Internet

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
N	%FP%1776 Internet fts.exe	fts.exe	1776 Internet US ISP software ISP software front-end
U	%FP%1776 Internet FWPortal.exe	FWPortal.exe	1776 Internet US ISP dial-up software
U	AbsoluteShield Internet Eraser	cseraser.exe	"AbsoluteShield Internet Eraser - ""protects your privacy by cleaning up all the tracks of your Internet and computer activities"""
X	Advanced Internet Protocol	cerf.exe	"Added by a variant of the SPYBOT WORM!"
U	Another Internet Explorer Popup Killer	aiepk2.exe	"Another IE Popup Killer - pop-up stopper"
U	AVG Internet Security	avgtray.exe	"System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security
U	BeatNik Internet Clock	BeatNik.exe	"BeatNik Internet Clock is a Windows clock add-on that supports 'skins'. It can also synchronize your computer's clock with an atomic clock"
X	blah service	internet.exe	"Added by a variant of the RBOT WORM!"
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
X	ControlPanel	"systemctrl.exe internet.dll	LoadNetworkProfile"
X	Drivers for Internet Explorer	accesweb.exe	"Added by the STARTPAGE.FW TROJAN!"
N	HP Internet Center	SURFBRD.EXE	Loads the HP Internet center surfboard on startup. HP Internet Center allows you to customize the multimedia keys on the fly without having to go the Control Panel --> Keyboards to change them
X	IEFeatures	Internetfeatures.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	internet	smss.exe	"Added by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	Internet	Internet.exe	"Added by the PWS-CS TROJAN!"
X	Internet	recruit.exe	"Added by the RBOT-AJG WORM!"
X	internet	[trojan filename].exe	"Added by the MIFENG-D TROJAN!"
X	Internet	winlogom.exe	"Added by a variant of the SDBOT WORM!"
X	Internet	nteusodp.exe	"Added by the RBOT-GFJ WORM!"
X	internet	winsas32.exe	"Added by a variant of the SDBOT WORM!"
X	internet	lsass.exe	"Added by the DSPY-A TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
X	Internet	alm7tas.exe	"Added by a variant of the RBOT WORM!"
X	Internet	wins.exe	"Added by the RBOT.AAYF WORM!"
U	Internet Answering Machine	IAMNET~1.EXE	"From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
U	Internet Answering Machine	IAM.exe	"From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
X	Internet Antivirus	IAvir.exe	"Internet Antivirus rogue security software - not recommended
X	Internet Antivirus Pro	IAPro.exe	"Internet Antivirus Pro rogue security software - not recommended
X	Internet Application Driver	expIorer.exe	"Added by the IRCBOT-WK TROJAN!"
U	Internet Call Director	ICD.EXE	"TELUS Internet Call Director (ICD) provides Internet users with real-time call notification while connected to the Internet"
U	Internet Call Manager	ICM.EXE	"Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail"
X	Internet Config	svchosts.exe	"Added by the SDBOT TROJAN!"
X	Internet Connection Wizard	stisvsq.exe	"EasySearch adware"
X	Internet Connection Wizard	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Internet Connection Wizard	stisvsq1.exe	"Added by the DLOADR-AWD TROJAN!"
X	Internet Content Publisher	ICP.EXE	"Added by the RBOT-UD WORM!"
U	Internet Disk Cleaner	CLEARH~1.EXE	"""Internet Disk Cleaner from Elongsoft ""protects your privacy by cleaning up all Internet tracks and past computer activities"""
U	Internet Download Accelerator	ida.exe	"Internet Download Accelerator download manager"
X	Internet download manager service	idman.exe	"Added by the RBOT-BMS WORM!"
X	Internet Exploere Services	urlmon32.dll.exe	"Added by the EVIAN.C WORM!"
