IME

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	$sys$crash	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	$sys$momomomochin	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	$sys$umaiyo	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	*WinLogon	[trojan path] ren time:[random number]	"Added by the VUNDO TROJAN!"
U	12Ghosts ShowTime	12showtime.exe	"12Ghosts Showtime - ""Enhance the clock in your tray with font formatting
U	AnyTime	Atw.exe	"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar
U	AnyTime Organizer	AtDem.exe	"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar
U	AnyTime Organizer	Atw.exe	"AnyTime Organizer Deluxe from Individual Software Inc - ""all the tools you need to organize your calendar
X	AOL Instant Messenger dll runtime	MSAOL32dll.exe	"Added by the RBOT-ATA WORM!"
X	apyginapygin	simenu.exe	"Added by the SDBOT.BTR WORM!"
Y	AspireTimeMachine	acertmb.exe	"System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP
N	ATICCC	cli.exe runtime	"ATI's Catalyst™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has ""runtime"" appended to cli.exe in the ""Command"" column of MSCONFIG. Recommend that start the program manually via Start → Programs → ATI Catalyst Control Center → Advanced → Restart Runtime as it can cause problems when starting Windows"
U	Atomic Time Synchronizer	TimeSync.exe	"TimeSync - lets you synchronize your computer's clock with any internet atomic clock"
U	AtomicTime	ATOMICTIME.EXE	"AtomicTime - utility that synchronizes your PC clock to an atomic clock"
?	checktime	ct.exe	"Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?"
X	Client Server Run Time Proccess	csrsrv.exe	"Added by a variant of the SDBOT WORM!"
X	Client Server Runtime	[path to worm]	"Added by the POEBOT-KR WORM!"
X	Client Server Runtime Process	csrsss.exe	"Added by the SDBOT-LD WORM!"
X	Client Server Runtime Process	csrs.exe	"Added by the LINKBOT.M WORM!"
X	Client Server Runtime Process	smmss.exe	"Backdoor TROJAN! Possible SDBOT-GEN variant"
X	conime.exe	conime.exe	"Added by the AVENDOG WORM! Note - this is not the legitimate Console IME process of the same filename which is located in %System%"
U	CPQInet Runtime Service	CpqInet.exe	"For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers"
X	CTime	[path to trojan]	"Added by the HTTPDOS TROJAN!"
X	DhcpCep	PYJJKIME.exe	"Added by the AGENT-BXQ TROJAN!"
U	Dimension	Dimension.exe	"Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames
U	Dimension4	d4.exe	"Dimension 4 - network time synchronization freeware - starts-up
X	DKTime	dktime.exe	"Added by the LUNII TROJAN!"
Y	DLBTCATS	"rundll32 [path] DLBTtime.dll	_RunDLLEntry@16"
Y	DLBUCATS	"rundll32 [path] DLBUtime.dll	_RunDLLEntry@16"
Y	DLBXCATS	"rundll32 [path] DLBXtime.dll	_RunDLLEntry@16"
Y	DLCCCATS	"rundll32 [path] DLCCtime.dll	_RunDLLEntry@16"
Y	DLCDCATS	"rundll32 [path] DLCDtime.dll	_RunDLLEntry@16"
Y	DLCFCATS	"rundll32 [path] DLCFtime.dll	_RunDLLEntry@16"
Y	DLCGCATS	"rundll32 [path] DLCGtime.dll	_RunDLLEntry@16"
Y	DLCICATS	"rundll32 [path] DLCItime.dll	_RunDLLEntry@16"
Y	DLCJCATS	"rundll32 [path] DLCJtime.dll	_RunDLLEntry@16"
Y	DLCQCATS	"rundll32 [path] DLCQtime.dll	_RunDLLEntry@16"
Y	DLCXCATS	"rundll32 [path] DLCXtime.dll	_RunDLLEntry@16"
X	dmime	dmime.exe	"Malware installed by different rogue security software including SpyKillerPro"
X	eTrust Realtime Monitor	realmon.exe	"Added by the LAZAR.B TROJAN!"
