Name

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
	Note the filename has a ""0"" rather than an upper case ""o"""
X	"Vaganza-XPloit-[User Name]"""	[user name].exe	"Added by the GAVGENT.A WORM!"
Y	#NAME?	ZkRunOnceR.exe	Internet Security Suite used by ISPs to protect customers against many attacks
X	(Default)	[random filename].exe	"Added by the BLACKMAL WORM! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run and HKLM\RunServices in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X	*MS Setup	[random filename]	"Virtumondo adware
X	*Windows [filename] Checker	[filename]	"Added by the KEDEBE-B WORM!"
X	;Rundll	[filename]	"Added by the PWSLEGMIR.E TROJAN!"
X	Aceu	[random filename]	"PurityScan adware"
X	Adobe Acrobat Reader CFG	[random filename]	"Added by a variant of the RBOT WORM!"
X	Agent Browser	[random filename]	Added by the PPdoor.M-bdr backdoor TROJAN!
X	Agent Explorer	[random filename]	Unidentified adware
X	AIM Instant Message Cookies	[random filename]	"Added by the RBOT-AFV WORM!"
X	AKEYNAME	WinServ.exe	"Added by the EVILBOT.C TROJAN!"
X	AlevirOld	[worm filename]	"Added by the OPASERV WORM!"
X	Anti-Virus	[random filename].exe	"Added by the CAPROBAD-A TROJAN!"
X	AOL Messenger	[random filename]	"Added by an unidentified VIRUS
X	App.EXEName	[path to worm]	"Added by the BODIRU WORM!"
X	ara-key	[random filename]	"Added by the ANTINNY WORM!"
U	army logo	readmename.exe	"Torrent101 potentially unwanted torrent client application that installs a Browser Helper Object and displays advertisements"
X	Avril Lavigne - Muse	[random filename]	"Added by the AVRIL-A WORM!"
X	BIOS XP Loader	[random filename]	"Added by the RBOT-IC WORM!"
X	Bnexe	[random filename]	"Added by the KITRO.D (or ARGEN.A) WORM!"
X	BrasilOld	[worm filename]	"Added by the OPASERV.P WORM!"
X	BrowserUpdateSched	[random filename]	"ZenoSearch adware"
X	cAgOu	[filename].hta	"Added by the KAKWORM WORM!"
X	ccApp	[random filename]	"Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus"
X	center	[random name]32.exe	"Added by the BOFRA.A WORM!"
X	clock	[various filenames]	"LiveChat Adware - known file names include: mssetup.exe
N	CmFlywaveName	CmFlywav.exe	"Driver for Linksys Wireless-G Music Bridge"
U	Codename Dashboard	dashboard.exe	"Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework
X	cof.updit	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Compliant	[worm filename]	"Added by the RBOT-LB WORM!"
X	Config Loader	[worm filename]	"Added by the AGOBOT-AE WORM!"
X	Configuration Loader	FILENAME.EXE	"Added by the AGOBOT-DQ WORM!"
X	Content connector	[random filename].exe	"Added by the DIALER-Y TROJAN! Note - uses a random filename and random folders. Usually the folder containing the file is a Temp folder"
X	crmssrlt	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	CSRSWIN	[trojan filename]	"Added by the WINSHELL.50 TROJAN!"
X	CSRSX	[trojan filename]	"Added by the WINSHELL.50.B TROJAN!"
X	ctfmon32	[random filename].exe	"Added by the RBOT-GSN WORM!"
X	Danton*	[random filename]	"Added by the DANTON TROJAN! where * = random number"
X	ddivmwa	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	DigitalNames	DigitalNamesStart.exe	"DigitalNames spyware variant"
X	Disk Master	[trojan name]	"Added by the DISTER TROJAN! - a spam relayer"
X	Dll Boot Loader on Startup (do not remove this)	[various filenames]	Added by an unidentified TROJAN!
X	dll services	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	dllcvss	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	DNS	[worm filename]	"Added by the BCKDR-CQG BACKDOOR!"
X	Domain Name Resolve Service	dnsresolver.exe	"Added by the KIMAN.A WORM!"
X	down	[trojan filename]	"Added by the SMALL-QJ TROJAN!"
X	DRam prmaessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	DRam prosesor	[random filename]	"Added by the SPYBOT.EE WORM!"
X	DRam prosessor	[random filename]	"Added by the RBOT.CSG WORM!"
X	educational writer	[random filename]	"Added by the RBOT-LZ WORM!"
X	enBrowser	[name of file]	"WINBO adware"
U	ES Current Services	[FILE NAME].exe	"123Keylogger surveillance software. Uninstall this software unless you put it there yourself"
X	example	[random filename].exe	"Added by the NUCLEAR BACKDOOR! Note - this trojan file is located in %Windir%\NR"
X	ExeName32	Warm.scr	"Added by the SCOLD WORM!"
X	Expatch	[random filename]	"Added by the PWSLMIR-G TROJAN!"
X	expcrt	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	explorer	wscript.exe [filename]	"Sneaky way to start any VBS script. Many viruses use VBS files. Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted"
X	ExploreUpdSched	[random filename]	"ZenoSearch adware"
X	F-Secure Gatekeeper	[malware name].exe	"Added by the NUWAR.AXQ WORM!"
