Security

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	*Security Center	secctr.exe	"Added by the SDBOT.BRO WORM!"
X	Active Security	asecurity.exe	"Active Security rogue security software - not recommended
N	Aluria Security Center	SecurityCenter.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	AnVir Security Suite	AnVir.exe	"AnVir Security Suite - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AVG Internet Security	avgtray.exe	"System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security
Y	Charter High-Speed Security Suite	fspex.exe	"Charter High-Speed Security Suite - security software in collaboration with F-Secure"
N	Client Security Solution	cssauth.exe	"Part of Thinkvantage Client Security Solution for Lenovo ThinkPad notebooks and ThinkCentre desktops. Once configured via the associated setup screens this loads via winlogon.exe (and loads the password manager) and therefore disabling this entry has no effect"
?	Compaq Computer Security	"Rundll32.exe SECURE32.CPL	Service"
X	Current Security Config	csecure.exe	"Added by the RBOT-AMO WORM!"
X	Desktop Security 2010	Desktop Security 2010.exe	"Desktop Security 2010 rogue security software - not recommended
X	Device Security	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Driver	devicesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Disk Keeper	SECURITY.EXE	"Daosearch adware"
U	eDataSecurity Loader	eDSloader.exe	"Part of Acer Empowering Technology. ""Acer eDataSecurity Management is a handy file encryption utility that protects files from being accessed by unauthorized persons
X	Fdaemon security	fsecur.exe	"Added by the SDBOT.KXO WORM!"
U	GhostSecuritySuite	gss.exe	"Ghost Security Suite - protect the registry from unauthorized reading and modification and other tools"
U	Guardian PC Security Tools	Pfft.exe	"Boomerang Software's Guardian PC Security Tools - now rebranded as the eXtendia Security Suite"
X	HF Security	hfsecure.exe	"Added by the AGOBOT-TI WORM!"
Y	IBM Client Security	certtool.exe	"Part of Client Security Software for IBM\Lenovo notebooks. If you have configured the software via the associated wizard this will need to be running if you want to mount password protected areas of the disk (created with SafeGuard PrivateDisk)
N	IBM Client Security Software	csecwiz.exe	"Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once
X	IE-Security	iescan.exe	"IE-Security rogue spyware remover - not recommended
X	IE-Security	wdscan.exe	"IE-Security rogue spyware remover - not recommended
X	Internet Explorer Security	iexplore.pif	"Added by the RBOT-ALQ WORM!"
X	Internet Security 2010	IS2010.exe	"Internet Security 2010 rogue security software - not recommended
X	Internet Security Service	msq32.exe	"Added by the RBOT-GFP WORM!"
X	Internet Security Service	msq23.exe	"Added by the RBOT-GQL WORM!"
X	Internet Security Service	msql23.exe	"Added by the RBOT-GML WORM!"
X	Internet Security Service	mysqlwin32.exe	"Added by the RBOT.UX TROJAN!"
X	Internet Security Service	expllorer.exe	"Added by the REFROSO.AFF TROJAN!"
X	IPLog Security	iplogsec.exe	"Added by the IRCBOT.GP BACKDOOR!"
X	iSecurity applet	"rundll32.exe iSecurity.cpl	SecurityMonitor"
X	Kaspersky Email Security	javaupd.exe	"Added by the SWARLEY.A WORM!"
X	Layersecurity Servicemonitor	LSSMON.EXE	"Added by the BANKER.ZAQ TROJAN!"
X	Live Security Suite	LiveSS.exe	"Live Security Suite rogue security software - not recommended
X	Local Security Authority Servce	lssas.exe	"Added by the POEBOT-T WORM!"
X	Local Security Authority Service	lssas.exe	"Added by the POEBOT-J WORM!"
X	Local Security Authority Service	Isass.exe	"Added by the LINKBOT.M WORM!"
X	Macfee Security Patch	Mpfsheild.exe	"Added by the RBOT-NP WORM!"
Y	McAfee SecurityCenter	mcagent.exe	"McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection
Y	McAfee SecurityCenter	McUpdate.exe	Automatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
X	Microsft Security Monitor Process	cmh.exe	"Added by the EGGDROP.V WORM!"
X	Microsft Security Monitor Process	mssmppp.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsft Security Monitor Process	mssmpp.exe	"Added by the SDBOT-DJW WORM!"
X	Microsoft (R) Windows Network Security Management Service	nsms.exe	"Added by the RANKY.LC TROJAN!"
X	Microsoft Secure Messenger.NET Service	securitychk.exe	"Added by the SDBOT.VT WORM!"
