Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X$sys$crash$sys$WeLoveMcCOL.exe"Added by the WELOMOCH TROJAN!"
X$sys$momomomochin$sys$WeLoveMcCOL.exe"Added by the WELOMOCH TROJAN!"
X$sys$umaiyo$sys$WeLoveMcCOL.exe"Added by the WELOMOCH TROJAN!"
X(Default)Mcafee.exe"Added by the AGENT.AY TROJAN! Note - this is not a valid McAfee program and is located in %System%. This malware actually changes the value data of the ""(Default)"" key in HKCU\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X0mcamcap0mcamcap.exe"Added by the COSIAM-H TROJAN!"
Y1A:Stardock MCPmcpserver.exe"Master Control Program for Stardock apps
U24Online ClientCyberoamClient.exe"Related to Cyberroam from Elitecore Technologies Ltd"
Y3CM Link3cmcnkw.exeRequired for a US Robotics WinModem as it provides the link to Windows - won't work without it
UaaLDTaskCompletionamclient.EXE"LANDesk® Management Suite software component"
YActiveShieldmcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
YAdslTaskBar"rundll32.exe stmctrl.dll TaskBar"
UAdvanced SystemCare 3AWC.exe"Advanced SystemCare from IObit - ""helps protect
Xaupdsymcsvc.exe"Added by the ABWIZ.D TROJAN!"
YAVG Anti-Virus Systemavgemc.exe"E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry
YAVG7_EMCavgemc.exe"E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry
Yavgemcavgemc.exe"E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry
YAVG_EMCAVGEMC.exe"AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses"
XAVSystemCarepgs.exe"AVSystemCare rogue security software - not recommended. There are number of variants in this family sharing the same filename and user interface - see here"
YBDMConBdmcon.exe"BitDefender antivirus"
NBelkin PCMCIA WLAN Monitormonitorbk.exeBelkin USB Network Adapter Management utility - can be started manually
Ubtbb_wcm_McciTrayAppMcciTrayApp.exe"System tray access to Motive's Broadband 2.0 configuration and repair utility"
UCallCenter Main ApplicationV3calmcp.exe"""V3 Inc. CallCenter is a free 32-bit
NCamCheckCamCheck.exe"NuCam camera software related"
NCcdecode"rundll32.exe streamci StreamingDeviceSetup"
XCdrom Controllercdromcntrl.exe"Added by the BATTRY-A TROJAN!"
UChamClockChamClock.exe"Chameleon Clock - system tray clock replacement"
YCleanUpmcappins.exeUsed by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
XcmssSystemProcessmcsmss.exe"Added by the PROXYSER-F TROJAN!"
XComcast Networkribiva.exe"Added by a variant of the IRC TROJAN!"
XComcastSUPPORTtgkill.exeComcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
XCOMCFGcomcfg.exe"Added by the TOADCOM.A TROJAN!"
Xcomctl32comctl32.exe"Adware - detected by Kaspersky as the AGENT.AM TROJAN!"
NCommCtrcommctr.exe"""Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!"". Available via Start -> Programs"
Ncontrol panelsmctrlw.exeSystem Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
XControlPanel"systemctrl.exe internet.dll LoadNetworkProfile"
Xcpntmgcsimcss.exe"Added by the MAGICON.A TROJAN!"
Xcpntmgcnavpmc.exe"Added by the SIMCSS TROJAN!"
XCrustydmcpl.exe"Added by the RUSTY WORM!"
UCyberLat Ram CleanerCLRamCleaner.exe"CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
XDMCdmc.exeAdded by Trojan-Downloader.Win32.Dluca.bv TROJAN!
XDNSmc-58-12-0000080.exe"Shorty adware - also detected as the AGENT.FD TROJAN!"
XDNSmc-58-12-0000093.exe"Shorty adware - also detected as the AGENT.FD TROJAN!"
XDNSmc-110-12-0000079.exe"Shorty adware - also detected as the AGENT.FD TROJAN!"
XDNSmc-58-12-0000120.exe"Shorty adware - also detected as the AGENT.FD TROJAN!"
XDNSmc-58-12-0000140.exe"Shorty adware - also detected as the AGENT.FD TROJAN!"
