SW

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	1111swapmgr.exe	1111swapmgr.exe	"Added by the BDOOR-IC BACKDOOR!"
U	AbyssWebServer	abyssws.exe	"Abyss web server"
?	AeXSWDUsr	AeXSWDUsr.exe	"Altiris Express NS Client Manager software. Is it required?"
U	All Aboard Status	stswin.exe	"All Aboard! Internet Connection Sharing status icon"
X	Allopassw	[path to trojan]	"Added by the RANKY.CU TROJAN!"
X	Answer Problem	dSAFsqs.exe	"Added by the SDBOT-SC WORM!"
U	AnswerTool	AnswerTool.exe	"AnswerTool - save your E-mail replies in AnswerTool
N	ASUSWebStorage	ASUSWSDashBoard.exe	"System Tray access to ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts"
N	AsusWSDashBoard	ASUSWSDashBoard.exe	"System Tray access to ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts"
N	ASWDP	ASWDP.exe	"MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market"
X	ASWnk	aswnk.exe	Adult content dialler
U	Auto Switch	TASKBAR.exe	Related to 2-port Bitronics AutoSwitch kit from Belkin
N	AutoSpell 5	ASWATC32.EXE	"AutoSpell - spell checker"
U	BackgroundSwitcher	bgswitch.exe	"Originally included with Microsoft's XP PowerToys (but now withdrawn - see here
U	BackgroundSwitcher	BackgroundSwitcher.exe	"John's Background Switcher (or JBS for short) periodically changes the background image on your computer (like every hour or every day) to something interesting"
U	Bayswap	bayswap.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
X	bdfger	gggasw.exe	"Added by the SDBOT-RT WORM!"
Y	BDSwitchAgent	bdswitch.exe	"Bitdefender 8 antivirus and firewall"
N	Bing Bar	mswinext.exe	"Bing Bar - the latest incarnation of the MSN Toolbar from version 5.* onwards. This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
U	Biomenu	menusw.exe	"Related to Sony VAIO - passwords
X	BONZI Task Switcher	Taskswitch.exe	"Added by the SPYBOT.DTR WORM!"
X	buohxqtfswb	gcjydr.exe	"Added by the AGENT-NRC TROJAN!"
X	C:WINDOWSWinTask.exe	WinTask.exe	"""Pop Marketing"" adware"
X	CheckFaultKernel	mswdm.exe	"Added by the SMALL-CSK TROJAN!"
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	CleanSweep Useage Watch	CSUSEM32.EXE	Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
X	cleansweep.exe	cleansweep.exe	"Added by the AGENT-NEU TROJAN!"
U	CompuSpy KeyLogger	cswin2008.exe	"CompuSpy surveillance software. Uninstall this software unless you put it there yourself"
X	Configuration Loader	sw32.exe	"Added by the AGOBOT.BQ WORM!"
X	Configuration Services	mswords.exe	"Added by the SDBOT-YM WORM!"
X	conmswf	conrnbne.exe	"Added by the SDBOT-DEX WORM!"
U	CoolSwitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
X	CSRSSW	CSRSSW.EXE	"Added by the CWS-F TROJAN!"
X	CSRSWIN	[trojan filename]	"Added by the WINSHELL.50 TROJAN!"
U	Dialgo SDK	PhoneAnswer.exe	"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID
N	DigitalWizard	ISWizard.exe	"InstallShield's DigitalWizard - free
Y	dla	tfswctrl.exe	"Drive letter access to a UDF packet writer for CD-RW - from HP
X	Drivers for Internet Explorer	accesweb.exe	"Added by the STARTPAGE.FW TROJAN!"
X	Drives swap	AV1i.exe	"Anti-Virus Number-1 rogue security software - not recommended
X	emsw.exe	emsw.exe	"Attune HelpExpress - spyware. Disable and uninstall - see here"
Y	F-Secure Startup Wizard	FSSW.EXE	"F-Secure antivirus"
X	FiresWallservices	[random].exe	"Added by the RBOT-FJT WORM!"
X	FlyswatDesktop	flydesk.exe	Advertising spyware
Y	FoolProofSweep	??	"Part of FoolProof Security PC security software from SmartStuff"
X	FSW	FSW.exe	"FreeScratchAndWin parasite"
U	FSWebServer	fsws.exe	"Easy File Sharing Web Server is a Windows program that allows you to host a secure peer-to-peer and web-based file sharing system without any additional software or services"
X	Generic Host Process	lsassw.exe	"Added by the AGOBOT-N WORM!"
