CP

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	1A:Stardock MCP	mcpserver.exe	"Master Control Program for Stardock apps
Y	3c1807pd	3cmlink.exe 3cpipe-3c1807pd	"3Com WinModem driver. See here for more WinModem information"
Y	3cpipe-USRpdA	USRmlnkA.exe	Modem driver files from US Robotics
U	A1000 Settings Utility	cpqa1000.exe	"Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan
N	acpart	agpart11.exe	Program for finding trucks on-line
N	Active CPU	acpu.exe	"Active CPU - ""easy to use tool for Windows 95/98/ME/NT/2000 that enables you to watch a graphical representation of your CPU's activity"""
N	AME_CSA	"rundll32 amecsa.cpl	RUN_DLL"
X	AntivirusPCPakke	pgs.exe	"AntivirusPCPakke
X	APCProtect.exe	APCProtect.exe	"APCProtect rogue security software - not recommended
?	AsusACPIServer	AsAcpiSvr.exe	"Part of the ACPI driver for the Asus Eee PC range. What does it do and is it required?"
X	ATI Cpanel	atiphexx.exe	"Added by the AGOBOT-NV WORM!"
X	AtiCpanel	atiphexx.exe	"Added by the AGOBOT.IL WORM!"
X	aticpaxx.exe	aticpaxx.exe	"Added by the RBOT-XP WORM!"
X	Atomic-x27C	AtomicpartC.exe	"Added by the KATOMIK-A WORM!"
U	Auto EPSON Stylus CX3700 Series on X	E_FATIACP.EXE	"Epson Status Monitor 3 for the Stylus CX3700 Series printer - for monitoring printer status
X	Avg Antivirus	icpldrvx.exe	"Added by the BANKER.BYU TROJAN!"
U	BACPI10	bacpi10a.exe	"Known as ""PowerKey"" - a minimalist keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win9x/NT4). Also adds an icon to the system tray"
X	BCPC	bcpc.exe	"BroadcastPC adware variant"
X	bcpc_c	bcpc_c.exe	"BroadcastPC adware variant"
U	BluetoothAuthenticationAgent	"rundll32.exe irprops.cpl
U	BluetoothAuthenticationAgent	"rundll32.exe bthprops.cpl
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U	CallCenter Main Application	V3calmcp.exe	"""V3 Inc. CallCenter is a free 32-bit
U	CallCenter Printer Interface	V3faxecp.exe	"""V3 Inc. CallCenter is a free 32-bit
X	ccDHCP32	ccDHCP32.exe	"Added by the AGOBOT-HJ WORM!"
X	ccpApps	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
X	ccpApps	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
U	ccProxy	CCPROXY.EXE	"Part of Norton Internet Security
X	ccPrxy.exe	ccPrxy.exe	"Added by the SHIPUP-H WORM!"
Y	CcPxySvc	CCPXYSVC.exe	"Part of Norton's AntiVirus 2003
X	chcp.exe	chcp.exe	"Added by the SDBOT.BMH BACKDOOR!"
N	Cmaudio	"Rundll32 cmicnfg.cpl	CMICtrlWnd"
U	CmPCIaudio	"RunDll32 CMICNFG3.CPL	CMICtrlWnd"
X	cmsound	vcpdll.exe	"Added by the TCXMEDI-D downloader TROJAN!"
U	Comodo Firewall	CPF.exe	"Comodo Firewall"
U	Compaq Alerter	CPQAlert.exe	"Compaq's Insight Manager Agent - a tool that allows for ""fault
?	Compaq Computer Security	"Rundll32.exe SECURE32.CPL	Service"
N	Compaq DMI	cpqdmi.exe	Compaq version of the Desktop Management Interface
U	Compaq PK Daemon	cpqkl.exe	For Compaq laptops for programming user configurable keys. Not required unless you use them
X	Compaq Print Fax	cpqa1000.exe	"Added by the SDBOT.BCV WORM! Please take note of the difference between the legitimate Compaq Fax Utility Name (A1000 Settings Utility) and the name (Compaq Print Fax) used by this worm"
?	CompaqHW Comp Manager	cpqhcm.exe	"Running on a Compaq laptop - any ideas?"
