HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	pyrobatchftp.exe	pyrobatchftp.exe	"""PyroBatchFTP lets you transfer files to/from FTP/SFTP servers in an automatic and unattended way through a simple to learn batch/script language"""
U	PyroTrans	pyrobatchftp.exe	"""PyroBatchFTP lets you transfer files to/from FTP/SFTP servers in an automatic and unattended way through a simple to learn batch/script language"""
N	p_981116	p_981116.exe	"Win32 cabinet self extractor. More info here"
N	Q152404	wsript.exe Q152404.VBS	Appears to run Scandisk at bootup on NEC PCs
X	q36i36O	lms2cenu.exe	Added by the SECONDTHOUGHT VIRUS!
N	QAGENT	qagent.exe	"Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled
X	qappsrvc32.exe	qappsrvc32.exe	"Detected by Kaspersky as the WEBBER.M TROJAN!"
X	qaswww	jdsuml.exe	"Added by the BUZUS.CQMU TROJAN!"
N	QBCD autorun	autorun.exe	Quick Books CD
X	qbkupdbs	mqbkup.exe	"Added by the OPASERV.K WORM!"
X	qbotd	[random filename]	"Added by the BOTTEN TROJAN!"
N	QBReminderFlash	QBReminder.exe	"Upgrade reminder for Intuit's QuickBooks"
?	qBrowse	qbrowse.exe	"??"
X	QBRSR	QuickBrowser.exe	top-banners.com adware
Y	QCDriverInstaller	Lqdsw.exe	"Launches the camera driver setup wizard on the first reboot after installing Logitech's ClickSmart
U	Qchex Tray Icon	Qchex.exe	"Related to G7 Productivity Systems Check Software"
U	QCTray	QCTray.exe	"System Tray access to IBM Access Connections - forerunner to the current ThinkVantage version. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
U	QCWLICON	QCWLICON.EXE	"Part of IBM Access Connections - forerunner to the current ThinkVantage verison. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
N	QD FastAndSafe	QDCSFS.exe	Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
U	QDM	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
U	QDMStart	QdmStart.exe	"QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU
X	QdrModule10	QdrModule10.exe	"Internet Speed Monitor adware"
X	QdrModule11	QdrModule11.exe	"Internet Speed Monitor adware related - see example here"
X	QdrModule12	QdrModule12.exe	"Internet Speed Monitor adware related - see example here"
X	QdrModule13	QdrModule13.exe	"Internet Speed Monitor adware related - see example here"
X	QdrModule15	QdrModule15.exe	"Internet Speed Monitor I adware"
X	QdrModule16	QdrModule16.exe	"Internet Speed Monitor adware related - see example here"
X	QdrModule17	QdrModule17.exe	"Internet Speed Monitor I adware"
X	QdrModule9	QdrModule9.exe	"Internet Speed Monitor H adware"
X	QdrPack10	QdrPack10.exe	"Internet Speed Monitor H adware"
X	QdrPack11	QdrPack11.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack12	QdrPack12.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack13	QdrPack13.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack14	QdrPack14.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack15	QdrPack15.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack16	QdrPack16.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack17	QdrPack17.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack9	QdrPack9.exe	"Internet Speed Monitor adware"
?	Qdsafe	??	"??"
?	Qexplo	Qexplo.exe	"??"
X	Qffecdas	vvzxx.exe	"Added by the MULTIDRP.AA TROJAN!"
X	qgqqft	[path to Trojan]	"Added by the RANKY.T TROJAN!"
Y	QH Live Update Scheduler	UPSCHD.EXE	"Quick Heal Anti-Virus"
Y	QH Office 2K Check	O2KCHECK.EXE	"Quick Heal Anti-Virus MS Office documents virus checker"
X	qkoszvd.dll	"rundll32.exe qkoszvd.dll	jwezubg"
X	qktier	qktier.exe	"Added by the VBNA.ISU WORM!"
U	QlbCtrl	QlbCtrl.exe	"HP Quick Launch Buttons control center on their laptops"
?	QMusic	QMAgent.exe	"??"
