Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X Kernel Update.exe"Added by the DELF-FN TROJAN!"
X KERNEL 32 SKERNEL32.com"Added by the SEMAPI-A WORM"
U Kernel and Hardware Abstraction Layer KHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
X Kernel Faults ftphost.exe"Added by the RBOT.BHU WORM!"
X Kernel Loader ntkrnl.exe"Added by the CERVIVEC.A WORM!"
X Kernel Manager krnlmgr.exe"Added by the JUNY.A TROJAN!"
X Kernel Safe Mode smss.exe"Added by the 78CRACK-A TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X Kernel Services service32.exe"Added by the PRX-B TROJAN!"
X kernel system daemon ACTIVAT0R.exe"Added by the RANDEX.AW WORM!"
X kernel12.exe kernel12.exeAdded by an unidentified WORM or TROJAN!
X kernel32 kern32.exe"Added by the BADTRANS.A WORM!"
X Kernel32 Kernel32.exe"Added by a number of VIRUSES
X kernel32 kernel.dli"Added by the NETDEVIL.B TROJAN!"
X Kernel32 Kernel.dll"Added by the REDLOF.M VIRUS!"
X kernel32 kernel32.dlI"Added by the NETDEVIL.15 TROJAN!"
X Kernel32 krnl32.exe"Added by the EPON WORM!"
X Kernel32 Kernel32.win"Added by the GAGGLE.D or GAGGLE.E WORMS!"
X Kernel32 kernel32s.exe"Added by the BCKDR-CIC BACKDOOR!"
X kernel32 kernel32.dll.vbs"Added by the WEKODE-A WORM!"
X Kernel32 svchosts.exeAdded by an unidentified WORM or TROJAN!
X Kernel32 svchost.exe"Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\drivers"
X kernel32dll guardpc.exe"Added by the FORBOT-CU WORM!"
X kernel32sys.dll IEXPLORER.exe"Added by the RBOT-MK WORM!"
X Kernel32_sysdamper sysdamp.exe"Added by an unidentified WORM or TROJAN! See here"
X kernel44.dll "taskkill /f /fi ""PID ge 0"" /im *""Added by the VBS.LIDO WORM!"
X KernelCheck sys****.exe [* = digit]Added by an unidentified TROJAN!
X KernelCheck winser.exe"Added by the TSPY_LMIR.SL TROJAN!"
X KernelConfig destiny32.exe"Added by the AGOBOT.AMB WORM!"
N kernelfaultcheck dumprep 0 -k"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
N kernelfaultcheck dumprep 0 -u"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
X KernelFaultCheck ptool32.exe"Added by the LEGMIR-BN TROJAN!"
X KernelFaultCheck msime.exe"Added by the TINY-P TROJAN!"
X KernelFaultCheck tell32.exe"Added by the LEGMIR-BF TROJAN!"
X KernelFaultCheck winabc3.exe"Added by the NUBYS-A VIRUS!"
X KernelFaultCheck winbin.exe"Added by the DLOADR-AAX TROJAN!"
X KernelFaultChk sms.exe"Added by the DEADHAT WORM! Do not confuse with the valid ""kernelfaultcheck"" which runs ""dumprep 0 -k"" or ""dumprep 0 -u"""
X Kernell systems.exe"Added by the TARNO.C TROJAN!"
X Kernell32 Kernell.dll"Added by the DESTINY.A TROJAN!"
X KernellApps csrss.exe"Added by the BANCBAN-AC TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""System"" subfolder"
X KernellApps lexplore.exe"Added by the BANCBAN-BS TROJAN! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X KernellApps svshosti.exe"Added by the BANCBAN-V TROJAN!"
X KernellApps32 smss.exe"Added by the BANCBAN-AN TROJAN! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X KernelRuntime [path to worm]"Added by the MYTOB-JO WORM!"
X Kernelw Kernelw32.exe"Added by the INDOR.E WORM!"
X Kernel_check wmiprvse.exe"Added by the SONEBOT-B WORM! Note - this is not the legitimate wmiprvse.exe process which is always located in the %System%\wbem folder and should not normally figure in Msconfig/Startup!"
X key sysxp.exe"Added by the BEAGLE.AB WORM!"
X key sys_xp.exe"Added by the BEAGLE.AC WORM!"
