Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
U LCDC LCDC.exe"LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins"
Y LCDMon LCDMon.exePart of the GamePanel Software for the Logitech G-Series of gaming keyboards. This the LCD control panel driver on models where it's included such as the G15 and G19
Y LCDPlayer LCDPlyer.exe"Related to SuperAdBlocker"
N lcfep lcfep.exe"Tivoli 'TME' System Tray icon - ""'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"""
? LCIDConfig lcidchng.exe"??"
U LClock lclock.exe"LClock is a program that makes the Windows' clock look like a Windows Longhorn Clock"
X lcvga lcvga.exe"Added by the HOSTOL-A TROJAN!"
X ld ld.exe"CoolWebSearch Tooncomics parasite affiliate variant - redirects to fastwebfinder.com"
N LDM backweb-8876480.exe"Installed with older versions of the software for Logitech products. Automatically checks for software upgrades and new products
N LDM LogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
X ldriver ldriver.exe"Added by the CHORUS-A TROJAN! Searchforfree browser hijacker"
U LED TRAY LEDTRAY.EXEInstalls a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
U ledpointer CNYHKey.exeChicony Electronics Multimedia Keyboard Hotkey Driver
N LeechGet LeechGet.exe"LeechGet download manager"
X leeman leeman.exe"Added by the COSIAM-D TROJAN!"
U LELA Linksys EasyLink Advisor.exe"System Tray access to Linksys EaasyLink Advisor - which ""is designed to set up your home network. LELA can locate computers
X LEMSRV lemsrv.exe"Added by the IRCBOT-TC TROJAN!"
U LENOVO.TPFNF6R TPFNF6R.exeSupports the Fn+F6 hotkey combination on IBM/Lenovo Thinkpad notebooks which mutes the microphone
N LenovoOobeOffers LenovoOobeOffers.exe"Displays product upgrades/offers from Lenovo on the first run of a new notebook/desktop. ""Oobe"" refers to the ""Out of box experience"""
X LetsRock [path to trojan]"Added by the RANKY.Y BACKDOOR!"
X LetsSearch LetsSearch.exe"BrowserAid/BrowserPal foistware"
X Letum [path to worm]"Added by the LETUM.A WORM!"
U Lexmark 1200 Series lxczbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 1200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark 2200 Series lxbvbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 2200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark 3100 Series lxbrbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 3100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark 4200 Series lxbmbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 4200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark 5000 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
U Lexmark 5200 series lxbtbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 5200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark 5400 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
U Lexmark 6500 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
U Lexmark 7600 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
U Lexmark 9300 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
X Lexmark Print lexmark.exe"Added by a variant of the SPYBOT WORM! See here"
U Lexmark X1100 Series lxbkbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X1100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X125 Settings Utility LEX125SU.exeSettings utility for the Lexmark X125 printer
U Lexmark X5100 Series lxbabmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X5100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X5400 Series Fax Server fm3032.exe"FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software"
U Lexmark X6100 Series lxbfbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X6100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X63 Button Manager AcBtnMgr_X63.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X63 Button Monitor ACMonitor_X63.exe"Button monitor for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Works in conjunction with the ""Lexmark Scan & Copy Control Program"" button manager whose filename is ""AcBtnMgr_X63.exe"""
U Lexmark X73 Button Manager AcBtnMgr_X73.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X73 Button Monitor ACMonitor_X73.exe"Button monitor for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Works in conjunction with the ""Lexmark Scan & Copy Control Program"" button manager whose filename is ""AcBtnMgr_X73.exe"""
U Lexmark X74-X75 lxbbbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X74-X75 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X83 Button Manager AcBtnMgr_X83.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X83 Button Monitor ACMonitor_X83.exe"Button monitor for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Works in conjunction with the ""Lexmark Scan & Copy Control Program"" button manager whose filename is ""AcBtnMgr_X83.exe"""
U Lexmark X84-X85 Button Manager AcBtnMgr_X84-X85.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U Lexmark X84-X85 Button Monitor ACMonitor_X84-X85.exe"Button monitor for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Works in conjunction with the ""Lexmark Scan & Copy Control Program"" button manager whose filename is ""AcBtnMgr_X84-X85.exe"""
N LexmarkPrinTray printray.exeLexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
X Lexmark_X79-55 lsasss.exe"Added by the ZONEBAC TROJAN!"
