HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	Oesi	srts.exe	"PurityScan adware"
U	OESpamTest	OESpamTest.ExE	"Kaspersky Anti-Spam"
Y	oessrv	oessrv.exe	"Outlook Express Security - which is used ""to control access to Outlook Express and its databases. When it is active
Y	oessrv.exe	oessrv.exe	"Outlook Express Security - which is used ""to control access to Outlook Express and its databases. When it is active
N	OEXCheck	EA2Check.exe	"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup
X	oe_drop_spam	oesrv.exe	"Dropspam adware"
Y	OE_OEM	TMAS_OEMon.exe	Related to Trend Micro PC-cillin - Internet Security 12
X	Offer Companion	offers.exe	Adware
X	Offers	offers.exe	Adware
X	Offica Monitor Secura Systeme	winxp_sp3.exe	"Added by a variant of the RBOT WORM!"
X	Office	Office.exe	"Added by the KRAIMER.12 TROJAN!"
X	Office Desktops	imag.exe	"Added by the SPYBOT.AQR WORM!"
U	Office Mail	off_mail.exe	"Office Mail from Burrotech Ltd - ""complete email solution for small/medium businesses
U	Office Mail Alerter	om_Alerter.exe	"Office Mail Alerter - ""alert Office Mail users when they receive new emails"" via a System Tray icon"
X	Office Monitor	adv32.exe	"Added by the SDBOT-CWO WORM!"
X	Office Monitor	alg32.exe	"Added by the RBOT-GMM WORM!"
X	Office Monitor	nvsvc86.exe	"Added by the IRCBOT.BVO BACKDOOR!"
X	Office Monitor Secure Systema	absecure32.exe	"Added by the RBOT.FPW WORM!"
X	Office Monitor Word Exel R	svch.exe	"Added by the DWNLDR-GWW TROJAN!"
X	Office Monitor Word Exel R	u.exe	"Added by the SDBOT-DEE WORM!"
X	Office Monitor Word Exel R	[trojan filename]	"Added by the IRCBOT-VX TROJAN!"
X	Office Monitors	GoogleUpdater.exe	"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
X	Office Monitorse	[path to worm]	"Added by the SDBOT-CZX WORM!"
N	Office Startup	osa.exe	On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
X	Office Startup	Exploer.exe	"Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries"
N	Office Startup	Osa9.exe	On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
X	Office SturtUp	osa9.exe	"Added by the CLICKER-EC TROJAN! Note - this trojan is located in %Windir% and should not be confused with the Microsoft office program
X	OfficeAgent	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	outIook.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	svcrhost.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeAgent	svcshost.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeDeamon	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
Y	OfficeGuard RegChecker	ogrc.exe	"Kaspersky Labs anti-virus"
X	OfficeGuardUI	svcss.exe	"Added by the DEDLER-C TROJAN!"
?	officejet 6100	hposol08.exe	Associated with a HP PSC2110 (and maybe others) all-in-one machine
U	OFFICEKB	kbdap32a.EXE	"Keyboard utility for a Micro Innovations brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard"
X	OfficeQuickAccess	OfficeHost.vbs	"Added by the PEXMOR WORM!"
X	Offices	msnmgd32.exe	"Added by the FORBOT-DV WORM!"
X	Offices Monitors	[path to worm]	"Added by the RBOT-GKO WORM!"
X	Offices Monitorse	[path to worm]	"Added by the RBOT-GKO WORM!"
X	Offices Monitorse	algose32.exe	"Added by the RBOT-GDD WORM!"
Y	OfficeScan95	pccwin97.exe	"Trend Micro antivirus OfficeScan"
Y	OfficeScanNT Monitor	pccntmon.exe	"Trend Micro OfficeScan Antivirus real-time scan monitor"
X	OfficeWord Monitor	msn32.exe	"Added by the RBOT-GUE WORM!"
X	OfficeWord Monitors	Offlce.exe	"Added by the IRCBOT.JZ TROJAN!"
