HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	MSupdater.exe	N/A	"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
X	msupdater25	lsasser.exe	"Added by the RBOT-ATS WORM!"
X	msupdates	msupdt.exe	"Added by the RBOT-JO WORM!"
X	MSUpdSrv	msupdsrv.exe	"Browser hijacker
X	msupdtwiz	msupdtwiz.exe	"Added by the STRATION.DD WORM!"
X	msurl	msurl32.exe	"Added by the CRYPTER.A TROJAN!"
X	msuser32.exe	msuser32.exe	"Added by the ANDROV TROJAN!"
X	MsVBdll	sys32dll.exe	"Added by the AIMDES.B or AIMDES.C WORMS!"
X	MsVBdll	MsVBdll.pif	"Added by the AIMDES.A WORM!"
X	MSVBVM60	MSVBVBM60.pif	"Added by the SCOLD-B WORM!"
X	msvc32	msvc32.exe	"ClientMan parasite variant"
X	msvc32	msvc32.exe	"Added by the AGOBOT-NT WORM!"
X	msvcav	msvcav.exe	"Added by the AGENT-ACR TROJAN!"
X	msvcc	msvchost.exe	"Added by the XOMBE TROJAN!"
X	msvcc25	svcchost.exe	"Added by a variant of the SDBOT WORM!"
X	msvcc25	salvage.exe	"Added by a variant of the SDBOT WORM!"
X	msvcc25	svcchost.exe	"Added by the SDBOT-CSE WORM!"
X	msvccc66	svcchosst.exe	"Added by the RBOT-GLS WORM!"
X	msvccc66	dload.exe	"Added by a variant of the RBOT WORM!"
X	msvchost	msvchost.exe	"Added by the IRCBOT-AV WORM!"
X	MsvcService	msvcs.exe	"Added by the RBOT-RK WORM!"
X	msvecurity	msvecurity.exe	"Added by the DORF-BO WORM!"
X	MSVersion	INTERNETFEATURES.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	MSVersion	clrschp038.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	msvhost	aig.exe	"Added by the AIMBOT-BC TROJAN!"
X	msvload32	msvload32.exe	"Added by the RBOT-ACI WORM!"
X	msvps	msvps.exe	"Added by the AGOBOT.ALI WORM!"
X	msvsc32	msdev.exe	"Added by the RBOT-GJ WORM!"
X	MSVsmt	rpcxctx.exe	Added by an unidentified WORM or TROJAN!
X	msvsrv32	msvsrv32.exe	"Added by the AGOBOT-KM WORM!"
X	msvss	msvss.exe	"Added by a variant of the RBOT WORM!"
X	MSVSync	videosync.exe	"Added by a variant of the SPYBOT WORM!"
X	msvupdater	msvupdater.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X	MSVXD	MSVXD.EXE	"Added by the DATOM.A WORM!"
X	mswave	mswave.exe	"Added by the CRYPTER.A TROJAN!"
X	Mswavedll	mswavedll.exe	"Added by the CRYPTER-C TROJAN!"
U	MSwheel	mswheel.exe	Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
X	mswiiz32	mswiiz32.exe	"Added by the STRATION.DH WORM!"
X	mswiizz32	mswiizz32.exe	"Added by the STRATION.DL WORM!"
X	MSWin	mswin.exe	"Added by the BANKER-CU TROJAN!"
X	Mswincfg	Mswincfg32.exe	"Added by the CYBRSPY.D TROJAN!"
X	MsWindows DRT Drivers	wsdrt32.exe	"Added by the RBOT.ALT WORM!"
X	MsWindows SSL Drivers	mssl32.exe	"Added by the SPYBOT.API WORM!"
X	MSWindows SysCl	mscl32.exe	"Added by the RBOT.AHI WORM!"
X	MsWindows SysDate	sysmsvc.exe	"Added by the SPYBOT.FCD WORM!"
X	MSWindows Syspg	mspg32.exe	"Added by the RBOT-TB WORM!"
X	MSWindowsUpdate	Systern.exe	"Added by the RBOT-AFD WORM!"
