TE.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	(Default)	QQUpdate.exe	"Added by the QUADRULE.A WORM! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X	(Default)	msnupdate.exe	"Added by the RBOT-GWT BACKDOOR! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run & HKLM\RunServices in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
N	A Note	A Note.exe	"""A Note is a program that lets you create post-it like notes on your Microsoft Windows desktop"""
X	aa bbcc dde effgghh jj	update.exe	"Added by a variant of the IRCBOT BACKDOOR!"
U	Accelerate	accelerate.exe	Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N	AceGain LiveUpdate	LiveUpdate.exe	"""AceGain LiveUpdate can help to automate and optimize product updates. AceGain LiveUpdate will automatically detect new patch updates
X	Acroread	GoogleUpdate.exe	"Added by the AGENT-JGI TROJAN! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in %Temp%"
U	AdDelete	AdDelete.exe	Banner advertisment blocker
X	AdRoarUpdate	ARUpdate.exe	"AdRoar adware updater"
X	AdwareDelete	adwaredelete.exe	"AdwareDelete rogue adware remover - not recommended
N	AeXAgentLogon	AeXAgentActivate.exe	"Altiris Agent transmits information about your machine for the purpose of asset management and deployment"
N	AGSatellite	AGSatellite.exe	Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
X	AppletINIT	INITIATE.EXE	"Added by the AGOBOT.XV TROJAN!"
N	areslite	AresLite.exe	"""Ares is a free open source file sharing program that enables users to share any digital file including images
X	asrupdate.exe	asrupdate.exe	"Added by the VB.ATZ TROJAN!"
U	ATTBroadbandUpdate	SAUpdate.exe	"Big Brother from Quest Software. System and network monitor"
U	ATTRedUpdate	AutoUpdate.exe	Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X	autoload	windowsupdate.exe	"Added by the POLYCRYP.DY TROJAN!"
N	AutoMate Task Service	automate.exe	"Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start → Programs"
X	Automatic Windows Updater	Update.exe	"Added by the GAOBOT.AO WORM!"
X	Autopdate	Autopdate.exe	"Added by the RBOT-AGL WORM!"
X	AutoUpdater	aupdate.exe	"Tinybar variant"
X	AutoUpdater	AutoUpdate.exe	"PeopleonPage foistware"
X	AV UpDate	Update.exe	"Added by the FUROOT-A TROJAN!"
U	awplite	awplite.exe	"AllWallpapers Lite desktop wallpaper changer"
X	b3dUpdate	Zupdate.exe	"Associated with B3d Projector foistware - see here"
X	BADDATE	BADDATE.EXE	"Added by an unidentified VIRUS
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
N	BlackBerryAutoUpdate	RIMAutoUpdate.exe	"Automatic updates for BlackBerry smartphones
X	blah service	winupdate.exe	"Added by the GAOBOT.BIA WORM!"
N	BMupdate	BMupdate.exe	"Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example
X	Bouncer RunStartup	LiveUpdate.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	ccUpdate	ccUpdate.exe	"Added by the AGOBOT.YS WORM!"
X	cftmon	WindowsUpdate.exe	"Added by the AGENT.AQK BACKDOOR!"
X	Cheatle	GigaByte.exe	"Added by the SHODI.B VIRUS!"
N	CheckCustomWorksUpdate	CheckCWupdate.exe	"Update checker
U	ClauerUpdate	ClUpdate.exe	"Automatic updates for the software supporting the Clau-ACCV and Clauer-idCAT digital certificate USB keys"
N	ClipMate7	ClipMate.exe	"Clip Mate 7 by Thornsoft - utility that allows you to store more than one item in the clipboard"
U	ClUpdate	ClUpdate.exe	"Automatic updates for the software supporting the Clau-ACCV and Clauer-idCAT digital certificate USB keys"
U	ComproRemote	ComproRemote.exe	"VideoMate TV tuner and capture card - remote control driver"
X	Config	TaskUpdate.exe	"Added by the MDROP-BRO TROJAN!"
X	Configuration Loader	svupdate.exe	"Added by the RANDEX.DXP WORM!"
X	Configuration Loader	update.exe	"Added by the SDBOT-OS WORM!"
?	Contacte	contacte.exe	"Some kind of driver?"
X	ControlPanel	"private.exe internat.dll	LoadMouseCarpetProfile"
N	Creative Software Update	AutoUpdate.exe	Auto-updater for Creative Labs software
U	cwupdate	cwupdate.exe	"ContentProtect from ContentWatch - internet filter"
X	d3dupdate.exe	bbeagle.exe	"Added by the BEAGLE.A WORM!"