X	HDriveSweeper	HDriveSweeper.exe	"HDriveSweeper rogue privacy program - not recommended
X	HELPER	sweden.exe	"AsdPlug premium rate adult content dialer variant"
Y	IBM Password Manager	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
U	IBMUltraBayHotSwapCPLLoader	IBMBAY2N.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
?	IBMUltraBayHotSwapSound	IBMBAYSN.EXE	"Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?"
U	Internet Answering Machine	IAMNET~1.EXE	"From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
U	Internet Answering Machine	IAM.exe	"From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access"
N	Internet Sweeper	Sweeper.exe	"Internet Sweeper - removes unnecessart left over files after browsing the internet"
U	ISW.exe	ISW.exe	"Related to Internet Security Wizard from AT&T (formerly BellSouth Premium Internet Security) alerts users about any potential security threats. It should not be uninstalled unless the user wants to completely remove all traces of AT&T Internet Security Suite"
X	load32	swchost.exe	"Added by the TURTA.A WORM!"
X	machine-debugger	WMIPRVSW.exe	"Added by the AGOBOT.WW WORM!"
U	Malware Sweeper	MalSwep.exe	"Malware Sweeper - ""Protects the user from malicious malware and monitors the sanity of the running programs"""
X	MalwaresWipeds	MalwareWipeds.exe	"MalwareWipe rogue security software variant - not recommended
N	Mania Win Restore	RESWIN.EXE	Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
X	MasterBoot Switch	popupkill.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Corporation Svchost Service	mswsc.exe	Added by the AGENT.MAB TROJAN!
X	Microsoft Device Manager	svcswin.exe	"Added by the IRCBOT-YH TROJAN!"
X	Microsoft Driver Manager	mswindrv.exe	"Added by the FORBOT-EZ WORM!"
X	Microsoft SDKP3	mswinsdq.exe	"Added by the RBOT-ARY WORM!"
X	Microsoft Security Monitor Process	msword.exe	"Added by the VIRUT.P VIRUS!"
N	Microsoft Sidewinder Game Controller Software	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs
X	Microsoft Updat3	mswkst32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update Service	mswin32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Updating	syswr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Win Corp TLS Verification	mswintls.exe	"Added by the RBOT-GCT WORM!"
X	Microsoft Windows 16Bit	mswinn16.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Windows 32Bit	mswinn32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows 64 Bit	mswin32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows Control	mswctl32.exe	"Added by the RBOT.JP WORM!"
X	Microsoft Windows Services	msw32.exe	"Added by the RBOT-FWQ WORM!"
X	Microsoft Windows Update	swwhost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows Update	mnswinsx.exe	"Added by the RBOT-AWH WORM!"
X	Microsoft Windows W32 Services	mssw32.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Winsock	mswinsck.exe	"Added by the RBOT-ANK WORM!"
X	Microsoft WinUpdate	syswin32.exe	"Added by the RBOT-HO WORM!"
X	Microsoft WM	mswm32.exe	"Added by the BCKDR-AM BACKDOOR!"
X	Microsoft Wxdate	Syswu32.exe	"Added by the SPYBOT.HZ WORM!"
X	mmxrun	mswinindex.exe	"TwoSeven spyware"
X	mobiswing	[random].exe	"Mobis adware"
X	MS Config Loader	MSWin32bck.exe	"Added by the GAOBOT.AA WORM!"
X	MS Domain Name System	MSWDNS32.exe	"Added by the RBOT-GKY WORM!"
X	MS Network Control	mswin.exe	"Added by the DUMBA TROJAN!"
X	MS Sys Security	mswin.pif	"Added by the RBOT-APJ WORM!"
X	MS System Security	mswin32.pif	"Added by the RBOT-AOX WORM!"
X	MS Windows Local Directory	MSWLD32.exe	"Added by a variant of the RBOT WORM!"
X	MS Windows Process Init	MSWPI32.exe	"Added by the RBOT-ASQ WORM!"
X	MS Windows System Alert	MSWSA32.exe	"Added by the RBOT-BFN WORM!"
X	MS Windows TASK Service	MSWTASK32.exe	"Added by a variant of the RBOT WORM!"
X	MS Winsock	msws2_32.exe	"Added by the AKBOT-A TROJAN!"
