Control

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Version	"NVIDIA nView Control Panel	N	nwiz.exe
U	3Deep Control Panel	3DeepCTL.EXE	"3Deep® from E-Color corrects lighting
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
X	Access Control App	winsto.exe	"Added by the AGENT.DGO TROJAN!"
X	Access WebControl	[path to file]	"Added by the PPDOOR-M TROJAN!"
X	Admanager Controller	AdManCtl.exe	"Adware
X	AntiSpyControl	pgs.exe	"AntiSpyControl rogue security software - not recommended
X	AntiSpywareControl	pgs.exe	"AntiSpywareControl rogue security software - not recommended
X	ARCHIVE CONTROL	fixupdattr.exe	"Added by the MYTOB.GU WORM!"
U	Ashampoo HDD Control Guard	HDDControlGuard.exe	"Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access"
X	Ati Control Panel	atiphexx.EXE	"Added by the RBOT-BR WORM!"
Y	ATI Remote Control	ATIRW.exe	ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
Y	ATI Remote Control	ATIX10.exe	ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
X	ATI Video Driver Control	atigfx.exe	"Added by the RBOT-FWL WORM!"
X	ATI Video Driver Control	btorrent.exe	"Added by a variant of the IRCBOT TROJAN!"
X	ATI Video Driver Controls	[path to worm]	"Added by the SDBOT-DDS WORM!"
X	ATM Control	adpn.exe	"Added by the MMS.A WORM!"
U	BJPD HID Control	TVMon.exe	"Related to Canon Photo viewer"
U	C-Media Echo Control	EchoCtrl.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer
N	CallControl	ftctrl32.exe	"FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed
X	Catalyst Control Centre	atixvdm.exe	"Added by the RBOT.DMW TROJAN!"
X	Cdrom Controller	cdromcntrl.exe	"Added by the BATTRY-A TROJAN!"
X	Client Server Control Process	[path to trojan]	"Added by the AGENT-HR TROJAN!"
N	Colorific Control Panel	Hgcctl95.exe	"Colorific® from E-Color - ""delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor."" Now superseded by ColorWizzard™"
X	Control	"rundll32.exe ctrlpan.dll	Restore ControlPanel"
U	Control Center	Center.exe	"Associated with Hawking Technologies
X	Control handler	**********.exe [ = random char]	"CoolWebSearch parasite variant"
X	Control handler	ahjinst.exe	"CoolWebSearch parasite variant"
X	Control handler	[10 to 14 random char]THD.EXE	"Added by the KREPPER-AI TROJAN!"
N	control panel	smctrlw.exe	System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X	Control Panel	System.exe	"Added by the DANI TROJAN!"
X	control panel software service	cprs.exe	"Added by the RBOT-FPI WORM!"
X	Controladores	[path to trojan]	"Added by the TELEFO-A TROJAN!"
Y	ControlCenter	ctlcntr.exe	"Part of Lenovo's (IBM) ThinkVantage Fingerprint Software - used on laptops and keyboards with integrated fingerprint readers"
N	ControlCenter2.0	brctrcen.exe	Brother scanner 'Control Center' application - can be started manually
N	ControlCentreTray	XWCTray.exe	"System Tray access for the Xerox ControlCentre 2.0 software for their range of printers
X	Controlled Resource System Service	crss.exe	"Added by the AGOBOT.GH WORM!"
N	Controller	WFXCTL32.EXE	From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
X	ControlPanel	"rundll32 internat.dll	LoadKeyboardProfile"
X	ControlPanel	"host32.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"cmd32.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"systemctrl.exe internet.dll	LoadNetworkProfile"
X	ControlPanel	"[path to executable] internat.dll	LoadKeyboardProfile"
X	ControlPanel	"popcorn.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"popcorn64.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"popcorn72.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"svcc.exe internat.dll	LoadKeyboardProfile"
X	ControlPanel	"popcorn320.exe rundll.dll	LoadMouseProfile"
X	ControlPanel	"private.exe internat.dll	LoadMouseCarpetProfile"
X	ControlPanel	"twink64.exe internat.dll	LoadKeyboardProfile"
X	ControlServiceMgr	csmsv.exe	"Added by the AGENT-XC TROJAN!"
X	CPU Temp Control	wuitgurd.exe	"Added by the RBOT-AHV WORM!"
?	Crystal 3D Audio Control	CWD3DSND.EXE	"Crystal 3D Audio sound driver. Is it required?"
X	CT Control Settings	CTSVCCD.EXE	"Added by the RBOT-YS WORM!"
