HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	Microsoft File Demand Manager	wmgrdf.exe	"Added by a variant of the RBOT WORM!"
N	Microsoft Find Fast	Findfast.exe	From older versions of MS Office - searches disk drives for Office file types and creates an index to make opening them easier. When indexing is in progress it can use lots of CPU time and memory - especially on slower/older machines
X	Microsoft Firewall	firewallsp2.exe	"Added by the RBOT-MC WORM!"
Y	MICROSOFT FIREWALL CLIENT	ISATRAY.EXE	"MS Internet Security and Acceleration Server - see here"
X	Microsoft FixUp	pevblbvr.exe	"Added by the RBOT.DWK WORM!"
X	Microsoft FixUp	wnpzjpuw.exe	"Added by a variant of the SDBOT WORM!"
X	microsoft frontpage	twain.exe	"Added by the AGENT.AQO TROJAN!"
X	Microsoft Games	gamemanager.exe	"Added by the SPYBOT.AHQ WORM!"
X	Microsoft Generic Update Manager	wupdate.exe	"Added by the RBOT-AWC TROJAN!"
X	Microsoft Genetic Procress	svchost.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Genuine Logon	msnmsg.exe	"Added by the IRCBOT-XH WORM!"
X	Microsoft Genuine Logon	svchost.exe	"Added by the SDBOT.EXT WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	MicroSoft Getway Dire	[random filename]	"Added by the IRCBRUTE.AM WORM!"
X	MicroSoft Getway mqbol	[12 random letters].exe	"Added by the RBOT.GBA WORM!"
X	Microsoft Gina V Encryption	MSGINAV.EXE	"Added by an unidentified VIRUS
N	Microsoft Greetings Reminder	MHPRMINF.EXE	You really want to be reminded about somebody's birthday at the expense of resources?
N	Microsoft Greetings Reminders	MHPRMIND.EXE	Microsoft Home Publishing greetings reminder
N	Microsoft Greetings Workshop Reminder	Gwremind.exe	You really want to be reminded about somebody's birthday at the expense of resources?
X	Microsoft HDCP for NT	msdhcp.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft HDCP for NT and Win9x	msdhcprs.exe	"Added by a variant of the PEERBOT WORM!"
X	Microsoft Help	svh0st.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Help	svchosl.exe	"Added by the AGENT-GPX TROJAN!"
X	Microsoft Help Support	mshelp32.exe	"Addded by the KELVIR-BF WORM!"
X	Microsoft Help SVC	msnmngr.exe	"Added by the SDBOT-PQ WORM!"
X	Microsoft Help System	mshelp32.exe	"CoolWebSearch parasite variant"
X	Microsoft Helpdesk Side	mshelpdsk.exe	"Added by the SPYBOT.ANJJ WORM!"
X	Microsoft Host Protocol	svhost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Hosting Service	WINHOSTING.EXE	"Added by the RBOT.AEV WORM!"
X	Microsoft Hosts Service	Isass.exe	"Added by a variant of the RBOT WORM!"
X	microsoft hotmail monitor	mshotmon.exe	"Added by the MYTOB-FL WORM!"
X	Microsoft hren1	mmhren1.exe	Added by a variant of the AGENT.IWW TROJAN!
X	Microsoft Hyptertext Helper	mshtha.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft IDCN	mshe1p.exe	Added by an unidentified TROJAN!
X	Microsoft IE	Iexplore.exe	"Added by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft IE Execute shell	IEExec.exe	"Added by the ALADINZ.N TROJAN!"
X	MicroSoft IE Sasser	ISASS.EXE	"Added by the SDBOT.MX WORM!"
X	Microsoft IIS	syshost.exe	"Added by the FRANCETTE WORM!"
X	Microsoft IIS	[filename]	"Added by the FRANCETTE-S WORM!"
U	Microsoft IME 2002	IMJPMIG.EXE	"Microsoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails
X	Microsoft Inc.	iexplorer.exe	"Added by the LOVGATE.E WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Inc.	iexplorer.exe...	"Added by the LOVGATE.AO WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Incroporate	mfs.exe	"Added by the RBOT-ANF WORM!"
