HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	NTP Server	[path to trojan]	"Added by the RANKY.F TROJAN!"
Y	nTrayFw	ntrayfw.exe	"System Tray access to the the NVIDIA ActiveArmor hardware-optimized firewall built into some older nForce 3 and 4 series motherboard chipsets"
N	NTrtc	ntrtc.exe	Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support
X	NTSet32	services.exe	"Added by the WINSPY-C TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\dll32"
X	NTSF Microsoft System	fylez.exe	"Added by a variant of the RBOT WORM!"
X	NTSF MICROSOFT SYSTEM	wntsf.exe	"Added by the RBOT.ATC WORM!"
X	NTSF MICROSOFT SYSTEM	fufffy.exe	"Added by the RBOT-AEL WORM!"
X	NTSF MICROSOFT SYSTEM	ntssf.exe	"Added by a variant of the RBOT WORM!"
X	NTSF MICROSOFT SYSTEM	scvhost.exe	"Added by a variant of the RBOT WORM!"
X	NTSF MICROSOFT SYSTEM	winsis32.exe	"Added by a variant of the RBOT WORM!"
X	NTSF MICROSOFT SYSTEM	marya.exe	"Added by the RBOT-AXY WORM!"
X	NTSF MICROSOFT SYSTEM	sysman.exe	"Added by the RBOT.EDP WORM!"
X	ntsmod	ntsmod.exe	"Adware downloader/installer
X	NTsocket	NoeWinnt.exe	"Added by the ATAKA-E TROJAN!"
X	NTSpool	NTSpool.exe	"Added by the AGENT-GPY TROJAN!"
X	NTsrv.exe	NTsrv.exe	"Added by a variant of the SERVU-O TROJAN!"
X	Ntsysv	ntsysv.exe	"Added by the MIFENG-E TROJAN!"
U	nTune	nTune.exe	"Older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
U	nTuneCmd	nTuneCmd.exe	"Now part of NVIDIA System Tools under the ""Peformance"" tag. NVIDIA nTune is utilty for monitoring and modifying the settings (such as temperatures
X	ntupd32	ntupd32.exe	"Unidentified malware - see here"
X	ntupdate	dnsvc.exe	"Added by the SDBOT-TC WORM!"
X	NTupdater	[path to trojan]	"Added by the DIGARIX-D TROJAN!"
X	ntuser	ctfmun.exe	"Added by the SILLYFDC WORM!"
X	ntuser	ntuser.exe	"Added by an unidentified TROJAN! See here"
X	ntuser	spool.exe	"Added by the DLOADER.DYA TROJAN!"
X	ntuser	spools.exe	"Added by the AGENT-GRO TROJAN!"
X	ntuser	svchost.exe	"Added by the POLYCRYP.DY TROJAN!"
X	ntuser	ctfmon.exe	"Added by the AGENT-GSG TROJAN! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %UserProfile%"
U	NTVDM	NTVDM.EXE	"Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT
X	ntvdmd	ntvdmd.exe	"Adware downloader - also detected as the DLOADER-YP TROJAN!"
X	ntvdscm	ntvdscm.exe	"Added by the SCKEYLOG-I TROJAN!"
X	ntx32	ntx32.exe	Added by an unidentified WORM or TROJAN!
X	ntxp2	ntxp2.exe	"Added by the VB-API TROJAN!"
U	NUAgentInstallPath	NU_Install.exe	"Installer associated with Chily Employee Activity Monitoring surveillance software. Uninstall this software unless you put it there yourself"
N	Nuance OmniPage 17-reminder	Ereg.exe Ereg.ini	"Registration reminder for Ominpage version 17 from Nuance"
N	Nuance PDF Create! 5-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Create version 5 from Nuance"
N	Nuance PDF Professional 6-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Converter Professional version 6 from Nuance"
N	Nuance PDF Professional5-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Converter Professional version 5 from Nuance"
X	NumberOneMP3	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	Numerical Xterm Agent	0x32.exe	"Added by the RBOT-FWP WORM!"
X	Numerical Xterm Agents	2x32.exe	"Added by the RBOT-FWY WORM!"
X	Numerical Xtermz Agent	1x32.exe	"Added by the RBOT-FWX WORM!"
