RE.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X		iexpl0re.exe	"Added by the RBOT-SD WORM! Note - has a blank entry under the Startup Item/Name field"
X	$WindowsRegKey%update	IEXPLORE.EXE	"Added by the RBOT-EZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	.mssecure	mssecure.exe	"Added by the DDOS_BOXED.X TROJAN!"
X	007-Anti-Spyware.exe	007-Anti-Spyware.exe	"007 Anti-Spyware rogue security software - not recommended"
X	10Base-T	explore.exe	"Added by the AGOBOT-IJ WORM!"
U	AAW	Ad-Aware.exe	"Ad-Aware SE Personal from Lavasoft - popular spyware/adware removal tool. Now superseded by Ad-Aware 2008 Free"
U	Ad-Aware	Ad-Aware.exe	"Ad-Aware from Lavasoft - popular spyware/adware removal tool"
X	Ad-Aware	Ad-Aware.exe	"Added by the RBOT-ADJ WORM! Note - this is not the popular Ad-Aware spware/adware removal tool and is located in %System%"
U	Adaware Bootup	Ad-aware.exe	"Ad-Aware from Lavasoft - popular spyware/adware removal tool"
X	Adaware lptt01	adaware.exe	"RapidBlaster variant (in a ""Adaware"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware"
X	Adaware ml097e	adaware.exe	"RapidBlaster variant (in a ""Adaware"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware"
Y	ANONYMIZER_SPYWAREKILLER	AnonAntiSpyware.exe	"Anonymizer Anti-Spyware - now discontinued"
X	AntiCareMain	AntiCare.exe	"AntiCare rogue security software - not recommended"
X	AntiMalware	AntiMalware.exe	"AntiMalware rogue security software - not recommended
X	AntiSpyware	AntiSpyware.exe	"AntiSpywareApp rogue spyware remover - not recommended
X	AntiSpyware3000.exe	antispyware.exe	"AntiSpyware 3000 rogue spyware remover - not recommended
N	AOL Service Libraries	AOLSoftware.exe	"Quoted from AOL Beta Team
N	AOLSoftware	AOLSoftware.exe	"Quoted from AOL Beta Team
X	APcSecure	APcSecure.exe	"APcSecure rogue security software - not recommended
U	Arovax AntiSpyware	arovaxantispyware.exe	"Part of Arovax AntiSpyware from Arovax
U	arovaxantispyware	arovaxantispyware.exe	"Part of Arovax AntiSpyware from Arovax
X	AV Care	AvCare.exe	"AvCare rogue security software - not recommended
X	AXVenore	AXVenore.exe	"Added by an unidentified TROJAN - see here"
N	BearShare	bearshare.exe	"BearShare file sharing client. Versions known to include spyware - see here"
X	Beawver	saqevre.exe	"Added by a variant of the RANKY TROJAN!"
X	Breg	bcre.exe	"BroadcastPC adware variant"
X	Breg	bptre.exe	"BroadcastPC adware variant"
X	btmsre.exe	btmsre.exe	"Added by the SDBOT.AM WORM!"
X	capture	capture.exe	"Added by the THEEF-B TROJAN!"
N	CaptureBat	Capture.exe	"!Quick Screen Capture from EtruSoft Inc. - ""allows you to take screenshots from any part of your screen in more than 10 ways
X	cmssapp	iexplore.exe	"Added by the BANCBAN-GF TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
?	Concurre	concurre.exe	"??"
X	Config Loadation	iEEexplore.exe	"Added by the SDBOT.H TROJAN!"
X	Configuration Loader	IEXPL0RE.EXE	"Added by the SDBOT BACKDOOR! Note the number ""0"" in the filename"
X	Configuration Loader	lexplore.exe	"Added by the RBOT-AGX WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Configuration Loader	IEXPLORE.EXE	"Added by the SDBOT-KW WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Configuration Loader	wincore.exe	"Added by the SDBOT.BHE WORM!"
X	Configuration Loader	explore.exe	"Added by the GAOBOT.GW WORM!"
X	Configuration Loadr	iexplore.exee	Added by an unidentified WORM or TROJAN!
X	Creates stractures for system management	stacture.exe	"Added by the SDBOT-DHS WORM!"
X	Current Security Config	csecure.exe	"Added by the RBOT-AMO WORM!"