X	filename	filename.exe	"Added by the VB.FSY TROJAN!"
X	filename process	kerneldll.exe	"Added by the AGOBOT-PO WORM!"
X	filename process	explore.exe	"Added by the AGOBOT-QN WORM!"
X	filename process	Rundil16.exe	"Added by the GAOBOT.ZX WORM!"
X	Fire Wall services	[random filename]	"Added by the IRCBOT-QY WORM!"
?	FLASH32	#NAME?	"??"
X	FriendlyTypeName	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	FriendlyTypeName	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
X	G00123	[worm filename]	"Added by the BUGBROS WORM!"
X	G4G	[random filename]	Detected as Trojan-Downloader.Win32.VB.fki
X	Ghost Relay	[random filename]	"Added by the DNSCHANG.EK TROJAN!"
X	GlobalSCAPE	[random filename]	"Added by the RBOT-AYM WORM!"
X	Google Earth	[random filename]	"Added by the RBOT-AXK TROJAN!"
X	GPLv3	[random name].dll	"Vundo adware"
X	GustavVED	[filename].exe	"Added by the OPASERV.H WORM!"
X	HDAudio Driver 1.0	[random filename].exe	"Added by the TEADOOR-D TROJAN!"
X	HDAudio Driver 2.0	[random filename].exe	"Added by the TEADOOR-E TROJAN!"
X	hen	[filename].exe	"Added by the TARNO.G TROJAN!"
X	Hostname Manager Server	host32srv.exe	"Added by a variant of the RBOT WORM!"
X	HOT FIX	filename.exe	"Added by the SDBOT-DKM WORM!"
X	hpsysconf1	[random filename]	"Added by a variant of the VIVIA.A TROJAN!"
X	idmlssp	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	ieupdate	[random filename]	"Added by the AGENT-C BACKDOOR!"
X	ifperx	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	Image	"rundll32 [path] [trojan filename]	Install"
X	Internal	[trojan filename]	"Added by the SMOTHER and TRANSLAT TROJANS!"
X	Internat	[trojan filename]	"Added by the CMJSPY-Y TROJAN!"
X	internet	[trojan filename].exe	"Added by the MIFENG-D TROJAN!"
X	Intranet Explorer	[random filename]	"Added by the POEBOT.DK BACKDOOR!"
X	ist service uninstall	[random filename]	"ISTBar adware related"
X	JavaUpdate0.07	[filename]	"Added by the JUPDATE TROJAN!"
X	jcidls	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	JVM0.12	[random filename]	"Added by the TEADOOR-A TROJAN!"
X	JVM0.14	[random filename]	"Added by the TEADOOR-B TROJAN!"
X	jysyqm	[random filename]	"ZenoSearch adware"
X	Kadoc	[random filename].exe	"Added by the STAPREW TROJAN!"
X	kavsvc	[random 6 char filename]	"Added by the QOOLOGIC TROJAN! Uses random file names (examples: nzkklz.exe
X	KAVutil	[worm filename]	"Added by the WINTOO.B WORM!"
X	kern64dll	[random filename]	"Added by the TARNO.J TROJAN!"
X	lar	[trojan filename]	"Added by the ROXY.C TROJAN!"
X	LiveUpdate	[Windows username]05.exe	"Added by the LINEAGE TROJAN!"
X	LoadOrderVerification	[random filename]	"Added by the TRON.A TROJAN!"
X	Local-Settings-of-[User Name]	[User Name].exe	"Added by the GAVGENT.A WORM!"
X	Locator Service	[filename]	"Added by the AGOBOT-KY TROJAN!"
X	LowVersionSupport	[filename]	"Added by the LASTRAS TROJAN!"
N	MacName	MacName.exe	"Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks"
X	Managment Service	[random filename]	Added by the RBOT.BIS TROJAN!
X	Mantis	[filename]	"Added by the MANTIBE VIRUS!"
X	MatrixScreen	[filename]	"Added by the MATRIXSCREEN TROJAN!"
X	mb2np	[random filename]	Added by the IRCBOT.TJ WORM!
X	MbarInstall	[random filename]	"Mirar adware"
X	Media Services	[filename].exe	"Added by the AGENT-BA BACKDOOR!"
X	MemoryManager	[random name].dll	Virtumondo adware related
X	messnger	[worm filename]	"Added by the DELODER WORM!"
X	Mickey Mouse Cereal	[random filename].exe	"Added by the RANKY.Q TROJAN!"
X	MicroLoad	[random filename]	"Added by the DARBY WORM!"
X	MICROSFT ANTIVIRUS UPDATE SUPPORT	[random 10-letter filename].EXE	"Added by the RBOT-AQA WORM!"
X	MICROSFT RAMA UPDATE SUPPORT	[random filename]	"Added by the RBOT-ASM or RBOT-AUW WORMS!"
X	Microsft Upgraed	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	Microsft Windows Adapter 5.1.3013	[random filename]	"Added by the SMALL.HIT TROJAN!"
X	Microsoft (C) HTML Application host	[random filename]	"Added by the RBOT-YB WORM!"
X	Microsoft ADservice	[random filename]	"Added by a variant of the RBOT WORM!"
X	Microsoft Anti-Spy	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Microsoft Core Support	[random filename]	"Added by a variant of the RBOT TROJAN!"
