Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X(Default)msnupdate.exe"Added by the RBOT-GWT BACKDOOR! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run & HKLM\RunServices in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X.NET.msnmgnr.exe"Added by the DELF.AYF WORM!"
XAdobeReadermsni.exe"Added by the RBOT.DAO TROJAN!"
XAdobeReaderPromsnxpsp.exe"Added by the RBOT-ASK or RBOT-AUS WORMS!"
XAdobeReaderPromsnserve.exe"Added by the SDBOT-AKH WORM!"
XAdobeReaderPromsnservex.exe"Added by the RBOT.AKM BACKDOOR!"
XAdobeReaderPromsnsrcdv.exe"Added by the INJECT-H WORM!"
XAdobeReaderProssysmsn.exe"Added by the RBOT-BGH WORM!"
NAMSNamsn.exe"aMSN Messenger is a multiplatform MSN messenger clone"
Xamsnamsn.exe"Added by the BANKER-BNZ TROJAN!"
XAol Configuration Loaderaimsng.exe"Added by the SDBOT-XE WORM!"
XAOL Messengeraolmsngr.exe"Added by the SDBOT-JF WORM!"
XATI AS Filtermsnse.exe"Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines
Nbgsmsndbgsmsnd.exePrinter driver to generate PDF files from any program
UBitDefender for MSN Messengermsnmon.exe"Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website"
Xblah servicemsnmsgrr.exe"Added by the RBOT.PZ WORM!"
Xblahx servicemsnjompa.exe"Added by the SDBOT.AML WORM!"
Xchina11msnCHINA11MSN.EXE"Added by the ENVID.O WORM!"
XClock Manageramsngr.exe"Added by the SDBOT-XM TROJAN!"
XCompaq Service Driversamsn.exe"Added by a variant of the SDBOT WORM!"
XCompaq Service Driversmsnt.exe"Added by the SDBOT.CQL WORM!"
XCompaq Service Driverswinmsn.exe"Added by a variant of the SDBOT WORM!"
XCompaq Service Driversmsnsvc.exe"Added by the RBOT.BKT WORM!"
XCompaq32 Service Driversmsnt32.exe"Added by the RBOT.BVF WORM!"
XConfiguration Loadermsnss.exe"Added by the GAOBOT.AUS WORM!"
XConfiguration Loadermsnmsgr.exe"Added by the SDBOT-SO WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
Xctfmonmsnmsgr.exe"Added by the BDOOR-JV BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XCurrent32msnpla.exe"Added by the SDBOT-DIS WORM!"
Xdatamsngs.exe"Added by the RBOT-ADQ WORM!"
XeMessengeremsn.exe"Added by the RBOT.AHO BACKDOOR!"
Xethernetmsnger.exe"Added by a variant of the SDBOT WORM!"
XFirewall Updatermsnupdateit.exe"Added by the RBOT-AAQ WORM!"
XFKS v2.0msngr.exeAdded by an unidentified WORM or TROJAN!
XFlash Mediazrpk��'�'%''msn'�%'fix''.exe"Added by a variant of the IRCBOT BACKDOOR!"
XFlash Mediaskxs��'�'%''msn'�%'fix''.exe"Added by the AGENT.ZOY TROJAN!"
Xhotefixmsnmanegers.exe"Added by the IRCBRUTE.AS TROJAN!"
Xhotfixmsnnmaneger.exe"Added by the WOOTBOT.AF WORM!"
XICQMsn[path to trojan]"Added by the RANCK-AH TROJAN! The most common example is ""cbfks.exe"" located in %System%"
XImMsntimed.exe"Added by the WEBDOR.AK TROJAN!"
XInetMSNmsnet.exe"Added by a variant of the SDBOT TROJAN!"
UInfoPenMSNInfoPenIM.exe"InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand"
XIntersoft Msngrintersoftmsngr.exe"Added by the AGOBOT-NW WORM!"
XJava32 Configuration Loadermsnmesgr.exe"Added by a variant of the RBOT WORM!"
XLive Messangerwllmsngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XLive Windows Messenger Versionmsnmessage7.7.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XLive Windows Messenger Versionmsnmsngrlive.exe"Added by a variant of the IRCBOT BACKDOOR!"
Xlnternet ExplorerAMSNDMGR.EXE"Added by the KWBOT.R WORM! Note that the ""l"" is a lower case ""L"" and not an upper case ""I"""
XLTM2msns6"Added by the LITMUS.C TROJAN!"
XMedia Loadmsn32.exeAdded by a unidentified WORM or TROJAN!
XMedia Servicemsn64.exe"Added by the SPYBOT.EV WORM!"
XMedia servicemsnmsgxr.exe"Added by the SDBOT.TF WORM!"
XMedia X ServicesMSNGRx.exe"Added by the RBOT.AUL WORM!"
XMedia-XP-Service-Pack3msnzx.exe"Added by the SDBOT-ACW WORM!"
XMessengerWmsngr.exe"Added by a variant of the RBOT WORM!"
NMessengerMsnMsgr.exe"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → General → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 8.*"
XMessengermsnmsgrr.exe"Added by the RBOT-GYK WORM!"
XMessenger Blockmsngrblock.exe"Added by the PATOO WORM!"