U	NUSB3MON	nusb3mon.exe	"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
Y	NuTCSetupEnviron	ncoeenv.exe	"Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows
U	NuvaTime	NuvaTime.exe	"NuvaTime - reminder for women using NuvaRing"
X	NvagNT	nvagNT.exe	"Added by the AGOBOT-RV WORM!"
X	nvc Win32	nvcvc.exe	"Added by the RBOT-ADD WORM!"
X	NvCCCpl	NvCCCpl.exe	"Added by the NOGATA-A TROJAN!"
X	nvchost	winlogon.exe	"Added by the KLONE-J TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	NvClipRsv	svchost.exe	"Added by the DUMARU-K WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	NvClipRsv	swchost.exe	"Added by the DUMARU-AK WORM!"
?	NVCLOCK	"rundll32 nvclock.dll	fnNvclock"
X	nvcoi	nvcoi.exe	"Added by the DLOADER.TYO TROJAN!"
?	NvColorInit	"rundll32.exe NvQtwk.dll	NvColorInit"
X	NVCOM	NVCOM.exe	"Added by the AGOBOT-SB WORM!"
X	NvCp1Do	[path to trojan]	"Added by the DWNLDR-GWE TROJAN! The most common filename seen is ""smss.exe"" - which is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
U	NvCpl	"RUNDLL32.EXE NvCpl.dll	NvStartup"
X	NvCpl	NvCpl.EXE	"Added by the YANZ.B WORM!"
X	NvCpl	[random filename]	"Added by the AGOBOT-APJ WORM!"
X	NvCpl	windowsp.exe	"Added by a variant of the SDBOT WORM!"
X	NvCpl	rundl32.exe	"Added by the AGOBOT-TO WORM! Note - the valid version of this entry has the command line as ""rundll32.exe NvCpl.dll
X	NvCpl28Deamon	mdosft.exe	"Added by the SPYBOT-AD WORM!"
X	NvCPL32	nvcpl32.exe	"Added by the AGOBOT.DAA WORM!"
X	NvCpl32Deamon	nvcpl.exe	"Added by the SPYBOT.S WORM!"
X	NvCplD	m2gr32.exe	"""Switch"" premium rate adult content dialler variant"
X	NvCplD	ntcpl.exe	"""Switch"" premium rate adult content dialler variant"
U	NvCplDaemon	"RUNDLL32.EXE NvQTwk	NvCplDaemon"
U	NvCplDaemon	"RUNDLL32.EXE NvCpl.dll	NvStartup"
X	NvCplDaemon	msmsgrs.exe	"Added by the DLOADER-YI TROJAN!"
X	NvCplDaemon	Xplorer.exe	"Added by the ORBINA-A WORM!"
X	NvCplDaemon32	anvshell32.exe	"Added by the VB-XU TROJAN!"
X	NvCplDeamon	nvdisp.exe	"Added by the PEEPVIE-I TROJAN!"
X	NvCplDmn	NAVSVC.EXE	"Added by an unidentified VIRUS
X	nvcpll	nvcpll.exe	"Added by the BANCBAN-PF TROJAN!"
X	NvCplScan	msc32.exe	"Added by the FORBOT-DD WORM!"
X	NvCplScan	winasp.exe	"Added by the FORBOT.BZ WORM!"
X	NvCplScan	nvsc32.exe	"Added by the BROPIA.N WORM!"
X	NvCplScan	kav32.exe	"Added by the FORBOT-EW WORM!"
X	NvCplScan	netstat32.exe	"Added by the SDBOT.BRL WORM!"
X	NvCplScan	dllmanager.exe	"Added by the FORBOT.R WORM!"
X	NvCpTDaemon	wuauqmr.exe	"Added by the CULT-B WORM!"
X	nvctrl.exe	nvctrl.exe	"Added by the ZLOB.G TROJAN!"
X	nvd32 lptt01	nvd32.exe	"RapidBlaster variant (in a ""nvd32"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	nvd32 ml097e	nvd32.exe	"RapidBlaster variant (in a ""nvd32"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	NVDispDrv	NVDispDRV.EXE	"Added by the WINKO.AO WORM!"
X	NvGraphicsInterface	[path to trojan]	"Added by the BCKDR-QKI BACKDOOR!"