N	CompaqSystray	cpqpscp.exe	Compaq System Tray icon
X	control panel software service	cprs.exe	"Added by the RBOT-FPI WORM!"
U	Cookie Pal	CPBRWTCH.EXE	"Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return"
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
N	Copyright	mwcpyrt.exe	Displays copyright information on IBM ThinkPads
?	CP	CopyProtectionNotifier.exe	"Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition"
U	CP32NOT	CP32BTN.EXE	For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
U	CP4HPOT	OneTouch.EXE	"Supports the additional multimedia keys on HP/Compaq laptops which give single button press access to standard functions such as Mail
N	CP888M1	CP888M1.EXE	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
?	CPA9P2PSERVER	CPA9P2PS.exe	"Found on a Compaq Presario but what is it?"
X	cpanel	winlogin32.exe	"Added by the RBOT-FOY WORM!"
U	CPATR10	CPATR10.EXE	"Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba
U	CPBrWtch	CPBrWtch.exe	"Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return"
X	CPCmscl0ck	CPCmsclock.ExE	"Added by the IRCFLOOD.BF TROJAN!"
Y	CPD_EXE	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*
X	cpl	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	msgaol.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	s_menu.exe	"Added by the TACTSLAY.C TROJAN!"
X	cpl	browse.exe	"Added by the TACTSLAY.C TROJAN!"
N	CplBTQ00	CplBTQ00.EXE	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
N	CPLDBL10	CPLDBL10.exe	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
U	CPLDFL10	CPLDFL10.EXE	Part of the EzButton feature on some Toshiba (and maybe others) laptops which support additional buttons
X	cpntmgc	wincomp.exe	"Added by the WINTRIM.A TROJAN!"
X	cpntmgc	simcss.exe	"Added by the MAGICON.A TROJAN!"
X	cpntmgc	navpmc.exe	"Added by the SIMCSS TROJAN!"
X	cpntmgc	winmgts.exe	"Added by the WINTRIM-B TROJAN!"
?	CPortPatch	cppatch.exe	"CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?"
X	cppc	[path to trojan]	"Added by the VB-NV BACKDOOR!"
Y	CPQAcDc	CPQAcDc.exe	Compaq PowerCon power management software for laptops
U	CPQAlert	CPQAlert.exe	"Compaq's Insight Manager Agent - a tool that allows for ""fault
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See the entry for Compaq Message Server
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
U	CPQEASYACC	cpqeadm.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	CPQEASYACC	StartEAK.exe	"Easy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys"
U	CPQEASYACC	STARTDRV.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqeaui	cpqeaui.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqek	kcpqek.exe	"For Compaq PC's. Easy Access button support for the keyboard"
X	CPQHotKeys	hotkeysvc.exe	"Added by the RBOT-XA WORM!"
U	CPQInet Runtime Service	CpqInet.exe	"For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers"
N	CPQINKAGENT	cpqinkag.exe	"That is the Compaq Ink Agent for some inkjet printers
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Cpqset	Cpqset.exe	Default settings software in Hewlett Packard notebook
Y	CPQSTUTFIX	stutfix.exe	"For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton"
U	CPQTEAM	cpqteam.exe	This program is bundled with HP servers. When loaded a system tray icon will be available that launches the HP Network Configuration Tool
X	cpr	cpr	Adroar.com adware downloader
X	cprocsvc	cproc.exe	Added by MSIL.AGENT.C TROJAN!
X	CPU Idle	cpuidlexp.exe	"Added by the AGOBOT-BW WORM!"
U	Cpu Level Up help	CpuLevelUpHelp.exe	"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme)
X	CPU Manager	cpumgr.exe	"Added by the PANDEM.B WORM!"
U	CPU Power Monitor	CpuPowerMonitor.exe	"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme). Associated with the ""Energy Saving"" feature of AI Gear - which ""is a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features."" Part of AI Suite"
X	CPU Temp Control	wuitgurd.exe	"Added by the RBOT-AHV WORM!"
X	CPU Watcher	"rundll32.exe cpu.dll	load"
X	CPU Windows Status	cpustats.exe	"Added by a variant of the RBOT WORM!"
