HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	VxD Driver Initialization	ntsvxd.exe	"Added by the SDBOT-LW WORM!"
U	VZAccess Manager	VZAccess Manager.exe	Verizon Access manager for enterprises
U	VZRemoteCommander	AvRmtCtr.exe	Related to Sony's VAIO Zone Remote Commander
X	w02db700.dll	[random filename]	"ZenoSearch adware"
X	W1N32.DLL	WINLOGON .exe	"Added by the DROPPERFL.A TROJAN!"
X	w32	w32.exe	"Added by the SOKEVEN TROJAN!"
X	W32.Formalin.Beta	Pocong.exe	"Added by the SILLYFDC WORM!"
X	W32.Scran	Scran.exe	"Added by the NARCS WORM!"
X	w32alanis	mope.scr	"Added by the SINALA WORM!"
X	W32data	eworo.exe	"Added by a variant of the RBOT WORM!"
X	W32Load	[random filename].scr	"Added by the CASPID WORM!"
X	W32PluginsDownloaderXMLHTTPSelfClearing7520	wiper.exe	"Added by the PROXYSER-M TROJAN!"
X	w32sup	w32sup.exe	Adult content dialler
X	W32SYS	w32sys.exe	"Added by the JAMBU-A WORM!"
X	W32Tc	WTC32.scr	"Added by the VOTE.D or VOTE.K WORMS!"
X	W3KNetwork	"rundll32.exe w3knet.dll	dllinitrun"
Y	W75P2PSERVER	W75P2PS.EXE	Printer utility which is required in order to make the printer work correctly
X	w7zip	w7zip.exe	"Added by the BANCBAN-QB TROJAN!"
U	W815DM	W815DM.exe	"Enuff Parental Control Software by Akrontech"
U	w98Eject	w98Eject.exe	"Related to USB support for Sigmatel MP3 audio palyer (and others such as SanDisk). It's intent is to ""put away"" the ""disk"" before you unplug it from the USB port
X	WA6PM_Check	udcwap.exe	"Part of the DriveCleaner rogue security software - not recommended
X	WA6PV_Check	udcwap.exe	"Part of the DriveCleaner rogue security software - not recommended
X	wa7pcw	wa7pcw.exe	"WinAntiVirus Pro 2007 rogue security software - not recommended"
X	wa7pcw	wa7pcw.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	wab.exe	wab.exe	"Added by a variant of the SDBOT WORM!"
U	wait4IP	wait4IP.exe	"Packard Bell net2Plug allows you to network PCs anywhere in your house"
U	wallchgr.exe wstart	Wallchgr.exe	"WallChanger - wallpaper changer from Blue Tree Software"
U	WallMaster	wallmast.exe	"WallMaster - ""The free and easiest way to master your desktop wallpaper!"""
X	WallPaper	taskimgr.exe	"Added by the BANKER-GX TROJAN!"
U	WallPaper	WALLPA~1.EXE	"Wallpaper Changer - wallpaper manager that can change your background images on every startup"
U	WallpaperChanger	Wallpaper.exe	"A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version is 30-day trialware
U	WallpaperSS	WallpaperSS.exe	"Wallpaper Slideshow LT from gPhotoShow.com - ""a great utility for displaying your favorite photos as your desktop wallpaper"""
N	Wanadoo Messenger.exe	Wanadoo Messenger.exe	Wanadoo ISP instant messenger client
X	wanman.exe	wanman.exe	Added by the RBOT.HDO WORM!
Y	WanMPSvc	WanMPSvc.exe	"An AOL component
X	WAPI	wts**.exe [* = random char]	"PurityScan adware"
N	War FTPD Tray Icon	wartray.exe	"War-ftpd - FTP server"
N	war-ftpd.exe	WAR-FTPD.EXE	"War FTP Daemon from JGAA's Internet - FTP client"
X	Wardo	syslaunch.exe	"Added by the ADCLICKER.G TROJAN!"
X	WareOut	WareOut.exe	"Wareout - malware masquerading as a spyware and dialer remover"
N	warez	warez.exe	"Warez P2P client"
X	Warga KompTi	KOMPTI.exe	"Added by the PITKOM-A TROJAN!"