X	Microsoft Corporation	[random filename]	"Added by various VIRUSES
X	Microsoft Diagnostic	[random filename]	"Added by the ACEBOT TROJAN!"
X	Microsoft DirktorWin	[random filename]	"Added by the SPYBOT.GEN3 TROJAN!"
X	MicroSoft Getway Dire	[random filename]	"Added by the IRCBRUTE.AM WORM!"
X	Microsoft IIS	[filename]	"Added by the FRANCETTE-S WORM!"
X	Microsoft IT Update	[random filename]	"Added by a variant of the RBOT WORM!"
X	Microsoft Java Windows Update	[filename]	"Added by the RBOT-DZ WORM!"
X	Microsoft Locals 332	[random filename]	"Added by the RBOT-KU WORM!"
X	Microsoft Security GManagers	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Microsoft Security Monitor Process	[random filename]	"Added by variants of the RBOT WORM! See here"
X	Microsoft Security Panager	[filename]	"Added by the RBOT-ANL WORM!"
X	Microsoft Security Panagers	[random filename]	"Added by the RBOT-AIG WORM!"
X	Microsoft System Backup	[random filename]	"Added by the RBOT-AGM WORM!"
X	Microsoft Tray	[random filename]	"Added by the DELF.BZ TROJAN!"
X	Microsoft Update Loader	[random filename]	"Added by a variant of the RBOT WORM!"
X	Microsoft Update Machine	[random filename]	"Added by a variant of the RBOT WORM!"
X	Microsoft Updates	[worm filename]	"Added by the AGOBOT-AIZ WORM!"
X	Microsoft Updote	[random filename]	"Added by the RBOT-ARC WORM!"
X	Microsoft UpToDate Driver (32-bits)	[random filename].exe	"Added by the SPYBOT.LXJ WORM!"
X	Microsoft Windows Adapter 5.1.3214	[worm filename].exe	"Added by the STRAT.GEN-3 WORM!"
X	Microsoft Windows Update x86	[various filenames]	"Added by a variant of the RBOT WORM! Filenames seen include (but are not limited to firefox.exe
X	Microsoft WinSound	[random filename]	"Added by a variant of the RBOT WORM!"
X	MicrosoftWindows	[various filenames]	"MagicSearch - a CoolWebSearch parasite variant"
X	Microsot NT Support	[random filename].exe	"Added by the RBOT-CTI WORM!"
X	Mioft Wiws Seice ent	[worm filename].exe	"Added by the RBOT-GIJ WORM!"
X	mmsddlx	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	MonAppli	[random filename]	"Added by the DELF.IF TROJAN! The most common filenames are isys32.exe & msnmsg.exe"
X	Monitor Test	[random filename]	"Added by the SDBOT-NC WORM!"
X	MS Domain Name Server Deamon	MSDNSD32.exe	"Added by the RBOT-CMZ WORM!"
X	MS Domain Name System	MSWDNS32.exe	"Added by the RBOT-GKY WORM!"
X	MS Task Manager 32	[trojan filename] .exe	"Added by the RANKY.NF TROJAN!"
X	MS-HTML	[random filename]	"Added by the LATINUS.15 TROJAN!"
X	Msgsvc32	[worm filename]	"Added by the NAUTICAL-A WORM!"
X	MSKCES32	[random filename]	"Added by the CLONER TROJAN!"
X	Msn Update SUPPORT	[random filename]	"Added by the RBOT-BPS WORM!"
X	mswspl	[random filename]	"Added by the SMALL.IQ TROJAN!"
X	Myapp	[filename]	"Added by the FATEE.B WORM!"
X	Name	Iexplorer0.exe	"Added by the THREADSYS TROJAN!"
X	Name Server	mswins.exe	"Added by a variant of the SDBOT WORM!"
X	NAMEDPIPE SYSTEM	namedpipe.exe	"Added by the MYTOB-FH TROJAN!"
X	NAV Auto Update	[random filename]	"Added by the SPYBOT-E WORM!"
X	NavScan	[filename]	"Added by the OBSORB TROJAN!"
X	NETVISIONAdulti	[random filename]	"Trafficadvance dialer"
X	newname	[path to trojan]	"Added by the DRSMARTL-S TROJAN!"
X	NotePad	[worm filename]	"Added by the SILLYFDC-G WORM!"
X	nssysconf	[random filename]	"Added by the VIVIA.A TROJAN!"
X	Ntech.patchs	[trojan filename]	"Added by the LEMIR.G TROJAN!"
X	NvCpl	[random filename]	"Added by the AGOBOT-APJ WORM!"
X	nvviddrv32	[random filename]	"Added by the RBOT-HT BACKDOOR!"
X	Office Monitor Word Exel R	[trojan filename]	"Added by the IRCBOT-VX TROJAN!"
X	OLE	[filename]	"Added by the STAWIN or TARNO.D TROJANS!"
X	passcxd	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	pathname	pathname.exe	"Added by the IRCCONTACT TROJAN!"
X	PGStub.exe	[various filenames]	Unidentified adware
X	Plasdll service	[random filename]	"Added by a variant of the SDBOT WORM!"
X	PNP FIX	[worm filename]	"Added by the RBOT-AKQ WORM!"
X	PostBootReminder	[random filename]	Added by and unidentified WORM or TROJAN!