X	Default web browser	IexpIore.exe	"Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer)
X	Device Security	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Dkware lptt01	dkware.exe	"RapidBlaster variant (in a ""DonkeySoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Dkware ml097e	dkware.exe	"RapidBlaster variant (in a ""DonkeySoft"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	EA Core	Core.exe	"Electronic Arts EA Link software - ""gives you a secure yet simple way to download EA PC games and patches
X	EXPL0RE.EXE	EXPL0RE.EXE	"Added by the POPNO-A TROJAN! Note that the filename is spelled using the digit ""0"" instead of the uppercase letter ""o"""
X	explore	explore.exe	"Added by any number of VIRUSES
X	Explore	explore.exe	Adult content dialler
X	Explore	PLORE.EXE	"Added by the FORBOT-P WORM!"
X	explore manager	explore.exe	"Added by the DONBOMB.A TROJAN!"
X	explore.exe	Explore.exe	"Added by the GRAYBIRD.G TROJAN!"
X	EXPLORER MICROSOFT SYSTEM	explore.exe	"Added by a variant of the RBOT WORM!"
X	Explorer Updater	IEXPLORE.exe	"Added by the SDBOT-WO WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	filename process	explore.exe	"Added by the AGOBOT-QN WORM!"
X	FireExplore Update	FireExplore.exe	"Added by a variant of the RBOT WORM!"
U	FolderShare	FolderShare.exe	"""FolderShare allows you to create a private peer-to-peer network that will help you to synchronize files across multiple devices and access or share files with colleagues and friends"""
X	foobin lptt01	adaware.exe	"RapidBlaster variant (in a ""foo1"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	foobin ml097e	adaware.exe	"RapidBlaster variant (in a ""foo1"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
U	Hare	hare.exe	"Hare - improve and optimize performance of desktop/laptop PCs"
X	HF Security	hfsecure.exe	"Added by the AGOBOT-TI WORM!"
X	Highspeeddownloader	SetupClickHere.EXE	"Homepage hijacker
U	Hook99startup	hk2re.exe	""Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons
N	HostManager	AOLSoftware.exe	"Quoted from AOL Beta Team
X	HP Update Assistant	HPAware.exe	Added by the MRO TROJAN!
X	hri	iexpl0re.exe	"Added by the DLOADER.MAQ TROJAN! Note the number ""0"" in the filename"
X	IEDriver	xplore.exe	"IeDriver adware variant"
X	Iexplore	iexplore.exe	"Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	IEXPLORE	iexplore.exe	"Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	IExplore	IEXPLORE.EXE	"Added by the DLOADER-YZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in a ""Custom"" subfolder"
X	IEXPLORE	IEXPLORE.EXE	"Added by the BANKER-BWE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Iexplore Services	iexplore.exe	"Added by the LITHIUM BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup!"
X	IEXPLORE.EXE	[path to trojan]	"Added by the BANCOS-CJ TROJAN!"
X	IEXPLORE.EXE	goot.exe	"Added by the BIFROSE-C TROJAN!"
X	InstantPleasure	instantpleasure.exe	Adult content dialler
X	InSysSecure	InSysSecure.exe	"InSysSecure rogue security software - not recommended
X	Internet Explore Microsoft	lEXPLORE.EXE	"Added by the RBOT-AOF WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Internet Explorer	IEXPLORE.EXE	"Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer	iexpiore.exe	"Added by the RBOT-AZC WORM!"
X	Internet Explorer Configuration	IEXPLORE.EXE	"Added by the SDBOT-UL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer6	IEexplore.exe	"Added by the RBOT.AGC WORM. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Internet Explorer6.0	IEXPLORE.EXE	"Added by the RBOT.ENZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Intespention	IEXPLORE.exe	"Added by the FORBOT-FL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	IPC Spool Manager	wnmgre.exe	"Added by the SDBOT-ZC WORM!"
X	ixplore	ixplore.exe	"Added by the SDBOT-CY TROJAN!"
X	Java Runtimes	iexplore.exe	"Added by the KILLAV.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This file is located in a %Windir%\Java\Java folder"
X	JavaCore	JavaCore.exe	"Added by the MATCASH TROJAN!"
X	jusodl	severe.exe	"Added by the QQPASS.48436 TROJAN!"
X	kERe	kERe.exe	"Added by the BRONTOK-BT WORM!"
