Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
N3dfx Task Manager3dfxMan.exeSystem Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
?3Dlabs Taskbar Display Manager3DLman.exe"3DLabs graphics driver related. System Tray access to display settings?"
UaaLDTaskCompletionamclient.EXE"LANDesk® Management Suite software component"
YAdslTaskBar"rundll32.exe stmctrl.dll TaskBar"
XAdslTaskBarstaskmng.exe"Added by the RBOT-AXZ WORM!"
XAll Sea screen saverTaskTray.exe"Free screensaver
UAMO_Taskplaner.exeAMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
UAMO_TA~1AMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
UAnVir Task ManagerAnVir.exe"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Task Manager FreeAnVir.exe"AnVir Task Manager Free - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Task Manager ProAnVir.exe"AnVir Task Manager Pro - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAshampoo Magical Optimizer TaskplanerAMO_TA~1.EXE"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
UAshampoo Magical Optimizer TaskplanerAMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
NATI Task ApplicationAtitkad.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
NATI Task Application (Atikey)Atitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
NAtikeyAtitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
UAuto SwitchTASKBAR.exeRelated to 2-port Bitronics AutoSwitch kit from Belkin
XAuto WinUpdatetaskmrg.exe"Added by the RBOT-AFA WORM!"
NAutoMate Task Serviceautomate.exe"Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start → Programs"
Xavptask[path to trojan]"Added by the NOFERE-G TROJAN!"
Xavptaskexpl0rer.exe"Added by the AGENT.JJO TROJAN!"
XAvptaskrund1132.exe"Added by the AGENT.PKZ TROJAN!"
XBONZI Task SwitcherTaskswitch.exe"Added by the SPYBOT.DTR WORM!"
XC:WINDOWSWinTask.exeWinTask.exe"""Pop Marketing"" adware"
XcandynetTaskmsg.exe"Added by the RBOT-NA WORM!"
XCentralProcessortaskimgr.exe"Added by the BANCOS.J TROJAN!"
Xcftmon32taskmgr*.exe [* = number]"Added by the SOWSAT.C and SOWSAT.J WORMS!"
XCgtask Servicescgtask.exe"Added by the LALA.B TROJAN!"
NCleanupONICTASK.EXE"Internet Cleanup from Allume Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet"
UClient Access Taskbarcwbuitsk.exe"IBM iSeries Client Access taskbar
NCnxDslTaskBarCnxDslTb.exeConnexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
XConfigTaskUpdate.exe"Added by the MDROP-BRO TROJAN!"
XConfiguration LoaderMSTasks.exe"Added by the LOADCFG or SDBOT TROJANS!"
UCoolSwitchtaskswitch.exeALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
UCopernicPerUserTaskMgrCopernicPerUserTaskMgr.exeAutomatic tasking feature of Copernic Pro multi-search engine tool
XCorporate Microsoft Updateuptask.exe"Added by the RBOT-GVB WORM!"
?CreativeTaskSchedulerCTSched.exe"Creative Task Scheduler. What does it do and is it required?"
Xctfmontaskmgr32*.exe [* = number]"Added by the SOWSAT.B WORM!"
Xctfmon32taskmgr32*.exe [* = digit]"Added by the SOWSAT.C WORM!"
NcursorScreendragon_VS_Taskbar.exe"ScreenDragon video player"
XDefaultmtask.vbe"Added by the ALLEM WORM!"
UDefragTaskBardefragTaskBar.exe"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
UdefragTaskBar.exedefragTaskBar.exe"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
UDeltaIITaskbarAppDeltaIITray.exe"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
NDisplay Settingshptasks.exe"Allows for the adjustment of the display for LCD screen
NDiTask.exeDiTask.exe"Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free
UDT TaskDTHtml.exe"Display Tune from Portrait Displays
NE6TaskPanelTaskPanl.exe"Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet
NEN4060C Taskbaren4060ct.exeComes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
XExplorerTaskexplorer.exe"Added by the ZCREW-B BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the ""Fonts"" sub-folder"
XFile Systemtaskmqrs.exe"Added by a variant of the TOXBOT/CODBOT WORM!"
XFile Systemtaskmqr.exe"Added by the RBOT.BWQ WORM!"