XMICROSFT RAMA UPDATE SUPPORTMSN32.EXE"Added by the RBOT-AWJ WORM!"
XMicrosoftmsngerf.exe"Added by the RBOT-GLW WORM!"
XMicrosoft .NET Confinguratormsnconf.exe"Added by an unidentified VIRUS
XMicrosoft Genuine Logonmsnmsg.exe"Added by the IRCBOT-XH WORM!"
XMicrosoft Help SVCmsnmngr.exe"Added by the SDBOT-PQ WORM!"
XMicrosoft Instant Messengermsngmsngr32.exe"Added by the SPYBOTER.GEN TROJAN!"
XMicrosoft Internet Explorermsngrt.exe"Added by the SDBOT-GU BACKDOOR!"
XMicrosoft messenger sdmsngersd.exeAdded by an unidentified TROJAN!
XMicrosoft Messenger XPMSMSN32.exe"Added by the RBOT-ZP WORM!"
XMicrosoft MSN 7 Servicesmsnmsg.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosoft MSN 7 Servicesmsnmsger.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosoft MSN Messengermsnmnsgr.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft Msn Messengermsmsgs.exe"Added by the BUZUS.AYX TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
XMicrosoft MSN Servicesmsnsm.exe"Added by the RBOT.ARV BACKDOOR!"
XMicrosoft MSNGR32 Protocolmsngr32.exe"Added by a variant of the SPYBOT WORM!"
XMicrosoft msnserumsnseru.exe"Added by the RBOT-APB WORM!"
XMicrosoft MsnSTmsnst32.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Netview Component v5.1msnv32.exe"Added by the RANDEX.F WORM!"
XMicrosoft Networkmsnet.exe"Added by the MOCKBOT.A WORM!"
XMicrosoft Networking Agent For SP2msnac32.exe"Added by the SPYBOT.PEN WORM!"
XMicrosoft QMGRmsnqmgr.exe"Added by the IRCBOT-S TROJAN!"
XMicrosoft Server Applacationsmsnmsg.exe"Added by the AGOBOT.BBM WORM!"
XMicrosoft Service Informationmsnservices.exe"Added by the RBOT.ID WORM!"
XMicrosoft Svchost local servicesmsnserver.exe"Added by the RBOT-GPM WORM!"
XMicrosoft System Firewall 2006.2msnmsgr.exe"Added by a variant of the SDBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMicrosoft System Servicesmsnmgsr.exe"Added by the KELVIR.K WORM!"
XMicrosoft UpdateMsnmsngr.exe"Added by the RBOT.BQS WORM!"
XMicrosoft Updatemsnmsgl.exe"Added by a variant of the SPYBOT WORM! See here"
XMicrosoft web updatewebmsn.exe"Added by the RBOT-EMQ WORM!"
XMicrosoft Windows DLL 32-BITmsncheck32.exe"Added by the SDBOT-XX WORM!"
XMicrosoft Windows Updatemsnmessenger.exe"Added by the SDBOT.AJ WORM!"
XMicrosoft Windows Updatemsnwun.exe"Added by the SDBOT-RM WORM!"
XMicrosoft Windows UpdateMSNMSGR.EXE"Added by the SDBOT-WM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMicrosoft Windows Update Servicemsnmsg.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosoft Windows Updatermsnupdateit.exe"Added by the AGOBOT-RL WORM!"
XMicrosoftCorpmsnrmgs.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoftf DDEs Controlmsnn.exe"Added by the RBOT-AXT WORM!"
XMicrosoftMessengermsnserv.exe"Added by the DARKER.M WORM!"
XMicrosoftmsn32.exemicrosoftmsn32.exe"Added by the CERTIF-C TROJAN!"
XMicrosoftNAPCmsnrmgs.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosofts Help Servicesmsnmngr.exe"Added by the SDBOT-PJ WORM!"
XMS MSN Menssenger 7.0MSMSN7.exe"Added by the RBOT-ACA WORM!"
XMS MSN Menssenger 7.0MSEXPORT.exe"Added by a variant of the SDBOT WORM!"
XMS Unix Binarymsnupdate.exe"Added by the RBOT-AAM WORM!"
XMS Unix Binarymsnq3insller.exe"Added by the RBOT.GXH BACKDOOR!"
XMSMessngermsnupd.exe"Added by the RBOT-ADY WORM!"
Xmsmsngrmsmsngr.exe"Added by the DOPBOT-B WORM!"
Xmsnsystem32.exe"Added by the KITRO.A WORM!"
Xmsnmsnmsg.exe"Added by the RBOT-GO WORM!"
XMSNmsnmsgs.exe"Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe
XMSNctfmoons.exe"Added by the SPYBOT.HI WORM!"
XMSNmsnmesengers.exe"Added by the RBOT-ME WORM!"
XMSNMSN.exe"Added by the MINIT WORM!"
XMSNmsnmsgr.exe"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
Xmsnmsnsvc.exe"Added by a variant of the SDBOT WORM!"
XMSNmsn16.exe"Added by the SDBOT-VN WORM!"
XMSNmsnsgr.exeAdded by an unidentified WORM or TROJAN!
XMSNinstall.exe"Added by the AGENT-GDO TROJAN!"
XMSNnetstats.exe"Added by the IRCBOT.UXP WORM!"