X	PrivateNet	[various filenames]	Premium rate adult content dialler
X	prompt drive	[random filename]	"Added by the SDBOT.AMF WORM!"
X	putil	[filename]	"Added by the LDPINCH TROJAN!"
X	qbotd	[random filename]	"Added by the BOTTEN TROJAN!"
X	Quicktime Task	[random filename]	"Trafficadvance dialer"
X	Random Unique ID	[worm filename]	"Added by the XROVE-A WORM!"
X	RavTimeXP	[worm filename]	"Added by the WULLIK.B WORM!"
X	RavTimXP	[worm filename]	"Added by the WULLIK.B WORM!"
X	rdvs	[worm filename]	"Added by the ULTIMAX.B WORM!"
X	Reactor3	[random name]32.exe	"Added by the BOFRA.A WORM!"
X	Reactor5	[random name]32.exe	"Added by the BOFRA.D WORM!"
X	Reactor6	[random name]32.exe	"Added by the BOFRA.C WORM!"
X	Reactor7	[random name]32.exe	"Added by the BOFRA.B WORM!"
X	Reactor8	[random name]32.exe	"Added by the BOFRA.E WORM!"
X	Reactor9	[random name]32.exe	"Added by the BOFRA.E WORM!"
X	Registry Value Name	roses.exe	"Added by the RBOT-AFT WORM!"
X	Registry Value Name	service.exe	"Added by the RBOT-AHT WORM!"
X	Registry Value Name	winapi32.exe	"Added by a variant of the RBOT WORM!"
X	Registry Value Name	syswinxp.exe	"Added by the RBOT.BTZWORM!"
X	Registry Value Name	enzxp.exe	"Added by the RBOT-BAJ WORM!"
X	Registry Value Name Start	MsPMSPSa.exe	"Added by a variant of the SDBOT WORM!"
X	reg_key	loader_name.exe	"Added by the BEAGLE.Y or BEAGLE.Z or BEAGLE.AA WORMS!"
X	Rhino	[random name]32.exe	"Added by the BOFRA.A WORM!"
X	rmalt	[random filename]	"Added by the CLICKER-CS TROJAN! Filenames spotted inlcude Setup.exe
X	RPC Service	[random filename]	"Added by the BDOOR-AAD BACKDOOR!"
X	RPCall_[ComputerName]	smhost.exe	"Added by the REDPLUT-B TROJAN!"
X	RSPC Driver	[random filename].exe	"Added by the RBOT-SN WORM!"
X	RSPC Driver D	[random filename]	"Added by a variant of the RBOT WORM!"
X	rtkernsw	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	Rundll	rundll32.exe [random filename].dll	"Added by the MYTOB.IG WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The random DLL file is found in %System%"
X	Runner	lsass.exe [trojan filename]	"Added by the DROWSY-B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	SaMail	[WORM FILE NAME].vbs	"Added by the VBS.LIDO WORM!"
X	Scanreg	[filename]	"Added by the QQPASS.E TROJAN!"
X	ScrSvrOld	[worm filename]	"Added by the OPASERV WORM!"
X	SearchClick	[trojan filename]	"Added by the AGENT-DWR TROJAN!"
X	Service	[trojan filename]	"Added by the KAITEX.E TROJAN!"
X	Service Defender	[random filename]	"Added by a variant of the ZLOB TROJAN! See here"
X	Service Host	[filename].exe	"Added by the TORVEL.B WORM!"
X	Service Pack	[various filenames]	"Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe
X	Service Pack 1	[random filename]	"Added by the VXGAME.Z TROJAN! Note - the filename is random - see the link. Typical examples are vexg6ame4.exe
X	Service PAck SFVP	[worm filename].exe	"Added by a variant of the RBOT WORM! The filename is 4 random characters"
X	Services004	[worm filename]	"Added by the BUGBROS WORM!"
X	SfKg6wIP	[random filename]	Identified as a variant of the TrojanDownloader.Matcash malware
X	SfKg6wIPu	[random filename]	Identified as a variant of the TrojanDownloader.Matcash malware
N	Share-to-Web Namespace Daemon	hpgs2wnd.exe	"Share-to-Web - HP-created software and Internet-based application that enables easy uploading and sharing of photos via affiliated photo-sharing Web sites. Available via Start → Programs"
X	SilentSoftech	[worm filename]	"Added by the SILLYFDC-BL WORM!"
X	SNInstall	[various filenames]	"Spy Sheriff/SpywareNO malware
X	SpeedBoss	[worm filename]	"Added by the OPASERV.AD WORM!"
X	spoolsv.exe	[random filename]	"Added by the RBOT-JB WORM!"
Y	SpybotDeleting*****	[cmd or command] /c del [path] [filename]	"Generated by Spybot Search & Destroy if it encounters files that cannot be deleted during runtime because they are locked by other processes. For example
X	Srv32Old	[worm filename].PIF	"Added by the OPASERV.J WORM!"
X	Startup Configuration	[six character filename]	"Added by the RBOT-ARV WORM!"
X	stdlib	[filename]	"Added by the PERDA-E TROJAN!"
X	Streams Drivers	[trojan filename]	"Added by the RESTARTER.E TROJAN!"
X	Supernova	[worm filename]	"Added by the SURNOVA.A (or SUPOVA) WORM!"