X	ExplorerRun	conime.exe	"Added by the DLDR-G TROJAN! Note - this is not the legitimate Console IME process of the same filename which is located in %System%. This one is located in %Temp%"
U	Google IME Autoupdater	GooglePinyinDaemon.exe	"Google Pinyin Input Method Editor (IME) - allows a user to input Chinese characters by entering the pinyin of a Chinese character (with or without tone
X	himem.exe	[path to worm]	"Added by the STRATION-FW WORM!"
X	IE Runtime	wini.exe	"Added by the PICRATE.B WORM!"
X	IE Runtimes	winis.exe	"Added by the RBOT-ADZ TROJAN!"
X	IME	conime.exe	"Added by the DLDR-G TROJAN! Note - this is not the legitimate Console IME process of the same filename which is located in %System%. This one is located in %Windir%"
N	imekrmig	imekrmig.exe	"Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese
N	IMEKRMIG6.1	IMEKRMIG.EXE	"Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese
N	Imesh	??	"Imesh is a file sharing system"
N	Imesh Auto Update	??	"Update check for the Imesh file sharing system. Turn the update off under ""options"""
X	IMEvtMgr.exe	IMEvtMgr.exe	"Added by the KEYLOG-AR TROJAN!"
X	IMJPMIG8.2	msime82.exe	"Added by the VB-CYG WORM!"
X	IMJPMIG8.2	msime80.exe	"Added by the VB-CYJ TROJAN!"
X	ImMsn	timed.exe	"Added by the WEBDOR.AK TROJAN!"
X	Intel Management Services v32	mstime32.exe	"Added by the AUTORUN-AYG WORM!"
U	Internet Timer	ITIMER.exe	"Shareware dial-up connection call cost calculator from Ratsoft"
X	IsassRenascimento	Issas.exe	"Added by the BANKER.GAX TROJAN!"
X	Java Runtime Environment	jbuild.exe	"Added by the DELBOT-J WORM!"
X	Java Runtime Value	runjava.exe	"Added by the RBOT-DDJ WORM!"
X	Java Runtimes	iexplore.exe	"Added by the KILLAV.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This file is located in a %Windir%\Java\Java folder"
X	KernelFaultCheck	msime.exe	"Added by the TINY-P TROJAN!"
X	KernelRuntime	[path to worm]	"Added by the MYTOB-JO WORM!"
X	Limewire	LimeWire.exe	"Added by the RBOT-AGH WORM!"
N	LimeWire On Startup	LimeWire.exe	"LimeWire - Peer to Peer (P2P) file-sharing client. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
N	LimeWire x.x	LimeWire.exe	"LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
X	limewirepro.exe	limewirepro.exe	"Added by the IRCBOT-WA WORM!"
Y	LXBSCATS	"rundll32 [path] LXBStime.dll	_RunDLLEntry@16"
Y	LXBTCATS	"rundll32 [path] LXBTtime.dll	_RunDLLEntry@16"
Y	LXBUCATS	"rundll32 [path] LXBUtime.dll	_RunDLLEntry@16"
Y	LXBXCATS	"rundll32 [path] LXBXtime.dll	_RunDLLEntry@16"
Y	LXBYCATS	"rundll32 [path] LXBYtime.dll	_RunDLLEntry@16"
Y	LXCCCATS	"rundll32 [path] LXCCtime.dll	_RunDLLEntry@16"
U	LXCDCATS	"rundll32 [path] LXCDtime.dll	_RunDLLEntry@16"
Y	LXCECATS	"rundll32 [path] LXCEtime.dll	_RunDLLEntry@16"
Y	LXCFCATS	"rundll32 [path] LXCFtime.dll	_RunDLLEntry@16"
Y	LXCGCATS	"rundll32 [path] LXCGtime.dll	_RunDLLEntry@16"
Y	LXCJCATS	"rundll32 [path] LXCJtime.dll	_RunDLLEntry@16"
Y	LXCQCATS	"rundll32 [path] LXCQtime.dll	_RunDLLEntry@16"
Y	LXCRCATS	"rundll32 [path] LXCRtime.dll	_RunDLLEntry@16"
Y	LXCTCATS	"rundll32 [path] LXCTtime.dll	_RunDLLEntry@16"
Y	LXCYCATS	"rundll32 [path] LXCYtime.dll	_RunDLLEntry@16"
Y	LXDBCATS	"rundll32 [path] LXDBtime.dll	_RunDLLEntry@16"
Y	LXDCCATS	"rundll32 [path] LXDCtime.dll	_RunDLLEntry@16"