YFix-itmxtask.exe"Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard
NGameDriveGDTask.exe"GameDrive from FarStone - virtual CD/DVD drive emulator that allows you to run your PC games without the disc. Available via Start → Programs"
XHost Process for Windows Taskstaskhost.exe"Added by the BREDO-AI WORM! Note - this is not the valid Windows 7 process which has the same filename and the file description is also ""Host Process for Windows Tasks"". It is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
UHPDJ Taskbar Utilityhpztsb01.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb02.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb04.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb05.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb07.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb09.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb06.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb08.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb03.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb10.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb11.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb12.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
UHPDJ Taskbar Utilityhpztsb13.exeHP System Tray utility which allows diagnostic and maintainance of your HP Deskjet series printer
XImagePathtaskbarmngr.exe"Added by the SDBOT-XB WORM!"
NImgTaskImgtask.exe"Related to the WalletPix digital photo album. ""On some computers
UInoTaskInoTask.exe"Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates"
UIolo Task AgentTask_Agent.exe"Iolo System Mechanic Task Agent. Scheduled maintenance"
XivHosttaskManager.exe"Added by a variant of the SPYBOT WORM! See here"
UJob-oversigttaskmon.exe"Task Monitor (on Danish language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
Ujv16PT - Privacy ProtectorTask.jvb"jv16 PowerTools Privacy Protector - ""allows you to protect your privacy by automatically clearing out all the unwanted history items and cookies from you computer
XK2ps_full.taskK2ps_full.exe"Added by the JUNTADOR.K TROJAN!"
Xkernel44.dll"taskkill /f /fi ""PID ge 0"" /im *""Added by the VBS.LIDO WORM!"
ULPtasklptask.exe"Program Lock It And Protect Pro - lock and protect your folders from being opened
NM-Audio Delta Taskbar IconDeltTray.exeM-Audio Delta Control Panel for M-Audio brand Delta series audio cards. System Tray access to audio settings - available through Control Panel
UM-Audio MobilePre Control Panel LauncherMPTask.exe"Control Panel Launcher for MobilePre USB bus-powered preamp and audio interface from M-Audio"
UM-Audio Taskbar IconDeltaIITray.exe"System Tray access to the Delta Control Panel for the M-Audio Delta series of PCI audio cards"
UMAFWTaskbarAppMAFWTray.exeDrivers for the M-Audio Firewire Audiophile - Interface
XMICROSFT MX UPDATE SUPPORTtaskmngrs.exe"Added by the RBOT-AUZ WORM!"
XMicrosofttaskbar.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Configuration Wizardtaskmrg.exe"Added by the SDBOT-MX TROJAN!"
XMicrosoft sddcE Contoltaskmnegr.exe"Added by the RBOT-AUM WORM!"
XMicrosoft sddcE Contoltaskmn.exe"Added by the RBOT-BJZ WORM!"
XMicrosoft System Servicetaskmgr1.exe"Added by a variant of the SPYBOT WORM! See here"
XMicrosoft Task Manager Daemonspoolsrv.exe"Added by the SDBOT.FLL WORM!"
XMicrosoft Task Messenger Configtaskmgsr.exe"Added by the SDBOT-JK WORM!"
XMicrosoft task tray monitorctray.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Task32 Protocoltaskmgr32.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Taskmanager Updaterkeyboard.exe"Added by the RBOT-ALU WORM!"
XMicrosoft Updatetaskmgr32.exe"Added by the RBOT-CV WORM!"
XMicrosoft Update 32taskMangr.exe"Added by the RBOT.AIE BACKDOOR!"
XMicrosoft Update Machinetaskmngrs.exe"Added by the RBOT-CR WORM!"
XMicrosoft Update MachineTASKMAN4.EXE"Added by a variant of the RBOT WORM!"
XMicrosoft Windowsmstask0.exe"Added by the SDBOT.FQ WORM!"
XMicrosoft Windows Task Managementmstasks.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft Windows Task MangerMstosk.exe"Added by the SDBOT-WW WORM!"
XMicrosoft Windows Tasks Managementtaskmng.exe"Added by the RBOT-FXK WORM!"
XMicrosoft Windows WKS Servicemstask0.exe"Added by the SDBOT.FV WORM!"
XMicrosoftMultimediaTaskMmtask.exeAdware downloader - not the valid MusicMatch Jukebox which shares the same filename
XMicrosoftServiceManagermstask32.exe"Added by the YAHA.P WORM!"
XMirsoft sdcEtaskmegr.exe"Added by the RBOT-AWY WORM!"
