g.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	(default)	winlog.exe	"Added by the RBOT-CVY WORM! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run and HKLM\RunServices in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X	250kg	250kg.exe	"Added by the AUTORUN-TI WORM!"
X	ActiveX File Registration Service	filereg.exe	"Added by the RBOT-DVD WORM!"
?	ADG	ADG.exe	" SoundBlaster Audigy related?"
X	Adobe	sysconfig.exe	Added by an unidentified WORM or TROJAN!
X	AdobeReaderPro	winslog.exe	"Added by a variant of the RBOT WORM!"
X	AdslTaskBars	taskmng.exe	"Added by the RBOT-AXZ WORM!"
X	AdvancedPrivacyGuard	apg.exe	"AdvancedPrivacyGuard rogue privacy program - not recommended
U	Agere SoftModem Messaging Applet	AGRSMMSG.exe	Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem
U	AGRSMMSG	AGRSMMSG.exe	Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem
Y	AirGCFG	AirGCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
Y	AirNCFG	AirNCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
Y	AirPlusCFG	AirPlusCFG.exe	"Driver and configuration utility for a number of wireless routers and adapters from D-Link"
X	alcomrg.exe	alcomrg.exe	"Added by the SDBOT-DNT WORM!"
X	ALG.EXE	iexplorer .exe	"Added by the DEMOTRY-B WORM!"
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
U	AlwaysReady Power Message APP	ARPWRMSG.EXE	"""Away Mode"" feature added with Update Rollup 2 for Windows XP Media Center Edition 2005 that allows the computer to appear off to the user while it continues to perform tasks that do not require user input
U	AMSG	Amsg.exe	"Part of the IBM ThinkVantage Productivity Center. ""The Message Center sends automatic notification on ThinkVantage Technologies integrated with your system. Once you're online"""
X	Anti-Virus Product Sync	[unprintable character][3 characters]log.exe	"Added by the KEDEBE.D WORM!"
X	AntiMalwareGuard	amg.exe	"AntiMalwareGuard rogue security software - not recommended
X	AntiSpywareGuard	asg.exe	"AntiSpywareGuard rogue spyware remover - not recommended
X	AntiVir	winlog.exe	"Added by the IRCBOT-TJ TROJAN!"
U	AntiWindowsMessenger	AntiMsMsg.exe	"Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory"
X	Aol Configuration Loader	aimsng.exe	"Added by the SDBOT-XE WORM!"
X	Aol Instant Messenger	aolmsg.exe	"Added by the KELVIR.AL WORM!"
X	APIMon	msreg.exe	"Added by the DROPPER.Z TROJAN!"
U	ARPWRMSG	ARPWRMSG.EXE	"""Away Mode"" feature added with Update Rollup 2 for Windows XP Media Center Edition 2005 that allows the computer to appear off to the user while it continues to perform tasks that do not require user input
?	ASUS Camera ScreenSaver	ASScrProlog.exe	"Either a valid program on some ASUS laptops - such as the F3 and F5 series or unsafe
U	ATISmart	ati2s9ag.exe	"ATI's ""SMARTGART""
X	audiocfg.exe	audiocfg.exe	Added by the VB.ATE WORM!
X	augmsg	AUGMSG.EXE	"Added by the SPYBOT-CO WORM!"
X	Auto updat	SysDebug.exe	"Added by the FORBOT-BA WORM!"
X	Auto WinUpdate	taskmrg.exe	"Added by the RBOT-AFA WORM!"
X	Automatic Defrag Manager	defrag.exe	"Added by the RBOT-AKE WORM!"
X	Banyak_Kerjaan	Tukang.exe	"Added by the SILLYFDC.BDM WORM!"
Y	BCMDMMSG	bcmdmmsg.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
Y	BDWizReg	bdwizreg.exe	"Configuration wizard for BitDefender internet security products. Only runs once the product has been installed. Guides you through the steps necessary to configure the BitDefender modules
Y	BGNewsAgent	bgnewsag.exe	"BullGuard antivirus updater"
Y	BitDefender 12	bdwizreg.exe	"Configuration wizard for BitDefender internet security products. Only runs once the product has been installed. Guides you through the steps necessary to configure the BitDefender modules
N	bldbubg	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
U	Blue Frog	bluefrog.exe	"Blue Frog by Blue Security Inc. - actively fights spam by posting complaints on the sites advertised by the spam you receive"
X	Boot Config	bootconfig.exe	"Added by the FLOOD-EV TROJAN!"
X	Boot Manager	bootmng.exe	"Added by a variant of the SPYBOT WORM!"
U	borzoi	blg.exe	"Borzoi surveillance software. Uninstall this software unless you put it there yourself"
X	Breg	breg.exe	"BroadcastPC adware"
X	Bron-Spizaetus	sempalong.exe	"Added by the BRONTOK-E WORM!"
Y	BTUSRBDG	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
Y	BTUSRBDGF	BtUsrBdg.exe	"Used with a Mitsumi USB Bluetooth adaptor (and maybe others)"
N	BuildBU	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	candynet	Taskmsg.exe	"Added by the RBOT-NA WORM!"
U	CAPing	CAPing.exe	Citibank Citianywhere software
?	CardScan AutoSync	CSyncCfg.exe	"Related to the CardScan business card reader range of products. May be related to synchronization with E-mail software and mobile devices (see here)?"
X	cartao	killing.exe	"Added by the DLOADER-QN TROJAN!"
X	Casdvqwa	bmqnzkg.exe	"Added by the RANDEX.BE WORM!"
X	ccEvtMrg.exe	ccEvtMrg.exe	"Added by the RBOT.GZ WORM!"
U	CertificateRegistration	SafeSignCertReg.exe	SafeSign Certificate Registration Utility for Microsoft Crypto applications
U	CertReg	certreg.exe	"Related to Gemplus Card Reader"
U	Check Messenger	cmesseng.exe	Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account. Qchex appear to be no longer in buisness
X	Clean Mgr	cleanmg.exe	"Added by the IRCBOT.BBO BACKDOOR!"
?	CleanRegPath	CleanReg.exe	"Apparently Annex A ADSL modem related. What does it do and is it required?"