U	Dialer Control	dc.exe	"Dialer-Control. Detects and protects from premium rate adult content diallers"
U	Direct Update	DUControl.exe	"DirectUpdate dynamic DNS updater"
Y	Earthlink Protection Control Center	elnk_pcc.exe	"EarthLink Protection Control Center - ""powerful
N	FaxTalk CallControl 6.0	FTClCtrl.EXE	This allows the software to handle incoming and outgoing communications without requiring the FaxTalk Communicator application to be loaded into memory. Can be started manually
?	FireBox Control Panel	FireBox.exe	"Control panel for the Presonus FireBox firewire based music recording system. Is it required?"
X	Firewall Controls	sys32.exe	"Added by the SDBOT-DGI WORM!"
Y	gw port controller	PORTCT95.EXE	"From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties
X	Hard drive Controller	hdcontroller.exe	"Added by the KIMAN.B WORM!"
U	HawkEye IV Control Panel	HAWK_32.EXE	"Control Panel application for the old Number Nine graphics cards to change resolution
U	Hcontrol	hcontrol.exe	Hotkeys on an ASUS Notebook. Only required if you use the additional keys
U	HControlUser	HControlUser.exe	Hotkeys on an ASUS Notebook. Only required if you use the additional keys
N	HD Audio Control Panel	RtHDVCpl.exe	"Realtek HD Audio Manager
U	HDDControlGuard	HDDControlGuard.exe	"Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access"
U	HDDControlGuard.exe	HDDControlGuard.exe	"Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access"
?	HsuGuiControl	HsuGuiControl.exe	"Part of the Starband Internet satellite client. What does it do and is it required?"
X	I/O Controllers	svcnet.exe	"Added by the TIBIK-B TROJAN!"
X	ICcontrol	iccontrol.exe	"ICcontrol premium rate adult content dialer"
X	icrosof Avps32 Control	av32.pif	"Added by the RBOT-AVC WORM!"
X	icrosoftf Avpx Control	avpx.exe	"Added by the RBOT-AYN WORM!"
N	InControl Desktop Manager	DMHKEY.EXE	For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
N	IW ControlCenter	iwctrl.exe	"Pinnacle Systems InstantWrite enables you to use your CD-R
U	JOYTECH USB Neo S Controller	JoytechNeoSTrayIcon.exe	"System Tray access to Joytech Neo S PC gamepad controller software"
X	KYK Control Settings	KYSVCXD.EXE	"Added by a variant of the RBOT WORM!"
X	KYM Control Settings	phqghum.exe	"Added by the RBOT.BQD WORM!"
N	Lightscribe	LightScribeControlPanel.exe	"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
N	LightScribe Control Panel	LightScribeControlPanel.exe	"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
N	LightScribeControlPanel	LightScribeControlPanel.exe	"System Tray access to the LightScribe Control Panel for CD/DVD writers based upon HP's LightScribe laser-etching process - which allows you to burn a label straight onto specially coated blank disks. Part of the main LightScribe System Software (LSS)"
X	Logitech Desktop Controller	wrcam.exe	"Added by a variant of the RBOT WORM!"
U	M-Audio MobilePre Control Panel Launcher	MPTask.exe	"Control Panel Launcher for MobilePre USB bus-powered preamp and audio interface from M-Audio"
N	Matrox Color Control	hgcctl95.exe	For Matrox video cards. Quick access to changing colors
N	Matrox Control Center	mgactrl.exe	For Matrox video cards. Quick access to settings
X	Messenger Sharing Control	mnwsvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft (R) Windows Network Latency Controller	1.tmp	"Added by a generic password stealer TROJAN - see here"
X	Microsoft (R) Windows Network Latency Controller	nlc.exe	"Added by a generic password stealer TROJAN - see here"
X	Microsoft (R) Windows Network Latency Controller	sp2vc.exe	"Added by a generic password stealer TROJAN - see here"
X	Microsoft Anti Virus Controller	msavc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Anti Virus Controller	msavc32.exe	"Added by the SDBOT.EPW BACKDOOR!"
X	Microsoft Control Center	crtl.exe	"Added by the RBOT-VX WORM!"
X	Microsoft DDE Control	wupades.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft DDEs Control	Erun.pif	"Added by the RBOT-AMU WORM!"
X	Microsoft Domain Controller	mstc.exe	"Added by the NUGACHE.A WORM!"
X	Microsoft Driver Control	windrv.exe	"Added by the SDBOT.FW WORM!"
