Profile

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	Hardware Profile	hxdef.exe	"Added by the LOVGATE.AB WORM!"
X	Hardware Profile	hxdef.exe...	"Added by the LOVGATE.Z WORM!"
X	LoadPowerProfile	ASDAPI.EXE	"Added by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll"
U	LoadPowerProfile	Rundll32.exe powrprof.dll	"Power management specifics such as monitor shut-off
X	LoadPowerProfile	Rundll.exe powerprof.dll	"Added by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses ""Rundll.exe"" whereas the uninfected version uses ""Rundll32.exe"""
X	LoadPowerProfile	rundl.exe	"Added by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll"
X	LoadPowerProfile	Rundll32.exe	"Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has ""powrprof.dll"" appended to the command/data line"
X	LoadPowerScheme	rundll32.exe powerprof.dll CheckPowerProfile	"Ulubione adult content dialer. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
N	Lwinst Run Profiler	lwtest.exe	Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
X	Microsoft Profile Manager	profile.exe	"Added by a variant of the IRCBOT TROJAN!"
U	PCDrProfiler	RunProfiler.exe	Part of PC Doctor software installed for some machines. Disabling or enabling it is down to your preference
X	PowerProfile	mfcp30.exe	"Added by the RINDAS-A TROJAN!"
X	Profile	Profile.vbs	"Added by the WHITEHO VIRUS or TRAPPY WORM!"
N	Profiler	Profiler.exe	"Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
X	profiler	liteout.exe	"Added by the ZAPCHAS-G WORM!"
X	profiler	prof.exe	"Added by the ZAPCHAS-G WORM!"
N	Profiler	ProfilerU.exe	"Enables the ""Profiler"" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
N	ProfilerU	ProfilerU.exe	"Saitek SST (Saitek Smart Technolgy) Profile Launcher - allows System Tray access to the ""Profiler"" and ""Control Panel"" for Saitek's game controllers. Start manually via Start -> Programs -> Saitek SD6 Programming Software -> Profiler"
X	Soft Profile Inc	hxdef.exe...	"Added by the LOVGATE.AO WORM!"
X	Soft Profile Inc	hxdef.exe	"Added by the LOVGATE.E WORM!"
N	Start Wingman Profiler	lwtest.exe	"Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer
N	Start Wingman Profiler	LWEMon.exe	Part of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed
X	System Applications Profile	sap.exe	"Added by the RBOT-QF WORM!"
X	System Profile	Regsrv.exe	"Added by a variant of the OPTIX TROJAN!"
X	WinProfile	Command.exe	"Added by the BUDDY.E TROJAN!"
X	WinProfile	sndcfg16.exe	"Added by the SNDC.A WORM!"
X	winprofile	iexpiore.exe	Added by a variant of the MONCHER WORM!
X	WinProfile	iexpIore.exe	"Added by the CHUM-C TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.