SysR

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AhorreMemoria	SysRep.exe	"AhorreMemoria rogue system error and cleaning utility - not recommended. A member of the ErrClean family"
X	aouei	sysrtmvs.exe	"Chivio dialer"
X	BeschermingsTool	SysRep.exe	"BeschermingsTool
X	BugsDestroyer	SysRep.exe	"BugsDestroyer rogue system error and cleaning utility - not recommended
X	CleanPCTool	SysRep.exe	"CleanPCTool rogue system error and cleaning utility - not recommended
X	CleanupTool	SysRep.exe	"CleanupTool rogue system error and cleaning utility - not recommended. A member of the ErrClean family"
X	DiskRetter	SysRep.exe	"DiskRetter
X	DokterFix	SysRep.exe	"DokterFix
X	ErrClean	SysRep.exe	"ErrClean rogue system error and cleaning utility - not recommended. There are number of variants in this family sharing the same filename and user interface - see here"
X	ErreurChasseur	SysRep.exe	"ErreurChasseur
X	FestPlattenCleaner	SysRep.exe	"FestPlattenCleaner
X	HardDriveGuard	SysRep.exe	"HardDriveGuard rogue system error and cleaning utility - not recommended
X	HataDuzelticisi	SysRep.exe	"HataDuzelticisi
X	LibreSystem	SysRep.exe	"LibreSystem
X	MS SyS Restore	sysrestore.exe	"Added by the RBOT.XM WORM!"
X	MSNSysRestore	pc32.exe	Added by a variant of the MASTAK VIRUS!
X	Nod32 Runtime	sysregi.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
?	NVRotateSysTray	nvsysrot.dll	"Related to NVIDIA nView Control Panel. What does it do and is it required?"
X	PCToolPro	SysRep.exe	"PCToolPro rogue system error and cleaning utility - not recommended
X	ProtectingTool	SysRep.exe	"ProtectingTool rogue system error and cleaning utility - not recommended
X	ProtejaseuDrive	SysRep.exe	"ProtejaseuDrive rogue system error and cleaning utility - not recommended. A member of the ErrClean family"
X	ProtezioneSoft	SysRep.exe	"ProtezioneSoft
X	Remote Procedure Call	winsysrpc.exe	"Added by the SDBOT-PS WORM!"
X	ReparateurDeSysteme	SysRep.exe	"ReparateurDeSysteme
X	SafeHardDrive	SysRep.exe	"SafeHardDrive rogue system error and cleaning utility - not recommended
X	SafePCTool	SysRep.exe	"SafePCTool rogue system error and cleaning utility - not recommended
X	SchijfBewaker	SysRep.exe	"SchijfBewaker
X	SicherheitsTool	SysRep.exe	"SicherheitsTool
X	SolutionReg	SysRep.exe	"SolutionReg rogue system error and cleaning utility - not recommended. A member of the ErrClean family"
X	StorageProtector	SysRep.exe	"StorageProtector rogue system error and cleaning utility - not recommended
X	Svcsys Registry Manager	svcsysreg.exe	"Detected by Kaspersky as the AGENT.CV TROJAN!"
X	Sys Ren	SysRen.exe	"Part of FlashEnhancer adware"
X	SysDepannage	SysRep.exe	"SysDepannage
X	SysR	sysmd.exe	"Ulubione adult content dialer"
X	SysReg	SysReg.exe	"Added by the CHEKIN TROJAN!"
X	SysReg	SysReg.exe	"SearchSeekFind textual marketing foistware"
X	Sysres	Sysres.exe	"Added by the LOGMOD.A TROJAN!"
X	SysRes	TASKMANAGER.exe	"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X	SysRes	WWE DIVAS.exe	"Added by the ELIPTER.D WORM!"
X	SysRes	IExpIore .exe	"Added by the ELITPER.E WORM!"
X	sysrest32.exe	sysrest32.exe	"Added by the AGENT-GIN TROJAN!"
X	sysrestore32.exe	sysrestore32.exe	"Unknown malware detected by McAfee - see here"
X	SysSearch	Regedit.exe -s sysreg.reg	"Added by the STARTPA-ME TROJAN! Note that regedit.exe is a legitimate Microsoft file and shouldn't be deleted. The ""sysreg.reg"" file is located in %Windir%"
X	System Registry Manager	sysrgmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System32 Runtime StartUp	sysrs.exe	"Added by the AGOBOT.ANW WORM!"
X	SystemErrorFixer	SysRep.exe	"SystemErrorFixer rogue system error and cleaning utility - not recommended. A member of the ErrClean family"
X	SystemOrdnare	SysRep.exe	"SystemOrdnare
X	toolsicuro	SysRep.exe	"ToolSicuro
X	UtilisateurSur	SysRep.exe	"UtilisateurSur
X	Windows Startup 32 Bits	sysrun32.exe	Added by a variant of the DARKSUN TROJAN!
X	Windows System Drivers	sysretain.exe	"Added by the SLENFBOT.BY WORM!"
X	WinPCDoctor	SysRep.exe	"WinPCDoctor rogue system error and cleaning utility - not recommended
X	Winsock2 driver	sysreq.exe	"Added by the SPYBOT-CC WORM!"
X	WinSP	[path] REGEDIT.EXE -s [path] sysreg.reg	"Added by the STARTPA-ME TROJAN!"
U	WinSysAppMon	WinSysRM.exe	"Home & Family Content Filter related. See here"
X	{42562052-EE17-4197-82C7-91CB2E4B0666}	sysrswva.exe	"Added by the FAKEALERT-AH TROJAN!"
X	{E4785213-3EFE-4c26-A9B4-332440E31F6F}	sysrxmfdksp.exe	"Added by the FAKEALERT-AH TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.