XMSNscvhost.exe"Added by the IRCBOT-ZW WORM!"
XMSNwdlrss.exe"Added by a variant of the SDBOT TROJAN!"
XMSNwkssvr.exe"Added by the PUSHBOT.S WORM!"
XMSNFixdriver.exe"Added by the SILLYFDC.BBY WORM!"
XMSNiTuneshelp.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSNlsass32.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSNmsscomd.exe"Added by a variant of the SPYBOT WORM! See here"
XMSNsystems.exeIdentified as a variant of the Backdoor.PosionIvy keylogging malware
XMSNtaskngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSNwkssvrs.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSNwksvr.exe"Added by the IRCBOT-XU WORM!"
XMSNwmev.exe"Added by a variant of the SPYBOT WORM! See here"
XMSNkys7r.exe"Added by the AUTORUN-AR WORM!"
XMSNservices51651.exe"Added by the IRCBOT-AAL TROJAN!"
XMsn"rundll32.exe ilss32.dllnetwork"
Xmsnwinlogon.exe"Added by the PROSTI.AA BACKDOOR! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Media"
XMSNmsnmsgx.exe"Added by the RBOT-PZ WORM!"
XMSNmsservice.exe"Added by the IRCBOT-ABZ TROJAN!"
XMSNsmsss.exe"Added by the BUZUS-D WORM!"
XMSNsvchost.exe"Added by the PUSHBOT.FA WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XMsn 8.0 Livemsn.exe"Added by the BANKER.EIE TROJAN!"
XMSN 9.0 Plus[random letters].exe"Added by the RBOT-ALY WORM!"
XMSN Administration For Windowsmsnadp32.exe"Added by the BROPIA.W WORM!"
XMSN angcssrss.exe"Added by the FORBOT-CE WORM!"
XMSN Auto-Updatermsnaupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Auto-Updatermsnupdates.exe"Added by the AUTORUN.WORM.GEN WORM!"
XMSN BETAservice.exe"Added by the RBOT.AUU WORM!"
XMSN Boostermsnbooster.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsn Bootmsnbootcfg.exe"Added by the IRCBOT.BFU BACKDOOR!"
XMSN Checkermsnchecker.exe"Added by the SDBOT-AGB WORM!"
XMSN Client Managermsnclimgr.exe"Added by the AUTORUN-FV WORM!"
XMSN CNF Managermsncnfmgr.exe"Added by the VUNDO TROJAN!"
XMSN Communication Managermsncommgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMsn Configmsngf.exe"Added by the RBOT-QG WORM!"
XMSN Configurationmsnconfig.exe"Added by a variant of the IRCBOT TROJAN!"
XMsn Configuration Loadermsngms.exe"Added by the KELVIR.T WORM!"
XMSN Configuration Loadermsmsncfg.exe"Added by the AGOBOT-KX BACKDOOR!"
XMSN CST Managermancstmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Database Clientmsndbcli.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Debug Mgrmsndebugs.exe"Added by a variant of the IRCBOT TROJAN!"
XMSN Explorermsnexplorer.exe"Added by the AGENT-CAX TROJAN!"
XMSN Explorerexplorer..exe"Dropper for the Ciadoor.cb TROJAN!"
XMSN File & Folder Sharing Appmsnfileshare.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN File Configurationmsnfilecfg.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN File Sharingmsnusr.exe"Added by the SLENFBOT.AM WORM!"
XMSN File Sharing Wizardmsnsharewiz.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN File Sharing!msnuser.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Funny Imagesimsngsr.exe"Added by the AGOBOT-TT WORM!"
XMSN Gaming ZoneTwain.exe"Added by the AGENT.BEA TROJAN!"
XMSN Hostnmsnhostn.exe"Added by a variant of the IRCBOT BACKDOOR!"
NMSN Internet Accesstrayclnt.exeQuick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
XMSN Live Clientmsnlvclient.exe"Added by the IRCBOT.AWF BACKDOOR!"
XMSN Live Messangermsnlivegs.exe"Added by the RBOT-FSG WORM!"
XMSN Managercvss.exe"Added by a variant of the SPYBOT WORM!"
XMSN Managermscmgr.exeUnidentified malware - causes multiple browser windows to open
XMSN Managermsnmgrsv.exe"Added by the IRCBOT.BAZ BACKDOOR!"
XMSN Managerusnmsn.exe"Added by a variant of the IRCBOT TROJAN!"
XMsn Message Acount Helper 7.7msnmessage7.7.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Message Background loader[path to worm]"Added by the RBOT-AIE WORM!"
XMSN Message Servicemsnmsg.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsn Messagermsnmsgr.exe"Added by the DOWNLOADER.19456.C TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSN Messagermsnmgr.exe"Added by the IRCBOT-ACD WORM!"
XMSN Messagesmsnmesg.exe"Added by the RBOT-ACN WORM!"
XMSN Messagesmsnmessgs.exe"Added by the SLENFBOT.UC WORM!"
XMSN Messangermsnmsng.exe"Added by the SDBOT.XN WORM!"
XMSN messangermsnmsgsm.exe"Added by the RBOT-FMP WORM!"
XMSN Messangermsnmsgsmn.exe"Added by the RBOT-FOQ WORM!"
XMsn Messangercrsss.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMsn Messangermsnmsgem.exe"Added by the RBOT.BLL BACKDOOR!"