U	CPUcool	Cpucool.exe	Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
N	CPUMon	CPUMon.exe	"""CPUMon continuously displays the updated system statistics in a floating window as well as in system tray area"""
X	Cpusave	Cpusave.exe	"Added by the GEMA TROJAN!"
X	Cpusave32	Cpusave32.exe	"Added by the GEMA TROJAN!"
X	CPVHOST Settings	cpvhost.exe	"Added by a variant of the SDBOT TROJAN!"
X	cpyt	hidep.exe	"Added by the MIRJACK-A TROJAN!"
?	CQSCP2PS	CQSCP2PS.EXE	"""Compaq printer utility which is required in the startup menu in order to make the printer work correctly"". Is it actually required?"
?	CQSCP2PSERVER	CQSCP2PS.EXE	"""Compaq printer utility which is required in the startup menu in order to make the printer work correctly"". Is it actually required?"
X	Crusty	dmcpl.exe	"Added by the RUSTY WORM!"
X	CTFMON.CPL	CTFM0N.CMD	"Detected by Symantec as the SILLYFDC WORM! See here"
U	cwcptray	cwcptray.exe	"Related to ContentWatch Parental Control internet filter"
U	CyberPatrolNew	cphq.exe	"""CyberPatrol is one of the most powerful and popular client-based
X	DHCP	smss.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display"
X	DHCP Server	regsvr.exe	"Added by the RBOT-PR WORM!"
X	DHCP32	services.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display"
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
X	DhcpCep	PYJJKIME.exe	"Added by the AGENT-BXQ TROJAN!"
X	dlcipscl	dcpavss.exe	"Added by the MAILBOT-CB TROJAN!"
X	dpcproxy	dpcproxy.exe	"Added by the GOLDENP-A TROJAN!"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
X	Dynamic DHCP	dydhcp.exe	"Added by the RINBOT.B TROJAN!"
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
U	EasySync Pro	XCPCMenu.exe	"""IBM® Lotus® EasySync® Pro is a personal productivity solution that provides data synchronization between your IBM Lotus Notes® desktop and handheld devices running PalmOS and Windows CE/Pocket PC operating systems"""
?	ecpe	ECPE.EXE	"??"
Y	EnvyHFCPL	EnMixCPL.exe	"VIA Envy24 PCI Audio Controller driver"
U	EPSON Stylus CX3700 Series	E_FATIACP.EXE	"Epson Status Monitor 3 for the Stylus CX3700 Series printer - for monitoring printer status
U	EPSON Stylus Photo RX430 Series	E_FATI9CP.EXE	"Epson Status Monitor 3 for the Stylus Photo RX430 Series printer - for monitoring printer status
U	FatPipe	DHCP	Software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
X	FeCPY	fecpy.exe	"FlashEnhancer adware"
X	FlaCPY	flacpy.exe	"FlashEnhancer adware"
X	FlenCPY	flencpy.exe	"FlashEnhancer adware"
X	FlnCPY	flncpy.exe	"FlashEnhancer adware"
X	FtkCPY	ftkcpy.exe	"FlashEnhancer adware"
X	GT15J4R49V	cpuserv.exe	Identified as a variant of the Trojan.Win32.Radi.gu malware
N	HD Audio Control Panel	RtHDVCpl.exe	"Realtek HD Audio Manager
U	HDAudDeck	HDAudioCPL.exe	"Vista control panel for VIA Vinyl HD Audio Codecs from VIA Technologies
U	IBMUltraBayHotSwapCPLLoader	IBMBAY2N.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
X	ieupdate	MCP**.exe [** = random char]	"Added by the ASOXY TROJAN!"
X	ieupdate	mcpdll32.exe	Adware downloader trojan
X	imwinsrvc	acpmonsrv.exe	"Added by the SLAPER.E TROJAN!"
U	IntelProcNumUtility	cpunumber.exe	"Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here"
X	Internet Content Publisher	ICP.EXE	"Added by the RBOT-UD WORM!"
N	InterTrust Quick Start	it_cpq~1.exe	"InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business"
X	iSecurity applet	"rundll32.exe iSecurity.cpl	SecurityMonitor"
N	K6CPU.EXE	K6CPU.EXE	Authenticates CPU as K6 in system properties
X	LAN	dhcp.exe	"Added by the RBOT-GYI WORM!"