X	support-reverse-smileys	[trojan filename]	"Added by the LITEBOT TROJAN!"
X	sws.exe	[random filename]	"Haldex type adult content dialler"
X	syelimS-esreveR-troppuS	[filename]	"Added by the LITBOT.C TROJAN!"
X	Symantec Autoscan	[random filename]	"Added by the RBOT-AJO WORM!"
X	sysdll	[trojan filename]	"Added by the HUGESOT TROJAN!"
X	sysmon12	[various filenames]	"Wareout - malware masquerading as a spyware and dialer remover"
X	SysStart	[random filename]	"ZenoSearch adware"
X	System backup	[random filename]	"Added by the ADMINCASH.B TROJAN! Note - multiple different file names have been spotted
X	System CPL manager	[random filename]	"Added by the RBOT-SR WORM!"
X	System Presets	[temp name].exe	"Added by the HOSTINF-A WORM!"
X	System Services	[random file name]	"Added by a variant of the RBOT WORM!"
X	System Update	[filename].exe	"CoolWebSearch parasite variant"
X	System Update	[random filename]	"Added by the KORGO.W or KORGO.X WORMS!"
X	System Update	[random filename]	"Added by the SOROMO-A TROJAN!"
X	System32	[worm filename]	"Added by the NAUTICAL-A WORM!"
X	SystemBoot	Mshta.exe ...filename.hta	Adult content dialler
X	SystemEmergency	[various filenames]	"CoolWebSearch Smartsearch parasite variant"
X	SystemManager	[random filename]	"Added by the SETTEC ROOTKIT!"
X	SystemProcEvent	[trojan filename]	"Added by the IRCBOT.I TROJAN! Filenames used are csrwnd.exe
X	Systray	[filename.exe]	"Winfavorites adware"
X	TaskReg	[random filename]	"Added by the CBLAD WORM!"
X	TA_Start	[random filename]	"Zeno Think-Adz adware"
X	Telnet24	[random filename]	"Added by the RBOT-ARD WORM!"
X	TempCom	[randomname].com	"Added by the TRAXG WORM!"
X	Think-Adz	[random filename]	"Zeno Think-Adz adware"
X	TSystem	[trojan filename]	"Added by the NSYS-A TROJAN!"
X	Update for Windows	[various filenames]	"Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe
X	updatesched	[random filename]	"ZenoSearch adware"
X	UpdateWin	[random filename]	"Added by the IRCBOT.AZW BACKDOOR!"
X	UpdSys	[random filename]	Added by the BJ TROJAN!
X	upme	[filename]	"Added by the MUGLY.F WORM!"
X	User32	[filename]	"Added by the NETTRASH TROJAN!"
X	UserSystem	[filename]	"CoolWebSearch Smartsearch parasite variant. Also detected as the SEARCH-A TROJAN!"
X	valuename	svchosts.exe	"Added by a variant of the SDBOT WORM!"
X	ValueS0ft	[random filename]	"Added by a variant of the SPYBOT WORM! See here"
X	ValueX	[random filename]	"Added by the IRCBOT.EE TROJAN!"
X	vbcdtm	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	vbe	[random name].vbe	"Added by the UISGON-A WORM!"
X	VBS.Ipnuker@mm	[worm filename].vbs	"Added by the NUKIP WORM!"
X	Video Process	[random filename]	"Added by the RBOT-LM WORM!"
X	VideoDriver	[filename]	"Added by the GSPOT20.A TROJAN!"
X	Visual Element FX5	[various filenames]	"ClearStream Accelerator adware"
X	Voltage Manager	[random filename]	"Added by the DREFFORT WORM!"
X	vxcxcvfck	[random filename]	"Added by the RANCK-AZ TROJAN! The most common example is ""sbsvsd.exe"" located in %System%"
X	w02db700.dll	[random filename]	"ZenoSearch adware"
X	W32Load	[random filename].scr	"Added by the CASPID WORM!"
X	Web Service	[random filename].exe	"Added by the ADMINCASH TROJAN!"
X	WebRun	[random filename]	"Added by the ADWARELOADER TROJAN!"
X	wescmv	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	WiFix service	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Win I5oahder	[worm filename]	"Added by the AGOBOT-DS WORM!"
?	win name	stat.exe	"??"
X	Win Prosess0r	[random filename]	"Added by the RBOT-BIT WORM!"
X	WIN prosessor16	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	Win Secure Update	[random filename]	"Added by the RBOT-AGI WORM!"
X	Win2Drv	[worm filename]	"Added by the WINTOO WORM!"
X	Win32 Service	[trojan filename]	"Added by the AGENT-GBO TROJAN!"
X	Win32system	[random filename]	"Added by the DDV.B WORM!"
X	winabc	"rundll32.exe [Temp][ORIGFILENAME].DLL	InstallLaunchEv"
X	Windos Seres Agnts	[worm filename].exe	"Added by the RBOT-GUN WORM!"
X	Window service	[random filename]	"Added by the RBOT-ACH WORM!"
X	Windows ASN Service	[random filename]	"Added by the AGOBOT-TC WORM!"
X	Windows Compliant	[random filename]	"Added by the RBOT-IR WORM!"
X	Windows Data Server	[random name].exe	"Added by the SPYBOT-DS WORM!"