U	NVHotkey	rundll32.exe nvHotkey.dll	"Enables the use of ""hot keys"" for changing setting on Nvidia graphics"
X	Nvid	[8 random charachters]	Unidentified adware
X	Nvid32	Nvid32.exe	"Added by the GEMA TROJAN!"
X	Nvidex32	Nvidex32.exe	"Added by the GEMA TROJAN!"
Y	NVIDIA ActiveArmor	ntrayfw.exe	"System Tray access to the the NVIDIA ActiveArmor hardware-optimized firewall built into some older nForce 3 and 4 series motherboard chipsets"
X	nVidia Application Drivers	nvidiav32.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Nvidia Control Daemon	nksvc32.exe	Added by an unidentified WORM or TROJAN!
X	Nvidia Control Panel	ncsvc32.exe	"Added by an unidentified VIRUS
X	NVIDIA Display	DisplayMonitor.exe	"Added by the ABI.C WORM! Note - this is not a legitimate nVidia entry"
X	nVidia Display Driver	nvsvc64.exe	"Added by the IRCBOT-YK WORM! Note - this is not related to any nVidia based graphics card"
X	nVidia Display Drivers (x86)	nvsys86.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	NVIDIA Driver	MSPMSPSU.EXE	"Added by the WOOTBOT.Y WORM!"
X	nVidia Drivers	nVidiaDrvers.exe	"Added by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card"
X	NVidia Drivers	[path to trojan]	"Added by the RANCK-R TROJAN! Note - this is not related to any nVidia based motherboard or graphics card"
U	NVIDIA Media Center Library	"RunDLL32.exe NvMCTray.dll	NvTaskbarInit"
X	NVIDIA Media Center Library	winlogon.exe	"Added by the AUTORUN-AZK WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
N	NVIDIA nForce APU1 Utilities	NVATray.exe	"nVidia's nForce Audio Processing Unit (APU)- ""provides 3D positional audio and DirectX 8.0 compatibility
U	NVIDIA nTune	nTune.exe	"Older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
U	NVIDIA nTune	nTuneCmd.exe	"Now part of NVIDIA System Tools under the ""Peformance"" tag. NVIDIA nTune is utilty for monitoring and modifying the settings (such as temperatures
X	Nvidia Startup Manager	ksvc32.exe	"Added by the AGENT-IWD TROJAN!"
X	nVidia System Drivers	nvsys32.exe	"Added by an unidentified WORM or TROJAN! See here"
U	NVIDIA System Monitor	NVMonitor.exe	"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
U	NVidia System Utility	NVSystemUtility.exe	"NVidia System Utility - older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures
X	NVIDIA Video drivers	video_32D.exe	"Added by the AGOBOT.KV WORM!"
X	NVIDIA Video drivers	video_32sD.exe	"Added by the RBOT-BB WORM!"
X	Nvidia32	nvidia32.exe	"CoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!"
X	NVidiaDrv	nvfsvm.com	"Added by the DELF-A BACKDOOR!"
X	NviDiaGT	lsass.exe	"Added by the AUTORUN-DV WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
N	NvidiaQuickTweak	"rundll32.exe NvQtwk.dll	NvTaskbarInit"
U	NVIDIAŽ NVRAID	nvraidservice.exe	"Part of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors"
X	nvidll32	nvidll32.exe	"Added by the RBOT-XK WORM!"
U	NVIEW	"rundll32.exe nview.dll	nViewLoadHook"
X	nviload32	nviload32.exe	"Added by the SDBOT-VT WORM!"
N	NvInitialize	"rundll32.exe NvQtwk.dll	NvXTInit"
X	nvirundll	nvirundll.exe	"Added by the SPYBOT.NPS WORM!"
X	nvjxue	nvjxue.exe	"Added by the EYEVEG-J WORM!"
Y	NVmax	NVmax.exe	NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
U	NVMCTRAY	"RunDLL32.exe NvMCTray.dll	NvTaskbarInit"
U	NvMediaCenter	"RunDLL32.exe NvMCTray.dll	NvTaskbarInit"
N	NVMixerTray	NVMixerTray.exe	System Tray access to audio controls from nVidia's motherboard ForceWare software
U	NVMonitor	NVMonitor.exe	"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
X	nvmsgdwn	NVMSGDWN.EXE	"Added by the GRABER-D TROJAN!"