YMMTASKmmtask.tsk"A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI
Nmmtaskmmtask.exe"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
XMMtask Servicemmtask.exe"Added by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename"
XMPtask Servicesmptask.exe"Added by the LALA or AOT TROJANS!"
XMs task managertskmgr.exe"Added by the SDBOT.CCD WORM!"
XMS Task Manager 32[trojan filename] .exe"Added by the RANKY.NF TROJAN!"
XMS taskbarcrssr.exe"Added by the RBOT-AGO WORM!"
XMS taskbarnts.exe"Added by the RBOT-AGB WORM!"
XMS taskbartaskbars.exe"Added by the RBOT.BRW WORM!"
XMS Taskbarstaskbars.exe"Added by the SDBOT-ACV WORM!"
XMS taskmanagertskmgr.exe"Added by the RBOT-AKA WORM!"
XMS Windows TASK ServiceMSWTASK32.exe"Added by a variant of the RBOT WORM!"
XMSNtaskngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
Xmsstaskmsstask.exe"Added by the MYPARTY WORM!"
XMstaskmstask.exe"Added by the OPASERV.N WORM! Note - this is not the legitimate mstask.exe system file and the executable resides in %Windir%"
Xmstaskmstask.exe"Browser hijacker - redirecting to find-more.net. Note - this is not the legitimate mstask.exe system file"
XMSTaskrun dll.exe"Yuupsearch adware"
XMStasksvchost.exe"Added by the LDPINCH-BV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XMsTaskwstask32.exe"Added by the MYTOB-FE WORM!"
XMstaskkernel32.exe"Added by the STAP-C WORM!"
XMstaskMSDTC.exe"Added by the STAP-D WORM!"
XMSTask Monitormstaskmon.exe"Added by the SDBOT-LU WORM!"
XMstask32driverMstask32.exe"Added by the LOONY-D TROJAN!"
XMSTaskbar 32tbsvc32.exe"Added by the RBOT.BQZ WORM!"
Xmstasksmstasks.exe"Added by the MULTIDR-AY TROJAN!"
XNAVtaskNAVtask.exe"Added by the REMBOT-A BACKDOOR!"
XNDplDeamonnstask32.exe"Added by the RANDEX.E WORM!"
?nMTaskBarServicenMtsk.exe"Taskbar control for ISDN NetMod modem. What does it do and is it required?"
NOAKTASKOAKTASK.EXETaskbar utility for a "control panel" for a CD-RW
XParallel Taskingptask.exe"Added by the SMALL-CJ TROJAN!"
UPlanlægningsagentmstask.exe"Windows Task Scheduler (on Danish language versions of Windows) - displayed as a box with a stopwatch in the System Tray. Required if you have regularly scheduled tasks like defragmenting
NPLXTASKPLXTASK.EXE"Taskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player)
XPNtask Servicespntask.exe"Added by the LALA.C TROJAN!"
XPopMarkWinTask.exe"""Pop Marketing"" adware"
YPP2000 Taskbar ControlPPTbc.exeProtector Plus anti-virus software - system tray access
XProtection[path] runtask.exe [path] protection.exeAdded by a variant of the AGENT.3.AU TROJAN!
Xptaskptask.exe"Part of VirtualPCGuard
UQTaskStartupqtask.exe"Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly
NqttaskQttask.exeSystem Tray access to Apple's "Quick Time" viewer from version 5 onwards
NQuick Time Taskqttask.exe"System Tray access to Apple's ""Quick Time"" viewer from version 5 onwards"
XQuicktimeqttasks.exe"Added by the ADCLICK-AK TROJAN!"
XQuickTimeqttask.exe"Added by the AGENT-ENG TROJAN! Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %System%"
NQuickTime TaskQttask.exeSystem Tray access to Apple's "Quick Time" viewer from version 5 onwards
XQuickTime Taskqttasks.exe"CoolWebSearch parasite variant"
XQuicktime Task[random filename]"Trafficadvance dialer"
XQuickTime Taskqttask.exe"Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not the legitimate Apple ""Quick Time"" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %ProgramFiles%\WebMediaViewer"
URAMDriveRDTask.exe"Virtual Hard Drive Pro from Farstone - ""takes a portion of your system memory and creates a RAM disk drive
Xravtaskrund1132.exe"Added by the DLOADER.IYT TROJAN!"
Xravtasksvch0st.exe"Added by the LINEAG-AIN TROJAN!"
