EXE	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	BO1HelperStartUp	Bo1helper.exe	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	Boarddata	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM!"
X	boat32	boat32.exe	"Added by a variant of the RBOT WORM!"
X	boby	csrs.scr	"Added by the BANCBAN-PC TROJAN!"
Y	BOC-412	BOC412.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.12"
Y	BOC-420	BOC420.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.20"
Y	BOC-421	BOC421.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.21"
Y	BOC-422	BOC422.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.22"
Y	BOC-423	BOC423.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.23"
Y	BOC-424	BOC424.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.24"
Y	BOC-425	BOC425.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.25"
Y	BOC-426	BOC426.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.26"
Y	BOC-427	BOC427.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.27"
Y	BOCleanautostart	Boclean.exe	"NSClean's BOClean anti-trojan software"
U	BOINC Manager	boincmgr.exe	"BOINC manager - ""controls the use of your computer's disk network and processor resources"""
U	Boingo Wireless Utility	Icon###XXX#X#.exe	"Starts the Boingo Wireless utility used to detect and login into Boingo wireless hotspots. The filename may be autogenerated when installing two different variations along the lines listed here where # is a number and X is a letter. Shortcut available via Start -> Programs"
X	bolenja	bolenja.exe	"Added by the WANTVI.BF TROJAN!"
X	bolenjx	bolenjx.exe	"Added by the ELDYCOW.O TROJAN!"
X	boler.exe	syser.exe	"Added by the RBOT-AYS WORM!"
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	"Bonzi Buddy adware - see here for removal instructions"
X	boo	boo.exe	"Adware downloader - detected by Kaspersky as the FAVADD.O TROJAN!"
X	BookedSpace	RunDLL32.EXE bs2.dll DllRun	"BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""bs2.dll"" file is located in the Winnt or Windows folder"
N	BookmarkCentral	BMLauncher.exe	"Bookmark Express - "offers a more flexible way to manage Web site bookmarks regardless of which browser you use""
N	BookMarkSink	syncit.exe	Bookmark synchronization utility
N	BookMarkSync	syncit.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks favorites and favorite files from any computer or any browser"". Only installed with the users explicit permission and generally only remains running if the user decides to subscribe to the service. If it is no longer required it should be uninstalled to prevent a large number of clients 'checking in' to the server that have no chance of synchronizing"
N	BookMarkSync2It	sync2it.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks favorites and favorite files from any computer or any browser"". Only installed with the users explicit permission and generally only remains running if the user decides to subscribe to the service. If it is no longer required it should be uninstalled to prevent a large number of clients 'checking in' to the server that have no chance of synchronizing"
U	Boost XP Service	bxservice.exe	"Boost XP from Systweak - WinXP tweaking utility"
X	boot	boot.exe	"Added by the PUPPET-A TROJAN! Located in the System (9x/Me) or System32 (NT/2K/XP) folder"
U	Boot	Boot.exe	"Part of Acer Empowering Technology. ""Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles or to create their own customized profiles"". Located in the ""AcerEmpowering TechnologyePower"" directory"
X	Boot Check	bootchk.exe	"Added by the DELBOT-AB WORM!"
X	Boot Config	bootconfig.exe	"Added by the FLOOD-EV TROJAN!"
X	Boot K	bootk.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Manager	Njgal.exe	"Added by the KILO TROJAN!"
X	Boot Manager	bootmng.exe	"Added by a variant of the SPYBOT WORM!"
X	Boot Server	bootserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Service	bootservice.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Service	bootsv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Verify	bootvfy.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	BootCfg	Install.log.vbs	"Added by the YPSAN.D WORM!"
X	BootCTRL	bootctrl.exe	Added by an unidentified WORM or TROJAN!
X	BootLoader	BootLoader.exe.vbs	"Added by the WATERWORKS WORM!"
X	bootpd.exe	bootpd.exe	"Added by the AGENT-DT TROJAN!"
