HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	Microsofts Service	lcsrv16.exe	"Added by a variant of the RBOT WORM!"
X	Microsofts Updates	lsasss.exe	"Added by the RBOT-AEX WORM!"
X	Microsofts Updatez	cmsssr.exe	"Added by an unidentified VIRUS
X	Microsofts Updatez	exploirez.exe	"Added by a variant of the RBOT WORM!"
X	MicrosoftServiceManager	mstask32.exe	"Added by the YAHA.P WORM!"
X	MicrosoftServiceManager	Wintsk32.exe	"Added by the YAHA.U WORM!"
X	MicrosoftServiceManager	EXPLORERE.EXE	"Added by the YAHA.AB WORM!"
X	MicrosoftServiceManager	msupdat.exe	"Added by the YAHA.AA WORM!"
X	MicrosoftShell	Shellcomm.exe	"Added by the BANCBAN-QG TROJAN!"
X	MicrosoftSourceSafe	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
X	MicrosoftSourceSafe	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
X	MicrosoftSys	SPOOLSYS.exe	"Added by the TARNO.N TROJAN!"
X	MicrosoftUpdate	syshelper.exe	"Added by the WOOTBOT.AC WORM!"
X	MicrosoftUpdate	WinUp32.exe	"Added by an unidentified VIRUS
X	MicrosoftUpdate	MicrosoftUpdate.exe	"Added by the BANKER-EHC TROJAN!"
X	MicrosoftUpdate	windll.exe	"Added by the RBOT-IH WORM!"
X	MicrosoftUpdate	RBuilder.exe	"Added by the DLOADR-BMV TROJAN!"
X	MicrosoftUpdate	svhest.exe	"Added by the RBOT-ES WORM!"
X	MicrosoftUpdate	downnew.exe	"Added by the TANTO-D TROJAN!"
X	MicrosoftUpdates	[path to trojan]	"Added by the DELF-LO TROJAN!"
X	MicrosoftUpdates	syshelped.exe	"Added by the FORBOT-AZ WORM!"
X	MicrosoftValue	syscnfg.exe	"Added by an unidentified VIRUS
X	Microsoftvirus	sysoverload.exe	"Added by the FORBOT-AL WORM!"
X	MicrosoftWindows	[various filenames]	"MagicSearch - a CoolWebSearch parasite variant"
X	MicrosoftWindows	a@26m.exe	"Added by the KILLPAR-B TROJAN!"
X	MicrosoftXP Service Pack 2	servicepack2.exe	"Added by the RBOT.EMC WORM!"
X	Microsoftz turn Control	aexl.exe	"Added by the SDBOT.BCO WORM!"
X	Microsoftz turn Control	read.pif	"Added by the RBOT-AFS WORM!"
X	Microsoft©	iexplore.exe	"Added by the IRCBOT-ACO TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\dllcache"
X	Microsoft© PID Lex	PIDLex.exe	"Added by the NIOVADOOR TROJAN!"
X	Microsoft© System Mapper	SysMap.exe	"Added by the MAPSY TROJAN!"
X	Microsoft« ActiveX Debugger NT	setdebugnt.exe	"Added by the BANCOS-CZ TROJAN!"
U	Microsoft® Windows Mobile® Device Center	wmdc.exe	"Windows Mobile Device Center - mobile device management/synchronization software for Windows7/Vista
U	Microsoft® Windows® Operating System	Sidebar.exe	"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
N	Microsoft® Windows® Operating System	"RunDLL32.exe ehuihlp.dll	BootMediaCenter"
N	Microsoft® Windows® Operating System	p2phost.exe	"Signs a user into the People Near Me feature at login in Windows 7 and Vista. People Near Me enables you to use certain peer-to-peer (P2P) programs on a network - that ""identifies people nearby who are using computers and allows those people to send you invitations for programs such as Windows Meeting Space. They can only invite you to participate in programs that are installed on your computer."" Available via Start → Control Panel"
U	Microsoft® Windows® Operating System	ehTray.exe	"Media Center Tray Applet - part of Windows Media Center on XP MCE
N	Microsoft® Windows® Operating System	"rundll32.exe oobefldr.dll	ShowWelcomeCenter"
N	Microsoft® Windows® Operating System	stikynot.exe	"Microsoft Sticky Notes - virtual sticky notes tool from Windows Vista. This implementation of the popular yellow ""Post-It"" tool is part of the Tablet PC features and allows you to enter either handwriting (via a pen or mouse) or record a voice note. AVailable via Start → All Programs"
U	Microsoft® Windows® Operating System	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
N	Microsoft® Works 7.0	wkcalrem.exe	If you schedule an event at any time in Microsoft Works Calendar and set a reminder then a shortcut will be added to Start → All Programs → Startup so this reminder service loads every time Windows starts
N	Microsoft® Works 8	wkcalrem.exe	If you schedule an event at any time in Microsoft Works Calendar and set a reminder then a shortcut will be added to Start → All Programs → Startup so this reminder service loads every time Windows starts
X	Microsong	svchosts11.exe	"Added by the SDBOT-EV WORM!"
