Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
X APIMon winapix.exeAdded by a variant of the TIBSER.A downloader TROJAN!
X APIMon msreg.exe"Added by the DROPPER.Z TROJAN!"
X apisvc.exe apisvc.exe"Added by a variant of the LAMEBOT TROJAN!"
U APL APL.exe"Sage Software's ACT! The application pre-loader (apl.exe) is a self contained executable that pre-loads the necessary .NET framework and ACT! 2005 assemblies. This pre-loading of assemblies enhances ACT! startup
X apmanager.exe apmanager.exe"AP Manager ransomware download manager - not recommended
? Apmsrv9x APMSRV9X.EXE"Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required?"
U Apoint Apoint.exeTouchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
X App**32.exe [* = random char] App**32.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples
X App.EXEName [path to worm]"Added by the BODIRU WORM!"
X ApPache System ApPache.exe"Added by the RBOT-YP BACKDOOR!"
U Appcon vAppCon.exe"Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established"
X appconn appconn.exe"Added by the CARGAO WORM!"
U AppExtender AppExtCB.exe"Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received"
X appis.exe appis.exe"Added by the AGENT-BC TROJAN!"
N AppleSyncNotifier AppleSyncNotifier.exe"From WinPatrol PLUS by BillP Studios - ""This file installs with iTunes and is used when syncing your iPhone
X AppletINIT INITIATE.EXE"Added by the AGOBOT.XV TROJAN!"
Y Application mdmsetsp.exe"Aztech Labs modem driver"
X Application csrss.exe"Added by the BEAGLE.EG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X Application Adapter abvsvc.exe"Added by the CHECKOUT WORM!"
U Application Explorer Naldesk.exe"Novell Zenworks Application Explorer Executable. ""For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."""
U Application Explorer NalView.exe"Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications"
X Application Explorer appexplr.exe"Added by the AGENT-NMO TROJAN!"
X Application In System Snxmsh.exe"Added by the AGENT-LNV TROJAN!"
N Application Launcher Application Launcher.exe"System Tray access to the Sony Ericsson PC Suite and HTC Sync mobile phone management utilities. Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X Application Layer Browser abgsvc.exe"Added by the ULPM.FX TROJAN!"
X Application Layer Gateway Service algs.exe"Added by the LINKBOT.M WORM!"
X Application Layer Scheduler agtsvc.exe"Added by the IRCBOT.BJJ BACKDOOR!"
X Application Layer Services avrsvc.exe"Added by the IRCBOT.BJM BACKDOOR!"
X Application Manager acnsvc.exe"Added by a variant of the IRCBOT TROJAN!"
X Application Manager apnsvc.exe"Added by the SMALLTRO.FN TROJAN!"
X ApplicationProtocolRun smsbvl32.exe"Added by the IRCBOT-CX TROJAN!"
U AppPlus AppPlus.exe"AppPlus - ""menu bar or tray launcher that docks to your desktop
Y Apvxd APVXDWIN.EXE"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y Apvxdwin APVXDWIN.EXE"Part of Panda Antivirus and Internet Security. Required to enable permanent virus protection"
Y APVXDWIN ClShield.exe"""Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam
Y Apwheel Apwheel.exeWheel support for an Alps mouse
X apyginapygin simenu.exe"Added by the SDBOT.BTR WORM!"
U AQ3HelperStartUp AQ3HEL~1.EXE"ScreenScenes ""Aquatica Water Worlds"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X aqadcup.exe aqadcup.exe"Added by the AGENT.BG WORM!"
Y Aqua Dock Aqua Dock.exe"Aqua Dock - 'free program that allows you to have an ""OS X"" style
X Aqujyjax [path to file]"Added by the RANCK-CQ TROJAN!"
X Aqujyjax aqujyjax.exe"Added by the SDBOT-YC WORM!"
X ara-key [random filename]"Added by the ANTINNY WORM!"
? ArabLionZ Drive ArabLionZ.Drive.exe"ArabLionZ Drive - part of ArabLionZ XP Tools. What does it do and is it required?"
Y ArcaCheck ArcaCheck.exe"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
X arcaderockstar arcaderockstar32.exe"Arcade Rockstar (now Gamevance) - free arcade games and prize tournaments. The program itself is clean
X Archive archive.exe"Adware - detected by Kaspersky as the CENTIM.A TROJAN!"
X ARCHIVE CONTROL fixupdattr.exe"Added by the MYTOB.GU WORM!"
N ArcSoft Connect ACDaemon.exe"Used to serve notice of product information and updates when running ArcSoft products such as TotalMedia
N ArcSoft Connection Service ACDaemon.exe"Used to serve notice of product information and updates when running ArcSoft products such as TotalMedia
N ARCSolo Recovery N/ABackup software by Computer Associates - no longer supported
U Arctosa razerhid.exe"Razer Arctosa gaming keyboard driver - required if you use the additional features and programmed keys/macros"
U Ardamax Keylogger akl.exe"Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!"