X	Cli Confg	cliconfig.exe	"Added by a variant of the SPYBOT WORM! See here"
X	CLICONFG	CLICONFG.EXE	"Added by the OPASERV.T WORM!"
X	Client Agent	ipxwping.exe	"Added by the PPDOOR-N TROJAN!"
X	Clip Service Manager	clipmg.exe	"Added by the DELF.DXJ TROJAN!"
X	COMCFG	comcfg.exe	"Added by the TOADCOM.A TROJAN!"
X	Confg	bootconfig.exe	"Added by the VB-ERB WORM!"
X	Config	winconfig.exe	"Added by the GIP.113.B1 TROJAN!"
X	Config	CONFIG.EXE	"Added by the PSWGIP.B TROJAN!"
N	ConfigServices	Config.exe	Part of initial setup on a Compaq PC
X	Configuration Loader	Winreg.exe	"Added by the GAOBOT.AO WORM!"
X	Configuration Loader	wincffg.exe	"Added by the AGOBOT.A3 WORM!"
X	Configuration Loader	msg.exe	"Added by the SDBOT.BT WORM!"
N	Configuration Utility	CONFIG.EXE	Controls linksys wireless connection. Available from the Desktop
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
N	CPQINKAGENT	cpqinkag.exe	"That is the Compaq Ink Agent for some inkjet printers
U	CRBroadCasting	CRBroadCasting.exe	"CardReader2 from On Track Inovations Ltd. USB Card Reader"
X	cryptdlg	cryptdlg.exe	Added by an unidentified TROJAN!
X	ctflog manager	ctflog.exe	"Added by the DONBOMB.A TROJAN!"
N	CTXFIREG	CTxfiReg.exe	Creative Labs sound card driver related. It appears that it isn't required and maybe registration related
Y	D-Link Air USB Utility	AirCFG.exe	D-Link Air USB wireless driver and configuration utility
Y	D-Link Air Utility	AirCFG.exe	D-Link Air PCI wireless driver and configuration utility
Y	D-Link AirPlus G	AirGCFG.exe	D-Link Airplus G wireless router driver and configuration utility
Y	D-Link AirPlus XtremeG	AirPlusCFG.exe	"D-Link AirPlus Xtreme G wireless access point driver and configuration utility"
Y	D-Link D-Link DWA-125	AirGCFG.exe	"D-Link DWA-125 Wireless 150 USB adapter driver and configuration utility"
Y	D-Link D-Link RangeBooster N DWA-140	AirNCFG.exe	"D-Link DWA-140 RangeBooster N USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless 108G DWA-120	AirPlusCFG.exe	D-Link DWA-120 Wireless 108G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless 108G DWA-520	AirPlusCFG.exe	D-Link DWA-520 Wireless 108G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-110	AirGCFG.exe	D-Link DWA-110 Wireless G USB adapter driver and configuration utility
Y	D-Link D-Link Wireless G DWA-510	AirGCFG.exe	D-Link DWA-510 Wireless G desktop adapter driver and configuration utility
Y	D-Link D-Link Wireless N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
Y	D-Link D-Link Wireless N DWA-130	AirNCFG.exe	"D-Link DWA-130 Wireless N USB adapter driver and configuration utility"
Y	D-Link D-Link Xtreme N Dual Band DWA-160	AirNCFG.exe	"D-Link DWA-160 Xtreme N Dual Band USB adapter driver and configuration utility"
Y	D-Link RangeBooster G WDA-2320	AirPlusCFG.exe	"D-Link WDA-2320 RangeBooster G desktop adapter driver and configuration utility"
Y	D-Link RangeBooster G WUA-2340	AirPlusCFG.exe	"D-Link WUA-2340 RangeBooster G USB adapter driver and configuration utility"
Y	D-Link Wireless G WDA-1320	AirGCFG.exe	"D-Link WDA-1320 Wireless G desktop adapter driver and configuration utility"
Y	D-Link Wireless G WUA-1340	AirGCFG.exe	"D-Link WUA-1340 Wireless G USB adapter driver and configuration utility"
N	DACONFIGEXE	daconfig.exe	3Com NIC Diagnostics. Available via Start -> Programs
U	DBISQL9	dbisqlg.exe	"Related to SQL Anywhere from Sybase. A comprehensive package providing data management and data exchange technologies"
X	Debugger	explorer32dbg.exe	"Added by the CWS-M TROJAN!"
X	Debugger	iexplore_dbg.exe	"Added by the CWS-M TROJAN!"
N	Deskflag	Deskflag.exe	"DeskFlag - animated USA flag on the desktop"
?	Devlog	devlog.exe	"Apparently mainboard/chipset related
X	Diam prlaer	oqedrhg.exe	"Added by the SDBOT-DEU WORM!"
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
X	DirectX9 Diag	dx9diag.exe	"Added by the RBOT-ALT WORM!"
?	discoveg	discoveg.exe	"??"
N	Disknag	disknag.exe	Dell program that reminds you to make your backup diskettes
X	djdsdvqwa	vjdhdg.exe	"Added by the SDBOT-EF BACKDOOR!"
X	dllreg	dllreg.exe	"Added by the CRYPTER.A TROJAN!"
N	DNS7reminder	Ereg.exe Ereg.ini	"Registration reminder for versions of Nuance (ScanSoft) Dragon NaturallySpeaking"
X	DNSCacheBoost	dnsping.exe	"Added by the DNSBUST-A TROJAN!"
?	Doing	doing.exe	"??"
X	Dot1XCfg	Dot1XCfg.exe	"Added by the AGOBOT.EA TROJAN!"
N	DPConfig	DPConfig.exe	"Compuware DevPartner Studio Configuration Utility
N	DXDllRegExe	dxdllreg.exe	"Created when you select ""Yes"" to check the ""WHQL Digital signatures"" in the DirectX9 files at the first time you open it"
N	E-Color Registration	SonnReg.exe	"Registration for Colorific® and 3Deep® monitor calibration sofware from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™"
U	Eee Docking	Eee Docking.exe	"Intuitive shortcuts for easy access to digital content
U	eonemng	eOneMng.exe	"eOne Manager
X	eraseplg	eraseplg.exe	"Added by the GENOME.AQUV TROJAN!"
