Remote

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	ATI Remote Control	ATIRW.exe	ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
Y	ATI Remote Control	ATIX10.exe	ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it
U	ComproRemote	ComproRemote.exe	"VideoMate TV tuner and capture card - remote control driver"
U	FusionRemote	FusionRc.exe	"Remote control manager for DVICO FusionHDTV"
X	hotdlll	remote.cmd	"Added by the BANKER-EHG TROJAN!"
X	Image Remote Players	sysvn.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	java	remote.cmd	"Added by the BANKER-EHG TROJAN!"
U	Keyspan Digital Media Remote	KDMRdmn.exe	"Remote control driver for Keyspan Digital Media Remote devices"
U	Logitech Harmony Remote	HarmonyClient.exe	"Logitech
U	Logitech Harmony Remote Software 7	HARMON~1.EXE	"Logitech
X	Microsft Remote Procedure Daemon	msrpcd.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft PC Health Remote Assistance File Open & Save controls	sfrcdlg32.exe	"Added by the RBOT-AVY WORM!"
X	MicroSoft Remote Secure Service	MSRSS.exe	"Added by a variant of the RBOT WORM!"
X	MS Remote Procedure Call	msrpc32.exe	"Added by the RBOT-QL WORM!"
U	NetScreen-Remote	SafeCfg.exe	"NetScreen Remote VPN client software"
U	PCTVRemote	remoterm.exe	Controls the remote control on some Pinnacle TV tuners
U	PhilipsRemote	PhilipsRemote.exe	"Remote control support for MusicMatch Jukebox on Philips audio players such as the AZ2555 Sound Machine - see
X	RasCon Remote Access Service Manager	rasmngr.exe	"Added by the SPYBOT.EM WORM!"
U	Remote	Remote.exe	"Remote Control driver for LifeView internal and external TV products"
U	Remote Access	rnaapp.exe	"Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie
X	Remote Access Adapter	rvasvc.exe	"Added by the IRCBOT.BIF BACKDOOR!"
X	Remote Access Domain	rswsvc.exe	"Added by the IRCBOT.BFA TROJAN!"
X	Remote Access Monitor	rpgsvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Remote Access Service Manager	rasmngr.exe	"Added by the AGOBOT.KU WORM!"
X	Remote Access Slave	Synchost.exe	"Added by the RIPJAC TROJAN!"
X	Remote Access Tool	rwosvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
N	Remote Control	Rc.exe	Hinet Hi-Five ISP software
N	Remote Controller	TVRMVCR.EXE	"ProLink PlayTVpro TV tuner software"
U	Remote Data Backups	CBSysTray.exe	"System Tray access to Remote Data Backups online system/data backup utility"
U	Remote Data Backups	COBackup.exe	"Remote Data Backups online system/data backup utility"
U	Remote Data Backups TaskBar Icon	CBSysTray.exe	"System Tray access to Remote Data Backups online system/data backup utility"
U	Remote Desktop Computing	marspc.exe	"Marspc Remote Desktop Computing"
X	Remote Desktop Help Session Manager	WinRDH.exe	"Added by a variant of the SDBOT WORM!"
X	Remote Event System	resmsvc.exe	"Added by the IRCBOT.YF BACKDOOR!"
U	Remote Management Agent	zenrc32.exe	"Part of Novell's ZENworks - "Complete End-to-End Directory-enabled Network Management". Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation"
U	remote master	remote master.exe	Required if you want your ASUS Remote control to work at all. Available via Start -> Programs
X	Remote Procedure Call	winrpc.exe	"Added by the RBOT-KM WORM!"
X	Remote Procedure Call	winsysrpc.exe	"Added by the SDBOT-PS WORM!"
X	Remote Procedure Call For Windows 32bit	rpc.exe	"Added by the RBOT-MD WORM!"
X	Remote Procedure Call Locator	RUNDLL32.EXE reg678.dll ondll_reg	"Added by the LOVGATE.F WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
X	Remote Procedure Calls	mswinrpc.exe	"Added by the RBOT.KJ WORM!"
X	Remote Procedure Calls	mswinc.exe	"Added by the RBOT-IT WORM!"
X	Remote Procedure Calls	win.exe	"Added by the SDBOT-QI WORM!"
X	Remote Services Manager	msrmsvc.exe	"Added by the SLENFBOT.AJ WORM!"
X	Remote Storage Access	rmasvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Remote System Protection	"rundll32.exe [random].dll	HUI_proc"
X	Remote Terminal Task	rtsbsvc.exe	"Added by the IRCBOT.AUZ BACKDOOR!"
Y	Remote Update Monitor	imonitor.exe	"Sophos Antivirus Remote Update utility - provides an easy way for remote workers to keep up to date with their virus protection via a website or network connection provided by their employer"
Y	RemoteAgent	RAUAgent.exe	"Trend Micro's Office Scan Client
U	RemoteCenter	RcMan.exe	"Remote control for Creative MediaSource - plays back music in DVD-Audio
U	RemoteControl	rmctrl.exe	"Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
U	RemoteControl	PDVDServ.exe	"Remote Control background application for Cyberlink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
U	RemoteControl8	PDVD8Serv.exe	"Remote Control background application for Cyberlink's PowerDVD version 8. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
N	Remote_Agent	RemoteAgent.exe	"Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this
?	RMremote	RmRemote.exe	"Remote control driver for REALmagic Xcard. Is it required?"
X	Sistray32	remotehost.pif	"Added by the HOLCAS.A WORM!"
U	StreamZap Remote	zremote.exe	"StreamZap PC Remote - control Windows Media Player
X	Svchost Windows Remote Services	svhost.exe	"Added by the IRCBOT-IV WORM!"
U	TV878 Remote Control	C7XRCtl.exe	"Related to Kworld TV878 Tuner"
U	TvrRemote	Remote.exe	"Remote Control driver for LifeView internal and external TV products"
U	VZRemoteCommander	AvRmtCtr.exe	Related to Sony's VAIO Zone Remote Commander
U	WebExRemoteAccessAgent	raagtapp.exe	"Related to Web Meetings from WebEx Communications
U	WINCINEMAMGR	WinRemote.exe	"InterVideo WinCinema Manager - needed for the use of WinDVD Remote Control"
X	Windows Remote Addressing	wnpcgs.exe	"Added by the DELF-EZN TROJAN!"
X	Windows Remote Launcher	wnpmcs.exe	"Added by the IRCBOT.ASX BACKDOOR!"
?	Winnov Remote	WnvRsvr.Exe	"Winnov Video Capture Card related. What does it do and is it required?"
U	WINREMOTE	WinRemote.exe	"InterVideo WinCinema Manager - needed for the use of WinDVD Remote Control"
X	Winshell	remote.exe	"Added by the MYTOB.LJ WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.