HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	SystemTray Monitor	SysTraymon.exe	"Added by a variant of the SPYBOT WORM! See here"
U	SystemTraySD	SDSystemTray.exe	"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
U	SystemTraySR	SRSystemTray.exe	"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
X	SystemTuner	SystemTuner.exe	"System Tuner rogue system suite - not recommended
N	SystemUpd	SystemUpd.exe	"Updater for Swapoo.com
X	SystemUpdate	Negdo.exe	"Added by the CULLER-C WORM!"
X	SystemUpdate	Xeyu.exe	"Added by the CULLER-D WORM!"
X	SystemVeteran.exe	SystemVeteran.exe	"SystemVeteran rogue security software - not recommended
X	systemw32	systemw32.exe	"Added by a variant of the RBOT WORM!"
X	SystemWarrior	SystemWarrior.exe	"SystemWarrior rogue security software - not recommended
U	SystemWeb	rundll32.exe [path] SystemWeb.dll rdl	"StealthWeblog surveillance software. Uninstall this software unless you put it there yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	SystemWideHook for Windows NT	%WinHook32.exe	"Added by the MYDOOM.AC WORM!"
X	SystemWindows	scvhost.exe	"Added by the SILLYFDC-CG WORM!"
U	SystemWizard Sniffer	Sniffer.exe	"SystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC"
X	SystemX	nzm.exe	"Added by a variant of the RBOT WORM!"
X	systemx32	systemx32.exe	"Added by a variant of the RBOT WORM!"
X	systemyom Updater	systemyom.exe	"Added by a variant of the IRCBOT TROJAN!"
X	SYSTEMZ Patch	SYSZ.exe	"Added by the ALADINZ.P TROJAN!"
U	System_Messages	pprsen.exe	"TerminatorX - ""offers an easy and effective method of stopping users running predetermined file sharing programs like KaZaA
X	systen32.exe	systen32.exe	"Added by the DLOADR-AQP TROJAN!"
X	Systes	jrdtifkkxbbsa.exe	"Added by the RBOT-ADC WORM!"
X	Systesms.exe	systesms.exe	"Added by the RBOT-HI WORM!"
U	Systest	Systest.exe	"Clean Space internet evidence eliminator"
X	SysteZ	d1.exe	"Added by the MSNDIABLO.A WORM!"
X	systhread	winkernal.exe	"Added by the LIAMED WORM!"
X	systhread	HELLO.EXE	"Added by the WINKER.F BACKDOOR!"
X	SysTime	systime.exe	"CoolWebSearch parasite variant - also detected as the STARTPA-FL TROJAN!"
X	Systmesy	Systmesy.exe	"Added by the RBOT-KQ WORM!"
X	SYSTMON.EXE	SYSTMON.EXE	"Added by the SILLY-H WORM!"
X	Systoan32	systoan.exe	"Added by an unidentified VIRUS
X	systr	SYSERVER.exe	"Added by the VB-DQY WORM!"
X	systr2	SERVICE.exe	"Added by the VB-DQY WORM!"
?	systr32	systr32.exe	"??"
X	systrans	[path to trojan]	"Added by the STARTPA-GZ TROJAN!"
X	systrasx	CONSOLES.EXE	"Added by the SDBOT-NW WORM!"
?	systrax	systrax.exe	"??"
X	Systray	Systray_.Exe	"Added by the KERGEZ.A WORM!"
X	Systray	[filename.exe]	"Winfavorites adware"
X	SYSTRAY	UNMT.EXE	"Added by the DLOADER-LQ TROJAN!"
X	SysTray	SysTray.Exe	"Added by the BANCBAN-JV TROJAN! Note - this is not the legitimate systray.exe process from Win9x/Me systems which would appear in the Name/Startup Item field as SystemTray in the registry ""Run"" keys and MSConfig. If you right-click on the real systray.exe the ""Properties"" reveal it to be a Microsoft file"
X	SysTray	Snnpapi.exe	Added by an unidentified TROJAN!
X	Systray	w32explorer.exe	"Added by the RBOT-AJY WORM!"