X key winxp.exe"Added by the BEAGLE.AG WORM!"
X Key Logger csrss.exe"Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root folder (ie
N Key Text KeyText.exe"Key Text 2000 from MJMSoft Design - utility to automate repetitive keyboard tasks. Available via Start -> Programs"
X Key1 Rlid.exe"Added by the LIXY TROJAN!"
? Key2 serve.exe"??"
X key2 winlog.exe"Added by the BAGLEDI-AL TROJAN!"
Y KeyAccess keyacc32.exe"KeyServer KeyAccess client software - ""when the KeyServer program is launched
X Keybdcntl keybdcntl.exe"Added by a variant of the CRYPTER.C TROJAN!"
U KeyBoard Keyboard.exe"
X keyboard keyboard*.exe [* = number]"Detected by Kaspersky as the VB.ZG TROJAN!"
X keyboard kybrdef_7.exe"DollarRevenue adware"
X keyboard [path to trojan]"Added by the DLOADR-AOZ TROJAN!"
X Keyboard lsass.exe"Added by the AGENT.US WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %CommonAppData%\Fearghus"
N Keyboard Customizer TpKmapAp.exe"Part of the Keyboard Customizer Utility for IBM/Lenovo Thinkpad notebooks. This is the main user interface for the utility but it doesn't normally seem to be running if enabled at startup. Also
U Keyboard Manager MMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
Y Keyboard Preload Check Preload.exeMillenium Multi-Function Keyboard driver
? Keyboard Status KeyStat.exe"Multimedia keyboard manager for Medion desktop and notebook PCs? Located in %ProgramFiles%\Medion\KeyStat"
X keyboard_enum keyboard_enum.exe"Added by the BDOOR-GP BACKDOOR!"
U keyhook keyhook.exe"Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys"
U KeyMaestro kmaestro.exeMultimedia keyboard manager. Required if you use the multimedia keys
U keymap keymap.exeSystem Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game
X keymgrldr "rundll32 setupapi InstallHinfSection... keymgr3.inf"
U KeyPatrol KeyPatrol.exe"KeyPatrol - key logger detector using both behavioral and pattern-matching algorithms that used to be part of PestPatrol before CA's aquisition"
U keyplusplus startk.exe"Key++ Invisible Spy Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X keyserv keyserv.exe"KeyThief spyware"
U Keyspan Digital Media Remote KDMRdmn.exe"Remote control driver for Keyspan Digital Media Remote devices"
U keystroke keystroke.exe"QuickLaunch surveillance software. Uninstall this software unless you put it there yourself"
U KeyWallet KWallet.exe""KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins
X kfienq masbl.bat"Added by the KIFER TROJAN!"
X kgjdi27 kgjdie27.exe"Added by the SDBOT.AP BACKDOOR!"
X Kgjg rnnypbw.exe"Added by the QuickLinks/Forethought adware"
U KHALMNPR KHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
X KHATARNAK Loader KHATARNAK.exe"Added by the AUTORUN.ACO WORM!"
N khooker khooker.exeSiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
X Kiamat Sudah Dekat_16_04 ISASS.exe"Added by the PAHATIA.B WORM!"
U KICKMON.EXE KICKMON.EXE"KeepItClean - utility that deletes safe to remove files
U Kill Popup KillPopup.exe"KillPopup - pop-up stopper"
X KillAndClean KillAndClean.exe"KillAndClean rogue spyware remover - not recommended
X kimochiz.exe kimochiz.exe"Added by the MDROP-BB TROJAN!"
N Kinberlink Kinberlink.exe"Kinberlink network messaging. Available via Start -> Programs"
X Kinofilmoff.Net Reklamer.exe"Added by the AGENT-NGX TROJAN!"
X kiss pingy.exe"Added by a variant of the IRCBOT BACKDOOR! The file is located in a random subfolder of %ProgramFiles%"
X KIT3 hpprintqueue.exe"Added by the ADCLICK-DS TROJAN!"
U KK Loader loadkk.exe"KeyKey XP Professional from KeyKey.com. "Monitor Instant Messages
X KKM Service kkm.exe"Added by the NANPY-I WORM!"
X KL AntiFunLove flcss.exe"Added by the FUNLOVE.4099 VIRUS!"
