CK.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	00saskda	newlock.exe saskda	"Part of Access Manager
N	AimingClick	AimingClick.exe	"AimingClick from AimingTech. Web searching tool. Available via Start -> Programs"
U	AlfaClock Classic	AlfaClock.exe	"AlfaClock Free Edition from AlfaSoft Research Labs - ""enhances your taskbar clock (tray clock) with fully customizable clock display
U	AMD PowerNow!	GemBack.exe	"
?	AnnotateCheck	AnnCheck.exe	"Genius Wizard Pen Tablet driver related. Is it required?"
X	AntiSpyCheck	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended
X	AntiSpyCheck 2.1.0	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended
Y	Aqua Dock	Aqua Dock.exe	"Aqua Dock - 'free program that allows you to have an ""OS X"" style
Y	ArcaCheck	ArcaCheck.exe	"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
U	Atrack	atrack.exe	"New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker
N	AudioDeck	ADeck.exe	ADeck.exe is a system tray application for VIA's sound cards which offers quick access to a number of sound card related items
N	BMail Installation	FTP_back.exe	"Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not"
X	Browser Pal	adblck.exe	"BrowserAid/BrowserPal foistware"
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
N	CamCheck	CamCheck.exe	"NuCam camera software related"
X	CashBack	cashback.exe	"Part of eXact Advertising Software
X	CBACK.EXE	CBACK.EXE	"Added by the PENTA-A TROJAN!"
U	ChamClock	ChamClock.exe	"Chameleon Clock - system tray clock replacement"
X	Check	Check.exe	"Added by the VB-DRN WORM!"
U	CleverKeys	CK.exe	"CleverKeys - ""is free software that provides instant access to definitions at Dictionary.com
U	CloneCDElbyCDFL	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
X	cls_pack.exe	cls_pack.exe	"Added by the Malware Defense rogue security software. Also detected as the FAKEAV-AQB TROJAN!"
X	CPCmscl0ck	CPCmsclock.ExE	"Added by the IRCFLOOD.BF TROJAN!"
U	CTCheck	CTCheck.exe	"Associated with the ZEN range of MP3 players from Creative Technology Ltd. A visitor recommended the ""U"" status but what does it do?"
X	Datcheck	datcheck.exe	"Added by the KEYPANIC TROJAN!"
X	DirLocker	dirlock.exe	"Added by the AUTORUN-AMS WORM!"
U	DS Clock	dsclock.exe	"Digital desktop clock including synchronization with atomic servers - see here"
X	duck	duck.exe	"Added by the AGOBOT-AVG WORM!"
?	DVDCheck	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
U	Elbycheck	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
Y	eRecoveryService	check.exe	"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
U	ERUNT AutoBackup	AUTOBACK.EXE	"ERUNT backup utility - when added to the user's startup folder automatically backs up the registry each time the system boots
Y	Fix-it AV	memcheck.exe	Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
?	frguk	shdrkmck.exe	"??"
X	FW Manager	fwcheck.exe	"Added by the DELBOT-H WORM!"
U	HDAudDeck	HDeck.exe	"XP control panel for VIA Vinyl HD Audio Codecs from VIA Technologies
N	iecheck	iecheck.exe	"Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2"
X	IExplorerService	WinSock.exe	"Added by the AGENT.KIU TROJAN!"
?	immcheck.exe	immcheck.exe	"Related to I-FORCE driver for force feedback steering wheel?"
X	IP Stack	ipstack.exe	"Added by the AGOBOT.CW WORM!"
X	jucheck	jucheck.exe	"Added by the SCRIMGE.O WORM!"
U	LClock	lclock.exe	"LClock is a program that makes the Windows' clock look like a Windows Longhorn Clock"
X	Mail_Check	Mail_Check.exe	"Added by the PANOIL.C WORM!"
X	Media Access	MediaAccK.exe	"WindUpdates MediaPass adware"
U	Message_Blocker	messageblock.exe	"Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation
X	Messenger Block	msngrblock.exe	"Added by the PATOO WORM!"