X	OFFICEXP	OFFICEXP.exe	"Added by the WOOTBOT.HE WORM!"
X	Office_app	msnmrgs.exe	Added by a variant of the VBBANC-A TROJAN!
X	office_update	[path to trojan]	"Added by the DLOADER-ZB TROJAN!"
U	OfflineFileSync	OfflineFileSyn.exe	"Offline synchronization part of ZANTAZ EAS (Enterprise Archive Solution) - which ""is a secure
N	OfotoNow USB Detection	"Rundll32.exe OFUSBS.DLL	WatchForConnection OfotoNow"
Y	ogrc	ogrc.exe	"Kaspersky Labs anti-virus"
N	Oil Change	OCTray32.exe	From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
?	OIM	oim.exe	"Related to the O2 (was ""genie"") mobile phone service. What does it do and is it required?"
X	OKGO	winutade.exe	"Added by the BANKER-EHZ TROJAN!"
U	OKI LPR Utility	okilpr.exe	OKI printer utility
X	OKMaster	OKMaster.exe	"OKToolbar adware"
X	OLE	[filename]	"Added by the STAWIN or TARNO.D TROJANS!"
X	OLE Automation Server	ole32aut.vbe	"CoolWebSearch parasite variant"
X	oleaccrc	oleaccrc.exe	"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
X	OLEDb Service	runoledb32.exe	"Added by a variant of the SPYRE.B TROJAN!"
X	olehelp	olehelp.exe	"Added by the BOOKMARKER.D or BOOKMARKER.G TROJANS!"
X	OleLoader	ole32.exe	Added by the DELF.BR TROJAN!
U	olesvr	olesvr.exe	"Salfeld Child Control - parental control software"
X	Olive System	Szchost.exe	"Added by the MERCURYCAS.A TROJAN!"
X	olpr	olpr.exe	"Added by the DWNLDR-GWQ TROJAN!"
N	OLPSYNCH	OlpSynch.exe	"Related to Offline Course Player from Element K Corp. Provider of the Technology
X	Olympic	IE4321.exe	Adult content premium rate dialer - also detected as SMALL.CZ
N	OM2_Monitor	FirstStart.exe	"Olympus Master 2 - digital camera management tools"
N	OM2_Monitor	MMonitor.exe	"Olympus Master 2 - digital camera management tools"
X	Omega AntiVir	OM83b.exe	"Omega AntiVir rogue security software - not recommended
U	Omega ASIO Control Panel	ASIOSysTray.exe	"System Tray access to the control panel for the Lexicon Omega ASIO (Audio Streaming I/O) desktop recording studio"
X	Omf4	OMF4.EXE	"Added by the FREEMEGA TROJAN!"
N	OmgStartup	omgstartup.exe	Sony program called OpenMG Jukebox - player and music organizer
U	OmniHTTPd	ohttpd.exe	"OmniHTTPd web server from Omnicron"
N	OmniPage	Opware32.exe	"Part of OmniPage from Nuance (was Scansoft) - ""the fastest
U	OmniPass	scureapp.exe	"OmniPass from Softex Inc. - secure password management software"
N	OM_Monitor	FirstStart.exe	"Olympus Master 1 - digital camera management tools"
N	OM_Monitor	Monitor.exe	"Olympus Master 1 - digital camera management tools"
U	On Screen Display	OSD.EXE	"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume
U	On screen display	TPOSDSVC.exe	"Supports the hotkeys on IBM/Lenovo ThinkPad notebooks - displays the result of the using of function keys on the desktop screen. For example
X	once	help.exe	IESearchToolbar parasite. Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.LF TROJAN!