X	Systray	SteFanie.vbs	"Added by the STEFAN WORM! Note - make sure you check the hyperlink as this one copies it's self to numerous dirves and folders"
X	Systray	KAT.vbs	"Added by the SOAD-D WORM!"
X	SysTray	svhost.exe	"Added by the RAJILO-A WORM!"
X	SysTray	system.exe	"Added by the DELF.E TROJAN!"
X	systray	system234.exe	"Added by the AUTORUN.AEV WORM!"
U	systray	winlogin.exe	"KidControl surveillance software. Uninstall this software unless you put it there yourself"
U	systray	systray.exe	Dell Mobile Broadband wireless configuration utility - located in %ProgramFiles%\Dell\Dell Mobile Broadband
X	Systray driver	systray.exe	"Added by the MUTEBOT TROJAN! Note - this is not the legitimate systray.exe process"
X	SystrayServices	Msxpw.exe	"Added by the CITOR WORM!"
U	SYSTRAYX	SysTrayX.EXE	"""SystrayX helps you hide some of the less used icons from the system tray (the hidden icons can still be seen and used in the special SysTrayX menu but will no longer permanently take precious space from your system tray)"""
X	systree	systree.exe	"Added by the BANCOS.L TROJAN!"
X	Systry	[path to worm]	"Added by the AUTEX WORM!"
X	Systryt	[path to worm]	"Added by the AUTEX WORM!"
X	SystUphes	algesetp.exe	"Added by the QQPASS-AM TROJAN!"
U	Systweak Ad and Popup Blocker	adblock.exe	"Ad and popup blocker part of Advanced System Optimizer from Systweak"
U	Systweak Memory Optimizer	memtuneup.exe	"Part of SysTweak Advanced System Optimizer"
X	systwtray	twitty**.exe [** = random digits]	"Added by the KOOBFACE.C WORM!"
X	sysu	sysu.exe	"Dynamic Desktop Media adware - see here"
X	sysug32.exe	sysug32.exe	Added by an unidentified TROJAN or WORM!
X	SysUpd	Sysupd.exe	"VirtuMonde adware"
X	sysupdate	cmman32.exe	"Added by a variant of the SDBOT WORM!"
X	SysUtils	smss.exe	"Added by the AUTORUN-AWW WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile%"
X	Sysvupex	Sysvupex.exe	"Added by the MEDIAS TROJAN!"
X	sysvx	sysvx_.exe	"Added by the LOOSKY-BX TROJAN!"
U	SysW8	csta.exe	"Clean Space internet evidence eliminator"
U	SYSWB6	SYSWB6.exe	"Part of We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content
X	SysWin	SysWin.exe	"Added by the IRCCONTACT TROJAN!"
X	syswin	v6.exe	"Added by the AGENT-ECM TROJAN!"
X	syswin.txt	[3 random letters].exe	"Added by a variant of the SPYBOT WORM! See here"
X	syswin32	syswin32.exe	"Added by a variant of the SPYBOT WORM!"
X	Syswindow	Syswindow.exe	"Added by the COW TROJAN!"
X	SysWy	rundll32.exe	"Added by the LINEAGE-JH TROJAN! Note - this is not the legitimate rundll32.exe process
X	sysX3	sys22.exe	"Added by the RANTS.C WORM!"
X	sysygm32	syscxd32.exe	"Added by the IRCBOT-PC TROJAN!"
X	sysygm64	winrxd64.exe	"Added by the IRCBOT-RK TROJAN!"
X	SYS_CLEAN	Service.exe	"Added by the FLOPCOPY WORM!"
X	Sys_Run	ghost.exe	"Added by the LINEAGE-N TROJAN!"
X	sys_Runtt1	explorer.exe	"Added by the LINEAGE-M TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	sys_up1	svchostsys.exe	"Added by the MULTIDR-FL TROJAN!"
X	SyZ	f1.exe	"Added by the MSNDIABLO.A WORM!"
X	Syzmy3	exp1orer.exe	"Added by the LINEAG-AIO TROJAN! Note the number ""1"" in the filename"
X	SyztMy	expiorer.exe	"Added by the LINEAG-AIN TROJAN!"
