HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	HP Laser Jet Director	hppdirector.exe	"System Tray icon that opens various functions such as copy
?	HP Network Registry Agent	hpnra.exe	"??"
?	HP OfficeJet Series xxx Startup	HPOSTR03.EXE	"xxx represents the series number - such as 700. What does it do and it it required?"
?	HP OfficeJet Series xxx Startup	HPOstr05.exe	"xxx represents the series number - such as 700. What does it do and it it required?"
N	HP Parallel Port Test	hppt.exe	Associated with a HP ScanJet scanner
X	HP Photo Manager	HPPhotoManager.exe	"Added by the SDBOT.AXU WORM!"
N	HP Photosmart Premier Fast Start	hpqthb08.exe	"Improves the startup time of HP Image Zone. If you disable it
?	HP Port Resolver	hpbpro.exe	"??"
N	HP Precision Scan	hpmdlbwx.exe	HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
N	HP Presentation Ready	PresRdy.exe	HP Omnibook related: "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device"
U	hp psc 2000 Series	hpobnz08.exe	System Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start
U	HP RecordNow	??	"From HP ""Software for the CD writer. Do not prevent from starting unless the CD writer is never going to be used."""
U	HP ScanPatch	HPScanFix.exe	"Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used
N	HP ScanPicture	hpsplmwa.exe	HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
U	HP SchedIndexer	hppschedindexer.exe	"Installed by HP multi-function printer driver software
X	HP Service Drivers	hdsys.exe	"Added by the SDBOT-ZE WORM!"
?	hp Silent Service	HpSrvUI.exe	"HP related"
N	HP Simple Trax	Hpcron.exe	Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start -> Programs or Desktop Icon
N	HP software update	HPWuSchd2.exe	HP software updates. If a shortcut doesn't exist create your own and run it manually
N	HP software update	HPWuSchd.exe	"HP software updates. If a shortcut doesn't exist
N	HP Status	hpstatus.exe	HP Printer Status and Alerts
?	HP Status Server	hpboid.exe	"Copied during installation of HP Inkjet Printer Drivers in Win2K/XP. What does it do and is it required?"
U	HP TV Now	HpTvNow.exe	Application supplied with HP notebooks. It activates the S-Video port and is said to improve the quality of the output signal (resolution/timeouts)
X	HP Update Assistant	HPAware.exe	Added by the MRO TROJAN!
N	HP Updates	??	"On HP PCs
?	HP Visualize Init	HpVisIni.exe	"HP Visualize software related. What does it do and is it required?"
N	HP-Aio Flight	Remind32.exe	HP multifunction registration
U	HPADVISOR	HPAdvisor.exe	HP Total Care Advisor - a suite of help and hardware check programs to help you check the health of your PCs
N	hpaiodevice	hpodev07.exe	"Direct from HP - "Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when "portable" is chosen during installation)". Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled
?	HPAiODevice(hp officejet g series)	hpoavn07.exe	"HP Printer related
N	HPAiODevice(hp psc 900 series) -1	hpobrt07.exe	"Installed with a Hewlett Packard 900 series colour printer
N	HPAIO_PrintFolderMgr	hpoopm07.exe	"Directly from HP: "This process has one purpose - detects if the device moves to a different port
U	HPBootOp	HPBootOp.exe	"""HP Boot Optimizer intelligently and dynamically launches software during startup
X	hpcmd	cmd.exe	"Added by the ADCLICK-DS TROJAN!"
N	hpcmpmgr	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
U	HPDAgent	HPDAgent.exe	"Loads Hide and Protect any Drives - which allows you to ""Protect Hard drive
X	hpdeskjet	hpdeskjet.exe	"Added by the GENOME.AQUV TROJAN!"
