SE.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	$Volumouse$	volumouse.exe	"Volumouse from Nirsoft. ""Provides you a quick and easy way to control the sound volume on your system - simply by rolling the wheel of your wheel mouse"""
Y	3DMouse.EXE	3DMouse.EXE	Dritek System Inc. 3D Mouse driver
X	a	jesse.exe	"Added by the MELO-A WORM!"
U	AllSeeingEye	ase.exe	"All-Seeing_Eye security software - ""monitors everything that takes place on your computer
N	Aluria's Spyware Eliminator	ASE.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
X	AntiSpywareExpert	ase.exe	"AntiSpywareExpert rogue security software - not recommended
X	AntiVituS	Base.exe	"Added by the BAS.A WORM!"
X	assistse	ASSISTSE.EXE	"CnsMin (Chinese Keywords) hijacker related"
X	ATI AS Filter	msnse.exe	"Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines
U	Auto EPSON Stylus Photo R2400 on X	E_FATI9SE.EXE	"Epson Status Monitor 3 for the Stylus Photo R2400 printer - for monitoring printer status
X	BlockDefense	BlockDefense.exe	"BlockDefense rogue security software - not recommended
X	bootsec	NAVSSE.exe	"Added by the FORBOT-CY WORM!"
X	browser	browse.exe	"Added by the TACTSLAY.C TROJAN!"
U	ClockWise	CLOCKWISE.EXE	"ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates
X	Configuration Loader	mouse.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	cpl	browse.exe	"Added by the TACTSLAY.C TROJAN!"
X	DNSE	DNSE.exe	"Part of rogue security tools
U	Emouse	Emouse.exe	"Genius mouse driver - required if you use non-standard Windows driver features"
U	EPSON Stylus Photo R2400	E_FATI9SE.EXE	"Epson Status Monitor 3 for the Stylus Photo R2400 printer - for monitoring printer status
X	Game House	GameHouse.exe	"Added by the DELF-DRA WORM!"
Y	Gmouse	Gmouse.exe	Amouse mouse driver - required if you use non-standard Windows driver features
U	GNETMOUSE	gnetmouse.exe	"Genius mouse driver - required if you use non-standard Windows driver features"
X	httpd	browse.exe	"Added by the TACTSLAY.C TROJAN!"
U	KatMouse	KatMouse.exe	"KatMouse - utility to enhance the functionality of mice with a scroll wheel
X	Kernel_check	wmiprvse.exe	"Added by the SONEBOT-B WORM! Note - this is not the legitimate wmiprvse.exe process which is always located in the %System%\wbem folder and should not normally figure in Msconfig/Startup!"
X	lasse	lasse.exe	"Added by the NTOS TROJAN!"
X	Malware Defense	mdefense.exe	"Malware Defense rogue security software - not recommended
N	Matrox PowerDesk SE	Matrox.PowerDesk SE.exe	"Matrox PowerDesk SE - multi-display desktop management controls"
X	Messanger	browse.exe	"Added by the TACTSLAY.C TROJAN!"
X	Micrcoft Exploerer	svchose.exe	"Added by the RBOT-ASL WORM!"
X	Microsoft Neser Experience	nese.exe	"Added by the RBOT-YH WORM!"
X	Microsoft Registry	csrse.exe	"Added by the RBOT-PC WORM!"
X	Microsoft Update Machine	lsasse.exe	"Added by the RBOT-DI WORM!"
X	Microsoft Update Machine	systemse.exe	"Added by the RBOT-BD WORM!"
X	Microsoft Update Process	wmipcvse.exe	"Added by the AGOBOT-JF TROJAN!"
X	Microsoft Word Profissional	Java Plug In close.exe	"Added by the BANKER-EL TROJAN!"
X	mouse	mouse.exe	"Added by the RBOT-AHJ WORM!"
X	MSControl3d1	isasse.exe	"Added by the RBOT.CGU WORM!"