X lexplore lexplore.exe"Added by the BROPIA WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
N lexpps lexpps.exe"For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC
U LexStart lexstart.exeLexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
X Lfh Lfh.exe"Added by the ZAURGA-A TROJAN!"
U Lfsndmng lfsndmng.exe"LightningFAX Enterprise Fax Server - ""puts faxing at the fingertips of networked enterprise users. It enables rapid
U LG Direct Media Button Service LGDMEBTN.exe"Supports the Direct Media button on LG Notebooks that support it - such as the S1 PRO EXPRESS DUAL. Pressing this button launches the application for watching movies or listening to music"
N LG Intelligent Update autoupdate.exe"Automatic update utility for LG Notebooks"
N LG Magnifier MagnifyingGlass.exe"Screen area magnifying utility for LG Notebooks"
U LGDCore LGDCore.exePart of the GamePanel Software for the Logitech G-Series of gaming keyboards. This is the keyboard driver and if it's disabled you will lose access to special features and programmed keys
? LgDevAgt LgDevAgt.exe"Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. What does it do and is it required?"
X lgfxTray lgfxTray.exe"Added by the TAKEOBEL WORM! Note - the filename has a lower case ""L"" rather than an upper case ""i"" at the beginning and should not be confused with the valid Intel graphics file ""igfxtray.exe"""
X lgm lgm.exe"Added by the ACID-F WORM!"
U LGODDFU fwupdate.exeAuto firmware update program for LG Electronics CD-ROM/DVD writer
U LgWDskTp LgWDskTp.exe"Logitech Wireless Desktop mouse and keyboard software. There is an icon for this program on the taskbar next to the clock"
N lhttseng "rundll32.exe ..lhttseng.inf RemoveCabinet"
X li-multi**** li-multi****.exeAdult web-dialler - **** is random
X li-rcash00001 vldial.exe"Added by the Vl TROJAN!"
X li-speed**** dlres.exeAdult web-dialler - **** is random
X li-thund**** li-thund****.exeAdult web-dialler - **** is random
X li-vita**** li-vita****.exeAdult web-dialler - **** is random
X li01f948 "rundll32.exe li01f948.dllEnableRunDLL32"
X LibreSystem SysRep.exe"LibreSystem
X libtec "rundll32.exe libtec.dllstart"
N LicCrtl runservice.exe"Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running
U LicCtrl "rundll32.exe MMFS.DLL Service"
X License Manager license_manager.exe"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
X lich lich.exe"Added by the QLOWZON-BN TROJAN!"
U LidPolicy pwrschem.exeA utility for configuring certain HP notebook models to enter Standby mode when the lid is closed only when running on battery
X Life FireWall Update1 FireWall-Update1.exe"Added by the RBOT-ARS WORM!"
X Life Personal Firewall FirewallingV10.exe"Added by the RBOT-BKF WORM!"
? LifeCam LifeExp.exe"Related to Microsoft's LifeCam series of webcams. What does it do and is it required?"
U LifeChat LifeChat.exe"Support software for Microsoft's ""LifeChat"" headsets - which are optimized for use with Windows Live Messenger"
N LifeDrive Manager LifeDriveMgr.exe"Keeps the Palm LifeDrive Manager utility in the systray. Shortcut available via Start -> Programs"
U LifeDrive? Manager LifeDriveMgrTray.exe"System Tray utility for the Palm LifeDrive Mobile Manager"
? LifeExp LifeExp.exe"Related to Microsoft's LifeCam series of webcams. What does it do and is it required?"