YRavTaskRavTask.exe"Rising antivirus"
Xravtaskiexpl0re.exe"Added by the AGENT.AIR BACKDOOR! Note the number ""0"" in the filename"
NRedline Taskbartaskbar.exeTaskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
URemote Data Backups TaskBar IconCBSysTray.exe"System Tray access to Remote Data Backups online system/data backup utility"
XRemote Terminal Taskrtsbsvc.exe"Added by the IRCBOT.AUZ BACKDOOR!"
YRestoreIT!VBPTASK.EXE"RestoreIT! from FarStone - ""automatically backs up all files on your computer to a protected partition on your hard drive"""
URevoTaskbarAppRevoTask.exeControl Application for M-Audio Revolution 7.1 sound card. The sound card will function without it - but changes to speaker setup and sound modification (Bass/Treble etc) will not be available
NRoboFormRoboTaskBarIcon.exe"Roboform - password manager and web form filler. Will work without this startup entry
Xrtasksrtasks.exe"Part of rogue software including members of the AVSystemCare security suite family (see here for examples)
Xrun32dlltask32.exe"Added by an unidentified VIRUS
XRunOnce[path to mstask32.exe]"Added by the DELF-IA TROJAN!"
USabre Task Tray IconSabstart.exe"Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines
XSchedulingAgantMMTASK.EXE"Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename"
USchedulingAgentmstask.exe"MS Scheduling Agent in Win98/Me/2K - displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting
XSchedulingAgentmstask.exeAdded by unidentified MALWARE! Note - this is not the MS Scheduling Agent in Win98/Me/2K. This one also loads via the HKLM\RunServices registry key but is located in %System% on a WinXP machine - where a file of that name does not normally exist
XSchedulingAgentmstasks.exe"Added by the MSIC BACKDOOR!"
XSearch Bartaskbar.exe"Added by the OPANKI-F WORM!"
XService Registry NT Savetaskmgrnt.exe"Added by the BANCOS-BY TROJAN!"
XShelltaskmrg.exe"Added by the BANCBAN-FT TROJAN!"
XShelltaskmam.exe"Added by the BANCBAN-OL TROJAN!"
USolidWorks Task Scheduler EngineswBOEngine.exe"Task scheduler for SolidWorks 3D CAD software"
Xsoundtasksoundtask.exe"Added by the AGOBOT-MD WORM!"
Xsoundtaskssoundtasks.exe"Added by a variant of the CRYPTER.C TROJAN!"
XsountskmanagersountaskmgrAdded by an unidentified WORM or TROJAN!
XStart Uppingtaskmrg.exe"Added by the RBOT-MA WORM!"
XSVC Socksmstaskm.exe"CoolWebSearch parasite variant"
XSVCHOSTtaskgmr.exe"Added by the MYTOB.F or MYTOB.H WORMS!"
Xsvctasksvctask.exe"Added by the CHUCKYB-A TROJAN!"
XSysResTASKMANAGER.exe"Added by the ELIPTER.A or ELIPTER.B WORMS!"
XSysService32lsystask32l.exe"Added by the THEUG WORM!"
XSystem Task Managertaskmrg.exe"Added by a variant of the SPYBOT WORM! See here"
XSystem Update2taskman.exe"Added by the AUTOTROJ-C TROJAN!"
XSystem Update2taskmon.exe"Added by the AUTOTROJ-C TROJAN! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system"
USystemSuite Task ManagerMXTASK.EXE"vcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program's configuration options to enable only the parts you want running all the time - such as Virusscanner Pro"
XSystemTasksfilez.exeAdult content dialler
XSystemTaskssexypicz.exeAdult content dialler
XSystemTasksloaded.exeAdult content dialler
UTaakcontroletaskmon.exe"Task Monitor (on Dutch language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
XTablet Tasktabletsk32.exe"Added by the RBOT-AJB WORM!"
XTAKSMGNtaskmr.exe"Added by the RBOT-AHS WORM!"
XTarefas do Windowstaskexec.exe"Added by the AGENT-LSD TROJAN!"
XTasktasker.exe"Added by the MYDOOM.R WORM!"
XTaskLSASS.EXE"Added by the PUNYA-A WORM! Note - this is not the legitimate lsass.exe process
XTask Alertcmosvc.exe"Added by a variant of the IRCBOT TROJAN!"
XTask BarTASKBAR.EXE"Added by the FRETHEM.J WORM!"