?	MSLIB32	mswatch32.exe	"??"
N	MSN Toolbar	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	MSNavWH	MSWkwrH.exe	"Added by the ANAV-A WORM!"
X	MSNMSGRE	swef.bat	IRC backdoor TROJAN or WORM!
X	MSNMSGRR	swin.bat	IRC backdoor TROJAN or WORM!
X	MSNMSGRS	swe.bat	IRC worm or backdoor trojan!
X	MSNMSGRS	swiss.bat	IRC worm or backdoor trojan!
X	MSNMSGRS1	swed.bat	IRC backdoor TROJAN or WORM!
N	MSN� Toolbar	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	mswave	mswave.exe	"Added by the CRYPTER.A TROJAN!"
X	Mswavedll	mswavedll.exe	"Added by the CRYPTER-C TROJAN!"
U	MSwheel	mswheel.exe	Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
X	mswiiz32	mswiiz32.exe	"Added by the STRATION.DH WORM!"
X	mswiizz32	mswiizz32.exe	"Added by the STRATION.DL WORM!"
X	MSWin	mswin.exe	"Added by the BANKER-CU TROJAN!"
X	Mswincfg	Mswincfg32.exe	"Added by the CYBRSPY.D TROJAN!"
X	MsWindows DRT Drivers	wsdrt32.exe	"Added by the RBOT.ALT WORM!"
X	MsWindows SSL Drivers	mssl32.exe	"Added by the SPYBOT.API WORM!"
X	MSWindows SysCl	mscl32.exe	"Added by the RBOT.AHI WORM!"
X	MsWindows SysDate	sysmsvc.exe	"Added by the SPYBOT.FCD WORM!"
X	MSWindows Syspg	mspg32.exe	"Added by the RBOT-TB WORM!"
X	MSWindowsUpdate	Systern.exe	"Added by the RBOT-AFD WORM!"
X	MSWindowsUpdate	mswinup.exe	"Added by a variant of the SDBOT WORM!"
N	mswinext	mswinext.exe	"MSN Toolbar from version 4.* onwards (now known as Bing Bar from version 5.* onwards). This entry loads the toolbar into memory at start-up before you open your internet browser. Not required - it will load with the browser and remains in memory after the browser is closed"
X	MSWinlogon	SynCor.exe	"Added by the AGENT-FZL TROJAN!"
X	MSWinlogon	winlogon.exe	"Added by the AGENT-FZM TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Mswinpid32	mswinpid32.exe	Added by the LAPOS.A TROJAN! This is a keylogger which emails back to China PayPal passwords and account information - thus allowing the perpetrators to steal PayPal funds in the name of the victim!
X	MSWinSrv	MSWinSrv.exe	"Added by the MTRON TROJAN!"
X	MSWinSrv32	MSWinSrv32.exe	"Added by the MTRON-B TROJAN!"
X	MSWinupd	winupd.exe	"Added by the DLOADER-YE or DLOADR-AAA or DLOADER-ZF TROJANS - and others"
X	MSWinupdate	winupdate.exe	"Added by the DLOADR-AAW TROJAN!"
X	MsWinVgr	msvgr.exe	"Added by the MYTOB.LE WORM!"
X	mswiz32	mswiz32.exe	"Added by the STRATIO-BG WORM!"
X	mswkork Service	msework.exe	"Added by a variant of the RBOT WORM!"
X	msword	msword.exe	"Added by the RBOT-ADR WORM!"
X	msword	docx.exe	"Added by the CODOX-A WORM!"
X	msword98	msword98.exe	"Added by the AGENT-KUO TROJAN!"
X	MSWorld	msworld.exe	"Added by the AGENT.DED TROJAN!"
X	mswspl	[random filename]	"Added by the SMALL.IQ TROJAN!"
X	mswspl	searchbarcash.exe	SearchBarCash adware
X	mswspl	vnmispoisn downloader.exe	SearchBarCash adware variant
X	mswspl	plugin1.exe	"Added by the SMALL.IQ TROJAN!"
X	MSWTL32	MSATL32.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSWUpdate	[path to worm]	"Added by the SILLYFD-V WORM! The most common filename is lsass.exe but it not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	mvsyswina	acsysiom.exe	"Added by a variant of the SDBOT WORM!"
U	mynsw	wntsrv.exe	"Net Screen Watcher surveillance software. Uninstall this software unless you put it there yourself"
X	Name Server	mswins.exe	"Added by a variant of the SDBOT WORM!"
