Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X*Windows [filename] Checker[filename]"Added by the KEDEBE-B WORM!"
XAdvanced Tool Checksadvchks.exe"Added by a variant of the RBOT WORM!"
NAdvanced Tools CheckADVCHK.EXEChecks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
UALLTEL DSL Check-up Centermatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
?AnnotateCheckAnnCheck.exe"Genius Wizard Pen Tablet driver related. Is it required?"
UAnti-keylogger checkantikey.exe"Anti-keylogger - protects against keylogger programs monitoring your keystrokes"
XAntiSpyCheckAntiSpyCheck.exe"AntiSpyCheck rogue spyware remover - not recommended
XAntiSpyCheck 2.1AntiSpyCheck 2.1.exe"AntiSpyCheck rogue spyware remover - not recommended
XAntiSpyCheck 2.1.0AntiSpyCheck.exe"AntiSpyCheck rogue spyware remover - not recommended
UAOL Broadband Check-Upmatcli.exe"""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
YArcaCheckArcaCheck.exe"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
XAUTORUN_VALAntiSpyCheck 2.1.exe"AntiSpyCheck rogue spyware remover - not recommended
YAVK Mail CheckerAVKPop.exe"eXtendia AVK AntiVirus email checker"
XBlockCheckerBlock-checker.exe"BlockChecker adware"
XBoot Checkbootchk.exe"Added by the DELBOT-AB WORM!"
NBrowserWebCheckloadwc.exeChecks to make sure that IE is still your default browser
NCamCheckCamCheck.exe"NuCam camera software related"
?cFosInst_Checkcfosinst.exe"cFos DSL Modem driver related. What does it do and is it required?"
XCheckCheck.exe"Added by the VB-DRN WORM!"
NCheck for One Touch Updatewiseupdt.exeChecks for updates for Visioneer OneTouch scanners
NCheck for TWS UpdatesWiseUpdt.exeInteractive Brokers - check for update to their standalone Java-based trading platform
UCheck Messengercmesseng.exeCheck Messenger from Qchex.com - program that helps you manage the activity of your Qchex account. Qchex appear to be no longer in buisness
UCheck&GetCheck&Get.exe"Check&Get from ActiveURLs. Manages your browser bookmarks and favorites. Monitors Web sites for changes and updates
NCheckCustomWorksUpdateCheckCWupdate.exe"Update checker
UCheckDialerChkDial.exe"Added by the CheckDialer modem connection monitoring tool"
XCheckdiskmscas.exe"Added by the VAGON-A TROJAN!"
XCheckFaultKernelmswdm.exe"Added by the SMALL-CSK TROJAN!"
UCheckItToolBox.exe"CheckIt Toolbox from
UCheckIt 86CheckIt86.exe"CheckIt 86 popup blocker"
YCheckMsgPlus"MsgPlusH.dll VerifyInstallation"
Xcheckrunelite***32.exe [* = random char]"EliteBar adware"
Xcheckrunelitelsj32.exe"Added by the MULTIDR-ER TROJAN!"
XCheckScan32regload16.exe"Added by the AEBOT.K WORM!"
?checktimect.exe"Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?"
YCheckVCRIOMagic.exe"Driver for the I/OMagic Personal Video Recorder (DR-PCTV100)"
XCheckWinPerfperfinfo.exe"Added by a variant of the IRCBOT TROJAN!"
NClient Access Check Versioncwbckver.exe"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
UCloneCDElbyCDFLElbyCheck.exe"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
XCritical Update Checkbattlenet.exe"Added by the DELF-LB TROJAN!"
YCSAV_CheckVirusesvchk.exe"Command Antivirus related"
XCSCRS Value CheckMsPMSPSd.exe"Added by a variant of the SDBOT WORM!"
YCSScheduleCheckSCHWIZEX.EXE"Part of ConfigSafe - lets you identify changes to the registry
UCTCheckCTCheck.exe"Associated with the ZEN range of MP3 players from Creative Technology Ltd. A visitor recommended the ""U"" status but what does it do?"
NCyber-shot Viewer Media Check ToolSPUVolumeWatcher.exe"Part of the Sony Picture Uility software supplied with Sony Cyber-shot digital cameras. Automatically invokes an import process if the camera is connected and has media on it"
NCyber-shot Viewer Media Check ToolSPUVOL~1.EXE"Part of the Sony Picture Utility software supplied with Sony Cyber-shot digital cameras. Automatically invokes an import process if the camera is connected and has media on it"
XDatcheckdatcheck.exe"Added by the KEYPANIC TROJAN!"
?DatecheckerN/A"Could be related to this?"
