WINT

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	Authentic-ID Toolbar	wintmr.exe	"System Tray access to Child Control parental control software by Salfield"
X	C:WINDOWSWinTask.exe	WinTask.exe	"""Pop Marketing"" adware"
Y	CCWinTray	wintmr.exe	"System Tray access to Child Control parental control software by Salfield"
?	encapsulated command tool	wintr.com	"??"
X	german.exe	wintems.exe	"Added by the BAGLE-AS TROJAN!"
X	ISPSERVICE	wintmp.exe	"Added by the IRCBOT.GP BACKDOOR!"
X	MC	wintrims.exe	"Added by the WINTRIM TROJAN!"
X	MC	WINTRIM.EXE	"Added by the WINTRIM.A TROJAN!"
X	Microsoft Lsass Service	wintcp32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft TCP Protocol	wintcp32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Win Corp TLS Verification	mswintls.exe	"Added by the RBOT-GCT WORM!"
X	MicrosoftServiceManager	Wintsk32.exe	"Added by the YAHA.U WORM!"
X	Network protocol service	wintcp.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	PopMark	WinTask.exe	"""Pop Marketing"" adware"
X	spoolsvs	wintre.exe	"Added by the SDBOT.EGQ WORM!"
X	ssgrate.exe	wintems.exe	"Added by the MITGLIEDER.Q TROJAN!"
X	Undefined	winter.exe	"Added by the KILLAV.LW TROJAN!"
X	WCPC	wintsvcc.exe	"PurityScan adware"
X	WCPI	wintsvit.exe	"PurityScan adware"
X	WCPS	Wint*.exe [ = random char]	"PurityScan adware"
X	WCPT	wintsvtr.exe	"PurityScan adware"
X	Win FTP	wintftp.exe	"Added by the SDBOT-KE WORM!"
X	Win32BaseServiceMOD	Wintask.exe	"Added by the NAVIDAD WORM!"
X	WinDLL (wintmp.exe)	"rundll32.exe wintmp.exe	start"
X	Windows Image	wintimage.exe	"Detected by Avast as the SDBOT-GEN44 WORM!"
X	Windows Local ISP	winthcr.exe	"Added by the SDBOT.ENZ BACKDOOR!"
X	Windows Microsoft Update	wintask32.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Service Agent	WinTcpip.exe	"Added by the SPYBOT.AP WORM!"
X	Windows TaskAd	Wintaskad.exe	Windupdates adware variant
X	Windows TCP/IP	wintcp.exe	"Added by the AGOBOT-ZH WORM!"
X	Windows Telnet Server	wintel.exe	"Added by the AGOBOT-MW WORM!"
X	Windows Temperate Services	wintmp.exe	"Added by the SLENFBOT.ZW WORM!"
U	WindowsTranslator	DWinTrsl.exe	"Delta Translator® English < > Portugese (Brazilian) version - ""an automatic
U	WindowsTranslator_Espanhol	DWinTrsl.exe	"Delta Translator® Spanish < > Portugese (Brazilian) version - ""an automatic
X	Winhost	wintt.exe	"Added by the LOLAWEB.B TROJAN!"
X	WINT	wcp***.exe [ = random char]	"PurityScan adware"
X	WINT	wcp*.exe [ = random char]	"PurityScan adware"
X	WinTask	Wintask.exe	"Added by the HIPO or LEMIR.F TROJANS!"
X	WINTASK	taskgmr.exe	"Added by the MYTOB.I WORM and variants!"
X	WINTASK	taskgamr.exe	"Added by the MYTOB.AU WORM!"
X	WINTASK	sys32.exe	"Added by the MYTOB.K WORM!"
X	WINTASK	msmgrxp.exe	"Added by the MYTOB.AQ WORM!"
X	WINTASK	iexplorer.exe	"Added by the MYTOB-CH WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	WINTASK	taskgmr32.exe	"Added by the MYTOB.BU WORM!"
X	WINTASK	msvhost.exe	"Added by the MYTOB-AR WORM!"
X	WINTASK	t4skmgr.exe	"Added by the MYTOB-AK WORM!"