U	HPDJ Taskbar Utility	hpztsb01.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb02.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb04.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb05.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb07.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb09.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb06.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb08.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb03.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb10.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb11.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb12.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb13.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
N	hpfsched	hpfsched.exe	HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
U	HPGamesActiveMenu	ActiveMenu.exe	Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	hpgs2wnd	hpgs2wnd.exe	"Share-to-Web - HP-created software and Internet-based application that enables easy uploading and sharing of photos via affiliated photo-sharing Web sites. Available via Start → Programs"
U	Hpha1mon	Hpha1mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 2.0 to 2.3 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	Hpha2mon	Hpha2mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.1 to 3.2 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	Hpha3mon	Hpha3mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.3.138 to 3.4.13 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	HPHmon03	hphmon03.exe	Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. Known to cause 100% CPU load in some cases. Only needed if you use this feature
U	HPHmon04	hphmon04.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 4.0 to 4.2 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	hphmon05	hphmon05.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 5.0 to 5.3 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	HPHmon06	hphmon06.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 6.0 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
X	Hphome	hphome.js	Homepage hijacker
N	HPHUPD04	hphupd04.exe	HP software update checker and wizard launcher. Available via Start -> Programs
N	HPHUPD05	hphupd05.exe	HP software update checker and wizard launcher. Available via Start -> Programs
N	HPHUPD06	hphupd06.exe	HP software update checker and wizard launcher. Available via the Start menu
N	HPHUPD07	hphupd07.exe	HP software update checker and wizard launcher. Available via Start -> Programs
N	HPHUPD08	hphupd08.exe	HP software update checker and wizard launcher. Available via Start -> Programs
?	hpjsiroute	hpjsira.exe	"Related to HP laserjet printers and IP addresses. An IP address is appended to the name field - ie "hpjsiroute192.168.1.2""
X	HPl Services	hmlsvc32.exe	"Added by the AGOBOT-SI WORM and variants!"
Y	HpLamp	HPLAMP.EXE	HP Scanner Utility that controls your scanners light bulb. Needed if it's switched on
U	hplampc	hplampc.exe	HP Scanner Lamp Utility - fixes an issue with the scanner lamp not going off
U	HPLaptopGamesActiveMenu	ActiveMenu.exe	Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
Y	HPLJ Config	SetConfig.exe	Connects system to networked HP printer.
U	HPLogiFinder	hp_finder.exe	HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
U	HpMmKbd	HpMmKbd.exe	HP's multimedia keyboard driver which enables the end-user to use the automation features of the HP multimedia keyboard
U	HPMVTray	HPMVTray.exe	"HP Media Vault Networked Storage Device - System Tray management utility"
X	HPNT	hpdll.exe	"Malware downloader - detected by Kaspersky as the VB.KU TROJAN!"
N	hpodblia	hpodblia.exe	HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
N	hpoddt01.exe	N/A	"Installed by the ""HP Photo and Imaging Director"" software. If you ask for the imaging software
U	hpoddt01.exe	hpotdd01.exe	"Detection of new imaging
N	hpodlb08	hpodlb08.exe	HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
Y	hpppt	hpppt.exe	Related to the drivers for HP ScanJet scanners
Y	hpppta	HPPPTA.exe	HP parallel port driver for certain hardware
X	HpPrinter	hpserver.exe	"Added by the CMJSPY-W TROJAN!"
N	HPPROPTY	HPPROPTY.EXE	"HP LaserJet Toolbox"
U	HPPWRSAV	HPPWRSAV.EXE	"Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com
?	hpqcmon	hpqcmon.exe	"From HP and related to digital imaging"
?	hpqSRMon	hpqSRMon.exe	"Related to HP Digital Imaging products. What does it do and is it required?"
U	HPSCANMonitor	hpsjvxd.exe	HP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner
?	hpScannerFirstBoot	scannerfb.exe	"HP scanner related"
X	hpSdwxmark	Gaddw.exe	"Added by the SDBOT-RB WORM!"
N	hpsjbmgr	hpsjbmgr.exe	"HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup
N	HPStart	hpstart.wsf	This a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot
X	hpsysconf1	[random filename]	"Added by a variant of the VIVIA.A TROJAN!"
U	hpsysdrv	hpsysdrv.exe	"This item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP
X	hptools	hptools.exe	"Added by a variant of the SDBOT WORM!"
