ds.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	ACTIVEDS	ACTIVEDS.EXE	"Added by the OPASERV.T WORM!"
X	AdsBlocker	stopAds.exe	"AdsBlocker - detected by NOD32 as DIALER.DW!"
X	ASDPLUGIN	netherlands.exe	"AsdPlug premium rate adult content dialer"
U	blads	blads.exe	"A Tweak-XP component
U	BlockAds	blads.exe	"A Tweak-XP component
U	CADS	cads.exe	"Cyber Sentinel - internet filtering software"
U	CCD Manager	DDS.EXE	"Project Labs Century CD manager for their CD/DVD storage device"
X	cds	cds.exe	"Added by the SPYMON TROJAN!"
X	Configuration Services	mswords.exe	"Added by the SDBOT-YM WORM!"
X	Drmupgds	Drmupgds.exe	"Maxfiles adware"
X	ds	ds.exe	"Added by the SPYMON TROJAN!"
X	HELPER	Netherlands.exe	"AsdPlug premium rate adult content dialer variant"
U	Intel PDS	pds.exe	Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
X	ItalU	italfds.exe	"Added by a TROJAN - see here"
X	loads.exe	loads.exe	"MediaMotor adware"
X	loads.exe	medload.exe	"Medload adware"
X	loads.exe	suploads.exe	"Added by the AGENT-BZ TROJAN!"
X	MalwaresWipeds	MalwareWipeds.exe	"MalwareWipe rogue security software variant - not recommended
X	MalwareWipeds	MalwareWipeds.exe	"MalwareWipe rogue security software variant - not recommended
X	mds.exe	mds.exe	"Added by the MADS-A TROJAN!"
X	Microsoft Inet Xp..	teekids.exe	"Added by the BLASTER.C WORM!"
X	Microsoft Updater	wuamgrds.exe	"Added by the RBOT.A WORM!"
X	Microsoft Updates Resources	WinFixIDs.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Updating	wuamguards.exe	"Added by the RBOT-BY WORM!"
X	MotherBoard Sounds	Sounds.exe	"Added by the RBOT-AAP WORM!"
X	mppdds	mppdds.exe	"Added by the PWS-AKZ TROJAN!"
X	mppds	mppds.exe	"LEGMIR.AQZ spyware"
X	mstds.exe	mstds.exe	"Added by the IPTABLES TROJAN!"
U	NoAds	NoAds.exe	Blocks advertisement banners in Internet Explorer
X	Start Upping	windupds.exe	"Added by the SDBOT.AFH WORM!"
X	wersds.exe	doriot.exe	"Added by the BAGLEDI-A TROJAN!"
X	Windows Service Threads	svcthreads.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows System Update Tools	upds.exe	"Added by the VANBOT.CX BACKDOOR!"
X	Words	Words.exe	"Added by the AGENT.GIT TROJAN!"
X	wpds.exe	doriot.exe	"Added by the SMALL-KY TROJAN!"
X	wpds.exe	wwnrot.exe	"Added by the BAGLEDI-B TROJAN!"
U	ZeroAds	LAS0Ads.exe	"ZeroAds - culls ads
U	ZeroAds	Zeroads.exe	"ZeroAds - a popular Internet accelerator and anti-adware application"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.