HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
U	BlueSoleil	BLUESO~1.EXE	"BlueSoleil Bluetooth wireless manager from IVT Corporation"
U	BlueSpace NE	BlueSpaceNE.exe	"""BlueSpace NE is a utility program used to run the Bluetooth function on VAIO computers that support the Bluetooth function or on VAIO computers connected to the Bluetooth USB adapter"". Shortcut available via Start -> Programs"
X	Bluetooth Config	btwindin32.exe	"Added by the SDBOT-DFN WORM!"
U	Bluetooth Connection Assistant	LBTWiz.exe	"Bluetooth connection manager for Logitech based bluetooth wireless products"
?	Bluetooth HCI Monitor	"RunDll32 HCIMNTR.DLL	RunCheckHCIMode"
U	BluetoothAuthenticationAgent	"rundll32.exe irprops.cpl
U	BluetoothAuthenticationAgent	"rundll32.exe bthprops.cpl
U	blueyonder Instant Support Tool	matcli.exe	"Blueyonder Instant Support Tool. ""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
X	bm	bm.exe	"Part of the AVSystemCare rogue security software and other members of this family. See here for more examples"
N	BMail Installation	FTP_back.exe	"Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not"
X	Bman	BMan1.exe	Abcsearch.com/DealHelper adware variant
U	BMMGAG	"RunDll32 [path] pwrmonit.dll	StartPwrMonitor"
N	BMMLREF	BMMLREF.EXE	"Part of the Battery MaxiMiser and Power Management Features set for some IBM/Lenovo Thinkpad notebooks. The purpose of this entry is unknown at present. It doesn't normally appear to be running if left enabled at startup and it doesn't run if the Battery MaxiMiser Wizard is open - hence the ""N"" status"
N	BMMLREF.EXE	BMMLREF.EXE	"Part of the Battery MaxiMiser and Power Management Features set for some IBM/Lenovo Thinkpad notebooks. The purpose of this entry is unknown at present. It doesn't normally appear to be running if left enabled at startup and it doesn't run if the Battery MaxiMiser Wizard is open - hence the ""N"" status"
U	BMMMONWND	"rundll32.exe [path] BatInfEx.dll	BMMAutonomicMonitor"
X	BMN	bm.exe	"Part of VirtualPCGuard
X	BMN	strpmon.exe	"Part of CleanPCTool
X	BMN	dcmon.exe	"SystemDoctor rogue security software - not recommended
U	BMO MasterCard Wallet	EWALLET.EXE	"The wallet conveniently stores billing
X	Bmonq	bmonq.exe	"Added by the CLICKER.HZ TROJAN!"
N	BMupdate	BMupdate.exe	"Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example
X	bmw	bmw.exe	"Added by the AGOBOT.BBV BACKDOOR!"
X	bmz	bmz.exe	"180Search adware"
X	Bndt32	Bndt32.exe	"Added by the LACON WORM!"
X	Bnexe	[random filename]	"Added by the KITRO.D (or ARGEN.A) WORM!"
U	BO1HelperStartUp	BO1HEL~1.EXE	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	BO1HelperStartUp	Bo1helper.exe	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	Boarddata	[path] repcale.exe [path] palsp.exe	"Added by a variant of the RANDON.AN WORM! Both files are often located in %System%"
X	boat32	boat32.exe	"Added by a variant of the RBOT WORM!"
X	boby	csrs.scr	"Added by the BANCBAN-PC TROJAN!"
X	boby	netburn.scr	"Added by the BANCBAN-OX TROJAN!"
X	boby.	Isass.scr	"Added by the BANCBAN-OH TROJAN!"
Y	BOC-412	BOC412.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.12"
Y	BOC-420	BOC420.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.20"
Y	BOC-421	BOC421.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.21"
Y	BOC-422	BOC422.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.22"
Y	BOC-423	BOC423.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.23"
Y	BOC-424	BOC424.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.24"
Y	BOC-425	BOC425.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.25"
Y	BOC-426	BOC426.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.26"
Y	BOC-427	BOC427.exe	"Comodo BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.27"
Y	BOCleanautostart	Boclean.exe	"NSClean's BOClean anti-trojan software"
U	BOINC Manager	boincmgr.exe	"BOINC manager - ""controls the use of your computer's disk
U	Boingo Wireless Utility	Icon###XXX#X#.exe	"Starts the Boingo Wireless utility
X	bolenja	bolenja.exe	"Added by the WANTVI.BF TROJAN!"
X	bolenjx	bolenjx.exe	"Added by the ELDYCOW.O TROJAN!"
X	boler.exe	syser.exe	"Added by the RBOT-AYS WORM!"