U	LManager	CPLBCL53.EXE	System Tray icon found on Acer Travelmate laptops that allow you control access to the Internet and email buttons and other computer configurations
Y	McAfee Firewall	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
N	MCPLaunch	MCPLaunch.exe	"Launcher for Message Center Plus ""which alerts you when conditions arise on your computer that require your attention"" on IBM/Lenovo ThinkCentre desktops
N	Message Center Plus	MCPLaunch.exe	"Launcher for Message Center Plus ""which alerts you when conditions arise on your computer that require your attention"" on IBM/Lenovo ThinkCentre desktops
X	Microsoft (R) Windows TCP/IP Socket Driver	[path to trojan]	"Added by the PROXY-DD TROJAN!"
X	Microsoft (R) Windows TCP/IP Socket Layer	services.exe	"Added by the RBOT.ARM WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\winsock"
X	Microsoft CP Web Manager	webcp.exe	"Added by the IRCBOT.HP TROJAN!"
X	Microsoft CPU Over Heat Manager	CPU.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft CPXP Protocol	cpxp.exe	"Added by the RBOT.ATP WORM!"
X	Microsoft HDCP for NT	msdhcp.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft HDCP for NT and Win9x	msdhcprs.exe	"Added by a variant of the PEERBOT WORM!"
X	Microsoft Lsass Service	wintcp32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft machine	arcpack.scr.exe	"Added by the RBOT.ADF BACKDOOR!"
X	Microsoft Office	msvcp.exe	"Added by the AGENT-XK TROJAN!"
X	Microsoft PSTCP32 Data	pstcp32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft TCP Protocol	wintcp32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft TCP Service	scvhost.exe	"Added by the AGOBOT-L WORM!"
X	Microsoft TCP/IP Connection Monitor	svchost32.exe	"Added by the RBOT.KS WORM!"
X	Microsoft Updates	wgcptsud.exe	"Added by the RBOT-GTF WORM!"
X	Microsoft Web CP Manager	webcp32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Windows DHCP	___r.exe	"Added by the MASLAN.A or MASLAN.C WORMS!"
N	Mozilla Quick Launch	Netscp6.exe	Netscape 6 and Mozilla browsers
X	mqadscp3	mqadscp3.exe	"Added by the STRATION.CX WORM!"
X	MS Windows Executor Process	MSEXECP32.exe	"Added by a variant of the RBOT WORM!"
X	MsAudio	"MsVM_STI.EXE RunDll32 cmicnfg.cpl	CMICtrlWnd"
X	Msconfig	icpldrvx.exe	"Added by the BANLOAD.BFT TROJAN!"
X	msmc	mscpbo.exe	"ClientMan parasite variant"
U	NetManageImport	nmcpdata.exe	"NetManage business software related"
N	Netscp6	Netscp6.exe	Netscape 6
X	Network protocol service	wintcp.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	NI.UGDCPL_0001_N108M0207	[path to file]	"Installer for the OczyszczaczKomputerza Polish rogue privacy tool - see here"
X	NI.UGDCPL_0001_N122M2012	[path to file]	"Installer for the OczyszczaczKomputerza Polish rogue privacy tool - see here"
X	Norton Live Update Server	cpsdv.exe	"Added by the AGOBOT.EW TROJAN!"
X	NTdhcp	NTdhcp.exe	"Added by the QQROB-C TROJAN!"
X	NTdhcp	CiKewl.exe	"Added by the QQROB-N TROJAN!"
X	NvCCCpl	NvCCCpl.exe	"Added by the NOGATA-A TROJAN!"
X	NvCp1Do	[path to trojan]	"Added by the DWNLDR-GWE TROJAN! The most common filename seen is ""smss.exe"" - which is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
U	NvCpl	"RUNDLL32.EXE NvCpl.dll	NvStartup"
X	NvCpl	NvCpl.EXE	"Added by the YANZ.B WORM!"
X	NvCpl	[random filename]	"Added by the AGOBOT-APJ WORM!"
X	NvCpl	windowsp.exe	"Added by a variant of the SDBOT WORM!"
X	NvCpl	rundl32.exe	"Added by the AGOBOT-TO WORM! Note - the valid version of this entry has the command line as ""rundll32.exe NvCpl.dll
X	NvCpl28Deamon	mdosft.exe	"Added by the SPYBOT-AD WORM!"
