NET.EXE

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	$EnterNet	Enternet.exe	"Connection manager for the EnterNet ISP. You can also use RASPPOE"
Y	a-winpoet-service	winpppoverethernet.exe	"WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion
X	Anskya	PYSKY.NET.exe	"Added by the DLOADER-MW TROJAN!"
U	ARMOR2NET	Armor2net.exe	"Related to Armor2net personal firewall (possibly contains or is related to a product known as ArmorWall - which is a known rogue
X	blah service	internet.exe	"Added by a variant of the RBOT WORM!"
U	CPQInet Runtime Service	CpqInet.exe	"For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers"
X	Critical Update Check	battlenet.exe	"Added by the DELF-LB TROJAN!"
X	Ethernet Drivers	ethernet.exe	"Added by the GAOBOT.CEZ WORM!"
X	Ethernet Linking	ethernet.exe	"Added by a variant of the IRCBOT TROJAN!"
Y	FltProcess	msinet.exe	"Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done"
U	GuruNet	GuruNet.exe	"GuruNet lets you click on any word on your screen to get the relevant information you want"
X	I/O Controllers	svcnet.exe	"Added by the TIBIK-B TROJAN!"
X	InetMSN	msnet.exe	"Added by a variant of the SDBOT TROJAN!"
X	Internet	Internet.exe	"Added by the PWS-CS TROJAN!"
X	Internet Services	internet.exe	"Added by the MYTOB.BT WORM!"
X	Internet.exe	Internet.exe	"Added by the MAGICCALL VIRUS!"
X	internet.exe	yinyin3345.vbs	"Added by the YINI MACRO!"
X	Intranet	intranet.exe	"Added by the CHIMOZ.AC TROJAN!"
X	ISS	inet.exe	"Meplex adware"
U	MBNet	mbnet.exe	MBNet (Portugal) Credit Card Processing software
X	Media Player	Sysnet.exe	"BANKER.MW spyware"
X	Micrcoft Updat	Internet.exe	"Added by the RBOT-ANA WORM!"
X	Microsoft Information	securenet.exe	"Added by the SDBOT.AJM WORM!"
X	Microsoft Network	msnet.exe	"Added by the MOCKBOT.A WORM!"
X	Microsoft Update	Botnet.exe	"Added by the RBOT.AFL WORM!"
N	Mirabilis ICQ	ICQNet.exe	"If connected to the internet
X	MS Java for Windows XP & NT	javanet.exe	"Added by the VANEBOT-A WORM!"
X	Msinet	Msinet.exe	"Added by the RBOT-AOA WORM!"
X	MSNET	msnet.exe	"Added by the BOA WORM!"
X	NetworkAssociates Inc	internet.exe	"Added by the LOVGATE.AB WORM!"
N	Overnet	Overnet.exe	"Overnet peer-to-peer (P2P) file sharing program"
X	PcSecureNet	PcSecureNet.exe	"PcSecureNet rogue security software - not recommended
X	rs32net	rs32net.exe	"Added by the AGENT-IFH TROJAN!"
X	Runtt1	Internet.exe	"Added by the LINEAGE-Q TROJAN!"
X	Shell API32	svcnet.exe	"Added by the TIBICK.C WORM!"
X	sysnet	sysnet.exe	"CasClient adware - also detected as the CMAPP TROJAN!"
X	system	sysnet.exe	"Added by the VETOR-J WORM!"
X	System Networking	sysnet.exe	"Added by the RBOT.API WORM!"
X	System Restore	svcnet.exe	"Added by the TIBICK WORM!"
X	System Update2	wininet.exe	"Added by the AUTOTROJ-C TROJAN!"
X	System64	inet.exe	"Added by the DENGLE-A TROJAN!"
X	SystemNetwork	sysnet.exe	"Added by a variant of the RBOT WORM!"
X	Telnet	Telnet.exe	"Added by the VOUMIT-A WORM! Note - this is not the legitimate telnet.exe application which is always located in %System% and should not normally figure in Msconfig/Startup! This file is located in a ""mirc32"" folder"
X	The Ethernet	ethernet.exe	"Added by a variant of the SDBOT WORM!"
X	The Ethernet	intranet.exe	"Added by a variant of the SDBOT WORM!"
X	The Intranet	intranet.exe	"Added by a variant of the SDBOT WORM!"
U	Warnet	warnet.exe	Warnet - system cleanup software
X	Windows connection manager	Internet.exe	"Added by the RBOT-APN WORM! Note - file is found in the Windows or Winnt folder. Make sure you check the link on this one
X	Windows Internet Browser Services	internet.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Internet Service	wininet.exe	"Added by the RBOT-AUX WORM!"
X	Windows Nets	WinNET.exe	"Added by the RBOT-MO WORM!"
X	wininet	wininet.exe	"Added by the STUBBOT-C WORM!"
X	winnet	winnet.exe	"CommonName Toolbar spyware. To uninstall see here"
Y	WinPoet	WinPPPoverEthernet.exe	"WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion
X	Wins Service Driver	winet.exe	"Added by the RBOT-APV WORM!"
?	WOOKIT	GestMaj.exe GestionnaireInternet.exe	"Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?"
X	xloadnet	xloadnet.exe	Added by the VB.NCK TROJAN!
X	Yahoo!	ethernet.exe	"Added by the PROSTI.AA BACKDOOR!"
X	{52-28-8E-E8-ZN}	thinksnet.exe	"Zeno Think-Adz adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.