Check.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	AnnotateCheck	AnnCheck.exe	"Genius Wizard Pen Tablet driver related. Is it required?"
X	AntiSpyCheck	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended
X	AntiSpyCheck 2.1.0	AntiSpyCheck.exe	"AntiSpyCheck rogue spyware remover - not recommended
Y	ArcaCheck	ArcaCheck.exe	"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
N	CamCheck	CamCheck.exe	"NuCam camera software related"
X	Check	Check.exe	"Added by the VB-DRN WORM!"
U	CloneCDElbyCDFL	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
U	CTCheck	CTCheck.exe	"Associated with the ZEN range of MP3 players from Creative Technology Ltd. A visitor recommended the ""U"" status but what does it do?"
X	Datcheck	datcheck.exe	"Added by the KEYPANIC TROJAN!"
?	DVDCheck	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
U	Elbycheck	ElbyCheck.exe	"From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it"
Y	eRecoveryService	check.exe	"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
Y	Fix-it AV	memcheck.exe	Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
X	FW Manager	fwcheck.exe	"Added by the DELBOT-H WORM!"
N	iecheck	iecheck.exe	"Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2"
?	immcheck.exe	immcheck.exe	"Related to I-FORCE driver for force feedback steering wheel?"
X	jucheck	jucheck.exe	"Added by the SCRIMGE.O WORM!"
X	Mail_Check	Mail_Check.exe	"Added by the PANOIL.C WORM!"
X	Nero Checker	nerocheck.exe	"Added by the PROXY-X TROJAN! Note - this is not related to ""Nero Burning Rom"" CD writing software"
U	NeroCheck	nerocheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
U	NeroFilterCheck	NeroCheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
X	NetReach	nrcheck.exe	"Added by an unidentified VIRUS
X	Nokia Check	nokiacheck.exe	"Added by the RBOT.CDC WORM!"
?	Norton Program Scheduler Event Checker	npscheck.exe	"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker"
?	NPS Event Checker	npscheck.exe	"Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker"
X	NSCheck	NSCHECK.EXE	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
Y	OBRCheck	check.exe	"Now part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
N	OEXCheck	EA2Check.exe	"Express Assist from AJSystems.com. Utility for use with Outlook Express to backup
U	osCheck	osCheck.exe	"Part of Norton Antivirus. Initiates a quick scan (at startup) of the portions of the OS Symantec currently (as defined by the most recent updates downloaded onto the host computer) thinks are most susceptible to infection. This scan is not necessary for proper operation of Norton Antivirus"
N	Photo Express Calendar Checker SE	CALCHECK.EXE	"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
U	PhotoExplosionCalCheck	calcheck.exe	"Calendar management feature of Nova Development's Photo Explosion"
Y	PinnacleDriverCheck	PSDrvCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
U	PPMemCheck	ppmemcheck.exe	"PPMemCheck - used to be part of PestPatrol before CA's acquisition"
Y	PSDrvCheck	PSDrvCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
Y	QH Office 2K Check	O2KCHECK.EXE	"Quick Heal Anti-Virus MS Office documents virus checker"
U	SecurePCSolutionsBootCheck	BootCheck.exe	"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
X	Sheduler	nerocheck.exe	"Added by the TACTSLAY.B TROJAN!"
U	SoloSysCheck	Syscheck.exe	"Solo antivirus System Integrity Check - Monitors system registry
X	System Update2	webcheck.exe	"Added by the AUTOTROJ-C TROJAN!"
X	SystemCheck	Systemcheck.exe	"Added by the LAVITS WORM!"
X	tcp checker	tcpcheck.exe	"Added by the VBBOT-A TROJAN!"
N	Ulead Calendar Checker	CalCheck.exe	"Ulead Calendar Checker - part of Ulead Photo Express - automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually"
N	Ulead Photo Express Calendar Checker	calcheck.exe	"If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper
N	Ulead Photo Express x.0 Calendar	calcheck.exe	"Ulead Calendar Checker - part of Ulead Photo Express
Y	VOBRegCheck	VOBRegCheck.exe	"Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled"
?	WatchDog	DVDCheck.exe	"Related to an Intervideo program. What does it do and is it required in startup?"
X	WinCheck	WinCheck.exe	"Added by the PWS-CY TROJAN!"
X	WinCheck	check.exe	"Added by the DELBOT-Y WORM!"
X	Windows (random character)	diskcheck.exe	"Added by the SINGU.B TROJAN!"
X	[various names]	StatusCheck.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.