Setting

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	A1000 Settings Utility	cpqa1000.exe	"Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan
X	Ati Display Settings	atividx.exe	"Added by the RBOT-GAS WORM!"
U	CMSETTINGS	ctmn.exe	"Part of NetNanny
X	CPVHOST Settings	cpvhost.exe	"Added by a variant of the SDBOT TROJAN!"
X	CT Control Settings	CTSVCCD.EXE	"Added by the RBOT-YS WORM!"
X	Direct settings	sdchost.exe	"Added by the DAEMONI-I TROJAN!"
N	Display Settings	hptasks.exe	"Allows for the adjustment of the display for LCD screen
U	HP Display Settings	hpdisply.exe	"Sets default display settings. Unchecking this item has been reported to cure a ""Problem sending command to keyboard"" error message"
X	KYK Control Settings	KYSVCXD.EXE	"Added by a variant of the RBOT WORM!"
X	KYM Control Settings	phqghum.exe	"Added by the RBOT.BQD WORM!"
U	Lexmark X125 Settings Utility	LEX125SU.exe	Settings utility for the Lexmark X125 printer
X	Local-Settings-of-[User Name]	[User Name].exe	"Added by the GAVGENT.A WORM!"
X	MSN Settings	msnsettings.exe	"Added by the IRCBOT.AWH BACKDOOR!"
X	MSN Settings Manager	msnsetmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Perfomance Settings	svchost.exe	"Added by the TOFGER-AP TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Protocol Settings	kav.exe	"Added by a variant of the RBOT WORM!"
U	Restart WSC Setting	wscrestp.exe	"WinStart Commander - part of Ultra WinCleaner Utility Suite. Starts Windows faster and controls hidden programs to boost performance and prevent system slow downs and crashes"
X	SearchSettings	SearchSettings.exe	"Vendio ""Search Settings"" foistware - reportedly installed without notice
X	Setting	sysweb.exe	"Added by the SDBOT.GEN TROJAN!"
X	System settings	burndl32.exe	"Added by the SDBOT-ZO WORM!"
X	SystemSettingf	TRUG.vbs	"Added by the TRUG.B MACRO!"
U	UniPrint	SetDfltSettings.exe	"Drivers for Uniprint
X	VCXD Settings	phqg.EXE	"Added by the RBOT.BRF WORM!"
X	VFW Encoder/Decoder Settings	RUNDLL32.exe MSSIGN30.DLL ondll_reg	"Added by the LOVGATE-W WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
U	WG111v2 Smart Wizard Wireless Setting	RtlWake.exe	"Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
X	Windows Register Settings	svmhost.exe	"Added by a variant of the FORBOT WORM!"
U	Wireless Switching Setting Utility	Switcher.exe	"On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
X	XPCPHOST Settings	xpcphost.exe	"Added by a variant of the RBOT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.