X	Microsot NT Support	[random filename].exe	"Added by the RBOT-CTI WORM!"
X	Microsotufed Update 32	windinit.exe	"Added by the RBOT-CTJ WORM!"
X	Microst dds service	wsrss.exe	Added by an unidentified WORM or TROJAN!
X	microsystem	snddrv.exe	"Added by the VB.AXG TROJAN!"
X	Microszoft Update Mach1nezs	svchst.exe	"Added by the RBOT-ED WORM!"
U	Microtek Scanner Finder	ScannerFinder.exe	Monitors whether a scanner is present. Provided with Microtek scanners
X	Microzoft_Ofiz	KdzEregli.exe	"Added by the AMUS.A WORM!"
X	Micrsft Updese	xagwxz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Micrsoft CFG 32	lrbzus32.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Micrsoft DerSystem	uqieelpb.exe	"Added by the RBOT-GRI WORM!"
X	Micrsoft Driver	windrive.exe	"Added by the SDBOT.AF TROJAN!"
X	Micrsoft Driver	msdriver.exe	"Added by the SDBOT-XD WORM!"
X	Micrsoft Driver	windrive32.exe	"Added by the SLINBOT.TT BACKDOOR!"
X	Micrsoft Internet Explorer	IEXPL0RE.EXE	"Added by the RBOT-AQV WORM! Note the number ""0"" in the filename"
X	Micsoft-Published-Software	explrer.exe	"Added by the RBOT-GFL WORM!"
X	Micsorosft Security Center	wcnsfty.exe	"Added by the RBOT-AHU WORM!"
X	mig2	mig2.exe	"Added by the BRONTOK-BW WORM!"
N	MightyFAX Controller	MFNTCTL.EXE	"Mighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software""
?	MigrationVendorSetupCaller	"rundll32.exe migrate.dll	CallVendorSetupDlls"
X	Military Net Killer	MNK.exe	"Added by the MILLNET-A WORM!"
U	MilShieldSlave	ShieldWorker.exe	"Mil Shield from Mil Incorporated. It protects your privacy by removing all tracks from your online or offline computer activities"
N	MimBoot	mimboot.exe	"Starts Musicmatch Jukebox at bootup - can be started manually"
X	Mincer	Mincer.exe	"Added by the MINCEME-A VIRUS!"
U	Mindful	Mindful.exe	"Mindful from Felitec inc. ""Event reminder software with date and time tools in a simple to use system tray application"""
U	Mini-XP	Mini-XP.exe	"Minimizer-XP from Totalidea Software - adds an additional button in the top right-corner of any application window to allow you to quickly minimize it to the System Tray. No longer available from the author but still available from download sites such as Download.com"
X	MINIBUG	MINIBUG.EXE	"Displays ads inside Weatherbug - see here"
N	MiniEYE-MiniREAD Launch	ARLaunch.exe	"eyeQ - improve your reading speed"
N	MINIFERT.EXE	MINIFERT.EXE	Part of Backweb
U	minilog	MINILOG.EXE	If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
N	MiniMavis	MiniMavis.exe	Mavis Beacon typing tutor
X	minimo	[path to file]	"Added by the MOSUCK-X TROJAN!"