N ares ares.exe"""Ares is a free open source file sharing program that enables users to share any digital file including images
N areslite AresLite.exe"""Ares is a free open source file sharing program that enables users to share any digital file including images
U Argentum Backup ab.exe"Argentum Backup - a small backup program that lets you easily back up your documents and folders"
X argq32 csrss_32.exe"Added by the RBOT-CPM WORM!"
X Aritima aritima.exe"Added by the ARITIM WORM!"
X Arman [path to worm]"Added by the IRCBOT-TG WORM!"
U ARMOR2NET Armor2net.exe"Related to Armor2net personal firewall (possibly contains or is related to a product known as ArmorWall - which is a known rogue
X ArmorDefender ArmorDefender.exe"ArmorDefender rogue security software - not recommended
U army logo readmename.exe"Torrent101 potentially unwanted torrent client application that installs a Browser Helper Object and displays advertisements"
X aromis aromis.exe"Added by the NUWAR.JQ WORM!"
N AROReminder aro.exe"Advanced Registry Optimizer - ""scan
U Arovax AntiSpyware arovaxantispyware.exe"Part of Arovax AntiSpyware from Arovax
Y Arovax Shield ArovaxShield.exe"Part of Arovax Shield from Arovax
U arovaxantispyware arovaxantispyware.exe"Part of Arovax AntiSpyware from Arovax
Y ArovaxShield ArovaxShield.exe"Part of Arovax Shield from Arovax
U ARPWRMSG ARPWRMSG.EXE"""Away Mode"" feature added with Update Rollup 2 for Windows XP Media Center Edition 2005 that allows the computer to appear off to the user while it continues to perform tasks that do not require user input
U Artera arteraui.exe"Artera Turbo Internet Accelerator - ""surf faster
X Arucer "rundll32 Arucer.dllArucer"
X Arucer Dynamic Link Library "rundll32 Arucer.dllArucer"
? AS00 Gear511 Gear511.exe"Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?"
N AS00_Gear511 Gear511.exeNetgear wireless LAN configuration utility
U AS00_WN511B WN511B.exe"Netgear RangeMax NEXT wireless adapter configuration utility"
? AS00_WPN511 WPN511.exe"NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup?"
X asam asam.exe"Added by the FAKEAV-BGU TROJAN!"
X ASC-AntiSpyware WinCleaner.exe"WinCleaner 2009 rogue security software - not recommended
X ASC-AntiSpyware WinAntivirus.exe"Win Antivirus Vista/XP rogue security software - not recommended
X asc32 asc 2.1.exe"AntiSpyCheck rogue spyware remover - not recommended
X asccacA asacsqgl.exe"Added by the MULTIDRP.AA TROJAN!"
X ASDd ASDd.exe"AntiSpywareDeluxe rogue security software - not recommended
X ASDPLUGIN dsldbaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN canada.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN france.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN fullgames.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN 100171be.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN 100176br.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN adult1.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Austria.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN belgium_nm.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN czech.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN dbaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN dslgeaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Finland.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN geaccess.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN mexico.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN netherlands.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN turkey.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN uk_nm.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN Xadult1.exe"AsdPlug premium rate adult content dialer"
X ASDPLUGIN temp532.exe"AsdPlug premium rate adult content dialer"
X asdsaxcxz13 dasxcsx13.exe"Added by the LEGMIR-ARF TROJAN!"
X asdx xwinrpc32.exe"Added by the AGOBOT.VO WORM!"
N ASE Scheduler ASE Scheduler.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
Y Ashampoo AntiSpyWare 2 AntiSpyWare2Guard.exe"Part of Ashampoo® AntiSpyWare 2 from Ashampoo GmbH & Co. KG. This part is the realtime monitor that looks for changes on the users system such as BHO
Y Ashampoo AntiSpyWare 2 Guard AntiSpyWare2Guard.exe"Part of Ashampoo® AntiSpyWare 2 from Ashampoo GmbH & Co. KG. This part is the realtime monitor that looks for changes on the users system such as BHO
Y Ashampoo AntiVirus Service GuardGui.exe"System Tray access to the main user interface for Ashampoo® AntiVirus from Ashampoo GmbH & Co. KG."