U	Qnext	qnext.exe	"""Qnext is the world's most advanced communication and sharing suite"""
N	QNPlus	QNPlus.exe	"Quick Notes Plus by Conceptworld - sticky notes tool"
X	QnX	qnx.exe	"Added by the ACKANTTA WORM!"
X	qoecuy	qoecuy.exe	"Added by the VB-ERV TROJAN!"
U	Qoeloader	Qoeloader.exe	"Qurb 2.0 anti-spam tool for Outlook/Outlook Express. Required when supporting OE but not for Outlook. Shortcut available via Start -> Programs"
U	QPService	QPService.exe	"HP QuickPlay - ""brings your favorite music and movies to life with the touch of a button"""
X	QQ	sendmess.exe	"Added by the SEMES TROJAN!"
X	QQ.exe	QQ.exe	"Added by a variant of the SDBOT WORM! Note - this is not the Tencent QQ Asian instant messanger program and resides in the Windows folder"
X	QQKAV	scvhsot.exe	"Added by the QQROB.ARQ WORM!"
X	QQServer	QQ.exe	"Added by the DOWNLDR-AN TROJAN!"
X	qservices	qservice.exe	"Added by the PROGENT-A TROJAN!"
N	QSort2000	QSORT.EXE	Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"
U	QT4HPOT	OneTouch.EXE	"Supports the additional multimedia keys on HP/Compaq laptops which give single button press access to standard functions such as Mail
U	QT4StBtn	SwiftBtn.EXE	"SwiftBtn - installed alongside the system drivers on Fujitsu Siemens notebooks and allows extra keyboard support"
U	QTaskStartup	qtask.exe	"Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly
X	QTime	nrchk.exe	Premium rate adult content dialler
N	QTSTUB.EXE	Qtstub.exe	Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
X	QTSvc	msocfg.exe	Premium rate adult content dialler
X	QTSvc	navchk.exe	Premium rate adult content dialler
X	QTSvc	shman.exe	Premium rate adult content dialler
X	QTSvc	ssvr.exe	Premium rate adult content dialler
N	qttask	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
U	QtVprMtx	QTVPRMTX.EXE	"Multimedia keyboard driver from Dritek System Inc"
U	QtZgAcer	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	QtZpAcer	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
X	Quantifier Security	qsecue.exe	"Added by the SPYBOT.UOL WORM!"
X	quartz	quartz.exe	"Malware installed by different rogue security software including SpyKillerPro"
?	QUBCity	qtp.exe	"??"
?	Queensla	Queensla.exe	"??"
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
U	Quick Heal Firewall Pro	qhfw.exe	"Quick Heal Firewall Pro"
U	Quick Heal Messenger	QHM32.EXE	"Quick Heal Anti-Virus Messenger - keeps you informed about the latest threats
Y	Quick Heal On-Line Protection	Cateye.exe	"Quick Heal - virus scanner"
Y	Quick Heal Startup Scan	QHSTRT32.EXE	"Quick Heal - virus scanner"
U	Quick Hide Windows	qhw.exe	"Quick Hide Windows from CronoSoft - ""provides a quick and easy way for home and office PC users to quickly get sensitive materials off the screen without closing programs or losing documents"""
X	Quick Office	activate.exe	"Added by the RANSOMLOCK.D TROJAN! Note - this infection hooks the keyboard to prevent anything except numbers from being typed and displays a Russian message requesting a valid license key"
N	Quick Shelf xx	qushelfxx.exe	"Places an icon in the system tray for launching MS Bookshelf. Available via Start -> Programs"xx" represents the version number - ie
Y	Quick Startup	Fquick32.exe	For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
X	Quick Time file manager	quicktimeprom.exe	"Added by the SDBOT TROJAN!"