N	DAEMON Tools Lite	DTlite.exe	"Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
X	DAupdate	DAupdate.exe	NavEnhance adware
U	DepFrez	frzstate.exe	"Deep Freeze from Faronics Coporation. ""Freezes"" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators
X	DeskMateAutoUpdate	DeskMateAutoUpdate.exe	"DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related"
U	Desktop iCalendar	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
U	Desktop iCalendar Lite	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
U	Desktop iCalendar Lite.exe	Desktop iCalendar Lite.exe	"Desktop iCalendar Lite by Desksware - ""is a free desktop calendar for Windows. It allows you to manage your events
X	Diesel	Recalculate.exe	"Added by the LAZAR TROJAN!"
Y	Digital Patrol Update 5	update.exe	"Digital Patrol - ""a powerful anti trojan scanner
Y	DPASUpdate	DPASAutoUpdate.exe	"Automatic updates for DefenderPro AntiSpy spyware remover - now incorporated Defender Pro 15-in-1 and 5-in-1"
X	DRam prosessor	WindowsUpdate.exe	"Added by the RBOT-BBZ WORM!"
X	DRam prosessor	msupdate.exe	"Added by the DELF-FAW TROJAN!"
N	DTlite	DTlite.exe	"Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
X	Dxupdate.exe	Dxupdate.exe	"Added by the MAFEG WORM!"
U	DynSite	DynSite.exe	"DynSite - dynamic DNS client
X	EasySearchBar	ESBUpdate.exe	EasySearchBar adware downloader
N	EgisTecLiveUpdate	EgisUpdate.exe	"Software updater for biometric and data encryption products from EgisTec Inc"
U	EMBASSY Trust Suite Secure Update	AutoUpdate.exe	"Updates for Wave Systems Corp. Embassy Trust Suite - ""delivers advanced levels of security to the client PC using the TPM security chip found on most enterprise PCs today"""
N	Event Planner Reminders	PLNRNote.exe	Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
N	Event Planner Reminders Tray Icon	PLNRnote.exe	Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
U	FG1_00	frntgate.exe	"FrontGate MX - e-mail spam blocker"
U	FilterGate	filtergate.exe	"Filtergate internet filtering software - filters sounds
X	Firewall	SP2 UPDATE.exe	"Added by the ELITPER.E WORM!"
U	FlashMute	FlashMute.exe	"""FlashMute is a tool which allows you to mute/unmute Flash Movies loaded in a browser exclusively
N	GameTracker	GTLite.exe	"GameTracker - ""Keep track of and launch all your games from one application with the Game Tracker Client. Instantly announce on your profile and to your friends what game and on which server you are playing!"""
Y	GhostSurfDelSatellite	DeleteSatellite.exe	"Part of SpyCatcher spyware remover from Tenebril. Prevents rogue programs from sending personal information to a remote user via the Internet. If you use SpyCatcher with real time scanning
N	Google Update	GoogleUpdate.exe	"Update manager for the range of tools available from Google - such as the Chrome web browser and Picasa photo manager. Located in %AppData%\Google\Update"
X	Google Update	GoogleUpdate.exe	"Added by the BUZUS.DBFM TROJAN! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in %System%"
X	GreasyPalmUpdate	GreasyPalmUpdate.exe	"SearchFast adware"
X	h4te Service Drivers	h4te.exe	"Added by a variant of the RBOT WORM!"
X	HKLMRun	windowsupdate.exe	"Added by the FORBOT-BJ WORM (where HKLM\Run represents HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run)!"
N	ICQ Lite	ICQLite.exe	"ICQ Lite - compact version of the popular messaging program"
X	ICQ Lite Messenger	ICQLITE.EXE	"Added by an unidentified VIRUS
X	IcqBeta	webcamupdate.exe	Added by an unidentified TROJAN!
X	IDTemplates	IDTemplate.exe	"Added by the BRONTOK-H WORM!"
X	InternetGetConnectedState	winupdate.exe	"Added by the SDBOT-JN WORM!"
X	InternetGetConnectedStateEx	winupdate.exe	"Added by the SDBOT-JN WORM!"
?	iPrint LPT Redirector	nipplpte.exe	"Related to Novell iPrint - ""a printing solution that enables you to send documents to printers located throughout the Net."" Is it required?"
X	IPSEC Configuration	wsupdate.exe	"Added by the AGOBOT-IQ WORM!"