X	hptools	microsoft.exe	"Added by a variant of the SDBOT WORM!"
N	HPU	ProvenTactics.exe	"Proven Internet Marketing software"
U	hpWirelessAssistant	HP Wireless Assistant.exe	The HP Wireless Assistant is a user application that provides a way to control the enablement of individual wireless devices (such as Bluetooth or WLAN devices) and that shows the state of the radios for these wireless devices
U	hpWirelessAssistant	HPWAMain.exe	Wireless application bundled with HP computers that allows you to control different settings on the computer's wireless devices such as Bluetooth and WLAN
N	HPZTS04	hpzts04.exe	Hewlett Packard printer toolbox shortcut that resides in the system tray
U	hpztsb02	hpztsb02.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	hpztsb04	hpztsb04.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	hpztsb05	hpztsb05.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	hpztsb07	hpztsb07.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	hpztsb09	hpztsb09.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	hpztsbol	hpztsbol.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
N	HP_dla	dlatray.exe	"On HP PCs
X	HP_runner	front.exe	"Added by the SILLYFDC WORM!"
X	HQI Services	hqisvc32.exe	"Added by the AGOBOT-RO WORM!"
X	HQI Services	hqlsvc32.exe	"Added by the AGOBOT-RP WORM!"
N	hqtray	hqtray.exe	"VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to ""run multiple operating systems simultaneously on a single PC."" It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product"
U	HR	Hr.exe	"HiddenRecorder periodically takes screenshots of the computer. If you didn't install this yourself remove it"
U	HREF.OCX	regsvr32.exe ....HREF.OCX	"HREF.OCX is an ActiveX control developed by xFX JumpStart and used to provide HTML-alike clickable links on Windows-based programs such as PopUpKiller"
X	hri	iexpl0re.exe	"Added by the DLOADER.MAQ TROJAN! Note the number ""0"" in the filename"
X	Hrn_qtv	hrnsvc32.exe	"Added by the SDBOT-AET WORM!"
X	Hservice	msservice.exe	"Added by the AUTORUN-KL WORM!"
X	hsim	isearch.exe	Unidentified malware
X	hsim	sexgame.exe	Unidentified malware
X	hsim	toolbar.exe	Unidentified malware
U	HSLAB Logger	logger.exe	"HSLABLogger logs user activity and Internet activity. The gathered information can be sent to a predetermined email address. If you didn't install this yourself uninstall it"
U	HSON	HSON.exe	Toshiba HotStart button support for instant-on entertainment on their laptops
U	HSTrans	hstrans.exe	"Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen"
?	HsuGuiControl	HsuGuiControl.exe	"Part of the Starband Internet satellite client. What does it do and is it required?"
U	hsys	HSYS.EXE	"Keylogger Express keystroke logger/monitoring program - remove unless you installed it yourself!"
U	Hti	npdor.exe	"Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required"
X	HTML Help System	hhs.pif	"Added by the RBOT-ATB WORM!"
X	HTML32 Help System	hhs32.pif	"Added by the RBOT-ATE WORM!"
U	HTpatch	htpatch.exe	HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%
X	HtProtect	AVprotect.exe	"Added by the NETSKY.L WORM!"
X	htssv32.exe	htssv32.exe	"Added by a variant of the SDBOT TROJAN!"
X	HTTP Tunneling Server	mstunnel.exe	"Added by the RBOT.EDL WORM!"
X	http://www.lienvandekelder.be	LienVandeKelder.exe	"Added by the MYTOB-AZ WORM!"
X	http://www.lienvandekelder.be	Lien Van de Kelder.exe	"Added by the MYTOB-AP WORM and variants!"
X	http://www.lienvandekelder.be	Lien Vande Kelder.exe	"Added by the MYTOB-AQ WORM!"
X	http://www.lienvandekelder.be	Lien vd Kelder.exe	"Added by the MYTOB-M WORM!"
X	http://www.lienvandekelder.be	Lien.exe	"Added by the MYTOB-CZ WORM!"