U	SZMsgSvc.exe	SZMsgSvc.exe	"StopZilla! - pop-up killer"
X	t	xclean.exe	"FlashEnhancer adware"
U	T-Com WLAN Manager	TS154USB.exe	Wireless management utility for the T-Com Sinus 154 Data II WLAN adapter
N	T-DSL SpeedMgr	speedmgr.exe	T-Online ISP SpeedManager - shows upload and download speed. Also checks for updates automatically
X	T2W	Memoria.exe	"Added by the DROPPER.CYG TROJAN!"
U	T3Console	T3Console.exe	"Related to T3 Security Suite - prevents unauthorized or inappropriate access to your PC and data"
X	T4skM4n4g3r	Wink3sk9.exe	"Added by a variant of the IRCBOT TROJAN!"
U	Taakcontrole	taskmon.exe	"Task Monitor (on Dutch language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
X	Taba	stte.exe	"PurityScan adware"
N	Tablet	Tablet.exe	"Loads the tablet drivers for the Wacom Graphics Tablet. This can be unchecked in msconfig without problems if you don't need the tablet functional all the time. Create your own shortcut if you need to run it ad hoc. If you forget to run it before running Paint Shop Pro & Adobe Photo Shop) you may find the following: (1) Paint Shop Pro (version 7.04) - (a) Browse function will NOT work (program freezes) (b) On program exit
Y	tablet s	tablet s	Starts the Wacom Penabled driver on Acer Tablet PCs (tablet icon with a green check appears during startup if successful)
X	Tablet Task	tabletsk32.exe	"Added by the RBOT-AJB WORM!"
U	TabletTip	tabtip.exe	This is the Tablet PC Input Panel for Windows XP Tablet PC Edition. This utility allows you to use a pen (in conjunction with a touchscreen or tablet) to enter text into a document or input field (such as a URL in a browser) using either handwriting or the on-screen keyboard. This utility is also included with Windows 7 and Vista but only appears to run at startup if using the XP Tablet PC version. This cannot be confirmed at present
U	TabletWizard	SPLSHWRP.EXE	Microsoft Tablet PC Component
Y	TabUserW	TabUserW.exe	Wacom pen tablet driver
?	TAcelMgr	TAcelMgr.exe	"TOSHIBA Acceleration Utilities related. What does it do and is it required?"
N	Tad	tad.exe	From Turtle Beach's Santa Cruz on a Dell WinME system. Not required - works fine without it including keyboard hot controls for volume and mute
X	taengtae	AutoRun.bat	"Added by the GATINA-B WORM!"
X	Taesk managers	tase.pif	"Added by the RBOT-AYK TROJAN!"
X	taetae	Exit to DosPrompt.pif	"Added by the GATINA-B WORM!"
?	TAG	tag.exe	"??"
N	Tahni Deskmate	Tahni.exe	"Tahni Deskmate - "Interactive cartoon character that lives on your Windows desktop""
X	TakeMP3	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	TAKSMGN	taskmr.exe	"Added by the RBOT-AHS WORM!"
X	talk	talk.bat	"Added by the TIOTUA-G WORM!"
N	TalkingReminder	TALKINGREMINDER.EXE	"Talking Reminder from Software River Solutions - talking calendar reminder"
?	talknow	talknow.exe	"Could it be related to this or something similar?"
U	TalkTalk	sprtcmd.exe /P TalkTalk	"Self-help support tool for TalkTalk Broadband users (provided by SupportSoft
U	TallyGenicom PanelMgr	SSMMgr.exe	"Monitors ink levels
?	Tango	Setup.exe	"Tango Broadband access software. Is it required?"
?	TangoManager	TangoManager.exe	"Tango Broadband access software. Is it required?"
X	TANG_INA_MO	AutoRun.bat	"Added by the FILUKIN.A WORM!"
X	Tapicfg	Tapicfg.exe	"CoolWebSearch Tapicfg parasite variant"
X	Tapicfg.exe	tapicfg.exe	"Malware installed by different rogue security software including SpyKillerPro"
X	Tapisys	tss.exe	Added by the SMALL TROJAN!
U	TapiTNA	TapiTNA.exe	"Telephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys"
U	Tarantula	razerhid.exe	"Razer Tarantula gaming keyboard driver - required if you use the additional features and programmed keys/macros"
U	Tardis	Tardis.exe	"Tardis - time synchronization software"
X	Tarefas do Windows	taskexec.exe	"Added by the AGENT-LSD TROJAN!"