N	kazaalite	kazaalite.exe	"Kazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original
X	Kernel	Update.exe	"Added by the DELF-FN TROJAN!"
U	laim	aimlite.exe	"""AIM Lite is a reference application for testing some new client technology developed here at AOL®
N	LG Intelligent Update	autoupdate.exe	"Automatic update utility for LG Notebooks"
U	LGODDFU	fwupdate.exe	Auto firmware update program for LG Electronics CD-ROM/DVD writer
N	LiveNote	Livenote.exe	Asus graphics card driver live update feature
U	LiveUpdate	LiveUpdate.exe	"Web-update utility as used by various types of software - see here"
X	LsasS	Sygate.exe	"Added by the SDBOT.BCA WORM!"
X	LTM2	winupdate.exe	"Added by the LITMUS.203 TROJAN!"
U	ManageDesk Lite	ManageDesk Lite.exe	"ManageDesk Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use"
Y	McAfee SecurityCenter	McUpdate.exe	Automatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Y	McUpdate	McUpdate.exe	Automatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Y	MCUpdateExe	McUpdate.exe	Automatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online
Y	McVsRte	mcvsrte.exe	"Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
U	Media Codec Update Service	update.exe	"Windows Essentials Codec Pack 1.0 is a collection of the most commonly needed video and audio codecs. This program allows keeps these codecs updated"
X	MediaPlayeS	MediaPlayer_update.exe	"Added by the STARTER-K TROJAN!"
Y	mgavrtclexe	mgavrte.exe	Part of older versions of McAfee's internet security products such as VirusScan and VirusScan Online
X	Microoft Timing	pupdate.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft	MSUPDATE.exe	Added by an unidentified WORM or TROJAN!
X	Microsoft auto update	winupdate.exe	"Added by the BMBOT TROJAN!"
X	Microsoft DirectX	wupdate.exe	"Added by the RBOT-L WORM!"
X	Microsoft Generic Update Manager	wupdate.exe	"Added by the RBOT-AWC TROJAN!"
X	Microsoft Internet Explorer Update	ieupdate.exe	"Added by the SHEUR.MH TROJAN!"
X	Microsoft IT Update	msupdate.exe	"Added by the RBOT-FE WORM!"
X	Microsoft Security Monitor Process	windowsupdate.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Service Execution Manager	execute.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Microsoft Synchronization Manager	winupdate.exe	"Added by the SDBOT.ER WORM!"
X	Microsoft System Update	sysupdate.exe	"Added by the SDBOT.DG WORM!"
X	Microsoft Update	wudmate.exe	"Added by the RBOT.AP WORM!"
X	Microsoft Update	xpupdate.exe	"Added by the RBOT-QE WORM!"
X	Microsoft Update	Mupdate.exe	"Added by the RBOT-AG WORM!"
X	Microsoft Update	mcupdate.exe	"Added by the RBOT.XT WORM! Note - this file is located in %System% and should not be confused with the McAfee antivirus executable as described here"
X	Microsoft Update	Sygate.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Update	update.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft update	winupdate.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update	msupdate.exe	"Added by the BOROBOT-I TROJAN!"
X	Microsoft Update Machine	winupdte.exe	"Added by the RBOT-GKL WORM!"
X	Microsoft Updater	winupdate.exe	"Added by the AGENT-KIR TROJAN!"
X	Microsoft Updatting	miroupdate.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows 32 Update	win32update.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MICROSOFT Windows update	pdate.exe	"Added by the RBOT.BZT WORM!"
X	Microsoft Windows Update	windowsupdate.exe	"Added by the AGOBOT.ON WORM!"
X	Microsoft Windows Updater	WINUPDATE.EXE	"Added by the RBOT-LI WORM!"
X	Microsoft WinUpdate	msupdte.exe	"Added by an unidentified TROJAN! See examples here & here"
X	MicrosoftCorp	update.exe	"Added by the AUTORUN-ASG WORM!"
X	MicrosoftCorp	wupdate.exe	"Added by the AGENT-LAY TROJAN!"
X	MicrosoftNAPC	update.exe	"Added by the AUTORUN-ASG WORM!"
X	MicrosoftNAPC	wupdate.exe	"Added by the AGENT-LAY TROJAN!"
X	MicrosoftUpdate	MicrosoftUpdate.exe	"Added by the BANKER-EHC TROJAN!"