U	Warner	warner.exe	Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
U	Warnet	warnet.exe	Warnet - system cleanup software
U	Warning: do not remove it!	fpplock.exe	"Part of Folder Password Expert by ZQS Software Team - ""a software program to restrict access to the folders that contain your sensitive data"""
Y	Warning: do not remove it! (system)	cfpsys.exe	"Folder Password Protect - a program that lets you set a password on folders of your choice"
N	WarReg_PopUp	WarReg_PopUp.exe	Acer warranty registration popup
N	WARSVR	war-ftpd.exe	""War FTP Daemon - the original free FTP server for windows"""
X	was6cw	was6cw.exe	"Part of the WinAntiSpyware 2006 rogue spyware remover - not recommended
X	was7cw	was7cw.exe	"Part of the WinAntiSpyware 2007 rogue spyware remover - not recommended"
U	WashAndGo - Cleanup of old Backupfiles	checker.exe	"WashAndGo - temp file cleaner"
U	Washer	washer.exe	"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
N	Washerie.exe	washerie.exe	"Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer
U	washindex	washidx.exe	"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
X	Wast	wast.exe	Grokster ads updater
X	was_check	PASmon.exe	"Part of the ErrorSafe rogue system error and cleaning utility - not recommended"
N	Watch	watch.exe	Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted
U	Watch	1200UBWATCH.EXE	Button press monitor for the Mustek 1200 UB Scanner
N	Watch Dog Program	watchdog.exe	For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do
N	Watchdog	Watchdog.exe	"Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others)
?	WatchDog	watchdog.exe	"Part of Motorola ""Mobile Phone Tools"" v3 - in a ""Mobiile Phone Tools"" sub-directory of Program Files"
?	WatchDog	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
U	WatcherHelper	WaHelper.exe	"Sierra Wireless Watcher™ - wireless configuration utility"
N	WatchWAN	WatchWAN.exe	"WatchWAN keeps an accurate account of the data that is flowing between your computer and the Internet at any given moment. This readout is presented in both numerical and graphical format
U	Watson Subscriber for SENS Network Notifications	dwtrig20.exe	"Used to launch Microsoft Error Reporting (DW20.exe) - if
X	waults	waults.exe	"Added by the BIFROSE.L BACKDOOR!"
X	waumgr	waumgr.exe	"Added by a variant of the IRCBOT TROJAN!"
Y	WaveFramer	WaveFramer.exe	"Part of SafeSpace (from Artificial Dynamics) which ""protects computers from Internet malware infection without the need for signature updates or regular maintenance"""
N	WaveTop Launcher	WaveTop.exe	"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
N	WaveTop Receiver 1	N/A	"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
N	WaveTop Receiver 2	N/A	"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
N	WaveTop Upload Manager	N/A	"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
Y	WavXMgr	WavXDocMgr.exe	"Part of Wave Systems Corp. Embassy Trust Suite. ""Document Manager uses the hardware security provided by the TPM to provide strong protection for data. Files encrypted by Document Manager cannot be located or viewed by others"""
U	WAWifiMessage	WiFiMsg.exe	"""HP Wireless Assistant is a user application that provides a method for controlling the enablement of individual wireless devices (such as Bluetooth or WLAN devices) and that shows the state of the radios for these wireless devices"""
X	Wbcmgr	wbcmgr.exe	"Added by the SLENFBOT.AW WORM!"
?	wben	wben.exe	"Appears to be related to Desktop Notifier from Starfield Technologies. What does it do and is it required?"
N	Wbiff	Wbiff.exe	"Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received"
X	wblogon	ubpr01.exe	"Added by the AGENT-HFI TROJAN!"
X	wblogon	algg.exe	"Added by the AGENT.AGGI TROJAN!"
U	Wbutton	Wbutton.exe	Turns on and off the integrated WiFi on Acer (and other laptops)
U	WCESCOMM	WCESCOMM.EXE	"Connection manager for Microsoft ActiveSync - mobile device synchronization software for Windows XP (and earlier)
X	WCESMngr	spoolsb.exe	"Added by the AGOBOT-QZ WORM!"
X	WCESMngr	WCEMNGR.EXE	"Added by the AGOBOT-QX WORM!"
