MSN

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	(Default)	msnupdate.exe	"Added by the RBOT-GWT BACKDOOR! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run & HKLM\RunServices in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X	.NET.	msnmgnr.exe	"Added by the DELF.AYF WORM!"
X	AdobeReader	msni.exe	"Added by the RBOT.DAO TROJAN!"
X	AdobeReaderPro	msnxpsp.exe	"Added by the RBOT-ASK or RBOT-AUS WORMS!"
X	AdobeReaderPro	msnserve.exe	"Added by the SDBOT-AKH WORM!"
X	AdobeReaderPro	msnservex.exe	"Added by the RBOT.AKM BACKDOOR!"
X	AdobeReaderPro	msnsrcdv.exe	"Added by the INJECT-H WORM!"
X	AdobeReaderPros	sysmsn.exe	"Added by the RBOT-BGH WORM!"
N	AMSN	amsn.exe	"aMSN Messenger is a multiplatform MSN messenger clone"
X	amsn	amsn.exe	"Added by the BANKER-BNZ TROJAN!"
X	Aol Configuration Loader	aimsng.exe	"Added by the SDBOT-XE WORM!"
X	AOL Messenger	aolmsngr.exe	"Added by the SDBOT-JF WORM!"
X	ATI AS Filter	msnse.exe	"Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
U	BitDefender for MSN Messenger	msnmon.exe	"Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website"
X	blah service	msnmsgrr.exe	"Added by the RBOT.PZ WORM!"
X	blahx service	msnjompa.exe	"Added by the SDBOT.AML WORM!"
X	china11msn	CHINA11MSN.EXE	"Added by the ENVID.O WORM!"
X	Clock Manager	amsngr.exe	"Added by the SDBOT-XM TROJAN!"
X	Compaq Service Drivers	amsn.exe	"Added by a variant of the SDBOT WORM!"
X	Compaq Service Drivers	msnt.exe	"Added by the SDBOT.CQL WORM!"
X	Compaq Service Drivers	winmsn.exe	"Added by a variant of the SDBOT WORM!"
X	Compaq Service Drivers	msnsvc.exe	"Added by the RBOT.BKT WORM!"
X	Compaq32 Service Drivers	msnt32.exe	"Added by the RBOT.BVF WORM!"
X	Configuration Loader	msnss.exe	"Added by the GAOBOT.AUS WORM!"
X	Configuration Loader	msnmsgr.exe	"Added by the SDBOT-SO WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	ctfmon	msnmsgr.exe	"Added by the BDOOR-JV BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Current32	msnpla.exe	"Added by the SDBOT-DIS WORM!"
X	data	msngs.exe	"Added by the RBOT-ADQ WORM!"
X	eMessenger	emsn.exe	"Added by the RBOT.AHO BACKDOOR!"
X	ethernet	msnger.exe	"Added by a variant of the SDBOT WORM!"
X	Firewall Updater	msnupdateit.exe	"Added by the RBOT-AAQ WORM!"
X	FKS v2.0	msngr.exe	Added by an unidentified WORM or TROJAN!
X	Flash Media	zrpk��'�'%''msn'�%'fix''.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Flash Media	skxs��'�'%''msn'�%'fix''.exe	"Added by the AGENT.ZOY TROJAN!"
X	hotefix	msnmanegers.exe	"Added by the IRCBRUTE.AS TROJAN!"
X	hotfix	msnnmaneger.exe	"Added by the WOOTBOT.AF WORM!"
X	ICQMsn	[path to trojan]	"Added by the RANCK-AH TROJAN! The most common example is ""cbfks.exe"" located in %System%"
X	ImMsn	timed.exe	"Added by the WEBDOR.AK TROJAN!"
X	InetMSN	msnet.exe	"Added by a variant of the SDBOT TROJAN!"
U	InfoPenMSN	InfoPenIM.exe	"InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand"
X	Intersoft Msngr	intersoftmsngr.exe	"Added by the AGOBOT-NW WORM!"
X	Java32 Configuration Loader	msnmesgr.exe	"Added by a variant of the RBOT WORM!"
X	Live Messanger	wllmsngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Live Windows Messenger Version	msnmessage7.7.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Live Windows Messenger Version	msnmsngrlive.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	lnternet Explorer	AMSNDMGR.EXE	"Added by the KWBOT.R WORM! Note that the ""l"" is a lower case ""L"" and not an upper case ""I"""
X	LTM2	msns6	"Added by the LITMUS.C TROJAN!"
X	Media Load	msn32.exe	Added by a unidentified WORM or TROJAN!
X	Media Service	msn64.exe	"Added by the SPYBOT.EV WORM!"
X	Media service	msnmsgxr.exe	"Added by the SDBOT.TF WORM!"
X	Media X Services	MSNGRx.exe	"Added by the RBOT.AUL WORM!"
X	Media-XP-Service-Pack3	msnzx.exe	"Added by the SDBOT-ACW WORM!"
X	Messenger	Wmsngr.exe	"Added by a variant of the RBOT WORM!"
N	Messenger	MsnMsgr.exe	"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → General → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 8.*"
X	Messenger	msnmsgrr.exe	"Added by the RBOT-GYK WORM!"
X	Messenger Block	msngrblock.exe	"Added by the PATOO WORM!"
X	MICROSFT RAMA UPDATE SUPPORT	MSN32.EXE	"Added by the RBOT-AWJ WORM!"