N	MiniNote	MININOTE.EXE	"Mini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software"
U	Mobile Phone Suite	MobilePhoneSuite.exe	Logitech Mobile Phone Suite
U	Motorola Desktop Suite	DesktopSuite.exe	"Related to Motorola Desktop Suite - PC software managing Motorola mobiles such as the A1000"
X	MouseDrv	update.exe	"Added by the ZOTOB.N WORM!"
X	MS Unix Binary	msnupdate.exe	"Added by the RBOT-AAM WORM!"
X	MS Unix Binary	outlookexpressupdate.exe	"Added by the RBOT-YU WORM!"
X	MS Unix Binary	Win32Update.exe	"Added by the RBOT-BAS WORM!"
X	MS Unix Binary	Norton2005Update.exe	"Added by a variant of the RBOT WORM!"
X	MS Unix Binary	trmupdate.exe	"Added by the RBOT-ACC WORM!"
X	MS UPDATER	update.exe	"Added by the RBOT-VC WORM!"
X	MSConfig Manager	msupdate.exe	"CoolWebSearch parasite variant"
X	msliveupdate	msliveupdate.exe	"Added by the AGOBOT.ALT WORM!"
X	Msn Messenger Update	msnupdate.exe	"Added by a variant of the RBOT WORM!"
X	MSN Updating	msnupdate.exe	"Added by the QHOST.AEI TROJAN!"
X	MSNPluginSrvcs	sagate.exe	"Added by the SDBOT.AKJ WORM!"
X	mssonfig	winupdate.exe	"Added by a variant of the SDBOT WORM!"
X	msupdate	msupdate.exe	"Added by the RBOT-MZ WORM!"
X	MSUpdate	criticalUpdate.exe	"Affilred adware"
X	msupdate	update.exe	"Added by a variant of the SDBOT WORM!"
X	MSupdate.exe	N/A	"CoolWebSearch parasite variant - resets home page to an adult content site"
X	MSWinupdate	winupdate.exe	"Added by the DLOADR-AAW TROJAN!"
X	MyFastAccess	myfastupdate.exe	My-Fast-Access toolbar updater
X	napv.exe	wupdate.exe	"Added by the AGOBOT-JX BACKDOOR!"
X	NAV_Update	NAV_Update.exe	Unidentified WORM or TROJAN!
?	netfxupdate	netfxupdate.exe	"Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan"
?	NetFxUpdate_v1.0.3705	netfxupdate.exe	"Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan"
N	Nokia Ovi Suite	NokiaOviSuite.exe	"Nokia Ovi Suite for managing Nokia mobile devices - ""gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer
N	NokiaOviSuite	NokiaOviSuite.exe	"Nokia Ovi Suite for managing Nokia mobile devices - ""gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer
N	NokiaOviSuite.exe	NokiaOviSuite.exe	"Nokia Ovi Suite for managing Nokia mobile devices - ""gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer
X	NortE Antivirus	norte.exe	"Added by the RBOT.BQQ WORM!"
X	Norton Update	ccUpdate.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Norton Update	cUpdate.exe	"Added by the AGOBOT.APP WORM!"
X	Norton Updater	NortonUpdate.exe	Added by an unidentified WORM or TROJAN!
X	Norton Updater	ccUpdate.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	NSupdate	NSupdate.exe	"Added by the Dial/Laet-B premium rate dialer!"
X	Open Site	opnste.exe	"OpenSite adware"
X	Open Site	opensite.exe	"OpenSite adware"
U	Openwares LiveUpdate	LiveUpdate.exe	"Web-update utility as used by various types of software - see here"
X	OrbitUpdate	update.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
X	OuterinfoUpdate	OuterinfoUpdate.exe	"Clickspring.Outerinfo adware"
X	outpostupdate	outpostupdate.exe	"Added by the COSIAM-C TROJAN!"
N	PC Suite	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
N	PC Suite Tray	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
X	PCHEasySearch	STUpdate.exe	PCH EasySearch bar
N	PCSuite	PCSuite.exe	"System Tray access to Nokia PC Suite - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" This allows you (amongst other options) to backup your devices contents to your PC
U	PhilipsRemote	PhilipsRemote.exe	"Remote control support for MusicMatch Jukebox on Philips audio players such as the AZ2555 Sound Machine - see
N	PLNRNote	PLNRNote.exe	Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner
N	Post-itR Software Notes Lite	Psn2Lite.exe	"Post-it® Software Notes - Lite from 3M - now replaced by the more advanced Post-it® Digital Notes"
Y	PowerChute	Pwrchute.exe	""During a power outage
X	PowerChute	Pwrchute.exe	"Added by the LAZAR-A TROJAN! Note - this is located in %ProgramFiles%\APC_Power"
N	ppmate	ppmate.exe	"PPMate - free tool for streaming online TV via P2P (peer-to-peer)"
X	PPPOEOE	winlite.exe	"Added by the RBOT-AAN WORM!"