X	NvCPL32	nvcpl32.exe	"Added by the AGOBOT.DAA WORM!"
X	NvCpl32Deamon	nvcpl.exe	"Added by the SPYBOT.S WORM!"
X	NvCplD	m2gr32.exe	"""Switch"" premium rate adult content dialler variant"
X	NvCplD	ntcpl.exe	"""Switch"" premium rate adult content dialler variant"
U	NvCplDaemon	"RUNDLL32.EXE NvQTwk	NvCplDaemon"
U	NvCplDaemon	"RUNDLL32.EXE NvCpl.dll	NvStartup"
X	NvCplDaemon	msmsgrs.exe	"Added by the DLOADER-YI TROJAN!"
X	NvCplDaemon	Xplorer.exe	"Added by the ORBINA-A WORM!"
X	NvCplDaemon32	anvshell32.exe	"Added by the VB-XU TROJAN!"
X	NvCplDeamon	nvdisp.exe	"Added by the PEEPVIE-I TROJAN!"
X	NvCplDmn	NAVSVC.EXE	"Added by an unidentified VIRUS
X	nvcpll	nvcpll.exe	"Added by the BANCBAN-PF TROJAN!"
X	NvCplScan	msc32.exe	"Added by the FORBOT-DD WORM!"
X	NvCplScan	winasp.exe	"Added by the FORBOT.BZ WORM!"
X	NvCplScan	nvsc32.exe	"Added by the BROPIA.N WORM!"
X	NvCplScan	kav32.exe	"Added by the FORBOT-EW WORM!"
X	NvCplScan	netstat32.exe	"Added by the SDBOT.BRL WORM!"
X	NvCplScan	dllmanager.exe	"Added by the FORBOT.R WORM!"
X	NvCpTDaemon	wuauqmr.exe	"Added by the CULT-B WORM!"
X	PAS_Check	udcpas.exe	"Part of the DriveCleaner rogue security software - not recommended
U	PC Doc Pro - 3.1	pcdocpro.exe	"PC Doc Pro (now Win Doc Pro) - system health check and fix utility"
U	PC Pitstop Optimize Scheduler	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
X	PC Protection Center	PcProtection.exe	"PC Protection Center 2008 rogue security software - not recommended
Y	PccPfw	PccPfw.exe	"Part of Trend Micro web-security products - PC-cillin 2002-2003 and Virus Buster 2002-2004. This is the firewall"
U	PCPerf	pcperf.exe	"PC Accelerator 2007 from DefendGate Inc. ""Powerful all-in-one PC performance and Internet acceleration solution designed to help increase your system and online performance and security"""
N	PCPitstop Registration Reminder	Reminder.exe	"Registration reminder for the Exterminate antimalware package from PC Pitstop"
U	PCPitStopEraser	PCPitStopErase.exe	"""PC PitStop Erase is both a free privacy scanner and paid tracks cleaner"""
U	PCPOptimize	PCPOptimize.exe	"Scheduler for the Optimize system optimization utility from PC Pitstop"
X	PCPrivacyCleaner	pcpc.exe	"PCPrivacyCleaner rogue privacy tool - not recommended"
X	PCPrivacyDefender Freeware	UPSPDAP.exe	"PCPrivacyDefender rogue privacy program - not recommended
X	PCPrivacyTool	GDC.exe	"PCPrivacyTool rogue privacy tool - not recommended. There are number of variants in this family sharing the same filename and user interface - see here"
X	PCprot	crcss.exe	Added by an unidentified WORM!
X	PCprotectar.exe	PCprotectar.exe	"PCprotectar rogue security software - not recommended. A member of the AntiAID family"
N	PICPRTR	PICPRTR.EXE	Program for viewing and measuring a variety of 3D CAD data formats
U	PLEAPCPUCPL	pleapu.exe	"CPU Control Panel for the Powerleap CPU upgrade"
X	PostSetupCheck	Rundll32.exe cpmsky.dll	"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""cpmsky.dll"" file is found in %System%"
X	PowerProfile	mfcp30.exe	"Added by the RINDAS-A TROJAN!"