X	Microsoft Security	winService.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft security adviser	mssadv.exe	"Microsoft Security Adviser rogue security software - not recommended"
X	Microsoft Security Center	savservices.exe	"Added by the RBOT-ANU WORM!"
X	Microsoft Security Center	wcsntfy.exe	"Added by the SDBOT.BYD WORM!"
X	Microsoft Security Controlers	fxsecues.exe	"Added by a variant of the SDBOT WORM!"
Y	Microsoft Security Essentials	msseces.exe	"System Tray access to a notifications from Microsoft Security Essentials which ""provides real-time protection for your home PC that guards against viruses
X	Microsoft Security GManagers	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Microsoft Security Hot Fix Update	mshotfix.exe	"Affilred adware"
X	Microsoft Security Management	winnt.exe	"Added by the RBOT-MQ WORM!"
X	Microsoft Security Management	winserv.exe	"Added by the RBOT-MJ WORM!"
X	Microsoft Security Management	winamp.exe	"Added by a variant of the RBOT WORM! Note - this is NOT the popular Winamp media player which resides in a ""Winamp"" subdirectory of the Program Files directory"
X	Microsoft Security Management	wuauct1.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Security Management	bling.exe	"Added by the RBOT.XL WORM!"
X	Microsoft Security Management	sp2fix.exe	"Added by the RBOT.UB WORM!"
X	Microsoft Security Manager	winamp.exe	"Added by the RBOT.TU WORM! Note - this is NOT the popular Winamp media player which is located in %ProgramFiles%\Winamp. This one is located in %System%"
X	Microsoft Security Monitor Process	mssmp.exe	"Added by the RBOT-FUB WORM!"
X	Microsoft Security Monitor Process	mnsmp.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	msmp.exe	"Added by the RBOT.GKQ WORM!"
X	Microsoft Security Monitor Process	mssm32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Security Monitor Process	lsas.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Security Monitor Process	msword.exe	"Added by the VIRUT.P VIRUS!"
X	Microsoft Security Monitor Process	service.exe	"Added by the DELF.BERW BACKDOOR!"
X	Microsoft Security Monitor Process	svcchost.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Security Monitor Process	windowsupdate.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Security Monitor Process	[random filename]	"Added by variants of the RBOT WORM! See here"
X	Microsoft Security Monitor Process	com.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	exel.exe	"Added by the SDBOT.AFX BACKDOOR!"
X	Microsoft Security Monitor Process	firewall.exe	"Added by a variant of the IRCBOT BACKDOOR! Located in %System%"
X	Microsoft Security Monitor Process	flash.exe	"Added by the EGGDROP.EE BACKDOOR!"
X	Microsoft Security Monitor Process	hel.exe	"Added by the EGGDROP.V BACKDOOR!"
X	Microsoft Security Monitor Process	HelpMe.exe	"Added by the VB.BJO TROJAN!"
X	Microsoft Security Monitor Process	kar.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Security Monitor Process	lindicracker.exe	"Added by the BIFROSE.GR BACKDOOR!"
X	Microsoft Security Monitor Process	mail.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	mmp.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	mssm32.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	mssmpi32.exe	"Added by a variant of the RBOT WORM! See here"
X	Microsoft Security Monitor Process	nitty.exe	"Added by the RBOT.AEU BACKDOOR!"
X	Microsoft Security Monitor Process	ofice.exe	"Added by the VIRUT.N VIRUS!"
X	Microsoft Security Monitor Process	point.exe	"Added by the IRCBOT.AVP BACKDOOR!"
X	Microsoft Security Monitor Process	princ.exe	"Added by the HUPIGON.WTL TROJAN!"
X	Microsoft Security Monitor Process	web.exe	"Added by the EGGDROP.V BACKDOOR!"
X	Microsoft Security Monitor Process	winsys32.exe	"Added by the VIRUT.N VIRUS!"
X	Microsoft Security Monitor Process	winsyss32.exe	"Added by the RBOT.AEU BACKDOOR!"
X	Microsoft Security Monitor Process	word.exe	"Added by the EGGDROP.DC BACKDOOR!"
X	Microsoft Security Panager	[filename]	"Added by the RBOT-ANL WORM!"
X	Microsoft Security Panagers	[random filename]	"Added by the RBOT-AIG WORM!"
X	Microsoft Security Panagers	zzoboony.exe	"Added by the RBOT-AOI WORM!"
X	Microsoft Security Pansasagers	dgkztsqgn.exe	"Added by the RBOT-BBJ WORM!"