N	Quick Time Task	qttask.exe	"System Tray access to Apple's ""Quick Time"" viewer from version 5 onwards"
N	Quick View Plus	QVP32.EXE	Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start -> Programs
U	QuickBooks Database Server Manager	QBServerUtilityMgr.exe	"Part of QuickBooks Pro/Premier from Intuit - ""QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access."" See here for further information"
N	QuickBooks Delivery Agent	QBDAGENT.EXE	As far QAGENT but for QuickBooks. Can also have the version number in the name
N	Quickbooks Update Agent	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not
N	Quickcam	Quickcam.exe	"Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled
N	Quickcam.exe	Quickcam.exe	"Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled
N	QuickCam10	QuickCam10.exe	"Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled
N	QuickCam10.exe	QuickCam10.exe	"Loads versions of the Logitech QuickCam webcam software and is required to support features such as face tracking. If enabled
U	QuickCamPro	QuickCamPro.exe	"System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example
U	QUICKCARE	sprtcmd.exe /P QUICKCARE	"Qwest Broadband QuickCare (provided by SupportSoft
U	QuickCare2.2	sprtcmd.exe /P QuickCare2.2	"Qwest Broadband QuickCare (provided by SupportSoft
U	QuickDVBT	QuickDVB-T.exe	"AVerTV_DVB-T connects Digital TV with your PC or Notebook and allows you to watch free-to-air digital terrestrial television channels with no subscription to pay"
X	quicken	quicken.exe	"CoolWebSearch Therealsearch parasite variant"
X	quicken	Winrar.exe	"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
X	quicken	Waol.exe	"CoolWebSearch Therealsearch parasite variant"
N	Quicken Scheduled Updates	bagent.exe	Quicken background downloading module
N	Quicken Startup	QWDLLS.EXE	Quicken option to load DLLs at startup
N	QuickenSEMessage	Qsemsg.exe	Quicken option
N	QuickFinder Scheduler	QFSCHD100.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
N	QuickFinder Scheduler	QFSched.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
N	QuickFinder Scheduler	QFSCHD110.EXE	"Used in Corel WordPerfect Office 11 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
N	QuickFinder Scheduler	QFSCHD130.EXE	"Used in Corel WordPerfect Office X3 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products). See here"
X	QuickHealCleaner	QuickHealCleaner.exe	"QuickHealCleaner rogue spyware remover - not recommended
X	QuickInstallPack	QuickInstallPack.exe	"Installed and used by rogue security products such as Cleaner2009
X	QuickInstallPack	CLN_2009FreeInstall.exe	"Installed and used by rogue security products such as Cleaner2009
Y	QuickLaunchEr	QuickLaunchEr.Exe	QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
N	Quicklink III	QL.EXE	"HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode
N	Quicknote	quicknote.exe	"JC&MB Quicknote Virtual Scrapbook"
U	QuickPassword	agquickp.exe	Smart card-based authentication and digital signature client software
N	QuickRes	QUICKRES.EXE	Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel -> Display. Not required unless you have to change resolutions on a regular basis
N	quickset	quickset.exe	Dell taskbar icon allowing you to quickly change settings
X	QuickSet	mmspng.exe	Added by a variant of the IROFFER.Z TROJAN!
X	Quicktime	qttasks.exe	"Added by the ADCLICK-AK TROJAN!"
X	Quicktime	shch.exe	"Added by a variant of the BDOOR-EB BACKDOOR!"
X	QuickTime	qttask.exe	"Added by the AGENT-ENG TROJAN! Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %System%"
X	Quicktime Mediaplayer	winmplyer32.exe	"Added by the RBOT-PM WORM!"
X	Quicktime Mediaplayr	wnmplyr.exe	"Added by a variant of the RBOT WORM!"
X	Quicktime Pro 3.0	winuodps.exe	"Added by the GAOBOT.BH WORM!"
N	QuickTime Task	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
X	QuickTime Task	qttasks.exe	"CoolWebSearch parasite variant"
X	Quicktime Task	[random filename]	"Trafficadvance dialer"
X	QuickTime Task	qttask.exe	"Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %ProgramFiles%\WebMediaViewer"
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	"Different numbers caused by number of launches. So if 3 updates are made separately
X	QuicktimeMngr	QUICKTIMEMNGR.EXE	"Added by the WOOTBOT.AW WORM!"
X	QuickTimeUpdate	QuickUpdate.exe	"Added by the BIFROSE-CW TROJAN!"