NEasyNetworkMcENUI.exe"McAfee's EasyNetwork user interface - ""enables secure file sharing
XEDxMC110Isass.exe"Added by the VB-NIA WORM!"
YEmailScanmcvsescn.exeRelated to McAfee AntiVirus suite - used to automatically scan incoming e-mails
XeMCryT Sh3ars Panagers[path to worm]"Added by the RBOT-AWI WORM!"
UePower_DMCePower_DMC.exe"Part of Acer Empowering Technology. ""Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles
YFix-it AVmemcheck.exePart of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
UFmctrlTrayFmctrl.EXEGenius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)
?frgukshdrkmck.exe"??"
Xgpmcewindow.exe"Added by the VB.CK WORM!"
XHot_Tarts_mcHot_Tarts_mc.exe"HotTarts adult content dialer"
XieupdateMCP****.exe [**** = random char]"Added by the ASOXY TROJAN!"
Xieupdatemcpdll32.exeAdware downloader trojan
Ximchatimchat.exe"Added by a variant of the IRCBOT TROJAN!"
XIMClassSvhosl.exeAdded by an unidentified WORM or TROJAN!
Ximcsslxmliwvug.exe"Added by the SLAPER.U TROJAN!"
?immcheck.exeimmcheck.exe"Related to I-FORCE driver for force feedback steering wheel?"
UIntelAPMClientamclient.exe"LANDesk® Management Suite software component"
NLogitech Desktop Messengerldmconf.exe"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
NLogitech Desktop Messenger Agentldmconf.exe"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
XM1cr0s0ft S3rcuritysystemconfig.exe"Added by the RBOT.BKB WORM!"
?Mail.commcalert.exe"Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?"
XMalware Catcher 2009MCatcher.exe"Malware Catcher 2009 rogue security software - not recommended
XMCwintrims.exe"Added by the WINTRIM TROJAN!"
XMCMAGICON.EXE"Added by the MAGICON.A TROJAN!"
XMCN/A"Added by the SIMCSS TROJAN!"
XMCWINTRIM.EXE"Added by the WINTRIM.A TROJAN!"
XMcAfeeMcAffeAv.exe"Added by the NETSKY.AL WORM!"
XmcafeeWin32.dll.vbs"Added by the CATCHER-B WORM!"
XMcafee Anti ScanNortonScn.exe"Added by a variant of the RBOT WORM!"
XMcAfee AntivirusMcAfeeAV.exe"Added by a variant of the RBOT WORM!"
XMcAfee Antivirus 32MCAFEEAV32.EXE"Added by the SPYBOT-EH WORM!"
XMcafee Antivirus Monitoring System326VSStatmn326.exe"Added by a variant of the SDBOT WORM!"
XMcafee Antivirus Monitoring System32mnVSStatmn32.exe"Added by a variant of the RBOT WORM!"
XMcAfee Antivirus ProtectionmcafeeAV.exe"Added by a variant of the RBOT WORM!"
YMcAfee Application Installermcappins.exeUsed by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
XMcafee Auto Protectmcafeshield.exe"Added by the RBOT-UH WORM!"
UMcAfee BackupMcAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
UMcAfee Backup and RestoreMcAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
UMcAfee Data BackupLogOnHook.exe"Part of McAfee Data Backup (now Online Backup) - which ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup"
UMcAfee Data BackupMcAfeeDataBackup.exe"McAfee Data Backup (now Online Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
YMcAfee Desktop Firewall TrayFireTray.exe"McAfee Desktop Firewall"
YMcAfee Family Protectionmfp.exe"McAfee Family Protection - which 'is easy-to-use and built to empower parents to say ""yes"" to their children's online interests while protecting them as they learn and explore' and ""protects children of all ages from exposure to inappropriate content
YMcAfee FirewallCPD.EXEFirewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
UMcAfee GuardianCMGrdian.exe"McAfee Guardian shortcut menu on the System Tray (looks like a castle) given access to Internet Security
YMcAfee Managed Desktop AgentMYAGTSVC.EXE"Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
UMcAfee Managed Services TrayStartMyagtTry.exeSystem tray notification for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
UMcAfee Online BackupMOBKstat.exe"System Tray access to McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
UMcAfee Online Backup StatusMOBKstat.exe"System Tray access to McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
XMcAfee Online virus Scanneravp.exe"Added by the RBOT-GCV WORM! Not to be confused with Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory"
XMcAfee Online Virus Scannernzm.exe"Added by the IRCBOT.XV WORM!"