X	Microsoft	msngerf.exe	"Added by the RBOT-GLW WORM!"
X	Microsoft .NET Confingurator	msnconf.exe	"Added by an unidentified VIRUS
X	Microsoft Genuine Logon	msnmsg.exe	"Added by the IRCBOT-XH WORM!"
X	Microsoft Help SVC	msnmngr.exe	"Added by the SDBOT-PQ WORM!"
X	Microsoft Instant Messenger	msngmsngr32.exe	"Added by the SPYBOTER.GEN TROJAN!"
X	Microsoft Internet Explorer	msngrt.exe	"Added by the SDBOT-GU BACKDOOR!"
X	Microsoft messenger sd	msngersd.exe	Added by an unidentified TROJAN!
X	Microsoft Messenger XP	MSMSN32.exe	"Added by the RBOT-ZP WORM!"
X	Microsoft MSN 7 Services	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft MSN 7 Services	msnmsger.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft MSN Messenger	msnmnsgr.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Msn Messenger	msmsgs.exe	"Added by the BUZUS.AYX TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Microsoft MSN Services	msnsm.exe	"Added by the RBOT.ARV BACKDOOR!"
X	Microsoft MSNGR32 Protocol	msngr32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft msnseru	msnseru.exe	"Added by the RBOT-APB WORM!"
X	Microsoft MsnST	msnst32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Netview Component v5.1	msnv32.exe	"Added by the RANDEX.F WORM!"
X	Microsoft Network	msnet.exe	"Added by the MOCKBOT.A WORM!"
X	Microsoft Networking Agent For SP2	msnac32.exe	"Added by the SPYBOT.PEN WORM!"
X	Microsoft QMGR	msnqmgr.exe	"Added by the IRCBOT-S TROJAN!"
X	Microsoft Server Applacations	msnmsg.exe	"Added by the AGOBOT.BBM WORM!"
X	Microsoft Service Information	msnservices.exe	"Added by the RBOT.ID WORM!"
X	Microsoft Svchost local services	msnserver.exe	"Added by the RBOT-GPM WORM!"
X	Microsoft System Firewall 2006.2	msnmsgr.exe	"Added by a variant of the SDBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Microsoft System Services	msnmgsr.exe	"Added by the KELVIR.K WORM!"
X	Microsoft Update	Msnmsngr.exe	"Added by the RBOT.BQS WORM!"
X	Microsoft Update	msnmsgl.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Microsoft web update	webmsn.exe	"Added by the RBOT-EMQ WORM!"
X	Microsoft Windows DLL 32-BIT	msncheck32.exe	"Added by the SDBOT-XX WORM!"
X	Microsoft Windows Update	msnmessenger.exe	"Added by the SDBOT.AJ WORM!"
X	Microsoft Windows Update	msnwun.exe	"Added by the SDBOT-RM WORM!"
X	Microsoft Windows Update	MSNMSGR.EXE	"Added by the SDBOT-WM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Microsoft Windows Update Service	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Windows Updater	msnupdateit.exe	"Added by the AGOBOT-RL WORM!"
X	MicrosoftCorp	msnrmgs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoftf DDEs Control	msnn.exe	"Added by the RBOT-AXT WORM!"
X	MicrosoftMessenger	msnserv.exe	"Added by the DARKER.M WORM!"
X	Microsoftmsn32.exe	microsoftmsn32.exe	"Added by the CERTIF-C TROJAN!"
X	MicrosoftNAPC	msnrmgs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsofts Help Services	msnmngr.exe	"Added by the SDBOT-PJ WORM!"
X	MS MSN Menssenger 7.0	MSMSN7.exe	"Added by the RBOT-ACA WORM!"
X	MS MSN Menssenger 7.0	MSEXPORT.exe	"Added by a variant of the SDBOT WORM!"
X	MS Unix Binary	msnupdate.exe	"Added by the RBOT-AAM WORM!"
X	MS Unix Binary	msnq3insller.exe	"Added by the RBOT.GXH BACKDOOR!"
X	MSMessnger	msnupd.exe	"Added by the RBOT-ADY WORM!"
X	msmsngr	msmsngr.exe	"Added by the DOPBOT-B WORM!"
X	msn	system32.exe	"Added by the KITRO.A WORM!"
X	msn	msnmsg.exe	"Added by the RBOT-GO WORM!"
X	MSN	msnmsgs.exe	"Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe
X	MSN	ctfmoons.exe	"Added by the SPYBOT.HI WORM!"
X	MSN	msnmesengers.exe	"Added by the RBOT-ME WORM!"
X	MSN	MSN.exe	"Added by the MINIT WORM!"
X	MSN	msnmsgr.exe	"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	msn	msnsvc.exe	"Added by a variant of the SDBOT WORM!"
X	MSN	msn16.exe	"Added by the SDBOT-VN WORM!"
X	MSN	msnsgr.exe	Added by an unidentified WORM or TROJAN!
X	MSN	install.exe	"Added by the AGENT-GDO TROJAN!"
X	MSN	netstats.exe	"Added by the IRCBOT.UXP WORM!"
X	MSN	scvhost.exe	"Added by the IRCBOT-ZW WORM!"
X	MSN	wdlrss.exe	"Added by a variant of the SDBOT TROJAN!"