Y	LXDDCATS	"rundll32 [path] LXDDtime.dll	_RunDLLEntry@16"
Y	LXDICATS	"rundll32 [path] LXDItime.dll	_RunDLLEntry@16"
U	LXDJCATS	"rundll32 [path] LXDJtime.dll	_RunDLLEntry@16"
?	MacDrive7.0.4TimeOutPatch	TimeOutPatch.EXE	"Part of MacDrive 7 from Mediafour Corporation - ""enables anyone using Windows Vista
N	Magitime	Magitime.exe	"Magitime - connection tracking utility which monitors online time
X	Memory manager	himem32.exe	"Added by the MANCSYN TROJAN!"
U	Memory+	tfimemsr.exe	"Memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	Microsoft (R) Windows Vista/NT Runtime Compatibility Service	nrcs.exe	"Added by the RANKY.X TROJAN!"
X	Microsoft 64 Bit Runtime Updater	wupdt64.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Client/Server Runtime Server Subsystem	csrs.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft Client/Server Runtime Server Subsystem	csrssa.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft DirectX	time123.exe	"Added by the SDBOT.MD WORM!"
U	Microsoft IME 2002	IMJPMIG.EXE	"Microsoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails
X	Microsoft Runtime	CfgDll32.exe	"Added by the RANDEX.BD WORM!"
X	Microsoft Time Manager	dveldr.exe	"Added by the RBOT-HQ WORM!"
X	Microsoft Update Time	wuam.exe	"Added by the RBOT-M WORM!"
X	Microsoft uptime Service	sysuptime.exe	"Added by the RBOT-ACG WORM!"
X	Microsoft uptime Service	sycuptime.exe	"Added by the RBOT-AHY WORM!"
X	MicrosoftMultimediaTask	Mmtask.exe	Adware downloader - not the valid MusicMatch Jukebox which shares the same filename
X	MS Time	timezone.exe	"Added by the AGOBOT.ADY WORM!"
X	mssysint	comime.exe	"Added by the NETSNAKE-I TROJAN!"
X	Multimedia	windebug.exe	"Added by the VB-ERB WORM!"
X	Multimedia Codecs	mcc.exe	"Added by the DLOADER-MB TROJAN!"
X	Multimedia extensions	mservice.exe	"EasySearch adware"
X	Multimedia extensions	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Multimedia extensions	mservice1.exe	"Added by the DLOADR-AWD TROJAN!"
U	Multimedia KBD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	MULTIMEDIA KEYBOARD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
X	MULTIMEDIA KEYBOARD88	smss.exe	"Added by the SILLYFDC WORM! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
U	NetTime	NETTIME.EXE	"From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols
X	Nod32 Runtime	sysregi.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	NuvaTime	NuvaTime.exe	"NuvaTime - reminder for women using NuvaRing"
N	Odebit Multimedia V2	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
N	Odebit Multimedia V3	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
N	Odebit Multimedia V3 - Services	Odebit.exe	"Odébit Multimedia - free French multimedia player giving access to the best of television
N	OnlineTime	onlinetime.exe	"OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs"
X	PayTime	paytime.exe	"Added by the STARTPA-YR TROJAN!"
N	PCDRealtime	realtime.exe	"Apparently the monitoring device for PC Doctor Online. It provides a ""free"" examination on system files (i.e. registry)
X	PCMMRealtime	pcmm.exe	"PC MightyMax rogue security software - not recommended
?	PhilipsLime	LimeAlive.exe	"Associated with some Philips portable media players such as the GoGear. What does it do and is it required?"