X	MSWindowsUpdate	mswinup.exe	"Added by a variant of the SDBOT WORM!"
N	mswinext	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	MSWinlogon	SynCor.exe	"Added by the AGENT-FZL TROJAN!"
X	MSWinlogon	winlogon.exe	"Added by the AGENT-FZM TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Mswinpid32	mswinpid32.exe	Added by the LAPOS.A TROJAN! This is a keylogger which emails back to China PayPal passwords and account information - thus allowing the perpetrators to steal PayPal funds in the name of the victim!
X	MSWinSrv	MSWinSrv.exe	"Added by the MTRON TROJAN!"
X	MSWinSrv32	MSWinSrv32.exe	"Added by the MTRON-B TROJAN!"
X	MSWinupd	winupd.exe	"Added by the DLOADER-YE or DLOADR-AAA or DLOADER-ZF TROJANS - and others"
X	MSWinupdate	winupdate.exe	"Added by the DLOADR-AAW TROJAN!"
X	MsWinVgr	msvgr.exe	"Added by the MYTOB.LE WORM!"
X	mswiz32	mswiz32.exe	"Added by the STRATIO-BG WORM!"
X	mswkork Service	msework.exe	"Added by a variant of the RBOT WORM!"
X	msword	msword.exe	"Added by the RBOT-ADR WORM!"
X	msword	docx.exe	"Added by the CODOX-A WORM!"
X	msword98	msword98.exe	"Added by the AGENT-KUO TROJAN!"
X	MSWorld	msworld.exe	"Added by the AGENT.DED TROJAN!"
X	mswspl	[random filename]	"Added by the SMALL.IQ TROJAN!"
X	mswspl	searchbarcash.exe	SearchBarCash adware
X	mswspl	vnmispoisn downloader.exe	SearchBarCash adware variant
X	mswspl	plugin1.exe	"Added by the SMALL.IQ TROJAN!"
X	MSWTL32	MSATL32.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSWUpdate	[path to worm]	"Added by the SILLYFD-V WORM! The most common filename is lsass.exe but it not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	msxct	msxct.exe	"eXact Advertising (NaviSearch
X	MSxmlHpr	"RUNDLL32.EXE [path] msxm192z.dll	w"
X	MsXSLT	msxslt3.exe	"Added by the AGENT.AZMU TROJAN!"
X	Msy Startups	msyh32.exe	"Added by the AGOBOT-QC WORM!"
X	Msy1 Startups	msyj32.exe	"Added by the AGOBOT-QQ WORM!"
X	msys lptt01	msys.exe	"RapidBlaster variant (in a ""Msyss"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Msys32	morfitwebentrance.exe	"Morfit ADjectPager - ""uses home page rental technology for generating revenues"". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage"
X	MSysDrv	msdrv.exe	Added by the VB.WF TROJAN!
X	ms_anti_spyware	mwfirewall.exe	"Added by the GAMQOWI TROJAN!"
X	ms_anti_spywarebxp	mwfirebpx.exe	"Added by the SURILA-D TROJAN!"
X	ms_anti_spywarebxp	mwfibpx.exe	"Added by the SURILA-J TROJAN!"
X	MS_LARISSA	MS_LARISSA.exe	"Added by the ASSIRAL WORM!"
X	MS_NETD_WIN32	netd32.EXE	"Added by the RANDEX.F WORM!"
X	MS_SETUP.EXE	MS_SETUP.EXE	"Added by the CHARGE TROJAN!"
X	MS_Update Check	wdfmgr.exe	"Added by the AGOBOT-TB WORM!"
X	MS_update_0704_KB74073.exe	MS_update_0704_KB74073.exe	"Added by a variant of the UPDATEKB TROJAN!"
N	MtdAcq	MtdAcq.exe	"Creative MediaSource ""Media Sniffer"" - monitors the drive for new media files then automatically adds them to the media library"
?	MtdAcqu	MtdAcqu.exe	"Metadata monitor part of Creative MediaSource™ player/organizer - which ""enables you to manage your entire digital music collection on both your computer and your Creative portable music player effortlessly."" Collects information on the songs. Is it required?"