X	erwghjjrjt	ucbcg.exe	"Added by the SMALL.CUL TROJAN!"
U	eTCertManger	eTCrtMng.exe	"eToken Certificate Manager from Aladdin Knowledge Systems
N	Ethernet	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
?	Event Log	eventlog.exe	"??"
X	Explorer32	efsdfgxg.exe	"Added by the CLICKER-Y TROJAN!"
X	Fantasia injector	wincfg.exe	"Added by the AGOBOT.US WORM!"
X	FILE	abcdefg.exe	"Added by the KELVIR.DD WORM!"
?	First Principle Group	fpg.exe	"Related to the E-Players Card from First Principle Group"
X	Flash_Player_Install	ying.exe	"Constructor VC2000 malware"
U	FlingRun	fling.exe	"Fling - free FTP software from NCH Software"
X	g.exe	g.exe	"Added by the GRAYBIRD.Q TROJAN!"
N	Gadu-Gadu	gg.exe	Polish language Instant Messaging client
X	genserv path	sdqdqg.exe	"Added by the SDBOT-RF WORM!"
?	GisdnLog	gisdnlog.exe	"BT Digital Access USB"
X	GlobalFlagimglog	imglog.exe	"Added by the AGENT-GYK TROJAN!"
X	GOG	GOG.exe	"Added by the PHILIS.B VIRUS!"
U	GTVEpg	GTVEpg.exe	"Part of Got All Media - control your TV tuner and other utilities from your PC"
X	gtydf	ggrrgg.exe	"Added by the DLOADR-AZK TROJAN!"
N	GWMDMMSG	GWMDMMSG.exe	Used with internal modems on Gateway and vprMatrix PCs. This is the "GTW modem messaging applet" and is not required for the modem to work correctly
U	Hawking HWU54G Utility	HWU54G.exe	"Wireless management utility for the HWU54G Mini Wireless-G USB Adapter from Hawking Technologies
X	Help Temp Files	netreg.exe	"Added by the FORBOT-EM WORM!"
X	HOT FIX	QOching.exe	"Added by the WOOTBOT.VH WORM!"
X	hotplug	hotplug.exe	"Added by the SILLYDL TROJAN!"
U	Hotplug	hot_plug.exe	"Related to the SiS_Hot_Plug_Application. Enables automated driver loading for hotpluggable devices. If this service is stopped
Y	HPLJ Config	SetConfig.exe	Connects system to networked HP printer.
X	I-Worm.GiGu	uGiG.eXe	"Added by the GINK WORM!"
N	iCn	NAG.EXE	"iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy
N	Iconfig.exe	Iconfig.exe	Icon for LS-120 "Superdisk"
X	icq lite	winlog.exe	"Added by the IRCBOT-TJ TROJAN!"
N	IDW Logging Tool	idwlog.exe	Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
X	IE6	wkstmg.exe	"Added by a variant of the SDBOT WORM!"
X	IEengine	IEeng.exe	"STARTPAG.AI hijacker"
X	IEXPLORER	msiecfg.exe	"Added by the BDOOR-JU BACKDOOR or BANCBAN-IP TROJAN!"
X	ifperx	xmliwvug.exe	"Added by the SLAPER.U TROJAN!"
?	ILO_Office_Manager	IntEdReg.exe /OFFMAN	"Intense Educational Ltd - Language Office Software. Is it required?"
X	imcssl	xmliwvug.exe	"Added by the SLAPER.U TROJAN!"
N	imekrmig	imekrmig.exe	"Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese
N	IMEKRMIG6.1	IMEKRMIG.EXE	"Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese
U	IMJPMIG	IMJPMIG.EXE	"Microsoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails
U	IMJPMIG8.1	IMJPMIG.EXE	"Microsoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails
X	Incredible Keylogger	AdvKeylog.exe	"IncredibleKeylogger spyware"
U	Instant Wireless Configuration Utility	WUSB11cfg.exe	"Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
U	Instant Wireless Configuration Utility	WPC11Cfg.exe	"Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
?	Intense Registry Service	IntEdReg.exe /CHECK	"Intense Educational Ltd - Language Office Software. Is it required?"
X	Internet Send	More log.exe	Unidentfied adware
X	intranet	SYS32CFG.EXE	"Added by the SPYBOT-DW WORM!"
X	ipcfg.exe	ipcfg.exe	"Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN!"
X	ipreg	ipreg.exe	"Added by the ZAGABAN-H TROJAN!"
X	KasperskyAVEng	Kasperskyaveng.exe	"Added by the NETSKY.V WORM!"
X	key2	winlog.exe	"Added by the BAGLEDI-AL TROJAN!"
X	krag	krag.exe	"Added by the AGENT-FOW WORM!"
?	Launcg	launcg.exe	"??"
?	LCIDConfig	lcidchng.exe	"??"
U	Lfsndmng	lfsndmng.exe	"LightningFAX Enterprise Fax Server - ""puts faxing at the fingertips of networked enterprise users. It enables rapid
U	Lightning	Lightning.exe	"Lightning Download from Headlight Software - shareware download manager for resuming downloads. Start it manually unless you want to intercept download links from your browser"
U	Lightning Download	Lightning.exe	"Lightning Download from Headlight Software - shareware download manager for resuming downloads. Start it manually unless you want to intercept download links from your browser"
X	Load-Guard	Wscript.exe LGuarg.exe.vbs	"Added by the YENO.B and YENO.C WORMS! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""LGuarg.exe.vbs"" file is located in %Windir%"
?	load=	WINOSCFG.EXE	"Could it be something to do with configuring Windows on a new PC from an OEM supplier?"
X	load=	a1g.exe	"Added by the ATAK.B WORM!"
X	LoadWindowsFile	winreg.exe	"Added by the HUPIGON.A BACKDOOR!"
U	Login	winlog.exe	"Salfeld Child Control - parental control software"
N	Logitech . Product Registration	eReg.exe	"Registration reminder from Leader Technologies for Logitech software such as SetPoint for their range of wired and wireless keyboards and pointing devices (mice
X	lsassig	lsassig.exe	"Added by the BANCOS-EC TROJAN!"