N	MiniNote	MININOTE.EXE	"Mini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software"
N	Miniphone	glophone.exe	"VoiceGlo Glophone - ""an affordable and convenient way to call friends and family throughout the world using a dial-up or broadband Internet connection on your computer"" using the VoIP (Voice over Internet Protocol). No longer available"
X	miniport	usb2chk.exe	"Added by the LAZAR-A TROJAN!"
X	MiniPortRt	miniport_mp.exe	"Malware - see here"
U	MiniReminder	MiniReminder.exe	"""MiniReminder is a small
X	MiniServer.exe	MiniServer.exe	"Added by the LITTLEW-E TROJAN!"
X	minix32	minix32.exe	"Added by the AGENT.CKQX TROJAN!"
U	MinMaxExtender	Mmext.exe	"MinMaxExtender - window handling tool"
X	Mioft Wiws Seice ent	[worm filename].exe	"Added by the RBOT-GIJ WORM!"
X	Miosf Update	wimsqaad.exe	"Added by the SDBOT.AG TROJAN!"
U	MioSync	mioSync.exe	"Related to Mio GPS navigation devices"
N	Mirabilis ICQ	NDetect.exe	"If connected to the internet
N	Mirabilis ICQ	icq.exe	"If connected to the internet
N	Mirabilis ICQ	ICQNet.exe	"If connected to the internet
N	Miranda IM	miranda32.exe	"Miranda instant messaging client"
X	Mirate Sp 2 Information	miratesp2.exe	"Added by the RBOT.QH WORM!"
X	Mircosoft DNS Service	svchost.exe	"Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""drivers"" subfolder"
X	Mircosoft Sockets SP2	mssck.exe	"Added by the MYTOB.ET WORM!"
X	Mircosoft Update	wuampkd.exe	"Added by a variant of the SDBOT WORM!"
X	Mircosoft Windows Developer Enviroment	devenv.exe	Added by an unidentified WORM or TROJAN!
X	Mircosoft Windows Developer Enviroment	devenv.exe	"Added by the RBOT.AUJ BACKDOOR!"
X	Mircrosoft Svchost32	svchost32.exe	"Added by the RBOT-AZW WORM!"
X	Mircrosoft Technic Help	EditKey.exe	"Added by the KOLABC.AS WORM!"
X	Mircrosoft Technic Help	RegKey.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Mircrosoft Windows Config DLL	rundllc32b.exe	"Added by the RBOT-ZY WORM!"
N	miroVIDEO Tray Tool	misitray.exe	"Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed
U	Mirra	Mirra.Client.exe	"Mirra Personal Server from Seagate Tech - ""a powerful hardware/software solution that integrates high-capacity storage with content protection
U	MirrorFolderShell	mrfshl.exe	"MirrorFolder backup software"
X	Mirsoft sdcE	taskmegr.exe	"Added by the RBOT-AWY WORM!"
X	Miscrosoft Windows Explorer	IEEXPLORER.exe	Reported as the SDBOT.YX WORM!
?	misiCTRL	misiCTRL.exe	"Miro video driver related. Is it required?"
?	misiTRAY	misiTRAY.exe	"Miro video driver related. Is it required?"
X	Mismo	win32x.exe	"Added by the RBOT-JP WORM!"
X	MistikotitaTuIpologisti	GDC.exe	"MistikotitaTuIpologisti Greek rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
N	Mixer	Mixer.exe	C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
N	Mixersel	mixersel.exe	Configuration for Realtek audio devices
N	Mixghost	mixghost.exe	"Management software for Altec Lansing speakers. If a change is needed
X	MJ	te32.exe	Added by the AGENT.HAA TROJAN
X	mjc	mjc.exe	"Added by the AGENT.AKCI TROJAN!"
U	mkb.exe	mkb.exe	"MomKnowsBest surveillance software. Uninstall this software unless you put it there yourself"
X	ml00!.exe	ml00!.exe	"Malware
U	ML1HelperStartUp	ML1HEL~1.EXE	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	ML1HelperStartUp	ML1Helper.exe	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	ml34	[path to trojan]	"Added by the MAILBOT-BH TROJAN!"
X	Mlcr0s0ftf DDEs C0ntr0i	WAed.pif	"Added by the RBOT-BJW WORM!"