X	WCheckUp	WCheckUp.exe	"Barok keylogger and password stealer"
U	wcmdmgr	wcmdmgrl.exe	"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
N	wcmdmgr.exe	wcmdmgr.exe	"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
U	wcmdmgrl	wcmdmgrl.exe	"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
U	WCOLOREAL	coloreal.exe	"Makes colours sharper and brighter
X	WCPC	wintsvcc.exe	"PurityScan adware"
X	WCPI	wintsvit.exe	"PurityScan adware"
X	WCPS	Wint**.exe [* = random char]	"PurityScan adware"
X	WCPT	wintsvtr.exe	"PurityScan adware"
X	wcsys	wcsys.exe	"Added by the KEYLOG-AP TROJAN!"
U	WD Backup Monitor	uBBMonitor.exe	"WD Backup - customized version of ArcSoft's TotalMedia Backup for Western Digital external drives (see here)"
U	WD Button Manager	WDBtnMgr.exe	Button manager installed with a western digital external disk drive. Allows you to back up your system with one click
U	WD Drive Manager	WDBtnMgrUI.exe	"System Tray access to the WD Drive Manager management software for selected external drives in the My Book and My Passport range. Hovering over the icon displays health status (temperature
U	WD Spindown Utility	ExSpinDn.exe	"Spindown utility ""for use with all Western Digital external hard drives except for the Media Center and the Dual-option Backup drives. It is designed to give greater user control over the spindown of the external drive"""
U	WDDMStatus	WDDMStatus.exe	"WD Drive Manager - part of Western Digital's WD SmartWare management software for selected external drives in the My Book and My Passport range. Allows the user see the drive status
X	wdfmgr32.exe	wdfmgr32.exe	"Added by the DWNLDR-FVL TROJAN!"
X	WDInfo	wdinfo.exe	"Added by the DLUCA.B TROJAN!"
X	wdmon	wdmon.exe	Detected as the BUZUS.DVE TROJAN!
X	WDNS SYSTEM	nibie.exe	"Added by the MYTOB-BY WORM!"
X	WDNS SYSTEM	skybotx.exe	"Added by the MYTOB-BY WORM!"
X	WDNS SYSTEM	wdns33.exe	"Added by the MYTOB-BY WORM!"
X	wdskctl	wdskctl.exe	IEPlugin spyware
U	WDSmartWare	WDSmartWare.exe	"Western Digital's WD SmartWare management software for selected external drives in the My Book and My Passport range"
X	wdwctrl	wdwctrl.exe	"Added by the DLUCA.E TROJAN!"
U	WD_SRT	WD_SRT.EXE	"Western Digital USB disk driver"
N	WEATHER	WEATHER.EXE	"Weatherbug provides current outdoor temperature in the System Tray
U	Weather Pulse	weatherpulse.exe	"Weather Pulse from Tropic Designs. ""Display popular Satellite images and video from around the globe
N	WeatherCast	Weather.exe	Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
N	WeatherEye	WeatherEye.exe	"WeatherEye - desktop weather from TheWeatherNetwork"
X	WeatherOnTray	WeatherOnTray.exe	"Hotbar adware"
X	WeatherOnTray	SbWeatherOnTray.exe	"Hotbar adware"
N	Weatherscope	Weatherscope.exe	"WeatherScope - ""displays your current local temperature in the system tray of your computer (near the clock) whenever you are online!"" Not recommended as it bundles GAIN adware. You can get the adware free version for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	WeatherStudio Desktop	WeatherStudio Desktop.exe	"WeatherStudio adware"
N	WeatherWatcher	ww.exe	"WeatherWatcher - weather reporting in the System Tray"
X	web	******.exe [* = random char]	"Added by a variant of the EASTO.A TROJAN!"
X	WEB DRIVERS FOR WIN32	phqgh.exe	"Added by a variant of the RBOT WORM!"
X	Web Offer	ezPopStub.exe	"eZula TopText adware"
X	Web Offer	ezStub.exe	"eZula TopText adware"
X	Web Offer	EZSTUB22.EXE	"eZula TopText adware"
X	Web Offer	vl_ezstub.exe	"eZula TopText adware"
?	Web Search	??	"??"
X	Web Service	[random filename].exe	"Added by the ADMINCASH TROJAN!"
X	Web Service	sm.exe	"Added by the BUBE-F VIRUS!"
X	Web Service	MSXMIDI.EXE	"CoolWebSearch parasite variant
X	Web-cameinst	[path to trojan]	"Added by the RANCK-BP TROJAN!"