X	Mtr2	mtr2.exe	Added by the KRYPTONIC GHOST TROJAN!
U	MUAL	mual.exe	Millesky video mail updater and launcher
N	muamgr	muamgr.exe	"Using MicroAngelo On Display
X	muBlinder	muBlinder.exe	Program that bypasses Microsoft Update's Genuine Windows Validation
?	Mufix	mufix.exe	"Part of INFOConnect
X	mule_st_key	flec006.exe	"Added by the BAGLE.AV TROJAN!"
U	Multi-function keyboard	GWHotkey.exe	"Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail
U	MultiCAM Initializer	MCamBoot.exe	"The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled"
X	Multimedia	windebug.exe	"Added by the VB-ERB WORM!"
X	Multimedia Codecs	mcc.exe	"Added by the DLOADER-MB TROJAN!"
X	Multimedia extensions	mservice.exe	"EasySearch adware"
X	Multimedia extensions	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Multimedia extensions	mservice1.exe	"Added by the DLOADR-AWD TROJAN!"
U	Multimedia KBD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	MULTIMEDIA KEYBOARD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
X	MULTIMEDIA KEYBOARD88	smss.exe	"Added by the SILLYFDC WORM! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	multiran	multiran.exe	"Added by the COSIAM-E TROJAN!"
U	MultiRes	MultiRes.exe	"MultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP"
N	mumservice	mumservice.exe	"Software updater for Motorola products"
U	MUPS	MUPS.exe	"Launches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions"
Y	murphy shield	lmgui.exe	"Firewall part of BitDefender virus scanner/firewall"
N	Music01 Server	Music01 Server.exe	"J River Media Jukebox"
X	MusIRC (irc.music.com) client	musirc4.71.exe	"Added by the RANDEX.Q WORM!"
X	Mustafx	mustafx.exe	Added by a variant of the VIRANTIX.B TROJAN!
?	Mustek MDC 3000	Mounter.exe	"Related to software for the Mustek MDC 3000 digital camera - what does it do and is it required?"
N	MutexServiceEx	Sys32Smm.exe	"Webroot Sofware's discontinued ""Privacy Master"""
X	mv2	crasos.exe	"Added by the DROPPS-A TROJAN!"
U	MVRescue	mvrescue	Related to Multivision Computers back up/restore program. Multivision Computers ceased operating in 2004
N	MVS Splash	Splash.exe	Splash screen for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses
X	mvsyswina	acsysiom.exe	"Added by a variant of the SDBOT WORM!"
U	MW1HelperStartUp	Mw1helper.exe	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	MW1HelperStartUp	MW1HEL~1.EXE	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	mwavscan	mwavscan.com	"MicroWorld Anti Virus Toolkit is a free anti-virus scanner that runs on-demand. You can choose to scan your entire system
U	MWLExe	MwlGui.exe	"Part of McAfee Wireless Protection for Wi-Fi users"
N	MWProEng	MWProEng.exe	Logitech Mouseware Pro software - only required when using special functions
N	MWSnap	MWSnap.exe	"MWSnap - screen capture utility. Start manually when required"
X	mwsoemon	mwsoemon.exe	"MyWebSearch parasite"
X	Mwsvm	mwsvm.exe	"SeekSeek search hijacker related - see here"
X	mxb2	[path to worm]	"Added by the IXBOT-G WORM!"
X	mxcll	vec.exe	"Eco Antivirus rogue security software - not recommended
X	MxHLp32	MxHLp32.exe	"Added by a variant of the VAGRNOCKER TROJAN!"
X	mxjxde.exe	mxjxde.exe	"Added by the ORCU.B TROJAN!"
U	MXO Auto Loader	MXOaldr.exe	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MXOBG	MXOALDR.EXE	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
?	mxomssmenu	maxmenumgr.exe	"Related to Maxtor's One Touch series of external hard drives. What does it do and is it required?"