X	Windows Domain Name Drivers	windns.exe	"Added by the FORBOT-EP WORM!"
X	Windows ExpIorer	[random filename]	"Added by the RBOT-AKO WORM!"
X	Windows Explorer	[filename].exe	"Added by the SDBOT TROJAN!"
X	Windows Host Name	lmass.exe	"Added by the GAOBOT.O WORM!"
X	Windows LoL Layer	[random filename].exe	"Added by the RBOT-GMD WORM!"
X	Windows Media Player	[random filename]	"Added by a variant of the RBOT WORM!"
X	Windows Media Player Update	[random filename]	"Added by the RBOT-ET WORM!"
X	Windows Media SP.2.37	[random filename]	"Added by the LEMIR.C TROJAN!"
X	Windows Microsoft Service	[random filename]	"Added by the AGENT-HCD TROJAN!"
X	Windows NT Service Name	winshock.exe	"Added by the RBOT-PK WORM!"
X	Windows NT Service Name	svchcst.exe	"Added by the RBOT-NV WORM!"
X	Windows Print Monitor Daemon	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	Windows Registry Name	[random filename]	"Added by the RBOT-AEB WORM!"
X	Windows Registry Name	winses.exe	"Added by the RBOT-ADB WORM!"
X	Windows Secure Layer	[random filename]	"Added by the RBOT.DRF WORM!"
X	Windows Security Service	[random file name]	"Added by the RBOT-ALV WORM!"
X	Windows Servce Agent	[random filename]	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Service Agent	[random filename].exe	"Added by the IRCBOT-XE TROJAN!"
X	Windows Service alge	[random filename]	"Added by the RBOT.GJO TROJAN!"
X	Windows Services	filename.exe	"Added by the SDBOT.FSK BACKDOOR!"
X	Windows Standard Securty	[random 3-letter filename]	"Added by the RBOT-ALF WORM!"
X	Windows System Service	[worm filename]	"Added by the RBOT.XG WORM!"
X	Windows Update	[filename]	"Added by the NORIO TROJAN! Acts as a hi-jacker redirecting to adult content sites"
X	Windows update 2005	[random filename]	"Added by the RBOT.ARP WORM!"
X	Windows Update Checker	[random filename]	Adware downloader trojan
X	Windows Update V6	[random filename]	"Added by the RBOT-KT WORM!"
X	WindowsReg% update	[random filename].exe	"Added by the RBOT-HH WORM!"
X	WindowsRegistration	[random filename]	"Added by the RBOT-NO WORM!"
X	WindowsRegKey Autoupdate	[random filename]	"Added by a variant of the RBOT WORM!"
X	WindowsRegKey update	[random filename]	"Added by the RBOT.QT WORM!"
X	WindowsService	[random name].dll	"Added by the VUNDO-X TROJAN!"
X	Windowz	[original worm filename].vbs	"Added by the NUKIP WORM!"
X	WinFixer service	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	wingo	[various filenames]	"Added by the BAGLE-AU WORM!"
X	WinLoader	[random filename]	"Added by variants of the SUBSEVEN TROJAN!"
X	Winsock2 driver	[random filename]	"Added by members of the SPYBOT family of WORMS! Note - the random filename is located in %System%"
X	Winsvr	[random filename].exe	"Added by the ADCLICK-DK TROJAN!"
X	WinUPPD.exe	[random filename]	Added by an unidentified WORM/TROJAN!
X	Winz Firewall	[random filename].exe	"Added by a variant of the SDBOT WORM!"
X	Winzip	[various filenames]	"Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe
X	worknote1	[filename].exe	"Added by the MEETOT WORM!"
X	wpxmls	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	Wupdate driver	[various filenames]	"Added by a variant of the SPYBOT WORM!"
X	xp_system	[filename]	"Added by the BOOKMARKER.J TROJAN! The file is located in %Windir%\inet20004"
X	ZaCker	[filename].PIF	"Added by the HOLAR.A WORM!"
X	ZagrebLand	[trojan filename]	"Added by the RENOS-EH TROJAN!"
X	zcseacrt	[random filename]	"Added by a variant of the SLAPER TROJAN!"
X	Zeno	[random filename]	"ZenoSearch adware"
X	zonealarm	[random filename]	"Added by an unidentified VIRUS
X	ZStart	[various filenames]	"VX2.Transponder parasite updater/installer related"
X	Z_Start	[random filename]	"ZenoSearch adware"
X	[Entry name]	System.exe	"Added by the NETHIEF-N TROJAN!"
X	[executed file name]	App.exe	"Added by the WAXPOW WORM!"
X	[executed file name]	Regsrv32.com	"Added by the SOUTHGHOST WORM!"
X	[filename]	svchost.scr	"Added by the BANKER-CC TROJAN!"
X	[original filename]	svchost.scr	"Added by the BANCBAN-CX TROJAN!"
X	[original filename]	xphost.scr	"Added by the BANCBAN-HM TROJAN!"
