HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	DeeEnEs	DeeEnEs.exe	"DeeEnEs - automatically updates a dynamic IP address when it changes"
X	deejay	forboo.exe	"Added by the FORBOT-AY WORM!"
X	Deewoo	ncntnkwd.exe	Identified as a variant of the AdWare.Win32.ZenoSearch.am malware
X	Default	explore.vbs	"Added by the ALLEM WORM!"
X	Default	mtask.vbe	"Added by the ALLEM WORM!"
X	default	shell32.exe	"Added by the BINGHE TROJAN!"
X	Default	_default.pif	"Added by the RUBBLE-C WORM!"
U	default	mskbw.exe	"PC Surveillance PRO surveillance software. Uninstall this software unless you put it there yourself"
U	Default Manager	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
X	Default System Research	vhchost.exe	"Added by the TARNO.I TROJAN!"
X	Default web browser	IexpIore.exe	"Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer)
X	DefaultConfiguration	defaultconfh.exe	"Added by the AGOBOT-JC WORM!"
X	Default_Page_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	Default_Search_URL	http://find.naupoint.com	"Naupoint browser hijacker"
X	DefendAPc	DefendAPc.exe	"DefendAPc rogue security software - not recommended
X	defender	defender25.exe	"DollarRevenue adware"
X	defender	dfndref_7.exe	"DollarRevenue adware"
X	defender	[path to trojan]	"Added by the VB-BAQ TROJAN!"
X	DefensaAntiMalware	pgs.exe	"DefensaAntiMalware
X	Defense Center	defcnt.exe	"Defense Center rogue security software - not recommended
X	DefenseNetSurfage	GDC.exe	"DefenseNetSurfage rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
?	defergui	defergui.exe	"Related to IBM Standard Software Installer. What does it do and is it required?"
U	DefMgr	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
X	defragm_check	defragment.exe	"CoolWebSearch parasite variant"
X	defragsys	svchost.exe	"Added by the BIFROSE-TH TROJAN! Note - this is not the legitimate svchost.exe process which should normally figure in Msconfig/Startup!"
U	DefragTaskBar	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	defragTaskBar.exe	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Deko550	Deko550.exe	"Associated with the Deko550 entry-level SD real-time graphics system from Avid Technology"
U	Delay	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
X	DelayLoad	msprint.exe	"Added by a variant of the Win32.Agent.ryo malware - see here"
U	Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
N	DelayShred	ShrCL.EXE	McAfee Shredder - not required at startup. You can run it manually via McAfee Security Center
?	delcab	deltreew.exe C:cabs	"??"
X	Delete Me	worm.exe	"Added by the DOOMHUNTER WORM!"
U	DeleteHistoryFree	dhf.exe	"Delete History Free - ""Privacy protection software for deleting Internet surfing and other computer activity tracks from your PC"""
U	Dell AIO Printer A920	dlbkbmgr.exe	System Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A940	dlbabmgr.exe	System Tray application for the Dell Photo AIO Printer 940 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A960	dlbfbmgr.exe	System Tray application for the Dell Photo AIO Printer 960 that enables scan or fax functions to run directly from the printer via the buttons
N	Dell Alert	DAMon.exe	""Dell Alert" utility
U	Dell DataSafe Scheduler	DataSafeOnlineScheduler.exe	"Scheduler for Dell DataSafe™ Online which ""helps protect your music
U	Dell PanelMgr	SSMMgr.exe	"Monitors ink levels
U	Dell Photo AIO Printer 922	dlbtbmgr.exe	System Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell Photo AIO Printer 942	dlbubmgr.exe	System Tray application for the Dell Photo AIO Printer 942 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell Photo AIO Printer 962	dlbxmon.exe	DellPhoto AIO Printer 962 Device Monitor
N	Dell QuickSet	quickset.exe	Dell taskbar icon allowing you to quickly change settings
Y	Dell Webcam Central	WebcamDell.exe	"Dell Webcam Central - webcam management software controlling aspects such as picture control
N	DELL Webcam Manager	DellWMgr.exe	Dell Webcam Manager - Webcam management software provided on Dell PCs
N	Dell Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
Y	DellAutomatedPCTuneUp	PTAgnt.exe	"PC TuneUp from Dell - ""silently monitors your system
?	DellDMI	delldmi.exe	"Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
U	DellSupport	DSAgnt.exe	Dell Support Agent offers additional support and update features for your Dell computer or laptop
U	DellSupportCenter	sprtcmd.exe /P DellSupportCenter	"Dell Support Center (provided by SupportSoft
U	DellTouch	MMKeybd.exe	Dell multimedia keyboard manager. Required if you use the additional keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
?	DellTransferAgent	TransferAgent.exe	"Found on Dell computers. What does it do and is it required?"