U	MxRunner	MxRunner.exe	EasyUninstall from Aladdin Systems (formerly by Ontrack)
U	Mxvgautil	Mxvgautil.EXE	"Utility for a USB to VGA converter from MCT Corp"
X	My Agent	msagent.exe	"Added by the NEGASMS.A TROJAN!"
X	My App	SMSSvc.exe	"Added by the NEGASMS.A TROJAN!"
U	My Essentials Wireless USB Utility	O-Maxwcui.exe	"Belkin My Essentials Wireless USB Utility"
X	My Kazaa Gold	MyGoldKazaa.exe	"My Kazaa Gold - regarded as a scam by McAfee SiteAdvisor as you're paying for something which available for free elsewhere"
X	My Search Bar Eq	S4BAREQ.EXE	"MySearch parasite"
X	My Security Engine	MS[random characters].exe	"My Security Engine rogue security software - not recommended
X	My Security Wall	MS[random characters].exe	"My Security Wall rogue security software - not recommended
X	My Supervisor	MSup1bf7.exe	"My Supervisor rogue system suite - not recommended
X	My Web Search Bar	MWSBAR.DLL	"MyWay - an IE Browser Helper Object used by adware WebSearch to add an IE toolbar to provide search features
X	My Web Search Bar Search Scope Monitor	m3SrchMn.exe	"MyWebSearch parasite"
X	My Web Search Community Tools	m3IMPipe.exe	"MyWebSearch parasite"
U	My-disgo	MyKey disgo.exe	"Related to disgo pro. Program will synchronize data"
X	MyAccessMedia	tmp**.exe [* = random char/digit]	"My AccessMedia toolbar related
U	myagttry	myagttry.exe	System tray notification for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
X	Myapp	[filename]	"Added by the FATEE.B WORM!"
X	Myapp	service.exe	Homepage hijacker
X	MyAV	avpguard.exe	"Added by the NETSKY.J WORM!"
X	MyCashbag	uccbp.exe	"MyCashbag adware"
Y	MyCIO Agent Service	myagtsvc.exe	"Part of the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
U	myCIO.com ASaP	myagttry.exe	System tray notification for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
N	myCIO.com Splash	Splash.exe	Splash screen for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses
X	myCleanerPC	myCleanerPC.exe	"MyCleanerPC rogue spyware remover - not recommended"
X	MyCometCursor	MYCOME~1.EXE	"Comet Cursor adware"
X	MyContentAssistant	GDC.exe	"MyContentAssistant rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X	MyDailyHoroscope	MYDAIL~1.EXE	"MyDailyHoroscope foistware"
X	MyDailyHoroscope	MyDailyHoroscope.exe	"MyDailyHoroscope foistware"
U	MyEmoticons	MYEMOTICONS.EXE	"MyEmoticons from Persona Ltd - add icons (emoticons) to your E-mail"
X	MyFastAccess	myfastupdate.exe	My-Fast-Access toolbar updater
X	myhuy	huy.exe	"Added by the BLASTER-C WORM!"
X	myhuy	huy2.exe	"Added by the BLASTER-L WORM!"
U	MyIE.exe	MyIE.exe	"MyIE2/Maxthon browser related"
X	MyLife	CmdServ.exe	"Added by the HOLAR.A WORM!"
X	myMh2	iexpl0re.exe	"Added by the AGENT.HWE TROJAN! Note the number ""0"" in the filename"
U	myNetWatchman	nwclient.exe	"Sends your firewall alerts to a website
U	mynsw	wntsrv.exe	"Net Screen Watcher surveillance software. Uninstall this software unless you put it there yourself"
X	MyPcSecure	MyPcSecure.exe	"MyPcSecure rogue security software - not recommended
X	MyPointsPointAlert	wjview ...MyPointsPointAlertrun.exe	"""With MyPoints you can earn rewards from name-brand merchants. You can even earn vacations and frequent flyer miles"". Dubious privacy policy"
U	MyPopupKiller	mpk.exe	"MyPopupKiller - popup killer"
U	myprint mileage	mpm.exe	Reports battery status on a portable printer
U	MyRegistryCleaner	MyRegistryCleaner.exe	"MyRegistryCleaner from PCSecurityShield - who's reputation is poor"
X	Mysee Alert	Mysee Alert.exe	"MySee Alert adware"
X	MyShares	MyShares.exe	"EHU adware"
X	MySLScan	msvc32.exe	"Added by the FORBOT-EH WORM!"