X	Microsoft Inet Xp..	teekids.exe	"Added by the BLASTER.C WORM!"
X	Microsoft Information	securenet.exe	"Added by the SDBOT.AJM WORM!"
X	Microsoft Information Check	microsoft.exe	"Added by the IRCBOT.AUH TROJAN!"
X	Microsoft Initialization Service	initsvc.exe	"Added by the IRCBOT.AXK BACKDOOR!"
X	Microsoft Initialization Services	initserv.exe	"Added by the IRCBOT-ABO TROJAN!"
X	Microsoft Install Shield Services	rundll64	"Added by the RBOT-FSH WORM!"
X	Microsoft Installshield	nundll32.exe	"Added by the AGOBOT-AHZ WORM!"
X	Microsoft Instant Messenger	msngmsngr32.exe	"Added by the SPYBOTER.GEN TROJAN!"
X	Microsoft Int Service	MsIntSrv.exe	"Added by a variant of the RBOT WORM!"
U	Microsoft IntelliPoint	ipoint.exe	"Microsoft IntelliPoint utility (from version 5.5) - required to support the programmable buttons and additional features on Microsoft's range of mice
U	Microsoft IntelliPoint	point32.exe	"Microsoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice
U	Microsoft Intellitype Pro	speedkey.exe	Additional keyboard shortcuts on MS programmable keyboard
U	Microsoft IntelliType Pro	itype.exe	"Microsoft IntelliType Pro utility (from version 5.5) - required to support the multimedia keys
U	Microsoft IntelliType Pro	type32.exe	"Microsoft IntelliType Pro utility (up to version 5.4) - required to support the multimedia keys
X	Microsoft Internal AntiVirus Systems	dIlhost.exe	"Added by the RBOT-AEV WORM!"
X	Microsoft Internel Corporat	netvhost.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Internel Corporat	smbvhost.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Internet	expl0rer.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Internet	windows32.exe	"Added by the SDBOT-F WORM!"
X	Microsoft Internet	wincfg16.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Internet Acceleration Utility	iau.exe	"EasySearch adware"
X	Microsoft Internet Acceleration Utility	[path to file]	"Added by the AGENT-CX TROJAN!"
X	Microsoft Internet Acceleration Utility	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Microsoft Internet Antivirus Protection	antivirus.exe	"Detected by Kaspersky as the IRCBOT.BSK TROJAN!"
X	Microsoft Internet Dumping Protocol	inetdump.exe	"Added by the IRCBOT.BLL BACKDOOR!"
X	Microsoft Internet Exp	iiexplorer.exe	"Added by the RBOT-KX WORM!"
X	Microsoft Internet Explorer	iexplore.exe	"Added by the POEBOT-J WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft Internet Explorer	iexplorer.exe	"Added by the SDBOT-XN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Internet Explorer	crsys32.exe	"Added by the RBOT.UZ WORM!"
X	Microsoft Internet Explorer	movies.exe	"Added by the BANCOS-DZ TROJAN!"
X	Microsoft Internet Explorer	svzhost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Internet Explorer	mccagent.exe	"Added by the DLOADER-UD TROJAN!"
X	Microsoft Internet Explorer	sysini.exe	"Added by the DELF-LN TROJAN!"
X	Microsoft Internet Explorer	svchost.exe	"Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""drivers"" subfolder"
X	Microsoft Internet Explorer	lEXPLORE.EXE	"Added by the RBOT-AMM WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Microsoft Internet Explorer	svchosts.exe	"Added by the BANCBAN-U TROJAN!"
X	Microsoft Internet Explorer	[path to trojan]	"Added by the BANCBAN-AS TROJAN!"
X	Microsoft Internet Explorer	msngrt.exe	"Added by the SDBOT-GU BACKDOOR!"
X	Microsoft Internet Explorer	_svchost.exe	"Added by the TINY.LX TROJAN!"
X	Microsoft Internet Explorer Manager	ie.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Internet Explorer Update	ieupdate.exe	"Added by the SHEUR.MH TROJAN!"