X	NvMsnW	Isass.exe	"Added by the BROPIA.K WORM!"
X	nvpatch	napatch.exe	"Added by the SASSER-F WORM!"
U	NvPvrNetMon	NvPvrNetMon.exe	"Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - ""makes sure you don't miss your favorite show. If you won't be home to watch the show
N	NVQuickTweak	"rundll32.exe NvQtwk.dll	NvTaskbarInit"
U	NVRaidService	nvraidservice.exe	"Part of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors"
Y	NvRegisterMCTray	"RUNDLL32.EXE NVMCTRAY.DLL	NvMCRegisterApp NvCpl.dll"
Y	NvRegisterMCTrayNview	"RUNDLL32.EXE NVMCTRAY.DLL	NvMCRegisterApp nView.dll"
?	NVRotateSysTray	nvsysrot.dll	"Related to NVIDIA nView Control Panel. What does it do and is it required?"
N	NVRT	nvrt.exe	NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
?	NVRTClk	NVRTClk.exe	"Related to a Gigabyte video card. What does it do
X	nvsv32.exe	nvsv32.exe	"Added by the FORBOT-DI WORM!"
X	nvsv32.exe	cstr.exe	"Added by a variant of the SDBOT WORM!"
X	nvsv32.exe	asr_fnt.exe	"Added by the WOOTBOT.GE WORM!"
X	nvsv32.exe	nvsv33.exe	"Added by the WOOTBOT.FP WORM!"
N	NvSvc	nvsvc.exe	"NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active
X	nvsvc	nvsvc.exe	"Added by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%"
X	NVSVC	nvsvc.exe	"Added by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%"
U	NvSvc	"RUNDLL32.EXE nvsvc.dll	nvsvcStart"
U	nvsvc16	nvsvc16.exe	"MySuperSPy surveillance software. Uninstall this software unless you put it there yourself"
X	nvsvca32	nvsvca32.exe	"Added by the TACTSLAY.E TROJAN!"
X	nvsvca32	clfmon.exe	"Added by the TACTSLAY.E TROJAN!"
X	NVSystem32	nvscv32.exe	"Added by the AGOBOT-NO WORM!"
X	Nvt32	complaint_7251.exe	"Added by the ARTIEF.B TROJAN!"
X	NvUpdater	nwiz32.exe	"Added by a variant of the RBOT WORM!"
X	nvviddrv32	[random filename]	"Added by the RBOT-HT BACKDOOR!"
X	NvVideoCenter	NvVid.exe	"Added by the HAXDOOR-DO TROJAN!"
X	NvXplDeamon	xstyles.exe	Added by the SMALL.AJ VIRUS!
?	NWEReboot	dummy.exe	"??"
N	nwiz	nwiz.exe	"Part of NVIDIA's NVIEW Display Management Software - included in drivers for consumer and professional graphics products. This entry runs the ""NVIDIA Display Setup Wizard"" if you connect (or already have connected) an additional display once the drivers have been installed. In later drivers it also loads the ""nView Desktop Manager"" (if you enable it via Control Panel → NVIDIA nView Desktop Manager) if you want to use features such as Hot Keys and Zoom. In both cases nwiz.exe doesn't remain in memory"
X	nwiz	KHATRA.exe	"Added by the ORBINA-A WORM!"
X	nwiz32	nwiz32.exe	"Added by the SINBANK-A TROJAN!"
Y	Nwpopup	Nwpopup.exe	"Broadcast message handler part of Novell Netware that displays server
U	nwrecmsg	nwrecmsg.exe	"Broadcast message handler part of Novell Netware that displays server
U	nwss	Sp0.exe	"SpyOutside surveillance software. Uninstall this software unless you put it there yourself"
Y	NWTRAY	nwtray.exe	"Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client"
X	nxgsvc	"rundll32.exe nxgsvc.dll	start"
X	nxosys	"rundll32.exe nxosys.dll	start"
U	nxpclient	sprtcmd.exe /P nxpclient	"NetExpert - ""India's first ever automated Broadband care technology."" Identifies and automatically fixes typical problems that may occur with your high-speed internet service"
X	Nxvst	cssrs.exe	"Added by the GAOBOT.CD WORM!"
