erm

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	Acronis True Image	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
U	AcronisTimounterMonitor	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
U	ADUserMon	ADUserMon.exe	"Part of Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk"
X	AntiVermeans	AntiVermeans.exe	"Variant of the Antivermins rogue security software - not recommended
X	AntiVermins	AntiVermins.exe	"Antivermins rogue security software - not recommended
X	AntiVermins 3.0	AntiVermins 3.0.exe	"Antivermins rogue security software - not recommended
X	AntiVermins 3.3	AntiVermins 3.3.exe	"Antivermins rogue security software - not recommended
X	AntiVerminser	AntiVerminser.exe	"Variant of the Antivermins rogue security software - not recommended
X	AntiVerminsPro	AntiVerminspro.exe	"Antivermins rogue security software - not recommended
X	Antivirusscherm	pgs.exe	"Antivirusscherm
X	BeschermingsTool	SysRep.exe	"BeschermingsTool
U	CPU Power Monitor	CpuPowerMonitor.exe	"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme). Associated with the ""Energy Saving"" feature of AI Gear - which ""is a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features."" Part of AI Suite"
N	CyberMedia Agent	CMAGENT.EXE	"Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge
X	DirectX Video Driver	dxterm5.exe	"Added by the WILAB-A TROJAN!"
U	DriverMagicLogon	dmschedule.exe	"Part of DriverMagic - ""the easiest way to locate device drivers"""
N	DriverMax	devices.exe	"DriverMax from Innovative Solutions - ""a new tool that allows you to download the latest driver updates for your computer. No more searching for rare drivers on discs or on the web or inserting one installation CD after the other"""
X	DriverModule	csrnvrt.exe	"Added by the IRCBOT.I TROJAN!"
U	ePowerManagement	ePM.exe	"Part of Acer Empowering Technology. ""Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles
?	erm	erm.exe	"??"
U	FLMBROWSERMOUSE	mouse32A.exe	Mouse utility for a Trust brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse
X	german.exe	winsystems.exe	"Added by the BAGLEDl-AE TROJAN!"
X	german.exe	wintems.exe	"Added by the BAGLE-AS TROJAN!"
U	Hermes Messenger	DGDRHE~1.EXE	"A LAN messenger alternative to WinPopUp - Digital Dreams Software"
?	HiberMonitor	HCount.exe	"??"
N	HPAIO_PrintFolderMgr	hpoopm07.exe	"Directly from HP: "This process has one purpose - detects if the device moves to a different port
X	LasErma	Ermasys32.exe	"Added by the LERMA-A WORM!"
X	Microsoft WinUpdates	serm32.exe	"Added by the RBOT.GE WORM!"
U	Nitro PDF Printer Monitor	NitroPDFPrinterMonitor.exe	"Printer monitor for Nitro PDF Professional from Nitro PDF
X	Numerical Xterm Agent	0x32.exe	"Added by the RBOT-FWP WORM!"
X	Numerical Xterm Agents	2x32.exe	"Added by the RBOT-FWY WORM!"
X	Numerical Xtermz Agent	1x32.exe	"Added by the RBOT-FWX WORM!"
Y	NvRegisterMCTray	"RUNDLL32.EXE NVMCTRAY.DLL	NvMCRegisterApp NvCpl.dll"
Y	NvRegisterMCTrayNview	"RUNDLL32.EXE NVMCTRAY.DLL	NvMCRegisterApp nView.dll"
U	PCTVRemote	remoterm.exe	Controls the remote control on some Pinnacle TV tuners
X	PermissionResearch	prmrsr.exe	"Marketscore/RelevantKnowledge adware"
U	Popup Terminator	GLADManager.exe	"Popup Terminator - pop-up killer"
X	PowerManagement	Rundlll.exe	"Added by the SURDUX TROJAN!"
X	PowerManager	svchost.exe	"Added by the JEEFO VIRUS! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
U	Powermarks	pm.exe	"Powermarks from Kaylon Technologies - bookmark manager and personal search engine"
X	Remote Terminal Task	rtsbsvc.exe	"Added by the IRCBOT.AUZ BACKDOOR!"
X	SchedulerMgr	navchk.exe	Premium rate adult content dialer
Y	SpIDerMail	spiderml.exe	"DrWeb antivirus Spider Mail e-mail scanner"
X	SpyFighterMonitor	SpyFighter.exe	"SpyFighter spyware remover - not recommended
Y	Spyware X-terminator	SpywareX.exe	"Spyware X-terminator antispyware from StompSoft
Y	SpywareTerminator	SpywareTerminatorShield.exe	"Spyware Terminator's real-time protection. Initially not recommended due to false positives but the later versions have since improved - see here"
Y	SpywareTerminatorUpdate	SpywareTerminatorUpdate.exe	"Automatic updates for Spyware Terminator. Initially not recommended due to false positives but the later versions have since improved - see here"
X	System Terminal	SYSTEM2.EXE	"Added by the SPYBOT-BZ TROJAN!"
X	System32 TCP Manager	systerm.exe	"Added by the RBOT.AFD WORM!"
X	Terminal Services	mstscc.exe	"Added by the SDBOT-CZW WORM!"
X	Terminal Update	biosefui.exe	"Added by the PPDOOR-O TROJAN!"
X	Terminate Popup	ZPU.exe	"Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here"
X	Terminate Popup	fpuk.exe	Popup killer - foistware proven to install the Regsvc32 homepage hijacker
U	TimounterMonitor	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
X	Windows Terminal Manager	rmbsvc.exe	"Added by a variant of the IRCBOT TROJAN!"
?	xBrotherMeCom	BrMeCom.exe	"Related to Brother MFC-9200c printer. What does it do and is it required?"
X	[various names]	XTermInit.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.