X	MSN	wkssvr.exe	"Added by the PUSHBOT.S WORM!"
X	MSN	Fixdriver.exe	"Added by the SILLYFDC.BBY WORM!"
X	MSN	iTuneshelp.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	lsass32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	msscomd.exe	"Added by a variant of the SPYBOT WORM! See here"
X	MSN	systems.exe	Identified as a variant of the Backdoor.PosionIvy keylogging malware
X	MSN	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	wkssvrs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	wksvr.exe	"Added by the IRCBOT-XU WORM!"
X	MSN	wmev.exe	"Added by a variant of the SPYBOT WORM! See here"
X	MSN	kys7r.exe	"Added by the AUTORUN-AR WORM!"
X	MSN	services51651.exe	"Added by the IRCBOT-AAL TROJAN!"
X	Msn	"rundll32.exe ilss32.dll	network"
X	msn	winlogon.exe	"Added by the PROSTI.AA BACKDOOR! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Media"
X	MSN	msnmsgx.exe	"Added by the RBOT-PZ WORM!"
X	MSN	msservice.exe	"Added by the IRCBOT-ABZ TROJAN!"
X	MSN	smsss.exe	"Added by the BUZUS-D WORM!"
X	MSN	svchost.exe	"Added by the PUSHBOT.FA WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Msn 8.0 Live	msn.exe	"Added by the BANKER.EIE TROJAN!"
X	MSN 9.0 Plus	[random letters].exe	"Added by the RBOT-ALY WORM!"
X	MSN Administration For Windows	msnadp32.exe	"Added by the BROPIA.W WORM!"
X	MSN ang	cssrss.exe	"Added by the FORBOT-CE WORM!"
X	MSN Auto-Updater	msnaupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Auto-Updater	msnupdates.exe	"Added by the AUTORUN.WORM.GEN WORM!"
X	MSN BETA	service.exe	"Added by the RBOT.AUU WORM!"
X	MSN Booster	msnbooster.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Boot	msnbootcfg.exe	"Added by the IRCBOT.BFU BACKDOOR!"
X	MSN Checker	msnchecker.exe	"Added by the SDBOT-AGB WORM!"
X	MSN Client Manager	msnclimgr.exe	"Added by the AUTORUN-FV WORM!"
X	MSN CNF Manager	msncnfmgr.exe	"Added by the VUNDO TROJAN!"
X	MSN Communication Manager	msncommgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Msn Config	msngf.exe	"Added by the RBOT-QG WORM!"
X	MSN Configuration	msnconfig.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Msn Configuration Loader	msngms.exe	"Added by the KELVIR.T WORM!"
X	MSN Configuration Loader	msmsncfg.exe	"Added by the AGOBOT-KX BACKDOOR!"
X	MSN CST Manager	mancstmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Database Client	msndbcli.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Debug Mgr	msndebugs.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN Explorer	msnexplorer.exe	"Added by the AGENT-CAX TROJAN!"
X	MSN Explorer	explorer..exe	"Dropper for the Ciadoor.cb TROJAN!"
X	MSN File & Folder Sharing App	msnfileshare.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN File Configuration	msnfilecfg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN File Sharing	msnusr.exe	"Added by the SLENFBOT.AM WORM!"
X	MSN File Sharing Wizard	msnsharewiz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN File Sharing!	msnuser.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Funny Images	imsngsr.exe	"Added by the AGOBOT-TT WORM!"
X	MSN Gaming Zone	Twain.exe	"Added by the AGENT.BEA TROJAN!"
X	MSN Hostn	msnhostn.exe	"Added by a variant of the IRCBOT BACKDOOR!"
N	MSN Internet Access	trayclnt.exe	Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
X	MSN Live Client	msnlvclient.exe	"Added by the IRCBOT.AWF BACKDOOR!"
X	MSN Live Messanger	msnlivegs.exe	"Added by the RBOT-FSG WORM!"
X	MSN Manager	cvss.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN Manager	mscmgr.exe	Unidentified malware - causes multiple browser windows to open
X	MSN Manager	msnmgrsv.exe	"Added by the IRCBOT.BAZ BACKDOOR!"
X	MSN Manager	usnmsn.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Msn Message Acount Helper 7.7	msnmessage7.7.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Message Background loader	[path to worm]	"Added by the RBOT-AIE WORM!"
X	MSN Message Service	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Messager	msnmsgr.exe	"Added by the DOWNLOADER.19456.C TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN Messager	msnmgr.exe	"Added by the IRCBOT-ACD WORM!"
X	MSN Messages	msnmesg.exe	"Added by the RBOT-ACN WORM!"
X	MSN Messages	msnmessgs.exe	"Added by the SLENFBOT.UC WORM!"
X	MSN Messanger	msnmsng.exe	"Added by the SDBOT.XN WORM!"
X	MSN messanger	msnmsgsm.exe	"Added by the RBOT-FMP WORM!"
X	MSN Messanger	msnmsgsmn.exe	"Added by the RBOT-FOQ WORM!"
X	Msn Messanger	crsss.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Msn Messanger	msnmsgem.exe	"Added by the RBOT.BLL BACKDOOR!"
X	MSN Messanger	System.exe	"Added by the IRCBOT-AFX TROJAN!"
X	MSN Messanger Live	winntmsn.exe	"Added by the RBOT-FSO WORM!"
X	Msn Messeng	windns.exe	"Added by a variant of the RBOT WORM!"