U KLog Keyspy.exe"KeyLoggPro.B keystroke logger/monitoring program - remove unless you installed it yourself!"
X klop [path to file]"Added by the AGENT-WQ TROJAN!"
X klop [random].tmp"Found with Trojan.Win32.StartPage.aw. Possibly a variant of the AGENT-WQ TROJAN!"
U klp run32dll.exe"PAL PC Spy - key recorder and screen capture utility which controls and monitors everything that happens on your pc and online"
U klp explorer.exe"ComSurveilSys keystroke logger/monitoring program - remove unless you installed it yourself!"
U KM9801U MMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
U kmw_run.exe kmw_run.exeKensington MouseWorks - mouse/trackball software. Not required unles you use any special features
U kmw_show.exe kmw_show.exeKensington MouseWorks - mouse/trackball software. Not required unles you use any special features
X KnowledgeBase GUI wppewafaj.exe"Added by the RBOT-GRZ WORM!"
U KN_PanelApp PanelApp.exe"KnowledgePanel online survey software"
N Kodak Batch Transfer pezdow1.exePart of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
U Kodak EasyShare software EasyShare.exeSoftware bundled with Kodak digital cameras to manage the connection between the PC and the Camera. Can be started manually
N Kodak Picture Easy *.* Batch Transfer PezDownload.exe"Part of ""Kodak Picture Easy"" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* represents the version"
N Kodak Picture Transfer Software pts.exeLooks for Kodak camera connection and media insertion. Available via Start -> Programs
N Kodak Software Updater backweb*****.exe"Software updater for Kodak Easyshare digital cameras"
N KODAK Software Updater Kodak Software Updater.exe"Software updater for Kodak Easyshare digital cameras"
Y KodakCCS KodakCCS.exeKodak DC File System Driver
U Komunikator tlen.exe"Tlen - a Polish language instant messaging client"
U KONICA MINOLTA magicolor 2400W STD MSTMON_S.EXEKonica Minolta Magicolor 2400W colour printer monitor
N Konni Symbol Autostart KonniSymbol.exe"Gives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5"
N kontiki kontiki.exe"Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops"
Y KPDrv4XP KPDrv4XP.exeMediaKey USB Keypad Driver
Y KPFW32.EXE KPFW32.EXE"KingSoft Personal Firewall"
Y KPFWSvc.EXE KPFWSvc.EXE"KingSoft Personal Firewall"
X Kr0n1C Kr0n1C.exe"Added by the BRONTOK-BO WORM!"
X krag krag.exe"Added by the AGENT-FOW WORM!"
U Kraidman Kraidman.exe"""Toshiba RAID Support is a Toshiba EasyGuard feature that uses RAID Level 1 technology to minimise downtime by protecting against data loss and ensuring quick data recovery"" - for Toshiba laptops"
U Krait razerhid.exe"Razer Krait gaming mouse driver - required if you use the additional features and programmed keys/macros"
U KREC32 krec32.exeStarrCommander Pro Keystroke logging software
X KRNL Kernl32.exe"Added by the ZOMBY.B TROJAN!"
X Krnlcheck csrss.exe"Added by the BOTNACHALA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
U Krnlmod Krnlmod.exeKeystroke logger/monitoring program - remove unless you installed it yourself!
U Kryptel Component Start Kicker.exe"Kryptel encryption software"
X ksrlnhm zxatgso.exe"Added by the DLOADER-LI TROJAN!"
X Ksrv32 Ksrv32.exe"Added by the AGOBOT-PI WORM!"
X KTAX Auto Loader ktax.exe"Added by the SDBOT-MZ WORM!"
U ktchnsnk ktchnsnk.exeHP program found with the Office Jet 500/600/700 series which initializes the Office Jet manager each time the computer is booted up or rebooted
Y KTPWare ktp.exeRelated to KTP Ware TSR Enhancements from ELANTECH
X KV2005 word.EXE"Added by the VB-IW TROJAN!"
X kv3000 lover.vbe"Added by the ZSYANG.B WORM!"
X kvasoft kva8wr.exe"Added by the ONLINEG.ICC WORM!"
X kvern16.dll regsvr32.exe kvern16.dll"DailyWinner adware. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The ""kvern16.dll"" file is found in %System%"
X kviurs kav.exe"Added by the SILLYFDC.BBJ WORM!"