X	WINTASK	taskfile.exe	"Added by the MYTOB.EF WORM!"
X	WINTASK	taskgm.exe	"Added by the MYTOB-AO WORM!"
X	WINTASK	taskgmrs.exe	"Added by the MYTOB.DH WORM!"
X	WINTASK	yahooicons.exe	"Added by the MYTOB-HM WORM!"
X	WINTASK	t4skgmr.exe	"Added by the MYTOB.CM WORM!"
X	WINTASK DLL	jusched32.exe	"Added by the MYTOB.AI WORM!"
X	WINTASK DLL32	smsrss.exe	"Added by the MYTOB.BS WORM!"
X	WINTASK DLL32	updatewin	"Added by the MYTOB.NI WORM!"
X	WinTask driver	wintask.exe	"Added by the DLOADER-NA TROJAN!"
X	WINTASK32	taskgmr32.exe	"Added by the MYTOB.BN WORM!"
X	WINTASK32	taskgmrr.exe	"Added by the MYTOB.FX WORM!"
X	wintask32	Jwintask.com	"Added by the NAFBOT-A WORM!"
X	WINTASKMANAGER	taskgmr.exe	"Added by the MYTOB-AF WORM!"
X	WINTASKMGR	ccsrs.exe	"Added by the MYTOB.Q WORM!"
X	WINTASKMGR	sp2winfix.exe	"Added by the MYTOB.KJ WORM!"
X	WINTASKS	taskgmr.exe	"Added by the MYTOB.BO WORM!"
X	WINTASKS	winxpro.exe	"Added by the MYTOB.EZ WORM!"
X	WinTasks DLL Library (32-bits)	winkll.exe	"Added by the RBOT-AJZ WORM!"
U	WinTasks Traybar	wintasks.exe	"WinTasks - ""Efficient Resource and Task Management is absolutely critical if you want to achieve the highest system performance levels possible. WinTasks 4 will not only help you achieve this task
X	wintasks.exe	wintasks.exe	"Added by the EVAMAN WORM!"
X	Wintbp.exe	wintbp.exe	"Added by the ZOTOB.E WORM!"
X	Wintbpx.exe	wintbpx.exe	"Added by the ZOTOB.F WORM!"
U	wintective	wintective.exe	"Wintective logs keystrokes
X	WintelUpdate	[path to trojan]	"Added by the SMALL-EKW TROJAN!"
X	winter	happy.exe	"Added by the SDBOT-YF WORM!"
N	Wintercooler Pro	WINCOOL.EXE	"Wintercooler Pro - utility that monitors CPU usage
X	winthelp	winthelp.exe	"Associated with the AdvancedCleaner rogue security software - see here. Removal instructions here"
N	WinTidy	WinTidy.exe	"Desktop icon manager from
X	Wintime	Wintime.exe	"Added by the HARNIG TROJAN!"
U	WinTime	wintime.exe	"WinTime - change desktop icons' color and font"
N	Wintime Wtxpload	Wxpload.exe Wintime	"Part of the software to support a Dexxa USB graphics tablet. From a visitor - "This gets started anyway when you plug in the USB connector for the graphics tablet
X	WinTimer	msupdate.cmd	"Hijacker - detected by Kaspersky as the STARTPAGE.TJ TROJAN!"
X	Wintl	msdred.exe	Identified as a variant of the Trojan-Spy.Win32.Agent.cch malware
X	wintnask32.exe	wintnask32.exe	"Added by the RBOT-AFP WORM!"
X	wintnl.exe	wintnl.exe	"Added by a variant of the ZOTOB.K WORM!"
X	wintnpx.exe	wintnpx.exe	"Added by the ZOTOB.H WORM!"
X	WinTools	WToolsA.exe	"Wintools adware"
N	WinTOTAL Scheduler	guru.exe	WinTOTAL Real estate appraisal software related
X	WinTouch	WinTouch.exe	"Detected by Kaspersky as the AGENT.BUO TROJAN!"
X	WinTray	wintray.exe	"Added by the LEGUARDIEN.B TROJAN!"
X	wintsk32dll	wintsk32dll.exe	"Added by the RBOT-AAJ WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.