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	"Bonzi Buddy adware - see here for removal instructions"
X	BONZI Task Switcher	Taskswitch.exe	"Added by the SPYBOT.DTR WORM!"
X	boo	boo.exe	"Adware downloader - detected by Kaspersky as the FAVADD.O TROJAN!"
X	BookedSpace	"RunDLL32.EXE bs2.dll	DllRun"
U	Bookmark	bookmark.exe	"System Tray access to Power Favorites by Desksware - which ""is a bookmark manager for Windows that helps you organize and synchronize your bookmarks. It takes bookmarks from Internet Explorer
U	Bookmark.exe	bookmark.exe	"System Tray access to Power Favorites by Desksware - which ""is a bookmark manager for Windows that helps you organize and synchronize your bookmarks. It takes bookmarks from Internet Explorer
N	BookmarkCentral	BMLauncher.exe	"Bookmark Express - "offers a more flexible way to manage Web site bookmarks
N	BookMarkSink	syncit.exe	Bookmark synchronization utility
N	BookMarkSync	syncit.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks
N	BookMarkSync2It	sync2it.exe	"Sync2IT BookMarkSync - ""real-time automatic synchronization service that allows you to access your bookmarks
U	Boost XP Service	bxservice.exe	"Boost XP from Systweak - WinXP tweaking utility"
U	BoostSpeed	boostspeed.exe	"System Tray access to Auslogics BoostSpeed 4 system optimization utility - which ""Start programs faster. Speed up computer start time. Increase Internet speed
X	boot	boot.exe	"Added by the PUPPET-A TROJAN! Located in the %System%"
U	Boot	Boot.exe	"Part of Acer Empowering Technology. ""Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles
X	Boot Check	bootchk.exe	"Added by the DELBOT-AB WORM!"
X	Boot Client	bootcli.exe	"Added by the IRCBOT-ACF BACKDOOR!"
X	Boot Config	bootconfig.exe	"Added by the FLOOD-EV TROJAN!"
X	Boot K	bootk.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Manager	Njgal.exe	"Added by the KILO TROJAN!"
X	Boot Manager	bootmng.exe	"Added by a variant of the SPYBOT WORM!"
X	Boot Server	bootserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Service	bootservice.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Service	bootsv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Boot Verify	bootvfy.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	BootCfg	Install.log.vbs	"Added by the YPSAN.D WORM!"
X	BootClean	smartdrv.exe	"Added by the LURKA-A VIRUS!"
X	BootCTRL	bootctrl.exe	Added by an unidentified WORM or TROJAN!
X	BootLoader	BootLoader.exe.vbs	"Added by the WATERWORKS WORM!"
X	bootpd.exe	bootpd.exe	"Added by the AGENT-DT TROJAN!"
?	Boots Insert Detect	InsDetect.exe	"Part of Boots Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?"
X	BootsCfg	wscript.exe [path] Date.POP.vbs	"Added by the KUULLIO WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	BootsCfg	wscript.exe [path] All Users.vbs	"Added by the SPILTRON WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	BootsCfg	wscript.exe [path] All Users.vbe	"Added by the SPILTRON WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	BootsCfg	wscript.exe Install.log.vbs	"Added by the YPSAN.E WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""Install.log.vbs"" file is located in %System%"
X	bootsec	NAVSSE.exe	"Added by the FORBOT-CY WORM!"
Y	BootSkin Startup Jobs	BootSkin.exe	"Stardock BootSkin is a program that allows users to change their Windows 2000 and Windows XP boot screens"
U	BootStatus	BOOTST~1.EXE	"Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it
U	BootWarn	BootWarn.exe	"From here: ""Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus
X	boot_reg	[path to file]	"Added by the BANCBAN-CA TROJAN!"
X	boot_reg	svchot.exe	"Added by the BANCBAN-BQ TROJAN!"
X	BortMedVirus	pgs.exe	"BortMedVirus rogue security software - not recommended. A member of the AVSystemCare family"
U	borzoi	blg.exe	"Borzoi surveillance software. Uninstall this software unless you put it there yourself"
N	Bose Wave/PC Monitor	wavepcmonitor.exe	"System Tray access for this system (more info on the system here). Available via Start -> Programs"
X	BossIdea	winlogin.exe	"Added by the LINEAGE-I TROJAN!"
?	Boston	Boston.exe	"Part of the Boston Acoustics USB speaker systems. What does it do and is it required?"
X	Bot Loader	svchostt.exe	"Added by the GAOBOT.ALV WORM!"
X	Bouncer RunStartup	bouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	Bouncer RunStartup	LiveUpdate.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	boy lovers of bsd	ilikeboys.exe	"Added by the MYTOB.LY WORM!"