X	Task	tasker.exe	"Added by the MYDOOM.R WORM!"
X	Task	LSASS.EXE	"Added by the PUNYA-A WORM! Note - this is not the legitimate lsass.exe process
X	Task Alert	cmosvc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Task Bar	TASKBAR.EXE	"Added by the FRETHEM.J WORM!"
?	Task BarClient	TaskBarClient.exe	"Responsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service"
?	Task BarSvr	TaskBarSvr.exe	"Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?"
U	Task Catcher	tasktrap.exe	"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
U	Task Catcher Monitor	tasktrap.exe	"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
U	Task Catcher Real-Time Detector	tasktrap.exe	"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
X	Task Commander	regsvc32.exe	"Added by the AGOBOT-RX WORM!"
U	Task Completion	AMCLIENT.EXE	"LANDesk® Management Suite software component"
X	Task Debugger	sysdll.exe	"Added by the RBOT-CQ WORM!"
X	Task Debugger	tskdbg.exe	"Added by the AGOBOT-KK WORM!"
X	Task Help	wualcts.exe	"Added by a variant of the RBOT WORM!"
X	Task Loader	{rdprM@Y_VO^	"Added by the AGOBOT.CB WORM!"
X	Task managebrkb	taskmg.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Task Manager	taskmngr.exe	"Added by the RBOT.Y WORM!"
X	Task Manager	taskman.exe	"Added by the FORBOT-T WORM!"
X	Task Manager	prcview.exe	"Added by the AGOBOT-RT WORM!"
X	Task manager	taskemngr.exe	"Added by the RBOT-AGA WORM!"
X	Task manager	TikTo.exe	"Added by the RBOT.LV WORM!"
X	Task manager	taskmngr.exe	"Added by the RBOT-AYZ WORM!"
X	Task Manager	svchost.exe	"Added by the SOHANA-P WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!"
X	Task Manager	taskmng.exe	"Added by the TIOTUA-E WORM!"
X	Task Manager	svhost32.exe	"Added by the TERMX.A WORM!"
X	Task manager	taskmgr2.exe	"Added by a variant of the RBOT WORM!"
X	Task Manager	tskmngr.exe	"Added by the RBOT-GOU WORM!"
X	Task manager	UPDATEWIN.exe	"Added by the RBOT.BBS WORM!"
X	Task manager	taskmangr.exe	"Added by the SPYBOT-CH WORM!"
X	Task Manager Win32	taskmngr32.exe	"Added by the RANCK-EX BACKDOOR!"
X	Task Monitoring Service	svchost.exe	"Added by the CONE.D WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks"
X	Task Scheduler Engine	schedsvc32.exe	"Added by the RBOT-ASJ WORM!"
X	task service	taskservices.exe	"Added by a variant of the RBOT WORM!"
X	Task service	taskmgs.exe	"Added by a variant of the RBOT WORM!"
X	TASK SETUP	tasksetup.exe	"Added by the RBOT-YR WORM!"
N	Taskbar	Taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
N	TaskBar	CTLTask.exe	"Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects
Y	Taskbar Button Manager	tbm.exe	"Taskbar Button Manager from Innovative Solutions - ""is a simple utility that helps you arrange the buttons on your Windows taskbar in any way you want by using drag and drop"""
N	Taskbar Display Controls	"RunDLL deskcp16.dll	QUICKRES_RUNDLLENTRY"
X	Taskbar Service	taskbar.svc	Unidentified adware
Y	Taskbar Shuffle	taskbarshuffle.exe	"""Taskbar Shuffle is a simple
X	Taskbar System	tasksys.exe	"Added by a variant of the SDBOT WORM!"
N	Taskbar++	TaskbarPP.exe	"Taskbar++ is a software that allows you to sort (move) the buttons of the Windows taskbar by Drag & Drop"
Y	taskbarshuffle	taskbarshuffle.exe	"""Taskbar Shuffle is a simple
X	Taskbell.exe	Rund1.exe	"Added by the YIPID TROJAN!"