N LifeScape Media Detector PicasaMediaDetector.exe"Media detector for Picasa's automatic photo organizer"
X lify yujixit.exe"Added by a variant of the SDBOT WORM!"
? LightFrame 3 LightFrameV3.exe"Support software for Philips range of LCD Monitors that support LightFrame™ - which ""reduces eye strain by surrounding your monitor frame with blue light that stimulates your visual senses for improved concentration and promotes an overall feeling of wellbeing"". What does it do and is it required?"
U Lightning Lightning.exe"Lightning Download from Headlight Software - shareware download manager for resuming downloads. Start it manually unless you want to intercept download links from your browser"
U Lightning Download Lightning.exe"Lightning Download from Headlight Software - shareware download manager for resuming downloads. Start it manually unless you want to intercept download links from your browser"
N Lightscribe LightScribeControlPanel.exe"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
N LightScribe Control Panel LightScribeControlPanel.exe"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
N LightScribeControlPanel LightScribeControlPanel.exe"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
X liibr liibr.exeAdded by a variant of the Storm/Nuwar/Zhelatin WORM!
X Limewire LimeWire.exe"Added by the RBOT-AGH WORM!"
N LimeWire On Startup LimeWire.exe"LimeWire - Peer to Peer (P2P) file-sharing client. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
N LimeWire x.x LimeWire.exe"LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
X limewirepro.exe limewirepro.exe"Added by the IRCBOT-WA WORM!"
X Limpet explorer16.exe"Added by the RBOT-AJD WORM!"
N Line Speed Meter V3.0 LineSpeedMeter.exe"LineSpeedMeter - detect the download and upload speed of your internet connection"
U Lingvo Launcher Lvagent.exe"ABBYY Lingvo Electronic Dictionaries"
U LingvoTraining Tutor.exe"ABBYY Lingvo Electronic Dictionaries"
X Linker LinkMaker.exe"Links adware"
X links links.exe"Added by the LOWZONE-BI TROJAN!"
X LinkSafeness LinkSafeness.exe"LinkSafeness rogue security software - not recommended
N Linksts linksts.exe"Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards
X Linksys Modem Drivers linksys.exeAdded by the IRCBOT.VD WORM!
X linkyuu linkuyy.exe"Added by the DLOADER.MC TROJAN!"
X Linux Linux.vbs"Added by the LOVELETTER.AS VIRUS!"
U LiquidView lviewj.exe"""Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor"""
X Lisa Lisa.exe"Added by the SCOM-D premium rate adult content dialler"
X List checker 32 BIT list32.exe"Added by the RBOT-AHO WORM!"
X Litebot [path to trojan]"Added by the LITEBOT-A TROJAN!"
N LIU LIU.exe"Logitech Internet Update. Used to update drivers/software for Logitech's Wingman
N LIU Rubicon.exe"Logitech Internet Update. Used to update drivers/software for Logitech's Wingman
N Live Menu Dllcmd32.exe"eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here"
X Live Messanger livemsgr.exe"Added by the RBOT.BXX WORM!"
X Live Messanger wllmsngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X Live PC Care LP[random characters].exe"Live PC Care rogue security software - not recommended
? live rdr loadloud.exe"??"
X Live Security Suite LiveSS.exe"Live Security Suite rogue security software - not recommended
X Live update monitor srvany32.exe"Added by the AGOBOT.AFM WORM!"
X live update monitor umxlu32.exe"Added by the AGOBOT.ADK WORM!"
X Live Windows Messenger Version msnmessage7.7.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X Live Windows Messenger Version msnmsngrlive.exe"Added by a variant of the IRCBOT BACKDOOR!"
X Live-Help lmns.exe"Added by the RBOT-GHE WORM!"
X Live-Messenger.exe Live-Messenger.exe"Added by the SILLYP2P WORM!"