N	One Touch Monitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	One Touch Monitor	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	One Touch Monitor	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
Y	OneCareUI	winssnotify.exe	"System Tray access to and notifications from Windows Live OneCare - now superseded by Microsoft Security Essentials. ""OneCare helps keep your PC safe and secure while making your life easier. From virus scanning and file backups
X	OneMoreKey	xpa.exe	"XP Antivirus rogue security software - not recommended"
N	OneNote 2007 Screen Clipper and Launcher	ONENOTEM.EXE	"System Tray access to MS Office OneNote 2007 - an electronic notebook that allows you to create free-form notes
N	OneTouch Monitor	OneTouchMon.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	1tou~2.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X	Onflow	onflow.exe	Onflow is a internet company that offers an online advertising program. Not required - uninstall
U	OnfolioStorage	onfserv.exe	"""Onfolio is the complete solution for collecting
Y	Online Armor Firewall	oaui.exe	"System Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall
?	online cdrom	Active acid.exe	"??"
X	Online Service	svchost.exe	"Added by the HOSTIDEL.B or HOSTIDEL.C or TARNO.B TROJANS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
X	Online Services	twain.exe	"Added by the AGENT.BEA TROJAN!"
Y	OnlineArmor GUI	oaui.exe	"System Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall
X	OnlineGuard	OnlineGuard.exe	"OnlineGuard rogue security software - not recommended
X	OnlineHelpmate	GDC.exe	"OnlineHelpmate rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
U	OnlinePCfix SmoothSurfer	SS.exe	"Smooth-Surfer - blocks banners
N	OnlineTime	onlinetime.exe	"OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs"
X	online_party	online_party.exe	Adult content dialler
X	Onluna Sarvice	sachost.exe	"Added by the TOFGER-AA TROJAN!"
X	Onlune Sarvice	sachost.exe	"Added by the DAEMONI-J TROJAN!"
X	only23	SCVHOST.exe	"Added by the BCKDR-PUQ BACKDOOR!"
X	OnSrvr	OnSrvr.exe	OnWebMedia adware
X	oo4	"RunDLL32.EXE oo4.dll	DllRun"
U	OODefragTray	oodtray.exe	"System Tray access to O&O Defrag disk defragmentation software"
?	OOLHELPT	OOLHELPT.exe	"??"
U	Oops!Backup	OopsBackup.exe	"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
U	OopsBackup	OopsBackup.exe	"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
U	OopsBackup.Manager	OopsBackup.exe	"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
N	OP12 Reminder	Ereg.exe ereg.ini	"Registration reminder for OmniPage from Nuance (was ScanSoft)"
U	OpAgent	OpAgent.exe	"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
X	Open Service Drivers	opiater.exe	"Added by a variant of the RBOT WORM!"
X	Open Site	opnste.exe	"OpenSite adware"
X	Open Site	opensite.exe	"OpenSite adware"
X	Open2Enter	runme.exe	Adult content dialler
X	Open2Enter	runme2.exe	Adult content dialler
X	OpenApizs	zrscbm.exe	"Added by the AGENT.RLH TROJAN!"
U	OpenDNS Update	OpenDNS Updater.exe	"Updater for OpenDNS which ""is a free service that works for networks of all sizes
X	OpenGL Drivers	0penGLD.exe	"Added by the YIMP-A WORM!"
X	OpenMstart	[path to dialler]	"""Switch-E"" premium rate adult content dialer"
N	OpenOffice.org *.*.*	quickstart.exe	"OpenOffice.org office suite quick start (where ""*.*.*"" is the version number)"
N	OpenOffice.org x	QUICKS~1.EXE	"Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number"
N	OpenTalk	OpenTalk.exe	"OpenTalk - free video and voice conferencing software application that allows you to talk to up to 100 friends in a chat room
U	openvpn-gui	openvpn-gui.exe	"""OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations
U	Openwares LiveUpdate	LiveUpdate.exe	"Web-update utility as used by various types of software - see here"
X	Opera addon	svhost.exe	"Added by the AGENT-IBD WORM!"
X	Operalaunch	vmm.exe	"Added by the AGENT-IBD WORM!"