X	mFilter	MNeck.exe	"Added by the CLICKER-AG TROJAN!"
X	Microsoft Digital Clock	msclock.exe	"Added by the NACKBOT-D WORM!"
X	Microsoft Directx click	directxclick.exe	"Added by a variant of the RBOT-GHT WORM!"
X	Microsoft Winsock	mswinsck.exe	"Added by the RBOT-ANK WORM!"
X	Mircosoft Sockets SP2	mssck.exe	"Added by the MYTOB.ET WORM!"
X	MP Tcloakss	mptclock.exe	"Added by the NACKBOT-B WORM!"
X	MP Tclockvv	mptclock.exe	"Added by the NACKBOT-A WORM!"
X	MP Tclockvv	mptclock.exe	"Added by the NACKBOT-A WORM!"
X	MS Config Loader	MSWin32bck.exe	"Added by the GAOBOT.AA WORM!"
X	MSN Popup Blocker	msnpopblck.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	mssdbsrv	msupdtck.exe	Added by a variant of a password stealing TROJAN!
X	Nero Checker	nerocheck.exe	"Added by the PROXY-X TROJAN! Note - this is not related to ""Nero Burning Rom"" CD writing software"
U	NeroCheck	nerocheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
U	NeroFilterCheck	NeroCheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
X	NetReach	nrcheck.exe	"Added by an unidentified VIRUS
U	newlock	newlock.exe	"Part of Access Manager
U	newlock.exe	newlock.exe	"Part of Access Manager
X	Nokia Check	nokiacheck.exe	"Added by the RBOT.CDC WORM!"
?	Norton Program Scheduler Event Checker	npscheck.exe	"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker"
?	NPS Event Checker	npscheck.exe	"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker"
X	NSCheck	NSCHECK.EXE	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
Y	OBRCheck	check.exe	"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
N	OEXCheck	EA2Check.exe	"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup
U	osCheck	osCheck.exe	"Part of Norton Antivirus. Initiates a quick scan (at startup) of the portions of the OS Symantec currently (as defined by the most recent updates downloaded onto the host computer) thinks are most susceptible to infection. This scan is not necessary for proper operation of Norton Antivirus"
Y	OutpostFeedBack	feedback.exe	"Part of Outpost firewall by Agnitum. The feedback service is for reporting issues directly to Agnitum from within OP"
U	PCMagInstaback2	InstaBack.exe	"
N	Photo Express Calendar Checker SE	CALCHECK.EXE	"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
U	PhotoExplosionCalCheck	calcheck.exe	"Calendar management feature of Nova Development's Photo Explosion"
Y	PinnacleDriverCheck	PSDrvCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
U	Plus! Alarm Clock	AlarmClock.exe	Alarm Clock function of Microsoft Plus! Digital Media Edition (which is no longer available)
U	PPMemCheck	ppmemcheck.exe	"PPMemCheck - used to be part of PestPatrol before CA's acquisition"
Y	PSDrvCheck	PSDrvCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
Y	QH Office 2K Check	O2KCHECK.EXE	"Quick Heal Anti-Virus MS Office documents virus checker"
X	QuickInstallPack	QuickInstallPack.exe	"Installed and used by rogue security products such as Cleaner2009
N	RocketDock	RocketDock.exe	"""RocketDock is a smoothly animated
X	run32dll	WINClock.exe	"Added by an unidentified VIRUS
X	runner1	faceback.exe	"Added by the DLOADR-BSX TROJAN!"
X	sclick	sclick.exe	"Added by the FAKEALERT TROJAN!"
U	SecurePCSolutionsBootCheck	BootCheck.exe	"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
X	SessionMngr	dirlock.exe	"Added by the DAPROSY WORM!"
X	Sheduler	nerocheck.exe	"Added by the TACTSLAY.B TROJAN!"
U	SkinClock	AtomicAlarmClock.exe	"Atomic Alarm Clock - ""Alert yourself about important events with different alarms and replace your computer tray clock using different skins. Computer Alarm clock that will play any MP3 file. It can also run a program
U	SoloSysCheck	Syscheck.exe	"Solo antivirus System Integrity Check - Monitors system registry
X	Srvce Pack Updte	svcpack.exe	"Added by a variant of the RBOT WORM!"