U	LtcyCfgApply	LtcyCfg.exe	"PCI Latency Tool - ""Utility to set PCI Latency and possibly prevent game stutter or improve FPS"" for older AGP/PCI graphics cards"
Y	LTMSG	ltmsg.exe	"Lucent Technologies (now Alcatel-Lucent) WinModem - which uses software rather than hardware
N	LTSMMSG	LTSMMSG.exe	"Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook
Y	LTWinModem1	ltmsg.exe	"Lucent Technologies (now Alcatel-Lucent) WinModem - which uses software rather than hardware
Y	LUCENT TECHNOLOGIES ltmsg	ltmsg.exe	"Lucent Technologies (now Alcatel-Lucent) WinModem - which uses software rather than hardware
X	M1cr0s0ft S3rcurity	systemconfig.exe	"Added by the RBOT.BKB WORM!"
N	Matrox Diagnostic	mgadiag.exe	For Matrox video cards. Quick access to diagnostics
U	MaxtorReg	AUTOREG.EXE	Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
Y	Messenger	SCANMSG.EXE	"AntiVirus Quick Heal - virus protection"
U	Mgabg	Mgabg.exe	"Matrox BIOS Guard - monitors a Matrox card's BIOS
X	Micromedia Flash Update	wdfmrg.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Config File	config.exe	Added by the KILLFILES.GR TROJAN! This is malware that will attempt to delete all system dlls!
X	Microsoft Configuration Wizard	taskmrg.exe	"Added by the SDBOT-MX TROJAN!"
X	Microsoft Features	ms32cfg.exe	"Added by the RBOT.HO WORM!"
X	Microsoft Genuine Logon	msnmsg.exe	"Added by the IRCBOT-XH WORM!"
X	Microsoft Hosting Service	WINHOSTING.EXE	"Added by the RBOT.AEV WORM!"
U	Microsoft IME 2002	IMJPMIG.EXE	"Microsoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails
X	Microsoft Intrenet Explorer	wcumrg.exe	"Added by the SDBOT-AFD WORM!"
X	Microsoft Java Virtual Machine	MsConfiG.exe	"Added by the FORBOT-DV WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting"
X	Microsoft Ming Service	ming.exe	"Added by the RBOT-AWS WORM!"
X	Microsoft MSN 7 Services	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Scanreg	microsoftscanreg.exe	"Added by the FRANRIV.A WORM!"
X	Microsoft Security Management	bling.exe	"Added by the RBOT.XL WORM!"
X	Microsoft Server Applacations	msnmsg.exe	"Added by the AGOBOT.BBM WORM!"
N	Microsoft System Configuration Utility	msconfig.exe	Entry that appears when you uncheck an item in the MSConfig Startup group and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode. Located in %System% (98/Me/Vista) or %Windir%\PCHealth\HelpCtr\Binaries (XP)
X	Microsoft System32 Update	cmsrg.exe	"Added by the RBOT-GN WORM!"
X	Microsoft Update	msconfg.exe	"Added by the RBOT.H WORM!"
X	Microsoft Update	sys32cfg.exe	"Added by the RBOT.DR WORM!"
X	Microsoft Update	win-mang.exe	"Added by the RBOT-AFK WORM!"
X	Microsoft Update	bling.exe	"Added by the RBOT-AVK WORM!"
X	Microsoft Update 32	mscnfg.exe	"Added by the RBOT-ALM WORM!"
X	Microsoft Update Clinic	svsipconfig.exe	"Added by the RBOT.BR WORM!"
X	Microsoft Update Machine	jkydxg.exe	"Added by the RBOT.AEA BACKDOOR!"
X	Microsoft Updater	vbcjlg.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Microsoft USA Plug	usaplug.exe	"Added by the RBOT-DVC WORM!"
X	Microsoft Visual Studio	plscdksxg.exe	"Added by the RBOT-AWV WORM!"
U	Microsoft Windows Media Player Network Sharing Service Configuration Application	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
X	Microsoft Windows Tasks Management	taskmng.exe	"Added by the RBOT-FXK WORM!"
X	Microsoft Windows Update Service	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MicrosoftValue	syscnfg.exe	"Added by an unidentified VIRUS
U	Microsoft� Windows� Operating System	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
X	MINIBUG	MINIBUG.EXE	"Displays ads inside Weatherbug - see here"
U	minilog	MINILOG.EXE	If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
U	ModemOnHold	netWaiting.exe	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
X	ModularConfig	syscnfg.exe	"Added by an unidentified VIRUS
U	Motorola Desktop Suite mRouter Config	mRouterConfig.exe	"Configuration for Motorola's version of Intuwave's m-Router - ""that enables easy connectivity between mobile devices and PCs across Bluetooth
U	mRouterConfig	mRouterConfig.exe	"Configuration for Intuwave's m-Router - ""that enables easy connectivity between mobile devices and PCs across Bluetooth
X	MS Config	msdconfig.exe	"Added by the RBOT-CZH WORM!"
X	Ms System Config	Mscfg.exe	"Added by the SDBOT-CCR WORM!"
X	MSAdmin	jdbgmrg.exe	"Added by the DASMIN.A TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here"
N	MSConfig	msconfig.exe	Entry that appears when you uncheck an item in the MSConfig Startup group and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode. Located in %System% (98/Me/Vista) or %Windir%\PCHealth\HelpCtr\Binaries (XP)
X	msconfig	msconfig.exe	"CoolWebSearch MSConfig parasite variant. Note - this overwrites the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting"
X	msconfig	msconfig.exe	"Added by the WINUR WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting. This one is located in c:\winrun"
X	msconfig	winlog.exe	"Added by the IRCBOT-TJ TROJAN!"
X	Msconfig lptt01	msconfig.exe	"RapidBlaster variant (in a ""msconfig"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Windows Msconfig which has the same executable name"
X	Msconfig ml097e	msconfig.exe	"RapidBlaster variant (in a ""msconfig"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Windows Msconfig which has the same executable name"
X	msconfig.exe	proxy.exe	Added by a variant of the AGENT.AH downloader TROJAN!