Y	NCSW Server	NcsW.exe	"LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety"
U	Net4Switch	Net4Switch.exe	"ASUS Net4Switch utility as provided on their range of notebooks - which ""helps users to quickly configure the notebook PC's network settings and easily switch between different network environments. A wizard guides users to create and edit configuration settings as well as diagnose problems in the settings for timely connection"""
U	NetWork Device Switch	NetDevSW.exe	Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X	Norton SpySweeper AutoUpdate	navsw.exe	"Added by the FORBOT-AS WORM!"
X	NvClipRsv	swchost.exe	"Added by the DUMARU-AK WORM!"
X	order_Shell	order_glsw.exe	"Added by the DLOADR-KO TROJAN!"
X	OS Security	mswind32.pif	"Added by the RBOT-ASU WORM!"
U	Password Door Loader	PDMonitor.exe	"Password Door - password protection software"
U	Password Tracker Deluxe	PwTrkr.exe	"""Password Tracker Deluxe stores passwords and usernames neatly and securely (encrypted) on your computer"""
X	pestsweeper	pestsweeper.exe	"PestSweeper rogue security software - not recommended
N	pictureBUZZTray	swtray.exe	"System Tray access to PictureBUZZ on-line printing software from Streetwise Software. If you use the software set the page you use as a favourite in your browser and run it manually"
X	PopularScreensaversWallpaper	"rundll32 [path] F3SCRCTR.DLL	LES"
U	PowerUp SwitchDesk	SwitchDesk.exe	"PowerUp SwitchDesk - virtual desktop manager which allows ""you have the possibility to launch games
U	PSwitch	ProxySwitcher.exe	"""Proxy Switcher offers full featured connection management solution"" as different internet connections often require completely different proxy server settings and it's a real pain to change them manually"
U	PwrUpSwDesk	SwitchDesk.exe	"PowerUp SwitchDesk - virtual desktop manager which allows ""you have the possibility to launch games
X	qaswww	jdsuml.exe	"Added by the BUZUS.CQMU TROJAN!"
Y	QCDriverInstaller	Lqdsw.exe	"Launches the camera driver setup wizard on the first reboot after installing Logitech's ClickSmart
U	QT4StBtn	SwiftBtn.EXE	"SwiftBtn - installed alongside the system drivers on Fujitsu Siemens notebooks and allows extra keyboard support"
U	QuickPassword	agquickp.exe	Smart card-based authentication and digital signature client software
U	Red Swoosh EDN Client	RSEDNClient.exe	"Red_Swoosh distributed networking software - a desktop client that enables users to download and stream files from each other
X	Registry Value Name	syswinxp.exe	"Added by the RBOT.BTZWORM!"
X	Reg_WFT	Regsysw.com	"Added by the WILSEF VIRUS!"
X	Reg_WFT	Regsysw.exe	"Added by the WILSEF.A WORM!"
X	Remote Access Domain	rswsvc.exe	"Added by the IRCBOT.BFA TROJAN!"
X	Remote Procedure Calls	mswinrpc.exe	"Added by the RBOT.KJ WORM!"
X	Remote Procedure Calls	mswinc.exe	"Added by the RBOT-IT WORM!"
X	RsWin	lsass.exe	"Added by the DELCANTI-B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""12053"" subfolder"
X	RsWin	lsass.exe	"Added by the SILLY.BR WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""4350"" subfolder"
X	rtkernsw	[random filename]	"Added by a variant of the SLAPER TROJAN!"
Y	run=	wswpd.exe	"Used with some models of Panasonic
U	Rupsw32	Rupsw32.exe	"MegaTec Rups
X	setFTPBack	createsw.exe	"Added by the FTP_BMAIL TROJAN!"
X	Setting	sysweb.exe	"Added by the SDBOT.GEN TROJAN!"