XMSN MessangerSystem.exe"Added by the IRCBOT-AFX TROJAN!"
XMSN Messanger Livewinntmsn.exe"Added by the RBOT-FSO WORM!"
XMsn Messengwindns.exe"Added by a variant of the RBOT WORM!"
XMsn MessengeIExplorer.exe"Added by the DELF-LL TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMSN messengermessenger.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger
XMsn Messengermsnmsgs.exe"Added by the LOONY-P TROJAN! Note - not to be confused with msmsgs.exe
XMSN MessengerReosmsngr.exe"Added by a variant of the SPYBOT WORM!"
XMSN MESSENGERmsmmsgr.exe"Added by the KELVIR.Q WORM!"
XMSN Messengermsnmsgr.exe"Added by the AGOBOT.AOQ WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSN Messengermsmsgs.exe"Added by the ZLOB TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
XMSN Messengermsnmsngr.exe"Added by a variant of the RBOT WORM!"
XMSN MessengerIExplorer.exe"Added by the BANKER-EU TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMsn Messengermsnmsnr.exe"Added by the BANKER-GG TROJAN!"
XMSN MessengerPIC1324.exe"Added by the CHOKE.C WORM!"
XMSN Messengerexplorer..exe"Dropper for the Ciadoor.cb TROJAN!"
XMsn Messengernkbf.exe"Added by the RBOT-GMQ WORM!"
XMSN Messengerlive.messenger.com"Added by the DELF.AOI BACKDOOR!"
XMsn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
XMSN Messengermsnmsxp.exe"Added by the AGOBOT-O WORM!"
NMSN MessengerMsnMsgr.exe"MSN Messenger utility (now replaced by Windows Live Messenger) - available via the Start menu. Disable by clicking on Tools → Options → General → deselect ""Automatically run Messenger when I log on to Windows"""
XMSN Messenger 32msniu.exe"Added by the RBOT-AWB WORM!"
XMSN Messenger 323msniu3.exe"Added by the RBOT-AXB WORM!"
XMSN Messenger 6.2tyd.exe"Added by a variant of the RBOT WORM!"
XMSN MESSENGER 9.0messengerr.exe"Added by a variant of the RBOT WORM!"
XMSN Messenger BETA 7bbsdf.exe"Added by the RANKY.AA TROJAN! Note - this is not a valid MSN Messenger variant"
XMSN Messenger Inbox Loadermsninbox.exe"Added by the SLENFBOT.YG WORM!"
XMSN Messenger Live Loginmsnmessengerlive.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Messenger Live Windowsmessengerlive.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN messenger servicemssgs.exeAdded by an unidentified TROJAN!
XMsn Messenger Servicemsnmsg.exe"Added by the SDBOT.BMU WORM!"
XMSN Messenger Service Startermsnmgsr.exe"Added by the RBOT-AOS WORM!"
XMSN Messenger Service Startupmsnservice.exe"Added by a variant of the RBOT WORM! See here"
XMSN Messenger Servicesmsnmgr.exe"Added by the RBOT.ADF TROJAN!"
XMSN Messenger Servicesmsnmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsn Messenger Updatemsnupdate.exe"Added by a variant of the RBOT WORM!"
XMsn Messenger updatemsnservice.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Messenger User Controlsmsmsgr.exe"Added by the KELVIR.HI WORM!"
XMsn MessengersMSNMSGR.EXE"Added by the RBOT.KX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSN MessenggerMsRun32.exe"Added by the IMAUT.CO WORM!"
XMsn Messsengerregsvr.exe"Added by the AGENT-GXM TROJAN!"
XMSN MMISSENGERmssmmspgr.exe"Added by the KELVIR.AJ WORM!"
XMSN P2P Managermsnp2pmgr.exe"Added by the SLENFBOT.YH WORM!"
XMsn Patchmsndp.exe"Added by the RBOT.AAI WORM!"
XMsn Patchesmsndr.exe"Added by a variant of the SDBOT WORM!"
XMsn Plus Updatermsnplus.exe"Added by the RBOT-MU WORM!"
XMSN Popup Blockermsnpopblck.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsn Processe Managermsni32.exe"Added by the RBOT-ADX WORM!"
NMSN Quick ViewMsndc.exeQuick way to connect to MSN internet service
XMSN Registry loadermsmnwin.exe"Added by the KELVIR.FK WORM!"
XMSN Routermsnrouter.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN RPC Managermsnrpcmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Rx Managermsnrxmgr.exe"Added by an unidentified WORM or TROJAN! See here"
NMSN Search ToolbarWindowsSearch.exe"System Tray access to Windows Desktop Search for XP from Microsoft - which adds additional search options including a search box on the Taskbar. For this version
XMSN Security Agentmsnsecure.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Servmsmsnserv.exe"Added by the IRCBOT.AVF BACKDOOR!"
XMsn Servmsnserv.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Servermsmsnserver.exe"Added by the IRCBOT.AUS BACKDOOR!"
XMSN servicemsnmgr16.exe"Added by a variant of the RBOT WORM!"
XMSN Serviceamsnmsgrs.exe"Added by a variant of the SDBOT WORM!"
XMsn Servicematrixcam.exe"Added by the MYTOB.JH WORM!"