X	precpop2	starter.exe	"PrecisionPop adware"
N	Realtek HD Audio Sound Effect Manager	RTHDCPL.EXE	"Realtek HD Audio Control Panel
X	RegCompres	Regcpm32.exe	"Added by the POLDO.B TROJAN!"
X	RegCompres	REGCPM32.EXE	"Added by the DASMIN-E TROJAN!"
X	Registry Integritycheck	WCPDT.EXE	"Added by the AGOBOT-RF WORM!"
N	Reminder-cpqXXXXX	remind32.exe	Compaq printer Registration
N	Removecpl	Removecpl.exe	Related to a Belkin 54Mbps Wireless Utility Control Panel applet
N	RTHDCPL	RTHDCPL.EXE	"Realtek HD Audio Control Panel
N	RtHDVCpl	RtHDVCpl.exe	"Realtek HD Audio Manager
X	Run Services as Application	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
N	run=	lxdboxcp.exe	Lexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS
X	run=	ptlseq.cpl	"PhoenixNet BIOS adware. See here"
U	rundll32	"rundll32.exe irprops.cpl
U	rundll32	"rundll32.exe bthprops.cpl
N	Rundll32 cmicnfg	"Rundll32 cmicnfg.cpl	CMICtrlWnd"
Y	RunDll32 essprops	"RunDll32 essprops.cpl	TaskbarIconWnd"
X	Salestart	dcpasmon.exe	"SystemDoctor rogue security software - not recommended
X	SC2	scprot4.exe	"Added by the AGENT.APP TROJAN!"
X	SDKCprords	SDKc55rezzz.exe	"Added by the RBOT.VD WORM!"
X	Services Administrator	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
?	SoundFusion	rundll32 cwcprops.cpl	"Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?"
?	SoundFusion	"rundll32 hercplgs.cpl	BootEntryPoint"
?	SoundFusion	"RunDll32 cwaprops.cpl	C25CrystalControlWnd"
X	Spooler SubSystem Application	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
U	Spyware Guard Control Panel	spywareguardcp.exe	"""SpywareGuard provides a real-time protection solution against spyware"""
X	Srvce Pack Updte	svcpack.exe	"Added by a variant of the RBOT WORM!"
Y	STCPO	STCPO.exe	Sophos Sweep antivirus software
X	SVC Service	svcpack.exe	"CoolWebSearch Svcinit parasite variant"
X	SvcHostDHCP	svchost32.exe	"Added by the ASSASIN.20B BACKDOOR!"
X	Svcphpwin	sslphp32.exe	"Added by the AGOBOT-ABR WORM!"
Y	SynAsusAcpi	SynAsusAcpi.exe	Part of the Synaptics touchpad driver for the Asus Eee PC range
X	Syscpy	Syscpy.exe	"Firewall-bypassing
X	System Backup	sysbcp32.exe	"Added by the AGOBOT-NP BACKDOOR!"
X	System CPL manager	[random filename]	"Added by the RBOT-SR WORM!"
N	System DLF	cpqdiaga.exe	Compaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via Start -> Programs
X	System Drivers	cpsq32.exe	"Added by the SDBOT.AXH WORM!"
X	System Information Manager	Navcpe.exe	"Added by the SDBOT-QB WORM!"
X	system service	spoolcrv.cpl	Added by the INSPIR.11 TROJAN!
X	System32 TCP Manager	systcpm.exe	"Added by a variant of the RBOT WORM!"
X	System32 TCP Manager	systerm.exe	"Added by the RBOT.AFD WORM!"
N	Taskbar Display Controls	"RunDLL deskcp16.dll	QUICKRES_RUNDLLENTRY"
U	TBC Pro	tbcpro.exe	"TitleBarClock Pro - displays Day
X	Tcp Application Manager	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	tcp checker	tcpcheck.exe	"Added by the VBBOT-A TROJAN!"
X	TCP Internet Services	TCPSVC32.EXE	"Added by the SPYBOT.X TROJAN!"
X	TCP Monitoring	LanNSvc.exe	"Added by the RANDEX.AAS WORM!"
X	TCPIP Protocol	mstcpip.exe	"Added by the SDBOT-LR WORM!"
X	tcpipmon	tcpipmon.exe	"Added by the CLICKER-EF TROJAN!"