X	msconfig.exe	uline.exe	Added by a variant of the AGENT.AH downloader TROJAN!
X	MSConfigr	jdbgmrg.exe	"Added by the DASMIN.C TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here"
N	MSConfigReminder	msconfig.exe	Entry that appears when you uncheck an item in the MSConfig Startup group and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode. This particular entry is specific only to 98/Me and is located in %System%
X	MSCORE	syscnfg.exe	"Added by an unidentified VIRUS
X	msdev	msconfig.exe	"Added by the AGOBOT.AAU WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting"
X	MSDLL	syscnfg.exe	"Added by an unidentified VIRUS
U	MSGTAG	MSGTAG.exe	"MSGTAG is an application that tells you when your emails have been received and opened"
X	MSLog	MicrosoftLog.exe	"Added by a variant of the SDBOT WORM!"
X	msMGR	rtkmsg.exe	"Added by the SDBOT-BPY WORM!"
X	MSMNTJNG	MSMNTJNG.EXE	"Added by the GRABER-G TROJAN!"
X	msn	msnmsg.exe	"Added by the RBOT-GO WORM!"
X	Msn Boot	msnbootcfg.exe	"Added by the IRCBOT.BFU BACKDOOR!"
X	MSN Configuration	msnconfig.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN Configuration Loader	msmsncfg.exe	"Added by the AGOBOT-KX BACKDOOR!"
X	MSN File Configuration	msnfilecfg.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Message Service	msnmsg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Messages	msnmesg.exe	"Added by the RBOT-ACN WORM!"
X	MSN Messanger	msnmsng.exe	"Added by the SDBOT.XN WORM!"
X	Msn Messenger Service	msnmsg.exe	"Added by the SDBOT.BMU WORM!"
X	MSN Settings Manager	msnsetmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	msnmsg	asgag.exe	"CoolWebSearch parasite variant"
X	msnmsg	msnmsg.exe	"Added by the BANKER-CLX TROJAN!"
X	msnmsg.exe	mscmd32.exe	Added by a variant of the AGENT.AH TROJAN!
X	msnmsg.exe	msnmsg.exe	"Added by the BANCBAN-KN TROJAN!"
X	MSOfficeCfg	msocfg.exe	Premium rate adult content dialer
X	msping	msping.exe	"Added by the FLOODBLACK TROJAN!"
X	msping.exe	msping.exe	"Added by the BDOOR-MZ BACKDOOR!"
X	msreg.exe	msrege.exe	"Added by the ZINX TROJAN!"
X	msvhost	aig.exe	"Added by the AIMBOT-BC TROJAN!"
X	Multimedia	windebug.exe	"Added by the VB-ERB WORM!"
N	MWProEng	MWProEng.exe	Logitech Mouseware Pro software - only required when using special functions
X	Net	WINREG.EXE	"Added by the ASSASIN.D TROJAN!"
X	netconfig	netconfig.exe	"Added by the NETWARE TROJAN!"
U	netmsg	netmsg.exe	"Net_Message is a small tool to send messages across the network
U	NetScreen-Remote	SafeCfg.exe	"NetScreen Remote VPN client software"
N	Nowe Gadu-Gadu	gg.exe	Polish language Instant Messaging client
N	Nuance OmniPage 17-reminder	Ereg.exe Ereg.ini	"Registration reminder for Ominpage version 17 from Nuance"
N	Nuance PDF Create! 5-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Create version 5 from Nuance"
N	Nuance PDF Professional 6-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Converter Professional version 6 from Nuance"
N	Nuance PDF Professional5-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Converter Professional version 5 from Nuance"
U	nwrecmsg	nwrecmsg.exe	"Broadcast message handler part of Novell Netware that displays server
U	ODSPConfig	ODSPConfig.exe	"DsktopSurveil surveillance software. Uninstall this software if you did not install it yourself"
X	Office Desktops	imag.exe	"Added by the SPYBOT.AQR WORM!"
N	OP12 Reminder	Ereg.exe ereg.ini	"Registration reminder for OmniPage from Nuance (was ScanSoft)"
N	Operations Typhoon Rising Registration	NOVG.EXE	"Joint Operations registration reminder"
N	OPSE reminder	Ereg.exe ereg.ini	"Registration reminder for OmniPage from Nuance (was ScanSoft)"
X	OS Boot Configuration	bootconfig.exe	"Added by the IRCBOT.HJ WORM!"
X	OSD	ALG.exe	"Added by the STARTPAGE-ID TROJAN!"
X	OSS	rlvknlg.exe	"Marketscore.RelevantKnowledge adware"
N	P2P NETWORKING	P2P Networking.exe	Peer to Peer (P2P) sharing of files on the internet
X	p2p networking	p2pnetworking.exe	"Added by the RBOT-ECP WORM!"
X	p2pnetworking	p2pnetworking.exe	"Added by the RBOT-AFL WORM!"
X	Pag Windows Monitor	pag.exe	"Added by the AGENT-EOT TROJAN!"
X	paint.exe	shnlog.exe	"Added by the PUPER-A TROJAN!"
U	PC Tools Privacy Guardian	pg.exe	"Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Cache
?	PCMMediaSharing	PCMMediaSharing.exe	"Part of Acer HomeMedia Connect
U	pg	pg.exe	"Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Cache
N	Pickatag	pickatag.exe	"Pick-a-tag - ""freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages"""
U	plmg.exe	plmg.exe	Paragon Last Minute Bidder - auction assistant software
X	Plug And Play	msnmsg.exe	"Added by the RBOT-ID WORM!"
N	PowerReg	eReg.exe	"Registration reminder from Leader Technologies for software from Logitech
N	PPort10reminder	Ereg.exe ereg.ini	"Registration reminder for PaperPort version 10 from Scansoft (now Nuance)"
N	PPort11reminder	Ereg.exe Ereg.ini	"Registration reminder for PaperPort version 11 from Scansoft (now Nuance)"
N	PPort12reminder	Ereg.exe Ereg.ini	"Registration reminder for PaperPort version 12 from Nuance"
N	PPort9reminder	Ereg.exe ereg.ini	"Registration reminder for PaperPort version 9 from Scansoft (now Nuance)"
?	Printer Update	CFGREG.EXE	"Maybe a registration reminder or automatically updates drivers or application software for a printer?"