U	PHIME2002A	TINTSETP.EXE	"Microsoft's Input Method Editor for Asian languages which is used to both display and enable the input of characters in e-mails
U	PHIME2002ASync	TINTSETP.EXE	"Microsoft's Input Method Editor for Asian languages which is used to both display and enable the input of characters in e-mails
X	PHIME2004C	CTFMDN.exe	"Added by the DLOADR-AMV TROJAN!"
X	PHIME2OO2ASyst	[path to trojan]	"Added by the DBDOOR-B TROJAN!"
X	PingTimeout Institution	pingchek.exe	"Added by the SDBOT-VY WORM!"
X	PingTimeout Institution	internal.exe	"Added by the SDBOT.BMH WORM!"
Y	PP2000 Real Time Scan	PPVstop.exe	Protector Plus anti-virus software - real time scanner
N	Precision Time Clock Checker	PrecisionTime.exe	Precision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
X	PrecisionTime	PrecisionTime.exe	"PrecisionTime - clock synchronizing software containg spyware by Claria/GAIN. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	PYJJIME	PYJJIME.exe	"Added by the AGENT-BXQ TROJAN!"
X	QTime	nrchk.exe	Premium rate adult content dialler
X	Quick Time file manager	quicktimeprom.exe	"Added by the SDBOT TROJAN!"
N	Quick Time Task	qttask.exe	"System Tray access to Apple's ""Quick Time"" viewer from version 5 onwards"
X	Quicktime	qttasks.exe	"Added by the ADCLICK-AK TROJAN!"
X	Quicktime	shch.exe	"Added by a variant of the BDOOR-EB BACKDOOR!"
X	QuickTime	qttask.exe	"Added by the AGENT-ENG TROJAN! Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %System%"
X	Quicktime Mediaplayer	winmplyer32.exe	"Added by the RBOT-PM WORM!"
X	Quicktime Mediaplayr	wnmplyr.exe	"Added by a variant of the RBOT WORM!"
X	Quicktime Pro 3.0	winuodps.exe	"Added by the GAOBOT.BH WORM!"
N	QuickTime Task	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
X	QuickTime Task	qttasks.exe	"CoolWebSearch parasite variant"
X	Quicktime Task	[random filename]	"Trafficadvance dialer"
X	QuickTime Task	qttask.exe	"Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %ProgramFiles%\WebMediaViewer"
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	"Different numbers caused by number of launches. So if 3 updates are made separately
X	QuicktimeMngr	QUICKTIMEMNGR.EXE	"Added by the WOOTBOT.AW WORM!"
X	QuickTimeUpdate	QuickUpdate.exe	"Added by the BIFROSE-CW TROJAN!"
X	RavTime	Mstray.exe	"Added by the WUKILL.A WORM!"
Y	RavTimer	RavTimer.exe	"RAV AntiVirus"
X	RavTimer	explores.exe	"Added by the HOMEY-A TROJAN!"
X	RavTimeXP	[worm filename]	"Added by the WULLIK.B WORM!"
X	RavTimeXP	Virus	"Added by the CAGER.A WORM!"
U	Realtime Audio Engine	mmrtkrnl.exe	"Associated with ALCATech BPM Studio"
Y	Realtime Monitor	realmon.exe	"Realtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates"
X	RealTimeProtector	winlogon.exe	"Added by the AUTORUN.DIB WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ï¿½ subfolder"
?	RealTimeUpdate	RealTimeUpdate.exe	"Product description in properties is ""InternetExplorerCommunicationAgent Module"" ?"
X	renascimento	svchost.exe	"Added by the BANKER.GAX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Help"
X	retime	retime.exe	"Added by the GIPMA TROJAN!"
U	Rocket.Time	RocketTime.exe	"Rocket.Time - time synchronization software from Rocket Software"
X	Runtime Process	Csrss.exe	"Added by the CIADOOR-J BACKDOOR! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Runtime Server Subsystem	csrss.exe	"Added by the IRCBOT-XV WORM!"