X	delmsbb	delmsbb.exe	"180Search adware"
X	delol	hiquooc.exe	"Added by the BDOOR-AMP TROJAN!"
X	delsaap	delsaap.exe	"NCase adware"
?	delstart	delstart.exe	"Reportedly part of BT ISP software - what does it do and is it required in startup?"
X	delsubmit	"rundll32.exe advpack.dll	DelNodeRunDLL32 submit.exe"
U	DeltaIITaskbarApp	DeltaIITray.exe	"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
?	DelTmp	DelTemp.exe	"Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?"
N	DeltTray	deltray.exe	"System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut
X	DeluxeCommunications	Dxc.exe	"Deluxe Communications adware - successor to SurfSideKick"
X	DELXP Protocol	delxp.exe	"Added by a variant of the SDBOT WORM!"
?	demon	demon.exe	"Part of the French Wanadoo ADSL extense pack. What does it do and is it required?"
X	Deneca	Virus salvado	"Added by the DELUZ VIRUS!"
X	Depassx	Xfsa.exe	"Added by the SDBOT-SK WORM!"
U	DepFrez	frzstate.exe	"Deep Freeze from Faronics Coporation. ""Freezes"" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators
X	deryheruxc	keepSafe.exe	"Added by the KILLAV.KAX TROJAN!"
X	DescargaBromas	"rundll32.exe MSA64CHK.dll	DllMostrar"
?	Description of Shortcuts	*.exe	"* seems to be a sequence of alphanumerics that can be different
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	"??"
X	DeskAd Service	DeskAdServ.exe	"DeskAd.Service adware"
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	"DeskFlag - animated USA flag on the desktop"
X	DeskMateAutoUpdate	DeskMateAutoUpdate.exe	"DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related"
U	deskmech	deskmech.exe	"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
U	desksaver	desksaver.exe	"Part of Advanced Desktop Shield
U	DeskSaver	DeskSaver.exe	"DeskSaver from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". The Pro version also includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
U	DeskSaver Pro	DeskSaver.exe	"DeskSaver Pro from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". Includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
U	desksaver.exe	desksaver.exe	"Part of Advanced Desktop Shield
U	Desksite CMA	cma.exe	"DeskSite CMA siftware - ""retrieves new content from the DeskSite Data Center"""
U	DeskSlide	DeskSlide.exe	"""DeskSlide is utility for automating wallpaper changes on your desktop"""
U	DeskSpace	deskspace.exe	"DeskSpace desktop management utility from Otaku Software Pty Ltd - which ""gives you more space for your windows and icons. You can eliminate desktop clutter by arranging your windows and icons across up to six desktops
X	Desktop	"rundll32.exe msconfd.dll	Restore ControlPanel"
X	desktop	desktop.exe	"Added by the SDBOT.MD WORM!"
X	Desktop	Desktop.com	"Added by the VB-DRN WORM!"
