1.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	0050726-007-i32-1	0050726-007-i32-1.exe	"Added by the BANCBAN-EC TROJAN!"
X	1	1.exe	"Added by the ESTEEMS TROJAN!"
X	1916435341.exe	1916435341.exe	"Added by the DLOADR-AXU TROJAN!"
X	1on1	1on1.exe	Adult content dialler
X	55278	grepclient1.exe	"Added by the LINEAGE-S TROJAN!"
X	5whgue21	5whgue21.exe	"ClearSearch adware"
U	A Verizon App	VERIZO~1.EXE	"Part of Verizon Online Support Manager"
U	Acer eAP Launch Tool	EAPLAU~1.EXE	"Empowering Technology Launcher
N	Acer Product Registration	ACE1.exe	Acer Product Registration - remove when registration is completed
N	acpart	agpart11.exe	Program for finding trucks on-line
X	ACTX1	v1201.exe	"Added by the VB.IS TROJAN!"
N	Adobe Acrobat	READER~1.EXE	"Speeds up the time it takes to load the Adobe Reader PDF document reader. ""The Speed Launcher quickly opens and closes all of the files that Acrobat or Adobe Reader will use when the application starts. Opening and closing the files allows your virus protection software to check these programs and add them to its list of safe files"" - see here. Not required for Adobe Reader to function properly"
N	Adobe Reader Speed Launch	READER~1.EXE	"Speeds up the time it takes to load the Adobe Reader PDF document reader. ""The Speed Launcher quickly opens and closes all of the files that Acrobat or Adobe Reader will use when the application starts. Opening and closing the files allows your virus protection software to check these programs and add them to its list of safe files"" - see here. Not required for Adobe Reader to function properly"
X	Adult_Chat1	Adult_Chat1.exe	Adult content dialler
?	ALFY Accellerator	AlfyAC~1.exe	"??"
U	AMO_TA~1.EXE	AMO_TA~1.EXE	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
X	AntiSpyCheck 2.1	AntiSpyCheck 2.1.exe	"AntiSpyCheck rogue spyware remover - not recommended
X	AntiSpyGolden	AntiSpyGolden 5.1.exe	"AntiSpyGolden rogue spyware remover - not recommended"
X	AntiSpyGolden 5.1	AntiSpyGolden 5.1.exe	"AntiSpyGolden rogue spyware remover - not recommended"
X	AntiSpyZone 5.1	AntiSpyZone 5.1.exe	"AntiSpyZone rogue spyware remover - not recommended"
X	AntivirusGold 5.1	AntivirusGold 5.1.exe	"AntivirusGold rogue security software - not recommended
U	AQ3HelperStartUp	AQ3HEL~1.EXE	"ScreenScenes ""Aquatica Water Worlds"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
?	AS00 Gear511	Gear511.exe	"Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?"
N	AS00_Gear511	Gear511.exe	Netgear wireless LAN configuration utility
?	AS00_WPN511	WPN511.exe	"NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup?"
X	asc32	asc 2.1.exe	"AntiSpyCheck rogue spyware remover - not recommended
X	ASDPLUGIN	adult1.exe	"AsdPlug premium rate adult content dialer"
X	ASDPLUGIN	Xadult1.exe	"AsdPlug premium rate adult content dialer"
U	Ashampoo Magical Optimizer Taskplaner	AMO_TA~1.EXE	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U	Auto EPSON Stylus C45 Series on X	E_S4I3T1.EXE	"Epson Status Monitor 3 for the Stylus C45 Series printer - for monitoring printer status
U	Auto EPSON Stylus C48 Series on X	E_S4I091.EXE	"Epson Status Monitor 3 for the Stylus C48 Series printer - for monitoring printer status
U	Auto EPSON Stylus C64 Series on X	E_S4I2C1.EXE	"Epson Status Monitor 3 for the Stylus C64 Series printer - for monitoring printer status
U	Auto EPSON Stylus C82 Series on X	E_S0HIC1.EXE	"Epson Status Monitor 3 for the Stylus C82 Series printer - for monitoring printer status
U	Auto EPSON Stylus C84 Series on X	E_S4I2D1.EXE	"Epson Status Monitor 3 for the Stylus C84 Series printer - for monitoring printer status
U	Auto EPSON Stylus CX5400 on X	E_S4I2G1.EXE	"Epson Status Monitor 3 for the Stylus CX5400 Series printer - for monitoring printer status
