HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	c32cs2	c32cs2.exe	"Cyber Sentinel - internet filtering software"
X	C7	[path to worm]	"Added by the MEDIAKILL.A WORM!"
X	C:WINDOWSIEXPLOR.EXE	IEXPLOR.EXE	"""Pop Marketing"" adware"
X	C:WINDOWSVCMnet11.exe	VCMnet11.exe	"Windows AFA Internet Enhancement - a browser hijacker
X	C:WINDOWSWinTask.exe	WinTask.exe	"""Pop Marketing"" adware"
U	CA-AMAgent	amagent.exe	"Unicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery
Y	CaAvTray	CAVTray.exe	"eTrust™ EZ Antivirus system tray application from Computer Associates"
X	Cabchk	Cabchk.exe	"Added by the GEMA TROJAN!"
X	Cabchk32	Cabchk32.exe	"Added by the GEMA TROJAN!"
X	CABCInstall	CABCInstall.exe	"Ignite Technologies (was CABC) content delivery software"
U	CacheBoost	trayicon.exe	"CacheBoost ""optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers
X	CacheLoader	[path to trojan]	"Added by the DLOADER-NZ TROJAN!"
N	Cacheman	Cacheman.exe	"Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up"
Y	CacheMgr	CacheMgr.exe	"Sophos Antivirus Remote Update"
U	CacheSentry Pro	CacheSentry Pro.exe	"""CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache"""
U	CacheSentry Pro	CacheSentry Pro.exe	"""CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache"""
N	CACStarter	cacstart.exe	Cash A Check - check writing software
U	Caddais BackupOnDemand	BODMon.exe	"Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing
U	Cadenza	CdzSvc.exe	"Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices"
U	CADS	cads.exe	"Cyber Sentinel - internet filtering software"
U	CafeStation	CafeStation.exe	"""CafeSuite is the solution for your internet cafe. Our software provides you with ameans to control the workstations
N	CAgent	CAgent.exe	"Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents"
X	cAgOu	[filename].hta	"Added by the KAKWORM WORM!"
N	CahootWebcard	CahootWebcard.exe	"""The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details"". Run manually when needed"
X	caidiysetup	diynetsetupuni.exe	"DIYNet adware"
Y	CAISafe	isafe.exe	"Part of Computer Associates eTrust EZ Antivirus"
U	CaISSDT	caissdt.exe	"Computer Associates Dashboard Tray applet"
N	Cal Reminder Shortcut	calrem.exe	Produces a pop-up reminder of events scheduled using the MS Office Calendar
X	Calc Microsoft Windows	wincalc.exe	Added by an unidentied WORM or TROJAN!
X	CALC32	CALC32.EXE	"Added by the SPYBOT-EC WORM!"
N	Calendar 200X Reminder	calendar.exe	"Calendar 200X - shows holidays
U	Calendarscope	cs.exe	"Calendarscope calendar software"
X	calk	calk.exe	"Added by the STARTPA-FH TROJAN!"
?	CallBumping	cbpopw.exe	"??"
U	CallCenter Main Application	V3calmcp.exe	"""V3 Inc. CallCenter is a free 32-bit
U	CallCenter Printer Interface	V3faxecp.exe	"""V3 Inc. CallCenter is a free 32-bit
N	CallControl	ftctrl32.exe	"FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed
N	CamCheck	CamCheck.exe	"NuCam camera software related"
U	Cameno	Cameno.exe	"Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above"
N	Camera Detector	CAMDET~*.EXE	"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N	Camera Detector	Camdetect.exe	"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N	Camera Detector	DEVDET~*.EXE	"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N	Camio Viewer x	IXApplet.exe	Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
?	CamMonitor	hpqcmon.exe	"From HP and related to digital imaging"
N	Canada	Canada.exe	"Known to be a dialler - but is it maliscous or clean?"
U	Canary	canary-std.exe	Canary keystroke logger/monitoring program - remove unless you installed it yourself!
X	candy	command32.exe	"Added by the RBOT-LV WORM!"
X	candynet	Taskmsg.exe	"Added by the RBOT-NA WORM!"
U	Canon MultiPASS Status Monitor	monitr32.exe	Cannon Multi-Pass status monitor - your choice
?	Canon PC1200 iC D600 iR1200G Status Window	CAPM1LAK.EXE	"Cannon printer related - is it required in startup?"
N	Canon Printer Monitor BJCxxx	Cjstlst.exe	Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
?	CAP3ON	CAP3ONN.EXE	"Canon driver
N	Capfax	capfax.exe	"PhoneTools fax software"
U	CAPing	CAPing.exe	Citibank Citianywhere software
Y	Capon	Capon.exe	Canon printer driver
Y	Capon	Caponn.exe	Canon printer driver
X	CaptionMgr32	crssr.exe	"Added by the ZAR.A WORM!"
X	capture	capture.exe	"Added by the THEEF-B TROJAN!"
N	Capture Express 2000	capexp.exe	"Capture Express - screen capture utility"
N	Card Monitor	REGCNT09.exe	For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
X	Care20	Care20.exe	"TopMoxie adware"
U	Care2GTU	Care2GTU.exe	"Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is
U	carpserv	carpserv.exe	"Associated with Zoltrix and Conexant modems - enables the internal modem speaker
X	CARPserver	CARPserver.exe	"Added by the BANKER-AN TROJAN!"
U	CARPservice	carpserv.exe	"Associated with Zoltrix and Conexant modems - enables the internal modem speaker
X	cartao	[path to file]	"Added by the DLOADER-QD TROJAN!"