X	desktop	desktop.ini.vbs	"IE-Title malware"
N	Desktop Architect	DATRAY.EXE	"Desktop theme manager available
Y	Desktop Armor	DesktopArmor.exe	"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
U	Desktop Calendar	Desktop Calendar.exe	"Desktop Calendar - ""Desktop Calendar is a highly customizable calendar program that turns your desktop into a traditional wall calendar
X	Desktop Defender 2010	Desktop Defender 2010.exe	"Desktop Defender 2010 rogue security software - not recommended
U	Desktop iCalendar	Calendar.exe	"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
U	Desktop iCalendar	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
U	Desktop iCalendar	Desktop iCalendar.exe	"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
U	Desktop iCalendar Lite	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
U	Desktop iCalendar Lite.exe	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
U	Desktop iCalendar.exe	Desktop iCalendar.exe	"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
U	Desktop Maestro	deskmech.exe	"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
U	Desktop Maestro Vista Tray	RMTray.exe	"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
N	Desktop Plant	AZARE10S.PLT	"Vritual plant from here - this version is an Azalea
X	Desktop Search	desktop.exe	"iSearch adware"
X	Desktop Security 2010	Desktop Security 2010.exe	"Desktop Security 2010 rogue security software - not recommended
N	Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software
N	Desktop Weather	THE WEATHER CHANNEL.exe	"Desktop Weather by The Weather Channel - provides current temperature
N	Desktop Weather 3	THE WEATHER CHANNEL.exe	"Desktop Weather 3 by The Weather Channel - provides current temperature
N	Desktop Weather 3	THEWEA~1.EXE	"Desktop Weather 3 by The Weather Channel - provides current temperature
Y	DesktopArmor	DesktopArmor.exe	"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
U	DesktopIconToy	DesktopIconToy.exe	"""Desktop Icon Toy is an easy to use desktop icon enhancement tool
U	DesktopMaestro	deskmech.exe	"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
U	DesktopMaestro	RMTray.exe	"Part of Desktop Maestro from PC Tools - which ""combines the features of our award winning products
N	desktopmgr	desktopmgr.exe	"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds
X	DesktopUpdate	"rundll32.exe MSA64CHK.dll	DllMostrar"
U	DesktopX	DESKTOPX.EXE	"A program that replaces the regular Desktop and Taskbar
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
U	desp2k	desp2k.exe	"Part of the Turbo Analyzer tool from LightComm Brazil Telecom that analyzes and corrects ADSL configurations"
X	destroyb11	destroyb11.exe	"Added by the DELF-KO TROJAN!"
U	detect	idetect.exe	"iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled"
?	detect	turbodetect.exe	"??"
N	Detector	detector.exe	"USB port detector for LG scanners. Sits in the System Tray
U	DetectorApp	DetectorApp.exe	"Related to Roxio MyDVD (was Sonic) DVD authoring software"
X	Deus Cleaner	DCleaner.exe	"Deus Cleaner rogue system cleaner utility - not recommended"
?	DevconDefaultDB	READREG	"Appears to be related to older Creative Soundblaster soundcards"
X	Development Environment	devenv.exe	"Added by the DELBOT-AH WORM!"
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X	devenv	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	Device Configuration Loader	msdvc32.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
U	Device Detector	DevDetect.exe	"ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically"
N	Device Detector 2	DevDtct2.exe	"Installed by various Olympus products
X	Device Hardware	devicehnd.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device IO System	deviceio.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Management	wnsystem.exe	"Added by the AGOBOT-LH WORM!"
X	Device Manager	wfxmgr.exe	"Added by the RBOT.AJU WORM!"
X	Device Security	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Driver	devicesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	DeviceDiscovery	hpotdd01.exe	"Detection of new imaging
X	DevicePath	Proyecto1.exe	"Added by the GRUEL WORM!"
X	DevicePath	Root.exe	"Added by the GRUEL WORM!"
U	Devices	olesvr.exe	"Salfeld Child Control - parental control software"
X	Devicewin	[path to trojan]	"Added by the BANKER-AEV TROJAN!"
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
U	devldr16.exe	devldr16.exe	"Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use ""Sound Play Control"" and ""Sound Recorder"". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable ""Creative SB16 Emulation"" under Creative Miscellaneous Devices"
?	Devlog	devlog.exe	"Apparently mainboard/chipset related
X	dfgfdgrergd	[path to trojan]	"Added by the RANKY.CK TROJAN!"
X	DfqwSfS	ffsqsd.exe	"Added by the SDBOT-SH WORM!"
?	DGJM	DGJM.exe	"??"
X	dgtstart	dgtstart.exe	"DigitalNames.g adware"
U	dguard	dguard.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
X	DHCP	smss.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display"
X	DHCP Server	regsvr.exe	"Added by the RBOT-PR WORM!"
X	DHCP32	services.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display"
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
X	DhcpCep	PYJJKIME.exe	"Added by the AGENT-BXQ TROJAN!"
?	DHNUXB	DHNUXB.exe	"??"
X	DI2	[path to file]	"BroadcastPC adware"
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Diagnostic	diagnostic.exe	"Added by the ALPHA-C TROJAN!"
X	Diagnostic Agent	diagent.exe	"Added by the AGOBOT-CW WORM!"