X	Nxvst	lsas.exe	"Added by the GAOBOT.CD WORM!"
X	NZ01	NZ01.exe	"Added by the SCAR-K TROJAN!"
?	oadaemon	oadaemon.exe	"Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually?"
U	OADP Utility	OadpUtil.exe	"Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines
Y	oahstifr	oahstifr.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
U	OAKSTART	OAKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	OAKTASK	OAKTASK.EXE	Taskbar utility for a "control panel" for a CD-RW
Y	OASClnt	oasclnt.exe	"On-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access
Y	oaui	oaui.exe	"System Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall
X	OB Updater	ob.exe	"Added by the AGOBOT-IH WORM!"
Y	Object Store Server	osserver.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
X	ObjectDock	Brico.cmd	"Added by the BOBANDY-A WORM!"
?	objtjprx	objtjprx.exe	"??"
Y	OBRCheck	check.exe	"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
?	obsver	obsver.exe	"Part of LingoWare translating software - what does it do and is it required?"
N	OCAudioIni	OCAudioIni.exe	"One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer"
N	ocraware	ocraware.exe	"Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications
U	Octoshape Streaming Services	OctoshapeClient.exe	"Octoshape Live Streaming - ""is a revolutionary technology that will reduce your bandwidth cost and improve the quality in sound and picture"""
X	ocx32	ocx32.exe	"Added by the ASTEF or RESPAN WORMS!"
X	OCXUPDT32	ocxupdt32.exe	"Added by the AGOBOT-IF WORM!"
X	OczyszczaczKomputerza	GDC.exe	"OczyszczaczKomputerza Polish rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X	OD	SYSCNTR.EXE	HotVideo dialler
X	od-matrxx	od-matrxx.exe	Adult dialler - xx can be any number
X	od-stndxx	od-stndxx.exe	Adult dialler - xx can be any number
X	od-teenxx	od-teenxx.exe	Adult dialler - xx can be any number
U	ODBC BackUp	fdxxl.exe	"G Data ""PC Spion"". PC monitoring and surveilling software
X	oddworldz.exe	oddworldz.exe	"Added by the MULTIDR-EG TROJAN!"
N	Odebit Multimedia V2	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
N	Odebit Multimedia V3	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
N	Odebit Multimedia V3 - Services	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
X	odnex	odbns.exe	"Added by the AGENT-MPM TROJAN!"
X	odnexy	odbnsy.exe	"Added by the VESLORUKI.DWJ TROJAN!"
N	Odometer	Odometer.EXE	Mouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
U	ODSPConfig	ODSPConfig.exe	"DsktopSurveil surveillance software. Uninstall this software if you did not install it yourself"
X	Oeloader	Oeloader.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
X	OEM Tools 32	tres32.exe	"Added by the RBOT.QB WORM!"
U	OEM02Mon.exe	OEM02Mon.exe	"Creative Live! Cam Console Auto Launcher"
?	OEM07Mon.exe	OEM07Mon.exe	"Related to Live Camera Console Auto Launcher by Creative Technology LTD. What does it do and is it required?"
X	OEM32 Tools	sres32.exe	"Added by the RBOT.AML BACKDOOR!"
N	OEMCLEANUP	oemreset.exe	Resets OEM installation settings at bootup. Not required unless you're new to PC's
U	OEMRESET	oemreset.exe	Resets OEM installation settings at bootup. Not required unless you're new to PC's
U	OEMRUNONCE	oemrun.exe	Windows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished
U	oeplugin	bxOEPlugin.exe	"noHTML for Outlook Express is an add-on that protects Outlook Express from email viruses and email scripts by converting incoming email messages from HTML format to simple text"
?	OEPowerPlugs	winoeinit.exe	"??"
Y	oeprsrv	oeprsrv.exe	"Outlook Express Privacy - which ""lets you control access to Outlook Express and its email message database. When you enable protection
Y	oeprsrv.exe	oeprsrv.exe	"Outlook Express Privacy - which ""lets you control access to Outlook Express and its email message database. When you enable protection
Y	oepsrv	oepsrv.exe	"Outlook Express Protector from Ixis Research
Y	oepsrv.exe	oepsrv.exe	"Outlook Express Protector from Ixis Research
X	OESET	setup60.exe	"Added by the WAREZDL.28672 TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list