?Task BarClientTaskBarClient.exe"Responsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service"
?Task BarSvrTaskBarSvr.exe"Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?"
UTask Catchertasktrap.exe"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
UTask Catcher Monitortasktrap.exe"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
UTask Catcher Real-Time Detectortasktrap.exe"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
XTask Commanderregsvc32.exe"Added by the AGOBOT-RX WORM!"
UTask CompletionAMCLIENT.EXE"LANDesk® Management Suite software component"
XTask Debuggersysdll.exe"Added by the RBOT-CQ WORM!"
XTask Debuggertskdbg.exe"Added by the AGOBOT-KK WORM!"
XTask Helpwualcts.exe"Added by a variant of the RBOT WORM!"
XTask Loader{rdprM@Y_VO^"Added by the AGOBOT.CB WORM!"
XTask managebrkbtaskmg.exe"Added by a variant of the SPYBOT WORM! See here"
XTask Managertaskmngr.exe"Added by the RBOT.Y WORM!"
XTask Managertaskman.exe"Added by the FORBOT-T WORM!"
XTask Managerprcview.exe"Added by the AGOBOT-RT WORM!"
XTask managertaskemngr.exe"Added by the RBOT-AGA WORM!"
XTask managerTikTo.exe"Added by the RBOT.LV WORM!"
XTask managertaskmngr.exe"Added by the RBOT-AYZ WORM!"
XTask Managersvchost.exe"Added by the SOHANA-P WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!"
XTask Managertaskmng.exe"Added by the TIOTUA-E WORM!"
XTask Managersvhost32.exe"Added by the TERMX.A WORM!"
XTask managertaskmgr2.exe"Added by a variant of the RBOT WORM!"
XTask Managertskmngr.exe"Added by the RBOT-GOU WORM!"
XTask managerUPDATEWIN.exe"Added by the RBOT.BBS WORM!"
XTask managertaskmangr.exe"Added by the SPYBOT-CH WORM!"
XTask Manager Win32taskmngr32.exe"Added by the RANCK-EX BACKDOOR!"
XTask Monitoring Servicesvchost.exe"Added by the CONE.D WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks"
XTask Scheduler Engineschedsvc32.exe"Added by the RBOT-ASJ WORM!"
Xtask servicetaskservices.exe"Added by a variant of the RBOT WORM!"
XTask servicetaskmgs.exe"Added by a variant of the RBOT WORM!"
XTASK SETUPtasksetup.exe"Added by the RBOT-YR WORM!"
NTaskbarTaskbar.exeTaskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
NTaskBarCTLTask.exe"Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects
YTaskbar Button Managertbm.exe"Taskbar Button Manager from Innovative Solutions - ""is a simple utility that helps you arrange the buttons on your Windows taskbar in any way you want by using drag and drop"""
NTaskbar Display Controls"RunDLL deskcp16.dll QUICKRES_RUNDLLENTRY"
XTaskbar Servicetaskbar.svcUnidentified adware
YTaskbar Shuffletaskbarshuffle.exe"""Taskbar Shuffle is a simple
XTaskbar Systemtasksys.exe"Added by a variant of the SDBOT WORM!"
NTaskbar++TaskbarPP.exe"Taskbar++ is a software that allows you to sort (move) the buttons of the Windows taskbar by Drag & Drop"
Ytaskbarshuffletaskbarshuffle.exe"""Taskbar Shuffle is a simple
XTaskbell.exeRund1.exe"Added by the YIPID TROJAN!"
Xtaskdirtaskdir.exe"Added by the LAGER.AQ TROJAN!"
XTaskListtasklist32.exe"Added by the BANCOS-DX TROJAN!"
XTaskManRundll32.exe"Added by the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process
XTaskmanKHATRA.exe"Added by the AUTORUN-AKR WORM!"
Xtaskmantaskman.exe"Added by the SILLYFDC.BBB WORM!"
XTaskmansysdate.exe"Added by the SILLYFDC.BCQ WORM!"
XTaskmansysdrv.exe"Added by the AGENT-LRB TROJAN!"
XTaskmanufxw.exe"Added by the VBINJ-D TROJAN!"
Xtaskmanagertaskmgr.com"Added by the BEREB WORM!"
Xtaskmanagertaskmanager.exe"Added by the AGOBOT-TF WORM!"
XTaskManager[path to trojan]"Added by the LDPINCH-CF TROJAN!"
XTaskManager Load ModuleTSKMNGR32.EXE"Added by the SPYBOT.I WORM!"