U	Auto EPSON Stylus CX6400 on X	E_S4I2L1.EXE	"Epson Status Monitor 3 for the Stylus CX6400 printer - for monitoring printer status
U	Auto EPSON Stylus Photo R200 Series on X	E_S4I2H1.EXE	"Epson Status Monitor 3 for the Stylus Photo R200 Series printer - for monitoring printer status
U	Auto EPSON Stylus Photo R300 Series on X	E_S4I2F1.EXE	"Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status
U	Auto EPSON Stylus Photo RX500 on X	E_S4I2K1.EXE	"Epson Status Monitor 3 for the Stylus Photo RX500 Series printer - for monitoring printer status
U	Auto EPSON Stylus Photo RX600 on X	E_S4I2M1.EXE	"Epson Status Monitor 3 for the Stylus Photo RX600 Series printer - for monitoring printer status
X	AUTORUN_VAL	AntiSpyCheck 2.1.exe	"AntiSpyCheck rogue spyware remover - not recommended
X	AUTORUN_VAL	asc 2.1.exe	"AntiSpyCheck rogue spyware remover - not recommended
U	BI1HelperStartUp	BI1HEL~1.EXE	"ScreenScenes ""Beach Islands"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	BIOS1	BIOS1.EXE	"Added by the OPASERV.T WORM!"
X	Blocker System611 Monitoring	PopUpBlocker611.exe	"Added by the RBOT.BLJ WORM!"
U	BlueSoleil	BLUESO~1.EXE	"BlueSoleil Bluetooth wireless manager from IVT Corporation"
X	Bman	BMan1.exe	Abcsearch.com/DealHelper adware variant
U	BO1HelperStartUp	BO1HEL~1.EXE	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
Y	BOC-421	BOC421.exe	"NSClean (now Comodo) BOClean anti-malware software - ""Protect yourself from online identity theft. The greatest threat on the Internet today is having your personal information hijacked remotely"". Version 4.21"
U	BootStatus	BOOTST~1.EXE	"Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it
X	ccExecute	bootcfg1.exe	"Added by the NEMSI-B VIRUS!"
X	cd1	cd1.exe	Premium rate adult content dialler
X	change-me-now	msgfix1.exe	"Added by the SDBOT.ZD WORM!"
N	CIO	che7e1~1.exe	"ChatItOut webcam chat program"
X	Classes	int1.exe	"""Switch"" premium rate adult content dialler variant"
X	Classes	run_21.exe	"""Switch"" premium rate adult content dialler variant"
U	CleanTemp	CLEANT~1.EXE	"CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory"
N	Click Radio Tuner	clickr~1.exe	"ClickRadio - subscription service playing radio music via the internet"
N	Click Tray Calendar	ClickT~1.EXE	"ClickTray Calendar - shows holidays
X	cmt101	cmt101.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	Compaq Connections	COMPAQ~1.EXE	"See here - ""messaging service that automatically sends you support information
X	Configuration Loading	svchos1.exe	"Added by the GAOBOT.DK WORM!"
U	CoreCenter	CORECE~1.EXE	"MSI Core Center - motherboard utility for monitoring CPU speed
N	CorelMedia FoldersIndexer8	MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
N	CP888M1	CP888M1.EXE	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
U	cracked_windows1	cracked_windows1.exe	"Cracked Windows popup killer"
U	CSS_Central	CSS_1631.EXE	"CSS Communication Agent (95 Host) from Command Software Systems (now Authentium). ""CSS Central™ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console"""
X	CSV10P1	CSP001.exe	"ClearSearch adware"
X	CSV7P91	CSV7P91.exe	"ClearSearch adware"
N	Cyber-shot Viewer Media Check Tool	SPUVOL~1.EXE	"Part of the Sony Picture Utility software supplied with Sony Cyber-shot digital cameras. Automatically invokes an import process if the camera is connected and has media on it"
U	CyberLat Ram Cleaner	CyberLat Ram Cleaner 1.1.exe	"CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
N	Data LifeGuard	BACKWE~1.EXE	Data LifeGuard diagnostic tools for Western Digital's series of hard drives
Y	DataLayer	DATALA~1.EXE	"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
N	Desktop Weather 3	THEWEA~1.EXE	"Desktop Weather 3 by The Weather Channel - provides current temperature
X	destroyb11	destroyb11.exe	"Added by the DELF-KO TROJAN!"