X LiveAntispy LiveAntispy.exe"LiveAntispy rogue security software - not recommended
X livekey webgrade.exe"LiveKeys adware. File located in %Program Files%\livekey\livekeys"
X livekeys webgrade.exe"LiveKeys adware. File located in %Program Files%\livekey\livekeys"
N LiveMonitor LMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
N LiveNote Livenote.exeAsus graphics card driver live update feature
X LiveProtect LiveProtect.exe"System Live Protect rogue security software - not recommended
X LiveSexCams LiveSexCams.exePremium rate adult content dialler
U LiveUpdate LiveUpdate.exe"Web-update utility as used by various types of software - see here"
X LiveUpdate [Windows username]05.exe"Added by the LINEAGE TROJAN!"
X LiveUpdate smss.exe"Added by the VB.BAU BACKDOOR! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\isas"
N LiveUpdate Copyer.exe"Samsung PC Studio is a Windows-based PC program package that you can use easily to manage personal data and multimedia files by connecting a Samsung Electronics Mobile phone (GSM/GPRS/UMTS) to your PC. You can launch the update manually - see the instructions
X LiveUpdate32 services.exe"Added by the VB.BAU BACKDOOR! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\isas"
X Livre Dibane.bat"Added by the BANEDI VIRUS!"
X Ljx rundll32.exe"Added by the LINEAG-ABD TROJAN! Note - this is not the legitimate rundll32.exe process
X lk3h1 [path to file]"Added by the MOSUCK-G TROJAN!"
? LLMODCL2 "rundll.exe setupx.dll InstallHinfSection ..LLMODCL2.INF"
N LM Status LMSTATUS.EXEXerox WorkCenter XE - language monitor status application
X LMA Manager lmamanager.exe"Added by the TILEBOT-AD WORM!"
U LManager QtZgAcer.EXEAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U LManager QtZpAcer.exeAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U LManager HotkeyApp.exe"Programmable keys on Acer
U LManager QtaET2S.EXE"Acer Launch Manager - on Acer laptops
U LManager CPLBCL53.EXESystem Tray icon found on Acer Travelmate laptops that allow you control access to the Internet and email buttons and other computer configurations
U Lmanager LManager.exe"Acer Launch Manager - manages configuration of the multimedia keys on their range of notebooks
X lMAPl lMAPl.exe"Added by the AGOBOT-RE WORM!"
U LMgrOSD OSDCtrl.exe"OSD (on-screen-display) utility - part of Acer Launch Manager. Gives you control to customize the monitor to your liking...from sound
N LMonitor LMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
? lmpdpsrv lmpdpsrv.exe"Related to a Lexmark printer/scanner. Printer sharing server? Is it required?"
X lmrt lmrt.exeUnidentified adware
N LMSTATUS LMSTATUS.EXEXerox WorkCenter XE - language monitor status application
Y LMSXXD LMSXXD.exeDriver for Xerox XD series printer/copiers
X lmu LMU.exe"Detected by Kaspersky as the AGENT.BG TROJAN!"
X lnternet Explorer AMSNDMGR.EXE"Added by the KWBOT.R WORM! Note that the ""l"" is a lower case ""L"" and not an upper case ""I"""
X lnternet Update lExplore.exe"Added by the RBOT-GRH WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X lnwin.exe lnwin.exe"Added by the DLOADR-ATC TROJAN!"
X load mdm.exe"Added by the BINGHE TROJAN! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)"
X load msgsr32.exe"Added by the SDBOT-QR WORM!"
X load [path to worm]"Added by the KELVIR.AI WORM!"
X Load MyGame.exe"Added by the LAMEYEAR-A WORM!"
X load _Kerne1.exe"Added by the LINEAGE-AN TROJAN!"
X load Internat.exe"Added by the WOWCRAFT TROJAN!"
X load rundll32.exe"Added by the WOWCRAFT TROJAN!"
X load svhost32.exe"Added by the WOWCRAFT TROJAN!"
X load svchsot.exe"Added by the GWGHOST-O TROJAN!"