UMcAfee QuickClean ImonitorPlguni.exe"Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection
YMcAfee SecurityCentermcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
YMcAfee SecurityCenterMcUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Xmcafee Software Intrenetmcafee.exe"Added by the RBOT-ATR WORM! Note - this is not a valid McAfee program"
UMcAfee SpamKillerMskAgent.exe"McAfee SpamKiller - rule-based and list-based spam filter. Available as a stand-alone product or included in older versions of Internet Security and Total Protection"
YMcAfee VirusScanmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
YMcAfee VirusScanmcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
YMcAfee VirusScanoasclnt.exe"On-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access
XMcafee VirusScan Managermvcsvm.exe"Added by the SILLYFDC.BBV TROJAN!"
XMcAfee Windows Protectionmcafee32.exe"Added by a variant of the SPYBOT WORM!"
NMcAfee Winguage??"Part of McAfee Nuts & Bolts. ""WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications
UMcAfee.InstantUpdate.MonitorRuLaunch.exe"Instant Updater for McAfee's VirusScan
UMcAfeeDataBackupMcAfeeDataBackup.exe"McAfee Online Backup (formerly Data Backup) - ""takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos"". Available as a stand-alone product or included in Internet Security and Total Protection"
YMcAfeeFireTrayFiretray.exe"McAfee Desktop Firewall"
XMCAFEEIPSsetup.exe"Added by the WHITEWELL TROJAN!"
XMcAfeeScanPlusMcAfeeScanPlus.exe"Added by the MEPCOD TROJAN! This trojan file does not belong to any McAfee Antivirus Software and is found in the Windows or Winnt folder"
YMcAfeeUpdaterUIUpdaterUI.exeMcAfee common updater user interface
YMcAfeeUpdaterUIUdaterUI.exeUpdater user interface for McAfee's VirusScan Enterprise corporate anti-virus and anti-spyware security tool
YMcAfeeVirusScanServiceAvsynmgr.exe"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
YMcAfeeWebscanXWebScanX.exe"From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs
XMcaffe AntivirusMcafeescn.exe"Added by a variant of the SPYBOT WORM!"
XMCAFFE FLD LOADERMCAFFEFLD.EXE"Added by the RBOT-PY WORM!"
XMcaffeemcsheild.exe"Added by the RBOT-FDP WORM!"
Ymcagentmcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
YMCAgentExemcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Ymcagent_exemcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Ymcappinsmcappins.exeUsed by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
Xmceipww[8 random letters].exe"Added by the ZHELATIN.EQ WORM!"
NMcENUIMcENUI.exe"McAfee's EasyNetwork user interface - ""enables secure file sharing
NMChangerMChanger.exe"Media Changer - utility that allows you to change wallpapers
UMCI USB IconUSBIcon.exeMCI USB software used for managing a USB card reader
NMcLogLch_exeMcLogLch.exe"Related to McAfee security suite. This is a non-essential program
XMCM3mcm3.exe"ShopAtHome/SAHagent adware variant"
Ymcmnhdlrmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
NMCPLaunchMCPLaunch.exe"Launcher for Message Center Plus ""which alerts you when conditions arise on your computer that require your attention"" on IBM/Lenovo ThinkCentre desktops
NMcRegWizmcregwiz.exeProduct registration wizard for McAfee's range of internet security tools
XMcrosoftr UpdateMcrosoftr.exe"Added by a variant of the RBOT WORM!"
YMcShld9xmcshld9x.exe"Window 9x/Me on-access scanner for older McAfee's internet security products such as VirusScan and VirusScan Online which scans files in real-time for malware as you access
XMcsoftgfeqzvq.exe"Added by the SDBOT-NV WORM!"
