Lan

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	802.11b+g USB Wireless LAN Utility	ZDWlan.exe	802.11b+g USB Wireless LAN Utility
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Controller (and maybe othe.html" title="Access Controller (and maybe othe">Access Controller (and maybe othe
	Access Lock (and maybe others) -.html" title="Access Lock (and maybe others) -">Access Lock (and maybe others) -
	Access Lock (and maybe others) -.html" title="Access Lock (and maybe others) -">Access Lock (and maybe others) -
N	AccessRampLAN01	ARUpld32.exe	"Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file
U	AMO_Taskplaner.exe	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U	AMO_TA~1	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
X	ASDPLUGIN	Finland.exe	"AsdPlug premium rate adult content dialer"
X	ASDPLUGIN	netherlands.exe	"AsdPlug premium rate adult content dialer"
U	Ashampoo Magical Optimizer Taskplaner	AMO_TA~1.EXE	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U	Ashampoo Magical Optimizer Taskplaner	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
X	AV	UPDATE-28062004.exe[25 blank spaces].vbs	"Added by the MIDFIN WORM!"
Y	AVMWlanClient	wlangui.exe	Related to broadband products from avm.de
N	Belkin PCMCIA WLAN Monitor	monitorbk.exe	Belkin USB Network Adapter Management utility - can be started manually
X	Blank AntiViri	AUT0EXEC.BAT StartUp	"Added by the BRONTOK-CJ WORM!"
N	Blitzz BWI715	WLANmon.exe	Blitzz Technology BWI715 Wireless PC modem connection monitor
U	Configuration Utility	wlanutil.exe	"NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)"
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
N	Daily Planner	dayplan.exe	"Daily Planner - discontinued
N	Desktop Plant	AZARE10S.PLT	"Vritual plant from here - this version is an Azalea
U	DT 11Mbps WLAN PC Card Station	DTCARDMonitor.exe	11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
U	DT 11Mbps WLAN USB Station	DTUSBMonitor.exe	11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
U	Eicon NetworksLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
U	Eicon TechnologyLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
N	Event Planner Reminders	PLNRNote.exe	Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
N	Event Planner Reminders Tray Icon	PLNRnote.exe	Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
X	GLF Network Lan Monitor	NPFMNTOR.exe	"Added by the RBOT-AGY WORM!"
X	HELPER	Netherlands.exe	"AsdPlug premium rate adult content dialer variant"
X	HELPER	new_zealand.exe	"AsdPlug premium rate adult content dialer variant"
X	Homeland Network	HomelandNetwork.exe	Homeland Network Notifier - pops ads
N	IPInSightLAN 01	IPClient.exe	"IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. Included with services from BellSouth
X	KillAndClean	KillAndClean.exe	"KillAndClean rogue spyware remover - not recommended
X	LAN	dhcp.exe	"Added by the RBOT-GYI WORM!"
X	Lan	Lan.exe	"Added by the DELF-IT TROJAN!"
X	LAN Driver	landriver32.exe	"Added by the RBOT.BT WORM!"
X	lanbrup	lanbrup.exe	"SafeSurfing adware"
N	Lancement rapide d'Adobe Reader	reader_sl.exe	"Speeds up the time it takes to load the Adobe Reader PDF document reader. ""The Speed Launcher quickly opens and closes all of the files that Acrobat or Adobe Reader will use when the application starts. Opening and closing the files allows your virus protection software to check these programs and add them to its list of safe files"" - see here. Not required for Adobe Reader to function properly. French version"
U	LANDeskInventoryClient	LDIScn32.exe	"LANDesk® Management Suite software component"
U	LanguageMonitor	Oplmsb01.exe	OKI Printer language support monitor
?	LanguageShortcut	Language.exe	"Part of Cyberlink's PowerDVD prior to version 8. Language settings?"
X	LanGuard	languard.exe	"Adware downloader - also detected as the SECONDT-C TROJAN!"
X	LanGuard	[path to trojan]	"Added by the DLOADER-VO TROJAN!"
X	lanmanwrk.exe	lanmanwrk.exe	"Added by the AGENT.AIA TROJAN!"
U	LANMessage Pro	LANMES~1.exe	"LANMessage Pro - ""a powerful tool for communicating with other people on your office/home network"""
U	LanSpeed2	LanSpeed2.exe	Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
?	LanzarL2007	[path] setup.exe	"??"