U	DeviceDiscovery	hpotdd01.exe	"Detection of new imaging
X	DevicePath	Proyecto1.exe	"Added by the GRUEL WORM!"
N	DigiGuide	client01.exe	TV guide and reminder
N	Digital River eBot	downlo~1.exe	"Digital River Systems EBOT for downloading software from their site. In some cases
X	DriveSystem	maxpaynowti1.exe	"Added by the TIBS.AZT TROJAN!"
U	EanthologyApp	EANTHO~1.EXE	"eAcceleration Stop-Sign security software related. Previously not recommended
U	eanth_critical_update_alert	EANTHO~1.EXE	"eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted
U	EasySync Pro - PocketPC	AUTODE~1.EXE	"Windows Mobile Pocket PC specific translator for IBM® Lotus® EasySync® Pro - ""a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
X	emre1	emre1.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	EPGServiceTool	EPGCLI~1.EXE	"Electronic Programme Guide (EPG) for the WinTV range of TV Tuners from Hauppauge"
U	EPSON Stylus C43 Series	E_S08IC1.EXE	"Epson Status Monitor 3 for the Stylus C43 Series printer - for monitoring printer status
U	EPSON Stylus C45 Series	E_S4I3T1.EXE	"Epson Status Monitor 3 for the Stylus C45 Series printer - for monitoring printer status
U	EPSON Stylus C46 Series	E_S4I0T1.EXE	"Epson Status Monitor 3 for the Stylus C46 Series printer - for monitoring printer status
U	EPSON Stylus C48 Series	E_S4I091.EXE	"Epson Status Monitor 3 for the Stylus C48 Series printer - for monitoring printer status
U	Epson Stylus C62 Series	E-S0BIC1.EXE	"Epson Status Monitor 3 for the Stylus C62 Series printer - for monitoring printer status
U	EPSON Stylus C64 Series	E_S4I2C1.EXE	"Epson Status Monitor 3 for the Stylus C64 Series printer - for monitoring printer status
U	Epson Stylus C82 Series	E_S0HIC1.EXE	"Epson Status Monitor 3 for the Stylus C82 Series printer - for monitoring printer status
U	EPSON Stylus C84 Series	E_S4I2D1.EXE	"Epson Status Monitor 3 for the Stylus C84 Series printer - for monitoring printer status
U	EPSON Stylus CX5400	E_S4I2G1.EXE	"Epson Status Monitor 3 for the Stylus CX5400 printer - for monitoring printer status
U	EPSON Stylus Photo R220 Series	E_S6I2I1.EXE	"Epson Status Monitor 3 for the Stylus Photo R220 Series printer - for monitoring printer status
U	EPSON Stylus Photo R300 Series	E_S4I2F1.EXE	"Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status
U	EPSON Stylus Photo RX500	E_S4I2K1.EXE	"Epson Status Monitor 3 for the Stylus Photo RX500 Series printer - for monitoring printer status
U	EPSON Stylus Photo RX600	E_S4I2M1.EXE	"Epson Status Monitor 3 for the Stylus Photo RX600 printer - for monitoring printer status
X	Explorer6.1.EXE	Explorer.exe	Added by the MYDOOM.B WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!
U	E_S4I2F1	E_S4I2F1.EXE	"Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status
U	E_S4I2G1	E_S4I2G1.EXE	"Epson Status Monitor 3 for the Stylus CX5400 printer - for monitoring printer status
U	E_SOEIC1	E_SOEIC1.exe	"Epson Status Monitor 3 - for monitoring printer status
X	faslkakj11	kjgagklj11.exe	"Added by the LEGMIE-ARE TROJAN!"
X	File0_0	MD1.exe	"Added by the DLOADER-OR TROJAN!"
X	Firewall Update System1	WinedowsUpdater1.exe	"Added by the RBOT-ARU WORM!"
X	Games Acceleration	svshost1.exe	"Added by the DLOADR-AWD TROJAN!"