N	Shockwave Init	SWINIT.EXE	Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
N	SideWinderTrayV4	SWTrayV4.exe	MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
U	SiSSWLED	sisswled.exe	System Tray utility for SiS 900 network cards
U	SolidWorks Task Scheduler Engine	swBOEngine.exe	"Task scheduler for SolidWorks 3D CAD software"
U	SpeedswitchXP	SpeedswitchXP.exe	"SpeedswitchXP is a CPU frequency control for notebooks running Windows XP"
U	SpySweeper	SpySweeper.exe	"Spy Sweeper - detects and removes spyware"
U	SpySweeper	SpySweeperUI.exe	"Spy Sweeper - detects and removes spyware"
U	SpySweeperEnterprise	SpySweeperUI.exe	"User interface for Spy Sweeper Enterprise edition - ""a centrally managed
Y	Spyware Doctor	swdoctor.exe	"Older version of Spyware Doctor antispyware from PC Tools"
U	Spyware Nuker	swn2.exe	"Spyware remover by TrekBlue. Previously not recommended but the latest version was delisted here"
X	Spyware Sweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
X	SpywareSweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
X	SpywareSweeperProMFC	Spyware Sweeper Pro.exe	"Spyware Sweeper Pro rogue security software - not recommended
X	SSWPlauncher	comet.exe	"Comet Cursor adware"
X	susse	hpsw.exe	"LinkMaker adware"
X	svchost.exe	swchost.exe	"Added by the SADELPHI-A TROJAN!"
X	SW	SpyOnThis.exe	"SpyOnThis rogue spyware remover - not recommended"
U	SW20	sw20.exe	"Related to MSI's Dynamic Overclocking Technology"
U	SW24	sw24.exe	"Related to MSI's Dynamic Overclocking Technology"
Y	swAgentexe	SWAGENT.EXE	Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses
N	Swap Nut	javaw.exe	"javaw.exe can be loaded by other programs at startup but in this instance it's SwapNut
X	SWCaller	SWcaller.exe	"Swporta homepage hijacker"
X	SWCaller	Swcaller2.exe	"Swporta homepage hijacker"
X	Swchost	Swhost.exe	"Added by the BDOOR-MP BACKDOOR!"
U	SWClient	swsys.exe	"ActivMonAgent keyboard logger/monitoring program - remove unless you installed it yourself"
U	SWClient	swclient.exe	"Stealth Watcher surveillance software. Uninstall this software unless you put it there yourself"
X	swcroot	swcroot.exe	"Added by the SOLENO-A TROJAN!"
U	SWd	winwd.exe	"PC Security™ from Tropical Software - ""is the ultimate in computer security
Y	Sweep95	ICLOAD95.EXE	"Part of Sophos ant-virus sofware"
N	SweetIM	SweetIM.exe	"vSweetIM - send fancier smiley-faces and IM graphics to friends who are using MSN Messenger. They are only able to see these advanced smiley-faces if they also have SweetIM installed"
X	Swf32	AVupdate.exe	"Added by the MERKUR.E WORM!"
X	Swf32	_backup.exe	"Added by the SYMTEN WORM!"
U	swg	GoogleToolbarNotifier.exe	"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
X	SwiftCleaner	SwiftCleanerScanner.exe	"SwiftCleaner rogue cleaning utility - not recommended
X	SwimSuitNetwork	SwimSuitNetwork.exe	Advertising spyware
X	swingsys	SWINGSYS.EXE	"Added by the BANCOS-CX TROJAN!"
U	Switch Off	swoff.exe	"Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer
N	Switchboard.com Toolbar	AtHoc.exe	"Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com"
U	SwitchDesk	SwitchDesk.exe	"PowerUp SwitchDesk - virtual desktop manager which allows ""you have the possibility to launch games
U	Switcher	Switcher.exe	"""On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
X	switp	switpa.exe	"OfferAgent adware"
U	SWL	rundll32.exe [path] SWL.dll rdl	"StealthWeblog surveillance software. Uninstall this software unless you put it there yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
U	SWN2	swnxt.exe	"Spyware remover by TrekBlue. Previously not recommended but the latest version was delisted here"
X	sws.exe	[random filename]	"Haldex type adult content dialler"
X	sws.exe	gd-dial.exe	"Globaldialer adult content premium rate dialer"
N	SwTray	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it
N	SWTrayV4	SWTrayV4.exe	MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
U	SwyxIt!	SwyxIt!.exe	"PC Based soft phone from Swyx - see here for more details"
X	SysDesktop	fswanQQ.exe	"Added by the QQSEND-A TROJAN!"
X	SysStart	syswin.exe 1	"Added by the AUTORUN-EY WORM!"
X	System Updater Process	wmiprvsw.exe	"Added by the AGOBOT-IL WORM!"
X	System Updater Service	wmiprvsw.exe	"Added by the GAOBOT.AFC WORM!"