X	mysoft	winexplor.exe	"Browser hijacker
N	MySoftware NewsFlash	Newsflsh.exe	"Runs in your task bar and receives alerts and release information on MySoftware products from Avenquest"
N	MySpaceIM	MySpaceIM.exe	"MySpaceIM internet messenger"
X	mysvcig38	mysvcc.exe	"Added by the RBOT-FOU WORM!"
X	mysvcig38	recsl.exe	"Added by a variant of the RBOT-FOU WORM!"
X	MyTam	MyTam.exe	"Covert Sys Exec malware variant"
U	MytekSystrayExePath	MyTekSystray.exe	"MyTek system tray - web site providing computer tech support in Australia"
X	MyTotalSearch Email Plugin	mtsoemon.exe	"MyTotalSearchBar adware"
X	MyVBApp	SysNT.exe	"ReferAd adware"
X	MyVBApp	install.exe	"Detected as Generic Downloader.s by McAfee
X	MyVBApp	setup.exe	"Detected by Kaspersky as the VB.KB TROJAN! File location is in the root folder (i.e.
X	MyVirt.exe	MyVirt.exe	"Added by the REMADM-C TROJAN!"
U	MyVitalAgent	VtlAgent.exe	"MyVitalAgent from Lucent Technologies. Replacement for Net.Medic
X	MyWebSearch Email Plugin	mwsoemon.exe	"MyWebSearch parasite"
X	MyWebSearch Plugin	"rundll32 [path] M3PLUGIN.DLL	UPF"
X	My_Heart	My_Heart.exe	"Added by the SILLYFDC-AD WORM!"
Y	n/a TpShocks	TpShocks.exe	"Part of the Active Protection System found on some IBM/Lenovo Thinkpad models - including the T
U	N2PTray	Net2fone.exe	"An Internet telephony application. Needed only if you have an account at Net2Phone
N	NADaemon	NADAEMON.EXE	"Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after ""digital rights management"". One user reports disabling it has no detrimental affect - not required"
N	Naggerrunkey	nagger.exe	Packard Bell Free Internet Signup screen
X	nah_Shell	nah_cord.exe	"Added by the HANAMBOT TROJAN!"
Y	Naimagent_service	EPOAgentnaimas32.exe	"Networked version of McAfee VirusScan. Installs
Y	Naimagent_UI	EPOAgentnaimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Y	Naimagent_UI	naimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
X	Name	Iexplorer0.exe	"Added by the THREADSYS TROJAN!"
X	Name Server	mswins.exe	"Added by a variant of the SDBOT WORM!"
X	NAMEDPIPE SYSTEM	namedpipe.exe	"Added by the MYTOB-FH TROJAN!"
X	nana2009	nana2009.exe	"Added by the POISON.PG BACKDOOR!"
X	nano	svchost.exe	"Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Nano Antivirus	nanoav.exe	"Nano Antivirus rogue security software - not recommended
X	NAP32	NAP32.exe	Premium rate adult content dialler
X	napv.exe	wupdate.exe	"Added by the AGOBOT-JX BACKDOOR!"
X	NarmonVirusAnti	smss.exe	"Added by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
X	Narrator	******.exe [* = random char]	"Added by the QOOLOGIC TROJAN!"
U	Narrator	Narrator.exe	Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
X	Natal	Natal.scr	"Added by the OPASERV.AE WORM!"
X	NAV	RuxDLL32.exe	"Added by the MAPSON.D WORM!"
Y	NAV Agent	navapw32.exe	Norton Anti-Virus's background scanning process
X	nAv AGENT	N/A	"Added by the RIOSYS MACRO! Note the lower-case ""n"" and ""v"" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list