X	GetModule21	GetModule21.exe	"Internet Speed Monitor adware related - see example here"
X	GetPack21	GetPack21.exe	"Internet Speed Monitor adware related - see example here"
N	Google Updater	GOOGLE~1.EXE	"Downloads and installs updates for Google applications (Google Earth
U	GroupWise PDA Connect - PocketPC	AUTODE~1.EXE	"Windows Mobile Pocket PC specific translator for the GroupWise PDA Connect PDA synchronisation utility from Novell"
U	GroupWise PDA Connect - ScheduleSync	SCHEDU~1.EXE	"ScheduleSync specific translator for the GroupWise PDA Connect PDA synchronisation utility from Novell"
U	Hermes Messenger	DGDRHE~1.EXE	"A LAN messenger alternative to WinPopUp - Digital Dreams Software"
X	HighKey1	HighKey1.exe	"Detected by AVG as GENERIC12.LHE - see here"
U	HitwarePKLite	HITWAR~1.EXE	"Hitware Popup Killer Lite"
U	HPDJ Taskbar Utility	hpztsb01.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
U	HPDJ Taskbar Utility	hpztsb11.exe	HP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
N	hpoddt01.exe	N/A	"Installed by the ""HP Photo and Imaging Director"" software. If you ask for the imaging software
U	hpoddt01.exe	hpotdd01.exe	"Detection of new imaging
X	im_autorn	im_1.exe	"Added by the IMAV.A WORM!"
N	InstantAccess	INSTAN~1.EXE	From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
X	intell321.exe	intell321.exe	"Added by the SPYJACK-B TROJAN!"
U	Internet Answering Machine	IAMNET~1.EXE	"From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
X	Internet Connection Wizard	stisvsq1.exe	"Added by the DLOADR-AWD TROJAN!"
U	Internet Disk Cleaner	CLEARH~1.EXE	"""Internet Disk Cleaner from Elongsoft ""protects your privacy by cleaning up all Internet tracks and past computer activities"""
X	Internet Loader1	MSInstall61.exe	"Added by the KWBOT.B WORM!"
X	Internet Mail and News	msqdevl1.exe	"Added by the DLOADR-AWD TROJAN!"
X	InternetShield	INTERN~1.EXE	"InternetShield rogue security software - not recommended
N	InterTrust Quick Start	it_cpq~1.exe	"InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business"
N	Intervideo Win Cinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
U	ipsecdialer	IPSECD~1.EXE	"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
Y	KB891711	KB891711.exe	"Installed by the Windows KB891711 critical update
N	Kodak Batch Transfer	pezdow1.exe	Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
U	LanguageMonitor	Oplmsb01.exe	OKI Printer language support monitor
U	LANMessage Pro	LANMES~1.exe	"LANMessage Pro - ""a powerful tool for communicating with other people on your office/home network"""
U	Laplink PDASync 3.1 - PocketPC	AUTODE~1.EXE	"Laplink PDASync for Windows Mobile Pocket PC - PDA synchronisation utility"
X	Life FireWall Update1	FireWall-Update1.exe	"Added by the RBOT-ARS WORM!"
X	load	_Kerne1.exe	"Added by the LINEAGE-AN TROJAN!"
X	load	Kerne121.exe	"Added by the LINEAGE-ON TROJAN!"
X	load	Kerne1211.exe	"Added by the LINEAGE-DY TROJAN!"
X	logg	logo_1.exe	"Added by the PWFUZZ-A WORM!"
U	Logitech Harmony Remote Software 7	HARMON~1.EXE	"Logitech
X	MalwareBurn 7.1	MalwareBurn 7.1.exe	"MalwareBurn rogue security software - not recommended
X	MalwareWiped 6.1	MalwareWiped 6.1.exe	"MalwareWipe rogue security software variant - not recommended
X	MedGS	MEDGS1.exe	"PacerD_Media/Pacimedia.com adware"
N	MediaMonitor	Mediam~1.exe	Installed by Smartdisk MVP CD burning software. Software will work fine without it
X	MediaPath	Proyecto1.exe	"Added by the GRUEL WORM!"
U	MicroDialler	atdialler1.exe	"Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered"
X	Microsoft Configuration 35	microsot1.exe	"Added by an unidentified TROJAN!"
X	Microsoft hren1	mmhren1.exe	Added by a variant of the AGENT.IWW TROJAN!
X	Microsoft Management Console	lssas1.exe	"Added by the DLOADR-AWD TROJAN!"
X	Microsoft Office Quick Launcher	iau1.exe	"Added by the DLOADR-AWD TROJAN!"