U	Web2Pop	Web2Pop.exe	"Web2Pop allows you to retrieve your web-based accounts messages to read them in your favorite e-mail client"
Y	web3trap	web3trap.exe	"PC-Cillin 2000 anti-virus software → ActiveX filter. Guards against malicious ActiveX programs
X	webalize	webalize.exe	"Searchcentrix hijacker"
N	WebArmyKnife	WAK.exe	"Web Army Knife - a suite of web site developer's tools"
X	webassist	webassist.exe	Adware popup generator
X	WebBuying	webbuying.exe	"WebBuying adware"
N	WebCallDirect	WebCallDirect.exe	"WebCallDirect - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
X	webcam	webcam.exe	"Added by the MONAD-A TROJAN! Note - this malware actually changes the default value data of the Registry Run and RunServices keys in order to force Windows to launch it at boot. Name field may be empty"
?	Webcam Go Sti Service Application	wbcgosvc.exe	"Control software for the portable Creative Webcam Go digital camera/PC web cam. What does it do and is it required?"
N	WebcamRT.exe	WEBCAMRT.exe	For Logitech Web Cams. Not required - camera works fine without it
X	Webcelerator	webcel.exe	"Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here"
X	WebCheck	WebCheck.pif	"Added by the CONE.C or CONE.F WORMS!"
X	WebCpr0	WebCpr0.exe	"WebRebates adware"
X	Webdav.exe	webdav.exe	IRC DDoS bot which gives the hacker full control over your system
N	WebDrive	webdrive.exe	"System Tray access to WebDrive from South River Technologies
N	WebDriveTray	webdrive.exe	"System Tray access to WebDrive from South River Technologies
U	WebExRemoteAccessAgent	raagtapp.exe	"Related to Web Meetings from WebEx Communications
X	WebHancer Agent	whagent.exe	"System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here"
X	webHancer Survey Companion	whSurvey.exe	"WebHancertrackware - traffic measurement service that uses a client agent that is stealth installed on user machines
X	WebInstall	WebInstall.exe	ClipGenie adware downloader
X	WebInstall2	WebInstall.exe	ClipGenie adware downloader
N	WebKey	WebKey.exe	"WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet"
N	WebLink	WebLink.exe	"Softex is a ""cost-effective way to provide software updates
X	weboqacuc	firitirol.exe	"Added by the SDBOT-UC WORM!"
N	WebOutfitterTray	sttray.exe	Intel WebOutfitter service System Tray icon
N	Webposition Gold 2	wpsche~1.exe	"Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines"
X	WebRebates0	WebRebates0.exe	"WebRebates adware"
Y	Webroot Desktop Firewall	WDF.exe	"Webroot Desktop Firewall"
X	WebRun	[random filename]	"Added by the ADWARELOADER TROJAN!"
U	websaverlive	websaverlive.exe	"WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle"
X	WebSavingsfromEbates	WebSavingsfromEbatesrun.exe	"Web Savings From Ebates Software
X	WebSavingsFromEbates0	WebSavingsFromEbates0.exe	"Web Savings From Ebates Software
U	WebScan	DEFSCANGUI.EXE	"eAcceleration Stop-Sign security software related. Previously not recommended
U	webscan	stopsignav.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
Y	WebScanX	WebScanX.exe	"From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs
X	websearch	wjview ...websearch.exe	"""Web Savings"" From Ebates Software
N	WebSecureAlert	WebSecureAlert.exe	"WebSecureAlert - ""helps to protect your browser security by monitoring for unauthorized tampering with Internet Explorer's security settings
?	WebServer	VBI_SE~1.EXE	"Related to a Pinnacle sound card. What does it do and is it needed?"
U	Webshots	Webshots Tray.exe	"Webshots - software that displays photos as your screensaver and wallpaper
U	Webshots	websho~1.exe	"Webshots - software that displays photos as your screensaver and wallpaper
U	Webshots	Launcher.exe	"Webshots - software that displays photos as your screensaver and wallpaper
U	Webshots	WebshotsTray.exe	"Webshots - software that displays photos as your screensaver and wallpaper
X	Website Administrator Info	webadmin.exe	"Added by the FORBOT-FY WORM!"
X	WebSpecials	rundll32 [path] webspec.dll	"WebSpecials spyware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	WebSpyShield	WebSpyShield.exe	"WebSpyShield rogue security software - not recommended"
X	WebSUpdater	wupda.exe	"Added by the STARTPAGE.C TROJAN!"