X	[random filename]	slk8x2peu.exe	"QuickLinks adware"
X	[random names]	eee2.exe	"MediaMotor adware"
X	[random name]	wincpu.exe	"Added by an unidentified VIRUS
X	[random name]	m?dtc.exe	"PurityScan adware"
X	[random name]	ping.exe	"PurityScan adware. Note - do not confuse with the Microsoft utility of the same name as described here"
X	[random name]	CXTPLS_LOADER.EXE	"AproposMedia adware"
X	[random name]	??plorer.exe	"PurityScan adware"
X	[random name]	?hkdsk.exe	"PurityScan adware"
X	[random name]	?hkntfs.exe	"PurityScan adware"
X	[random name]	l?gonui.exe	"PurityScan adware"
X	[random name]	m?iexec.exe	"PurityScan adware"
X	[random name]	r?gsvr32.exe	"PurityScan adware"
X	[random name]	t?skmgr.exe	"PurityScan adware"
X	[random name]	w?auboot.exe	"PurityScan adware"
X	[random name]	w?auclt.exe	"PurityScan adware"
X	[random name]	w?crtupd.exe	"PurityScan adware"
X	[random name]	w?wexec.exe	"PurityScan adware"
X	[random name]	??erinit.exe	"PurityScan adware"
X	[random name]	d?dplay.exe	"PurityScan adware"
X	[random name]	n?tepad.exe	"PurityScan adware"
X	[random name]	??chost.exe	"PurityScan adware"
X	[random name]	??oolsv.exe	"PurityScan adware"
X	[random name]	??xplore.exe	"PurityScan adware"
X	[random name]	r?ndll32.exe	"PurityScan adware"
X	[random name]	se?vices.exe	"PurityScan adware"
X	[random name]	w?nlogon.exe	"PurityScan adware"
X	[random name]	w?nword.exe	"PurityScan adware"
X	[random name]	??anregw.exe	"PurityScan adware"
X	[random name]	?ttrib.exe	"PurityScan adware"
X	[random name]	j?vaw.exe	"PurityScan adware"
X	[random name]	l?ass.exe	"PurityScan adware"
X	[random name]	m?config.exe	"PurityScan adware"
X	[random name]	n?lookup.exe	"PurityScan adware"
X	[random name]	n?pdb.exe	"PurityScan adware"
X	[random name]	??ool32.exe	"PurityScan adware"
X	[random name]	??rss.exe	"PurityScan adware"
X	[random name]	??rvices.exe	"PurityScan adware"
X	[random name]	?ti2evxx.exe	"PurityScan adware"
X	[random name]	d?xplore.exe	"PurityScan adware"
X	[random name]	chkdsk.exe	"PurityScan adware. Note - the legitimate Windows chkdsk.exe will always be located in %System% and will NOT figure among the startups!"
X	[random name]	dvdplay.exe	"PurityScan adware"
X	[random name]	spoolsv.exe	"PurityScan adware. Note - this is not the legitimate spoolsv.exe which is always located in %System%"
X	[random name]	w?aclt.exe	"PurityScan adware"
X	[random name]	wucrtupd.exe	"PurityScan adware. Do not confuse with the legitimate Windows Critical Update Notification (wucrtupd.exe) process"
X	[random name]	charmapnt.exe	"Added by the BANCOS-DR TROJAN!"
X	[random name]	n?tdde.exe	"PurityScan adware"
X	[random name]	r?gedit.exe	"PurityScan adware"
X	[random name]	r?ndll.exe	"PurityScan adware"
X	[random name]	scanregw.exe	"PurityScan adware. Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines"
X	[random name]	wuauboot.exe	"PurityScan adware. Note - do not confuse with the legitimate wuauboot.exe process which should not figure in Msconfig/Startup!"
X	[random name]	w?nspool.exe	"PurityScan adware"
X	[random name]	svchost.exe	"Added by the BANCBAN-JC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\config"
X	[random name]	[random name].dll	"SearchNet adware"
X	[random name]	iexpl0ra.exe	"Added by the ULPM.BD TROJAN!"
X	[random name]	rundl13a.exe	"Added by the GAMPASS-L TROJAN!"
X	[random name]	Servere.exe	"Added by the LEGMIR-AQM TROJAN!"
X	[random name]	twain_32.exe	"Added by the AGENT.AM TROJAN! Note - example names include ""XviD""
X	[random name]	explore3.exe	"Added by the DELF.FAN TROJAN!"
X	[random name]	taskmngr.exe	"Added by the AGOBOT-CB WORM!"
X	[random name]	netdde.exe	"PurityScan adware. Do not confuse with the legitimate Network DDE - DDE Communication (netdde.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[random name]	chkntfs.exe	"PurityScan adware. Do not confuse with the legitimate NTFS Volume Maitenance Utility (chkntfs.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[random name]	notepad.exe	"PurityScan adware. Note - this is not Windows Notepad which has the same executable name"
X	[random name]	services.exe	"PurityScan adware. Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	[random name]	ntvdm.exe	"PurityScan adware. Do not confuse with the legitimate ntvdm.exe process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[random name]	msiexec.exe	"PurityScan adware. Do not confuse with the legitimate Windows® Installer (msiexec.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[random name]	userinit.exe	"PurityScan adware. Do not confuse with the legitimate Userinit Logon Application (userinit.exe) process which is always located in %System% and should not figure in Msconfig/Startup!"
X	[random name]	regedit.exe	"PurityScan adware. Note - this is not the valid Windows registry editor which resides in %Windir% and will not figure in Msconfig/Startup!"