X KvmSecure.exe KvmSecure.exe"KvmSecure rogue security software - not recommended
X Kvsc3 Kvsc3.exe"Added by the PWS-ANM TROJAN!"
X KV_HOST cxjx.exe"Added by the LEGMIR-BB TROJAN!"
X kw3eef76 "rundll32.exe kw3eef76.dllEnableRunDLL32"
N kX Mixer kxmixer.exeProvides Mixer and Control functionality to KxProject Audio driver for EMU10k based soundcards
U KX509 kx509_kfwk5.exe"Kerberos Secure Authentication for Windows"
? KYE_Showicon shwicon.exe"Card reader for memory cards from digital cameras. Is it required? "
X KYK Control Settings KYSVCXD.EXE"Added by a variant of the RBOT WORM!"
X KYM Control Settings phqghum.exe"Added by the RBOT.BQD WORM!"
X L0aders faxneti.exe"Added by a variant of the SDBOT TROJAN!"
X l44sys** freecell"Added by the VBS.LIDO WORM - where ** is a number between 1 and 12"
X l44sys** iexplore"Added by the VBS.LIDO WORM - where ** is a number between 65 and 76"
X l44sys** winmine"Added by the VBS.LIDO WORM - where ** is a number between 33 and 44"
X L4r1$$a L4r1$$a.pif"Added by the ASSIRAL-C WORM!"
U Lachesis razerhid.exe"Razer Lachesis gaming mouse driver - required if you use the additional features and programmed keys/macros"
U LaCie Backup LaCieBackup.exe"LaCie '1-Click' backup software for their range of mobile hard drives"
U laim aimlite.exe"""AIM Lite is a reference application for testing some new client technology developed here at AOL®
X laltin L90112201.Stub.exe"Delfin Media Viewer adware related"
X lameshit [path to trojan]"Added by the LOWZONE-H TROJAN!"
X LAN dhcp.exe"Added by the RBOT-GYI WORM!"
X Lan Lan.exe"Added by the DELF-IT TROJAN!"
X LAN Driver landriver32.exe"Added by the RBOT.BT WORM!"
X lanbrup lanbrup.exe"SafeSurfing adware"
N Lancement rapide d'Adobe Reader reader_sl.exe"Speeds up the time it takes to load the Adobe Reader PDF document reader. ""The Speed Launcher quickly opens and closes all of the files that Acrobat or Adobe Reader will use when the application starts. Opening and closing the files allows your virus protection software to check these programs and add them to its list of safe files"" - see here. Not required for Adobe Reader to function properly. French version"
U LANDeskInventoryClient LDIScn32.exe"LANDesk® Management Suite software component"
U LanguageMonitor Oplmsb01.exeOKI Printer language support monitor
? LanguageShortcut Language.exe"Part of Cyberlink's PowerDVD prior to version 8. Language settings?"
X LanGuard languard.exe"Adware downloader - also detected as the SECONDT-C TROJAN!"
X LanGuard [path to trojan]"Added by the DLOADER-VO TROJAN!"
X lanmanwrk.exe lanmanwrk.exe"Added by the AGENT.AIA TROJAN!"
U LANMessage Pro LANMES~1.exe"LANMessage Pro - ""a powerful tool for communicating with other people on your office/home network"""
U LanSpeed2 LanSpeed2.exeMonitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
? LanzarL2007 [path] setup.exe"??"
U LaoKey LaoKey.exe"Lao Script for Windows (LSWin) is an extension to the Windows operating system to allow Lao language to be used with many different Windows-based applications"
U Laplink PDASync 3.0 - LtNts4 NtsAgnt.exe"Laplink PDASync for (IBM) Lotus Notes 4 - PDA synchronisation utility"
U Laplink PDASync 3.1 - PocketPC AUTODE~1.EXE"Laplink PDASync for Windows Mobile Pocket PC - PDA synchronisation utility"
U Laplink PDASync 3.1 - ScheduleSync ScheduleSync.exe"Laplink PDASync for ScheduleSync - PDA synchronisation utility"
U LapLink scheduler Llsched.exeUtility that automatically performs file transfers as unattended background operations
X Laptop Access Sage.exe"Added by the SDBOT-NB WORM!"