X	Microsoft Security Process	wininit.exe	"Added by the RBOT-FKM WORM!"
X	Microsoft Security System	mssecsys.exe	"Added by the IRCBOT-WJ TROJAN!"
X	Microsoft Security Update	security32.exe	"Added by the DELF-JJ TROJAN!"
X	Microsoft System Security Agent	MSTSA.EXE	"Added by the RBOT.CCM WORM!"
X	Microsoft Update Security Patch	mssecurityupdatepatch.exe	Added by the AGENT.EF TROJAN!
X	Microsoft WIN32 Security	MSsec32.exe	"Added by the RBOT-DOQ TROJAN!"
X	Microsoft Windows Security	spvsper.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Windows Security	wscndrives.exe	"Added by the RBOT-AJK WORM!"
X	Microsofts Security Manager	**.exe [** = random char]	"Added by the RBOT-WH TROJAN!"
X	Micsorosft Security Center	wcnsfty.exe	"Added by the RBOT-AHU WORM!"
X	MMicrosoft Security Management	inetforn.exe	"Added by the RBOT.AFZ WORM!"
X	MS Security	systm.pif	"Added by the RBOT-AQN WORM!"
X	MS Security Authority Service	lsass.exe	"Added by the KALEL-B WORM! Note - this is not the legitimate lsass.exe process
X	MS Security Hotfix	service5.exe	"Added by the GAOBOT.AG WORM!"
X	MS Security Update 993	msident.exe	"Added by a variant of the SDBOT WORM!"
X	MS Sys Security	mswin.pif	"Added by the RBOT-APJ WORM!"
X	MS System Security	mswin32.pif	"Added by the RBOT-AOX WORM!"
X	MS Windows Security Updater	updater.pif	"Added by the RBOT-AKY WORM!"
X	MS-DOS Security Service	ms-dos.pif	"Added by the RBOT-AMR WORM!"
X	MSDOS Security Service	msdos.pif	"Added by the RBOT-AMP WORM!"
X	MSN Security Agent	msnsecure.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	My Security Engine	MS[random characters].exe	"My Security Engine rogue security software - not recommended
X	My Security Wall	MS[random characters].exe	"My Security Wall rogue security software - not recommended
X	Network Security	secsvc.exe	"Added by the RBOT-ALX WORM!"
X	Network Security	NSecurity.exe	"Added by the IRCBOT.AAV WORM!"
X	Network Security Guard	*********.exe [ = random char]	"CoolWebSearch parasite variant"
X	Network Security Guard	[path to trojan]	"Added by the COLEM-A TROJAN!"
X	Network Security XP	nvsvc86.exe	"Added by the RBOT-GUI WORM!"
X	NT LM Security Support Provider	WinNTLM.exe	"Added by a variant of the SDBOT WORM!"
X	NT security	rundll32.com	"Added by the RBOT-AJC WORM!"
X	OS Security	mswind32.pif	"Added by the RBOT-ASU WORM!"
X	PC Security 2009	PC_Security2009.exe	"PC Security 2009 rogue security software - not recommended
X	Personal Security Center Monitor	isc_ui.exe	"Added by the FAKEALERT TROJAN!"
X	PersonalSec	psecurity.exe	"Personal Security rogue security software - not recommended
X	PersonSecurity	psecurity.exe	"Personal Security rogue security software - not recommended
X	PersSecurity	personalsecurity.exe	"Personal Security rogue security software - not recommended
X	PersSecurity	psecurity.exe	"Personal Security rogue security software - not recommended
X	Protection	Norton Internet Security.exe	"Added by the ELITPER.E WORM!"
X	Provan Security	psecure.exe	"Added by the RBOT.BRV WORM!"
X	Psecurity	psecurity.exe	"Personal Security rogue security software - not recommended
X	Quantifier Security	qsecue.exe	"Added by the SPYBOT.UOL WORM!"
X	Sagate Security Firewall	sagate.exe	"Added by the GAOBOT.BOW WORM!"
N	Scotia OnLine Security v. Recovery	etdirrcv.exe	"Scotia OnLine Security Software provided by Entrust for
X	Security	WindowsSecurityUpdate.exe	"Added by a variant of the SDBOT WORM!"
X	Security 2009	Security2009.exe	"Security 2009 rogue security suite - not recommended
X	Security Accounts Manager SM	samsm.exe	"Added by the SPYBOT.JE WORM!"
X	Security Agent	securag.exe	"Added by the BANCBAN-F TROJAN!"
X	Security Agent Manager	mssams.exe	"Added by the RBOT-SV WORM!"