X	tcpippui	tcpippui.exe	"Added by the RBOT-APS WORM!"
X	tcpippui32	tcpippui32.exe	"Added by the RBOT-ART WORM!"
X	tcpipsvc.exe	tcpipsvc.exe	"Added by the AGOBOT-PG WORM!"
X	TCPServer	TCPServer.exe	"Added by a variant of the SDBOT WORM!"
X	TCPXP Update	tcpxp.exe	"Added by the RBOT-UL WORM!"
X	Threaded	intcp32.exe	"Added by the RANDEX.UG WORM!"
X	Topic cPanr	cPaner.com	"Added by the SDBOT.AJP WORM!"
X	Total Protect 2009	pcpc_starter.exe	"Total Protect 2009 rogue security software - not recommended
U	Tweak UI	"rundll32.exe tweakui.cpl	tweakmeup"
U	Tweak UI	"rundll32.exe tweakui.cpl	tweaklogon"
U	Tweak UI 1.33 deutsch	"RUNDLL32.EXE TWEAKUI.CPL	TweakMeUp"
?	Update local	SetCPQLC.exe	"Running on a Compaq desktop. Any ideas?"
X	Ussi	wnscpit.exe	"PurityScan adware"
N	Verizon Control Pad	cpad.exe	"Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience"
X	vmnetdhcp	vmnetdhcp.exe	"Added by the DWNLDR-GTC TROJAN!"
X	VnCplUpdate	msdm.exe	"Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in
X	WCPC	wintsvcc.exe	"PurityScan adware"
X	WCPI	wintsvit.exe	"PurityScan adware"
X	WCPS	Wint*.exe [ = random char]	"PurityScan adware"
X	WCPT	wintsvtr.exe	"PurityScan adware"
X	WebCpr0	WebCpr0.exe	"WebRebates adware"
X	Win CPU	sysin.pif	"Added by the RBOT-AXL WORM!"
X	Win32 NDIS Driver	Ndistcp.exe	"Added by the WOOTBOT.EU WORM!"
X	Windows .Net Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows APCI Verifier	dhcpserv.exe	"Added by the RBOT-FON WORM! Note - Disables the automatic startup of other software and deactivates the Microsoft Internet Connection Firewall (ICF)"
X	Windows CPU host	winbog32.exe	"Added by a variant of the RBOT WORM!"
X	Windows Local Services	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Agent	WinTcpip.exe	"Added by the SPYBOT.AP WORM!"
X	Windows Service Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows TCP/IP	wintcp.exe	"Added by the AGOBOT-ZH WORM!"
X	Windows Web Services	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows-TCP-IP	rfkampig.exe	"Added by the GIPMA TROJAN!"
U	Winfast2KLoadDefault	"rundll32.exe wf2kcpl.dll	DllLoadDefaultSettings"
U	WinFast_Gamma	"Rundll32.exe wfcpl.dll	DllLoadGammaRampSettings"
X	Winsock driver	tcpmngr.exe	"Added by the SPYBOT-CK WORM!"
X	WINT	wcp***.exe [ = random char]	"PurityScan adware"
X	WINT	wcp*.exe [ = random char]	"PurityScan adware"
X	WNSI	wnscp*.exe [ = random char]	"PurityScan adware"
X	Xcpy1	Xcpy1.exe	"FlashEnhancer adware"
X	XPCPHOST Settings	xpcphost.exe	"Added by a variant of the RBOT WORM!"
U	XTNDConnect PC	XCPCMenu.exe	"XTNDConnect PC - ""award-winning desktop-sync application that enables you to easily synchronize your contacts
?	YAMAHA AC-XG Power Utility	yacpower.exe	"YAMAHA AC-XG Power Utility. What does it do and is it required?"
X	zcproo	qssstiej.exe	"Possible homepage hijacker installing a toolbar: http://tdko.com/
X	[random name]	wincpu.exe	"Added by an unidentified VIRUS
X	[various names]	_ctcp.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NsCplTray.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NSYSCPLSTR.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	StartCpl.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MSTCPDLL.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{DD651081-A909-45ad-BD71-2335B0ADE043}	sysnxcphmgy.exe	"Added by the FAKEALERT-AH TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.