X	Internet Explore Microsoft	lEXPLORE.EXE	"Added by the RBOT-AOF WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Internet Explorer	iexplorer.exe	"Added by the LORSIS WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer	IEXPLORE.EXE	"Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer	IExplorer.exe	"Added by the NETHIEF-O BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer	http.exe	"Added as part of a new potential CWS infection
X	Internet Explorer	iexpiore.exe	"Added by the RBOT-AZC WORM!"
X	Internet Explorer	IEPLORE32.EXE	"Added by the AGOBOT-CU WORM!"
X	Internet Explorer	twain.exe	"Added by the AGENT.BEA TROJAN!"
X	Internet Explorer Agent	iexplorer.exe	"Added by the AGENT-BH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer Auto-Update	updt32v5.exe	"Added by the SPYBOT-AB BACKDOOR!"
X	Internet Explorer Configuration	IEXPLORE.EXE	"Added by the SDBOT-UL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer Security	iexplore.pif	"Added by the RBOT-ALQ WORM!"
X	Internet Explorer Sys32	isys32.exe	"Added by the IRCBOT-ADA WORM!"
X	Internet Explorer Updater	lexbac.exe	"Added by the DOWNLOAD TROJAN!"
X	Internet Explorer Updater	iexplorer.exe	"Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer6	IEexplore.exe	"Added by the RBOT.AGC WORM. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer6.0	IEXPLORE.EXE	"Added by the RBOT.ENZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Firewall Layer	tsqla.exe	"Added by a variant of the SPYBOT WORM!"
U	Internet History Eraser	HERASER.exe	"Internet History Eraser - deletes your browsing tracks"
X	Internet Loader1	MSInstall61.exe	"Added by the KWBOT.B WORM!"
X	Internet Mail and News	msqdevl.exe	"EasySearch adware"
X	Internet Mail and News	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Internet Mail and News	msqdevl1.exe	"Added by the DLOADR-AWD TROJAN!"
X	Internet Optimizer	optimize.exe	"Internet Optimizer parasite - detected by Sophos as the DLUCA-G TROJAN and variants"
X	Internet Protocol Configuration Loader	ipcl32.exe	"Added by the SDBOT TROJAN!"
X	Internet Security 2010	IS2010.exe	"Internet Security 2010 rogue security software - not recommended
X	Internet Security Service	msq32.exe	"Added by the RBOT-GFP WORM!"
X	Internet Security Service	msq23.exe	"Added by the RBOT-GQL WORM!"
X	Internet Security Service	msql23.exe	"Added by the RBOT-GML WORM!"
X	Internet Security Service	mysqlwin32.exe	"Added by the RBOT.UX TROJAN!"
X	Internet Security Service	expllorer.exe	"Added by the REFROSO.AFF TROJAN!"
X	Internet Send	More log.exe	Unidentfied adware
X	Internet Server	inetsrv.exe	"Added by the STARTPA-EM TROJAN!"
X	Internet Service	intersvc.exe	"Added by the SPYBOT-DE WORM!"
X	internet service	syscfg32.exe	"Added by the RBOT-QS WORM!"
X	internet service	ssvhost.exe	"Added by a variant of the RBOT WORM!"
X	internet service	svho0st98.exe	"Added by the RBOT.EAT WORM!"
X	Internet Services	systemdev.exe	"Added by the SDBOT-PW WORM!"
X	Internet Services	internet.exe	"Added by the MYTOB.BT WORM!"
X	Internet Services	interserv.exe	"Added by the RBOT.BNT WORM!"
X	Internet Services	Netsvc.exe	"Added by the MYTOB.MN WORM!"
X	INTERNET SERVISES	winz32.exe	"Added by the KWBOT.Z WORM!"
Y	Internet Sharing Server	iss_srvr.exe	"Intel AnyPoint internet sharing software. Now discontinued"
X	Internet Suspention	story.exe	"Added by the WOOTBOT.HV WORM!"