U	SysW8	csta.exe	"Clean Space internet evidence eliminator"
U	SYSWB6	SYSWB6.exe	"Part of We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content
X	SysWin	SysWin.exe	"Added by the IRCCONTACT TROJAN!"
X	syswin	v6.exe	"Added by the AGENT-ECM TROJAN!"
X	syswin.txt	[3 random letters].exe	"Added by a variant of the SPYBOT WORM! See here"
X	syswin32	syswin32.exe	"Added by a variant of the SPYBOT WORM!"
X	Syswindow	Syswindow.exe	"Added by the COW TROJAN!"
X	SysWy	rundll32.exe	"Added by the LINEAGE-JH TROJAN! Note - this is not the legitimate rundll32.exe process
U	taskswitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
U	TaskSwitchXP	TaskSwitchXP.exe	"""TaskSwitchXP from NTWind Software. Advanced task management utility that picks up where the standard Windows Alt Tab switcher leaves off. It provides the same functionality
Y	tfswctrl	tfswctrl.exe	"Drive letter access to a UDF packet writer for CD-RW - from HP
Y	tfswctrl.exe	tfswctrl.exe	"Drive letter access to a UDF packet writer for CD-RW - from HP
X	tracesweeper	tracesweeper.exe	"Trace Sweeper rogue privacy tool - not recommended"
?	Update for Works	MSWkstz.exe	"Maybe related to later versions of MS Works?"
X	Update Run MSword	LOGON.EXE	"Added by the RBOT.TY WORM!"
X	Update ver 1.0	Swap.exe	"Added by the SWAP-C WORM!"
X	usrgtway.exe	syswrun4x.exe	"Added by the MITGLIEDER.E TROJAN!"
X	Virus Sweeper	VSweep.exe	"Virus Sweeper rogue security software - not recommended
?	WFXSwtch	WFXSWTCH.exe	"Related to WinFax. What does it do and is it required?"
X	Win Security	msw32.pif	"Added by the RBOT-AQT WORM!"
X	Win32 NDIS	Ndiswin.exe	"Added by the RBOT.AMG WORM!"
X	Win32 Word Services	msword32.exe	"Added by a variant of the RBOT WORM!"
X	Winbin	swchost.exe	"Added by the RBOT.CLS WORM!"
X	Wind Security	mswi32.pif	"Added by the RBOT-ARH WORM!"
X	Windows DOS	dosw.exe	"Added by the SALAY-A WORM!"
X	Windows MSN2 XP	swchost.exe	"Added by the KOLAB.AA WORM!"
X	Windows report	swchost.exe	"Added by the SMALL-BD TROJAN!"
X	Windows Service Update	mswsgs.exe	"Added by the RBOT.FQB WORM!"
X	WINDOWS SYSTEM	mswins.exe	"Added by the MYTOB.DP WORM!"
X	Windows System Tray	swhost.exe	"Added by an unidentified VIRUS
X	Windows UDP Control Center	mswinudpmgr32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Update System	mswins.exe	"Added by the IRCBOT.DN WORM!"
X	WindowsFY	bsw.exe	"Added by a variant of the DESKTOPHIJACK TROJAN! For removal see here"
N	WindowsWelcomeCenter	"rundll32.exe oobefldr.dll	ShowWelcomeCenter"
X	WinFix service	rsswjzgp.exe	"Added by the RBOT-FAE WORM!"
X	WinSysW	371662L.exe	"Added by the WINKO.AO WORM!"
U	Wireless Switching Setting Utility	Switcher.exe	"On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
X	Working System Analyzer	syswork.exe	"Added by the FORBOT-FZ WORM!"
Y	wswpd	wswpd.exe	"Used with some models of Panasonic
X	ws_ds	sws32.exe	"Added by the DELF-GZ TROJAN!"
N	X-Grabber	sswizard.exe	"ScreenShot Wizard"
X	xswdmse	[8 random letters].exe	"Added by a variant of the SPYBOT WORM! See here"
N	xswin	xswin.exe	"Installed with a Xerox Work Centre Pro 555. Unchecking it removes an ""out of system memory"" error"
Y	ZENworks Imaging Service	ZISWin.exe	"Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management""
X	ZtgServerSwitch	server.vbs	ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware
X	[various names]	PasswdMon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ssweeper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{42562052-EE17-4197-82C7-91CB2E4B0666}	sysrswva.exe	"Added by the FAKEALERT-AH TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.