X	Microsoft Security Management	wuauct1.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Server Applacations	wuauct1.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Service Tools	MStools1.exe	"Added by the RBOT-BHT WORM!"
X	Microsoft System	winamp1.exe	"Added by the SDBOT-UF WORM!"
X	Microsoft System Service	taskmgr1.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Microsoft WinUpdate	Winamp61.exe	"Added by a variant of the RBOT WORM!"
X	Microsong	svchosts11.exe	"Added by the SDBOT-EV WORM!"
U	ML1HelperStartUp	ML1HEL~1.EXE	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	MS Agent Protection	ag1.exe	"Added by the IRCBOT.AZ BACKDOOR!"
X	MS Config Loader	svchos1.exe	"Added by the AGOBOT.R WORM!"
X	MS7531	ms7531.exe	Homepage hijacker
X	msgb1	msgb1.exe	Added by the DLUCA.GEN TROJAN!
X	MSN	services51651.exe	"Added by the IRCBOT-AAL TROJAN!"
X	mswspl	plugin1.exe	"Added by the SMALL.IQ TROJAN!"
X	Multimedia extensions	mservice1.exe	"Added by the DLOADR-AWD TROJAN!"
X	MusIRC (irc.music.com) client	musirc4.71.exe	"Added by the RANDEX.Q WORM!"
U	MW1HelperStartUp	MW1HEL~1.EXE	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	MyCometCursor	MYCOME~1.EXE	"Comet Cursor adware"
X	MyDailyHoroscope	MYDAIL~1.EXE	"MyDailyHoroscope foistware"
X	NAV Auto Prot	navprot1.exe	"Added by the RBOT.ZAC WORM!"
X	NAV Auto Protect	msfwe1.exe	"Added by a variant of the RBOT WORM!"
X	Nvt32	complaint_7251.exe	"Added by the ARTIEF.B TROJAN!"
X	NZ01	NZ01.exe	"Added by the SCAR-K TROJAN!"
X	Olympic	IE4321.exe	Adult content premium rate dialer - also detected as SMALL.CZ
N	OpenOffice.org x	QUICKS~1.EXE	"Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number"
Y	Orange Connection Kit	atdialler1.exe	"Part of the Orange Connection Kit - changes the dial-up for Orange Any Time if access problems are encountered"
N	PaltalkNetaware.exe	PALNETAW~1.EXE	Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start → Programs. Delete the shortcut in Start → Programs → StartUp as well otherwise it will be reinstated
N	PCSuiteTrayApplication	TRAYAP~1.EXE	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PCSuiteTrayApplication	LAUNCH~1.EXE	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
U	pdfFactory Pro Dispatcher v1	fppdis1.exe	"FinePrint pdfFactory Pro Dispatcher - background task which handles the creation of PDF files when you print to the FinePrint pdfFactory PRO printer. Version 1.x of the software. ""pdfFactory products offer a unique approach to PDF creation that is simpler
?	PFW_CfgEngine	PFWCFG~1.EXE	"Personal Firewall related?"
X	plite731	plite731.exe	"Poplite A adware"
?	POWERR~1	POWERR~1.exe	"Power monitoring?"
N	PROXOMITRON	PROXOM~1.EXE	"A free
X	ps1	ps1.exe	"PacerD Media/Pacimedia.com adware"
X	PSof1	PSof1.exe	"PacerD Media/Pacimedia.com adware installer"
X	PSoft1	psoft1.exe	"PacerD Media/Pacimedia.com adware installer"
X	psybnc server 3.1	psybnc321.exe	"Added by the RBOT.ENI BACKDOOR!"
U	PVUnInst1	PVUnInst1.exe	"Privacy View - privacy software that ensures that all your private computer files
X	QdrModule11	QdrModule11.exe	"Internet Speed Monitor adware related - see example here"
X	QdrPack11	QdrPack11.exe	"Internet Speed Monitor adware related - see example here"
N	RecoverFromReboo	RECOVE~1.EXE	"Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched
N	RecoverFromReboot	RECOVE~1.EXE	"Part of a DSL installer package from SBC (probably SBC/Yahoo DSL). If the installation is botched
X	Regcheck	~CAB001.EXE	"Added by the CYBRSPY.13A or CYBRSPY.13B TROJANS!"