X	MlCROSOFT FEnR	MlCROSOFT.EXE	"Added by the GAOBOT.CII WORM! Note that both the name and command have a lower case ""L"""
X	mlibsysmc	comzcinc.exe	"Added by the SDBOT-CXS WORM!"
X	mload	lxmstart.exe	"Added by an unidentified VIRUS
?	MM Install	setup.exe	"Possibly Money Manager from Moneysoft?"
X	MMB2	explorer.exe	Added by an unidentified WORM or TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
X	MMC	inisys.exe	"Added by the OSCABOT-I WORM!"
X	mmcndmgr	mmcndmgr.exe	"Added by an unidentified VIRUS
N	MMCWINMGMT	winmgmt.exe	"Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth ""scheduler"" - refer here"
X	mmemdrv	mmemdrv.exe	"SecondSight spyware. Note - SecondSight is spyware that captures keystrokes and screen shots
U	MMERefresh	MMERefresh.exe	"Part of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R"
X	Mmessenger	messenger.exe	"Added by the AGOBOT.GM WORM!"
X	Mmgsvc	mmgsvc.exe	Mmgsvc spyware
U	MMhid	mmhid.dll	"This is the Human Interface Device Server for Win98
?	MMHK	mmhk.exe	"A driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?"
N	MMHotKey	MMHotKey.exe	Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
X	MMicrosoft Security Management	inetforn.exe	"Added by the RBOT.AFZ WORM!"
U	MMKeybd	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	Mmm	Mmm.exe	"Hace Mmm - free utility to configure your Windows menus and move and remove menu-items you never use"
X	mmnext06	trjdwnl.dll	"Malware installed by different rogue security software including SpyKillerPro and the XP AntiVirus series"
X	mmod	mmod.exe	"eZula TopText adware"
N	mmpti	m1mmpti.exe	Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
N	MMReminderService	MMReminderService.exe	"Mind Manager from Mindjet - ""easy way to organize ideas and information"". Registration reminder"
?	MMRun	mmrun.exe	"??"
X	mmsass	mmdmm.exe	"Added by the SDBOT.SO WORM!"
X	mmsddlx	[random filename]	"Added by a variant of the SLAPER TROJAN!"
?	mmsys	recover.exe	"??"
X	MMSystem	"rundll32.exe mmsystem.dll	RunDll32"
Y	MMTASK	mmtask.tsk	"A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI
N	mmtask	mmtask.exe	"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
X	MMtask Service	mmtask.exe	"Added by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename"
N	MMTray	mm_tray.exe	"MusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator"
N	MMTray	MMTray.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
N	MMTray2K	MMTray2K.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
N	MMTrayLSI	MMTrayLSI.exe	"Part of Morgan Multimedia Codecs. Only required when the codecs are used"
?	mmusrstp	procrun.exe	"??"
X	mmxp2passion.exe	mmxp2passion.exe	"MediaMotor adware"
X	mmxrun	msosa.exe	Added by an unidentified TROJAN or WORM!
X	mmxrun	mswinindex.exe	"TwoSeven spyware"
U	mm_server	mm_server.exe	"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
X	mnklins	mnklins.exe	"VX2.Transponder parasite updater/installer related"
X	MNPol	mnpol.exe	"Added by the DLUCA.B TROJAN!"
U	MNS	MNS.exe	"Mobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the correct drive mappings
X	mnsa	mnso.exe	"Added by the LINEAG-AI TROJAN!"
X	mnsvc	mnsvc.exe	"Added by the AUTOUPDER TROJAN!"
X	mnsvcsp	mnsvcsp.exe	"Added by an unidentified VIRUS
?	mnu	igomnu.exe	"Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?"
N	Mobile Connectivity Suite	Application Launcher.exe	"System Tray access to the HTC Sync mobile phone management utility for models including the Hero
U	Mobile Phone Suite	MobilePhoneSuite.exe	Logitech Mobile Phone Suite
U	mobile PhoneTools	mPhonetools.exe	"Motorola Phone Tools"
U	Mobipocket Reader Notifications	readernotify.exe	"Part of Mobipocket Reader - ""Store all your eBooks
U	Mobipocket Web Companion	webcomp.exe	"Related to Mobipocket eBook Reader"
X	mobiswing	[random].exe	"Mobis adware"
U	mobsync	mobsync.exe	"Microsoft Synchronization Manager for 2K/XP - used to update network copies of materials that were edited offline
X	MOBSYNC32.EXE	mobsync32.exe	"Added by the FINERO TROJAN!"