X Lar Llass.exe"Added by the INOR-A TROJAN!"
X lar [trojan filename]"Added by the ROXY.C TROJAN!"
X LARISSA ANTI VIRUS LARISSA_ANTI_VIRUS.exe"Added by the KLASSIR TROJAN!"
? Lasb ewat.exe"??"
X LaserJet spoolvs.exe"Added by the DLOADER.PFR TROJAN! This is not the file of the same name from older versions of MS Office - see the link for the location"
X LasErma Ermasys32.exe"Added by the LERMA-A WORM!"
X LAsIAf32 RePEAtLD.exe"Added by the REPEATLD WORM!"
X lasse lasse.exe"Added by the NTOS TROJAN!"
Y LASTinst N/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
? Later later.exe"??"
U LaunApp LaunApp.exePart of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
? Launcg launcg.exe"??"
U Launch Ai Booster OverClk.exe"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme)
N Launch Application LaunchApplication.exe"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N Launch Context 5.0 Launch.exe"Context - electronic dictionary"
U Launch K9 K9.exe"K9 by Robert Keir - ""an email filtering application that works in conjunction with your regular POP3 email program and automatically classifies incoming emails as spam (junk email) or non-spam without the need for maintaining dozens of rules or constant updates to be downloaded. It uses intelligent statistical analysis that can result in extremely high accuracy over time"""
Y Launch LCDMon LCDMon.exePart of the GamePanel Software for the Logitech G-Series of gaming keyboards. This the LCD control panel driver on models where it's included such as the G15 and G19
U Launch LGDCore LGDCore.exePart of the GamePanel Software for the Logitech G-Series of gaming keyboards. This is the keyboard driver and if it's disabled you will lose access to special features and programmed keys
? Launch LgDeviceAgent LgDevAgt.exe"Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. What does it do and is it required?"
U Launch Manager QtZgAcer.EXEAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
X Launch Norton AntiVirus 2000 jorgf.exe"Added by the RBOT-AUI WORM!"
U Launch PC Probe II Probe2.exe"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme)
N Launch YahooPOPs! at Windows startup YAHOOPOPS.EXE"YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs"
U LaunchAp LaunchAp.exe"Programmable keys on Acer
Y LaunchApp Alaunch"Part of Acer eRecovery - ""a powerful utility that does away with the need for recovery disks provided by the manufacturer
N LaunchApplication LaunchApplication.exe"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
U Launchboard lnchbrd.exe""LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0
X Launcher launcher.exeSpyware component related to DownloadWare and found in %ProgramFiles%\KFH
N Launcher relaunch.exeAudio Applications Launcher for the Philips Rythmic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
U Launcher launcher.exe"PC Angel recovery program from SoftThinks. Located in a ""SMINST"" sub-folder of the Windows or Winnt directory"
U Launcher Launcher.exe"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
? LaunchList LaunchList2.exe"Part of Pinnacle Studio video editing suite. What does it do and is it required?"
U LaunchU3 LaunchU3.exe"U3 LaunchPad system software for U3 smart flash drives. Provides password protected access to applications and personal settings installed and saved on a U3 enabled drive - allowing the user to effectively treat any Windows Vista/XP/2000 PC as though it's their own PC"
X Lavasoft Ad-Aware Ad-Aware.exe"Added by the RBOT-SO WORM! Note - this is not the popular Ad-Aware spware/adware removal tool and is located in %System%"
U Lavasoft Adwatch Ad-watch.exe"Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system"
X Layersecurity Servicemonitor LSSMON.EXE"Added by the BANKER.ZAQ TROJAN!"
X layersldm hostplsrvc.exe"Added by a variant of the SDBOT WORM!"
X Laz Kernn.exe"Added by the BANCOS-LN WORM!"
X LBTWiz.exe LBTWiz.exe"Added by the SDBOT-DHY WORM! Note - this is not the legitimate Logitech file which is normally located in %Program Files%\Logitech\SetPoint or %Program Files%\SetPoint. This one is located in %Windir%"
X Lcass Lcass.exe"Added by the SILLYFDC-W WORM!"
U LCD Smartie LCDSmartie.exe"""LCD Smartie is software for Windows that you can use to show lots of different types of information on your LCD/VFD."" Typically used by the PC modding community to display statistics such as CPU temp

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list