X	BootsCfg	wscript.exe [path] Date.POP.vbs	"Added by the KUULLIO WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	BootsCfg	wscript.exe [path] All Users.vbe	"Added by the SPILTRON WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	BootsCfg	wscript.exe Install.log.vbs	"Added by the YPSAN.E WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""Install.log.vbs"" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder"
X	BootsCfg	wscript.exe [path] All Users.vbs	"Added by the SPILTRON WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
Y	BootSkin Startup Jobs	BootSkin.exe	"Stardock BootSkin is a program that allows users to change their Windows 2000 and Windows XP boot screens"
U	BootStatus	BOOTST~1.EXE	Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it it has no more effect on resources
U	BootWarn	BootWarn.exe	"From here: ""Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from ""Start Programs Norton AntiVirus"". If Norton AntiVirus comes up without problems then fix this entry from the Msconfig Startup tab - it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages"""
X	boot_reg	[path to file]	"Added by the BANCBAN-CA TROJAN!"
N	Bose Wave/PC Monitor	wavepcmonitor.exe	"System Tray access for this system (more info on the system here). Available via Start -> Programs"
X	BossIdea	winlogin.exe	"Added by the LINEAGE-I TROJAN!"
?	Boston	Boston.exe	"Part of the Boston Acoustics USB speaker systems. What does it do and is it required?"
X	Bot Loader	svchostt.exe	"Added by the GAOBOT.ALV WORM!"
X	Bouncer RunStartup	bouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X	Bouncer RunStartup	LiveUpdate.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose ""custom"" uninstall as ""automatic"" may remove other programs - see here"
X	boy lovers of bsd	ilikeboys.exe	"Added by the MYTOB.LY WORM!"
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	BPCV2	BPCV2.exe	"BroadcastPC adware"
X	BPCv2 re	bpc2 re inst.exe	"BroadcastPC adware variant"
U	BPK	bpk.exe	"Blazing Tools Perfect Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
N	BPServer	G6FTPSrv.exe	"BulletProof FTP Server"
U	BQTray.exe	BQTray.exe	"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility hence the U recommendation. Create your own desktop shortcut to start manually"
X	Brasil	Brasil.exe	"Added by the OPASERV.E WORM!"
X	Brasil	BRASIL.PIF	"Added by the OPASERV.E WORM!"
X	BrasilOld	[worm filename]	"Added by the OPASERV.P WORM!"
X	BraveSentry	BraveSentry.exe	"BraveSentry spyware remover - not recommended see here"
X	braviax	braviax.exe	"Added by the FAKEALER.LE TROJAN!"
X	Brct	trdb.exe	"Detected by Kaspersky as the PURITYSCAN.Y TROJAN!"
U	Break_Reminder	BREAK REMINDER.exe	"Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here"
Y	Bredbandsbolaget	servicecenter.exe	"Related to the Brebband Swedish Broadband provider"
X	Breg	bcre.exe	"BroadcastPC adware variant"
X	Breg	bptre.exe	"BroadcastPC adware variant"
X	Breg	breg.exe	"BroadcastPC adware"
X	Bridge	rundll32.exe [path] Bridge.dllLoad	"Flingstone.com browser hijacker. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
Y	Brindys BriTray	BRITRAY.EXE	"Main process for the following applications: GEDEX SICARIO BRINOTES BRIRESPA SICURE TRASGO UNDOCS FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation web software autoupdate notification windows interprocess communication tray bar icons & menus alarms (brinotes) and common web launching from the mentioned applications. Can be stopped safely once run if so desired"
U	BrmfRmPA	BrmfRmPA.exe	Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate
U	broadband medic	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city county etc and gets written to a log file"". ntlroadband Help is required to run with the Help and Support program. If you uncheck ntlroadband Help and and then run Help and Support it will add another ntlroadband Help in the startup menu. If you remove the ntlroadband Help in the add/remove program some help menus in help and support will not be available. You decide"
N	Broadband Wizard	bbwiz.exe	"Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs"
N	BroadCamRun	broadCam.exe	"BroadCam is an easy to use video streamer designed to broadcast live video using a webcam (or other camera) and microphone"
U	Broadcom Wireless Manager UI	bcmntray.exe	"Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems"
N	Broadcom Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
X	Bron-Spizaetus	CVT.exe	"Added by the RONTOKBRO WORM!"
