EC.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	BlueLight_uoltray	exec.exe	"Related to BlueLight Internet. What does it do and is it required?"
X	Cable Modem Adapter	WindowsSec.exe	"Added by the WOOTBOT.A WORM!"
X	Configuration Loader	win32exec.exe	"Added by the SDBOT-LA WORM!"
N	CTZDetec.exe	CTZDetec.exe	"Auto-detect feature of Creative Media Lite which assists you in managing your music
X	Device Security Driver	devicesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	EM_EXEC	EM_EXEC.EXE	"Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as ""SmartMove"". If you disable it and find you don't need it leave it disabled"
X	eth0 driver	exec.exe	"Added by the SPYBOT-Z WORM!"
U	Evoluent Mouse Manager	EvoMouExec.exe	"Mouse manager for Evoluent VertcialMouse"
N	GEARsec	gearsec.exe	Installed by Apple Quicktime package - iPod®/iTunes® CDRW support. Can be disabled if you only require Quicktime player
X	GLSetT32	smsiexec.exe	"Added by the OPTIX-D TROJAN!"
U	GTVRec	GTVRec.exe	"Part of Got All Media - control your TV tuner and other utilities from your PC"
X	IPC Spool Manager	winspec.exe	"Added by the SDBOT-BLU WORM!"
X	IPLog Security	iplogsec.exe	"Added by the IRCBOT.GP BACKDOOR!"
N	Juno_uoltray	exec.exe	Juno ISP software - not required
X	load=	win32exec.exe	"Added by the BITTER WORM!"
X	mediacodec.exe	mediacodec.exe	"Added by the VSCODEC PRO TROJAN!"
X	Microsoft Cab Manager	exec.exe	"Affilred adware"
X	Microsoft IE Execute shell	IEExec.exe	"Added by the ALADINZ.N TROJAN!"
X	Microsoft Update Machine	ubthec.exe	"Added by the AGENT.AWZ TROJAN!"
X	MSIEXEC	MSIEXEC.EXE	"Added by the YOSENIO-A VIRUS!"
X	mxcll	vec.exe	"Eco Antivirus rogue security software - not recommended
N	NetPerSec	NetPerSec.exe	"
X	RF	EC.exe	"Added by the LINEAGE-U TROJAN!"
X	run=	sec5dec.exe	"Added by the ATAK.G WORM!"
?	sc23exec	sc23exec.exe	"Possibly related to a digital camera"
X	SecureExpertCleaner	sec.exe	"Secure Expert Cleaner rogue privacy program - not recommended
X	Security Center Distribution	securesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Server Runtime Error	unsec.exe	"Added by the SDBOT-DFA WORM!"
X	shell update	shellexec.exe	"Added by the RBOT-ANC WORM!"
U	Speed Tec	speedtec.exe	"Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled"
U	SRUUninstall	msiexec.exe	Symantec Network Driver Update - part of LiveUpdate
X	Symmetrical Network	symmec.exe	"Added by the DELBOT-N WORM!"
X	Tarefas do Windows	taskexec.exe	"Added by the AGENT-LSD TROJAN!"
N	uoltray	exec.exe	Netzero free ISP software - not required
U	win	homesec.exe	"Related to the Sentry Parental Controls software"
X	Windows	gearsec.exe	"Added by the STUBBOT-B WORM!"
U	Windows IP Security	ipsec.exe	"Related to the VPN IPSec utility - used to create Security Policy (SP) entries and Security Association (SA) entries in the kernel"
X	Windows Security Assistant	winsec.exe	"CoolWebSearch parasite variant"
X	Windows Sound Manager	gearsec.exe	"Added by the PUSHBOT.DF WORM!"
X	WINDOWS SYSTEM	nec.exe	"Added by the MYTOB-L WORM and variants!"
X	WindowsUpdatewinsec	winsec.exe	"Added by a variant of the AGENT-HZ TROJAN!"
X	WinExec	Winexec.exe.vbs	"Added by the AINESEY.A WORM!"
X	WinExec	WinExec.exe	"Added by the FALUS-A WORM!"
X	winipsec	winipsec.exe	Unidentified malware
X	WinLsass	servicec.exe	"Added by the SCANE WORM!"
U	wrexec	wrexec.exe	"Watch Right - monitoring program
X	[random name]	m?iexec.exe	"PurityScan adware"
X	[random name]	w?wexec.exe	"PurityScan adware"
X	[random name]	msiexec.exe	"PurityScan adware. Do not confuse with the legitimate Windows® Installer (msiexec.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[various names]	BoundRec.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	_WinMain	winexec.exe	"Added by the DLOADER-XX TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.