X	http://www.lienvandekelder.be	Lientjeuh.exe	"Added by the MYTOB-P WORM!"
X	http://www.lienvandekelder.be	LienVdK.exe	"Added by the MYTOB-U WORM!"
X	http://www.lienvandekelder.be	Van de Kelder Lien.exe	"Added by the MYTOB-BF WORM!"
X	http://www.lienvandekelder.be	We Love Lien Van de Kelder.exe	"Added by the MYTOB-CV WORM!"
X	http://www.lienvandekelder.com	Lien Van de Kelder.exe	"Added by the MYTOB-EQ WORM!"
X	http://www.lienvandekelder.com/	LienVandeKelder.exe	"Added by the MYTOB-EO WORM!"
X	httpd	c_pan.exe	Added by a variant of the DELF-A TROJAN!
X	httpd	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	httpd	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	httpd	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	httpd	browse.exe	"Added by the TACTSLAY.C TROJAN!"
X	httpd	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	https-ssl	https.exe	"Added by the MOEGA.D WORM!"
U	HughesNet Tools	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
?	huhdir	huhdir.exe	"??"
X	huigezi	HgzServer.exe	"Added by the GRAYBIRD.C TROJAN!"
X	huigezi	SP00LSV.EXE	"Added by the GRAYBIRD.J BACKDOOR! Note the digit ""0"" in the command"
X	Hvewsveqmg	ANACON.EXE	"Added by the NACO.A WORM!"
X	Hvid	Hvid.exe	"Added by the GEMA TROJAN!"
X	HWINFO*	HWINFO*	"Added by the PUROL WORM! where * is a random character"
Y	HWinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X	Hwp	system_wc.exe	"Eziin adware"
X	hws	hws.exe	"Added by the STARTPA-CT TROJAN!"
U	HWSetup	HWSetup.exe hwSetUP	"""Toshiba Hardware Setup is the Toshiba configuration management tool available through Windows."" Allows the user to change BIOS
X	hxadsec	[path to trojan]	"Added by the ADCLICK-AP TROJAN!"
X	HXDL.EXE	HXDL.EXE	"Attune HelpExpress - spyware. Disable and uninstall - see here"
X	HXIUL.EXE	HXIUL.EXE	"Attune HelpExpress - spyware. Disable and uninstall - see here"
U	HydarVisionDesktopManager	desk95.exe	"ATI's HydraVision desktop management software
U	HydraDM	HydraDM.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
U	HydraMD	HydraMD.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which ""creates
U	HydraVisionDesktopManager	desk98.exe	ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
U	HydraVisionDesktopManager	HydraDM.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
U	HydraVisionViewport	viewport.exe	ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
U	HydraVisionViewPort	HydraMD.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which ""creates
X	Hyper Files	phfhost.exe	"Added by the AGENT-JQO TROJAN!"
X	Hyper Start	instantmsgrs.exe	"Added by the RBOT-NH WORM!"
X	I am not Ranky. I am eTunnel!	msyervice.exe	Added by an unidentified WORM or TROJAN!
X	I am not Ranky. I am eTunnel!	winsys.exe	Added by an unidentified WORM or TROJAN!
X	I am not Ranky. I am eTunnel!	disney.exe	Added by an unidentified WORM or TROJAN!
X	I just want to say I love Milko and I need a drink	svchost.exe	"Added by the CHIKO WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\Administrator\Local Settings\Application Data"
X	I-Worm.GiGu	uGiG.eXe	"Added by the GINK WORM!"
X	I/O Controllers	svcnet.exe	"Added by the TIBIK-B TROJAN!"
X	I386	I386.exe	"Added by the MYPOWER WORM!"
?	I81SHELL	I81SHELL.exe	"Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard"
U	i8kfangui	i8kfangui.exe	Graphical interface for fan speed control
U	IAAnotif	Iaanotif.exe	"Part of Intel® Matrix Storage Manager (formally known as Intel® Application Accelerator and Intel® Application Accelerator RAID Edition). Used in conjunction with the event monitor service (IAANTMON - Iaantmon.exe) to display event notifications (such as RAID volume status changes
Y	iamapp	iamapp.exe	"AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago
X	Iamnacho On Irc.MusIrc.com Is a Homosexual!	XBox64.exe	"Added by the RANDEX.Y WORM!"