XMsn Serviceraloded.exe"Added by the MYTOB-DY WORM!"
XMSN servicemsnmsgr16.exe"Added by the RBOT-RZ WORM!"
XMSN serviceNTDKRN.EXE"Added by the RBOT.UJ WORM!"
XMSN Servicemsnsvc.exe"Added by the SLENFBOT.EG WORM!"
XMSN Service Updateswinproc.exe"Added by the KELVIR-BB WORM!"
XMSN Service Utilitiesnkn.exe"Added by the KELVIR-BC WORM!"
XMSN Service!msnservice.exe"Added by a variant of the RBOT WORM! See here"
XMSN Servicermsnsrv.exe"Added by a variant of the IRCBOT TROJAN!"
XMSN Servicermsnservicer.exe"Added by the SLENFBOT.PQ WORM!"
XMSN Servicesmsnserv.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Servicesmsnservice.exe"Added by the IMPARD-A TROJAN!"
XMSN Settingsmsnsettings.exe"Added by the IRCBOT.AWH BACKDOOR!"
XMSN Settings Managermsnsetmg.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN SetupMSN.msn"Added by the JAMBU WORM!"
XMSN Softwaremsnsoftware.exe"Added by the IRCBOT.AWD BACKDOOR!"
XMSN Startmsnmsgr7.exe"Added by the RBOT-PH WORM!"
XMsn Startupmsnstartup.exe"Added by the ARBOT.AA WORM!"
NMSN Toolbarmswinext.exe"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
XMSN Tray Monitormsnmsgr.exe"Added by the SDBOT.FKX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%\inetsrv"
XMSN Updatemscon.exe"Added by the RBOT-QA WORM!"
XMSN Updatemsn32.exe"Added by the RBOT.AHN WORM!"
XMSN UpdateDLLCON.EXE"Added by the RBOT-EA WORM!"
XMSN Update Cfgmsnupdbt.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Update Clientmsnupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Update Clientmsnupdcli.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMsn Update Manager (Sp2)MSMSGS.EXE"Added by the AGOBOT-NL WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
XMsn Update Serviceuserx.exe"Added by the MYTOB.JF WORM!"
XMSN Update Servicemsnupdsv.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsn Update SUPPORT[random filename]"Added by the RBOT-BPS WORM!"
XMSN Updatermsnms.exe"Added by the FORBOT-CG WORM!"
XMsn Updatermsnplugins.exe"Added by the RBOT-HS WORM!"
XMsn Updaterwindatemanager.exe"Added by the SDBOT.TS WORM!"
XMSN UPDATERSvirtualmemory.exe"Added by the RBOT-JK WORM!"
XMSN Updatingmsnupdate.exe"Added by the QHOST.AEI TROJAN!"
Xmsn upddatemesenger.exe"Added by the RBOT-AVZ WORM!"
XMSN Usermymsnusr.exe"Added by the IRCBOT.AVD BACKDOOR!"
XMSN User Servermsnserver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN User Server!msnservices.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN User Servicemsnsvc.exe"Added by the SLENFBOT.NS WORM!"
XMSN User Service!msnserv.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN User Servicesmsnuserv.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN User Svcmsnusnsvc.exe"Added by the IRCBOT.AVV BACKDOOR!"
UMSN Video EnhancedMSNVE.exe"""MSN Video Enhanced can play videos that have dramatically improved video quality and sound. It can play the latest high-quality videos at the best possible quality."" No longer appears to exist"
NMSN Webcam Recorderml20gui.exe"""MSN Webcam Recorder is a tool that allows you to record video streamed to and from your computer by MSN Messenger's Webcam Feature"""
Xmsn.exeson.exe"Added by the STARTPA-GS TROJAN!"
XMSN32 X ServiceMSN32x.EXEAdded by an unidentified WORM!
XMSN6.1 Auto-Updaterv6msn.exe"Added by the AUTORUN-MM WORM!"
XMSN8m Startupmsn8m.exe"Added by a variant of the RBOT WORM!"
Xmsnager32svchostt.exe"Added by the WOMANIZ.E TROJAN!"
Nmsnappaumsnappau.exe"Updater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to ""update"" the toolbar"
XMsnarratormsnarrator.exe"Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware"
XMSNavWHMSWkwrH.exe"Added by the ANAV-A WORM!"
Xmsndrvsysmsndrvsys.exe"Added by the BROGGER-D TROJAN!"
XMSNETmsnet.exe"Added by the BOA WORM!"
XMsnExplorerwinagent.exe"Added by the BDOOR-EQ BACKDOOR!"
XMsnExplorerMSEXPLOREN.EXE"Added by the BDOOR-EB BACKDOOR!"
XMsnExplorerSHCH.EXE"Added by the BDOOR-EB BACKDOOR!"
XMsnExplorerSVCHST.EXE"Added by the BDOOR-EB BACKDOOR!"
XMsnExplorermsnexploren.exe"Added by the TACTSLAY.B TROJAN!"
XMsnExplorersdhch.exe"Added by the TACTSLAY.B TROJAN!"
?MsnFixermsnfixjs.js"Located in the HPbinmsnfix directory of a HP PC"
XMSNGrabberMSNgrabber.exe"Added by the ENVID.A WORM!"
