_cfg.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
Y	AirGCFG	AirGCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
Y	AirNCFG	AirNCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
Y	AirPlusCFG	AirPlusCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
X	audiocfg.exe	audiocfg.exe	Added by the VB.ATE WORM!
?	CardScan AutoSync	CSyncCfg.exe	"Related to the CardScan business card reader range of products. May be related to synchronization with E-mail software and mobile devices (see here)?"
X	COMCFG	comcfg.exe	"Added by the TOADCOM.A TROJAN!"
Y	D-Link Air USB Utility	AirCFG.exe	D-Link Air USB wireless driver and configuration utility
Y	D-Link Air Utility	AirCFG.exe	D-Link Air PCI wireless driver and configuration utility
Y	D-Link AirPlus G	AirGCFG.exe	D-Link Airplus G wireless router driver and configuration utility
Y	D-Link AirPlus XtremeG	AirPlusCFG.exe	"D-Link AirPlus Xtreme G wireless access point driver and configuration utility"
Y	D-Link D-Link DWA-125	AirGCFG.exe	"D-Link DWA-125 Wireless 150 USB adapter driver and configuration utility"
Y	D-Link D-Link RangeBooster N DWA-140	AirNCFG.exe	"D-Link DWA-140 RangeBooster N USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless 108G DWA-120	AirPlusCFG.exe	D-Link DWA-120 Wireless 108G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless 108G DWA-520	AirPlusCFG.exe	D-Link DWA-520 Wireless 108G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-110	AirGCFG.exe	D-Link DWA-110 Wireless G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-510	AirGCFG.exe	D-Link DWA-510 Wireless G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless N DWA-130	AirNCFG.exe	"D-Link DWA-130 Wireless N USB adapter driver and configuration utility"
Y	D-Link D-Link Xtreme N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
Y	D-Link RangeBooster G WDA-2320	AirPlusCFG.exe	"D-Link WDA-2320 RangeBooster G desktop adapter driver and configuration utility"
Y	D-Link RangeBooster G WUA-2340	AirPlusCFG.exe	"D-Link WUA-2340 RangeBooster G USB adapter driver and configuration utility"
Y	D-Link Wireless G WDA-1320	AirGCFG.exe	"D-Link WDA-1320 Wireless G desktop adapter driver and configuration utility"
Y	D-Link Wireless G WUA-1340	AirGCFG.exe	"D-Link WUA-1340 Wireless G USB adapter driver and configuration utility"
X	Dot1XCfg	Dot1XCfg.exe	"Added by the AGOBOT.EA TROJAN!"
X	Fantasia injector	wincfg.exe	"Added by the AGOBOT.US WORM!"
X	IEXPLORER	msiecfg.exe	"Added by the BDOOR-JU BACKDOOR or BANCBAN-IP TROJAN!"
U	Instant Wireless Configuration Utility	WUSB11cfg.exe	"Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
U	Instant Wireless Configuration Utility	WPC11Cfg.exe	"Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
X	intranet	SYS32CFG.EXE	"Added by the SPYBOT-DW WORM!"
X	ipcfg.exe	ipcfg.exe	"Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN!"
?	load=	WINOSCFG.EXE	"Could it be something to do with configuring Windows on a new PC from an OEM supplier?"
U	LtcyCfgApply	LtcyCfg.exe	"PCI Latency Tool - ""Utility to set PCI Latency and possibly prevent game stutter or improve FPS"" for older AGP/PCI graphics cards"
X	Microsoft Features	ms32cfg.exe	"Added by the RBOT.HO WORM!"
X	Microsoft Update	sys32cfg.exe	"Added by the RBOT.DR WORM!"
U	Microsoft Windows Media Player Network Sharing Service Configuration Application	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
U	Microsoft� Windows� Operating System	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
X	Ms System Config	Mscfg.exe	"Added by the SDBOT-CCR WORM!"
X	Msn Boot	msnbootcfg.exe	"Added by the IRCBOT.BFU BACKDOOR!"
X	MSN Configuration Loader	msmsncfg.exe	"Added by the AGOBOT-KX BACKDOOR!"
X	MSN File Configuration	msnfilecfg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSOfficeCfg	msocfg.exe	Premium rate adult content dialer
U	NetScreen-Remote	SafeCfg.exe	"NetScreen Remote VPN client software"
U	pumcfgp	proxycfg.exe	"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
X	QTSvc	msocfg.exe	Premium rate adult content dialler
X	Reg Service	ipcfg.exe	"Added by the AGOBOT-SO WORM!"
U	SoloSchedule	Solocfg.exe	"Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis"
X	System Configurator32	SYSTEMCFG.EXE	"Added by the AGOBOT-KS WORM!"
X	System Loader	syscfg.exe	"Added by the AGOBOT-BS BACKDOOR!"
X	System Support	syscfg.exe	"Added by the RBOT-AGQ WORM!"
X	SystemService	msocfg.exe	Premium rate adult content dialler
X	Tapicfg	Tapicfg.exe	"CoolWebSearch Tapicfg parasite variant"
X	Tapicfg.exe	tapicfg.exe	"Malware installed by different rogue security software including SpyKillerPro"
U	Venturi Configurator	ventcfg.exe	"Venturi Wireless mobile broadband configuration utility"
X	Windows Core Kernel Update	win32bootcfg.exe	"Added by the RANCK-EL TROJAN!"
X	Windows Debugging Tools	updatecfg.exe	"Added by the RBOT-AXU WORM!"
N	Windows Media Connect 2	WMCCFG.exe	"Windows Media Connect from Microsoft - stream digital media files on your computer to digital media receivers (DMRs) that are connected to your home network"
X	Windows System Configuration	wincfg.exe	"Added by the AGOBOT.OP WORM!"
X	Winsock2 driver	wincfg.exe	"Added by the SPYBOT.CO WORM!"
U	Wireless PCI Card Configuration Utility	WMP11Cfg.exe	"Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
U	Wireless-G Notebook Adapter Utility	WPC54CFG.EXE	"Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G)"
U	wlancfg	wlancfg.exe	Inventel wireless router related - required in order to automatically connect to the Net at bootup
Y	WLAN_Cfg.exe	WLAN_Cfg.exe	Linksys Instant Wireless USB Network Adapter driver
U	WMPNSCFG	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
?	xpcfg	xpcfg.exe	"??"
X	[Randomly chosen existing folder name]	_cfg.exe	"Added by the ANTINNY-L WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.