X	[random name]	wuauclt.exe	"PurityScan adware. Note - this is not the legitimate wuauclt.exe process
X	[random name]	?ervices.exe	"PurityScan adware"
X	[random name]	s?chost.exe	"PurityScan adware"
X	[random name]	c?rss.exe	"PurityScan adware"
X	[random name]	mrgdll.exe	"Nortel Antivirus rogue security software - not recommended"
X	[random name]	wox.exe	"Nortel Antivirus rogue security software - not recommended"
X	[Randomly chosen existing folder name]	_autorun.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_cfg.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_config.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_env.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_loader.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_login.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_setup.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_start.exe	"Added by the ANTINNY-L WORM!"
X	[trojan filename]	Install.exe	"Added by the BANCBAN-FS TROJAN!"
X	[trojan name]	svchost.exe	"Added by the BANCBAN-CI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	[unknown name]	WINBASICS32.EXE	"Added by the SDBOT-JH WORM!"
X	[username] config	[path to trojan]	"Added by the MOSUCK-H TROJAN!"
X	[various filenames]	qtsks.exe	Added by the WEBDOR.Y TROJAN
X	[various names]	elf.exe	"Elf is a hacker program
X	[various names]	crsrs.exe	"Added by the FORBOT-AK WORM!"
X	[various names]	Windows32.exe	Added by any of a number of WORM or TROJAN variants
X	[various names]	bling.exe	"Added by the RBOT-NI WORM!"
X	[various names]	mediaplayer32.exe	"Added by a variant of the RBOT WORM!"
X	[various names]	winlogon32.exe	Added by an unidentified WORM or TROJAN!
X	[various names]	svchostss.exe	"Added by a variant of the RBOT WORM!"
X	[various names]	win32snd.exe	"Added by the RBOT-DQ WORM!"
X	[various names]	shch.exe	Premium rate adult content dialler
X	[various names]	PasswdMon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	runload32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	dstart2.exe	"Adware - detected by Kaspersky as the SMALL.ALW TROJAN!"
X	[various names]	msdos32.exe	Added by a variant of the AGENT.AH TROJAN!
X	[various names]	sitebar.exe	Added by an unidentified TROJAN!
X	[various names]	backorif.exe	"Added by a NTROOTKIT TROJAN variant!"
X	[various names]	bhoserv.exe	"Added by a NTROOTKIT TROJAN variant!"
X	[various names]	driver32.exe	"Added by a variant of the SDBOT WORM!"
X	[various names]	hyandex.exe	"Added by a NTROOTKIT TROJAN variant!"
X	[various names]	Uint32.exe	"Added by a NTROOTKIT TROJAN variant!"
X	[various names]	Uint32.exe	"Added by a NTROOTKIT TROJAN variant!"
X	[various names]	_ctcp.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	10010.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	321102.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	34763.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	abrek.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ActionScr.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	AliceSD.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	AppMasterCenter.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	atl_helper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ATLIEHELPER.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	avpmondll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	awinrar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	backd.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	backorif.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	barint.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	bhoserv.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	bingo9.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	bnui.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Bogobot.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	borlandg.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	BoundRec.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	br0ken.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Brong32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	clamav.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	cmon14.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	cnftips.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	control64.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	corrida.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	CToolBar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	DCC_send.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	defect08.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Dest068.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	dialer423.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	diskserv.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	driver64.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	DTOURS.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ERTYDF.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ExchangeMaster.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	EXE32EXE.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	expoler.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	FLKPT.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	forces_elite.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ftbar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	gabber.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	hyandex.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	iehelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	iesetupdll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	init32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	InpriseMon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	install2.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	jopplerg.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Kargo.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	keybdll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	KeywordFinder.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	killall.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	LOPTCON.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	media64.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MNTP.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MON76234.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	moniter.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	mozilla-text.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	msag.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ms-its.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MsNetHelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	new32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	newbreed.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	nmdllw.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NopeZ.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NsCplTray.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NSYSCPLSTR.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NukeSpan.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	openstre.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	panel_its.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ParisM.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	pizda.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	powerdll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	PrcIdle.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	prcmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Preliminary.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	prgsys0984.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	progmen.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	qwe.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	RtlFindVal.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SAPSTR.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	sbin.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	scanSYS.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Serviceprocess.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SetupExeDll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Shaitan1678.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	slamm.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	sound64.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SpyElim.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	srbho.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ssweeper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	StartCpl.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	startman.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	StatusCheck.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	stuffmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	sysconf16.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SysEntry.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	sysmon12.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	syspanel.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SysSupport.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SYSTRAV.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	TemplateDongle.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	teqq32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Testimonials.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	TForm1.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	TorontoMail.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Trayz.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	TRPT.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	trycrt.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	typeconf.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Uint32.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	uio.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	UserSp1.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	utsgmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	vxdman.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	WhatsNewBot.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	WinInitDll.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	wormexe.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	WTFCTF.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	XTermInit.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	xwiz.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	xxtoolbar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	zantu.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	zxc.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ABCXYZ.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	dePloy.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	JAguAr.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	80d0.exe	"MediaMotor adware"
X	[various names]	exe81.exe	"MediaMotor adware"
X	[various names]	exe82.exe	"MediaMotor adware"
X	[various names]	MSTCPDLL.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	seli.exe	"MediaMotor adware"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.