Xtaskmangertaskmanger.exe"Added by a variant of the RBOT WORM!"
XTaskmgo[path to file]"Added by the BANCBAN-T TROJAN!"
XTaskmgrTaskmgr.exe"System1060 homepage hi-jacker. Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1060"" sub-folder"
XTaskmgrtskmgr32.exeHomepage hi-jacker
Xtaskmgrtaskmgr.exe"Added by the STARTPAGE.G hijacker. Note - this is NOT the Windows Task Manager file!"
XTaskmgrsystem.exe"Added by the PAKES.G TROJAN!"
Xtaskmgrexplorer.exe"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xtaskmgr[path to trojan]"Added by the AGENT-ENV TROJAN!"
Xtaskmgrtaskmanager.exe"Added by the BCKDR-QHT BACKDOOR!"
XTaskMgrkeymayker.exe"Added by the LDPINCH-EP TROJAN!"
Ntaskmgr.exetaskmgr.exe"Windows Task Manager in Windows XP. If run from the Startup folder
Xtaskmgr.exepaint.exeAdded by a variant of the AGENT.AH TROJAN!
Xtaskmgr.exemirc.exeAdded by a variant of the AGENT.AH TROJAN!
Xtaskmgr.exepaintms.exeAdded by a variant of the AGENT.AH TROJAN!
XTASKMGRUTASKMGRU.EXE"Added by the CWS-M TROJAN!"
Xtaskmngr[path] msnve.exe [path] task.exe"Added by the FLOOD-EK TROJAN!"
Xtaskmngr lptt01taskmngr.exe"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Xtaskmngr ml097etaskmngr.exe"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XTaskMontaskmon.exe"Added by the MYDOOM.A or MYDOOM.J WORMS! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system"
XTaskMon[path to trojan]"Added by the DROPPER.EAT TROJAN!"
XTaskmon driverwinampa.exe"Added by the LOONY-I TROJAN! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a ""Winamp"" subdirectory of %ProgramFiles% whereas this file is located in %System%"
Xtaskmonetaskmone.exe"Added by the SINGU-S TROJAN!"
UTaskMonitortaskmon.exe"The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
XTaskMrgcsrss.exe"Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Xtaskmrgtaskmrg.exe"Added by the BANKER-BZZ TROJAN!"
Xtaskmrg.exetaskimg.exe"Added by the DLOADER-QZ TROJAN!"
Xtaskmrg.exe[path to trojan]"Added by the BANCBAN-BN TROJAN!"
Xtaskmsgs[path to trojan]"Added by the BANCOS-BBW TROJAN!"
Xtaskngrtaskngr.exe"Added by the BANCOS-AWX TROJAN!"
Xtaskopen.exetaskopen.exeAdded by the HIDD.C TROJAN!
NTaskPlusTASKPLUS0.EXETask and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
NTaskPlusTASKPL~1.EXETask and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
XTaskReg[random filename]"Added by the CBLAD WORM!"
XTaskS managertaskmgrs.exe"Added by the AGOBOT.QU WORM!"
XTaskschdTRAYWND.EXE"Added by the LITMUS.002 TROJAN!"
UTaskSchedulerTaskSch.exe"ProSeries accounting software related"
Utaskswitchtaskswitch.exeALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
UTaskSwitchXPTaskSwitchXP.exe"""TaskSwitchXP from NTWind Software. Advanced task management utility that picks up where the standard Windows Alt Tab switcher leaves off. It provides the same functionality
Xtasksystasksys.vbs"Added by the BYRON WORM!"
Utasktraptasktrap.exe"Real-time monitor for Task Catcher from BillP Studios - which ""allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash"". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available"
NTasktrayCTLTray.exeInstalled with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon. Also allows you to launch the Taskbar via right-click → Show Taskbar. The tasktray can be accessed via Start → Programs → Creative → Sound Blaster Audigy → Taskbar
XTasmgrTaskmgr.bat"Added by the YPSAN.G WORM!"
NTDKTASKTDKTASK.EXETaskbar utility for a "control panel" for a CD-RW
XTransaction Taskerstdhost.exe"Added by the SDBOT.HNK BACKDOOR!"
Utranstasktranstask.exe"A Tweak-XP component
Xusbdrvservicetask.exe"Added by a variant of the SDBOT WORM!"