X	Msn Messenge	IExplorer.exe	"Added by the DELF-LL TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	MSN messenger	messenger.exe	Added by an unidentified TROJAN! Note - this is not the real MSN Messenger
X	Msn Messenger	msnmsgs.exe	"Added by the LOONY-P TROJAN! Note - not to be confused with msmsgs.exe
X	MSN Messenger	Reosmsngr.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN MESSENGER	msmmsgr.exe	"Added by the KELVIR.Q WORM!"
X	MSN Messenger	msnmsgr.exe	"Added by the AGOBOT.AOQ WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN Messenger	msmsgs.exe	"Added by the ZLOB TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	MSN Messenger	msnmsngr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger	IExplorer.exe	"Added by the BANKER-EU TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Msn Messenger	msnmsnr.exe	"Added by the BANKER-GG TROJAN!"
X	MSN Messenger	PIC1324.exe	"Added by the CHOKE.C WORM!"
X	MSN Messenger	explorer..exe	"Dropper for the Ciadoor.cb TROJAN!"
X	Msn Messenger	nkbf.exe	"Added by the RBOT-GMQ WORM!"
X	MSN Messenger	live.messenger.com	"Added by the DELF.AOI BACKDOOR!"
X	Msn Messenger	msnmgr.exe	"Added by the AGOBOT.HA WORM!"
X	MSN Messenger	msnmsxp.exe	"Added by the AGOBOT-O WORM!"
N	MSN Messenger	MsnMsgr.exe	"MSN Messenger utility (now replaced by Windows Live Messenger) - available via the Start menu. Disable by clicking on Tools → Options → General → deselect ""Automatically run Messenger when I log on to Windows"""
X	MSN Messenger 32	msniu.exe	"Added by the RBOT-AWB WORM!"
X	MSN Messenger 323	msniu3.exe	"Added by the RBOT-AXB WORM!"
X	MSN Messenger 6.2	tyd.exe	"Added by a variant of the RBOT WORM!"
X	MSN MESSENGER 9.0	messengerr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger BETA 7	bbsdf.exe	"Added by the RANKY.AA TROJAN! Note - this is not a valid MSN Messenger variant"
X	MSN Messenger Inbox Loader	msninbox.exe	"Added by the SLENFBOT.YG WORM!"
X	MSN Messenger Live Login	msnmessengerlive.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Messenger Live Windows	messengerlive.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN messenger service	mssgs.exe	Added by an unidentified TROJAN!
X	Msn Messenger Service	msnmsg.exe	"Added by the SDBOT.BMU WORM!"
X	MSN Messenger Service Starter	msnmgsr.exe	"Added by the RBOT-AOS WORM!"
X	MSN Messenger Service Startup	msnservice.exe	"Added by a variant of the RBOT WORM! See here"
X	MSN Messenger Services	msnmgr.exe	"Added by the RBOT.ADF TROJAN!"
X	MSN Messenger Services	msnmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Messenger Update	msnupdate.exe	"Added by a variant of the RBOT WORM!"
X	Msn Messenger update	msnservice.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Messenger User Controls	msmsgr.exe	"Added by the KELVIR.HI WORM!"
X	Msn Messengers	MSNMSGR.EXE	"Added by the RBOT.KX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN Messengger	MsRun32.exe	"Added by the IMAUT.CO WORM!"
X	Msn Messsenger	regsvr.exe	"Added by the AGENT-GXM TROJAN!"
X	MSN MMISSENGER	mssmmspgr.exe	"Added by the KELVIR.AJ WORM!"
X	MSN P2P Manager	msnp2pmgr.exe	"Added by the SLENFBOT.YH WORM!"
X	Msn Patch	msndp.exe	"Added by the RBOT.AAI WORM!"
X	Msn Patches	msndr.exe	"Added by a variant of the SDBOT WORM!"
X	Msn Plus Updater	msnplus.exe	"Added by the RBOT-MU WORM!"
X	MSN Popup Blocker	msnpopblck.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Processe Manager	msni32.exe	"Added by the RBOT-ADX WORM!"
N	MSN Quick View	Msndc.exe	Quick way to connect to MSN internet service
X	MSN Registry loader	msmnwin.exe	"Added by the KELVIR.FK WORM!"
X	MSN Router	msnrouter.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN RPC Manager	msnrpcmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Rx Manager	msnrxmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
N	MSN Search Toolbar	WindowsSearch.exe	"System Tray access to Windows Desktop Search for XP from Microsoft - which adds additional search options including a search box on the Taskbar. For this version
X	MSN Security Agent	msnsecure.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Serv	msmsnserv.exe	"Added by the IRCBOT.AVF BACKDOOR!"
X	Msn Serv	msnserv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Server	msmsnserver.exe	"Added by the IRCBOT.AUS BACKDOOR!"
X	MSN service	msnmgr16.exe	"Added by a variant of the RBOT WORM!"
X	MSN Service	amsnmsgrs.exe	"Added by a variant of the SDBOT WORM!"
X	Msn Service	matrixcam.exe	"Added by the MYTOB.JH WORM!"
X	Msn Service	raloded.exe	"Added by the MYTOB-DY WORM!"
X	MSN service	msnmsgr16.exe	"Added by the RBOT-RZ WORM!"
X	MSN service	NTDKRN.EXE	"Added by the RBOT.UJ WORM!"