U	Privacy Guardian	pg.exe	"Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Cache
U	pumcfgp	proxycfg.exe	"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
X	QTSvc	msocfg.exe	Premium rate adult content dialler
N	QuickenSEMessage	Qsemsg.exe	Quicken option
X	QuickSet	mmspng.exe	Added by a variant of the IROFFER.Z TROJAN!
U	readericon	readericon45G.exe	Tray icon to set various configuration settings for Sunkist (and maybe other) media card readers
N	Red Flag	redflag.exe	PMS prediction program with modes for guys and girls - no longer available
X	Reg Service	ipcfg.exe	"Added by the AGOBOT-SO WORM!"
X	Reg Service	WinnConfig.exe	"Added by the AGOBOT-PF WORM!"
X	Registry Checkup	winreg.exe	Added by an unidentified WORM or TROJAN!
X	Registry Startup Check	checkreg.exe	"Added by the REMLOAD-A or DANMEC-B TROJANS!"
X	Regmonitor	regmaping.exe	"Added by the BEAGLE.DO WORM!"
Y	Regrun2	WatchDog.exe	"Greatis Software's RegRun security suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's
X	RelevantKnowledge	rlvknlg.exe	"Marketscore.RelevantKnowledge adware"
?	rfwydg	rfwydg.exe	"??"
U	RKLG Startup	klg.exe	"Local Keylogger Pro keystroke logger/monitoring program - remove unless you installed it yourself!"
X	rnwabmig	rnwabmig.exe	"Added by the AGENT-LMI TROJAN!"
X	rrmso	bqhrmug.exe	"Added by the AGENT-GYY TROJAN!"
U	Run Nintendo Wi-Fi USB Connector Registration Tool	NintendoWFCReg.exe	"Related to Wi-Fi USB Connector from Nintendo"
X	run=	dllreg.exe	"Added by the DUMARU-L TROJAN!"
X	rundll***	die.exe [path] ttg.exe	"Added by the SUMTAX TROJAN! where *** is 134
X	RunDLL34	syscnfg.exe	"Added by an unidentified VIRUS
X	RVC6Player	tskdbg.exe	"Added by the ZAPCHAS-M TROJAN!"
U	SaitekAutoConfigure	saicnfig.exe	"Configuration for Saitek game controllers"
X	Sam-sung	Sam-sung.exe	"Added by a variant of the SDBOT WORM!"
X	Samsong	Samsong.exe	"Added by the SDBOT.BNE WORM!"
X	SB Watchdog	SBWatchdog.exe	Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank
N	ScanSoft OmniPage SE 4.0-reminder	Ereg.exe ereg.ini	"Registration reminder for Ominpage SE version 4 from Scansoft (now Nuance)"
N	ScanSoft PDF Professional 4-reminder	Ereg.exe Ereg.ini	"Registration reminder for PDF Converter Professional version 4 from Scansoft (now Nuance)"
X	Security Agent	securag.exe	"Added by the BANCBAN-F TROJAN!"
X	Service Drivers	msnpg.exe	"Added by the RBOT.BMD WORM!"
U	ServiceConfig	ispbeg.exe	"Comcast Transition Wizard. On June 30th
X	Sevice	winconfig.exe	"Added by the GIP.113.B1 TROJAN!"
X	Sexy_sg	Sexy_sg.exe	Premium rate adult content dialler
X	Shell	taskmrg.exe	"Added by the BANCBAN-FT TROJAN!"
N	SiSUSBRG	SiSUSBrg.exe	SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP
N	SM1BG	SM1BG.EXE	USB driver for downloading from within Napster and iTunes to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required
N	SmartDefrag	IObit SmartDefrag.exe	"""IObit SmartDefrag helps defragment your hard drive more efficiently than any other product on the market - free or not"""
U	SMS Win9x Message Agent	SMSMsg.exe	This program assigns a user to a Systems Management Server site
U	SoloSchedule	Solocfg.exe	"Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis"
N	SonnReg	SonnReg.exe	"Registration for Colorific® and 3Deep® monitor calibration sofware from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™"
N	SourcePath	gwreg.exe	Used to update Gateway registry settings for System Restoration Kit and Web update programs
N	Speed racer	CTSRReg.exe	Software for a Creative sound card
U	Speedtouch USB Diagnostics	Dragdiag.exe	For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
X	SRNG	srng.exe	"ShopNavSearch.Srng search hijacker"
U	Srv32Win	sysdiag.exe	"SpyAgent surveillance software. Uninstall this software unless you put it there yourself"
?	ssdiag	ssdiag.exe	"Equinox (now Avocent) ""Configuration and DOS Diagnostic for DOS and Windows platforms"""
X	Start Upping	taskmrg.exe	"Added by the RBOT-MA WORM!"
X	Starter	scvhosting.exe	"Added by the SDBOT.RU WORM!"
X	starter	scvhostingg.exe	"Added by the FORBOT-FB WORM!"
X	stratas	xmconfig.exe	"Added by the RBOT-AHR WORM!"
X	Stratas	ggfig.exe	"Added by the OPANKI.W WORM!"
X	svchost	ying.exe	"Constructor VC2000 malware"
X	Svcsys Registry Manager	svcsysreg.exe	"Detected by Kaspersky as the AGENT.CV TROJAN!"
X	sysalgg	sysalgg.exe	"Added by the TIBS.BF WORM!"
X	Syslog lptt01	Syslog.exe	"RapidBlaster variant (in a ""Syslog"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Syslog ml097e	Syslog.exe	"RapidBlaster variant (in a ""Syslog"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	SysmonLog	mslog.exe	"Added by the AGENT.AOV TROJAN!"
X	SysReg	SysReg.exe	"Added by the CHEKIN TROJAN!"
X	SysReg	SysReg.exe	"SearchSeekFind textual marketing foistware"
X	System	abcdefg.exe	"Added by the HARWIG-B WORM!"