Xmsngta32msngta32.exe"Added by a variant of the RBOT WORM!"
NMSNIAMSNIASVC.EXEAdded with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
Xmsnload32.exemsnload32.exe"Added by the BANCOS.M TROJAN!"
XMSNMESENGERMain.exe"Added by the PRORAT TROJAN!"
Xmsnmessengermsnmessenger.exe"Added by the BANCBAN-KJ TROJAN!"
XMsnMessengerSvcmsnmsgr.exe"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
Xmsnmgnrmsnmgnr.exe"Added by the KOLAB.TC WORM!"
Xmsnmgrmsnmgr.exe"Added by the BIFROSE-K WORM!"
UMsnMonitorMsnMonitor.exe"MSN Messenger Monitor Sniffer surveillance software for the MSN instant messenger. Uninstall this software unless you put it there yourself"
Xmsnmsgasgag.exe"CoolWebSearch parasite variant"
XmsnmsgTBC.exeAdded by an unidentified TROJAN!
Xmsnmsgmsnmsg.exe"Added by the BANKER-CLX TROJAN!"
Xmsnmsg.exemscmd32.exeAdded by a variant of the AGENT.AH TROJAN!
Xmsnmsg.exemsnmsg.exe"Added by the BANCBAN-KN TROJAN!"
Xmsnmsgq32msnmsgq.exe"Added by the TACTSLAY.H TROJAN!"
Xmsnmsgq32msnmsgq32.exe"Added by the TACTSLAY.F TROJAN!"
Xmsnmsgq32sssasasb32.exe"Added by the TACTSLAY.F TROJAN!"
Nmsnmsgrmsnmsgr.exe"Windows Live Messenger or the older MSN Messenger utility - available via the Start menu. For Windows Live Messenger
XMsnMsgrMsnMsgrs.exe"Added by the NETSKY.AD WORM!"
XMsnMsgrmsnmsgr.exe"Added by the ANNEW-FAM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMsnmsgr.exelsass.exe"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root directory (i.e. C:\ or D:\)"
Xmsnmsgr32-.exemsnmsgr-.exe"Added by a variant of the SPYBOT WORM!"
XMSNMSGR5MSNMSGR5.exe"Added by the RBOT.PQ WORM!"
XMSNMSGREswef.batIRC backdoor TROJAN or WORM!
XMSNMSGRRswin.batIRC backdoor TROJAN or WORM!
XMSNMSGRSswe.batIRC worm or backdoor trojan!
XMSNMSGRSswiss.batIRC worm or backdoor trojan!
XMSNMSGRS1swed.batIRC backdoor TROJAN or WORM!
Xmsnmsgs.exemsnmsgs.exe"Added by the BANKER-HK TROJAN! Note - not to be confused with msmsgs.exe
Xmsnmsgsgsmsnmsgsgs.exe"Added by the ""Catal"" alias Spy.Delitall.B backdoor TROJAN!"
Xmsnmsgy[path to file]"Added by the BANKER-EQ TROJAN!"
Xmsnntwinampb.exe"Chinese originated adware - detected by Kaspersky as the AGENT.TL TROJAN!"
Xmsnntwinampf.exeAdded by the SMALL.DTS TROJAN!
XMSNPluginSrIvcsn3vasap23.exe"Added by a variant of the RBOT WORM!"
XMSNPluginSrvcsp6.exe"Added by the SDBOT.AKJ or RBOT-VJ WORMS!"
XMSNPluginSrvcssagate.exe"Added by the SDBOT.AKJ WORM!"
XMSNPlusmsnplus.exe"Added by the BANKER-DAN TROJAN!"
XMSNS PLUS XP2msdupd.exe"Added by the RBOT-BCE WORM!"
Xmsnsched2msnsched2.exe"Added by the SPYBOT.NNT WORM!"
Xmsnscr.exemsnscr.exe"Added by the CERTIF-P TROJAN!"
XMSNServiceMSNService.exe"Added by the CARPET.C WORM!"
Xmsnsgsmsnsgs.exe"Added by the CHEUKO-B TROJAN!"
Xmsnshedmsnshed.exe"Added by the RBOT-YN WORM!"
XmsnsmgrMsnMsr.exe"Added by the LOONY-N TROJAN!"
Nmsnsyslogmsnappm.exe"Related to Messenger Applications. When you uninstall the trial version the msnappm keeps saying (You have xx days left) this is adware and it very annoying"
XMSNSysRestorepc32.exeAdded by a variant of the MASTAK VIRUS!
XmsnToolbaarmsnmsgesc.exe"Added by the RBOT.BMF WORM!"
Xmsnupdtkolie.exe"Added by a variant of the RBOT WORM!"
XMsnWinmessagewin.exe"Added by the BANCBAN-D TROJAN!"
NMSN Toolbarmswinext.exe"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
Xnonepmsngr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XNvMsnWIsass.exe"Added by the BROPIA.K WORM!"
XOfficesmsnmgd32.exe"Added by the FORBOT-DV WORM!"
XOfficeWord Monitormsn32.exe"Added by the RBOT-GUE WORM!"
XOffice_appmsnmrgs.exeAdded by a variant of the VBBANC-A TROJAN!