X	MSN Service	msnsvc.exe	"Added by the SLENFBOT.EG WORM!"
X	MSN Service Updates	winproc.exe	"Added by the KELVIR-BB WORM!"
X	MSN Service Utilities	nkn.exe	"Added by the KELVIR-BC WORM!"
X	MSN Service!	msnservice.exe	"Added by a variant of the RBOT WORM! See here"
X	MSN Servicer	msnsrv.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN Servicer	msnservicer.exe	"Added by the SLENFBOT.PQ WORM!"
X	MSN Services	msnserv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Services	msnservice.exe	"Added by the IMPARD-A TROJAN!"
X	MSN Settings	msnsettings.exe	"Added by the IRCBOT.AWH BACKDOOR!"
X	MSN Settings Manager	msnsetmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Setup	MSN.msn	"Added by the JAMBU WORM!"
X	MSN Software	msnsoftware.exe	"Added by the IRCBOT.AWD BACKDOOR!"
X	MSN Start	msnmsgr7.exe	"Added by the RBOT-PH WORM!"
X	Msn Startup	msnstartup.exe	"Added by the ARBOT.AA WORM!"
N	MSN Toolbar	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	MSN Tray Monitor	msnmsgr.exe	"Added by the SDBOT.FKX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%\inetsrv"
X	MSN Update	mscon.exe	"Added by the RBOT-QA WORM!"
X	MSN Update	msn32.exe	"Added by the RBOT.AHN WORM!"
X	MSN Update	DLLCON.EXE	"Added by the RBOT-EA WORM!"
X	MSN Update Cfg	msnupdbt.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Update Client	msnupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Update Client	msnupdcli.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Msn Update Manager (Sp2)	MSMSGS.EXE	"Added by the AGOBOT-NL WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Msn Update Service	userx.exe	"Added by the MYTOB.JF WORM!"
X	MSN Update Service	msnupdsv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msn Update SUPPORT	[random filename]	"Added by the RBOT-BPS WORM!"
X	MSN Updater	msnms.exe	"Added by the FORBOT-CG WORM!"
X	Msn Updater	msnplugins.exe	"Added by the RBOT-HS WORM!"
X	Msn Updater	windatemanager.exe	"Added by the SDBOT.TS WORM!"
X	MSN UPDATERS	virtualmemory.exe	"Added by the RBOT-JK WORM!"
X	MSN Updating	msnupdate.exe	"Added by the QHOST.AEI TROJAN!"
X	msn upddate	mesenger.exe	"Added by the RBOT-AVZ WORM!"
X	MSN User	mymsnusr.exe	"Added by the IRCBOT.AVD BACKDOOR!"
X	MSN User Server	msnserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN User Server!	msnservices.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN User Service	msnsvc.exe	"Added by the SLENFBOT.NS WORM!"
X	MSN User Service!	msnserv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN User Services	msnuserv.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN User Svc	msnusnsvc.exe	"Added by the IRCBOT.AVV BACKDOOR!"
U	MSN Video Enhanced	MSNVE.exe	"""MSN Video Enhanced can play videos that have dramatically improved video quality and sound. It can play the latest high-quality videos at the best possible quality."" No longer appears to exist"
N	MSN Webcam Recorder	ml20gui.exe	"""MSN Webcam Recorder is a tool that allows you to record video streamed to and from your computer by MSN Messenger's Webcam Feature"""
X	msn.exe	son.exe	"Added by the STARTPA-GS TROJAN!"
X	MSN32 X Service	MSN32x.EXE	Added by an unidentified WORM!
X	MSN6.1 Auto-Updater	v6msn.exe	"Added by the AUTORUN-MM WORM!"
X	MSN8m Startup	msn8m.exe	"Added by a variant of the RBOT WORM!"
X	msnager32	svchostt.exe	"Added by the WOMANIZ.E TROJAN!"
N	msnappau	msnappau.exe	"Updater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to ""update"" the toolbar"
X	Msnarrator	msnarrator.exe	"Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware"
X	MSNavWH	MSWkwrH.exe	"Added by the ANAV-A WORM!"
X	msndrvsys	msndrvsys.exe	"Added by the BROGGER-D TROJAN!"
X	MSNET	msnet.exe	"Added by the BOA WORM!"
X	MsnExplorer	winagent.exe	"Added by the BDOOR-EQ BACKDOOR!"
X	MsnExplorer	MSEXPLOREN.EXE	"Added by the BDOOR-EB BACKDOOR!"
X	MsnExplorer	SHCH.EXE	"Added by the BDOOR-EB BACKDOOR!"
X	MsnExplorer	SVCHST.EXE	"Added by the BDOOR-EB BACKDOOR!"
X	MsnExplorer	msnexploren.exe	"Added by the TACTSLAY.B TROJAN!"
X	MsnExplorer	sdhch.exe	"Added by the TACTSLAY.B TROJAN!"
?	MsnFixer	msnfixjs.js	"Located in the HPbinmsnfix directory of a HP PC"
X	MSNGrabber	MSNgrabber.exe	"Added by the ENVID.A WORM!"
X	msngta32	msngta32.exe	"Added by a variant of the RBOT WORM!"
N	MSNIA	MSNIASVC.EXE	Added with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
X	msnload32.exe	msnload32.exe	"Added by the BANCOS.M TROJAN!"