X	Quicktlme	ru.exe	Adult content dialler
N	QuickTour	QuickTour.exe	"Runs the QuickTour on the first reboot after installing Logitech's SetPoint software for their range of wired and wireless keyboards and pointing devices (mice
U	QuickTV	QuickTV.exe	"Infra-red remote control driver for the AVerTV Studio TV tuner/personal video recoder from AVerMedia. Required if you use the remote control"
X	Quickzip	Ls.exe	MsConnect browser hijacker and dialler
X	QuickZip	lu.exe	MsConnect browser hijacker and dialler
N	QuikShield	qkshield.exe	"QuikShield popup blocker - reportedly stealth installed
N	QuikSync	QUIKSYNC.EXE	Used by Iomega drives. Available via Start -> Programs
N	Quote on Table 3	Quote3.exe	"Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required"
N	Quote3	Quote3.exe	"Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required"
N	Quote3.exe	Quote3.exe	"Quote on Table from Badevlad Company - displays automatically changing quotes and citations on your desktop. Start manually when required"
X	qvqe	qgebv.exe	"Added by the AGOBOT-OJ WORM!"
X	qwe	qwe.exe	"Added by the LINEAGE-F TROJAN!"
?	QWERTY	qwerty.exe	Possibly adult content related adware
X	qwertybot.exe	qwertybot.exe	"Added by the AGENT.ALF TROJAN!"
U	Qwest 11n Wireless WPS Tool	WpsCenter.exe	Wireless configuration utility for the Qwest 11N 150MB USB wireless adapter
U	QWS3270 Sessions	sessions.exe	QWS3270 Secure terminal emulation software
X	R	rundll32.exe msprt.dll	"Chinese originated browser hijacker - redirecting to 4199.com Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
U	R2Plus_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Samsung SCX-4x20 Series multifunction printers
U	R2Ricoh_S2P	Scan2pc.exe	Scan to PC application for the scanning function of the Ricoh MFP Type 103 multifunction printer
X	RA Server	Slave.exe	Added by the RA TROJAN!
X	RabbitWannaHome	rabbit.exe	"Added by the MIMAIL.S WORM!"
Y	Rabo Session Monitor	RaboSessionMon.exe	"Related to RaboBank electronic banking software"
N	RaConfig2500	RaConfig2500.exe	"RaLink wireless LAN configuration utility"
N	RadarSync	RadarSync.exe	"Radarsync utility comes from DFI with their latest motherboards
U	RadBoot	RadBoot.exe	RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings
U	Radio365Agent	Radio365TrayAgent.exe	"Radio365 - create playlists and broadcast live straight from your PC!"
U	RadioSvr	RadioSvr.EXE	Used to configure wire less networks. Windows automatically detects the Wireless network and it configures the network
X	RagesCamera	Ragesn.exe	"Added by the SDBOT.AHJ WORM!"
U	RAID Event Monitor	Iaanotif.exe	"Part of Intel® Matrix Storage Manager (formally known as Intel® Application Accelerator and Intel® Application Accelerator RAID Edition). Used in conjunction with the event monitor service (IAANTMON - Iaantmon.exe) to display event notifications (such as RAID volume status changes
X	raidhost	raidhost.exe	"Added by the AGENT-LID TROJAN!"
U	RaidTool	raid_tool.exe	VIA V-RAID Tool - hard disk striping/mirroring utility for increased performance and reliability
U	Rainlendar	Rainlendar.exe	"Rainlendar is a customizable calendar that displays the current month"
U	Rainlendar2	Rainlendar2.exe	"Rainlendar is a customizable calendar that displays the current month"
N	Rainmeter	Rainmeter.exe	"Rainmeter is a customizable performance meter
X	Rakyat_Kelaparan	Kuli.exe	"Added by the SILLYFDC.BDM WORM!"
X	Rakyat_Miskin	Buruh.exe	"Added by the SILLYFDC.BDM WORM!"
U	Ralink Wireless Utility	RaUI.exe	"Wireless configuration utility for Railink based products"
U	RAM Idle Professional	RAM_XP.exe	"RAM Idle LE - ""A smart memory management program that will keep your computer running better
U	RAMASST	RAMASST.exe	"Optionally installed with some DVD drives (LG
X	RamBooster2	rb.exe	"Added by the AKAK TROJAN!"
