Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X MalwareWiped MalwareWiped.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 5.5 MalwareWiped 5.5.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 5.6 MalwareWiped 5.6.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 5.7 MalwareWiped 5.7.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 5.8 MalwareWiped 5.8.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 6.1 MalwareWiped 6.1.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 6.2 MalwareWiped 6.2.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 6.3 MalwareWiped 6.3.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 6.4 MalwareWiped 6.4.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiped 6.9 MalwareWiped 6.9.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWipeds MalwareWipeds.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWipePro MalwareWipePro.exe"MalwareWipe rogue security software variant - not recommended
X MalwareWiper MalwareWiper.exe"MalwareWipe rogue security software variant - not recommended
X MalWarrior MalWarrior.exe"MalWarrior rogue security software - not recommended
Y Mamutu mamutu.exe"Background Guard feature of Mamutu from Emsi Software GmbH - which provides behaviour rather than signature based protection that ""recognizes new and unknown Trojans
Y Mamutu Guard mamutu.exe"Background Guard feature of Mamutu from Emsi Software GmbH - which provides behaviour rather than signature based protection that ""recognizes new and unknown Trojans
U ManageDesk Lite ManageDesk Lite.exe"ManageDesk Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use"
X ManageProtocolCtrl csmsv.exe"Added by the LOOKSKY.B TROJAN!"
X manager manager.exe"Detected by Kaspersky as the SMALL.CVT TROJAN!"
U Manager Monitor monitor.exe"MindStorm AnalyzerPro from Secure Associates. ""A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"""
X Managment Service [random filename]Added by the RBOT.BIS TROJAN!
N Mania Win Restore RESWIN.EXEPinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
N ManifestEngine ManifestEngine.exe"Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry"
X manrotce manrotce.exeAdded by unidentified malware
X Mantis [filename]"Added by the MANTIBE VIRUS!"
X MapEDC MapEDC.exe"Added by the WaveRevenue-McBoo TROJAN!"
X MapiDrv mpisvc.exe"Added by the MIPSIV TROJAN!"
X mapisvc32 mapisvc32.exe"Added by the KX VIRUS and also recognised by Symantec as FPAI adware"
X Mapiyasha Mapiyasha.exe"Added by the SILLYFDC-DM WORM!"
U Maple_S2P Scan2pc.exeScan to PC application for the scanning function of the Samsung CLX-216x Series multifunction printers
X mark the service xxtra32.exe"Added by the SDBOT.APP WORM!"
X Martini pinmart.exe"Added by a variant of the SDBOT WORM!"
X Mascro soft SDK updates2 SDKrepair2.exe"Added by the SDBOT.BXM WORM!"
X maskrider maskrider2001.vbs"Added by the SOLOW-G WORM!"
U masqform.exe masqform.exe"PureEdge Viewer - provides automation framework to manage and deploy XML forms-based processes for e-business and e-government systems. PureEdge was taken over by IBM (see here) and the product became Workplace Forms"
N Mass storage check registry "rundll32.exe MSDServ.dll check registry"
X Master svcghost.exe"Added by the IRCBOT.RB TROJAN!"
X Master Card Updaate 32 Mastercard32.exe"Added by a variant of the RBOT WORM!"
U Master Volume Spy MASTERVOLUMESPY.EXE"Volume control for the Gateway Destination ""DestiVu"" media interface"
X MasterBoot Switch popupkill.exe"Added by a variant of the RBOT WORM!"
U Matador mlfbuddy.exe"MailFrontier - anti-spam application"
U Matador mantispm.exe"MailFrontier Desktop (Matador) email spam blocker software"
U Matrix Screen Locker matrix.exe"Matrix Screen Locker is a system tray application that allows for quick and secure PC lock when you wish. The screen does a ""matrix style"" scrolling characters effect when the lock is running"
X MatrixScreen [filename]"Added by the MATRIXSCREEN TROJAN!"