X	MSNMESENGER	Main.exe	"Added by the PRORAT TROJAN!"
X	msnmessenger	msnmessenger.exe	"Added by the BANCBAN-KJ TROJAN!"
X	MsnMessengerSvc	msnmsgr.exe	"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	msnmgnr	msnmgnr.exe	"Added by the KOLAB.TC WORM!"
X	msnmgr	msnmgr.exe	"Added by the BIFROSE-K WORM!"
U	MsnMonitor	MsnMonitor.exe	"MSN Messenger Monitor Sniffer surveillance software for the MSN instant messenger. Uninstall this software unless you put it there yourself"
X	msnmsg	asgag.exe	"CoolWebSearch parasite variant"
X	msnmsg	TBC.exe	Added by an unidentified TROJAN!
X	msnmsg	msnmsg.exe	"Added by the BANKER-CLX TROJAN!"
X	msnmsg.exe	mscmd32.exe	Added by a variant of the AGENT.AH TROJAN!
X	msnmsg.exe	msnmsg.exe	"Added by the BANCBAN-KN TROJAN!"
X	msnmsgq32	msnmsgq.exe	"Added by the TACTSLAY.H TROJAN!"
X	msnmsgq32	msnmsgq32.exe	"Added by the TACTSLAY.F TROJAN!"
X	msnmsgq32	sssasasb32.exe	"Added by the TACTSLAY.F TROJAN!"
N	msnmsgr	msnmsgr.exe	"Windows Live Messenger or the older MSN Messenger utility - available via the Start menu. For Windows Live Messenger
X	MsnMsgr	MsnMsgrs.exe	"Added by the NETSKY.AD WORM!"
X	MsnMsgr	msnmsgr.exe	"Added by the ANNEW-FAM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Msnmsgr.exe	lsass.exe	"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root directory (i.e. C:\ or D:\)"
X	msnmsgr32-.exe	msnmsgr-.exe	"Added by a variant of the SPYBOT WORM!"
X	MSNMSGR5	MSNMSGR5.exe	"Added by the RBOT.PQ WORM!"
X	MSNMSGRE	swef.bat	IRC backdoor TROJAN or WORM!
X	MSNMSGRR	swin.bat	IRC backdoor TROJAN or WORM!
X	MSNMSGRS	swe.bat	IRC worm or backdoor trojan!
X	MSNMSGRS	swiss.bat	IRC worm or backdoor trojan!
X	MSNMSGRS1	swed.bat	IRC backdoor TROJAN or WORM!
X	msnmsgs.exe	msnmsgs.exe	"Added by the BANKER-HK TROJAN! Note - not to be confused with msmsgs.exe
X	msnmsgsgs	msnmsgsgs.exe	"Added by the ""Catal"" alias Spy.Delitall.B backdoor TROJAN!"
X	msnmsgy	[path to file]	"Added by the BANKER-EQ TROJAN!"
X	msnnt	winampb.exe	"Chinese originated adware - detected by Kaspersky as the AGENT.TL TROJAN!"
X	msnnt	winampf.exe	Added by the SMALL.DTS TROJAN!
X	MSNPluginSrIvcs	n3vasap23.exe	"Added by a variant of the RBOT WORM!"
X	MSNPluginSrvcs	p6.exe	"Added by the SDBOT.AKJ or RBOT-VJ WORMS!"
X	MSNPluginSrvcs	sagate.exe	"Added by the SDBOT.AKJ WORM!"
X	MSNPlus	msnplus.exe	"Added by the BANKER-DAN TROJAN!"
X	MSNS PLUS XP2	msdupd.exe	"Added by the RBOT-BCE WORM!"
X	msnsched2	msnsched2.exe	"Added by the SPYBOT.NNT WORM!"
X	msnscr.exe	msnscr.exe	"Added by the CERTIF-P TROJAN!"
X	MSNService	MSNService.exe	"Added by the CARPET.C WORM!"
X	msnsgs	msnsgs.exe	"Added by the CHEUKO-B TROJAN!"
X	msnshed	msnshed.exe	"Added by the RBOT-YN WORM!"
X	msnsmgr	MsnMsr.exe	"Added by the LOONY-N TROJAN!"
N	msnsyslog	msnappm.exe	"Related to Messenger Applications. When you uninstall the trial version the msnappm keeps saying (You have xx days left) this is adware and it very annoying"
X	MSNSysRestore	pc32.exe	Added by a variant of the MASTAK VIRUS!
X	msnToolbaar	msnmsgesc.exe	"Added by the RBOT.BMF WORM!"
X	msnupdt	kolie.exe	"Added by a variant of the RBOT WORM!"
X	MsnWin	messagewin.exe	"Added by the BANCBAN-D TROJAN!"
N	MSN� Toolbar	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	none	pmsngr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	NvMsnW	Isass.exe	"Added by the BROPIA.K WORM!"
X	Offices	msnmgd32.exe	"Added by the FORBOT-DV WORM!"
X	OfficeWord Monitor	msn32.exe	"Added by the RBOT-GUE WORM!"
X	Office_app	msnmrgs.exe	Added by a variant of the VBBANC-A TROJAN!
X	picview	msnmsgr.exe	"Added by the BANLOA-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %Windir%"
X	Plug And Play	msnmsg.exe	"Added by the RBOT-ID WORM!"