N	PsnLite	PsnLite.exe	"Post-it® Software Notes - Lite. ""You can use this digital version of the famous canary yellow note to remind you to do something
X	Quick Office	activate.exe	"Added by the RANSOMLOCK.D TROJAN! Note - this infection hooks the keyboard to prevent anything except numbers from being typed and displays a Russian message requesting a valid license key"
N	Quickbooks Update Agent	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not
N	Quicknote	quicknote.exe	"JC&MB Quicknote Virtual Scrapbook"
X	QuickTimeUpdate	QuickUpdate.exe	"Added by the BIFROSE-CW TROJAN!"
X	rate.exe	i11r54n4.exe	"Added by the BEAGLE-I WORM!"
X	rate.exe	i1ru74n4.exe	"Added by the BEAGLE.E WORM and variants!"
?	RealTimeUpdate	RealTimeUpdate.exe	"Product description in properties is ""InternetExplorerCommunicationAgent Module"" ?"
U	Remote	Remote.exe	"Remote Control driver for LifeView internal and external TV products"
?	RMremote	RmRemote.exe	"Remote control driver for REALmagic Xcard. Is it required?"
X	rn4d	dirote.exe	"Added by the MAROON.A TROJAN!"
X	RunDLL32	winupdate.exe	"Added by an unidentified TROJAN! - possibly a BMBOT variant"
X	RunWindowsUpdate	uptodate.exe	"BrowserAid/BrowserPal foistware"
X	SafeSurfingUpdate	SSUpdate.exe	"MoneyTree parasite - ActiveX control used to download premium-rate dialers"
X	Sagate Security Firewall	sagate.exe	"Added by the GAOBOT.BOW WORM!"
U	SAUpdate	SAUpdate.exe	"Big Brother from Quest Software. System and network monitor"
X	SaveDate	SaveStartDate.Exe	Unidentified adware
U	SBAutoUpdate	sbautoupdate.exe	"SpywareBlaster auto-updater"
X	ScanRegistry	update.exe	"Added by the DWNLDR-FZY TROJAN!"
X	sdfsdfsdf	sp2update.exe	"Added by a variant of the SPYBOT WORM!"
X	Security	WindowsSecurityUpdate.exe	"Added by a variant of the SDBOT WORM!"
X	Sepate Security Firewall	sepate.exe	"Added by the RBOT.BLC BACKDOOR!"
N	SEPCSuite	SEPCSuite.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X	Shell	Explorer.exe winupdate.exe	"Added by the AGENT-FD TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""winupdate.exe"" file is located in %System%"
X	Shellapi32	mcvsrte.exe	Added by an unidentified WORM! Note - do not confuse with the McAfee SecurityCenter file of the same name
X	Shmgrate.exe	ibot4.exe	"Added by the GASTER TROJAN!"
U	ShortKeys Lite	shklite.exe	"ShortKeys Lite from Insight Software Solutions
N	SkypeMate	SkypeMate.exe	"SkypeMate acts as a bridge between networks of VoIP and PSTN"
U	SoftickPPP	PPPGate.exe	"Softick PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer"
N	Sony Ericsson PC Suite	SEPCSuite.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X	sp2update	sp2update.exe	"SP2Update adware! Tracks URLs visited and search terms entered into Internet Explorer"
X	SpyFighterUpdate	AutoUpdate.exe	"SpyFighter spyware remover - not recommended
Y	SpywareTerminatorUpdate	SpywareTerminatorUpdate.exe	"Automatic updates for Spyware Terminator. Initially not recommended due to false positives but the later versions have since improved - see here"
X	ssate.exe	irun4.exe	"Added by the BEAGLE.J WORM!"
X	ssate.exe	winsys.exe	"Added by the BEAGLE.K WORM!"
N	SSBkgdUpdate	SSBkgdupdate.exe	"Automatic updates for ScanSoft (now Nuance) products such as OmniPage and PaperPort. Can be disabled using the main program's options. Note - if you have a Soundblaster Audigy2 ZS soundcard installed on your computer and the volume of your sound system is turned on extremely high disabling this will solve the problem"
X	ssgrate.exe	system.exe	"Added by the MITGLIEDER.C TROJAN!"