X	Microsoft Internet Firewall	firewall.exe	"Added by the IRCBOT.MD BACKDOOR! Located in %System%"
X	Microsoft Internet Firewall Manager	GMT16.exe	"Added by the RANDEX.AT WORM!"
X	Microsoft Internet Firewall Update	updater.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Internet Services	Smss32.exe	"Added by the RBOT.MS WORM!"
X	Microsoft Internet Syncing	inetsync.exe	"Added by the IRCBOT.BLL BACKDOOR!"
X	Microsoft Intrenet Explorer	goaw.pif	"Added by the RBOT-API WORM!"
X	Microsoft Intrenet Explorer	Soundsyst.exe	"Added by the RBOT-AQU WORM!"
X	Microsoft Intrenet Explorer	cnsg.pif	"Added by the RBOT-ARO WORM!"
X	Microsoft Intrenet Explorer	wcumrg.exe	"Added by the SDBOT-AFD WORM!"
X	Microsoft IPC	system.exe	"Added by the NULLBOT TROJAN!"
X	Microsoft IPC	svshost.exe	"Added by an unidentified VIRUS
X	Microsoft IT Update	win64.exe	"Added by the RBOT.GA WORM!"
X	Microsoft IT Update	[random filename]	"Added by a variant of the RBOT WORM!"
X	Microsoft IT Update	IEserv.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft IT Update	msupdate.exe	"Added by the RBOT-FE WORM!"
X	Microsoft IT Update	winn43.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft IT Update	svchsst.exe	"Added by the RBOT-DH WORM!"
X	Microsoft IT Update	win43.exe	"Added by the RBOT-SA WORM!"
X	Microsoft IT Update	windows.exe	"Added by the RBOT-JM WORM!"
X	Microsoft IT Update	winsyst32.exe	"Added by the RBOT-FC WORM!"
X	Microsoft IT Update	Rhost32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Java Virtual Machine	MsConfiG.exe	"Added by the FORBOT-DV WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting"
X	Microsoft Java Virtual Machine	msjvm.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Java Virtual Machine	javavm.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Java Virtual Machine	msjavarxp.exe	"Added by the FORBOT-DL WORM!"
X	Microsoft Java Virtual Machine	winscr32.exe	"Added by a variant of the WOOTBOT WORM!"
X	Microsoft Java Windows Update	[filename]	"Added by the RBOT-DZ WORM!"
X	Microsoft JavaVM	msjarun.exe	"Added by the RBOT-JW WORM!"
X	Microsoft Kernel	Windows_kernel32.exe	"Added by the NETSKY.AE WORM!"
X	Microsoft Keyboard Enhance 2.0.	iasrecst.exe	"Added by the BCKDR-QIL BACKDOOR!"
X	Microsoft Keyboard Enhance V2.0	iasrecst.exe	"Detected by F-Prot as the DOWNLOADER2.AILI TROJAN!"
X	Microsoft Kinetik Svc	msftksvc.exe	"Added by the AGENT.AGDO TROJAN!"
X	Microsoft LAN32 Protocol	lanXp.exe	"Added by the RBOT-SS WORM!"
X	MicroSoft Legal Service	Srb0ty.exe	"Added by the SPYBOT.HW WORM!"
X	MicroSoft Legal Syst3m32	Syst3m32.exe	"Added by the RBOT.UYL WORM!"
X	Microsoft Lmhosting Service	lmhosts.exe	"Added by the RBOT-RC WORM!"
X	Microsoft Locals 332	[random filename]	"Added by the RBOT-KU WORM!"
X	Microsoft Locals466	xagwxzy.exe	"Added by the SPYBOT.EL WORM!"
U	Microsoft Location Finder	LocationFinder.exe	"Microsoft Location Finder ""is a client-side application that turns a regular WiFi enabled laptop
X	Microsoft Login	winlogin.exe	"Added by the RBOT-AJP WORM!"
X	Microsoft Logins	winlogins.exe	"Added by the SPYBOT.BCZ WORM!"
X	Microsoft Logon User Interface	logonnui.exe	"Added by the RBOT-BCC WORM!"
X	Microsoft LSA layer	MSLSA32.exe	"Added by the RBOT-AKZ WORM!"