X	pmsngr.exe	pmsngr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	Run Msn Messenger	msnmgr.exe	"Added by the AGOBOT.HA WORM!"
X	Sakemsneql	simenu.exe	"Added by the SDBOT.BTO WORM!"
X	Scheduler	msnexploren.exe	"Added by the TACTSLAY.B TROJAN!"
X	Security Patches	msnkn.exe	"Added by the RBOT.WW WORM!"
X	Service Drivers	msnpg.exe	"Added by the RBOT.BMD WORM!"
X	Service Drivers	MSNMEssenger.exe	"Added by a variant of the RBOT WORM!"
X	Service Monitor	msnfilen.exe	"Added by the RBOT-ALE WORM!"
X	Service Monitor	msnserve.exe	"Added by the SPYBOT.YQW WORM!"
X	ShellApi	SHELLMSN.EXE	"Added by the NETDEV.B TROJAN!"
U	SimpLite-MSN	SimpLite-MSN.exe	Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)
X	sms_msn	sms_msn.exe	Added by an unknown WORM or TROJAN!
X	sms_msn40	sms_msn40.exe	Added by an unknown WORM or TROJAN infection
X	SN Messenger	msnmsgr.exe	"Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Spore	MsNews.vbs	"Added by the SORPE.A WORM!"
X	SSL Manager	amsnmsgs.exe	"Added by a variant of the SDBOT WORM!"
X	sssasasb32	msnmsgq32.exe	"Added by the TACTSLAY.F TROJAN!"
X	StartKey	msnmsie.exe	"Added by the BIFROSE.M BACKDOOR!"
X	strmsnmgrs	msnxmsgrsc.exe	"Added by the SDBOT.JDR WORM!"
X	strmsnmsgr	msnmsgrs.exe	"Added by the RBOT-ACQ WORM!"
X	strmsnmsgrs	msnmsgrsc.exe	"Added by a variant of the RBOT WORM!"
X	strmsnnms	msnmegrs.exe	"Added by the SDBOT-YU TROJAN!"
X	strmsnnrs	msnmcgrs.exe	"Added by the RBOT-ACT TROJAN!"
X	strmsoums	msnmegrse.exe	"Added by the SDBOT-ZK TROJAN!"
X	SvcH0st	msnexploren.exe	"Added by the TACTSLAY.B TROJAN!"
X	svshostdriver	msnmessengerupdate.exe	"Added by the SDBOT-BI BACKDOOR!"
X	Sygate Personal Firewall	MSNSRV32.exe	"Added by a variant of the RBOT WORM!"
X	Sygate Personal Firewall	msnmsgrs.exe	"Added by the RBOT.XN WORM!"
X	SysCom	msnmsgr.exe	"Added by the BANK-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%MSN Messenger or %ProgramFiles%Windows LiveMessenger. This one is located in %Windir%\system"
X	Sysmon	msnmssgs.exe	"Added by the SDBOT.FK WORM!"
X	sysPersonalFirewall	msnmssgr.exe	"Added by a variant of the RBOT WORM!"
X	System Service	msnwindows.exe	"Added by the SPYBOT.YCL WORM!"
X	System Service	msnxpexe.exe	"Added by the RBOT-AUA WORM!"
X	System51616	msnmsgesser.exe	"Added by a variant of the PUSHBOT WORM! A family of worms that spread using MSN Messenger"
X	Systemboot	msnsngr.exe	"Added by a variant of the RBOT WORM!"
X	taskmngr	[path] msnve.exe [path] task.exe	"Added by the FLOOD-EK TROJAN!"
X	Timer	msncomm.exe	"Added by the WEBDOR.AK TROJAN!"
X	Topic MSNGR32	MSNGR32.com	"Added by a variant of the IRCBOT TROJAN!"
X	UPDATEMSN	svhost.exe	Added by an unidentified WORM or TROJAN!
X	USB Driverz2	msnplus1.exe	"Added by the SDBOT-XQ WORM!"
X	Video Process	msn5.exe	"Added by the AGOBOT-TW WORM!"
X	vmsnGraber	VMSNGRABER.EXE	"Added by the ENVID.B WORM!"
X	Win Update	msnmger.exe	"Added by the RBOT-GDP WORM!"
X	Win32	msnsrv.exe	"Added by a variant of the SDBOT WORM!"
X	win32 regedit	msn32.exe	Added by an unidentified WORM or TROJAN!
X	Win32 USB2 Driver	msn.exe	"Added by the FORBOT-EX WORM!"
X	WinAmpAgent	msnexploren.exe	"Added by the TACTSLAY.B TROJAN!"
X	Window Msn Live Messanger	msnmsgsls.exe	"Added by the RBOT.BJD BACKDOOR!"
X	Windows Installer 1	msnconfig.exe	"Added by the PURITYSCN.B TROJAN!"
X	Windows Live Client	msnclient.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Live Messenger	msnmsgr.exe	"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Windows live Messenger	msn.com	"Added by the IRCBOT-AAV WORM!"
X	Windows Live Messenger	msnlive.exe	"Added by the RBOT.BMV BACKDOOR!"
N	Windows Live Messenger	msnmsgr.exe	"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → Sign In → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 14.*"
X	Windows Live Messenger	msnd.exe	"Added by the BCKDR-QQQ BACKDOOR!"