N	Internet Sweeper	Sweeper.exe	"Internet Sweeper - removes unnecessart left over files after browsing the internet"
U	Internet Timer	ITIMER.exe	"Shareware dial-up connection call cost calculator from Ratsoft"
X	Internet Washer Pro	iw.exe	"Internet Washer manages temporary browser files
X	Internet.exe	Internet.exe	"Added by the MAGICCALL VIRUS!"
X	internet.exe	yinyin3345.vbs	"Added by the YINI MACRO!"
X	Internet2 Optimizer	wkfix.exe	"Added by a variant of the RBOT WORM!"
N	InternetCalls	InternetCalls.exe	"InternetCalls - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
X	InternetExplorer2	windows.exe	"Added by the SDBOT-CZP WORM!"
X	InternetExplorer32	iexplore32.exe	"Added by the RBOT-GRA WORM!"
X	InternetGetConnectedState	winupdate.exe	"Added by the SDBOT-JN WORM!"
X	InternetGetConnectedStateEx	winupdate.exe	"Added by the SDBOT-JN WORM!"
X	InternetShield	INTERN~1.EXE	"InternetShield rogue security software - not recommended
X	InternetShield	InternetShield.exe	"InternetShield rogue security software - not recommended
U	InternetSpy	InternetSpy.exe	"Internet Spy - freeware keylogger that tracks all visited websites including the date and exact time these sites were visited. The information is stored in a file that may be accessed by the person who knows where it is saved. Remove unless you installed it yourself!"
X	InternetWasherPro	iw.exe	"Internet Washer manages temporary browser files
X	Internet_Explorer	microsoft.exe	"Added by the BANKER-EUQ TROJAN!"
X	Internet_Explorer.exe	Internet_Explorer.exe	"Added by the BANKER-END TROJAN!"
X	INTERNET_SERVISES	winz32.exe	"Added by the SDBOT.Q TROJAN!"
X	Local Internet Connection	LIC.exe	"Added by the SDBOT-YA WORM!"
X	LOCAL INTERNET WEB DRIVERS FOR WIN32	phqghume.exe	"Added by a variant of the RBOT WORM!"
X	Micrcoft Updat	Internet.exe	"Added by the RBOT-ANA WORM!"
X	Microsoft	internetdat.exe	"Added by the RBOT.ETY BACKDOOR!"
X	Microsoft Internet	expl0rer.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Internet	windows32.exe	"Added by the SDBOT-F WORM!"
X	Microsoft Internet	wincfg16.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Internet Acceleration Utility	iau.exe	"EasySearch adware"
X	Microsoft Internet Acceleration Utility	[path to file]	"Added by the AGENT-CX TROJAN!"
X	Microsoft Internet Acceleration Utility	[path to trojan]	"Added by the SMUTSRCH-A TROJAN!"
X	Microsoft Internet Antivirus Protection	antivirus.exe	"Detected by Kaspersky as the IRCBOT.BSK TROJAN!"
X	Microsoft Internet Dumping Protocol	inetdump.exe	"Added by the IRCBOT.BLL BACKDOOR!"
X	Microsoft Internet Exp	iiexplorer.exe	"Added by the RBOT-KX WORM!"
X	Microsoft Internet Explorer	iexplore.exe	"Added by the POEBOT-J WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft Internet Explorer	iexplorer.exe	"Added by the SDBOT-XN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Internet Explorer	crsys32.exe	"Added by the RBOT.UZ WORM!"
X	Microsoft Internet Explorer	movies.exe	"Added by the BANCOS-DZ TROJAN!"
X	Microsoft Internet Explorer	svzhost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Internet Explorer	mccagent.exe	"Added by the DLOADER-UD TROJAN!"
X	Microsoft Internet Explorer	sysini.exe	"Added by the DELF-LN TROJAN!"
X	Microsoft Internet Explorer	svchost.exe	"Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""drivers"" subfolder"
X	Microsoft Internet Explorer	lEXPLORE.EXE	"Added by the RBOT-AMM WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Microsoft Internet Explorer	svchosts.exe	"Added by the BANCBAN-U TROJAN!"