N	MOD	muamgr.exe	"Using MicroAngelo On Display
X	Modem	locatesvc.exe	"Added by a variant of the SPYBOT WORM!"
X	Modem Driverz Updates	mdmdrv.exe	"Added by a variant of the SDBOT WORM!"
U	MODEMBTR	MODEMBTR.EXE	"Modem Booster from inKline Global to improve ISP connections"
X	Modeminf	Modeminf.exe	"Added by a variant of the CRYPTER.C TROJAN!"
U	ModemOnHold	MOH.EXE	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
U	ModemOnHold	netWaiting.exe	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
N	ModemUtility	mdmsetpe.exe	System Tray configuration icon for Aztech modems
X	Modifiet Amateur HTPB	wuaclt.exe	"Added by the IRCBOT.AYS WORM!"
U	ModPS2	ModPS2Key.exe	"Hotkey drivers for Chicony keyboard. Required if you use the hotkeys"
X	ModularConfig	syscnfg.exe	"Added by an unidentified VIRUS
X	Module Call initialize	"RUNDLL32.EXE reg.dll	ondll_reg"
X	Modulo 00FE0F01 Host Internet	syschost.exe	"Added by the DELF-KW TROJAN!"
X	MonAppli	[random filename]	"Added by the DELF.IF TROJAN! The most common filenames are isys32.exe & msnmsg.exe"
X	MonContenuassistant	GDC.exe	"MonContenuassistant French rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
N	Money Express	moneyexpress.exe	Part of MS Money. Available via Start -> Programs
N	MoneyAgent	money express.exe	Part of MS Money. Available via Start -> Programs
N	MoneyAgent	mnyexpr.exe	Microsoft Money
N	MoneyStartUp	Money Startup.exe	Microsoft Money
N	MoneyStartUp10.0	Activation.exe	Part of MS Money 2002. Available via Start -> Programs
X	monitor	monitor.exe	"Browser hijacker
U	Monitor	SD Monitor.exe	"""Transfer data quickly between your memory card and your computer with SanDisk's Readers
X	Monitor	explor.exe	"Added by the AGOBOT-EF BACKDOOR!"
?	Monitor	Monitor.exe	"Related to the Philips SPC610NC & PixArt PAC207 webcams (and possibly others) and Leapfrog Connect Application. What does it do and is it required?"
U	Monitor Apache Servers	ApacheMonitor.exe	Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
X	Monitor calibration	AV1i.exe	"Anti-Virus-1 rogue security software - not recommended
U	Monitor Helper	monitor.exe	"MyLittleSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	Monitor Test	[random filename]	"Added by the SDBOT-NC WORM!"
X	monitor1a	monitor1a.exe	"Added by the MSNAGEN-A TROJAN!"
X	Monitoring Service	svchost.exe	"Added by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks"
X	Monitormgt	Monitormgt.exe	"Added by the GEMA TROJAN!"
U	MonitorSD	SDMonitor.exe	"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
X	MONPluginSrIvcs	n3monap23.exe	"Added by a variant of the RBOT WORM!"
N	Monstersoundtray	Freectrl.exe	Diamond Multimedia sound card control panel
X	MonTest	vccxzq.exe	"Added by the SDBOT-EA WORM!"
U	MoodBook	mb.exe	"MoodBook is a free Windows utility that brings art to your desktop"
N	moon phase	moon.exe	"Moon Phase - tray icon that indicates the phases of the moon"
X	MooNlight	MySqld-nt.cmd	"Added by the BOBANDY-A WORM!"
U	Moony	moony.exe	"Moony - ISDN software that lets you ""always know who is calling or who called when you were away"""
X	MoreContent	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	MoreResults	MoreResults.exe	"MoreResults adware"
N	Morpheus	morpheus.exe	"MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free
X	morphstb	morphstb.exe	"Adware - detected by Kaspersky as the STUBBY.C TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list