X	ssgrate.exe	irun.exe	"Added by the MITGLIEDER.D TROJAN!"
X	ssgrate.exe	irun4.exe	"Added by the MITGLIEDER.F TROJAN!"
X	ssgrate.exe	sysdoor.exe	"Added by the MITGLIEDER.N TROJAN!"
X	ssgrate.exe	winerdir.exe	"Added by the MITGLIEDER.O TROJAN!"
X	ssgrate.exe	winsystems.exe	"Added by the BAGLEDL-J TROJAN!"
X	ssgrate.exe	wintems.exe	"Added by the MITGLIEDER.Q TROJAN!"
X	SSUpdate	SSUpdate.exe	"MoneyTree parasite - ActiveX control used to download premium-rate dialers"
X	Start Uppings	mssupdate.exe	"Added by a variant of the RBOT WORM!"
X	startkey	update.exe	"Added by the BIFROSE-DG TROJAN!"
N	StickyNote	StickyNote.exe	Utility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start -> Programs
U	StreamZap Remote	zremote.exe	"StreamZap PC Remote - control Windows Media Player
X	supdate	supdate.exe	"Added by the MALWARE.D TROJAN!"
X	svshostdriver	msnmessengerupdate.exe	"Added by the SDBOT-BI BACKDOOR!"
X	Swf32	AVupdate.exe	"Added by the MERKUR.E WORM!"
X	Sygaete Personal Firewall	SyGate.exe	"Added by the RBOT-GLX WORM!"
X	Sygate Personal Firewall	Sygate.exe	"Added by the RBOT-PN WORM!"
X	Sygate Personal Firewall	Mcafeeupdate.exe	"Added by the RBOT.YN WORM!"
X	Sygate Personal Port Blocker	winupdate.exe	"Added by a variant of the RBOT WORM!"
X	Sysctrls	winupdate.exe	Added by an unidentified WORM or TROJAN!
X	sysmem	mmsete.exe	"Added by the NOPIR.C WORM!"
X	sysnate	sysnate.exe	"Added by the MEDIAS TROJAN!"
X	Syss	ehuupdate.exe	"EHU adware"
X	System Monitoring	cute.exe	"Added by the RAHIWI.A WORM!"
X	System Update2	update.exe	"Added by the AUTOTROJ-C TROJAN!"
X	Taba	stte.exe	"PurityScan adware"
X	Taskman	sysdate.exe	"Added by the SILLYFDC.BCQ WORM!"
U	Titlebar Date	Titlebar Date.exe	"Titlebar Date by Titlebar Software - displays the day of the week and date and time in the active window's tile bar. For example
N	TK8 EasyNote	EasyNote.exe	"TK8 EasyNote - desktop post-it notes"
X	tmax	pupdate.exe	Adware pop-up generator
X	Tok-Cirrhatus	IDTemplate.exe	"Added by the RONTOKBRO.A WORM!"
U	Toshiba Key State	KEYSTATE.EXE	"Displays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g.
U	Tracks Eraser	te.exe	"Tracks Eraser from Acesoft - "Erases all tracks of your internet activity""
U	Tracks Eraser Pro	te.exe	"Tracks Eraser Pro from Acesoft - "Erases all tracks of your internet activity""
N	Tray Date	Tray Date.exe	"Tray Date by Titlebar Software - displays a simple icon in the System Tray (that can't be configured) which shows the current date. The originator's website is no longer available but you can still download it here. Whilst it only uses around 10MB of memory
U	traydate.exe	TRAYDATE.EXE	TrayDate - displays the date as well as the time in the System Tray
N	tunebite	tunebite.exe	"""Tunebite lets you make unprotected copies of copy-protected music files by recording them while they are being played"". Can be launched from it's Start Menu shortcut"
U	TurboExplorer	TE.exe	"Web accelerator - ""TurboExplorer 2.x is a real-time web surfing accelerator specifically designed for Internet Explorer 4/5 to achieve a faster and more effective approach to the internet"". Only needed if you find it improves web browsing"
N	TurboNote	tbnote.exe	Post-It's on your desktop. Available via Start -> Programs
U	TvrRemote	Remote.exe	"Remote Control driver for LifeView internal and external TV products"
X	Update	Zupdate.exe	"Associated with B3d Projector foistware - see here"
X	Update	Update.exe	"QuickButton adware"
X	Update	WinUpdate.exe	"Added by the SDBOT-CV BACKDOOR!"