U	RegisterDropHandler	REGIST~1.EXE	"Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for ""Send To"" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation"
X	RegistryMonitor1	mljul1.exe	"Added by the SPAMBOT TROJAN!"
U	REGIST~1	REGIST~1.EXE	"Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for ""Send To"" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation"
X	Requester	requester.11.exe	"Added by the MUQUEST TROJAN!"
X	Rund11	Rund11.EXE	"Added by the MARIO-C WORM!"
X	Rundll32.exe	Proyecto1.exe	"Added by the GRUEL WORM!"
N	SafeInstall.exe	SAFEIN~1.EXE	Monitors a download and ensures an newer version of a file isn't replaced by an older one
N	SetiQueue	Setiqu~1.exe	"Provides work unit buffering for Seti@Home clients - see here for more details"
N	SetupICWDesktop	icwconn1.exe	Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
U	SK51	SK51.EXE	"SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!"
U	sks-32	SKS32P~1.EXE	"SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself"
N	Slingshot	SLINGS~1.EXE	"Atomica Slingshot - ""reference tool with access to dictionary and encyclopedia terms
N	sMaRTcaPs	SMARTC~1.EXE	"sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock
?	SNCT511	vsnct511.exe	"Unidentified ""Snapshot Viewer""- what does it do and is it required?"
X	Sound System	WinSound1.exe	"Added by an unidentified VIRUS
X	SpyCrush 3.1	SpyCrush 3.1.exe	"SpyCrush rogue spyware remover - not recommended
X	SpyLocked 4.1	SpyLocked 4.1.exe	"Spylocked rogue spyware remover - not recommended
X	SpywareGuard	deinst_qfe001.exe	"Added by a variant of the Win32.Small TROJAN! - Do NOT confuse with the legitimate SpywareGuard application"
U	STARTPAGE	start1.exe	"NoSpy.org - prevents spyware from changing your startpage and other browser properties. The start1.exe file is located in a NOSPY.ORG folder"
X	STCLOA~1	STCLOA~1.EXE	"SecondThought adware"
X	strtas	lock1.exe	"Added by the SDBOT-ADQ WORM!"
X	strtas	loc1.exe	"Added by the RBOT-AZU TROJAN!"
X	svchost1	svchost1.exe	"Added by the AGOBOT.ZZ WORM!"
X	SYS2	bad1.exe	"Added by the SILLYFDC-AP WORM!"
X	sysldtray	ld11.exe	"Added by the KOOBFACE.JG WORM!"
X	sysldtray	ld01.exe	"Added by the KOOBFACE.I WORM!"
X	SystemDrive	maxpaynow1.exe	"Added by the TIBS.BKU TROJAN!"
X	SysteZ	d1.exe	"Added by the MSNDIABLO.A WORM!"
X	SyZ	f1.exe	"Added by the MSNDIABLO.A WORM!"
X	Taskbell.exe	Rund1.exe	"Added by the YIPID TROJAN!"
N	TaskPlus	TASKPL~1.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
?	TB_setup	TB_ANI~1.EXE	"??"
U	TMESBS	TMESBS21.EXE	Utility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
U	TMESBS.EXE	TMESBS21.EXE	Utility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
U	TMESBS.EXE	TMESBS31.EXE	Utility related to inserting and removing the slim bay device (such as a DVD/CD-writer) on Toshiba laptops. You can disable this task if you have no intention of ever taking the device out while the laptop is turned on
U	TMESRV.EXE	TMESRV11.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
U	TMESRV.EXE	TMESRV21.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
U	TMESRV.EXE	TMESRV31.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
U	TMESRV31	TMESRV31.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
N	updatev01	updatev01.exe	Ultra-networks.com software updater/downloader
X	USB 2.1 Driver	winupdate1.exe	"Added by a variant of the RBOT WORM!"
X	USB Driverz2	msnplus1.exe	"Added by the SDBOT-XQ WORM!"
?	Utility Ping	UTILIT~1.EXE	"??"
X	VCMnet11	VCMnet11.exe	"Windows AFA Internet Enhancement - a browser hijacker
U	Veo Velocity Connect	stim11.exe	Support software for the Veo Velocity Connect webcam
X	VirusHeal 4.1	VirusHeal 4.1.exe	"VirusHeal rogue security software - not recommended
X	VnrBlock21	VnrBlock21.exe	"Internet Speed Monitor adware"
X	VRT1	VRT1.EXE	"Added by the VIRUT.CE VIRUS!"