X	runtime.exe	runtime.exe	Added by a variant of the Tibs malware
X	Sakemsneql	simenu.exe	"Added by the SDBOT.BTO WORM!"
N	SalaatTime	SalaatTime.exe	"""Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world"""
U	Sametime Connect	Connect.exe	"IBM Lotus Sametime - instant messaging and Web conferencing software"
U	Say The Time 5.0	SAYTIME.EXE	"This program has audio cues for the system clock in male and female voices
X	Server Runtime Error	unsec.exe	"Added by the SDBOT-DFA WORM!"
X	Server Runtime Process	wbemstest.exe	"Added by the SDBOT-DDB WORM!"
X	Service Pack DLL Runtime	spdll32.exe	"Added by a variant of the RBOT WORM!"
N	Si Meter	SIMETER.EXE	"
X	smrtdrv	runtime.exe	"Added by the AGOBOT.MT WORM!"
U	SP TimeSync	SP TimeSync.exe	"SP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server)"
Y	Spybot - Search & Destroy	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
Y	SpybotSD TeaTimer	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
U	SymmTime	GeTTime.exe	"SymmTime from Symmetricon - freeware utility that ""synchronizes your PC clock to Coordinated Universal Time (UTC)
U	SymmTime	SymmTime.exe	"Older version of SymmTime from Symmetricon - freeware utility that ""synchronizes your PC clock to Coordinated Universal Time (UTC)
U	SymmTime Application	GeTTime.exe	"SymmTime from Symmetricon - freeware utility that ""synchronizes your PC clock to Coordinated Universal Time (UTC)
X	System time updator	CSysTime.exe	"Added by the RANDEX.S WORM!"
X	System Uptime Server	SYSENTRY.EXE	"Added by the RBOT.LK WORM!"
X	System Uptime Server	SYSENTRY32.EXE	"Added by the RBOT.LK WORM!"
X	System32 Runtime StartUp	sysrs.exe	"Added by the AGOBOT.ANW WORM!"
X	SysTime	systime.exe	"CoolWebSearch parasite variant - also detected as the STARTPA-FL TROJAN!"
U	Task Catcher Real-Time Detector	tasktrap.exe	"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
Y	TeaTimer	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
X	Time Manager	TimeManager.exe	"Added by the MYTOB-BV WORM!"
X	Time Zone Synchronization	wscript zshell.js	"Added by the NETDEX-A TROJAN!"
U	TimeCalendar	tc.exe	"TimeCalendar digital planner"
N	Timed Backups Manager Startup	BACKTIME.EXE	"Backup Plus - backup software"
U	TimeLeft	TimeLeft.exe	"TimeLeft is a countdown
U	Timemanager.exe	Timemanager.exe	"Time Manager will let you track billable and non-billable time by customer
N	TimeOnline	TIMEONLINE.EXE	Lightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
X	TIMER	TIMER.EXE	"Added by the TIMESE.AG WORM!"
X	Timer	comm.exe	"Added by the BDOOR-IP BACKDOOR!"
X	Timer	timed.exe	"Added by the BDOOR-LV BACKDOOR!"
X	Timer	msncomm.exe	"Added by the WEBDOR.AK TROJAN!"
X	TimeService	trun.exe	"TlfLic-A premium rate adult content dialler"
X	TimeSink Add Client	TSADBOT.EXE	Advertising spyware
X	timessquare	timessquare.exe	"Detected by Kaspersky as the STARTPAGE.AW TROJAN!"
X	timestamp	timeapr32.exe	"Added by the AGENT-DRU TROJAN!"