XDC6_Checkuwasdc.exe"Part of the WinAntiSpyware 2006 and WinAntiSpyware 2007 rogue spyware removers - not recommended"
XDC6_checkdc6_startupmon.exe"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
Xdc6_checkdcmon.exe"SystemDoctor rogue security software - not recommended
Xdefragm_checkdefragment.exe"CoolWebSearch parasite variant"
XDisk Checkchkdsk32.exe"Added by the IM TROJAN!"
XDiskCheckmsdarkend.exeAdded by an unidentified WORM or TROJAN!
XDriverChecksvchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
?DVDCheckDVDCheck.exe"Related to an Intervideo program. What does it do and is it required in startup?"
UElbycheckElbyCheck.exe"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
NEPSON Status Monitor 3 Environment Checke_srcv03.exeAccording to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
NEPSON Status Monitor 3 Environment Checke_srcv02.exeAccording to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
NEPSON Status Monitor 3 Environment Check 2e_srcv03.exeAccording to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
NEPSON Status Monitor 3 Environment Check 2e_srcv02.exeAccording to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
YeRecoveryServicecheck.exe"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
XERS_checkers_startupmon.exe"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
XERS_Checkuwasers.exe"Part of the WinAntiSpyware 2006 and WinAntiSpyware 2007 rogue spyware removers - not recommended"
XFaltCheckallps.exe"Added by the AGENT.RAP TROJAN!"
Nfilehippo.comUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
NFileHippo.com Update CheckerUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
YFix-it AVmemcheck.exePart of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
XFW Managerfwcheck.exe"Added by the DELBOT-H WORM!"
UHP Health Check ScheduleHPHC_Scheduler.exeHP Health Check Scheduler from Hewlett-Packard
XIEAgent update checkiewatch.exe"Added by the BOMKA TROJAN!"
Niecheckiecheck.exe"Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2"
XIECheckMSDTCs.exe"Added by the TIRBOT-D WORM!"
XIECheckxpssl.exe"Added by the TIRBOT-E WORM!"
XIECheckmssvp.exe"Added by the TIRBOT-G WORM!"
?immcheck.exeimmcheck.exe"Related to I-FORCE driver for force feedback steering wheel?"
?Intense Registry ServiceIntEdReg.exe /CHECK"Intense Educational Ltd - Language Office Software. Is it required?"
YInterCheck MonitorIcmon.exe"Part of Sophos ant-virus sofware"
YInterCheckMonitorICMON.EXE"Part of Sophos anti-virus sofware"
Xjucheckjucheck.exe"Added by the SCRIMGE.O WORM!"
XKernal Fault Checkntosrkl.exe"Added by a variant of the SDBOT WORM!"
XKernelChecksys****.exe [* = digit]Added by an unidentified TROJAN!
XKernelCheckwinser.exe"Added by the TSPY_LMIR.SL TROJAN!"
Nkernelfaultcheckdumprep 0 -k"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
Nkernelfaultcheckdumprep 0 -u"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
XKernelFaultCheckptool32.exe"Added by the LEGMIR-BN TROJAN!"
XKernelFaultCheckmsime.exe"Added by the TINY-P TROJAN!"
XKernelFaultChecktell32.exe"Added by the LEGMIR-BF TROJAN!"
XKernelFaultCheckwinabc3.exe"Added by the NUBYS-A VIRUS!"
XKernelFaultCheckwinbin.exe"Added by the DLOADR-AAX TROJAN!"
XKernel_checkwmiprvse.exe"Added by the SONEBOT-B WORM! Note - this is not the legitimate wmiprvse.exe process which is always located in the %System%\wbem folder and should not normally figure in Msconfig/Startup!"
YKeyboard Preload CheckPreload.exeMillenium Multi-Function Keyboard driver
XKrnlcheckcsrss.exe"Added by the BOTNACHALA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XList checker 32 BITlist32.exe"Added by the RBOT-AHO WORM!"
XLoadPowerSchemerundll32.exe powerprof.dll CheckPowerProfile"Ulubione adult content dialer. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
ULPMailCheckerLPMLCHK.exe"Part of Lenovo's ThinkVantage® Productivity Center on their ThinkPad notebooks or ThinkCentre desktops. Checks for incoming e-mail and blinks the ThinkVantage button LED"
XMail_CheckMail_Check.exe"Added by the PANOIL.C WORM!"
NMass storage check registry"rundll32.exe MSDServ.dll check registry"
XMAV_checkmav_startupmon.exe"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
XMemory Checkmemore.exe"Added by the KILLAV.C TROJAN!"