Xpicviewmsnmsgr.exe"Added by the BANLOA-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %Windir%"
XPlug And Playmsnmsg.exe"Added by the RBOT-ID WORM!"
Xpmsngr.exepmsngr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XRun Msn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
XSakemsneqlsimenu.exe"Added by the SDBOT.BTO WORM!"
XSchedulermsnexploren.exe"Added by the TACTSLAY.B TROJAN!"
XSecurity Patchesmsnkn.exe"Added by the RBOT.WW WORM!"
XService Driversmsnpg.exe"Added by the RBOT.BMD WORM!"
XService DriversMSNMEssenger.exe"Added by a variant of the RBOT WORM!"
XService Monitormsnfilen.exe"Added by the RBOT-ALE WORM!"
XService Monitormsnserve.exe"Added by the SPYBOT.YQW WORM!"
XShellApiSHELLMSN.EXE"Added by the NETDEV.B TROJAN!"
USimpLite-MSNSimpLite-MSN.exeRequired if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)
Xsms_msnsms_msn.exeAdded by an unknown WORM or TROJAN!
Xsms_msn40sms_msn40.exeAdded by an unknown WORM or TROJAN infection
XSN Messengermsnmsgr.exe"Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XSporeMsNews.vbs"Added by the SORPE.A WORM!"
XSSL Manageramsnmsgs.exe"Added by a variant of the SDBOT WORM!"
Xsssasasb32msnmsgq32.exe"Added by the TACTSLAY.F TROJAN!"
XStartKeymsnmsie.exe"Added by the BIFROSE.M BACKDOOR!"
Xstrmsnmgrsmsnxmsgrsc.exe"Added by the SDBOT.JDR WORM!"
Xstrmsnmsgrmsnmsgrs.exe"Added by the RBOT-ACQ WORM!"
Xstrmsnmsgrsmsnmsgrsc.exe"Added by a variant of the RBOT WORM!"
Xstrmsnnmsmsnmegrs.exe"Added by the SDBOT-YU TROJAN!"
Xstrmsnnrsmsnmcgrs.exe"Added by the RBOT-ACT TROJAN!"
Xstrmsoumsmsnmegrse.exe"Added by the SDBOT-ZK TROJAN!"
XSvcH0stmsnexploren.exe"Added by the TACTSLAY.B TROJAN!"
Xsvshostdrivermsnmessengerupdate.exe"Added by the SDBOT-BI BACKDOOR!"
XSygate Personal FirewallMSNSRV32.exe"Added by a variant of the RBOT WORM!"
XSygate Personal Firewallmsnmsgrs.exe"Added by the RBOT.XN WORM!"
XSysCommsnmsgr.exe"Added by the BANK-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%MSN Messenger or %ProgramFiles%Windows LiveMessenger. This one is located in %Windir%\system"
XSysmonmsnmssgs.exe"Added by the SDBOT.FK WORM!"
XsysPersonalFirewallmsnmssgr.exe"Added by a variant of the RBOT WORM!"
XSystem Servicemsnwindows.exe"Added by the SPYBOT.YCL WORM!"
XSystem Servicemsnxpexe.exe"Added by the RBOT-AUA WORM!"
XSystem51616msnmsgesser.exe"Added by a variant of the PUSHBOT WORM! A family of worms that spread using MSN Messenger"
XSystembootmsnsngr.exe"Added by a variant of the RBOT WORM!"
Xtaskmngr[path] msnve.exe [path] task.exe"Added by the FLOOD-EK TROJAN!"
XTimermsncomm.exe"Added by the WEBDOR.AK TROJAN!"
XTopic MSNGR32MSNGR32.com"Added by a variant of the IRCBOT TROJAN!"
XUPDATEMSNsvhost.exeAdded by an unidentified WORM or TROJAN!
XUSB Driverz2msnplus1.exe"Added by the SDBOT-XQ WORM!"
XVideo Processmsn5.exe"Added by the AGOBOT-TW WORM!"
XvmsnGraberVMSNGRABER.EXE"Added by the ENVID.B WORM!"
XWin Updatemsnmger.exe"Added by the RBOT-GDP WORM!"
XWin32msnsrv.exe"Added by a variant of the SDBOT WORM!"
Xwin32 regeditmsn32.exeAdded by an unidentified WORM or TROJAN!
XWin32 USB2 Drivermsn.exe"Added by the FORBOT-EX WORM!"
XWinAmpAgentmsnexploren.exe"Added by the TACTSLAY.B TROJAN!"
XWindow Msn Live Messangermsnmsgsls.exe"Added by the RBOT.BJD BACKDOOR!"
XWindows Installer 1msnconfig.exe"Added by the PURITYSCN.B TROJAN!"
XWindows Live Clientmsnclient.exe"Added by a variant of the IRCBOT TROJAN! See here"
XWindows Live Messengermsnmsgr.exe"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XWindows live Messengermsn.com"Added by the IRCBOT-AAV WORM!"
XWindows Live Messengermsnlive.exe"Added by the RBOT.BMV BACKDOOR!"
NWindows Live Messengermsnmsgr.exe"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → Sign In → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 14.*"
XWindows Live Messengermsnd.exe"Added by the BCKDR-QQQ BACKDOOR!"
XWindows Live Messenger Addonwllivemsngr.exe"Added by a variant of the SDBOT WORM! See here"
XWindows Live Messenger!livemsngr.exe"Added by the IRCBOT.AWE BACKDOOR!"