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	BPCV2	BPCV2.exe	"BroadcastPC adware"
X	BPCv2 re	bpc2 re inst.exe	"BroadcastPC adware variant"
U	BPK	bpk.exe	"Blazing Tools Perfect Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
N	BPServer	G6FTPSrv.exe	"BulletProof FTP Server"
U	BQTray.exe	BQTray.exe	"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility
X	Brasil	Brasil.exe	"Added by the OPASERV.E WORM!"
X	Brasil	BRASIL.PIF	"Added by the OPASERV.E WORM!"
X	BrasilOld	[worm filename]	"Added by the OPASERV.P WORM!"
X	brastk	brastk.exe	"Added by the DORF-BV TROJAN!"
X	Brave-Sentry	BraveSentry.exe	"BraveSentry rogue security software - not recommended
X	BraveSentry	BraveSentry.exe	"BraveSentry rogue security software - not recommended
X	braviax	braviax.exe	"Added by the FAKEALER.LE TROJAN!"
X	Brct	trdb.exe	"Detected by Kaspersky as the PURITYSCAN.Y TROJAN!"
U	Break_Reminder	BREAK REMINDER.exe	"Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here"
Y	Bredbandsbolaget	servicecenter.exe	"Related to the Brebband Swedish Broadband provider"
X	Breg	bcre.exe	"BroadcastPC adware variant"
X	Breg	bptre.exe	"BroadcastPC adware variant"
X	Breg	breg.exe	"BroadcastPC adware"
X	Bridge	"rundll32.exe [path] Bridge.dll	Load"
Y	Brindys BriTray	BRITRAY.EXE	"Main process for the following applications: GEDEX
U	BrmfRmPA	BrmfRmPA.exe	Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate
U	broadband medic	matcli.exe	"NTL's Broadband Medic. ""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
N	Broadband Wizard	bbwiz.exe	"Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs"
N	BroadCamRun	broadCam.exe	"BroadCam is an easy to use video streamer designed to broadcast live video using a webcam (or other camera) and microphone"
U	Broadcom Wireless Manager UI	bcmntray.exe	"Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems"
N	Broadcom Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
X	Bron-Spizaetus	CVT.exe	"Added by the RONTOKBRO WORM!"
X	Bron-Spizaetus	norBtok.exe	"Added by the RONTOKBRO.B WORM!"
X	Bron-Spizaetus	[path to file]	"Added by the BRONTOK-F WORM!"
X	Bron-Spizaetus	bronstab.exe	"Added by the RONTOKBRO.C WORM!"
X	Bron-Spizaetus	eksplorasi.exe	"Added by the RONTOKBRO.J WORM!"
X	Bron-Spizaetus	ElnorB.exe	"Added by the RONTOKBRO.D WORM!"
X	Bron-Spizaetus	sempalong.exe	"Added by the BRONTOK-E WORM!"
X	Bron-Spizaetus	RakyatKelaparan.exe	"Added by the BRONTOK-J or BRONTOK-L WORMS!"
X	Bron-Spizaetus-5118REPM	komodo-6321422.exe	"Added by the BRONTOK-R WORM!"
X	Bron-Spizaetus-cfgmktoq	bbm-qotkmgfc.exe	"Added by the BRONTOK-M WORM!"
X	Bron-Spizaetus-cfgmmnru	bbm-urnmmgfc.exe	"Added by the BRONTOK-N WORM!"
X	BRoNToK	BRoNToK.exe	"Added by the BRONTOK-CG WORM!"
X	BrowseProxy	FindService.exe	"Actual Names (AdvSearch) Internet Keywords parasite"
X	browser	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	browse.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	browser aid	browseraid.exe	"BrowserAid/BrowserPal foistware"
X	Browser Help Svc	BHSV.EXE	"Added by the RBOT-AVQ WORM!"
Y	Browser Hijack Blaster	bhblaster.exe	"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	"BrowserAid/BrowserPal foistware"
U	Browser Sentinel	BrowserSentinel.exe	"Browser Sentinel - notifies you if a program wants to penetrate into Internet explorer
X	BrowserUpdateSched	[random filename]	"ZenoSearch adware"
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
X	BrO_AcT	BrO-AcT.exe	"Added by the SILLYFDC-D WORM!"
X	brwdiag	[path to worm]	"Added by the STRATIO-BN WORM!"
X	BS Mediaplayer	bsplyr.exe	"Added by the RBOT-OU WORM!"
N	BS Player	bsplayer.exe	"BSplayer - A video player used to play avi
N	BsCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
?	BsMnt	BsMnt.exe	"Related to a Bison webcam - which is used on notebooks from a number of manufacturers including Acer
X	Bsoft lppt01	Bsoft.exe	"RapidBlaster variant (in a ""BelmontSoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	bsplayer	bsplayer.exe	"BSplayer - a video player used to play avi
X	BsRte	MemoteXZZ.exe	"Added by the AUTORUN-AJU WORM!"