X	KernellApps	lexplore.exe	"Added by the BANCBAN-BS TROJAN! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
U	Kodak EasyShare software	EasyShare.exe	Software bundled with Kodak digital cameras to manage the connection between the PC and the Camera. Can be started manually
X	KvmSecure.exe	KvmSecure.exe	"KvmSecure rogue security software - not recommended
U	Launch LGDCore	LGDCore.exe	Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. This is the keyboard driver and if it's disabled you will lose access to special features and programmed keys
X	Lavasoft Ad-Aware	Ad-Aware.exe	"Added by the RBOT-SO WORM! Note - this is not the popular Ad-Aware spware/adware removal tool and is located in %System%"
X	lexplore	lexplore.exe	"Added by the BROPIA WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
U	LGDCore	LGDCore.exe	Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. This is the keyboard driver and if it's disabled you will lose access to special features and programmed keys
X	Limewire	LimeWire.exe	"Added by the RBOT-AGH WORM!"
N	LimeWire On Startup	LimeWire.exe	"LimeWire - Peer to Peer (P2P) file-sharing client. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
N	LimeWire x.x	LimeWire.exe	"LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware"
X	lnternet Update	lExplore.exe	"Added by the RBOT-GRH WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Memory Check	memore.exe	"Added by the KILLAV.C TROJAN!"
X	Microsoft	iexplore.exe	"Added by the QQROB-R TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft Configure 32	msgconfigre.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft DLL Authentification	dllsecure.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Explorer Service	msexplore.exe	"Added by the IRCBOT.AYB BACKDOOR!"
X	Microsoft IE	Iexplore.exe	"Added by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft Internet Explorer	iexplore.exe	"Added by the POEBOT-J WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Microsoft Internet Explorer	lEXPLORE.EXE	"Added by the RBOT-AMM WORM! Note - the executable is spelt with a lower case ""L"" rather than an lower or upper case ""i"" which is the case with Internet Explorer"
X	Microsoft Synchronization Manager	firewire.exe	"Added by the SDBOT-AFC WORM!"
X	Microsoft Update Service	wmiprvre.exe	"Added by the AGOBOT-NN WORM!"
X	Microsoft Windows (D)	iexplore.exe	Identified as a variant of the TrojanSpy.Agent malware
X	MicrosoftServiceManager	EXPLORERE.EXE	"Added by the YAHA.AB WORM!"
X	Microsoft�	iexplore.exe	"Added by the IRCBOT-ACO TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\dllcache"
X	Micrsoft Internet Explorer	IEXPL0RE.EXE	"Added by the RBOT-AQV WORM! Note the number ""0"" in the filename"
X	MS Explorer	mexplore.exe	"Added by the YAHA.AE WORM!"
X	MS SyS Restore	sysrestore.exe	"Added by the RBOT.XM WORM!"
X	msmsgs.exe	IEXPLORE.EXE	"Added by the VB.FQX TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	MSN File & Folder Sharing App	msnfileshare.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Security Agent	msnsecure.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Software	msnsoftware.exe	"Added by the IRCBOT.AWD BACKDOOR!"
X	myMh2	iexpl0re.exe	"Added by the AGENT.HWE TROJAN! Note the number ""0"" in the filename"
X	MyPcSecure	MyPcSecure.exe	"MyPcSecure rogue security software - not recommended
X	NoAdware	NoAdware.exe	"NoAdware - spyware remover. This version is not recommended - see here"
X	nternet Explorer	iexplore.exe	"Added by the FORBOT-CT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
N	ocraware	ocraware.exe	"Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications
X	OPTIMIZER	iexplore.exe	"Added by the EVEVINC BACKDOORNote - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	OPTIMIZER	iexplore.exe	"Added by the EVIVINC BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	PalNetaware	pnetaware.exe	PalTalk adware - as included in Morpheus
N	PaltalkNetaware.exe	PALNETAW~1.EXE	Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start → Programs. Delete the shortcut in Start → Programs → StartUp as well otherwise it will be reinstated
X	PC-Antispyware	PC-Antispyware.exe	"PC-AntiSpyware rogue spyware remover - not recommended"
X	PcsSecure	PcsSecure.exe	"PcsSecure rogue security software - not recommended
X	Pest-Capture	PestCapture.exe	"PestCapture rogue security software - not recommended
X	PestCapture	PestCapture.exe	"PestCapture rogue security software - not recommended
X	PrinterSpool	[path] RESTORE.EXE [path] SPOOL.EXE	"Added by the ALADINZ.K TROJAN!"