X	Microsoft Internet Explorer	[path to trojan]	"Added by the BANCBAN-AS TROJAN!"
X	Microsoft Internet Explorer	msngrt.exe	"Added by the SDBOT-GU BACKDOOR!"
X	Microsoft Internet Explorer	_svchost.exe	"Added by the TINY.LX TROJAN!"
X	Microsoft Internet Explorer Manager	ie.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Internet Explorer Update	ieupdate.exe	"Added by the SHEUR.MH TROJAN!"
X	Microsoft Internet Firewall	firewall.exe	"Added by the IRCBOT.MD BACKDOOR! Located in %System%"
X	Microsoft Internet Firewall Manager	GMT16.exe	"Added by the RANDEX.AT WORM!"
X	Microsoft Internet Firewall Update	updater.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Internet Services	Smss32.exe	"Added by the RBOT.MS WORM!"
X	Microsoft Internet Syncing	inetsync.exe	"Added by the IRCBOT.BLL BACKDOOR!"
X	Micrsoft Internet Explorer	IEXPL0RE.EXE	"Added by the RBOT-AQV WORM! Note the number ""0"" in the filename"
X	Modulo 00FE0F01 Host Internet	syschost.exe	"Added by the DELF-KW TROJAN!"
X	Mozilla Firebird v0.8 Internet Browser	netstats.exe	"Added by the IRCBOT.MC TROJAN!"
X	MS Internet Executor 32	MSIXEC32.exe	"Added by the RBOT-AEQ WORM!"
X	MS Internet Explore	MSIEx.exe	"Added by a variant of the RBOT WORM!"
N	MSN Internet Access	trayclnt.exe	Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
X	MSVersion	INTERNETFEATURES.exe	"Added by the POPMON.A TROJAN! - also known as PopMonster adware"
X	Netropa Internet Receiver	Netropa.exe	Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
X	NetworkAssociates Inc	internet.exe	"Added by the LOVGATE.AB WORM!"
X	Protection	Norton Internet Security.exe	"Added by the ELITPER.E WORM!"
X	Real Internet Player	Reaiplay.exe	"Added by a variant of the SPYBOT WORM!"
X	Runtt1	Internet.exe	"Added by the LINEAGE-Q TROJAN!"
X	SP2 Firewall/Internet Updater	crssrs.exe	"Added by the RBOT.BJO WORM!"
X	TCP Internet Services	TCPSVC32.EXE	"Added by the SPYBOT.X TROJAN!"
U	True Internet Color Icon	internetcolor.exe	"Part of 3Deep® from E-Color (now superseded by 3DxWizzard™) - ""With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"""
X	win32 internet server	winserver.exe	"Added by the DERMON-D TROJAN!"
U	Windows & Internet Cleaner Pro	WICleaner.exe	"Windows & Internet Cleaner Pro - ""Powerful and easy to use internet surfing privacy protection & PC security software"""
X	Windows connection manager	Internet.exe	"Added by the RBOT-APN WORM! Note - file is found in the Windows or Winnt folder. Make sure you check the link on this one
X	Windows Internet Browser Services	internet.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Internet Browser Services	internet128.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Internet Browser Services	internet32.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Internet Browser Services	internet64.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Internet Explorer 6	firefox.exe	"Added by the SPYBOT.ANA WORM! Note - this is not the Mozilla Firefox web browser which is always located in %ProgramFiles%\Mozilla Firefox. This file is found in %System%"
X	Windows Internet Manager	svchost.exe	"Added by the IRCBOT-AAC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Internet Protocol	winproc32.exe	"CoolWebSearch Winproc32 parasite variant - also detected as the STARTPA-BF TROJAN!"
X	Windows Internet Protocol	deinst_qfe001.exe	Added by a variant of the Win32.Small TROJAN!
X	Windows Internet Service	wininet.exe	"Added by the RBOT-AUX WORM!"
?	WOOKIT	GestMaj.exe GestionnaireInternet.exe	"Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.