X	Microsoft Messenger Management Controls	msmgmctl.exe	"Added by the RBOT-APA WORM!"
X	Microsoft Network Services Controller	mmsvc32.exe	"Added by the NANPY-A WORM!"
X	Microsoft PC Health Remote Assistance File Open & Save controls	sfrcdlg32.exe	"Added by the RBOT-AVY WORM!"
X	Microsoft Security Controlers	fxsecues.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Service Controller	services.exe	"Added by the KALEL-D WORM! Note - this is not the legitimate services.exe process
N	Microsoft Sidewinder Game Controller Software	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs
X	Microsoft Update Control	Ms64.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Video Capture Controls	MSsrvs32.exe	"Added by the SDBOT-AAK WORM!"
X	Microsoft Video Controls	tskmsgr.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Windows Control	mswctl32.exe	"Added by the RBOT.JP WORM!"
X	Microsoftf DDEs Control	lxes.exe	"Added by the RBOT.BOF WORM!"
X	Microsoftf DDEs Control	wees.exe	"Added by a variant of the RBOT WORM!"
X	Microsoftf DDEs Control	soff.pif	"Added by the RBOT-AKH WORM!"
X	Microsoftf DDEs Control	why-.exe	"Added by the RBOT-AMV WORM!"
X	Microsoftf DDEs Control	msnn.exe	"Added by the RBOT-AXT WORM!"
X	Microsoftf DDEs Control	FEnR.exe	"Added by the RBOT-AIM WORM!"
X	Microsoftf DDEs Control	w33s.exe	"Added by a variant of the RBOT WORM!"
X	Microsoftf DDEs Control	waes.exe	"Added by a variant of the RBOT WORM!"
X	Microsoftz turn Control	aexl.exe	"Added by the SDBOT.BCO WORM!"
X	Microsoftz turn Control	read.pif	"Added by the RBOT-AFS WORM!"
N	MightyFAX Controller	MFNTCTL.EXE	"Mighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software""
X	MS Network Control	mswin.exe	"Added by the DUMBA TROJAN!"
X	MSControl28	crsss.exe	"Added by the SPYBOT.AJX WORM!"
X	MSControl31	winnsyst.exe	"Added by the RBOT.CFY WORM!"
X	MSControl3d1	isasse.exe	"Added by the RBOT.CGU WORM!"
X	msdev control	msdevctrl.exe	"Added by the SPYBOT.N BACKDOOR!"
X	MSN Messenger User Controls	msmsgr.exe	"Added by the KELVIR.HI WORM!"
X	Network Host Controller	[path to trojan]	"Added by the WHISPER TROJAN!"
X	Networks Controler	Netsis.exe	"Added by the RBOT-NG WORM!"
U	NotebookHardwareControl	nhc.exe	"""With Notebook Hardware Control you can easily control the hardware components of your Notebook"""
U	NovaBackup * Tray Control	NbkCtrl.exe	"Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number"
X	Nvidia Control Daemon	nksvc32.exe	Added by an unidentified WORM or TROJAN!
X	Nvidia Control Panel	ncsvc32.exe	"Added by an unidentified VIRUS
U	Omega ASIO Control Panel	ASIOSysTray.exe	"System Tray access to the control panel for the Lexicon Omega ASIO (Audio Streaming I/O) desktop recording studio"
?	Packard Bell EverSafe Tray Control	TrayControl.exe	"Packard Bell EverSafe software. What does it do
U	ParentalControl	ParentalControl.Exe	"Crawler Parental Control - ""Get perfect control of websites your children browse
?	PDF Converter Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 2 from Scansoft (now Nuance). what does it do and is it required?"
?	PDF4 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 4 from Scansoft (now Nuance). what does it do and is it required?"
?	PDF5 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional and PDF Create (both version 5) - from Nuance. what does it do and is it required?"
?	PDF6 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 6 from Nuance. what does it do and is it required?"
U	PestPatrol Control Center	PPControl.exe	"PestPatrol Control Terminal - utility that launched PestPatrol features such as PPMemCheck and CookiePatrol before CA's acquisition"
Y	PP2000 Taskbar Control	PPTbc.exe	Protector Plus anti-virus software - system tray access
U	PPControl	PPControl.exe	"PestPatrol Control Terminal - utility that launched PestPatrol features such as PPMemCheck and CookiePatrol before CA's acquisition"
X	ProgramControl	ProgramControl.exe	"Added by the DLOADR-BAG TROJAN!"
