Keyboard

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	(Default)	KEYBOARD.exe	"Added by the AUTORUN.BUK WORM! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
?	AAAKeyboard	??	"??"
X	DisableKeybaord	"Rundll32.exe Keyboard	Disable"
U	EasyKeyboardLogger	EasyKeyboardLogger.exe	"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
U	HP Gaming Keyboard	razerhid.exe	HP VoodooDNA Gaming Keyboard (powered by Razer) driver - required if you use the additional features and programmed keys/macros
X	IBM Keyboard Driver	ikeybdrv.exe	"Added by the SDBOT.IC TROJAN!"
U	KeyBoard	Keyboard.exe	"
X	keyboard	keyboard.exe [ = number]	"Detected by Kaspersky as the VB.ZG TROJAN!"
X	keyboard	kybrdef_7.exe	"DollarRevenue adware"
X	keyboard	[path to trojan]	"Added by the DLOADR-AOZ TROJAN!"
X	Keyboard	lsass.exe	"Added by the AGENT.US WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %CommonAppData%\Fearghus"
N	Keyboard Customizer	TpKmapAp.exe	"Part of the Keyboard Customizer Utility for IBM/Lenovo Thinkpad notebooks. This is the main user interface for the utility but it doesn't normally seem to be running if enabled at startup. Also
U	Keyboard Manager	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
Y	Keyboard Preload Check	Preload.exe	Millenium Multi-Function Keyboard driver
?	Keyboard Status	KeyStat.exe	"Multimedia keyboard manager for Medion desktop and notebook PCs? Located in %ProgramFiles%\Medion\KeyStat"
X	keyboard_enum	keyboard_enum.exe	"Added by the BDOOR-GP BACKDOOR!"
U	LWBKEYBOARD	KbdAp32A.exe	Keyboard utility for a Labtec brand (and possibly others) keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
U	MagicKeyboard	PreMKBD.exe	"Related to Samsung laptops. Provides ability to program keys to perform specific functions"
X	Microsoft Keyboard Enhance 2.0.	iasrecst.exe	"Added by the BCKDR-QIL BACKDOOR!"
X	Microsoft Keyboard Enhance V2.0	iasrecst.exe	"Detected by F-Prot as the DOWNLOADER2.AILI TROJAN!"
X	Microsoft Taskmanager Updater	keyboard.exe	"Added by the RBOT-ALU WORM!"
X	Microsoft Windows Keyboard service	keyboard.exe	"Added by the RBOT-CRF WORM!"
U	Multi-function keyboard	GWHotkey.exe	"Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail
U	MULTIMEDIA KEYBOARD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
X	MULTIMEDIA KEYBOARD88	smss.exe	"Added by the SILLYFDC WORM! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	NLS Keyboard	keyboard.exe	"Added by a variant of the SPYBOT WORM!"
U	PrivacyKeyboard	PrivacyKeyboard.exe	"PrivacyKeyboard is a product ""that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices
U	SiS Compatible Super VGA Keyboard Daemon	keyhook.exe	"Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys"
U	Smart Keyboard	Smartkbd.exe	Netropa Smart Keyboard driver
Y	Start RF Wireless Keyboard	ktrexe.exe	Yuanxun Electronics RF wireless keyboard driver
?	USB Hub Keyboard Patch	SKBPATCH.EXE	USB HUB Update
X	Windows Keyboard Services	winkeyboard.exe	"Added by the IRCBOT.AFS WORM!"
X	Windows Keyboard Services	winkeybrd.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Keyboard Services	winkeybrd32.exe	"Added by a variant of the IRCBOT TROJAN! See here"
U	WireLessKeyboard	PS2USBKbdDrv.exe	"Related to WireLess Keyboard Multimedia Combo Set by SANSUN Industries"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.