X load explorer.exe"Added by the LINEAGE-OZ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X load Kerne121.exe"Added by the LINEAGE-ON TROJAN!"
X load Kerne1211.exe"Added by the LINEAGE-DY TROJAN!"
X load rundl132.exe"Added by the LOOKED-CK WORM!"
X load ctftpscr32.exe"Added by the AGENT-FPN TROJAN!"
X Load win32.exe"Added by the RUBBLE-A WORM!"
X load QQ.exe"Added by the QUADRULE.A WORM! Note - this is not the Tencent QQ Asian instant messanger program which is located in %Windir%"
X load WinExplorer.exe"Added by the VB.EIW WORM!"
X load Systemfile.dll.vbs"Added by an unidentified WORM or TROJAN! See here"
X load KHATRA.exe"Added by the ORBINA-A WORM!"
X Load Service SvHost.exe"Added by the PESIN-D WORM!"
U LOAD WB LOADWB.EXE"Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars
X Load-Guard Wscript.exe LGuarg.exe.vbs"Added by the YENO.B and YENO.C WORMS! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""LGuarg.exe.vbs"" file is located in %Windir%"
X LOAD32 Lorena.exe"Added by the MAPSON.C WORM!"
X load32 load32.exe"Added by the NIBU
X load32 l32x.exe"Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM!"
X load32 1111a.exe"Added by the DUMARU.AH WORM!"
X load32 swchost.exe"Added by the TURTA.A WORM!"
X load32 netda.exe"Added by the NIBU.E TROJAN!"
X load32 winldra.exe"Added by the NIBU.J BACKDOOR or DUMARU-BI TROJAN! Note - also known as Srv.SSA-KeyLogger by Sunbelt Software which has developed a free removal tool for this keylogger"
N load= adw30.exeAfter Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
U load= asistat.exeStatus monitor for an NEC SuperScript printer
? load= cfgsys32.exe"??"
U load= esspk.exe"Speakerphone capability through a soundcard for an ESS modem"
Y load= hotkey.exeSolo 5300 display driver for Win2K on some Gateway laptops
N load= HPWHRC.EXELoads the Status Window software for the HP Laserjet printers
? load= WPSLOAD.EXE"Windows printing system that comes with the setup for Canon BJC series on the manufacturer's disk"
N load= vi_grm.exeMonitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
? load= WINOSCFG.EXE"Could it be something to do with configuring Windows on a new PC from an OEM supplier?"
Y load= wpshrc.exeRequired to prevent configuration errors on a Compaq LBP-660 and LBP-460 parallel port laser printers (and maybe others)
Y load= Bfrecv.exeBitware modem driver
X load= msater.exe"Added by the RETSAM TROJAN!"
X load= shambl3r.exe"Added by the REMABL WORM!"
X load= Spoolsv.exe"Added by the CIADOOR.B TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%"
? Load= wtfeat.exe"Associated with the Wintab Digitizer"
Y load= AICLIENT.EXE"Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system"
X load= hint.exe"Added by the ATAK WORM!"
X load= win32exec.exe"Added by the BITTER WORM!"
X load= a1g.exe"Added by the ATAK.B WORM!"
X load= dapdll.exe"Added by the ATAK.E WORM!"
X load= svhost32.exe"Added by the LINEAGE-AB TROJAN!"
Y load= 01comm32.exe"Related to Elsa CommPro (Communicate Pro) access software for Microlink modems - this software contains answering machine and fax functions
X load= inetinfo.exe"Added by the PROXY-GG TROJAN!"
X load= Kerne14.exe"Added by the LINEAGE-BA TROJAN!"
X Loadab1 explorer.exe"Added by the LINEAGE-AJ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
Y LoadBlackD blackd.exe"""Intrusion detection system"" of the BlackICE PC Protection (was Defender) firewall which loads independently of the ""user interface"" (BlackICE Utility). BlackICE was supported by IBM Internet Security Systems (formerly just ISS) when them acquired the NetworkICE parent but is no longer available. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list