?	RAMConnectionChecker	RAMConnChecker.exe	"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
U	RAMDef	ramdef.exe	"Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
U	RAMDrive	RDTask.exe	"Virtual Hard Drive Pro from Farstone - ""takes a portion of your system memory and creates a RAM disk drive
?	RAMGINAConnWatch	RAMConnWatcher.exe	"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
U	RamIdle	ramidle.exe	"RAM Idle LE - ""A smart memory management program that will keep your computer running better
U	RAMpage	RAMpage.exe	"Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon
X	Randex virus built for IRBMe	irbme.exe	"Added by the RANDEX.RH WORM!"
X	random	random.exe	"Added by the DLOADER-KM TROJAN!"
X	Random Interface Network	rst.exe	"Added by the DELBOT-P WORM!"
X	Random Interface Network Manager	rinsv.exe	"Added by the DELBOT-L WORM!"
X	Random Unique ID	[worm filename]	"Added by the XROVE-A WORM!"
X	RandomWin32	mgnwin32.exe	"Added by the SDBOT-DV WORM!"
U	Randsoft Harmony '98	rsMenu.exe	"Randsoft Harmony '98 (superseded by Enterprise Harmony 99) for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000"
X	rant	rant.exe	"Added by the RBOT-ZB WORM!"
Y	RapApp	RAPAPP.EXE	"Application protection component of BlackICE PC Protection (was Defender) firewall
X	Rapdata	ravsecs.exe	"Added by the QQPASS-V TROJAN!"
X	Rapdatae	rabseuser.exe	"Added by the QQPASS-S TROJAN!"
X	Rapdatybs	ravseteyns.exe	"Added by the PWS-ACP TROJAN!"
X	Rapid Antivirus	Rapid Antivirus.exe	"Rapid Antivirus rogue security software - not recommended
U	Rapid Restore	rrpcsb.exe	"XPoint ""Rapid Restore PC"" - ""a Managed Recovery solution that enables IT Administrators to protect the corporate image
X	RapidBlaster	rb32.exe	"RapidBlaster parasite. Recommended you use RapidBlaster Killer to uninstall - see here"
X	Raptelnet	ravspeger.exe	"Added by the QQPASS-AA TROJAN!"
X	Raptelt	ravspegtl.exe	"Added by the QQPASS-AB TROJAN!"
Y	Raptor Mobile	vpnservices.exe	"Symantec VPN Client used to connect to corporate networks. If unchecked
X	RaptorDefence	RaptorDefence.exe	"RaptorDefence rogue security software - not recommended
X	RasCon Remote Access Service Manager	rasmngr.exe	"Added by the SPYBOT.EM WORM!"
X	rasctrs	rasctrs.exe	"Hijacker
X	Rase	boln.exe	"PurityScan adware"
X	rasman	rasman32.exe	"Added by the BCKDR-QGN BACKDOOR!"
X	RasMan.exe	RasMan.exe	"Added by the FEUTEL-H TROJAN!"
X	rate.exe	i11r54n4.exe	"Added by the BEAGLE-I WORM!"
X	rate.exe	i1ru74n4.exe	"Added by the BEAGLE.E WORM and variants!"
Y	RAV8Tray	ravtray8.exe	"RAV anti-virus related"
X	RavAv	RavMonE.exe	"Added by the RJUMPF-F WORM!"
X	RavAv	AdobeR.exe	"Added by the RJUMP.D WORM!"
X	RAVEN_VLZS.EXE	RAVEN_VLZS.EXE	"DownloadReceiver parasite - no longer in existence"
Y	RavMon	RavMon.exe	"RAV AntiVirus"
X	ravshell	expl0rer.exe	"Added by the DLOADER.MAR TROJAN!"
X	Ravshell	explore3.exe	"Added by the PAKES.HZ TROJAN!"
X	Ravshell	IEXPLORER.EXE	"Added by the AGENT.URZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Ravshell	rund1132.exe	"Added by the AGENT.OKZ TROJAN!"
X	Ravshell	svch0st.exe	"Added by the NSPM.PU TROJAN! Notice the digit ""0"" in the filename rather than the lower case ""O"""
X	ravshell	1explore.exe	"Added by the DLOADER.MJF TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list