X	System Configurator32	SYSTEMCFG.EXE	"Added by the AGOBOT-KS WORM!"
X	System CSRSS Patch	scrtkfg.exe	"Added by the RBOT-ADA WORM!"
X	System DB Manager	sysdbmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Information Manager	mslog.exe	"Added by the DELF.AKO TROJAN!"
X	System Loader	syscfg.exe	"Added by the AGOBOT-BS BACKDOOR!"
X	System Manager	sysmng.exe	"Added by the TAME-C WORM!"
X	SYSTEM MESSAGER	wmisg.exe	"Added by the MYTOB.ES WORM!"
X	System Support	syscfg.exe	"Added by the RBOT-AGQ WORM!"
X	System Task Manager	taskmrg.exe	"Added by a variant of the SPYBOT WORM! See here"
U	System32	sysdiag.exe	"SpyAgent surveillance software. Uninstall this software unless you put it there yourself"
U	System32kfvw	sysdiag.exe	"SpyAgent surveillance software. Uninstall this software unless you put it there yourself"
X	SystemBackup	MicroLog.exe	"Added by the MICROLOG.A TROJAN!"
X	SystemReg	WINREG.EXE	"Added by the DEWIN.A TROJAN!"
X	SystemService	msocfg.exe	Premium rate adult content dialler
?	TAG	tag.exe	"??"
X	Tapicfg	Tapicfg.exe	"CoolWebSearch Tapicfg parasite variant"
X	Tapicfg.exe	tapicfg.exe	"Malware installed by different rogue security software including SpyKillerPro"
X	Task Debugger	tskdbg.exe	"Added by the AGOBOT-KK WORM!"
X	Task managebrkb	taskmg.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Task Manager	taskmng.exe	"Added by the TIOTUA-E WORM!"
X	taskmrg	taskmrg.exe	"Added by the BANKER-BZZ TROJAN!"
X	taskmrg.exe	taskimg.exe	"Added by the DLOADER-QZ TROJAN!"
X	taskmrg.exe	[path to trojan]	"Added by the BANCBAN-BN TROJAN!"
N	TCASUTIEXE	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
N	TCAUDIAG -off	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
X	Tiny AV	fooding.exe	"Added by the NETSKY.I WORM!"
N	Tray Temperature	Weatherbug.exe	"Weatherbug provides current outdoor temperature in the System Tray
X	tskdbg	tskdbg.exe	"Added by the FLOOD.E TROJAN!"
U	TWarnMsg	twarnmsg.exe	"Toshiba System Warning Function for Windows 98
X	Update Checker	winlog.exe	"Added by the IRCBOT-TJ TROJAN!"
N	UpdReg	Updreg.exe	Reminder to register Creative Labs SoundBlaster Live! cards
X	USB Device	servicelog.exe	"Added by the WOOTBOT.CB WORM!"
X	User Debug Manager	usndebug.exe	"Added by a variant of the SPYBOT WORM! See here"
U	User Logger	UsrLog.exe	"UserLogger commercial surveillance software that logs keystrokes
X	User Messages	usrmsg.exe	"Added by a variant of the IRCBOT TROJAN! See here"
N	USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	"USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapter. You must uncheck ""Use Windows to configure my wireless settings"" for the program to work properly. Has Site Survey capabilities
N	USSShReg	USSSHREG.EXE	Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers
X	VCXD Settings	phqg.EXE	"Added by the RBOT.BRF WORM!"
U	VC_Log	keylog.exe	"PaqKeylog is a surveillance software program that logs keystrokes and can run in stealth mode. Uninstall this software unless you put it there yourself"
U	Venturi Configurator	ventcfg.exe	"Venturi Wireless mobile broadband configuration utility"
Y	Vet Alert	VETMSG.EXE	"Computer Associates Vet Anti-Virus software"
Y	VetAlert	VETMSG.EXE	"Computer Associates Vet Anti-Virus software"
X	Video Camera Frog	wcamfrog.exe	"Added by a variant of the IRCBOT TROJAN! See here"
U	VirtuaGirl	Vg.exe	"VirtuaGirl is a shareware program featuring scantily dressed girls on your desktop. They say hi in the morning
X	vuaaa	reg.exe	"Added by a variant of the RBOT WORM!"
X	W32.Formalin.Beta	Pocong.exe	"Added by the SILLYFDC WORM!"
N	Watch Dog Program	watchdog.exe	For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do
N	Watchdog	Watchdog.exe	"Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others)
?	WatchDog	watchdog.exe	"Part of Motorola ""Mobile Phone Tools"" v3 - in a ""Mobiile Phone Tools"" sub-directory of Program Files"
U	WAWifiMessage	WiFiMsg.exe	"""HP Wireless Assistant is a user application that provides a method for controlling the enablement of individual wireless devices (such as Bluetooth or WLAN devices) and that shows the state of the radios for these wireless devices"""
X	wblogon	algg.exe	"Added by the AGENT.AGGI TROJAN!"
X	WebBuying	webbuying.exe	"WebBuying adware"
X	Welcome	winconfig.exe	"Added by the GIP.113.B1 TROJAN!"
X	Welcome	CONFIG.EXE	"Added by the PSWGIP.B TROJAN!"
X	Whistler	whismng.exe	"Added by the WHISTLER-F TROJAN!"
X	Wifi Configuration	wificonfig.exe	"Added by the IRCBOT.AWB BACKDOOR!"
X	Wifi Debug	wifidebug.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Win Config	winconfig.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Win Defrag	windfrag.exe	"Added by a variant of the SDBOT WORM! See here"
X	Win Defrag!	windefrag.exe	"Added by a variant of the SDBOT WORM! See here"
X	Win Defrags	defrag.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Win32 Debug Manager	Win32Debug.exe	"Added by a variant of the WOOTBOT WORM!"
X	Win32 Usb Driver	AvpG.exe	"Added by the FORBOT-BX WORM!"
X	Win32 USB2 Driver	svchosting.exe	"Added by the FORBOT-J or SDBOT.HU WORM!"
X	Win32 USB2 Driver	algg.exe	"Added by the TIBS.BF WORM!"
X	win32debug	win32debug.exe	"Added by the GUDEB WORM!"