Y	Update Service	Update.exe	"Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is run so best to leave it enabled. Prevent it dialling out via a firewall"
X	Update.exe	ravseuper.exe	"Added by the QQPASS-P TROJAN!"
X	updatereal	realupdate.exe	Chinese originated adware
X	Updates	msupdate.exe	"CoolWebSearch parasite variant"
X	updatewin	update.exe	"Added by a variant of the SDBOT WORM!"
X	UpToDate	uptodate.exe	"BrowserAid/BrowserPal foistware"
X	USB Drivers1	msupdate.exe	"Added by a variant of the RBOT WORM!"
X	win update	wapdate.exe	"Added by a variant of the RBOT WORM!"
X	Win Update	SysUpdate.exe	"Added by the AGOBOT-TN WORM!"
X	Win Update	oleupdate.exe	"Added by the AGENT-UY TROJAN!"
X	win update	wupdate.exe	"Added by the RBOT-P BACKDOOR!"
X	Win32 Kernel Update	win32update.exe	"Added by the PROXY-BS TROJAN!"
X	Win32 USB2 Driver	winupdate.exe	"Added by the AGOBOT.YE WORM!"
X	win32update	win32update.exe	"Added by the GENOME.AQUV TROJAN!"
U	WINCINEMAMGR	WinRemote.exe	"InterVideo WinCinema Manager - needed for the use of WinDVD Remote Control"
X	window2	ieupdate.exe	"Added by the FORBOT-BM WORM!"
X	Windows 32 Update	Windows-Update.exe	"Added by a variant of the RBOT WORM!"
X	Windows Auto Updater	WINDOWSUPDATE.EXE	"Added by the SDBOT.PB WORM! Note the space at the beginning of the filename"
X	Windows Configuration Utility	winxupdate.exe	"Added by the AGOBOT.LW WORM!"
X	Windows drivers update	windowsupdate.exe	"Added by the RBOT-ACE WORM!"
X	Windows Firewall Updater	windowsupdate.exe	"Added by the SPYBOT.AVEO WORM!"
X	Windows Fixes Systems	elite.exe	"Added by the MYTOB.EG WORM!"
X	Windows Host Service	svchoste.exe	"Added by the KELVIR.BF WORM!"
X	Windows Loader	SysUpdate.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Logon Procedure	Svchoste.exe	"Added by a variant of the SPYBOT WORM!"
X	Windows MS Update 32	jebote.exe	"Added by the FORBOT-GK WORM!"
X	Windows Process	win_update.exe	"Added by the LASTWORD WORM!"
X	Windows Registry Scan	timeupdate.exe	"Added by the SPYBOT.JE WORM!"
X	Windows Services	scvhoste.exe	"Added by the SPYBOT.OBZ WORM!"
X	Windows Services	wupdate.exe	"Added by the GAOBOT.ZT WORM!"
X	Windows SP2 Update	Sp2update.exe	"Added by the WOOTBOT.BS WORM!"
X	WINDOWS SYSTEM	xpupdate.exe	"Added by the ZOTOB-G WORM!"
X	WINDOWS SYSTEM	wupdate.exe	"Added by the MYTOB-HT WORM!"
X	WINDOWS SYSTEM By FEnR	windasz-updote.exe	"Added by the MYTOB.LR WORM!"
X	Windows Update	wudate.exe	"Added by the AGOBOT.ML WORM!"
X	Windows Update	wupdate.exe	"Wengs adware"
X	Windows Update	WindowsUpdate.exe	"Added by the BAYROB-A TROJAN!"
X	Windows Update	Update.exe	"Added by the DELF-FN TROJAN!"
X	Windows Update	winupdate.exe	"Added by the SDBOT-WS WORM!"
X	Windows Update	mplupdate.exe	"Added by the MOEGA WORM!"
X	Windows update	wudupdate.exe	"ISTBar adware related"
X	Windows Update	msnsupdate.exe	"Added by the RBOT-AXS WORM!"
X	Windows Update	win32update.exe	"Added by the SDBOT.FTK WORM!"
X	Windows Update Automation	winuptdate.exe	"Added by a variant of the RBOT WORM!"
X	Windows update loader	xpupdate.exe	"Malware installed by different rogue security software including SpyKillerPro. Also detected as the BRAVE-A TROJAN!"
X	Windows Update Manager	wupdate.exe	"Added by a variant of the RBOT WORM!"
X	Windows Update Service 2004/2005	systemupdate.exe	"Added by the RBOT-JE WORM!"
X	Windows Update.exe	N/A	Homepage hijacker
X	Windows Updater	wupdate.exe	"Added by the WOOTBOT.AJ WORM!"