YMCTskShdmctskshd.exe"Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online and used to schedule tasks such as automatic updates
Ymcui_exemcagent.exe"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
YMcUpdateMcUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
YMCUpdateExeMcUpdate.exeAutomatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
YMcVsRtemcvsrte.exe"Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
Ymcvsshldmcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
XMCX Updatewisp.exe"Added by the RBOT-AQH WORM!"
XMCX Updtescorti.exe"Added by the RBOT-ARP WORM!"
UMedia Card Companion MonitorMCC Monitor.exe"Monitor for Media Card Companion from ArcSoft. ""Automates the tedious processes associated with downloading and sharing files from digital cameras
XMemConfigSetupIE.com"Added by the TAPLAK WORM!"
UMemoryCardManagerMemCard.exe"Memory Card Manager - for removable memory cards found on Dell or Lexmark photo printers"
NMessage Center PlusMCPLaunch.exe"Launcher for Message Center Plus ""which alerts you when conditions arise on your computer that require your attention"" on IBM/Lenovo ThinkCentre desktops
XMicrofinder lptt01mcf.exe"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XMicrofinder ml097emcf.exe"RapidBlaster variant (in a ""mcf"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XMicrosoft Internet Explorermccagent.exe"Added by the DLOADER-UD TROJAN!"
XMicrosoft Messenger Management Controlsmsmgmctl.exe"Added by the RBOT-APA WORM!"
XMicrosoft Updatemcupdate.exe"Added by the RBOT.XT WORM! Note - this file is located in %System% and should not be confused with the McAfee antivirus executable as described here"
XMicrosoft Updateimchemaoa.exe"Added by the BANLOAD.KWQ TROJAN!"
XMicrosoft Updatessystemc32.exe"Added by the RBOT-GR WORM!"
Xmlibsysmccomzcinc.exe"Added by the SDBOT-CXS WORM!"
XMMCinisys.exe"Added by the OSCABOT-I WORM!"
Xmmcndmgrmmcndmgr.exe"Added by an unidentified VIRUS
NMMCWINMGMTwinmgmt.exe"Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth ""scheduler"" - refer here"
NMouseCountMC.exe"MouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required"
UmouseElfMC.exe"Genius NetScroll mouse driver - required if you use non-standard Windows driver features"
?mscimcinfo.exe"McAfee Internet Security related. What does it do and is it required?"
Xmsmcmscpbo.exe"ClientMan parasite variant"
Xmsmcmsgdmf.exe"ClientMan parasite variant"
Xmsmcmsongn.exe"ClientMan parasite variant"
Xmsmcmsmc.exe"ClientMan parasite variant"
Xmsmcms****.exe [* = random char]"ClientMan parasite variant"
XMSMcAfeeeAvsynmgr32e.exe"Added by the FRAMAR TROJAN!"
XMSMcAfeehAvsynmgr32h.exe"Added by the FRANGO TROJAN!"
XMSMcAfeeSAvsynmgr32S.exe"Added by the VOLAC or VOLAC.DR TROJANS!"
UMultiCAM InitializerMCamBoot.exe"The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled"
XMultimedia Codecsmcc.exe"Added by the DLOADER-MB TROJAN!"
XNAV Auto Protectmcafee32.exe"Added by a variant of the SPYBOT WORM!"
UNetManageImportnmcpdata.exe"NetManage business software related"
XNetwork ServiceMccTrayApp.exeAdded by an unidentified WORM or TROJAN!
Unmctxthnmctxth.exe"Related to Pure Networks comprehensive home and small business networking software that simplifies network configuration"
UNVIDIA Media Center Library"RunDLL32.exe NvMCTray.dllNvTaskbarInit"
UNVMCTRAY"RunDLL32.exe NvMCTray.dllNvTaskbarInit"
UNvMediaCenter"RunDLL32.exe NvMCTray.dllNvTaskbarInit"
YNvRegisterMCTray"RUNDLL32.EXE NVMCTRAY.DLLNvMCRegisterApp NvCpl.dll"
YNvRegisterMCTrayNview"RUNDLL32.EXE NVMCTRAY.DLLNvMCRegisterApp nView.dll"
NOEMCLEANUPoemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
?PCMCIA Resource Monitornvp2pmon.exe"NVIDIA nForce P2P Driver. What does it do and is it required?"