X	cartao	conflicted.exe	"Added by the DADOBRA-DV TROJAN!"
X	cartao	killing.exe	"Added by the DLOADER-QN TROJAN!"
X	CAS Client	casclient.exe	"CasinoClient adware"
X	Cas2Stub	cas2stub.exe	"CasinoClient adware"
U	CasAgnt	CasAgnt.exe	Program by Extended Systems which allows you to sync your Casio PDA with your PC
X	Casdvqwa	bmqnzkg.exe	"Added by the RANDEX.BE WORM!"
X	caseyvideo	CaseyVideo.exe	Malware causing p0rn popups
X	caseyvideo	caseyvideo[*].exe [* = digit]	Malware causing p0rn popups
X	CashBack	cashback.exe	"Part of eXact Advertising Software
X	CashFiesta	Cashfiesta.exe	"CASHFIESTA.A pay-per-surf adware"
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	"Cashsurfers CashBar Navigator - ""The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"""
X	CashToolbar	CD_Load.exe	"CashToolbar Downloader-MY adware"
X	CashToolbar	svchost.exe	"CashToolbar Downloader-MY adware. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	Cassandra	[10 to 14 random char]THD.EXE	"Added by the KREPPER-AI TROJAN!"
X	Cassandra	cassandra.exe	"SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as a variant of the KREPPER TROJAN!"
X	CasStub	casstub.exe	"Added by the CASS-A TROJAN!"
X	Catalyst Control Centre	atixvdm.exe	"Added by the RBOT.DMW TROJAN!"
Y	CAVRID	CAVRID.exe	"eTrust™ EZ Antivirus Real Time Infection Report from Computer Associates"
Y	CAVS	CAVS.exe	"Cheyenne (now eTrust) antivirus"
X	CAZNOVAS	CAZNOVAS.exe	"Added by the CAZNO TROJAN!"
X	CBACK.EXE	CBACK.EXE	"Added by the PENTA-A TROJAN!"
U	CBWAttn	CBWAttn.exe	"Required for Bitware to answer incoming faxes
U	CBWHost	CBWHost.exe	"Required for Bitware to answer incoming faxes
?	CBWUser	CBWDial.exe	"Associated with Bitware that integrates fax
X	CC2KUI	comet.exe	"Comet Cursor adware"
X	Ccao	regedit.exe	"Probably a variant of MediaTickets adware. Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in a ""mduu"" subfolder
Y	ccApp	ccApp.exe	"Part of Norton AntiVirus. Auto-protect and E-mail check will not function without this"
X	ccApp	[random filename]	"Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus"
X	ccApp	WMADZ.EXE	"Added by the RBOT-LJ WORM!"
X	ccApp	.EXE	"Added by the RBOT-LJ WORM!"
X	ccApp	gcasServ.exe	"Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name"
X	ccAppr	svcrhost.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccAppr	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccAppr	outIook.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccAppr	svcshost.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccApps	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	ccApps	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
X	ccApps	N/A	"Added by the KANGAROO-A TROJAN!"
X	ccApps	ccApps.exe	"Added by the KANGAROO-B WORM!"
U	CCD Manager	DDS.EXE	"Project Labs Century CD manager for their CD/DVD storage device"
N	Ccdecode	"rundll32.exe streamci	StreamingDeviceSetup"
Y	CCDoctorLogonTesting	ccdoctor.exe	"Checks your system to make sure it's configured properly for running Rational ClearCase
Y	ccenter	CCenter.exe	"RAV AntiVirus"
Y	CcEvtMgr	ccEvtMgr.exe	"Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via ""ccApp"" and was not required as a seperate entry but a recent update changed this"
X	ccEvtMrg.exe	ccEvtMrg.exe	"Added by the RBOT.GZ WORM!"
X	ccExecute	bootcfg1.exe	"Added by the NEMSI-B VIRUS!"
X	ccHelp	ccHelp.hta	"""Searchq"" adware"
U	ccleaner	ccleaner.exe	"CCleaner - removes unused files from your system"
X	ccpApps	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
X	ccpApps	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
U	ccProxy	CCPROXY.EXE	"Part of Norton Internet Security
Y	CcPxySvc	CCPXYSVC.exe	"Part of Norton's AntiVirus 2003
X	ccreg	explorer.exe	"Added by the ZCREW TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System subfolder"
Y	CcRegVfy	ccRegVfy.exe	"Part of Norton AntiVirus 2003. ""ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"""
X	ccRegVfY	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccRegVfY	svcrhost.exe	"Added by the TACTSLAY.A TROJAN!"
X	ccRegVfY	svcshost.exe	"Added by the TACTSLAY.A TROJAN!"
Y	ccSetMgr	ccSetMgr.exe	"Part of Norton AntiVirus 2004. What does it do?"
X	ccsvit.exe	ccsvit.exe	"Added by the STARTPA-HP TROJAN!"
X	ccUpdate	ccUpdate.exe	"Added by the AGOBOT.YS WORM!"
U	ccWasher	aolwasher.exe	"Webroot Cache & Cookie Washer - cleaning browser tracks
U	CCWC7a	ac.exe	"Moleculesoft Cache
U	CCWC7I	idxl.exe	"Moleculesoft Cache
U	CCWC7s	stealth.exe	"Moleculesoft Cache
N	CD Storage Master	cdstorager.exe	"CD Storage Master - a program designed to catalog CD information
X	cd1	cd1.exe	Premium rate adult content dialler
N	CDANTSRV	CDANTSRV.exe	"C-Dilla License Management software. Used for any program that uses C-dilla Protection

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list