fc

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AdwareProMFC	Ad-Ware Pro.exe	"Ad-Ware Pro rogue security software - not recommended"
X	AdwareProMFC	AntiTrojan Pro.exe	AntiTrojan Pro rogue security software - not recommended. Variant of Ad-Ware Pro
X	AntiVirusProMFC	Antivirus Pro.exe	"AntiVirus Pro rogue security software - not recommended"
X	Asicfc	icfca.exe	"Added by the AGENT.AAJE WORM!"
X	Bron-Spizaetus-cfgmktoq	bbm-qotkmgfc.exe	"Added by the BRONTOK-M WORM!"
X	Bron-Spizaetus-cfgmmnru	bbm-urnmmgfc.exe	"Added by the BRONTOK-N WORM!"
X	cftmon	sfcmonit.exe	Added by a variant of the AGENT.ERG TROJAN!
X	Defense Center	defcnt.exe	"Defense Center rogue security software - not recommended
Y	DLCFCATS	"rundll32 [path] DLCFtime.dll	_RunDLLEntry@16"
?	EDFcsn	discfcsn.exe	"Related to Hewlett-Packard's Discovery Agent. What does it do and is it required?"
Y	EnvyHFCPL	EnMixCPL.exe	"VIA Envy24 PCI Audio Controller driver"
U	FastCache	fc.exe	"FastCache from AnalogX - speeds up browsing by resolving DNS requests locally"
X	fc	runfc.exe	"Added by the CAMPURF WORM!"
X	FCEngine	FCEngine.exe	"CASClient adware"
X	FCHelp	FCHelp.exe	"Added by either FCHelp adware or a variant of it"
X	FCMan	FCMan.exe	"FCHelp adware"
N	FriendlyWebQuick-Launch	SELFCERT.EXE	selfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
X	he3e3fc4	"rundll32.exe he3e3fc4.dll	EnableRunDLL32"
X	LoadGolfCourses	LoadGolfCourses.exe	PlayMiniGolf.com foistware - stealth installed!
Y	LXCFCATS	"rundll32 [path] LXCFtime.dll	_RunDLLEntry@16"
X	MalwareProMFC	MalwarePro.exe	"MalwarePro rogue security software - not recommended
X	Mfc*.exe [ = random char]	Mfc*.exe [ = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	Mfc*32.exe [ = random char]	Mfc*32.exe [ = random char]	"CoolWebSearch/HomeSearch adware - for examples
U	PDFHook	pdfcreate5hook.exe	"Prevents the ""Trial Version www.Nuance.com"" watermark appearing in PDF documents created by PDF Create version 5 (from Nuance) when the product has been installed but not activated properly. See here for more information"
X	PowerProfile	mfcp30.exe	"Added by the RINDAS-A TROJAN!"
U	PsMFCard	PsMFCard.exe	"Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue
X	RegistryCleanFixMFC	registrycleanfix.exe	"RegistryCleanFix rogue registry cleaner - not recommended"
U	Run Nintendo Wi-Fi USB Connector Registration Tool	NintendoWFCReg.exe	"Related to Wi-Fi USB Connector from Nintendo"
X	SchijfControleur	GDC.exe	"SchijfControleur Dutch rogue privacy tool - not recommended. A member of the PCPrivacyTool family"
X	SearchAndDestroyMFC	Search And Destroy.exe	"Search And Destroy rogue security software - not recommended
X	slack12	mfcee.exe	"Added by a variant of the SDBOT WORM!"
X	SpywareProMFC	SpywarePro.exe	"SpywarePro rogue security software - not recommended
X	SpywareSweeperProMFC	Spyware Sweeper Pro.exe	"Spyware Sweeper Pro rogue security software - not recommended
X	staeck12	mfcee.exe	Added by an unidentified WORM or TROJAN!
X	staeck122	mfceee.exe	Added by an unidentified WORM or TROJAN!
N	Status Monitor	BrMfcWnd.exe	Brother scanner status monitor - can be started manually
U	SurfChoice	SCMan.exe	"SCMan is a utility that can control services on WinNT from the command line. This utility can create
U	SurfinGuard Pro	winsfcm.exe	"SurfinGuard Pro from Finjan - internet protection software
X	User Manager	fcllls.exe	"Added by the ZAGABAN-B TROJAN!"
X	vxcxcvfck	[random filename]	"Added by the RANCK-AZ TROJAN! The most common example is ""sbsvsd.exe"" located in %System%"
X	W32PluginsDownloaderXMLHTTPSelfClearing7520	wiper.exe	"Added by the PROXYSER-M TROJAN!"
X	Windows Firewall Updater	ctfcom.exe	"Added by the RBOT-GCB WORM!"
U	WinFast_Gamma	"Rundll32.exe wfcpl.dll	DllLoadGammaRampSettings"
X	winsfc	winsfc.exe	"Added by the WISFC VIRUS!"
X	[various names]	WTFCTF.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{C2220120-1C24-4a79-BA7A-DDCBFC209DB3}	sysfbdgv.exe	"Added by the FAKEALERT-AM TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.