XPersonal Anti Malware CenterAMC.exe"Registered version of Personal Anti Malware rogue security software - not recommended
UPlus! Alarm ClockAlarmClock.exeAlarm Clock function of Microsoft Plus! Digital Media Edition (which is no longer available)
Xpmc764.exeAdult content dialler
Xpmcqtpmcqt.exe"Added by the DLUCA-V TROJAN!"
?PMCSPMC.Service.Main.exe"Related to MediaCenterService from Pinnacle Systems. What does it do and is it required?"
UPPMemCheckppmemcheck.exe"PPMemCheck - used to be part of PestPatrol before CA's acquisition"
XProgramControlProgramControl.exe"Added by the DLOADR-BAG TROJAN!"
Upumcfgpproxycfg.exe"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
?RAMConnectionCheckerRAMConnChecker.exe"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
?RAMGINAConnWatchRAMConnWatcher.exe"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
URemoteControlrmctrl.exe"Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
Urmctrlrmctrl.exe"Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
URunDLL32"RunDLL32.exe NvMCTray.dllNvTaskbarInit"
Xsacmemdssmcntlwio.exe"Added by the MAILBOT-BZ TROJAN!"
XSalestartmc.exe"Part of SecurePCCleaner
USAMcalSAMcal.exe"SamCal - calendar/reminder program"
Xsdkupdate22SDK0mCORE.exe"Added by the FORBOT-DT WORM!"
Xservices32mc-110-12-0000079.exeAdded by the TrojanDownloader.Agent.rv TROJAN!
Xservices32mc-58-12-0000120.exe"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
Xservices32mc-58-12-0000140.exe"""Shorty"" adware - also detected as the AGENT.FD TROJAN!"
XShellapi32mcvsrte.exeAdded by an unidentified WORM! Note - do not confuse with the McAfee SecurityCenter file of the same name
UShowLOMControl[strange symbol]"Note that there is a strange symbol in the command field and in logs it's shown as ""O4 - HKLM\..\Run: [ShowLOMControl] [strange symbol]"". Additional registry information for the entry is ""Reg_DWORD 0x00000001 (1)"". It means Show ""LAN on Motherboard"" Control. On systems where you can install an external LAN interface
NSimcastSimcastAlerts.exe"Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say"
USkinClockAtomicAlarmClock.exe"Atomic Alarm Clock - ""Alert yourself about important events with different alarms and replace your computer tray clock using different skins. Computer Alarm clock that will play any MP3 file. It can also run a program
USmartRAMMemCleaner.exe"Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional"
Ysmcsmc.exeSygate Firewall
Ysmcspfsmc.exeSygate Firewall
Xsmcsmc.exe"Added by the EBOD TROJAN! Note that this should not be confused with the now discontinued Sygate Firewall which shares the same filename. This file is located in %System%"
YSMC Servicesmc.exeSygate Firewall
YSMC Servicespfsmc.exeSygate Firewall
Xsmcservwinsrv.exe"Added by the AGOBOT-OU WORM!"
YSmcServicesmc.exeSygate Firewall
YSmcServicessmc.exeSygate Firewall
YSmcServicesspfsmc.exeSygate Firewall
Xsmcsssmcss.exe"Added by the SCLOG-AJ TROJAN!"
?Smcsta.exeSmcsta.exe"SMC Networks wireless PCI card driver. Is it required?"
XSmcSVRSmcSVR.exe"Added by the LEGMIR.JU TROJAN!"
USrmcleansrmclean.exe"Srmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. According to Compaq - ""If you disable the entry from loading into startup
Xstart extractingmcafee.exe"Added by the RBOT.FO BACKDOOR! Note - this is not a valid McAfee program and is located in %System%"
XStart Uppingmcrt32.exe"Added by a variant of the SPYBOT WORM!"
XstartkeyXMCHAI.EXE"Added by the BIFROSE-AO TROJAN!"
UStormCodec_HelperStormSet.exe"Storm Codec is a codec pack for Windows"
Xstratasxmconfig.exe"Added by the RBOT-AHR WORM!"
Xstrmsnnrsmsnmcgrs.exe"Added by the RBOT-ACT TROJAN!"
