al.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X		dllvirtual.exe	"Added by the DADOBRA-IW TROJAN! Note - has a blank entry under the Startup Item/Name field"
U	%FP%012-L2TP FWPortal.exe	FWPortal.exe	012.Net.il Israeli ISP dial-up software
U	%FP%1776 Internet FWPortal.exe	FWPortal.exe	1776 Internet US ISP dial-up software
U	%FP%Barak013 FWPortal.exe	FWPortal.exe	Barak013 Israeli ISP dial-up software
N	AOLDialer	AOLDial.exe	AOL ISP software dialer - can be activated through a desktop shortcut
X	Boot Manager	Njgal.exe	"Added by the KILO TROJAN!"
?	CBWUser	CBWDial.exe	"Associated with Bitware that integrates fax
U	CheckDialer	ChkDial.exe	"Added by the CheckDialer modem connection monitoring tool"
U	coloreal	coloreal.exe	"Makes colours sharper and brighter
U	EPSON Stylus C67 Series	E_FATIAAL.EXE	"Epson Status Monitor 3 for the Stylus C67 Series printer - for monitoring printer status
X	External Dependencies	External.exe	"Added by the MYTOB.EC WORM!"
X	firewal	firewal.exe	"Added by the BANCBAN-QY TROJAN!"
X	general lptt01	general.exe	"RapidBlaster variant (in a ""General"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	general ml097e	general.exe	"RapidBlaster variant (in a ""General"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	iLLeGaL.exe	Mplayer.exe	"Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename"
X	Installer	dial.exe	"Malware - detected by Kaspersky as the AGENT.MM TROJAN!"
X	li-rcash00001	vldial.exe	"Added by the Vl TROJAN!"
X	MalwareRemoval	MalwareRemoval.exe	"Added by a fake version of Microsoft's Malicious Software Removal Tool - removal instructions here"
X	Micrcoft Exploerer	spoolsal.exe	"Added by the RBOT-AKK WORM!"
X	Microsoft explorer Update	internal.exe	Added by an unidentified WORM or TROJAN!
X	Microsoft Synchronization Manager	al.exe	"Added by the OPTXPRO.132 TROJAN!"
X	MS Initial	mstinitial.exe	"Added by the IRCBOT.ASP BACKDOOR!"
U	MUAL	mual.exe	Millesky video mail updater and launcher
N	OptiCAL Startup	OptiCAL.exe	"OptiCAL monitor calibration software from ColorVision for advanced amateurs
U	PartSeal	PartSeal.exe	System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere
N	PhotoCAL Startup	PhotoCAL.exe	"PhotoCAL wizard driven monitor calibration software from ColorVision for beginners and photo enthusiasts"
X	PingTimeout Institution	internal.exe	"Added by the SDBOT.BMH WORM!"
U	Pink Calendar	PinkCal.exe	"Pink Calendar & Day Planner"
N	PKR Pal	pkrpal.exe	"PKR Pal utility from PKR - ""helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!"""
N	pkrpal	pkrpal.exe	"PKR Pal utility from PKR - ""helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!"""
N	pkrpal.exe	pkrpal.exe	"PKR Pal utility from PKR - ""helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!"""
U	PopUpStopperProfessional	PopUpStopperProfessional.exe	"Panicware's Pop-Up Stopper - paid for version"
X	Real Statics Agent	ccreal.exe	"Added by a variant of the RBOT WORM!"
X	Run	real.exe	"Added by the LOVGATE.E WORM!"
U	SAMcal	SAMcal.exe	"SamCal - calendar/reminder program"
U	Screen Calendar	scrcal.exe	"Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler"
U	SpamPal	spampal.exe	"SpamPal - anti-spam tool"
X	SpyMarshal	SpyMarshal.exe	"SpyMarshal rogue spyware remover - not recommended
X	Spyware-Secure	Spyware-Secure_trial.exe	"Spyware-Secure rogue spyware remover - not recommended
X	SpywareHeal	SpywareHeal.exe	"SpyHeal rogue spyware remover - not recommended"
U	Subliminal Power	Subliminal.exe	"Subliminal Power - displays subliminal messages of your choice on your computer screen"
?	SupaDial	SupaDial.exe	"SupaNet.com modem driver related - is it required?"
X	sws.exe	gd-dial.exe	"Globaldialer adult content premium rate dialer"
X	systemkernal.exe	systemkernal.exe	"Added by the AGENT-KPQ TROJAN!"
X	systhread	winkernal.exe	"Added by the LIAMED WORM!"
X	User23.exe	DIAL.exe	This is a trojan trying to disguise itself as User32.dll
U	VAIO Recovery	PartSeal.exe	System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere
U	WCOLOREAL	coloreal.exe	"Makes colours sharper and brighter
N	WhitephonePersonal	WhitePhonePersonal.exe	"WhitePhone Personal from Voice Commerce Group - ""provides free PC to PC calls globally and access to low cost calls to phones worldwide."" Free internet telephony utility using the VoIP (Voice over Internet Protocol). No longer appears to be available"
X	Windows Service Update	livecal.exe	"Added by the SDBOT-DEY WORM!"
X	windows update	real.exe	"Added by the LEGMIR-AU WORM!"
X	Windows Virtual Services	winvirtual.exe	"Added by the SLENFBOT.IE WORM!"
X	Windows_Protect	winregal.exe	"Added by a variant of the RBOT WORM!"
X	wuosdial	wuosdial.exe	"Added by a variant of the RBOT WORM!"
U	XDeskCal	XDeskCal.exe	"""XDeskCal is a fully customizable Desktop calendar that will allows users to display 'to do' list
U	YCentral	YahooCentral.exe	"Yahoo! Central - ""alerts you if your default home page
X	[32 random numbers]	total.exe	"Total Antivirus rogue security software - not recommended
X	[various names]	RtlFindVal.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.