?	IaNvSrv	IaNvSrv.exe	"Related to the option ROM part of the Intel® Matrix Storage Manager. Located in %ProgramFiles%\Intel\Intel Matrix Storage Manager\OROM\aNvSrv. What does it do and is it required?"
?	Iap	iap.exe	"Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
U	ias	ias.exe	"InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	IASHLPR	IASHLPR.EXE	"Added by the OPASERV.T WORM!"
X	ibin	[path to trojan]	"Added by the PERDA-C TROJAN!"
X	ibm	ibm.exe	"Added by the LEGMIR-AH TROJAN!"
Y	IBM Client Security	certtool.exe	"Part of Client Security Software for IBM\Lenovo notebooks. If you have configured the software via the associated wizard this will need to be running if you want to mount password protected areas of the disk (created with SafeGuard PrivateDisk)
N	IBM Client Security Software	csecwiz.exe	"Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once
X	IBM Keyboard Driver	ikeybdrv.exe	"Added by the SDBOT.IC TROJAN!"
Y	IBM Password Manager	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
N	IBM RecordNow!	RecordNow.exe	"IBM customized version of the RecordNow! CD-writing utility from Sonic Solutions"
U	IBM ThinkPad EasyEject Support Application	EzEjMnAp.Exe	"EasyEject Utility for IBM/Lenovo Thinkpad notebooks. Quote: ""The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once
N	IBM ThinkPad EasyEject Tray Utility	EZEJTRAY.EXE	"System Tray access to the EasyEject Utility for IBM/Lenovo Thinkpad notebooks. Quote: ""The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once
N	IBM ThinkPad Tray Utility	TP98TRAY.EXE	"System Tray access to the ThinkPad Configuration utility for IBM/Lenovo ThinkPad notebooks. ""The ThinkPad Configuration utility is a control center to configure your ThinkPad hardware. With this utility
U	IBM ThinkPad Utility	NPDTray.exe	System Tray access to Presentation Director for IBM/Lenovo Thinkpad notebooks - which allows you to create and quickly select between various single and mulitple display options. Scheme selection and settings are also available via Fn+F7 key combination on some models
U	IBM TrackPoint Accessibility Features	tp4ex.exe	"Supports accessibility features for the TrackPoint stick and associated buttons on IBM/Lenovo ThinkPad notebooks. If features such as ""Click Sound""
?	IBM Warranty Notification	ERTS0749.exe	"IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire?"
N	ibmmessages	ibmmessages.exe	"""The Access IBM Message Center displays messages to inform you about helpful software that may be pre-installed on your PC. The Message Center can also provide messages about new updates available from the IBM Support Center to keep your computer current"""
?	Ibmmon.exe	Ibmmon.exe	"??"
U	Ibmpmsvc	ibmpmsvc.exe	"Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn
?	IBMPRC	ibmprc.exe	IBM application - what does it do and is it required?
U	IBMUltraBayHotSwapCPLLoader	IBMBAY2N.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
?	IBMUltraBayHotSwapSound	IBMBAYSN.EXE	"Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?"
Y	IBM_PWMGR	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
X	Ibs	ibs.exe	"Added by the HIDEDIAL-B TROJAN!"
U	IBWin Background process	IBackground.exe	"IBackup for Windows"
U	IBWin Monitor	IBMonitor.exe	"IBackup for Windows"
Y	IcaBar	icabar.exe	Related to Citrix MetaFrame
U	iCalendar	Calendar.exe	"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
X	icasServ	icasServ.exe	"Browser hijacker
X	icccomp	[8 random letters].exe	"Added by the ZHELATIN.EQ WORM!"
X	ICcontrol	iccontrol.exe	"ICcontrol premium rate adult content dialer"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list