N	Operations Typhoon Rising Registration	NOVG.EXE	"Joint Operations registration reminder"
N	Operator	??	"Media Pilot operator
U	Operator	xtmop.exe	Fax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported
X	OpiStat	OpiStat.exe	"NetRatings Premeter spyware"
X	OPQFile	regedit.exe /s ...rad03FA6.tmp	Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit
X	opr	opr.exe	"MediaMotor adware"
U	OpScheduler	OpScheduler.exe	"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
N	OPSE reminder	Ereg.exe ereg.ini	"Registration reminder for OmniPage from Nuance (was ScanSoft)"
X	opsql update check	opsql.exe	"Added by the RBOT-ACJ WORM!"
N	OptiCAL Startup	OptiCAL.exe	"OptiCAL monitor calibration software from ColorVision for advanced amateurs
X	Optim1	regdtopt.exe	"Added by the RAMVICRYPE TROJAN!"
X	Optim2	regdtopt.exe	"Added by the RAMVICRYPE TROJAN!"
X	Optim3	regdtopt.exe	"Added by the RAMVICRYPE TROJAN!"
X	Optim4	regdtopt.exe	"Added by the RAMVICRYPE TROJAN!"
X	Optimize Windows	Kuntilanak.exe	"Added by the SILLYFDC WORM!"
X	OPTIMIZER	iexplore.exe	"Added by the EVEVINC BACKDOORNote - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	OPTIMIZER	iexplore.exe	"Added by the EVIVINC BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Optimum Online	Netsurf.exe	OptimumOnline ISP software related spyware - displays advertising popups and collects information about user activity
X	Optim[NUMBER]	[path] egdtopt.exe	"Added by the RAMVICRYPE TROJAN!"
X	Optional Web Drivers For WIN32	phqghume.exe	"Added by a variant of the RBOT WORM!"
U	OPTMOUSEMOUSE	optmouse.exe	"Related to a Samsung optical mouse"
U	Optus Cable Data Monitor	datamonitor.exe	"Allows Optus customers to monitor their actual data usage against Optus' ""data allowance limits"""
N	OptusNet Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software
U	OptusNetUsage	OptusNet Usage Meter.exe	"Designed specifically for OptusNet users who wish to have their connection monitored on a frequent basis. It can also estimate when you are going to hit your usage limit
N	Opware12	Opware12.exe	"OmniPage from Nuance (was Scansoft) - version 12. If running
N	Opware14	Opware14.exe	"OmniPage from Nuance (was Scansoft) - version 14. If running
N	Opware15	Opware15.exe	"OmniPage from Nuance (was Scansoft) - version 15. If running
N	OpwareSE2	OpwareSE2.exe	"Hardware bundled version of OmniPage from Nuance (was Scansoft). If running
N	OpwareSE4	OpwareSE4.exe	"Hardware bundled version of OmniPage from Nuance (was Scansoft). If running
U	Oracle Web-to-Go	webtogo.exe	"""
Y	Orange Connection Kit	atdialler1.exe	"Part of the Orange Connection Kit - changes the dial-up for Orange Any Time if access problems are encountered"
N	OrangeShark	OSharkUpdater.exe	"Orange Shark updater - online games for all ages"
U	Orb	OrbTray.exe	"Related to Orb Tray from InstallShield Software Corporation now owned by Macrovision"
X	OrbitUpdate	update.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
X	OrbitView	view.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
N	OrderReminder	OrderReminder.exe	The HP Order Reminder utility is installed with the HP LaserJet printer software and allows you to set specific times for reminders to check the current level of toner in the print cartridge - it also contains an Order Now link to a Web page that helps you order supplies online from a reseller of your choice
X	orderShell	order****.exe [* = random char]	"Added by the DLOADR-UN TROJAN!"
X	order_Shell	order_smey.exe	"Added by the BANKSNIF-H TROJAN!"
X	order_Shell	order_****.exe [* = random letter]	"Added by the AGENT.ARO TROJAN!"
X	order_Shell	order_glsw.exe	"Added by the DLOADR-KO TROJAN!"
X	order_Shell	order_pgum.exe	"Added by the AGENT-BSQ TROJAN!"