X MatrixScreenSaver mss.exeUnidentified malware
N Matrox Color Control hgcctl95.exeFor Matrox video cards. Quick access to changing colors
N Matrox Control Center mgactrl.exeFor Matrox video cards. Quick access to settings
N Matrox Diagnostic mgadiag.exeFor Matrox video cards. Quick access to diagnostics
N Matrox Powerdesk PDesk.exe"""Matrox PowerDesk software provides extra multi-display desktop management controls"""
N Matrox PowerDesk 8 matrox.powerdesk.exe"""Matrox PowerDesk software provides extra multi-display desktop management controls"""
N Matrox PowerDesk SE Matrox.PowerDesk SE.exe"Matrox PowerDesk SE - multi-display desktop management controls"
N Matrox QuickDesk mgaqdesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
X MAV_check mav_startupmon.exe"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X mav_startupmon mav_startupmon.exe"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X MaxAlerts max.exeBonzi MaxALERT - spyware
X MaxAntiSpy MaxAntiSpy.exe"MaxAntispy Russian rogue spyware remover - not recommended"
U MaxBackSchedule maxbackservice.exeBackup scheduler for the Maxtor (now Seagate) range of external hard drives - part of Maxtor Quick Start
U MaxBlastMonitor MaxBlastMonitor.exe"Maxblast hard drive utility for Maxtor (Seagate) drives"
X Maxsized gqasqs.exe"Added by the LIOTEN.IR WORM!"
Y MaxtorCombo ComboButton.exeRequired to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
U MaxtorOneTouch OneTouch.exe"Maxtor OneTouch Hard Drives/OneTouch Family hard disk backup software"
U MaxtorReg AUTOREG.EXEPart of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
Y MayaPan MayaPan.Exe"Audiotrak Maya soundcard driver"
X mb2np [random filename]Added by the IRCBOT.TJ WORM!
Y mbamgui mbamgui.exe"System tray access to and realtime protection agent for the registered version of MalwareBytes' Anti-Malware - which is ""considered to be the next step in the detection and removal of malware. In our product we have compiled a number of new technologies that are designed to quickly detect
X MbarInstall [random filename]"Mirar adware"
U MBkLogOnHook LogOnHook.exe"Part of McAfee Data Backup (now Online Backup) - which ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup"
U MBM 4 MBM4.exeMotherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U MBM 5 MBM5.exe"Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs"
U MBMon "Rundll32 CTMBHA.DLLMBMon"
U MBNet mbnet.exeMBNet (Portugal) Credit Card Processing software
U MBProbe mbrpobe.exe"MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs"
X mbsmon32 mbsmon32.exe"Micro Bill Systems Billing Software - ""is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet"""
X mbssm32 mbssm32.exe"Micro Bill Systems Billing Software - ""is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet"""
X mbssm32 monstu.exe"Detected by AVG as the AGENT.CNM TROJAN - see here"
X MC wintrims.exe"Added by the WINTRIM TROJAN!"
X MC MAGICON.EXE"Added by the MAGICON.A TROJAN!"
X MC N/A"Added by the SIMCSS TROJAN!"
X MC WINTRIM.EXE"Added by the WINTRIM.A TROJAN!"
X McAfee McAffeAv.exe"Added by the NETSKY.AL WORM!"
X mcafee Win32.dll.vbs"Added by the CATCHER-B WORM!"
X Mcafee Anti Scan NortonScn.exe"Added by a variant of the RBOT WORM!"
X McAfee Antivirus McAfeeAV.exe"Added by a variant of the RBOT WORM!"
X McAfee Antivirus 32 MCAFEEAV32.EXE"Added by the SPYBOT-EH WORM!"
X Mcafee Antivirus Monitoring System326 VSStatmn326.exe"Added by a variant of the SDBOT WORM!"
X Mcafee Antivirus Monitoring System32mn VSStatmn32.exe"Added by a variant of the RBOT WORM!"
X McAfee Antivirus Protection mcafeeAV.exe"Added by a variant of the RBOT WORM!"