XMicrosoft checkerMsPMSPTv.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Information Checkmicrosoft.exe"Added by the IRCBOT.AUH TROJAN!"
XMicrosoft System CheckupCool.exe"Added by the DONK.B WORM!"
XMicrosoft System CheckupWnetlib.exe"Added by the DONK.C WORM!"
XMicrosoft System Checkupdbnetlib.exe"Added by the DONK.L WORM!"
XMicrosoft System CheckupKeymgr.exe"Added by the DONK.M WORM!"
XMicrosoft System Checkupinetman.exe"Added by the DONK.O WORM!"
XMicrosoft System Checkupntsysmgr.exe"Added by the DONK.S WORM!"
XMicrosoft System Checkupntsysman.exe"Added by the SDBOT-QW WORM!"
XMicrosoft System Checkuplibsysmgr.exe"Added by the SDBOT-CAF WORM!"
XMicrosoft System Checkupsysmgr.exe"Added by the SDBOT-OO TROJAN!"
XMicrosoft System Checkupnetapi32.exe"Added by the DONK-E WORM!"
XMicrosoft System Checkupwnetmgr.exe"Added by the DONK.Q WORM!"
XMicrosoft System Checkuplibsys32.exe"Added by the SDBOT-ACK WORM!"
XMicrosoft System Checkupnetlogin32.exe"Added by the SDBOT-GN BACKDOOR!"
XMicrosoft Windows DLL 32-BITmsncheck32.exe"Added by the SDBOT-XX WORM!"
Xmsadcheckmsadcheck32.exe"Browser hijacker
Xmscheckrundll32.exe wincheck071008.dll mymain"Added by the AGENT.ADXI TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""wincheck071008.dll"" file is located in %System%"
XMSN Checkermsnchecker.exe"Added by the SDBOT-AGB WORM!"
Xmspaint.execheck32.exe"Added by the AGENT.AH TROJAN!"
XMS_Update Checkwdfmgr.exe"Added by the AGOBOT-TB WORM!"
XNAVChecknavchk.exePremium rate adult content dialer
XNAVCheckshman.exePremium rate adult content dialer
XNero Checkernerocheck.exe"Added by the PROXY-X TROJAN! Note - this is not related to ""Nero Burning Rom"" CD writing software"
UNeroChecknerocheck.exeAssociated with "Nero Burning Rom" CD writing software. Checks for driver issues
XNeroCheckregedit.exe"Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD/DVD burning program. Also
XNeroFileCheckmsjavam32.exe"Added by the AGOBOT.AKM WORM!"
UNeroFilterCheckNeroCheck.exeAssociated with "Nero Burning Rom" CD writing software. Checks for driver issues
XNeroUpdate Checkmsjava.exe"Added by the AGOBOT.AMH WORM!"
XNetReachnrcheck.exe"Added by an unidentified VIRUS
XNokia Checknokiacheck.exe"Added by the RBOT.CDC WORM!"
NNomdChecknomdchek.exePart of Intel's Native Audio
?Norton Program Scheduler Event Checkernpscheck.exe"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker"
?NPS Event Checkernpscheck.exe"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker"
XNSCheckNSCHECK.EXE"MarketScore parasite - ActiveX control used to download premium-rate dialers"
XNtcheckmapserver.exe"Added by the TOMPAI-B WORM!"
YOBRCheckcheck.exe"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
NOEXCheckEA2Check.exe"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup
YOfficeGuard RegCheckerogrc.exe"Kaspersky Labs anti-virus"
Xopsql update checkopsql.exe"Added by the RBOT-ACJ WORM!"