U	orec32	orec32.exe	"OnlineRecorder surveillance software that records Yahoo! and AOL instant messages
?	org5.exe	org5.exe	"Lotus Organizer 5 application file
X	OrgyCam	OrgyCam.exe	Adult content dialler
U	OrigRage128Tweaker	RAGE128TWEAK.EXE	Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com
U	ORiNOCO	Cmluc.exe	"Client Manager software for a Proxim ORiNOCO 11a/b/g wireless LAN PCI card"
X	OS Boot Configuration	bootconfig.exe	"Added by the IRCBOT.HJ WORM!"
X	OS Boot Configuration!	bootconf.exe	"CoolWebSearch BootConf adware"
X	OS Boot Load	bootload.exe	"Added by a variant of the IRCBOT TROJAN!"
X	OS Security	mswind32.pif	"Added by the RBOT-ASU WORM!"
X	OSA	winword.exe	"Added by the KANGAROO-A TROJAN!"
X	Osa32	NTOSA32.exe	"Added by the ANIG WORM!"
U	osCheck	osCheck.exe	"Part of Norton Antivirus. Initiates a quick scan (at startup) of the portions of the OS Symantec currently (as defined by the most recent updates downloaded onto the host computer) thinks are most susceptible to infection. This scan is not necessary for proper operation of Norton Antivirus"
U	OSD	OSD.exe	"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume
X	OSD	ALG.exe	"Added by the STARTPAGE-ID TROJAN!"
U	OsdMaestro	OSD.exe	"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a ""hot key"" on such a keyboard brings a corresponding panel on the screen for volume
U	OsdMaestroOSD.exe	OSD.EXE	"By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a ""hot key"" on such a keyboard brings a corresponding panel on the screen for volume
X	OSS	ossproxy.exe	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
X	OSS	rk.exe	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
X	OSS	rlvknlg.exe	"Marketscore.RelevantKnowledge adware"
U	OSSelectorReinstall	oss_reinstall.exe	"Related to Acronis Disk Director Suite"
X	OSSProxy	OSSPROXY.EXE	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
U	OStivityInvAgt	ostivity.exe	"OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network
X	Osus	acao.exe	"PurityScan adware"
X	Osus	rrup.exe	"PurityScan adware"
X	otcx	otcxxh.exe	"Added by the CAROOL TROJAN!"
N	OurPictures	OurPictures.exe	"Related to RitzPix Online Photo Print services"
X	Outerinfo	Outerinfo.exe	"Clickspring.Outerinfo adware"
X	OuterinfoUpdate	OuterinfoUpdate.exe	"Clickspring.Outerinfo adware"
X	outlook	outlook.exe	"Added by the SDBOT-RU WORM! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %System%"
X	outlook	outlook.exe	"Added by the ALCRA.F WORM! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %ProgramFiles%\Outlook"
X	Outlook Express	msinm.exe	"Added by a variant of the RBOT WORM!"
X	Outlook Express Config	*****.exe [* = random char]	"Added by a variant of the RBOT WORM!"
X	Outlook Express Protocol	look.exe	"Added by the RBOT-ACS WORM!"
X	Outlook Mail Services	express.exe	"Added by the RBOT.CJN WORM!"
X	Outlook Mail Services	outlook.exe	"Added by the RBOT-BKA TROJAN! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %System%"
U	OutlookOnDesktop	OutlookDesktop.exe	"""Outlook On the Desktop is a program that displays Outlook as a transparent
X	OutLooks	InSane.exe	"Added by the SWOOP TROJAN!"
Y	Outpost Firewall	outpost.exe	"Outpost personal firewall"
Y	OutpostFeedBack	feedback.exe	"Part of Outpost firewall by Agnitum. The feedback service is for reporting issues directly to Agnitum from within OP"
Y	OutpostMonitor	op_mon.exe	"Monitor for Outpost Firewall PRO (and Free) from Agnitum"
X	outpostupdate	outpostupdate.exe	"Added by the COSIAM-C TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list