WINP

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	a-winpoet-service	winpppoverethernet.exe	"WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion
X	CheckWinPerf	perfinfo.exe	"Added by a variant of the IRCBOT TROJAN!"
N	Fromine WinPopup	winpopup.exe	Instant Messenger program
X	ms ownage	winPE.exe	"Added by the RBOT-AJL WORM!"
X	MSN Service Updates	winproc.exe	"Added by the KELVIR-BB WORM!"
X	Mswinpid32	mswinpid32.exe	Added by the LAPOS.A TROJAN! This is a keylogger which emails back to China PayPal passwords and account information - thus allowing the perpetrators to steal PayPal funds in the name of the victim!
X	Performs peer to peer connection	WinPTTP.exe	"Added by the RBOT-GMI WORM!"
X	SpywareGuard	winproc32.exe	"Startpage adware Trojan"
X	svcwinprocess32	[path to worm]	"Added by the UPERING WORM!"
X	system32	lowinplay.exe	"Added by the VB.FVJ TROJAN!"
X	TrayX	winppr32.exe	"Added by the SOBIG.F WORM!"
X	virtual	winprotect.exe	"Added by the MUGLY.C WORM!"
X	Winapp	winpup32.exe	Produces popup ads to adult content sites
X	Windows Desktop Daemon	winpadg.exe	"Added by a variant of the SPYBOT WORM!"
X	Windows Extensions for Win32	winprgs32.exe	"Added by the SDBOT.AFA WORM!"
X	Windows File Protection	winprotect.exe	"Added by the AGOBOT.JB WORM!"
X	Windows Internet Protocol	winproc32.exe	"CoolWebSearch Winproc32 parasite variant - also detected as the STARTPA-BF TROJAN!"
X	Windows PDG	winpdg.exe	"Added by the RBOT-ADW WORM!"
X	Windows PNP	winpnp.exe	"Added by the RBOT-AKN WORM!"
X	Windows Population Logger	winpo32.exe	"Added by the AGENT.YKR WORM!"
X	Windows Printing Driver	WinPrint.exe	"Added by a variant of the RBOT WORM!"
X	Windows Process Manager	winproc.exe	Added by an unidentified WORM or TROJAN!
X	Windows Taskmanager	winpifviewer.exe	"Added by the PUSHBOT.BB WORM!"
X	WINP	winmic.exe	"Added by the SPYBOT-EB WORM!"
X	Winpack	winpack.exe	"Adware - detected by Kaspersky as the AGENT.GG TROJAN!"
X	WinPatch Protection	winpatch.exe	Added by an unidentified WORM or TROJAN!
U	WinPatrol	winpatrol.exe	"WinPatrol - ""Manage Startup programs
Y	WinPatrol Explorer	WinPatrolEx.exe	"Part of WinPatrol"
U	WinPatrol Monitor	winpatrol.exe	"WinPatrol - ""Manage Startup programs
X	WinPCDoctor	SysRep.exe	"WinPCDoctor rogue system error and cleaning utility - not recommended
X	WinPerformance	WinPerformance.lnk	"Windows Performance rogue optimization utility - not recommended"
X	winphonics7536	vbsystem35.exe setups.exe vb.vb	"Added by a variant of the MUTIN-C TROJAN!"
X	winpipe	winpipe.exe	Browser hijacker redirecting to wow-access.com
U	WinPLOSION	WinPlosion.exe	"""WinPLOSION allows you to immediately view and select from all the windows running on your computer
X	WinPN32	winpn32.exe	"Added by the AGOBOT-FJ WORM!"
Y	WinPoet	WinPPPoverEthernet.exe	"WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion
X	winpol	winpol.exe	"Added by the AGENT.IWD TROJAN!"
Y	Winpooch	Winpooch.exe	"""Winpooch is a Windows watchdog
X	WinPop	winpop.exe	"Brudevic A adware"
N	WinPopup	WINPOPUP.EXE	"Intranet chat software provided by windows for chat on small networks. Handy little LAN messaging utility. Has been included in Windows since 95
X	winpopup	winupie.exe	Adware by Tradeexit.com
N	Winpower	Winpower.exe	"Part of InstallAnywhere from Zero G Software
X	WinProc32	winproc32.exe	"Added by the AGOBOT-4 WORM!"
X	Winprocer32 Update	winprocer32.exe	"Added by the RBOT.GW WORM!"
X	winprocessor Update	winprocessor.exe	"Added by the RBOT.IO WORM!"
X	WinProfile	Command.exe	"Added by the BUDDY.E TROJAN!"
X	WinProfile	sndcfg16.exe	"Added by the SNDC.A WORM!"
X	winprofile	iexpiore.exe	Added by a variant of the MONCHER WORM!
X	WinProfile	iexpIore.exe	"Added by the CHUM-C TROJAN!"
X	WinProt	Winprot.exe	"Added by the CHUPACABRA TROJAN!"
X	WinProt	server.exe	"Added by the CHUPACABRA TROJAN!"
X	winprotect	win32.exe	"Added by the MUGLY.E WORM!"
X	winprotect	winprotect.exe	"Added by the SDBOT-SB WORM!"
X	winprotection	ccsrss.exe	"Added by the SILLYFDC.BBT WORM!"
X	WinProtector	WinProtector.exe	"WinProtector rogue security software - not recommended
U	WinProxy	WinProxy.EXE	""WinProxy is the world-first proxy server and a firewall with integrated mail server for Windows 95/98/ME/NT/2000/XP""
X	Winproxy Personal	WINPROXY.EXE	"Added by the SDBOT.BMF WORM!"
X	winpsd	winpsd.exe	"Added by the MYDOOM.Q WORM!"
X	WinPWD Manager	wpwdmgr.exe	"Added by the RBOT-AUT WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.