X	Bron-Spizaetus	norBtok.exe	"Added by the RONTOKBRO.B WORM!"
X	Bron-Spizaetus	[path to file]	"Added by the BRONTOK-F WORM!"
X	Bron-Spizaetus	bronstab.exe	"Added by the RONTOKBRO.C WORM!"
X	Bron-Spizaetus	eksplorasi.exe	"Added by the RONTOKBRO.J WORM!"
X	Bron-Spizaetus	ElnorB.exe	"Added by the RONTOKBRO.D WORM!"
X	Bron-Spizaetus	sempalong.exe	"Added by the BRONTOK-E WORM!"
X	Bron-Spizaetus	RakyatKelaparan.exe	"Added by the BRONTOK-J or BRONTOK-L WORMS!"
X	Bron-Spizaetus-5118REPM	komodo-6321422.exe	"Added by the BRONTOK-R WORM!"
X	Bron-Spizaetus-cfgmktoq	bbm-qotkmgfc.exe	"Added by the BRONTOK-M WORM!"
X	Bron-Spizaetus-cfgmmnru	bbm-urnmmgfc.exe	"Added by the BRONTOK-N WORM!"
X	BRoNToK	BRoNToK.exe	"Added by the BRONTOK-CG WORM!"
X	BrowseProxy	FindService.exe	"Actual Names (AdvSearch) Internet Keywords parasite"
X	browser	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	browse.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser aid	browseraid.exe	"BrowserAid/BrowserPal foistware"
X	Browser Help Svc	BHSV.EXE	"Added by the RBOT-AVQ WORM!"
Y	Browser Hijack Blaster	bhblaster.exe	"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	"BrowserAid/BrowserPal foistware"
U	Browser Sentinel	BrowserSentinel.exe	"Browser Sentinel - notifies you if a program wants to penetrate into Internet explorer add itself to the Windows auto-run list or change your home page"
X	BrowserUpdateSched	[random filename]	"ZenoSearch adware"
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
X	BrO_AcT	BrO-AcT.exe	"Added by the SILLYFDC-D WORM!"
X	brwdiag	[path to worm]	"Added by the STRATIO-BN WORM!"
N	BS Player	bsplayer.exe	"BSplayer - A video player used to play avi mpg wmv and other multimedia files"
N	BsCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
X	Bsoft lppt01	Bsoft.exe	"RapidBlaster variant (in a ""BelmontSoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	bsplayer	bsplayer.exe	"BSplayer - a video player used to play avi mpg wmv and other multimedia files"
X	BSserver	FileKan.exe	"Added by the VB.CBW WORM!"
X	BSVCHOST	SVCH0ST.EXE	"Added by the VOXOM TROJAN! Notice the digit ""0"" in the filename rather than the upper case ""o"""
X	Bsx3	RunDLL32.EXE bs3.dll DllRun	"BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""bs3.dll"" file is located in the Winnt or Windows folder"
X	BT	[path to trojan]	"Added by the LITEBOT-B TROJAN!"
U	BT Broadband Desktop Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city county etc and gets written to a log file"". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide"
U	BT Broadband Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address city county etc and gets written to a log file"". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide"
X	BT00003*	abcdefg23.exe	"Added by the VB-VT TROJAN where * = 56 or 7!"
X	BT00003*	hiklmnop27.exe	"Added by the VB-VT TROJAN where * = 23 or 4!"
U	btbb_wcm_McciTrayApp	McciTrayApp.exe	"System tray access to Motive's Broadband 2.0 configuration and repair utility"
?	btinst	btinst.exe	"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
U	BTModemProtection	BTModemProtection.exe	"BT Privacy Online modem protection software see here"
X	btmsre.exe	btmsre.exe	"Detected by PCTools as the SDBOT.ACIK BACKDOOR! See here"
U	BTopenworld	DialBTYahoo.exe	BT Yahoo! internet connection manager
?	BTSETBOOTKEY	BTSetBootKey.exe	"Related to a USB Bluetooth adaptor. What does it do and is it required?"
U	BtStart	btstart.exe	"Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software"
U	bttray	bttray.exe	System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places setup wizard advanced configuration quick connect and shutdown device
Y	BTUSRBDG	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list