X	Security Antivirus	SA[random characters].exe	"Security Antivirus rogue security software - not recommended
X	Security Antivirus Xp 1	inetfor.exe	"Added by the SDBOT.BAV WORM!"
X	Security Center	AppControl.exe	"Added by the SDBOT.CFT WORM!"
X	Security Center Distribution	securesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Security essentials 2010	SE2010.exe	"Security Essentials 2010 rogue security software - not recommended
X	Security Guard	SG[random characters].exe	"Security Guard rogue security software - not recommended
X	Security iGuard	Security iGuard.exe	"Security iGuard spyware remover - not recommended
U	Security Manager	SecurityManager.exe	"A ComCast Internet software suite that provides a variety of features (firewall
X	Security Master AV	SM[random characters].exe	"Security Master AV rogue security software - not recommended
X	Security Mechanic	lsascs.exe	"Security Mechanic rogue security software - not recommended
X	Security Monitor	securemon.exe	"Added by the SLENFBOT.ABH WORM!"
X	Security Patch	scmss.exe	"Added by the RBOT-ZW WORM!"
X	Security Patch	WinUpdate32.exe	"Added by the SDBOT-BM WORM!"
X	Security Patches	msnkn.exe	"Added by the RBOT.WW WORM!"
X	Security Patches	WinLab32.exe	"Added by the SDBOT-KB WORM!"
X	Security Server DB	secserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	security service	syss.exe	Added by an unidentified WORM or TROJAN!
X	Security Service	secsvc.exe	"Added by the RBOT-GGF WORM!"
X	Security Service DB	secservice.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Security Service Process	svhost.exe	"Added by the AGOBOT-LC WORM!"
X	Security System	securesys.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Security Update Service	wmiprvce.exe	"Added by the AGOBOT.ZW WORM!"
X	Security Update Service Process	svrhost23.exe	"Added by the AGOBOT-GN WORM!"
X	SecurityCenter	securitycenter.exe	"Desktop Security 2010 rogue security software - not recommended
X	SecurityFighter	SecurityFighter.exe	"SecurityFighter rogue security software - not recommended
X	SecurityScanner	ss2008.exe	"Security Scanner 2008 rogue security software - not recommended
X	SecuritySoldier	SecuritySoldier.exe	"SecuritySoldier rogue security software - not recommended
X	Sepate Security Firewall	sepate.exe	"Added by the RBOT.BLC BACKDOOR!"
X	Shield Security	shield.exe	"Added by the RIZO.A TROJAN!"
X	Shield32 Security	shield32.exe	"Added by the RIZO.A TROJAN!"
X	SmartSecurity	SmartSecurity.exe	"Smart Security rogue security software - not recommended
X	Social Security Agency	rpcxsocsa.exe	"Added by a variant of the RBOT WORM!"
X	Symantec Client Security	symclient.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Symantec Security	symantec32.exe	"Added by the RANDEX.PR or RANDEX.YR WORMS!"
X	Symantec Security Addon	nvsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM! Note - do NOT confuse with the legitimate NVIDIA Driver Helper Service file of the same name as described here"
X	Symantec Security Routine Addon	navpaw.exe	"Added by the AGOBOT-ES BACKDOOR!"
X	Symantec Security Routine Addon for Microsoft Windows	navpxaw32.exe	"Added by the AGOBOT-GJ TROJAN!"
X	System Security Checker	ssc.exe	"Added by the IRCBOT-WI TROJAN!"
X	System Security Updaters	vsmons.exe	"Added by the RBOT-OW WORM!"
X	SystemSecurity	zprot32.exe	"Added by the AGENT-FK TROJAN!"
Y	TELUS Security service	freedom.exe	"Freedom Internet Security & Privacy - anti-virus
Y	USB SECURITY DEVICE CoInstaller	JupitCo.exe	"ButterflyMedia USB Flash drive related - required for the password security feature to work"
X	Volcano Security Suite	VS[random characters].exe	"Volcano Security Suite rogue security software - not recommended
X	Win Security	msw32.pif	"Added by the RBOT-AQT WORM!"
X	Win Security	winsecure.exe	"Added by the SLENFBOT.RD WORM!"
X	Win Security 360	WinSecurity360.exe	"Win Security 360 rogue security software - not recommended
X	Win32 Security Protocol	secure32.exe	"Added by the RBOT-ETI WORM!"
X	Win32 Security Service	crsss.exe	"Added by the DELBOT-O WORM!"
X	win32 security updates downloader	tskmngr.exe	"Added by a variant of the SDBOT WORM! See here"
X	Wind Security	mswi32.pif	"Added by the RBOT-ARH WORM!"