Y McAfee Application Installer mcappins.exeUsed by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
X Mcafee Auto Protect mcafeshield.exe"Added by the RBOT-UH WORM!"
U McAfee Backup McAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
U McAfee Backup and Restore McAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
U McAfee Data Backup LogOnHook.exe"Part of McAfee Data Backup (now Online Backup) - which ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup"
U McAfee Data Backup McAfeeDataBackup.exe"McAfee Data Backup (now Online Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
Y McAfee Desktop Firewall Tray FireTray.exe"McAfee Desktop Firewall"
Y McAfee Family Protection mfp.exe"McAfee Family Protection - which 'is easy-to-use and built to empower parents to say ""yes"" to their children's online interests while protecting them as they learn and explore' and ""protects children of all ages from exposure to inappropriate content
Y McAfee Firewall CPD.EXEFirewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
U McAfee Guardian CMGrdian.exe"McAfee Guardian shortcut menu on the System Tray (looks like a castle) given access to Internet Security
Y McAfee Managed Desktop Agent MYAGTSVC.EXE"Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
U McAfee Managed Services Tray StartMyagtTry.exeSystem tray notification for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
U McAfee Online Backup MOBKstat.exe"System Tray access to McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
U McAfee Online Backup Status MOBKstat.exe"System Tray access to McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
X McAfee Online virus Scanner avp.exe"Added by the RBOT-GCV WORM! Not to be confused with Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory"
X McAfee Online Virus Scanner nzm.exe"Added by the IRCBOT.XV WORM!"
U McAfee QuickClean Imonitor Plguni.exe"Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection
Y McAfee SecurityCenter mcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y McAfee SecurityCenter McUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
X mcafee Software Intrenet mcafee.exe"Added by the RBOT-ATR WORM! Note - this is not a valid McAfee program"
U McAfee SpamKiller MskAgent.exe"McAfee SpamKiller - rule-based and list-based spam filter. Available as a stand-alone product or included in older versions of Internet Security and Total Protection"
Y McAfee VirusScan mcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
Y McAfee VirusScan mcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
Y McAfee VirusScan oasclnt.exe"On-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access
X Mcafee VirusScan Manager mvcsvm.exe"Added by the SILLYFDC.BBV TROJAN!"
X McAfee Windows Protection mcafee32.exe"Added by a variant of the SPYBOT WORM!"
N McAfee Winguage ??"Part of McAfee Nuts & Bolts. ""WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications
U McAfee.InstantUpdate.Monitor RuLaunch.exe"Instant Updater for McAfee's VirusScan
U McAfeeDataBackup McAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
Y McAfeeFireTray Firetray.exe"McAfee Desktop Firewall"
X MCAFEEIPS setup.exe"Added by the WHITEWELL TROJAN!"
X McAfeeScanPlus McAfeeScanPlus.exe"Added by the MEPCOD TROJAN! This trojan file does not belong to any McAfee Antivirus Software and is found in the Windows or Winnt folder"
Y McAfeeUpdaterUI UpdaterUI.exeMcAfee common updater user interface
Y McAfeeUpdaterUI UdaterUI.exeUpdater user interface for McAfee's VirusScan Enterprise corporate anti-virus and anti-spyware security tool
Y McAfeeVirusScanService Avsynmgr.exe"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
Y McAfeeWebscanX WebScanX.exe"From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs
X Mcaffe Antivirus Mcafeescn.exe"Added by a variant of the SPYBOT WORM!"
X MCAFFE FLD LOADER MCAFFEFLD.EXE"Added by the RBOT-PY WORM!"
X Mcaffee mcsheild.exe"Added by the RBOT-FDP WORM!"
Y mcagent mcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y MCAgentExe mcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y mcagent_exe mcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y mcappins mcappins.exeUsed by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
X mceipww [8 random letters].exe"Added by the ZHELATIN.EQ WORM!"