X	Websx	Int*****.exe	Adult content dialler - where ***** are random
Y	WebTrap.exe	WebTrap.exe	"Part of Trend Micro web-security products - PC-cillin 2000 and Virus Buster 2001. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating"
Y	WebTrapNT.exe	WebTrapNT.exe	Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating
U	WebWasher	wwasher.exe	"Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs"
X	WegVonViren	pgs.exe	"WegVonViren
X	WeirdOnTheWeb	WeirdOnTheWeb.exe	"WeirdOnTheWeb adware"
N	Welcome	Welcome.exe	Launches the Welcome to Windows tutorial on boot up
X	Welcome	winconfig.exe	"Added by the GIP.113.B1 TROJAN!"
X	Welcome	CONFIG.EXE	"Added by the PSWGIP.B TROJAN!"
?	WEPstat	Wepstat.exe	"Cisco Aironet 340 Series PC Card driver. If it can be started manually it shouldn't be required if you don't use the PC card facility regularily - hence the status could be ""U"". Can anybody confirm this?"
X	wersds	doriot.exe	"Added by the JECT.C TROJAN!"
X	wersds.exe	doriot.exe	"Added by the BAGLEDI-A TROJAN!"
X	wescmv	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	wesumu	wiustv.exe	"Added by the QQPASS-L TROJAN!"
N	WetSock	wetsock.exe	"RoboMagic Wetsock - weather reporting in the System Tray"
N	wextract_cleanup0	"advpack.dll	DelNodeRunDLL32 [path] [filename].TMP"
U	WF2K	WF2K.EXE	System Tray application that starts up the Winfox utility for a Leadtek Winfast graphics card to restore settings. Can be started manually via Start → Control Panel → Display. Only needed if you wish to run things like the hardware monitor or overclock your card
N	WFGStartup	WFGStartup.exe	"
U	wfips	iphider.exe	"ICQ (messaging/chat program) anti-bomb software. ""WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed."" For more information about ICQ bombs see here"
N	WFXCTL32.EXE	WFXCTL32.EXE	From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y	wfxsnt40	wfxsnt40.exe	WinFax 10.0 and maybe earlier versions. Used to initiate the WinFax port to enable printing to the WinFax printer (send a fax) from any application
?	WFXSwtch	WFXSWTCH.exe	"Related to WinFax. What does it do and is it required?"
U	WG111v2 Smart Wizard Wireless Setting	RtlWake.exe	"Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
Y	WG511WLU	WG511WLU.exe	Netgear configuration programme for the 54g wireless lan card - required to monitor and manage the lan card
X	wgeax	wgeax.exe	"Added by the IRCBOT-TM WORM!"
X	wgs3	wgs3.exe	"Added by the LEGMIR-AQH TROJAN!"
X	WGV	WGV.exe	"Added by the ZIPPIE TROJAN!"
U	WGWLocalManager	WGWLocalManager.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
Y	WgwMngr	WgwMngr.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
X	whagent	whagent.exe	"System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here"
X	what ever	decom.exe	"Added by the RBOT-SC WORM!"
X	What Frenz	FriendEQUALsuX.exe	"Added by the BHARAT.A WORM!"
U	WhatPulse	WHATPU~1.EXE	"WhatPulse keeps track of your keystrokes
U	WhatPulse	WhatPulse.exe	"WhatPulse collects statistics on how much you type on your computer and sends this information to a server. It is not a keylogger which monitors your keystrokes and what you type - it only counts the number of keystrokes"
U	WheelMouse	4DMAIN.EXE	"Mouse software for ""Fellowes"" Wheelman mouse. Has caused some users problems but shouldn't be needed if you don't use any enhanced features it may provide"
U	WheelMouse	AMOUMAIN.EXE	"A4Tech wireless mouse driver and utility - required if you use non-standard Windows driver features"
X	WheelsMouse	[path to trojan]	"Added by the SOCKSPR-D TROJAN!"
X	WhenUSave	Save.exe	"WhenU.Save adware"
X	WhenUSearch	Search.exe	"WhenU.Save adware"
X	WhenUSearchWHSE	whse.exe	"WhenU.Save adware"
X	Whistler	whismng.exe	"Added by the WHISTLER-F TROJAN!"
X	Whitechix	brightx.exe	"Added by a variant of the SDBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list