X	BSserver	FileKan.exe	"Added by the VB.CBW WORM!"
X	BSVCHOST	SVCH0ST.EXE	"Added by the VOXOM TROJAN! Notice the digit ""0"" in the filename rather than the upper case ""o"""
X	Bsx3	"RunDLL32.EXE bs3.dll	DllRun"
X	BT	[path to trojan]	"Added by the LITEBOT-B TROJAN!"
U	BT Broadband Basic Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
U	BT Broadband Desktop Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
U	BT Broadband Help	matcli.exe	"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
X	BT00003*	abcdefg23.exe	"Added by the VB-VT TROJAN where * = 5
X	BT00003*	hiklmnop27.exe	"Added by the VB-VT TROJAN where * = 2
U	btbb_wcm_McciTrayApp	McciTrayApp.exe	"System tray access to Motive's Broadband 2.0 configuration and repair utility"
U	BtcMaestro	KMaestro.exe	Multimedia keyboard manager. Required if you use the multimedia keys
N	btdna	btdna.exe	"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
N	btdna.exe	btdna.exe	"""BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files"". Now a stand-alone product where the user creates the download
?	btinst	btinst.exe	"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
U	BTModemProtection	BTModemProtection.exe	"BT Privacy Online modem protection software
X	btmsre.exe	btmsre.exe	"Added by the SDBOT.AM WORM!"
U	BTopenworld	DialBTYahoo.exe	BT Yahoo! internet connection manager
?	BTSETBOOTKEY	BTSetBootKey.exe	"Related to a USB Bluetooth adaptor. What does it do and is it required?"
U	BtStart	btstart.exe	"Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software"
U	BTTray	BTTray.exe	"System tray icon which shows the status of a Bluetooth wireless module (either integrated or via an adapter). Most systems with such a module installed can enable/disable the module and the icon changes from blue/white to blue/red when the module is turned off. Also allows access to explore bluetooth places
Y	BTUSRBDG	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
Y	BTUSRBDGF	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
X	BTV	btv.exe	"BroadcastPC adware"
X	BtvC	btvclean.exe	"BroadcastPC adware"
Y	Bubble	Bubble.exe	"Part of Windows SteadyState
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
N	BudgetSip	BudgetSip.exe	"BudgetSip - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
U	BUFFALO Power Save Utility for HD	HDManage.exe	"Power Save utility for Buffalo backup hard discs"
Y	BufferZone	CLIENTGUI.EXE	"BufferZone from Trustware - ""is the only security software that creates a separate environment allowing you unlimited freedom to enjoy all Internet activities without the fear of external threats"""
N	Bug Eliminator	Bug_Elim.exe	"Bug Eliminator - ""performs a complete health check on your computer safely
X	BugsDestroyer	SysRep.exe	"BugsDestroyer rogue system error and cleaning utility - not recommended
U	bugwatcher service	bugwatcher.exe	"
N	BuildBU	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BuildLab	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	BuildLab	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
X	BuildLabs	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
X	BuildLabs	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
X	bulk	bulk.exe	"Added by the AGOBOT-ACR WORM!"
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
N	BulletProof FTP Server	bpftpserver.exe	"BulletProof FTP Server"
Y	BullGuard	mgui.exe	"Part of Bullguard antivirus"
Y	BullGuard	BullGuard.exe	"Part of BullGuard antivirus"
U	BullGuard Update	avxlive.exe	"Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions"
Y	BullGuard XComm	XCOMMSVR.EXE	"Part of Bullguard antivirus"
Y	BullGuardInit	AVXINIT.EXE	"Part of Bullguard antivirus"
Y	BullguardoptIn	bulldownload.exe	"Part of Bullguard antivirus"
X	BullsEye	bargains.exe	"BargainBuddy adware"
X	BullsEye Network	bargains.exe	"BargainBuddy adware"
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
X	Bunx	beagle.exe	"Added by the LEBREAT-E WORM!"
X	buohxqtfswb	gcjydr.exe	"Added by the AGENT-NRC TROJAN!"
X	buritos	buritos.exe	Identified as a variant of the Downloader.FraudLoad.C malware
N	BurnQuick Queue	BQTray.exe	"System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility
U	Button Server	bttnserv.exe	"Found on a Compaq PC
N	ButtonKey	ButtonKey.exe	"CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut"
N	Buzme	Bmui.exe	"Buzme by RingCentral
U	BuzMe	RCUI.exe	"Display Client for the BuzMe Internet Call Waiting Service"
U	Buzof.exe	buzof.exe	"Buzof from Basta Computing "enables you to automatically answer

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list