U	WallPaper	WALLPA~1.EXE	"Wallpaper Changer - wallpaper manager that can change your background images on every startup"
X	wblogon	ubpr01.exe	"Added by the AGENT-HFI TROJAN!"
N	Webposition Gold 2	wpsche~1.exe	"Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines"
?	WebServer	VBI_SE~1.EXE	"Related to a Pinnacle sound card. What does it do and is it needed?"
U	Webshots	websho~1.exe	"Webshots - software that displays photos as your screensaver and wallpaper
U	WhatPulse	WHATPU~1.EXE	"WhatPulse keeps track of your keystrokes
U	Win Chimes	winchi~1.exe	"WinChimes - enhancement software for the system clock that runs in the system tray"
X	Win32 Services1	wuamngr1.exe	"Added by the SDBOT-PV WORM!"
X	win32servv	ms1.exe	"iSearch adware"
N	WINCINEMAMGR	WINCIN~1.EXE	"WinCinema_Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
X	Windir Working	wuaumqr1.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Internet Protocol	deinst_qfe001.exe	Added by a variant of the Win32.Small TROJAN!
X	Windows Startup	winsta~1.exe	"GoHip foistware"
X	Windows Startup	services21.exe	"Added by the AGOBOT-MX WORM!"
X	WINDOWS SYSTEM SCALPE	scalpe91.exe	"Added by the MYTOB-HI WORM!"
X	Windows Update	winupupdate1.exe	"Added by the RBOT-UV WORM!"
X	Windows Update Checker	deinst_qfe001.exe	Added by a variant of the Win32.Small TROJAN!
X	Windows WKS Services	wkssvr1.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	WindowsD	s1.exe	"Added by the MSNDIABLO.A WORM!"
X	WINDOWSflashbrg	sqldata1.exe	"Added by a variant of the AGENT-IC TROJAN!"
X	WindowsK	a1.exe	"Added by the MSNDIABLO.A WORM!"
X	WindowsRegKey update XP	windexv1.exe	"Added by the RBOT-ABM WORM!"
X	WindowsUpd1	WindowsUpd1.exe	"VirtuMonde adware"
X	winntR1	winntR1.exe	"Added by the AGENT.CJZO TROJAN and variants"
X	Winsock2 wqr1s	WUAUMQR1.EXE	"Added by the SPYBOT.KD WORM!"
X	winsockdriver	winsock4.1.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	WinStart001	WinStart001.exe	"From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words
X	WinStart001.EXE	WinStart001.exe	"From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words
X	Winsta~1	winsta~1.exe	"GoHip foistware"
X	WinXP	plugin1.exe	Added by the Downloader-JW TROJAN!
X	Winzip Application	winzip81.exe	"Added by the RBOT-BKZ WORM!"
X	www.symantec.com	oz11111.exe	"Added by the MYDOOM.W WORM"
U	X-Cleaner Freeware	XCLEAN~1.EXE	"X-Cleaner Freeware - ""cookie cleaning
U	X1	X1.exe	"Part of X1's Enterprise Desktop Search Resource Center. An enterprise desktop search engine"
X	Xcpy1	Xcpy1.exe	"FlashEnhancer adware"
X	Xordate	wuauclt11.exe	"Added by the RBOT-GLI WORM!"
U	XTNDConnect PC - ScheduleSync	SCHEDU~1.EXE	"ScheduleSync specific translator for XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
N	Yahoo! Pager	YAHOOM~1.EXE	"System tray access to an older version of the Yahoo! Messenger instant messenger"
X	Zango TvTimes	ZANGOT~1.EXE	"ZangoSearch adware"
N	ZSSnp211	ZSSnp211.exe	"Vmicro webcam USB utility - allows the webcam to initiate data transfer to a program. Create a shortcut and start it manually when needed"
X	[12 random characters]	cabview1.exe	"IeDriver adware variant"
X	[12 random characters]	advpack1.exe	"IeDriver adware variant"
X	[12 random characters]	cmpbk321.exe	"IeDriver adware variant"
X	[12 random characters]	bthserv1.exe	"IeDriver adware variant"
X	[various names]	TForm1.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	UserSp1.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	exe81.exe	"MediaMotor adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.