Nvdtaskvdtask.exe"Program part of GameDrive & VirtualDrive virtual CD/DVD drive emulators from Farstone. Not required as starting these programs load this automatically"
NVirtualDriveVDTask.exe"VirtualDrive from Farstone - virtual CD/DVD drive emulator. Available via Start → Programs"
UVisualTaskTipsVisualTaskTips.exe"""Visual Task Tips is a lightweight shell enhancement utility. It provides thumbnail preview image for each task in the Windows Taskbar"""
XVITAL BOOT PROCESStaskmngr.exe"Added by a variant of the RBOT WORM!"
XVITAL BOOT PROCESStaskmnsgr.exe"Added by the Rbot-VY WORM!"
YVSOCheckTaskmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
XWallPapertaskimgr.exe"Added by the BANKER-GX TROJAN!"
XWin Drivers SSLTASKMAN4.exe"Added by a variant of the RBOT WORM!"
XWin TaskLoadermsgmr.exe"Added by the MYTOB.L WORM!"
XWin32 NT Adv Servicestaskmngr.exe"Added by the RBOT-ADE WORM!"
XWin32BaseServiceMODWintask.exe"Added by the NAVIDAD WORM!"
XWindowstaskmngr.exe"Added by a variant of the SDBOT WORM!"
XWindows API Control Taskapitsk32.exe"Added by the MYTOB.HI WORM!"
XWindows Bootuptask-mngr.exe"Added by the RBOT-AWP WORM!"
XWindows Managertaskmgrs.exe"Added by the SILLYFDC.BBZ WORM!"
XWindows Microsoft Updatewintask32.exe"Added by a variant of the SDBOT WORM!"
XWindows modez Verifiertaskmngr.exe"Added by a variant of the RBOT WORM!"
XWindows pack Control Centertaskmam.exe"Added by the TOMETA-J TROJAN!"
XWindows Registry Managertasksmanagers.exe"Added by the MYTOB.ER WORM!"
XWindows Service Agenttaskmgr32.exe"Added by the RBOT-GMN WORM!"
XWindows Service Managertaskmgr.exe"Detected by Kaspersky as the IAMBIGBROTHER.91 TROJAN! Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""fonts\svc"" sub-folder"
XWindows Shelltaskgmr.exe"Added by the MYTOB.BV WORM!"
XWindows Task ManagerACCOUNT_DETAILS.DOC.exe"Added by the QUATERS.A WORM!"
XWindows Task Managertaskmgn.exe"Added by the AGENT-CIP BACKDOOR!"
XWindows Task Managertaskmrg.exe"Added by the MYTOB.AV WORM!"
XWindows Task Managertaskgmr.exe"Added by the MYTOB.BJ WORM!"
XWindows Task Managertaskmg.exe"Browser hijacker - identified by DrWeb antivirus as ""Trojan.StartPage.601"""
XWindows Task Managertaskmngr.exe"Added by the RBOT-ANM WORM!"
XWindows Task Manager Emulatorkennewr.exe"Added by the SPYBOT-FA WORM!"
XWindows Task Mgrmstasks.exe"Added by the IRCBOT.UN BACKDOOR!"
XWindows Task Mgr!mstasker.exe"Added by the IRCBOT.OE BACKDOOR!"
XWindows Task Schedulerasijdie.exeAdded by an unidentified WORM or TROJAN!
XWindows Task Service (32-bits)tasksys.exe"Added by the DREFIR.D WORM!"
XWindows TaskAdWintaskad.exeWindupdates adware variant
XWindows Taskbar Managerinternat.exe"Added by the PROTORIDE-H WORM!"
XWindows Taskbar Manager[path to file]"Added by the PROTORIDE.B WORM!"
XWindows Taskbar Systemtasksys.exe"Added by a variant of the SDBOT WORM!"
XWindows Taskmanagerlsassx.exe"Added by the KELVIR.E WORM!"
XWindows Taskmanageriexplorer.exe"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XWindows Taskmanagerservice.exe"Added by the PUSHBOT.OR WORM!"
XWindows Taskmanagersvchost.exe"Added by the IMBOT.AC WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XWindows Taskmanagertaskmrg.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Taskmanagertaskngr.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Taskmanagertskmngr.exe"Added by the IRCBOT.DHR BACKDOOR!"
XWindows Taskmanagerwdtsvc.exe"Added by the PUSHBOT.AU WORM!"
XWindows Taskmanagerwinpifviewer.exe"Added by the PUSHBOT.BB WORM!"