X	Program in Windows	IEXPLORE.exe	"Added by the LOVGATE.AB WORM!"
X	Provan Security	psecure.exe	"Added by the RBOT.BRV WORM!"
X	ravshell	1explore.exe	"Added by the DLOADER.MJF TROJAN!"
X	ravshell	iexpl0re.exe	"Added by the NOFERE-A TROJAN! Note the number ""0"" in the filename"
X	ravtask	iexpl0re.exe	"Added by the AGENT.AIR BACKDOOR! Note the number ""0"" in the filename"
U	RE.exe	RE.exe	"RegistryEasy registry cleaner - regarded by Symantec as a potentially unwanted application
X	RESpyWare.exe	RESpyWare.exe	"RESpyWare rogue security software - not recommended
X	Restore	restore.exe	"Antispyware Shield Pro rogue security software - not recommended
X	romahere	matrixhere.exe	"SuperSpider hijacker - a CoolWebSearch parasite variant"
X	rundll***	die.exe [path] secure.exe	"Added by the SUMTAX TROJAN! where *** is 134
X	RUNGogoTools	LaunchAdware.exe	"GoGoTools adware"
X	rx	explore.exe	"Added by the ZHENGTU-A TROJAN!"
X	scvhost loader	ixplore.exe	"Added by the SDBOT-CY TROJAN!"
X	SDK Core Component	sdkcore.exe	"Added by the SDBOT-WC WORM!"
X	sdkupdate22	SDK0mCORE.exe	"Added by the FORBOT-DT WORM!"
X	secures23	mssecure.exe	"Added by the AGOBOT-ABY WORM!"
X	Services	iexplore.exe	"Added by the MOGI WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Services	iexpolere.exe	"Added by the RANCK.LU TROJAN!"
X	Shell	Explorer.exe iexplore.exe	"Added by the KIPIS-U WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The legitimate Internet Explorer (iexplore.exe) is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\Microsoft"
X	Shell32	iexplore.exe	"Added by the IRCBOT-AY BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	ShellRun32	iexplore.exe	"Added by the IRCBOT-AY BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
U	Shutdownaware	shutdownaware.exe	"Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system"
X	Singapore	singapore.exe	"Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself"
X	SiteAdware.exe	SiteAdware.exe	"SiteAdware rogue security software - not recommended
X	slide	Iexplore.exe	"Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup!"
Y	slipcore	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
Y	SlipStream	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
X	SmallAndSecure	mssecure.exe	"Added by the RBOT.CU WORM!"
X	Software	software.exe	"Added by the CRABTON-B TROJAN!"
N	SolidCapture	solidcapture.exe	"SolidCapture - screen capture and image sharing toolkit"
X	spoolsvs	wintre.exe	"Added by the SDBOT.EGQ WORM!"
X	Spyware	Spyware.exe	"BPS spyware remover - not recommended
X	Spyware remover	Remove_spyware.exe	"Unidentified
X	starter	iexplore.exe	"Added by the FORBOT-DU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Sun Java Updater v5	javajre.exe	"Added by the AUTORUN-XI WORM!"
Y	SUPERAntiSpyware	SUPERAntiSpyware.exe	"SUPERAntiSpyware - spyware
X	syspare	syspare.exe	"Added by the BIFROSE-AN TROJAN!"
X	System	IEXPL0RE.EXE	"Added by the VB.KS WORM! Note the number ""0"" in the filename"
X	System Configuration	iexplore.exe	"Added by the RANDEX.AD WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	System Information Manager	iexplore.exe	"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	SystemExplorer	explore.exe	"Homepage hijacker - file located in the ""Services"" folder in Common Files"
X	Telephony Provider	Iexplore.exe	"Added by the FORBOT-DF BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	timessquare	timessquare.exe	"Detected by Kaspersky as the STARTPAGE.AW TROJAN!"
X	Update Windows	EXPLORE.EXE	"Added by a variant of the SDBOT WORM!"
X	Update Windows	EXPLORE.EXE	"Added by a variant of the SDBOT WORM!"
X	USB Hardware Monitoring	USBhardware.exe	"Added by the RBOT-NN WORM!"
X	User Sharing	usrshare.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	User Sharing Wizard	usnshare.exe	"Added by the SLENFBOT.DF WORM!"