X	Windows Live Messenger Addon	wllivemsngr.exe	"Added by a variant of the SDBOT WORM! See here"
X	Windows Live Messenger!	livemsngr.exe	"Added by the IRCBOT.AWE BACKDOOR!"
X	Windows Live Service	msnlive.exe	"Added by the SLENFBOT.DI WORM!"
X	Windows live Support	wlmsngr.exe	"Added by the RBOT-BKL WORM!"
X	Windows Login	msnmsgr.exe	"Added by the AGOBOT-UC WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Windows Media Driver	msnger.exe	"Added by a variant of the RBOT WORM!"
X	Windows Messenger	msnsmgs.exe	"Added by the RBOT-ANJ WORM!"
X	Windows Messenger	msnmsg.exe	"Added by the SPYBOT.BV WORM!"
X	Windows Messenger Live MSN	winlivemsnmessenger.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Messenger Live Startup	windowslivemsn.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Windows Messenger Live Startup	windowsmsnlive.exe	"Added by the DELF.DAX TROJAN!"
X	Windows ms Drivers	msnup32.exe	"Added by the SDBOT-AAL WORM!"
X	Windows MSN	MSN.msn	"Added by the TRIXCU.A WORM!"
X	Windows Msn Live Messanger	msnmsgsman.exe	"Added by a variant of the SDBOT WORM!"
X	Windows MSN Live Messanger	wmsnlive.exe	"Added by the RBOT.BMV BACKDOOR!"
X	Windows MSN Live Messanger	livemsngs.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Windows MSN Live Messenger	winlivemsn.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Windows MSN Live Messenger	winmessengerlive.exe	"Added by the IRCBOT.EAD BACKDOOR!"
X	Windows MSN Updates	wnd32.exe	"Added by the IRCBOT-ABA TROJAN!"
X	Windows MSN2 XP	swchost.exe	"Added by the KOLAB.AA WORM!"
X	Windows Registry	msnmsg.exe	"Added by a variant of the RBOT WORM!"
X	Windows Rundll Center	msnsmgr.exe	"Added by the AGENT-LLB TROJAN!"
X	Windows Secure Messaging System	msnmsgrsrvc.exe	"Added by the RBOT-RE WORM!"
X	Windows Service Agent	msnmagr.exe	"Added by a variant of the SLAPER TROJAN!"
X	Windows Service Agent	msngear.exe	"Added by the RBOT.AHW BACKDOOR!"
X	Windows Service Agent	msngerr.exe	"Added by the RBOT.EOZ WORM!"
X	Windows Service Agent	msnmsgr.exe	"Added by the RBOT.ABIK BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Windows Service Manager	msnmrg.exe	"Added by the OSCABOT-G WORM!"
X	Windows Services Agent	msngears.exe	"Added by the VB-EMS TROJAN!"
X	Windows sq Drivers	winmsn32.exe	"Added by the RBOT-ADI WORM!"
X	WINDOWS SYSTEM	msnl.exe	"Added by the MYTOB.IK WORM!"
X	WINDOWS SYSTEM	msn32.exe	"Added by the MYTOB-FX WORM!"
X	Windows System Guard	msng.exe	"Added by the EGGDROP-BO WORM!"
X	Windows System Guard	msns.exe	"Added by the DWNLDR-IGD TROJAN!"
U	Windows System Tray	msni.exe	"Iambigbrother monitoring software"
X	Windows UDP Control Center	msnmngs.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	msnpd.exe	"Added by the SDBOT.EBA BACKDOOR!"
X	Windows UDP Control Center	winmsn.exe	"Added by the SDBOT.EBA BACKDOOR!"
X	Windows UDP Control Center	msnsmsgrs.exe	"Added by the PUSHBOT.MF WORM!"
X	Windows Update	msnwinsb.exe	"Added by the RBOT-AAH WORM!"
X	windows update	msnsever.exe	"Added by the RBOT-AHN WORM!"
X	Windows Update	msnupdates.exe	"Added by the RBOT-ALK WORM! Note - this file has nothing to do with Windows updates or MSN"
X	Windows Update	msnsupdate.exe	"Added by the RBOT-AXS WORM!"
X	Windows Update	msnsa32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Updater Services	msnupdate.exe	"Added by a variant of the RBOT WORM!"
X	Windows32 Net Database	msnd32.exe	"Added by the RBOT-AAL WORM!"
X	WindowsSystem32	msnmssgr.exe	"Added by the AGENT.ALY BACKDOOR!"
X	WindowsSystem32	msn_kilo.exe	"Added by the AGENT.ALY BACKDOOR!"
X	WindowsSystem32	msnmgaer.exe	"Added by the AGENT.ALY BACKDOOR!"
X	WinDynManager	amsnmsg.exe	"Added by the SDBOT-IA BACKDOOR!"
X	Winnt DNS ident	msnmsrg.exe	"Added by the RBOT.BVQ WORM!"
X	WinUpdate Loader	msnnm.exe	"Added by the REVCUSS.C TROJAN!"
X	WSAConfiguration	msnote30.exe	"Added by the AGOBOT-KF BACKDOOR!"
X	Yahoo! Messanger	ymsngr32.exe	"Added by the WOOTBOT.HY WORM! Note - this should not be confused with Yahoo! Messenger"
X	yahoomsgr	Yahoomsngr.exe	"Added by the AGOBOT.AKZ WORM!"
X	[various names]	MsNetHelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.