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
N	Remote Control	Rc.exe	Hinet Hi-Five ISP software
N	Remote Controller	TVRMVCR.EXE	"ProLink PlayTVpro TV tuner software"
U	RemoteControl	rmctrl.exe	"Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
U	RemoteControl	PDVDServ.exe	"Remote Control background application for Cyberlink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
U	RemoteControl8	PDVD8Serv.exe	"Remote Control background application for Cyberlink's PowerDVD version 8. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
U	SandboxieControl	Control.exe	"SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it"
U	SandboxieControl	SbieCtrl.exe	"""SandBoxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer"""
X	SchijfControleur	GDC.exe	"SchijfControleur Dutch rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
N	Screen Saver Control	FSScrCtl.exe	Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon
X	Security Center	AppControl.exe	"Added by the SDBOT.CFT WORM!"
X	Service Control Manager	scm.exe	"Added by the AGOBOT-GD BACKDOOR!"
X	Service Controller	Csrrs.exe	"Added by the GAOBOT.AO WORM!"
X	Service Controller	service.exe	"Added by the PREVERT TROJAN!"
X	Services Controller	lsassa.exe	Added by the CIADOOR.122 VIRUS!
X	Services Controller	services.exe	"Added by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
U	ShowLOMControl	[strange symbol]	"Note that there is a strange symbol in the command field and in logs it's shown as ""O4 - HKLM\..\Run: [ShowLOMControl] [strange symbol]"". Additional registry information for the entry is ""Reg_DWORD 0x00000001 (1)"". It means Show ""LAN on Motherboard"" Control. On systems where you can install an external LAN interface
U	Softany Monitor Control	MonitorControl.exe	"Softany Monitor Control - ""control your computer's monitor and screensaver"""
N	Sonic A3D Control	vrtxctrl.exe	Sound related options
N	SoundMAX Control Panel	Smax4.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
X	Spools Service Controller	spools.exe	"Added by the KASSBOT-C WORM!"
X	Spy-Control	Spy-Control.exe	"Spy-Control spyware remover - not recommended
U	Spyware Guard Control Panel	spywareguardcp.exe	"""SpywareGuard provides a real-time protection solution against spyware"""
X	SVX Control Service	svxhost.exe	"Added by the FORBOT-K WORM!"
U	Taakcontrole	taskmon.exe	"Task Monitor (on Dutch language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
N	Taskbar Display Controls	"RunDLL deskcp16.dll	QUICKRES_RUNDLLENTRY"
U	TOSHIBA Volume Indicator	VolControl.exe	On-screen volume indicator for Toshiba notebooks
Y	Tray control for Malwarebytes' Anti-Malware	mbamtrayctrl.exe	"Malwarebytes' Anti-Malware - ""monitors every process and actually stops malicious processes before they even start. It uses our impressive technology that is in fact a completely novel way of heuristic scanning and it is our response to the increasingly complex malware threats"""
U	TV878 Remote Control	C7XRCtl.exe	"Related to Kworld TV878 Tuner"
X	USB controller	Svcmm32.exe	SvcMM backdoor parasite downloader
N	Verizon Control Pad	cpad.exe	"Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience"
Y	VistaFirewallControl	VistaFirewallControl.exe	"Vista Firewall Control from Sphinx Software (forerunner to Windows 7 Firewall Control) - ""Protects your applications from undesirable network incoming and outgoing activity
X	Volume Controller	VolumeControl.exe	"Added by the SDBOT.AYI WORM!"
X	VSP32 Controls	vsp32.exe	"Added by the RBOT-VA WORM!"
X	Window UDP Control Servic	winlogon.exe	"Added by the RBOT-GXN WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows AdControl	WinAdCtl.exe	Windupdates adware variant
X	Windows Anti Virus Control Center	avrscan.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Anti Virus Control Center	winavscan.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows API Control Task	apitsk32.exe	"Added by the MYTOB.HI WORM!"
X	Windows Audio Control	ppnsvc.exe	"Added by the HAM TROJAN!"
X	Windows Control	Control.exe	"Added by the GREK.A TROJAN! If there is another file with the same file name in the Windows folder
X	Windows ControlAd	WinCtlAd.exe	Windupdates adware variant
X	Windows Controls Center	winudmr.exe	"Added by the LAMER.AA BACKDOOR!"
X	Windows Desktop Controler	windesktop.exe	"Added by the SDBOT-XH WORM!"
X	Windows Firevall Control C	rundll.exe	"Added by the GAERTOB.A TROJAN!"
X	Windows Manager Control	WINMUR32.EXE	"Added by the AGOBOT-AR WORM!"