UosCheckosCheck.exe"Part of Norton Antivirus. Initiates a quick scan (at startup) of the portions of the OS Symantec currently (as defined by the most recent updates downloaded onto the host computer) thinks are most susceptible to infection. This scan is not necessary for proper operation of Norton Antivirus"
XPAS_Checkudcpas.exe"Part of the DriveCleaner rogue security software - not recommended
Xpas_checkpasmon.exe"SystemDoctor rogue security software - not recommended
XPC-CheckupPCCheckUp.exe"Installed by SpeedItUp without permission
Xpctp_checkstartmon.exe"Part of the PcTurboPro rogue system optimization tool - not recommended
NPhoto Express Calendar Checker SECALCHECK.EXE"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
UPhotoExplosionCalCheckcalcheck.exe"Calendar management feature of Nova Development's Photo Explosion"
NPicture Motion Browser Media Check ToolSPUVolumeWatcher.exe"Part of the Sony Picture Uility software supplied with Sony camera/camcorder products. Automatically invokes an import process if the camera/camcorder is connected and has media on it"
YPinnacleDriverCheckPSDrvCheck.exe"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
XPostSetupCheckRundll32.exe atgban.dll"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""atgban.dll"" file is found in %System%"
XpostSetupCheckRundll32.exe gzmrt.dll"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""gzmrt.dll"" file is found in %System%"
XPostSetupCheckRundll32.exe cpmsky.dll"TrafficSol adware variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""cpmsky.dll"" file is found in %System%"
UPPMemCheckppmemcheck.exe"PPMemCheck - used to be part of PestPatrol before CA's acquisition"
NPrecision Time Clock CheckerPrecisionTime.exePrecision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
YPSDrvCheckPSDrvCheck.exe"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
YQH Office 2K CheckO2KCHECK.EXE"Quick Heal Anti-Virus MS Office documents virus checker"
?RAMConnectionCheckerRAMConnChecker.exe"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
URCScheduleCheckRCSCHED.EXE"Scheduler for VCOM's Recovery Commander - which ""can restore your non-booting system back to normal. It only takes a few minutes to get your system back up and running"""
XRealPlayer Ath Checkrnathchk.exe"Added by the MYTOB.AG WORM!"
XRealPlayer Ath Checkmathchk.exe"Added by the MYDOOM-AJ WORM!"
?Reg Checklpt.exe"Related to Supanet ISP software - what does it do and is it required?"
XRegcheck~CAB001.EXE"Added by the CYBRSPY.13A or CYBRSPY.13B TROJANS!"
Xregcheck[path to file]"Added by the SERVPAM TROJAN!"
XRegistry CheckerRegrun.exe"Added by the SDBOT TROJAN!"
XRegistry Checkupwinreg.exeAdded by an unidentified WORM or TROJAN!
XRegistry Checkup System326a MonitorWinregs326a.exe"Added by a variant of the SDBOT WORM!"
XRegistry Integrity Checkerregintmon.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XRegistry IntegritycheckWCPDT.EXE"Added by the AGOBOT-RF WORM!"
XRegistry Startup Checkcheckreg.exe"Added by the REMLOAD-A or DANMEC-B TROJANS!"
XRegistry System16 Checkup MonitorSystemReg16.exe"Added by a variant of the RBOT WORM!"
XRegistry System166 Checkup MonitorSystemReg166.exe"Added by a variant of the RBOT WORM!"
XRegistryCheck"rundll32.exe chkreg.dll CheckRegistry"
Xscheck45scheck45.exeRelated to unknown malware - hidden installer associated with it
?SDJobChecktriggusr.exe"Part of CA Unicenter Software Delivery - manage software across various systems
XSDR6V_Checkudcsdr.exe"Part of the DriveCleaner rogue security software - not recommended
XSDR6_Checkudcsdr.exe"Part of the DriveCleaner rogue security software - not recommended
USecurePCSolutionsBootCheckBootCheck.exe"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
XShedulernerocheck.exe"Added by the TACTSLAY.B TROJAN!"
USoloSysCheckSyscheck.exe"Solo antivirus System Integrity Check - Monitors system registry
USpyCop ScanCheckMAIN.EXE"SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan"
XSQConfigCheckercc.exe"Xupiter SQWire toolbar related. Use Spybot S&D
XSQUpdatesCheckeruc.exe"Xupiter SQWire toolbar related. Use Spybot S&D
Xsvhoostchecksys.exeAdded by a downloader TROJAN of Chinese origin!
XSymantecFilterChecksvhost.exe"Added by the BANKER-EEO TROJAN!"
XSymantecFilterCheckgmilogof.exe"Added by the BANKER-EKC TROJAN!"
XSymantecFilterCheck[path to trojan]"Added by the BANKER-EIN TROJAN!"
XSymantecFilterCheckbsyys.scr"Added by the BANLOAD.DZC TROJAN!"
XSyscheckwin.htaBrowser hijacker
Xsyscheckiexplorer.exeAdded by the AGENT.DM TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
USysCheck32sb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XSystem Boot Checksysload3.exe"Added by the FUBALCA WORM!"
USystem Check"Rundll32.exe SysDll32.dll SystemCheck"
Xsystem checkupdater.exeUnidentified adware downloader
XSystem Checkwin_klr32.exe"Added by the DELF-DRA WORM!"
XSystem Checkingwasul.exe"Added by the RBOT.BHM WORM!"
XSystem Security Checkerssc.exe"Added by the IRCBOT-WI TROJAN!"
XSystem Update2webcheck.exe"Added by the AUTOTROJ-C TROJAN!"