X	taskdir	taskdir.exe	"Added by the LAGER.AQ TROJAN!"
X	TaskList	tasklist32.exe	"Added by the BANCOS-DX TROJAN!"
X	TaskMan	Rundll32.exe	"Added by the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process
X	Taskman	KHATRA.exe	"Added by the AUTORUN-AKR WORM!"
X	taskman	taskman.exe	"Added by the SILLYFDC.BBB WORM!"
X	Taskman	sysdate.exe	"Added by the SILLYFDC.BCQ WORM!"
X	Taskman	sysdrv.exe	"Added by the AGENT-LRB TROJAN!"
X	Taskman	ufxw.exe	"Added by the VBINJ-D TROJAN!"
X	taskmanager	taskmgr.com	"Added by the BEREB WORM!"
X	taskmanager	taskmanager.exe	"Added by the AGOBOT-TF WORM!"
X	TaskManager	[path to trojan]	"Added by the LDPINCH-CF TROJAN!"
X	TaskManager Load Module	TSKMNGR32.EXE	"Added by the SPYBOT.I WORM!"
X	taskmanger	taskmanger.exe	"Added by a variant of the RBOT WORM!"
X	Taskmgo	[path to file]	"Added by the BANCBAN-T TROJAN!"
X	Taskmgr	Taskmgr.exe	"System1060 homepage hi-jacker. Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1060"" sub-folder"
X	Taskmgr	tskmgr32.exe	Homepage hi-jacker
X	taskmgr	taskmgr.exe	"Added by the STARTPAGE.G hijacker. Note - this is NOT the Windows Task Manager file!"
X	Taskmgr	system.exe	"Added by the PAKES.G TROJAN!"
X	taskmgr	explorer.exe	"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	taskmgr	[path to trojan]	"Added by the AGENT-ENV TROJAN!"
X	taskmgr	taskmanager.exe	"Added by the BCKDR-QHT BACKDOOR!"
X	TaskMgr	keymayker.exe	"Added by the LDPINCH-EP TROJAN!"
N	taskmgr.exe	taskmgr.exe	"Windows Task Manager in Windows XP. If run from the Startup folder
X	taskmgr.exe	paint.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmgr.exe	mirc.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmgr.exe	paintms.exe	Added by a variant of the AGENT.AH TROJAN!
X	TASKMGRU	TASKMGRU.EXE	"Added by the CWS-M TROJAN!"
X	taskmngr	[path] msnve.exe [path] task.exe	"Added by the FLOOD-EK TROJAN!"
X	taskmngr lptt01	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	taskmngr ml097e	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	TaskMon	taskmon.exe	"Added by the MYDOOM.A or MYDOOM.J WORMS! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system"
X	TaskMon	[path to trojan]	"Added by the DROPPER.EAT TROJAN!"
X	Taskmon driver	winampa.exe	"Added by the LOONY-I TROJAN! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a ""Winamp"" subdirectory of %ProgramFiles% whereas this file is located in %System%"
X	taskmone	taskmone.exe	"Added by the SINGU-S TROJAN!"
U	TaskMonitor	taskmon.exe	"The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
X	TaskMrg	csrss.exe	"Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	taskmrg	taskmrg.exe	"Added by the BANKER-BZZ TROJAN!"
X	taskmrg.exe	taskimg.exe	"Added by the DLOADER-QZ TROJAN!"
X	taskmrg.exe	[path to trojan]	"Added by the BANCBAN-BN TROJAN!"
X	taskmsgs	[path to trojan]	"Added by the BANCOS-BBW TROJAN!"
X	taskngr	taskngr.exe	"Added by the BANCOS-AWX TROJAN!"
X	taskopen.exe	taskopen.exe	Added by the HIDD.C TROJAN!
N	TaskPlus	TASKPLUS0.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
N	TaskPlus	TASKPL~1.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
X	TaskReg	[random filename]	"Added by the CBLAD WORM!"
X	TaskS manager	taskmgrs.exe	"Added by the AGOBOT.QU WORM!"
X	Taskschd	TRAYWND.EXE	"Added by the LITMUS.002 TROJAN!"
U	TaskScheduler	TaskSch.exe	"ProSeries accounting software related"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list