XSygate Personal FirewallMcafeeupdate.exe"Added by the RBOT.YN WORM!"
XSymantec Client Securitysymclient.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XSysStrtsystemc.exe"Added by the AGOBOT-QA TROJAN!"
XSystem Configurator32SYSTEMCFG.EXE"Added by the AGOBOT-KS WORM!"
XSystem Messaging QueueSMCSS.EXE"Added by a variant of the RBOT WORM!"
XSystem Microsoft Coresmc.exe"Added by the RIZO.A TROJAN!"
XSystem Startup Managersmcss.exe"Added by the RBOT.AMD WORM!"
XSystemCheckSystemcheck.exe"Added by the LAVITS WORM!"
XSystemCheckservices.exe"Added by the SOBER-M WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Config\system"
XSystemChecksvchost.exe"Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""DriverLoad"" sub-directory of the Root folder (C:\)
XSystemCheckSysCheckBop32.exe"WINBO adware"
USystemchecksb32mon.exe"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
XSystemCheckerSyschk.exe"Added by the GALIL.F WORM!"
XSystemCleanerClean2.exe"Added by the AUTORUN-AZE WORM!"
XSystemCleanerPROsysclpro.exe"SystemCleanerPro rogue security software - not recommended
XSystemCONF98iSystemCONF98i.exe"Added by the GLITCH TROJAN!"
XSystemCopSystemCop.exe"SystemCop rogue security software - not recommended
UTask CompletionAMCLIENT.EXE"LANDesk® Management Suite software component"
Xtmchooktmchook.exe"Detected by Kaspersky as the VB.AA TROJAN!"
?TomcatStartuphpbpsttp.exe"Apache Tomcat web server
?TomcatStartup 2.5hpbpsttp.exe"Apache Tomcat web server
XUsrManagementConfumcss.exe"Added by the IRCBOT-W TROJAN!"
XVB_runcomctl_32.exeDubious downloader from densmail.com
YVirusScan Onlinemcvsshld.exe"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
Xvmcleanergxlib.exe"Added by the SMALL-HS TROJAN!"
?VMConsole.exeVMConsole.exe"Sony VAIO Media Console - installed on the VAIO Media Integrated Server PCs. What does it do and is it required?"
?voowsmcrhuhdir.exe"??"
YVSOCheckTaskmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
XWinammpmccm.exe"Added by the IRCBOT-HH BACKDOOR!"
XWindows FileSharing Servicemcwsvc.exe"Added by the IRCBOT.AJF BACKDOOR!"
XWindows LoL Layerblvpnmcny.exe"Added by the RBOT-GOR WORM!"
NWindows Media Connect 2WMCCFG.exe"Windows Media Connect from Microsoft - stream digital media files on your computer to digital media receivers (DMRs) that are connected to your home network"
XWindows Media Playermcafe32.exe"Added by the RBOT-YO WORM!"
XWindows Pool Setuppoolmc.exe"Added by the IRCBOT.RU BACKDOOR!"
XWindows Remote Launcherwnpmcs.exe"Added by the IRCBOT.ASX BACKDOOR!"
XWindows Serv PatchMcaffe2005.exe"Added by a variant of the RBOT WORM!"
XWindows Service Agentnimcoo.exe"Added by the RBOT.EWV WORM!"
XWindows System Manager Procwinsmc.exe"Added by the RBOT.JH WORM!"
XWindows UpdateMcAfee.exe"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not a valid McAfee program"
XWindows UpdateMcAfee3.exe"Added by an unidentified WORM or TROJAN! See here"
XWindows Update Servicesmcg.exe"Added by the SDBOT.QY WORM!"
XWindows-Xdatewuamclt32.exe"Added by the SPYBOT.AMUV WORM!"
XWinScMngrwinsmc.exe"Added by the SDBOT-BPZ WORM!"
Xwmcbaaca"rundll32.exe wmcbaaca.dll EnableRunDLL32"
NWMC_RebootCheckunregmp2.exe"Corrects problems with installations of Windows Media Player from version 9 onwards - see here and search for ""unregmp2.exe"""
Xwupdsymcsvc.exe"Added by the ABWIZ.C TROJAN!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.