X	Dial22	dlm.exe	Adult content dialler
X	Dial33	dlm.exe	Adult content dialler
X	Dialer	"rundll32.exe MSA32CHK.dll	Reg"
U	Dialer Control	dc.exe	"Dialer-Control. Detects and protects from premium rate adult content diallers"
U	Dialer Detect	dd.exe	"DialerDetect detects stealth installed premium rate diallers
U	Dialgo SDK	PhoneAnswer.exe	"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	"Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders"
N	Dialog Helper	PDDLGHLP.EXE	"Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs"
X	DialUp Network Application	Rnaap.exe	"Added by a variant of the SDBOT WORM!"
X	Diam prlaer	oqedrhg.exe	"Added by the SDBOT-DEU WORM!"
U	Diamondback	razerhid.exe	"Razer Diamondback 3G gaming mouse driver - required if you use the additional features and programmed keys/macros"
?	Diamondview	Diamondview.exe	"Manulife Financial Insurance program. Is it required at startup?"
X	DIECOX	csrss.exe	"Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Diesel	Recalculate.exe	"Added by the LAZAR TROJAN!"
U	DietK	DietK.exe	"Diet Kazaa add-on for Kazaa Media Desktop - ""removes all adware and popups
U	DigiCell	DigiCell.exe	"MSI DigiCell - ""the most useful and powerful utility that MSI has spent much research and efforts to develop
X	DigiD	DigitalSound.exe	Adware downloader
N	DigiGuide	CLIENT.EXE	TV guide and reminder
N	DigiGuide	client01.exe	TV guide and reminder
U	Digisoft AntiDialer	AntiDialer.exe	"Digisoft AntiDialer"
U	DigiSrv	DigiSrv.exe	"Related to camera software from DigitalDreams"
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
Y	Digital Patrol Update 5	update.exe	"Digital Patrol - ""a powerful anti trojan scanner
X	Digital Protection	digprot.exe	"Digital Protection rogue security software - not recommended
N	Digital River eBot	downlo~1.exe	"Digital River Systems EBOT for downloading software from their site. In some cases
X	DigitalNames	DigitalNamesStart.exe	"DigitalNames spyware variant"
N	DigitalWizard	ISWizard.exe	"InstallShield's DigitalWizard - free
N	DigitalWizard Monitor	dwMon.exe	"InstallShield's DigitalWizard - free
U	DIGServices	DIGServices	Created by Disney but licensed to ESPN for watching videos
N	DIGServices	DIGServices.exe	Created by Disney but licensed to ESPN for watching videos
N	DIGStream	digstream.exe	"DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically"
U	Dimension	Dimension.exe	"Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames
U	Dimension4	d4.exe	"Dimension 4 - network time synchronization freeware - starts-up
X	Dino3	dino3.exe	Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X	Dinst	dinst.exe	"IMIServer/IEPlugin adware"
X	Diomacd	fdafbfd.exe	"Added by the MULDROP.F TROJAN!"
X	Dir1	caKe	"Added by the CAKE WORM!"
X	Direct settings	sdchost.exe	"Added by the DAEMONI-I TROJAN!"
U	Direct Update	DUControl.exe	"DirectUpdate dynamic DNS updater"
X	Direct X Direct3D	dxd3d.exe	"Added by a variant of the SDBOT WORM!"
X	Direct X Opengl	dxopengl.exe	"Added by a variant of the RBOT-CJ WORM!"
X	direct3d.exe	direct3d.exe	"Added by the CERTIF-F TROJAN!"
N	DirectCD	DirectCD.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X	Director Video	btnmgern.exe	"Added by the MYTOB-KL WORM!"
Y	Directory Opus Desktop Dblclk	dopusrt.exe	"Directory Opus - an advanced file manager. ""Directory Opus goes beyond the simple file manager metaphor
X	directs.exe	directs.exe	"Added by the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T WORMS!"
U	DIRECTVDSL	Directvdsl.exe	Starts DirectTV DSL modem at boot up. Can also be started manually
X	DirectX	ddhelp32.exe	"Added by the BIONET.318 TROJAN! Note - not the DirectX helper which is ddhelp.exe"
X	directx	Directx.exe	"Added by the SDBOT.D TROJAN!"
X	directx	Sqlexploit.exe	"Added by the SDBOT.D TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list