SETUP.EXE

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	36X Raid Configurer	JMRaidSetup.exe	"JMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers"
X	AdVantage Setup	AdVantageSetup.exe	"MeMedia.Advantage adware - optionally installed with older versions of the DAEMON Tools Lite CD emulation tool (if you don't uncheck the ""DAEMON Tools sponsor ad module"" option during install) and possibly others"
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
U	FJTWAIN Setup	FjtwSetup.exe	Fujitsu scanner utility
X	Google service	Googlesetup.exe	"Added by the IRCBOT-RJ WORM!"
U	HWSetup	HWSetup.exe hwSetUP	"""Toshiba Hardware Setup is the Toshiba configuration management tool available through Windows."" Allows the user to change BIOS
?	InstallNAIProduct	SETUP.EXE	"Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?"
Y	JMB36X Configure	JMRaidSetup.exe	"JMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers"
?	LanzarL2007	[path] setup.exe	"??"
Y	Lusetup	LUSetup.exe	"Symantec LiveUpdate installer - required to install a new version of the application. Will only run once
X	MCAFEEIPS	setup.exe	"Added by the WHITEWELL TROJAN!"
N	MGA_CD_Install	mgasetup.exe	Matrox Millennium video driver. Not required once drivers installed
?	MM Install	setup.exe	"Possibly Money Manager from Moneysoft?"
U	MplSetup	MplSetup.exe	Used by Ricoh network printers to enable network printing from the client
X	MS_SETUP.EXE	MS_SETUP.EXE	"Added by the CHARGE TROJAN!"
X	MyVBApp	setup.exe	"Detected by Kaspersky as the VB.KB TROJAN! File location is in the root folder (i.e.
U	PNSetup	PNSetup.exe	"PopNot - pop-up killer"
?	RjLyraInstaller	setup.exe	"??"
N	setup	hphprld.exe ....setup.exe	HP DeskJet Setup - printers function normally without it
X	setup.exe	setup.exe	"Added by the GOLDUN-GB TROJAN!"
N	SigmaTel Audio	setup.exe	"Sigmatel audio driver"
U	Smart Connect Setup	SCSetup.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
X	svchost	[path] SETUP.EXE	"Added by the SETCLO WORM!"
?	Tango	Setup.exe	"Tango Broadband access software. Is it required?"
X	TASK SETUP	tasksetup.exe	"Added by the RBOT-YR WORM!"
X	TB_setup	tb_setup.exe	"HuntBar hijacker
X	ToolbarInstall	MirarSetup.exe	"Mirar adware"
X	Wifi Setup	wifisetup.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	win32	WinSetup.exe	"Added by the EVILBOT.B TROJAN!"
X	Win32	arsetup.exe	Added by the SPAZBOX.A TROJAN!
X	win32serv	servicesetup.exe	"Added by a variant of the PUSHBOT WORM! A family of worms that spread using MSN Messenger"
U	Windows Accelerators	setup.exe	"KeySpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	Windows Monitor	arsetup.exe	Added by the SPAZBOX.A TROJAN!
?	zzzCamlnSuitelll	setup.exe 46***	"??"
?	zzzhpsetup	setup.exe	"??"
X	[Randomly chosen existing folder name]	_setup.exe	"Added by the ANTINNY-L WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.