X	Windows bypass security SMSS Service	SbiCvy.exe	"Added by the RBOT-GRF WORM!"
U	Windows IP Security	ipsec.exe	"Related to the VPN IPSec utility - used to create Security Policy (SP) entries and Security Association (SA) entries in the kernel"
X	Windows IP Security Service	ipsecs.exe	"Added by the RBOT.BPW WORM!"
X	Windows Login Security	winlogin.pif	Added by an unidentified WORM or TROJAN!
X	Windows Proffesional Security	WinSecure32.exe	"Added by the AGOBOT.VA WORM"
X	Windows Registry Security	crss.exe	"Added by a variant of the IRCBOT TROJAN!"
X	WINDOWS SECURITY	wingrd.exe	"Added by a variant of the RBOT WORM!"
X	Windows Security	win.pif	"Added by the RBOT-APT WORM!"
X	Windows Security	ms32.pif	"Added by the RBOT-ARN WORM!"
X	Windows Security	winscure.exe	"Added by the RBOT-BAF WORM!"
X	Windows Security Assistant	rundll32.vbe	"CoolWebSearch Alfasearch parasite variant - also detected as the STARTPA-U TROJAN!"
X	Windows Security Assistant	winsec.exe	"CoolWebSearch parasite variant"
X	Windows Security Authority Service	lsass.exe	"Added by the KALEL-A WORM! Note - this is not the legitimate lsass.exe process
X	Windows Security Center Notification App	wscnfty.exe	"Added by a variant of the RBOT WORM!"
X	Windows Security Center Notification Appls	sxe.exe	"Added by the RBOT-GKX WORM!"
X	Windows Security Center Notification Applse	sxes.exe	"Added by the RBOT-GLR WORM!"
X	Windows Security Center Notification Applse	os.exe	"Added by a variant of the RBOT-GLR WORM!"
X	Windows Security Center Notification Applsee	sysecurex.exe	"Added by a variant of the RBOT-GKX WORM!"
X	Windows Security Control	wuaucls.exe	"Added by the FORBOT-V WORM!"
X	Windows Security Manager	winsecurity.exe	"Added by the AGOBOT-KI WORM!"
X	Windows Security Manager	winsecure.exe	"Affilred adware"
X	Windows Security Manager	svchost.exe	"Added by the ANTINNY.AX WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""Microsoft"" subfolder"
X	Windows Security Manager	svhost.exe	"Added by the GAOBOT.ALU WORM!"
X	Windows Security Module	module.exe	"Added by a variant of the RBOT WORM!"
X	Windows Security Policy	lsass32.exe	"Added by the AGOBOT-CR WORM!"
X	Windows Security Service	[random file name]	"Added by the RBOT-ALV WORM!"
X	Windows Security Service	arrdt.exe	"Added by a variant of the RBOT WORM!"
X	Windows Security Service	windows.pif	"Added by the RBOT-AMG WORM!"
X	Windows Security Suite	WI[random characters].exe	"Windows Security Suite rogue security software - not recommended
X	Windows Security Survy	svchosl.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Security Tool	WinSecure.exe	"Added by the AGENT-GPY TROJAN!"
X	Windows Security Update	security32.exe	"Affilred adware"
X	Windows Security Update	ndsass.exe	"Added by the RBOT.ESM BACKDOOR!"
X	Windows System Security	winmp.exe	"Added by the RBOT.IV WORM!"
X	Windows System Security	sys32.pif	"Added by the RBOT-AOL WORM!"
X	Windows System Security Monitor	[4 random letters].exe	"Added by the PINKTON.A WORM!"
X	WindowsXp Security	spool.exe	"Added by the RBOT-GRK WORM!"
X	Windows_LowLevel_Security_Core	lsass.exe	"Added by the PADMIN-A TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Repair"
X	WinSecurity	uninstall.exe	"Added by the SILLYFDC.BCJ WORM!"
X	WinwebSecurity	WinwebSecurity.exe	"Winweb Security rogue security software - not recommended
X	WinX Security Center	WinX Security Center.exe	"WinX Security Center rogue security software - not recommended
X	Wsecurity	ldanw32.exe	"Added by the AGENT-BUC TROJAN!"
X	XP SecurityCenter	XPSecurityCenter.exe	"XPSecurityCenter rogue security software - not recommended
X	zone alarm security	zlclint.exe	"Added by the NIRBOT WORM!"
X	zSecurity Service	szsvc.exe	"Added by the SDBOT-DAB WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.