X	Microsoft LAN32 Protocol	lanXp.exe	"Added by the RBOT-SS WORM!"
X	Microsoft Update Machine	LANWAKE.EXE	"Added by the RBOT-QZ WORM!"
X	mssyslanhelper	msmsgri32.exe	"Added by the RANDEX.D WORM!"
U	NETGEAR WG111T Smart Wizard	wlan111t.exe	"Configuration utility for the Netgear WG111T multi-rate Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
X	Optimize Windows	Kuntilanak.exe	"Added by the SILLYFDC WORM!"
?	PDVD8LanguageShortcut	Language.exe	"Part of Cyberlink's PowerDVD version 8. Language settings?"
X	PersonalAntiSpy Free	pas.exe	"PersonalAntiSpy rogue spyware remover - not recommended
U	Planl�gningsagent	mstask.exe	"Windows Task Scheduler (on Danish language versions of Windows) - displayed as a box with a stopwatch in the System Tray. Required if you have regularly scheduled tasks like defragmenting
U	RtWLan	RtWLan.exe	"Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
X	Servicos	AdobeLanc.exe	"Added by the BANKER-EHR TROJAN!"
U	Sinus 1054 data WLAN Manager	Wifiusb.exe	Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter
X	SmallAndSecure	mssecure.exe	"Added by the RBOT.CU WORM!"
U	Speedport W 100 Stick WLAN Manager	Wifiusb.exe	Wireless management utility for the Speedport W 100 Stick WLAN USB stick
U	T-Com WLAN Manager	TS154USB.exe	Wireless management utility for the T-Com Sinus 154 Data II WLAN adapter
X	TCP Monitoring	LanNSvc.exe	"Added by the RANDEX.AAS WORM!"
U	TI WLAN	TIWLANCu.exe	"Texas Instruments TI wireless LAN products"
U	U.S.Robotics WLAN Adapter Configuration Utility	USRWLAN.exe	"U.S.Robotics LAN Adapter - wireless LAN (WLAN) configuration utility"
X	Update	UPDATE-28062004.exe[25 blank spaces].vbs	"Added by the MIDFIN WORM!"
N	USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	"USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapter. You must uncheck ""Use Windows to configure my wireless settings"" for the program to work properly. Has Site Survey capabilities
X	Video Lan Player	VideoLanPlayer.exe	"Added by the RBOT-MY WORM!"
U	ViGlance	ViGlance.exe	"ViGlance (Windows 7 SuperBar for XP) adds a Windows 7 style SuperBar for Windows XP users and can be loaded at boot time or started manually"
X	w32alanis	mope.scr	"Added by the SINALA WORM!"
X	Windows Ba�lang�� Dosyas�	sistem.exe	"Added by the MUZK WORM!"
X	Windows Messenger 4.14	landisc.exe	"Added by the SDBOT-KR WORM!"
X	Windows Workstation Start Service	mslanmgr.exe	"Added by a variant of the RBOT WORM!"
X	Wlan Drier	Winusb2.exe	"Added by the WOOTBOT.DC WORM!"
X	Wlan Driver	avscan.exe	"Added by the WOOTBOT.DH WORM!"
U	WLAN Manager	WLANManager.exe	Wireless management utility for the T-Com Speedport W 100 Card WLAN PCMCIA card
N	WLAN Status Tray Applet	WLANSTA.EXE	System Tray icon for checking the status of a Wireless LAN
U	wlancfg	wlancfg.exe	Inventel wireless router related - required in order to automatically connect to the Net at bootup
Y	wlancfg5	wlancfg5.exe	"NetGear WG311v3 wireless PCI adapter driver - required in order to automatically connect to the wireless router/gateway at bootup. Note - may not install correctly on Windows9x/ME computers which have Slipstream accelerator installed. Uninstall Slipstream first
N	WLANSTA.EXE	WLANSTA.EXE	System Tray icon for checking the status of a Wireless LAN
Y	WLAN_Cfg.exe	WLAN_Cfg.exe	Linksys Instant Wireless USB Network Adapter driver
X	wtzlank.dll	"rundll32.exe wtzlank.dll	qttwuwc"
U	xPlanetControl	xPlanetControl.exe	"Tool that displays a globe with current day/night zones and clouds on users desktop."
X	ZagrebLand	[trojan filename]	"Added by the RENOS-EH TROJAN!"
X	[various names]	borlandg.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.