X	Microsoft Lsass Center	Isass.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Lsass Center	telecomes.exe	"Added by a variant of the RBOT WORM! See here"
X	Microsoft Lsass Manager	lsass.exe	"Added by a variant of the SDBOT WORM! Note - this is not the legitimate lsass.exe process
X	Microsoft Lsass Service	wintcp32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft LSASS386 Protocol	scvhost32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft LV	[path to file]	"Added by the BDOOR-BDL BACKDOOR!"
X	Microsoft Machine	winjava.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft machine	blah.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft machine	scvhost.exe	"Added by the RBOT.AEU TROJAN!"
X	Microsoft Machine	updata.exe	"Added by the RBOT-DJ WORM!"
X	Microsoft Machine	temp.exe	"Added by the RBOT-FSQ WORM!"
X	Microsoft Machine	winxp43.exe	"Added by the RBOT-IA WORM!"
X	Microsoft machine	arcpack.scr.exe	"Added by the RBOT.ADF BACKDOOR!"
X	Microsoft Machine Script	iexplorersis.exe	"Added by the RBOT-CMH WORM!"
X	Microsoft MachineUpdatese	tempes.exe	"Added by the RBOT.EWN BACKDOOR!"
X	Microsoft Macro Protection SubSsy	msacroprots386.exe	"Added by the RBOT-KE WORM!"
X	Microsoft Macro Protection Subsystems	msmacroprotxz.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Macro Protection Subsystems	Msmacroprot32.exe	"Added by the RBOT.KN WORM!"
X	Microsoft Manage Services	sychost.exe	"Added by the SLENFBOT.AD WORM!"
X	Microsoft Manage Services	schost.exe	"Added by the SLENFBOT.B WORM!"
X	Microsoft Management	lmas.exe	"Added by the FORBOT-CZ WORM!"
X	Microsoft Management Console	lssas.exe	"EasySearch adware"
X	Microsoft Management Console	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Microsoft Management Console	lssas1.exe	"Added by the DLOADR-AWD TROJAN!"
X	Microsoft Manager	msmanager.exe	"Added by the MYTOB.LF WORM!"
X	Microsoft Map PC	mappc.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Mapped PC	mappedpc.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft media	winmplayers.exe	"Added by a variant of the SPYBOT WORM!"
U	Microsoft Media Center Tray Applet	ehTray.exe	"Media Center Tray Applet - part of Windows Media Center on XP MCE
X	Microsoft Media Manager	medman.exe	"Added by the RBOT.EUZ WORM!"
X	Microsoft Media player 9	msmedia32.exe	"Added by the RBOT-ADO WORM!"
X	Microsoft media services	Iassd.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft media services	winmplayer.exe	"Added by the RBOT.ZO WORM!"
X	Microsoft MediaScope	winmes.exe	"Added by the RBOT-XU WORM!"
X	Microsoft Memory Dumping Protocol	memdump.exe	"Added by the IRCBOT.BJK BACKDOOR!"
X	Microsoft Memory Flow Cycle	flowcycle.exe	"Added by the IRCBOT.WAD BACKDOOR!"
X	Microsoft Memory Flow Cycle	flowcycles.exe	"Added by the WAREZOV.AAK WORM!"
X	Microsoft Message Machine	msmesg32.exe	"Added by the SPYBOT.BI WORM!"
X	Microsoft Messenger Management Controls	msmgmctl.exe	"Added by the RBOT-APA WORM!"
X	Microsoft messenger sd	msngersd.exe	Added by an unidentified TROJAN!
X	Microsoft Messenger Service	msmsg32.exe	"Added by the RBOT.BOK WORM!"
X	Microsoft Messenger XP	MSMSN32.exe	"Added by the RBOT-ZP WORM!"
X	Microsoft MicroP Protocol	wdgmr32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Ming Service	ming.exe	"Added by the RBOT-AWS WORM!"