N McENUI McENUI.exe"McAfee's EasyNetwork user interface - ""enables secure file sharing
N MChanger MChanger.exe"Media Changer - utility that allows you to change wallpapers
U MCI USB Icon USBIcon.exeMCI USB software used for managing a USB card reader
N McLogLch_exe McLogLch.exe"Related to McAfee security suite. This is a non-essential program
X MCM3 mcm3.exe"ShopAtHome/SAHagent adware variant"
Y mcmnhdlr mcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
N MCPLaunch MCPLaunch.exe"Launcher for Message Center Plus ""which alerts you when conditions arise on your computer that require your attention"" on IBM/Lenovo ThinkCentre desktops
N McRegWiz mcregwiz.exeProduct registration wizard for McAfee's range of internet security tools
X Mcrosoftr Update Mcrosoftr.exe"Added by a variant of the RBOT WORM!"
Y McShld9x mcshld9x.exe"Window 9x/Me on-access scanner for older McAfee's internet security products such as VirusScan and VirusScan Online which scans files in real-time for malware as you access
X Mcsoft gfeqzvq.exe"Added by the SDBOT-NV WORM!"
Y MCTskShd mctskshd.exe"Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online and used to schedule tasks such as automatic updates
Y mcui_exe mcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y McUpdate McUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Y MCUpdateExe McUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Y McVsRte mcvsrte.exe"Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
Y mcvsshld mcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
X MCX Update wisp.exe"Added by the RBOT-AQH WORM!"
X MCX Updte scorti.exe"Added by the RBOT-ARP WORM!"
X MD IE Plugin md.exe"Marketdart spyware"
X MD IE Plugin winy.exeAdware
N mdac_runonce runonce.exeAssociated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe".
U MDDiskProtect MDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
U MDDiskProtect.exe MDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
X mdetect [path to trojan]"Added by the SPABOT TROJAN!"
U MDGetStarted MDGetStarted.exe"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista
U MDGetStarted.exe MDGetStarted.exe"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista
X Mdm Mdm.vbs"Added by the WHITEHO VIRUS or TRAPPY WORM!"
X mdm mdm.exe"Added by the LYDRA-F TROJAN! ! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only). This one is located in %Windir%"
X MDM Rock 4 [8 random letters].exe"Added by the SDBOT.CHG BACKDOOR!"
U MDM7 MDM.EXE"Used by developers for debugging and is a component of several MS products including Office and Visual Studio. Those who have encountered it have unchecked it with no degradation in performance. It may cause your computer to ""hang"" if you have Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendation. For this entry it loads under the ""RunServices"" key in 98/Me. It also loads as a service in XP/Vista. In both cases it's located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug"
X Mdmdll mdmdll.exe"Added by the CRYPTER TROJAN!"
X Mdmdll32 mdmdll32.exe"Added by a variant of the CRYPTER.C TROJAN!"
X MDN MDNS.exe"Added by the SPYBOT.JPB WORM!"
X MDN MDNZ.exe"Added by the RBOT.AQD WORM!"
X MDN MDN.exe"Added by the RBOT.AOA WORM!"
X MDNS service.exe"Mirar adware variant"
X mds.exe mds.exe"Added by the MADS-A TROJAN!"
U MDSA Sentinel X smss.exe"SentinelX surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the smss.exe process which is always located in %System%. This one is located in %ProgramFiles%\MDSA Software"
X mdwmdmsp mdwmdmsp.exe"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
N MECA Meca.exe"Meca cross-platform communications technology
X MedGS MEDGS1.exe"PacerD_Media/Pacimedia.com adware"
X Media Access MediaAccK.exe"WindUpdates MediaPass adware"
X Media Adapter bitblt.exe"Added by the HANSAH-A WORM!"