U	Stardock ObjectDock	ObjectDock.exe	"Stardock ObjectDock is a program that enables users to organize their shortcuts
U	SuperAdBlocker	SAdBlock.exe	"SuperAdBlocker"
X	SVC Service	svcpack.exe	"CoolWebSearch Svcinit parasite variant"
X	System	winipck.exe	"Added by the RBOT-TK WORM!"
X	System Update2	webcheck.exe	"Added by the AUTOTROJ-C TROJAN!"
X	SystemCheck	Systemcheck.exe	"Added by the LAVITS WORM!"
U	Systweak Ad and Popup Blocker	adblock.exe	"Ad and popup blocker part of Advanced System Optimizer from Systweak"
U	TClock	TCLOCK.EXE	Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs
X	TClock.exe	tclock_install.exe	"TClock - distributed and installed without user permission by other rogue software or malware. TClock contains no uninstall facility through Windows. As TClock is of dubious origin and usefulness
X	tcp checker	tcpcheck.exe	"Added by the VBBOT-A TROJAN!"
U	TiTleBarClock	TiTleBarClock.exe	"TitleBarClock - displays Day
U	TopmostClock	TopMostClock.exe	"TopMost Clock - transparent analog clock which displays on top of your other windows"
N	Ulead Calendar Checker	CalCheck.exe	"Ulead Calendar Checker - part of Ulead Photo Express - automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually"
N	Ulead Photo Express Calendar Checker	calcheck.exe	"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
N	Ulead Photo Express x.0 Calendar	calcheck.exe	"Ulead Calendar Checker - part of Ulead Photo Express
Y	UrlLstCk	UrlLstCk.exe	"Part of Norton Internet Security. From Symantec - ""UrlLstCk.exe is a necessary file that will be present in %Program Files%\Norton Internet Security. It is a URL Checklist. It should not be disabled"""
Y	URLLSTCK.exe	UrlLstCk.exe	"Part of Norton Internet Security. From Symantec - ""UrlLstCk.exe is a necessary file that will be present in %Program Files%\Norton Internet Security. It is a URL Checklist. It should not be disabled"""
Y	VOBRegCheck	VOBRegCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
X	Vsample	winxpsock.exe	"Added by the SDBOT.BLK WORM!"
U	Warning: do not remove it!	fpplock.exe	"Part of Folder Password Expert by ZQS Software Team - ""a software program to restrict access to the folders that contain your sensitive data"""
?	WatchDog	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
N	WetSock	wetsock.exe	"RoboMagic Wetsock - weather reporting in the System Tray"
X	WinCheck	WinCheck.exe	"Added by the PWS-CY TROJAN!"
X	WinCheck	check.exe	"Added by the DELBOT-Y WORM!"
X	Windows (random character)	diskcheck.exe	"Added by the SINGU.B TROJAN!"
X	WINDOWS FUCK BY CLASIC	fuck.exe	"Added by the ZOTOB.H or ZOTOB.J WORMS!"
X	Windows MeTaLRoCk service	metalrock.exe	"Added by the TASTYRED TROJAN!"
X	Windows NT Service Name	winshock.exe	"Added by the RBOT-PK WORM!"
X	windows system service	winsock.exe	"Added by the RBOT-MR WORM!"
X	Winpack	winpack.exe	"Adware - detected by Kaspersky as the AGENT.GG TROJAN!"
X	winsock.client	winsock.exe	"Added by the DIABLO-M TROJAN!"
N	WinZip Quick Pick	WZQKPICK.EXE	"Added with WinZip version 8.1. "The new WinZip Quick Pick taskbar tray icon gives you instant access to WinZip and your Zip files. Just left click the icon to open WinZip
X	XP Service Pack	xpservicepack.exe	"Added by the SDBOT.AQA WORM!"
U	zzsecagent	newlock.exe login shutdown	"Part of Access Manager
X	[various names]	StatusCheck.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.