U Ashampoo Core Tuner ct.exe"Ashampoo® Core Tuner from Ashampoo GmbH & Co. KG - a utility which helps you to get the most out of a multi-processor (or dual core) computer. ""For instant results you just need to select Auto-Optimize to optimize all the programs you are running or Boost to give more power to a single program"". This entry loads Core Tuner with Windows (required if you use any optimized profiles) and gives System Tray access"
Y Ashampoo FireWall FireWall.exe"Ashampoo® Firewall FREE from Ashampoo GmbH & Co. KG"
Y Ashampoo FireWall PRO FireWall.exe"Ashampoo® Firewall PRO from Ashampoo GmbH & Co. KG"
U Ashampoo HDD Control Guard HDDControlGuard.exe"Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access"
U Ashampoo Magical Defrag aDefragCtrl.exe"System Tray access to the main user interface for Ashampoo® Magical Defrag from Ashampoo GmbH & Co. KG - which ""runs in the background as a service
U Ashampoo Magical Optimizer Taskplaner AMO_TA~1.EXE"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U Ashampoo Magical Optimizer Taskplaner AMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
N ashampoo Magical UnInstall MagicalUnInstall.exe"Ashampoo® Magical UnInstall from Ashampoo GmbH & Co. KG - which monitors each new program installation
U Ashampoo PopUpBlocker PopUpKiller.exe"Ashampoo popup blocker
N ashampoo UnInstaller Watcher UIWatcher.exe"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
Y ashAvast ashAvast.exe"Part of Avast antivirus"
X ashcap servirsess.exe"SpySure spyware"
X ashDip.exe ashDip.exe"Added by the DROPR-CZ TROJAN!"
Y ashDisp ashDisp.exe"System Tray access to and notifications for avast! Antivirus - giving left-click access to the On-Access Scanner
X ashDsp.exe ashDsp.exe"Added by a variant of the SDBOT WORM!"
X ASHLT Ashlt.exe"Ashlt adware"
Y ashMaiSv ashmaisv.exe"E-mail scanning part of avast! Antivirus. Starts via a registry ""Run"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
X Asia easm.exe"PurityScan adware"
X Asicfc icfca.exe"Added by the AGENT.AAJE WORM!"
U AsioReg regsvr32.exe ctasio.dll"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
U AsioThk32Reg rregsvr32.exe ctasio.dll"ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality"
U ASK rundll32.exe [path] ASK.dll rdl"Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X asl Aslru.exe"Added by the BANCOS-CU TROJAN!"
U ASM ASMonitor.exe"Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses
U Asmw Soft Popups Burner popups burner.exe"Popup blocker
X asnconsole msasn.exe"Added by the RBOT.EVU TROJAN!"
X ASocksrv SocksA.exe"Added by the VB.CBW WORM!"
X asp-srvc asp-srvc.exe"Added by the AGOBOT-KG WORM!"
X ASP.NET State Service csrss.exe"Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X ASP.NET State Service crsass.exe"Added by the BANLOAD-M TROJAN!"
X ASP.NET State Service servicos..exe"Added by the DADOBRA-I TROJAN!"
N asp4tray asp4tray.exeSystem Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
? AspireService AspireService.exe"Found on Acer laptops
Y AspireTimeMachine acertmb.exe"System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP
X ASpyC ASpyC.exe"AntiSpyCheck rogue spyware remover - not recommended
X asr64_ldm.exe asr64_ldm.exe"Added by the Dr. Guard rogue security software - not recommended
X asrupdate.exe asrupdate.exe"Added by the VB.ATZ TROJAN!"
X Ass and titties CMD32.EXE"Added by the SDBOT-GG BACKDOOR!"
X assistse ASSISTSE.EXE"CnsMin (Chinese Keywords) hijacker related"
X AST AST"Added by the VB.AH TROJAN!"
X AST AST.exe"AutoStarter parasite"
U ASTART astart.exeASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X AStart AStart"Added by the VB.AH TROJAN!"
N asTray Astray.exe"Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer"
N Astro Astro.exeChecks for updates to Quicken on a system reboot
X Astrum Astrum.exe"Astrum Antivirus Pro rogue security software - not recommended
X asus asus.exe"Added by the RBOT-OC WORM!"
? ASUS Camera ScreenSaver ASScrProlog.exe"Either a valid program on some ASUS laptops - such as the F3 and F5 series or unsafe
N ASUS Live Update ALU.exeASUS Live Update utility for their motherboards
N ASUS Probe AsusProb.exeASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
? ASUS Screen Saver Protector ASScrPro.exe"Either a valid program on some ASUS laptops - such as the F3 and F5 series or unsafe
U ASUS SmartDoctor VGAProbe.exeASUS video card fan/thermal monitor
U ASUS TweakEnable astart.exeASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
? AsusACPIServer AsAcpiSvr.exe"Part of the ACPI driver for the Asus Eee PC range. What does it do and is it required?"