XWindows Taskmanagerwinrl.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Taskmanagertaskxphost.exe"Added by the PUSHBOT.BI WORM!"
XWindows Taskmanager Datacsrrss.exe"Added by the RBOT-BBH WORM!"
XWindows TaskManager Servicewindns32.exe"Added by the AGOBOT-JP WORM!"
XWindows Updatetaskmr.exe"Added by the MYTOB-GZ WORM!"
XWindows Updateqtask.exe"Added by the RBOT-AKU WORM! Note - do not confuse with the Quicken file of the same name as described here"
XWindows Updatetaskngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWINDRUNtaskgmrs.exe"Added by the MYTOB-BT WORM!"
UWinFast_Taskbar"rundll32.exe wftask.dll WFDllLoadDefaultSettings"
XWINMGRtaskgmgr.exe"Added by the MYTOB.AN WORM!"
XWINRUNtaskgmr32.exe"Added by the MYTOB.AP WORM!"
XWINRUNtaskgmr.exe"Added by the MYTOB-BX WORM!"
XWINRUNTASKMGR32.exe"Added by the MYTOB.AX WORM!"
XWinsock2 drivermmtask5.exe"Added by the SPYBOT-CD WORM!"
XWinSysStartUpWKbLwTaskSystemDll.Exe"Added by the BACKZAT.G WORM!"
XWinTaskWintask.exe"Added by the HIPO or LEMIR.F TROJANS!"
XWINTASKtaskgmr.exe"Added by the MYTOB.I WORM and variants!"
XWINTASKtaskgamr.exe"Added by the MYTOB.AU WORM!"
XWINTASKsys32.exe"Added by the MYTOB.K WORM!"
XWINTASKmsmgrxp.exe"Added by the MYTOB.AQ WORM!"
XWINTASKiexplorer.exe"Added by the MYTOB-CH WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XWINTASKtaskgmr32.exe"Added by the MYTOB.BU WORM!"
XWINTASKmsvhost.exe"Added by the MYTOB-AR WORM!"
XWINTASKt4skmgr.exe"Added by the MYTOB-AK WORM!"
XWINTASKtaskfile.exe"Added by the MYTOB.EF WORM!"
XWINTASKtaskgm.exe"Added by the MYTOB-AO WORM!"
XWINTASKtaskgmrs.exe"Added by the MYTOB.DH WORM!"
XWINTASKyahooicons.exe"Added by the MYTOB-HM WORM!"
XWINTASKt4skgmr.exe"Added by the MYTOB.CM WORM!"
XWINTASK DLLjusched32.exe"Added by the MYTOB.AI WORM!"
XWINTASK DLL32smsrss.exe"Added by the MYTOB.BS WORM!"
XWINTASK DLL32updatewin"Added by the MYTOB.NI WORM!"
XWinTask driverwintask.exe"Added by the DLOADER-NA TROJAN!"
XWINTASK32taskgmr32.exe"Added by the MYTOB.BN WORM!"
XWINTASK32taskgmrr.exe"Added by the MYTOB.FX WORM!"
Xwintask32Jwintask.com"Added by the NAFBOT-A WORM!"
XWINTASKMANAGERtaskgmr.exe"Added by the MYTOB-AF WORM!"
XWINTASKMGRccsrs.exe"Added by the MYTOB.Q WORM!"
XWINTASKMGRsp2winfix.exe"Added by the MYTOB.KJ WORM!"
XWINTASKStaskgmr.exe"Added by the MYTOB.BO WORM!"
XWINTASKSwinxpro.exe"Added by the MYTOB.EZ WORM!"
XWinTasks DLL Library (32-bits)winkll.exe"Added by the RBOT-AJZ WORM!"
UWinTasks Traybarwintasks.exe"WinTasks - ""Efficient Resource and Task Management is absolutely critical if you want to achieve the highest system performance levels possible. WinTasks 4 will not only help you achieve this task
Xwintasks.exewintasks.exe"Added by the EVAMAN WORM!"
NWOOTASKBARICONGestMaj.exe TaskbarIcon.exe"Wanadoo broadband ISP (now rebranded as Orange) taskbar icon - not required"
?XeroxEndeavorBackgroundTaskxGKOHbgnd.exe"Associated with a Xerox multifunction and/or scanner. What does it do and is it required?"
X[random name]taskmngr.exe"Added by the AGOBOT-CB WORM!"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.