XWindows Live Servicemsnlive.exe"Added by the SLENFBOT.DI WORM!"
XWindows live Supportwlmsngr.exe"Added by the RBOT-BKL WORM!"
XWindows Loginmsnmsgr.exe"Added by the AGOBOT-UC WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XWindows Media Drivermsnger.exe"Added by a variant of the RBOT WORM!"
XWindows Messengermsnsmgs.exe"Added by the RBOT-ANJ WORM!"
XWindows Messengermsnmsg.exe"Added by the SPYBOT.BV WORM!"
XWindows Messenger Live MSNwinlivemsnmessenger.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Messenger Live Startupwindowslivemsn.exe"Added by an unidentified WORM or TROJAN! See here"
XWindows Messenger Live Startupwindowsmsnlive.exe"Added by the DELF.DAX TROJAN!"
XWindows ms Driversmsnup32.exe"Added by the SDBOT-AAL WORM!"
XWindows MSNMSN.msn"Added by the TRIXCU.A WORM!"
XWindows Msn Live Messangermsnmsgsman.exe"Added by a variant of the SDBOT WORM!"
XWindows MSN Live Messangerwmsnlive.exe"Added by the RBOT.BMV BACKDOOR!"
XWindows MSN Live Messangerlivemsngs.exe"Added by a variant of the SPYBOT WORM! See here"
XWindows MSN Live Messengerwinlivemsn.exe"Added by an unidentified WORM or TROJAN! See here"
XWindows MSN Live Messengerwinmessengerlive.exe"Added by the IRCBOT.EAD BACKDOOR!"
XWindows MSN Updateswnd32.exe"Added by the IRCBOT-ABA TROJAN!"
XWindows MSN2 XPswchost.exe"Added by the KOLAB.AA WORM!"
XWindows Registrymsnmsg.exe"Added by a variant of the RBOT WORM!"
XWindows Rundll Centermsnsmgr.exe"Added by the AGENT-LLB TROJAN!"
XWindows Secure Messaging Systemmsnmsgrsrvc.exe"Added by the RBOT-RE WORM!"
XWindows Service Agentmsnmagr.exe"Added by a variant of the SLAPER TROJAN!"
XWindows Service Agentmsngear.exe"Added by the RBOT.AHW BACKDOOR!"
XWindows Service Agentmsngerr.exe"Added by the RBOT.EOZ WORM!"
XWindows Service Agentmsnmsgr.exe"Added by the RBOT.ABIK BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XWindows Service Managermsnmrg.exe"Added by the OSCABOT-G WORM!"
XWindows Services Agentmsngears.exe"Added by the VB-EMS TROJAN!"
XWindows sq Driverswinmsn32.exe"Added by the RBOT-ADI WORM!"
XWINDOWS SYSTEMmsnl.exe"Added by the MYTOB.IK WORM!"
XWINDOWS SYSTEMmsn32.exe"Added by the MYTOB-FX WORM!"
XWindows System Guardmsng.exe"Added by the EGGDROP-BO WORM!"
XWindows System Guardmsns.exe"Added by the DWNLDR-IGD TROJAN!"
UWindows System Traymsni.exe"Iambigbrother monitoring software"
XWindows UDP Control Centermsnmngs.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows UDP Control Centermsnpd.exe"Added by the SDBOT.EBA BACKDOOR!"
XWindows UDP Control Centerwinmsn.exe"Added by the SDBOT.EBA BACKDOOR!"
XWindows UDP Control Centermsnsmsgrs.exe"Added by the PUSHBOT.MF WORM!"
XWindows Updatemsnwinsb.exe"Added by the RBOT-AAH WORM!"
Xwindows updatemsnsever.exe"Added by the RBOT-AHN WORM!"
XWindows Updatemsnupdates.exe"Added by the RBOT-ALK WORM! Note - this file has nothing to do with Windows updates or MSN"
XWindows Updatemsnsupdate.exe"Added by the RBOT-AXS WORM!"
XWindows Updatemsnsa32.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Updater Servicesmsnupdate.exe"Added by a variant of the RBOT WORM!"
XWindows32 Net Databasemsnd32.exe"Added by the RBOT-AAL WORM!"
XWindowsSystem32msnmssgr.exe"Added by the AGENT.ALY BACKDOOR!"
XWindowsSystem32msn_kilo.exe"Added by the AGENT.ALY BACKDOOR!"
XWindowsSystem32msnmgaer.exe"Added by the AGENT.ALY BACKDOOR!"
XWinDynManageramsnmsg.exe"Added by the SDBOT-IA BACKDOOR!"
XWinnt DNS identmsnmsrg.exe"Added by the RBOT.BVQ WORM!"
XWinUpdate Loadermsnnm.exe"Added by the REVCUSS.C TROJAN!"
XWSAConfigurationmsnote30.exe"Added by the AGOBOT-KF BACKDOOR!"
XYahoo! Messangerymsngr32.exe"Added by the WOOTBOT.HY WORM! Note - this should not be confused with Yahoo! Messenger"
XyahoomsgrYahoomsngr.exe"Added by the AGOBOT.AKZ WORM!"
X[various names]MsNetHelper.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.