X	TimeSyncApp	TimeSynchronize.exe	"DealHelper adware"
N	TimeUp	Timeup.exe	"TimeUp - internet online timer"
U	Timezone	TimeZone.exe	"Microsoft Daylight Saving Time Update Utility - see here"
N	Tiny Watcher Logon Time	Watcher.exe	"Tiny Watcher detects changes to your system. It will not prevent your system from being modified or corrupted. It will only tell you that something suspicious happened. Think of it as an early CAT scan against system tumors. Better to install a tool that will detect and remove bad items"
U	Titlebar Time	Titlebar Time.exe	"Titlebar Time by Titlebar Software - displays the day of the week
U	TitleTime	TiTime.exe	"""TitleTime adds the current date and/or time to the Caption of the currently active application window. Additional options are a second clock (with a different time)
?	UniMessenger	UNI2.exe	"Possibly the UNI instant messenger for singles from Voxtel"
U	Uptimer4	Uptimer4.exe	"Uptimer4 is an appbar which displays time
X	UpTimes service	WinUp.exe	"Added by the RBOT-AKB WORM!"
X	Video Multimedia Driver	ndrives32.exe	"Added by the RBOT-DK WORM!"
U	Virtual Dimension	VirtualDimension.exe	"Virtual Dimension by Typz - ""a free
U	VirtualDimension.exe	VirtualDimension.exe	"Virtual Dimension by Typz - ""a free
U	VTTimer	VTTimer.exe	Driver file for the on-board VIA/S3G KM400/KN400 graphics which enables TV in/out communication
U	WAWifiMessage	WiFiMsg.exe	"""HP Wireless Assistant is a user application that provides a method for controlling the enablement of individual wireless devices (such as Bluetooth or WLAN devices) and that shows the state of the radios for these wireless devices"""
U	Win Chimes	winchi~1.exe	"WinChimes - enhancement software for the system clock that runs in the system tray"
X	WIN32DS	clienttimer.exe	"Eziin adware"
X	WIN32io	clienttimer.exe	"Eziin adware"
X	Windows Client/Server Runtime Server	csrs.exe	"Added by the RBOT.KD WORM!"
X	Windows File Migration Wizard	HIMENSYST.EXE	"Added by the RBOT-EMO WORM!"
X	Windows iMessenger Messenger	winimsg.exe	"Added by the ALLIM.A WORM!"
X	Windows Registry Scan	timeupdate.exe	"Added by the SPYBOT.JE WORM!"
X	Windows Run-Time 64bit	win64rt.exe	"Added by a variant of the RBOT WORM!"
X	Windows Runtime Help	win32hlp.exe	"Added by a variant of the AIMVISION TROJAN!"
X	Windows Runtime Help	WinRunHelp.wrh	"Added by a variant of the AIMVISION TROJAN!"
X	Windows Runtime Proccess	32RUNdll.exe	"Added by the SDBOT.QW WORM!"
Y	Windows SteadyState - Session Timer Notify (UI)	SCTUINotify.exe	"Part of Windows SteadyState
X	Windows Time	tmservice.exe	"Added by a variant of the RBOT-YK WORM!"
X	Windows Time	winmgr.exe	"Added by the RBOT-XC WORM!"
X	Windows Time Server	TimeSRV.exe	"Added by the SPYBOT.DNC WORM!"
X	Windows Time Service Diagnostic Tool	winscrvs.exe	"Added by the RBOT.FTV BACKDOOR!"
X	windowstime.exe	windowstime.exe	"Added by the DLOADR-AQV TROJAN!"
X	Wintime	Wintime.exe	"Added by the HARNIG TROJAN!"
U	WinTime	wintime.exe	"WinTime - change desktop icons' color and font"
N	Wintime Wtxpload	Wxpload.exe Wintime	"Part of the software to support a Dexxa USB graphics tablet. From a visitor - "This gets started anyway when you plug in the USB connector for the graphics tablet
X	WinTimer	msupdate.cmd	"Hijacker - detected by Kaspersky as the STARTPAGE.TJ TROJAN!"
U	WorldTime.exe	WorldTime.exe	"Part of AnyTime Organizer Deluxe from Individual Software Inc - ""Check the time anywhere in the world and know when to communicate. Place up to twelve clocks on your desktop"""
Y	wstimeb	wstimeb.exe	Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it
X	Zango TvTimes	ZANGOT~1.EXE	"ZangoSearch adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.