X	Windows Updater Servc	xpuupdate.exe	"ContraVirus rogue security software - not recommended
X	Windows Updater Services	msnupdate.exe	"Added by a variant of the RBOT WORM!"
X	Windows Updates Agent	winupdate.exe	"Added by the SPYBOT.HW WORM!"
X	Windows USB Monitor	servupdate.exe	"Added by the IRCBRUTE.AQ TROJAN!"
X	Windows XP Automatic Update	wXPupdate.exe	"Added by the RBOT-AFC WORM!"
X	WindowsACEbar	acebarupdate.exe	"BarACE adware"
X	WindowsCriticalUpdate	windows_critical_update.exe	"Added by the ASTEF or RESPAN WORMS!"
X	Windows�Updates	Update.exe	"Added by the RBOT.TRA BACKDOOR!"
X	WindowsRegKey update	winupdate.exe	"Added by the RBOT-QJ WORM!"
X	WindowsRegKey update	wdnupdate.exe	"Added by the SDBOT.QX WORM!"
X	WindowsUpdate	windows_update.exe	"Added by the LOFNI WORM!"
X	windowsupdate	winupdate.exe	"Added by the WARPI WORM!"
X	Windowsupdate	Windowsupdate.exe	"Added by the BANKER.ARK TROJAN!"
X	windowsupdate	autoupdate.exe	"Added by the IRCBOT-P BACKDOOR!"
X	WindowsXP Update	windowsxpupdate.exe	"Added by the RBOT-PB WORM!"
X	WinGate initialize	WinGate.exe	"Added by the LOVGATE.F WORM!"
X	WinLibUpdate	libupdate.exe	"Added by the BIONET series of TROJANS such as BIONET.31 or BIONET.310"
X	WinLibUpdte	libupdte.exe	"Added by the BIONET.318 TROJAN!"
U	WINREMOTE	WinRemote.exe	"InterVideo WinCinema Manager - needed for the use of WinDVD Remote Control"
N	winroute	winroute.exe	"Win-Route 4.27. WinRoute Tray Icon for starting and stopping the WrCtrl.exe process
X	Winshell	remote.exe	"Added by the MYTOB.LJ WORM!"
X	Winsock driver	winnt update.exe	"Added by the SPYBOT-DM TROJAN!"
X	Winsock2 driver	winupdate.exe	"Added by the SPYBOT-BX WORM!"
X	Winsock32driver	sp2XPupdate.exe	"Added by the HACKARMY.S TROJAN!"
X	Winsock32driver	winXPupdate.exe	"Added by the HACKARMY.9728 TROJAN!"
X	winupdate	winupdate.exe	"Added by the ALCAN.B WORM!"
X	winupdate.exe	winupdate.exe	"Added by the RADO TROJAN!"
X	winupdate.reg	winupdate.exe	"Added by the SPYBOT.EAS WORM!"
X	WinUpdater	update.exe	"Added by the STARTPAGE.C TROJAN!"
X	wmupdate	wmupdate.exe	"Added by the AGENT-GGJ TROJAN!"
X	won update	WAPDATE.EXE	"Added by the RBOT.N WORM!"
?	wriste	wriste.exe	"??"
?	wsbklite	wsbklite.exe	"Related to the Acer Soft Button on Acer Tablet PCs. Appears to do nothing so is it required?"
X	Wupdate driver	wupdadte.exe	"Added by the SPYBOT-CQ WORM!"
X	Wxp4	Norton Update.exe	"Added by the ERKEZ.D WORM!"
X	xpiupdate	xpiupdate.exe	"Added by the RBOT-AAB WORM!"
X	xpsp2install	xpsp2Update.exe	"Added by the AGENT-DPK BACKDOOR!"
X	xpsp2Update	xpsp2Update.exe	"Added by the AGENT-DPK BACKDOOR!"
U	XSC SIP Client	X-Lite.exe	"""CounterPath's X-Lite 3.0 is the market's leading free SIP based softphone available for download"". For VOIP and broadband users"
X	XTServiceUpdate	XTServiceUpdate.exe	hahame.net adware downloader
X	Zi5	AntiVirus Update.exe	"Added by the ERKEZ.G WORM!"
X	Zupdate	Zupdate.exe	"Associated with B3d Projector foistware - see here"
X	[various names]	forces_elite.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{C0FB7D08-056E-1033-0501-03020730002c}	Update.exe	"Added by the AGENT-EOG TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.