X	Windows Messanger Control Center	svchosl.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Messanger Control Center	svhost.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Messanger Control Center	winlogin.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Messanger Control Center	winlogon.exe	"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Messanger Control Center	winsys.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Network Controller	Mqguard.exe	"Added by the FORBOT-CL WORM!"
X	Windows Network Controller	WinxPupd.exe	"Added by the FORBOT-DK WORM!"
X	Windows Network Controller	winmms32.exe	"Added by the FORBOT-ED WORM!"
X	Windows Network Controller	wingmt.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Network Controller	Win9x.exe	"Added by the WOOTBOT.I WORM!"
X	Windows Network Controller	winmms32.exe.exe	"Added by the FORBOT-ED WORM!"
X	Windows pack Control Center	taskmam.exe	"Added by the TOMETA-J TROJAN!"
X	Windows Registry Control	winreg.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Security Control	wuaucls.exe	"Added by the FORBOT-V WORM!"
X	Windows Service Controller	services.exe	"Added by the KALEL-B WORM! Note - this is not the legitimate services.exe process
X	Windows Service Controller Agent	taksmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Spooler Control Service	qwidh.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Windows SYN Control Center	winmnon32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows System-Control Drivers	syscontrl.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control	winudspm.exe	"Added by a variant of the SDBOT WORM! See here"
X	Windows UDP Control Center	auth.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	ehSched.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	fxstaller.exe	"Added by the AGENT-IEE TROJAN!"
X	Windows UDP Control Center	installer.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows UDP Control Center	msnmngs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	msnpd.exe	"Added by the SDBOT.EBA BACKDOOR!"
X	Windows UDP Control Center	mswinudpmgr32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	scvhost.exe	"Added by the PUSHBOT.EH WORM!"
X	Windows UDP Control Center	taksmrg.exe	"Added by the AGENT.WOH TROJAN!"
X	Windows UDP Control Center	tmps.exe	"Added by the SDBOT.EBA BACKDOOR!"
X	Windows UDP Control Center	winlive32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	winmsn.exe	"Added by the SDBOT.EBA BACKDOOR!"
X	Windows UDP Control Center	winrofl32.exe	"Added by the LDPINCH-RZ TROJAN!"
X	Windows UDP Control Center	winudpmg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	winudpmgrs.exe	"Added by the DROPPER.CMV TROJAN!"
X	Windows UDP Control Center	winudpmsgr.exe	"Added by the SDBOT.GAV WORM!"
X	Windows UDP Control Center	winupmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	winuscn32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	wksvcsc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	winudpmgr.exe	"Added by the DLOADR-HQL TROJAN!"
X	Windows UDP Control Center	fxsteller.exe	"Added by the IRCBOT-J BACKDOOR!"
X	Windows UDP Control Center	msnsmsgrs.exe	"Added by the PUSHBOT.MF WORM!"
X	Windows UDP Control Center	winmgrs.exe	"Added by the PUSHBOT.MY WORM!"
X	Windows UDP Control Manager	winudpmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Services	wksvcsc.exe	"Added by the ANTIAV-C TROJAN!"
X	Windows Update Controller	mwoffice.exe	"Added by the BATTRY-A TROJAN!"
X	Windows USB Control Driver	iexplore.exe	"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows USB controler	winusb.exe	"Added by the RBOT-HR WORM!"
X	Windows Virus Control	plou.exe	"Added by the SDBOT-ACZ WORM!"
X	Windows Volume Control	ongsvc.exe	"Added by the SLENFBOT.DZ WORM!"
Y	Windows7FirewallControl	Windows7FirewallControl.exe	"Windows 7 Firewall Control from Sphinx Software - ""Protects your applications from undesirable network incoming and outgoing activity
X	Windows_Protect	wincontrol32.exe	"Added by the RBOT-ADK WORM!"
N	WinFax PRO Controller	WFXCTL32.EXE	From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
X	WinSpyControl	pgs.exe	"WinSpyControl rogue security software - not recommended. A member of the AVSystemCare family"
U	WSEP Status+Configuration	controldGUI.exe	"User interface for the WatchGuard Security Event Processor (WSEP) Status/Configuration dialog box associated with the Firebox series of security products from Watchguard"
U	xPlanetControl	xPlanetControl.exe	"Tool that displays a globe with current day/night zones and clouds on users desktop."
U	Xtrem parental control	pcx.exe	ParentXtreme - surveillance software. Uninstall this software unless you put it there yourself
X	[various names]	control64.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.