X	MSDN	nese.exe	Added by the SDBOT.AHY WORM!
X	Net Command Senter	nvscvse.exe	"Added by the IRCBOT!DF6280E5 VIRUS!"
X	Nortons AVS Systems	arse.exe	"Added by the RBOT.AWY WORM!"
X	nse	nse.exe	"Added by the AGOBOT-ML WORM!"
U	OPTMOUSEMOUSE	optmouse.exe	"Related to a Samsung optical mouse"
U	PCPitStopEraser	PCPitStopErase.exe	"""PC PitStop Erase is both a free privacy scanner and paid tracks cleaner"""
U	PhraseExpress	phrase.exe	"""PhraseExpress organizes your frequently used text phrases and allows pasting them into any application"""
N	PrintScreen	UNWISE.EXE	"Gadwin PrintScreen - utility to capture
?	qBrowse	qbrowse.exe	"??"
X	SaveDefense	SaveDefense.exe	"SaveDefense rogue security software - not recommended
X	scApp	wmiprvse.exe	"Added by the SILLYFDC-AW WORM!"
X	Search-Exe	SE.exe	"Search-Exe hijacker"
X	SMSERIALWORKERSTARTER	winstrse.exe	"Added by the RENOS.IC TROJAN! Installed with the SpyBurner spyware remover - which is not recommended
X	SpywareCease.exe	SpywareCease.exe	"Spyware Cease rogue security software - not recommended"
X	start extracting	spoolvse.exe	"Added by the RBOT-XF WORM!"
U	StartEase	StartEase.exe	"
X	StartMenu	browse.exe	"Added by the DROWSY-C TROJAN!"
X	strmsoums	msnmegrse.exe	"Added by the SDBOT-ZK TROJAN!"
U	Suitcase Startup	Suitcase.exe	"Suitcase - system font manager start up utility. Used for dynamic managment of fonts on your system"
U	SysSense	SysSense.exe	"""SysSense is your personal desktop Google AdSense monitor. It keeps your current Google AdSense information in the Windows system tray"". Google AdSense account required"
X	system	lsasse.exe	"Added by the RBOT-YL WORM!"
Y	TBLFUNC	tblmouse.exe	"Aiptek HyperPen graphics tablet driver"
U	TMOUSE	tmouse.exe	"Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects
U	Upromise	Upromise.exe	"Upromise college savings program"
X	USERINTERFACE REPORT3R	M0USE.exe	"Added by the MYTOB.HS WORM!"
X	verse	verse.exe	"Added by the STAP-C WORM!"
N	Voipwise	Voipwise.exe	"Voipwise - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
U	Weather Pulse	weatherpulse.exe	"Weather Pulse from Tropic Designs. ""Display popular Satellite images and video from around the globe
U	WhatPulse	WhatPulse.exe	"WhatPulse collects statistics on how much you type on your computer and sends this information to a server. It is not a keylogger which monitors your keystrokes and what you type - it only counts the number of keystrokes"
X	WhenUSearchWHSE	whse.exe	"WhenU.Save adware"
X	Will I Ever	anqbse.exe	"Added by the SDBOT-TK WORM!"
X	Windows Media Updater	crease.exe	"Added by the RBOT-ATI WORM!"
X	Windows Mouse Services	winmouse.exe	"Added by the IRCBOT.AGA BACKDOOR!"
X	winmgmt	wmiprvse.exe	"Added by the AGENT-GHP TROJAN!"
X	wise	clockwise.exe	"Added by the LAZAR-A TROJAN!"
X	wmiprevse	wmiprevse.exe	"Added by the BANKER-EPN TROJAN!"
X	ZPoint	winmuse.exe	"Added by the DLOADR-VJ TROJAN!"
X	[12 random characters]	admparse.exe	"IeDriver adware variant"
X	{2C70168B-97CE-4f31-B85D-1FEC5002721D}	sysxhtcwbse.exe	"Added by the FAKEALERT-AM TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.