X	Microsoft Movie Maker	Mmaker.exe	"Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program"
X	Microsoft MSGPLUS32 Protocol	msgplus32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft MSN 7 Services	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft MSN 7 Services	msnmsger.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft MSN Messenger	msnmnsgr.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Msn Messenger	msmsgs.exe	"Added by the BUZUS.AYX TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Microsoft MSN Services	msnsm.exe	"Added by the RBOT.ARV BACKDOOR!"
X	Microsoft MSNGR32 Protocol	msngr32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft msnseru	msnseru.exe	"Added by the RBOT-APB WORM!"
X	Microsoft MsnST	msnst32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft MSUPDATE	SpoolSvc.exe	"Added by the SXTB-A TROJAN!"
X	Microsoft Neser Experience	nese.exe	"Added by the RBOT-YH WORM!"
X	Microsoft Netview	gesfm32.exe	"Added by the RANDEX.C WORM!"
X	Microsoft Netview	mssvc32.exe	"Added by an unidentified VIRUS
X	Microsoft Netview Component v5.1	msnv32.exe	"Added by the RANDEX.F WORM!"
X	Microsoft Network	msnet.exe	"Added by the MOCKBOT.A WORM!"
X	Microsoft Network	Networksystem.exe	"Added by the SDBOT-AAI WORM!"
X	Microsoft Network Daemon for Win32	Netd32.exe	"Added by the SDBOT.R TROJAN!"
X	Microsoft Network Host	svc0host.exe	"Added by the SDBOT-AEN WORM!"
X	Microsoft Network Neighbourhood	networknbh.exe	"Added by the RBOT.DMN WORM!"
X	Microsoft Network Services Controller	mmsvc32.exe	"Added by the NANPY-A WORM!"
X	Microsoft Networking Agent For SP2	msnac32.exe	"Added by the SPYBOT.PEN WORM!"
X	Microsoft Nod32 Service	nood32.exe	"Added by the RBOT.EJP WORM!"
X	Microsoft Norotn Anti Virus	mnhpot.exe	"Added by the RBOT-GRO WORM!"
X	Microsoft Norton Antivirus	norton.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft NotePad	notepad.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft NT Drivers	ntdrv.exe	Added by the SDBOT.AJN TROJAN!
X	Microsoft NT Update	winexec32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Nvidia Video	nvidia.exe	"Added by a variant of the SDBOT WORM!"
N	Microsoft Office	osa.exe	On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
N	Microsoft Office	Msoffice.exe	Feature included with older versions of MS Office giving you access to common Office functions and optional shortcuts to Office (and other) programs. Some people prefer it but a better way is to create desktop shortcuts if you want access these features and programs quickly. Also available via Start → All Programs
X	Microsoft Office	MSMSGR.exe	"Added by the GAOBOT.BB WORM!"
N	Microsoft Office	Osa9.exe	On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
X	Microsoft Office	lserv.exe	"Added by the SDBOT.MH WORM!"
X	Microsoft Office	Microsoft Office.hta	HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X	Microsoft Office	msoicons.exe	"Added by the RBOT-ZI WORM! - NOTE - do no confuse with the legitimate Msoicons.exe file described here. The latter wil not be listed among your startups!"
X	Microsoft Office	Nxcao.exe	"Added by the RBOT-ZE WORM!"
X	Microsoft Office	nxcxtpr.exe	"Added by the RBOT-YG WORM!"
X	Microsoft Office	svxhost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Office	msoffice32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Office	msoff.exe	"Added by the RAKER-C TROJAN!"
X	Microsoft Office	microsoft.exe	"Added by the BANKER-VF TROJAN!"
X	Microsoft Office	msvcp.exe	"Added by the AGENT-XK TROJAN!"
X	Microsoft Office	msmsgr.exe	"Added by the GAOBOT.BB WORM!"
X	Microsoft Office	mdm.exe	"Added by the IBOT-A TROJAN! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)"
U	Microsoft Office 2010	BCSSync.exe	"Part of SharePoint Server 2010 which is part of the Microsoft Office 2010 suite. ""Business Connectivity Services (BCS) uses a cache to store a copy of the external data required by the BCS solutions deployed on the Office client. A process called BCSSync.EXE runs on the client and provides automatic cache refresh and data synchronization of the entity instances."" For more information - see here"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list