U AsusEPCMonitor AsEPCMon.exe"Part of the ACPI driver for the Asus Eee PC range. Manages the Fn function keys and ""on screen display"""
N ASUSGamerOSD GamerOSD.exe"GamerOSD by ASUSTek - for ""real-time overclocking
N ASUSKey V38SHELL.EXESystem tray Icon for quickly changing video modes
? AsusStartupHelp AsRunHelp.exe"Unknown ASUS motherboard utility. What does it do and is it required?"
X asussvc asussvc.exe"Added by the AGENT-FPB TROJAN!"
U AsusTray AsTray.exe"Part of the ACPI driver for the Asus Eee PC range. Watches the sensors of the motherboard such as power and temperature"
U asustweakenable ATweak.exeASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N ASUSWebStorage ASUSWSDashBoard.exe"System Tray access to ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts"
N AsusWSDashBoard ASUSWSDashBoard.exe"System Tray access to ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts"
N ASWDP ASWDP.exe"MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market"
X ASWnk aswnk.exeAdult content dialler
U AT&T Self Support Tool matcli.exe"AT&T Resolution Assistant. ""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
U AT-Watch ATWatch.exeAnti-Trojan Watch - trojan detector
X atapidrv atapidrv.exe"Added by the AGOBOT-SL WORM!"
U atchk atchk.exe"AMT Status Message from Intel. Users can manage this
X atf.exe pgs.exe"Part of the PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family"
X atf_reinstall atf.exe"Part of the AVSystemCare rogue security software - not recommended. See here"
U Athan Athan.exe"Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world"
U ATI 2D Component Ati2mdxx.exe"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the ""U"" recommendation"
X ATI Active Graphics Card Monitor atievx.exe"Added by the IRCBOT-TL WORM!"
X ATI AS Filter msnse.exe"Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines
N ATI CATALYST System Tray CLI.exe SystemTray"System Tray access to ATI's Catalyst™ Control Center. Note that this has ""SystemTray"" appended to CLI.exe in the ""Command"" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop"
X Ati Control Panel atiphexx.EXE"Added by the RBOT-BR WORM!"
X ATI Cpanel atiphexx.exe"Added by the AGOBOT-NV WORM!"
U ATI Desktop Component ATIPTAXX.EXE"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution
N ATI DeviceDetect ATIDtct.EXEUtility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled
X ATI Display ATIDisplay.exe"Added by the BDOOR-AFH BACKDOOR!"
X ATI Display Driver atixd.exe"Added by the RBOT-FOV WORM!"
X Ati Display Settings atividx.exe"Added by the RBOT-GAS WORM!"
N ATI GART Set-up Utility Atigart.exe"Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one
U ATI Launchpad launchpd.exe"Convenient way to start all your Multimedia Center applications (DVD
X ATI Rage3d Pro AtiRage4dPro.exe"Added by the AGOBOT-OG WORM!"
Y ATI Remote Control ATIRW.exeATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
Y ATI Remote Control ATIX10.exeATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
N ATI Scheduler Atisched.exeComponent that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N ATI Task Application Atitkad.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
N ATI Task Application (Atikey) Atitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
U ATI Technologies Inc. HydraVision Desktop Manager HydraDM.exe"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
U ATI Technologies Inc. HydraVision Viewport HydraMD.exe"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which ""creates
X ATI Technology Startup techstart.exe"Added by the RBOT-AEU WORM!"
X ATI Video Driver Control atigfx.exe"Added by the RBOT-FWL WORM!"
X ATI Video Driver Control btorrent.exe"Added by a variant of the IRCBOT TROJAN!"
X ATI Video Driver Controls [path to worm]"Added by the SDBOT-DDS WORM!"
X ATI VIDEO REGKEY ati2vid.exe"Added by the SDBOT.UR WORM!"
? Ati2cwxx Ati2cwxx.exe"For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it"
X Ati2evxx Ati2evxx.comAdded by the BACKDOOR-CPC TROJAN!
X ati2f104 ati2f104.exe"Added by the DLOADR-BBW TROJAN!"
U Ati2mdxx Ati2mdxx.exe"Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the ""U"" recommendation"
N ATICCC cli.exe runtime"ATI's Catalyst™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has ""runtime"" appended to cli.exe in the ""Command"" column of MSCONFIG. Recommend that start the program manually via Start → Programs → ATI Catalyst Control Center → Advanced → Restart Runtime as it can cause problems when starting Windows"
N ATICCC CLIStart.exePuts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
X AtiCpanel atiphexx.exe"Added by the AGOBOT.IL WORM!"
X aticpaxx.exe aticpaxx.exe"Added by the RBOT-XP WORM!"
U AtiCwd AtiCwd.exeThis utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U AtiCwd AtiCwd32.exeThis utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list