XSystem32Check[random].exe"Added by the CHAST-A TROJAN!"
XSystemCheckSystemcheck.exe"Added by the LAVITS WORM!"
XSystemCheckservices.exe"Added by the SOBER-M WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Config\system"
XSystemChecksvchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
XSystemCheckSysCheckBop32.exe"WINBO adware"
USystemchecksb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XSystemCheckerSyschk.exe"Added by the GALIL.F WORM!"
XSystemDriverChecksvchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
Xtcp checkertcpcheck.exe"Added by the VBBOT-A TROJAN!"
UTrojancheck 6 Guardtcguard.exe"TrojanCheck anti-trojan software"
?TypeRegCheckerTypeRegChecker.exe"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
NUlead Calendar CheckerCalCheck.exe"Ulead Calendar Checker - part of Ulead Photo Express - automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually"
NUlead Photo Express Calendar Checkercalcheck.exe"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
NUlead Photo Express x.0 Calendarcalcheck.exe"Ulead Calendar Checker - part of Ulead Photo Express
XUpdate Checkerwinlog.exe"Added by the IRCBOT-TJ TROJAN!"
XUpdate Checkerscvhost.exe"Added by the AGENT-DSF TROJAN!"
XUpdateCheckwinstall.exe"Added by the SPYBOT-CY WORM!"
NUpdateCheckerUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
NUSB2CheckPCLECoInst.dll"Related to Pinnacle Systems Inc. CoInstaller - you can execute the USB2.0 interface check program (Usb2Check.exe file) to check if your system is a USB2.0 enabled system"
NUserFaultCheckdumprep 0 -u"Used in connection with memory dumps - you can disable these by - right clicking on My Computer
XVirusCheckIIAVIRCHK.EXE"Added by the DASMIN TROJAN!"
YVOBRegCheckVOBRegCheck.exe"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
YVSOCheckTaskmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
XWA6PM_Checkudcwap.exe"Part of the DriveCleaner rogue security software - not recommended
XWA6PV_Checkudcwap.exe"Part of the DriveCleaner rogue security software - not recommended
UWashAndGo - Cleanup of old Backupfileschecker.exe"WashAndGo - temp file cleaner"
Xwas_checkPASmon.exe"Part of the ErrorSafe rogue system error and cleaning utility - not recommended"
?WatchDogDVDCheck.exe"Related to an Intervideo program. What does it do and is it required in startup?"
XWCheckUpWCheckUp.exe"Barok keylogger and password stealer"
XWebCheckWebCheck.pif"Added by the CONE.C or CONE.F WORMS!"
XWin64 Compatibility Checkload win64.drv"CoolWebSearch parasite variant"
XWinCheckservices.exe"Added by the SOBER.V WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus\Microsoft and note the space at the beginning of the ""Startup Item"" field"
XWinCheckWinCheck.exe"Added by the PWS-CY TROJAN!"
XWinCheckservices.exe"Added by the SOBER.S WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus\Microsoft"
XWinCheckcheck.exe"Added by the DELBOT-Y WORM!"
XWindowfdgfds DLL fgfdg VerifierWindowsdldfglcheckkk.exe"Added by the RBOT.CSP WORM!"
XWindows (random character)diskcheck.exe"Added by the SINGU.B TROJAN!"
XWindows Recylinder Checkzwdomsgemw.exe"Added by the RBOT-EGJ WORM!"
XWindows Update Checksyslodr.exe"Added by the SMALL.LU TROJAN!"
XWindows Update Checker[random filename]Adware downloader trojan
XWindows Update Checkermsupdte32.exe"Added by the SDBOT-AEF WORM!"
XWindows Update Checkerdeinst_qfe001.exeAdded by a variant of the Win32.Small TROJAN!
XWindows Update Checkerdeinst_qfe002.exeAdded by a variant of the Win32.Small TROJAN!
NWindows Version Checkver_chk.exe"Version checker for CyberAudioLibrary - ""a new way to exchange information through the Internet"""
UWindstream Broadband Check-up Centermatcli.exe"Part of the Windstream Broadband service from AllTel. ""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
UWinSysChecksb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XWinZap Checkwinzbp.exe"Added by the RBOT-AWZ WORM!"
NWMC_RebootCheckunregmp2.exe"Corrects problems with installations of Windows Media Player from version 9 onwards - see here and search for ""unregmp2.exe"""
X[various names]StatusCheck.exe"Wareout - malware masquerading as a spyware and dialer remover"
X_WinCheckservices.exe"Added by the SOBER.V WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus\Microsoft"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.