U Media Card Companion Monitor MCC Monitor.exe"Monitor for Media Card Companion from ArcSoft. ""Automates the tedious processes associated with downloading and sharing files from digital cameras
U Media Codec Update Service update.exe"Windows Essentials Codec Pack 1.0 is a collection of the most commonly needed video and audio codecs. This program allows keeps these codecs updated"
X Media Gateway MediaGateway.exe"WindUpdates MediaPass adware"
X Media Load msn32.exeAdded by a unidentified WORM or TROJAN!
U Media Manager Indexer AIRSVCU.EXE"Part of MS Visual InterDev
X Media Pass MediaPassK.exe"WindUpdates MediaPass adware"
X Media Pass MediaPass.exe"WindUpdates MediaPass adware"
X Media Player media.exe"Added by the FLDMEDIA-A TROJAN!"
X Media Player wmplayer.exe"Added by a variant of the AGOBOT.BM WORM! Note - this is not the valid Windows Media Player as the file is located in %System% rather than %ProgramFiles%\Windows Media Player"
X Media Player Sysdll.exe"Added by the BANKER-BR TROJAN!"
X Media Player Sysnet.exe"BANKER.MW spyware"
X Media Player Update xpsp1mfh.exe"Added by a variant of the RBOT WORM!"
X Media Plug x.1.2 msdm.exeAdded by the MULDROP.352 VIRUS!
X Media Server msdts.exe"Added by a variant of the IRCBOT TROJAN!"
X Media Service msn64.exe"Added by the SPYBOT.EV WORM!"
X Media service msnmsgxr.exe"Added by the SDBOT.TF WORM!"
X Media service SYSTEM64.EXE"Added by the RBOT.QV WORM!"
X Media service notpad.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
X Media Services [filename].exe"Added by the AGENT-BA BACKDOOR!"
X Media Software UPdater sscs.exe"Added by the RBOT-ABE WORM!"
X Media Transfer Protocals msstc.exe"Added by a variant of the IRCBOT TROJAN!"
X Media X Services MSNGRx.exe"Added by the RBOT.AUL WORM!"
X Media-XP-Service-Pack3 msnzx.exe"Added by the SDBOT-ACW WORM!"
X MEDIA32 [path to trojan]"Added by the PURSCAN-Z TROJAN!"
U MediaButtons MediaButtons.exe"Supports the eject button on the front on the Dell Studio Hybrid desktop. If disabled
X mediacodec.exe mediacodec.exe"Added by the VSCODEC PRO TROJAN!"
N MediaFace Integration Sethook.exe"Fellowes Neato® cd label design software. ""Launch NEATO's MediaFACE II label making software directly from the productname toolbar"""
U Mediafour Mac Volume Notifications MACVNTFY.EXE"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
U Mediafour MacDrive MacDrive.exe"MacDrive 7 & MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Version 6 is not Vista compatible but doesn ""include support for striped Mac arrays created with ATTO ExpressStripe software."""
U Mediafour MacDrive MDDiskProtect.exe"Part of MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
U Mediafour MacDrive MDGetStarted.exe"MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista
U Mediafour XPlay Tray Notification Icon Xptryicn.exe"Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod"
U Mediafour XPlay Tray Notification Icon Xptryicn.exe"Xplay 2 from Mediafour Corporation - ""expands what you can do with any iPod
U MediafourGettingStartedWithMacDrive6 MacDrive.exe"MacDrive 6 CrossStripe Edition from Mediafour Corporation - ""a perfect way to share files between Mac OS and Windows."" Unlike the standard version of MacDrive 7
U MediaKey MediaKey.exe"Multimedia keyboard manager. Required if you use the multimedia keys"
U MediaLifeService MediaLifeService.exe"Related to MediaPlay Cordless Mouse from Logitech"
X MediaLoads dw.exe"Medialoads adware"
X MediaLoads Installer dw.exe"Medialoads adware"
N MediaMonitor Mediam~1.exeInstalled by Smartdisk MVP CD burning software. Software will work fine without it
X mediamotor.exe mmups.exe"Added by the AGENT-BY TROJAN!"
X MediaPath Proyecto1.exe"Added by the GRUEL WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list