X	VCatch Premium	VCatchpre.exe	"VCatch antivirus. Considered spyware itself - see here"
X	Video Services	explore.exe	"Added by the GAOBOT.GL WORM!"
X	vipantispyware	vipantispyware.exe	"VipAntiSpyware rogue spyware remover - not recommended"
U	ViSplore	ViSplore.exe	"ViSplore (Glass Browser for XP) adds a Vista style file browser for Windows XP users"
U	WDSmartWare	WDSmartWare.exe	"Western Digital's WD SmartWare management software for selected external drives in the My Book and My Passport range"
X	Win Security	winsecure.exe	"Added by the SLENFBOT.RD WORM!"
X	Window	explore.exe	"Added by the GAOBOT.ADW WORM!"
X	Windowfdgfds DLL fgfdg Verifier	winsecure.exe	"Added by a variant of the RBOT WORM!"
X	windows	iexplore.exe	"Added by the RBOT-UM WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Windows Configuration System	IExplore.exe	"Added by the RBOT-DDG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Windows Live Care.exe	WindowsLiveCare.exe	"Added by unidentfied MALWARE - see here! Do not confuse with Microsoft's Windows Live OneCare security software which is found in %ProgramFiles%\Microsoft Windows OneCare Live. This one is found in %System% and runs from both the HKLM\Run & HKLM\RunServices registry keys"
X	windows Live Messenger	iexplore.exe	"Added by the BCKDR-QTS BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Memory Sharing	memshare.exe	"Added by the IRCBRUTE.AG TROJAN!"
X	Windows Secure Update	WinSecure.exe	"Added by the RBOT-GDO WORM!"
X	Windows Security	winscure.exe	"Added by the RBOT-BAF WORM!"
X	Windows Security Manager	winsecure.exe	"Affilred adware"
X	Windows Security Tool	WinSecure.exe	"Added by the AGENT-GPY TROJAN!"
X	Windows Services	iexplore.exe	"Added by the RBOT-WE WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Windows Spoolsre Service	spoolsre.exe	"Added by the SDBOT-AAE WORM!"
X	Windows spyware remover	Windows-spyware.exe	"Added by the SystemPoser TROJAN!"
X	WINDOWS SYSTEM CLEANER	iexplore.exe	"Added by the MYTOB.ET WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Windows Update	iexplorere.exe	"Added by the GAOBOT.AP WORM!"
X	Windows update	explore.exe	"Added by the GAOBOT.AL WORM!"
X	windows update configurator	explore.exe	"Added by the SDBOT.RY BACKDOOR!"
X	Windows USB Control Driver	iexplore.exe	"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Vista Transformation	IEXPLORE.exe	"Added by the FORBOT-GV WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	Windows Workstation Service	explore.exe	Added by unknown malware
X	WindowsUpdate renew	iexplore.exe	"Added by the AGENT.QG TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windws Configuration Loader	LEXPLORE.exe	"Added by the SODABOT WORM!"
X	winprofile	iexpiore.exe	Added by a variant of the MONCHER WORM!
X	WinProfile	iexpIore.exe	"Added by the CHUM-C TROJAN!"
X	winrestore1	winrestore.exe	"Added by the KILLFIL-Q TROJAN!"
X	winsecure	winsecure.exe	"Browser hijacker
X	WinStar	IEXPL0RE.exe	"Added by the WOSRIST A TROJAN!"
X	Workstation Ver 5.0	vmware.exe	"Added by the RBOT-AHB WORM!"
N	Xfire	Xfire.exe	Terratec DMXFire 1024 soundcard control panel
X	XP Antispyware 2009	XP_AntiSpyware.exe	"XP AntiSpyware 2009 rogue spyware remover - not recommended
X	xware	xware.exe	"Malware downloader from xxsware.com
X	xware	cskware.exe	"Malware downloader from xxsware.com
U	ZeroSpyware	ZeroSpyware.exe	FBM Software ZeroSpyware 2004 spyware detector and remover
X	Zonealarm	iexplore.exe	"Added by the FORBOT-CP WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	[random name]	??xplore.exe	"PurityScan adware"
X	[random name]	d?xplore.exe	"PurityScan adware"
X	[random name]	Servere.exe	"Added by the LEGMIR-AQM TROJAN!"
X	[various names]	openstre.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	_explore manager	_explore.exe	"Added by the SPEXTA-C TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.