conf.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	Ciodiag	DECCONF.EXE	"Added by the STRAT.EL TROJAN!"
X	Configuration Loader	soundconf.exe	"Added by the AGOBOT-MH WORM!"
X	DriverConf	dvrconf.exe	"Added by the AGOBOT-IY WORM!"
X	Firewall Sp2 system	sys32Conf.exe	"Added by the RBOT-ABT WORM!"
?	InetConf	inetconf.exe	"??"
X	Internat Conf	bootconf.exe	"Homepage hijacker
N	Logitech Desktop Messenger	ldmconf.exe	"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
N	Logitech Desktop Messenger Agent	ldmconf.exe	"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
X	Micro Process	appconf.exe	Added by an unidentified WORM or TROJAN!
X	Microsft Conf 32	msaconf.exe	"Added by the RBOT.EYA WORM!"
X	Microsoft .NET Confingurator	msnconf.exe	"Added by an unidentified VIRUS
X	Microsoft Conf Ldr	sysconf.exe	"Added by a variant of the SDBOT TROJAN!"
X	Microsoft Config	msconf.exe	"Added by the RBOT.PV WORM!"
X	Microsoft Config	MSCONF.EXE	"Added by the RBOT-LG WORM!"
X	Microsoft Drivers	WSconf.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Windows Config 32	win32conf.exe	"Added by a variant of the RBOT WORM!"
X	msconfig.	msconf.exe	"Added by the BUZUS-AY WORM!"
X	MSI Configuration	msiconf.exe	"Added by the AGENT.AKSZ TROJAN!"
X	msiconf.exe	msiconf.exe	Added by a variant of the FAKEALERT TROJAN!
N	Nokia Connection Monitor	NclConf.exe	"Monitors the infrared port
X	OS Boot Configuration!	bootconf.exe	"CoolWebSearch BootConf adware"
X	sysPnP	bootconf.exe	"Homepage hijacker
X	System Update	mssetupconf.exe	"Added by the RBOT.DLC WORM!"
N	UpConfgVer	UpgConf.exe	"Part of Panda Antivirus and Internet Security. Purpose unclear
X	Video Process	sysconf.exe	"Added by the GAOBOT.GEN!POLY or GAOBOT.UM or GAOBOT.ADX WORMS!"
X	Windows Conf	windowsconf.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Config Manager	winconf.exe	"Added by the RBOT-AIT WORM!"
X	Windows Configurator	winconf.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows System Manager	sysconf.exe	"Added by the MYTOB.AL WORM!"
X	WinDriver Configuration	windrvconf.exe	"Added by the AGOBOT-LX TROJAN!"
X	Winsock2 Loader	WICONF.EXE	"Added by the SDBOT-LA WORM!"
X	Wsdata service	WSconf.exe	"Added by the SDBOT.ZU WORM!"
X	[various names]	typeconf.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.