X	wincfg	syscnfg.exe	"Added by an unidentified VIRUS
X	Windows Automatic Updater	windrg.exe	"Added by a variant of the RBOT WORM!"
X	Windows Config	winconfig.exe	"Added by the IRCBOT.BAP BACKDOOR!"
X	Windows Config System	config.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Core Kernel Update	win32bootcfg.exe	"Added by the RANCK-EL TROJAN!"
X	Windows debug logging	winlogg.exe	"Added by the RBOT-OY WORM!"
X	Windows Debugger	windbg.exe	"Added by the FORBOT-BY WORM!"
X	Windows Debugging Tools	updatecfg.exe	"Added by the RBOT-AXU WORM!"
X	Windows Desktop Daemon	winpadg.exe	"Added by a variant of the SPYBOT WORM!"
X	Windows Executer	bling.exe	"Added by the SDBOT-DFT WORM!"
X	Windows Firewall Log	winlog.exe	Added by an unidentified WORM or TROJAN!
X	Windows Generic Proc	procmsg.exe	"Added by the ALLIM.B WORM!"
X	Windows iMessenger Messenger	winimsg.exe	"Added by the ALLIM.A WORM!"
X	Windows Installer 1	msnconfig.exe	"Added by the PURITYSCN.B TROJAN!"
X	Windows Live Msgs	wlivemsg.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Logger	winlog.exe	"Added by the NSHADOW-B TROJAN!"
X	Windows logging	asgasg.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Login	winlog.exe	"Added by the AGOBOT.MG WORM!"
X	Windows Login Service	winlog.exe	"Added by the RBOT-AFN WORM!"
X	Windows Management Instrumentations	winmg.exe	"Added by the GAOBOT.GW WORM!"
N	Windows Media Connect 2	WMCCFG.exe	"Windows Media Connect from Microsoft - stream digital media files on your computer to digital media receivers (DMRs) that are connected to your home network"
X	Windows Messenger	msnmsg.exe	"Added by the SPYBOT.BV WORM!"
X	Windows Messenger Messenger	winmsg.exe	"Added by the VELKBOT.A WORM!"
X	Windows MSConfig Startup Logger	winlog.exe	"Added by the RBOT.BCU WORM!"
X	Windows Networks	netcog.exe	"Added by the MYTOB.FH WORM!"
X	Windows PDG	winpdg.exe	"Added by the RBOT-ADW WORM!"
X	Windows Registry	msnmsg.exe	"Added by a variant of the RBOT WORM!"
X	Windows Registry Control	winreg.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Service Layer	config.exe	"Added by the RBOT.DDJ WORM!"
X	Windows Service Manager	msnmrg.exe	"Added by the OSCABOT-G WORM!"
X	Windows Service Threads	svcthreading.exe	"Added by the SHEUR.AUM TROJAN!"
X	Windows Services	scmsg.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Services Jog	svcjog.exe	"Added by the AGENT.ALWZ WORM!"
X	Windows Services Jog	svcjogg.exe	"Added by the AGENT.QAF WORM!"
X	Windows Services Jogging	svcjogging.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Services Joging	svcjoging.exe	"Added by the IRCBOT.AVI BACKDOOR!"
X	Windows Services Tower	svctowing.exe	"Added by the SLENFBOT.LA WORM!"
X	Windows System Configuration	wincfg.exe	"Added by the AGOBOT.OP WORM!"
X	Windows System Guard	msng.exe	"Added by the EGGDROP-BO WORM!"
X	Windows Task Manager	taskmrg.exe	"Added by the MYTOB.AV WORM!"
X	Windows Task Manager	taskmg.exe	"Browser hijacker - identified by DrWeb antivirus as ""Trojan.StartPage.601"""
X	Windows Taskmanager	taskmrg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	taksmrg.exe	"Added by the AGENT.WOH TROJAN!"
X	Windows UDP Control Center	winudpmg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Update Service	smcg.exe	"Added by the SDBOT.QY WORM!"
X	Windows User Mode Driver Manager	wdfmrg.exe	"Added by the SDBOT-ZN WORM!"
X	Windows-TCP-IP	rfkampig.exe	"Added by the GIPMA TROJAN!"
X	WindowsBool	aimplg.exe	"Added by the SDBOT-CNG WORM!"
X	WindowsUpdateManager	wupdmng.exe	"Added by the IRCBOT.OE BACKDOOR!"
X	WinDynManager	amsnmsg.exe	"Added by the SDBOT-IA BACKDOOR!"
U	winlgn	winsplg.exe	"Related to the Sentry Parental Controls software"
X	winlog	winlog.exe	"Added by the GAOBOT.DF WORM!"
X	winlog manager	winlog.exe	"Added by the DONBOMB.A TROJAN!"
X	winlog.exe	winlog.exe	"Added by the BCKDR-RBJ TROJAN!"
X	Winlogin.exe	log.exe	Added by a variant of the AGENT.AH downloader TROJAN!
X	winlogon	cleanmg.exe	"Added by the AGENT-ICR TROJAN!"
X	Winnt DNS ident	msnmsrg.exe	"Added by the RBOT.BVQ WORM!"
X	winReg	winReg.exe	"Added by the YAHA.H or YAHA.J WORMS!"
X	winrun	msconfig.exe	"Added by the WINUR WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting. This one is located in c:\winrun"
X	Winsock2 driver	wincfg.exe	"Added by the SPYBOT.CO WORM!"
X	Winsock32 driver	TESTING.EXE	"Added by the SPYBOT-B WORM!"
X	winsockdriver	tskmg.exe	"Added by the SDBOT.GEN TROJAN or WARPIGS.C WORM!"
X	winsplog	wsmmlog.exe	"Added by the MAILBOT-CA TROJAN!"
X	winsyslog lptt01	winsyslog.exe	"RapidBlaster variant (in a ""Winsyslog"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Winupdate Engine	wupeng.exe	"MalwareCrush rogue security software - not recommended
X	WinUpdating	WinUpdating.exe	"Added by the AGENT-GSC TROJAN!"
X	WinXPService	Tskdbg.exe	"Added by the MDROP-BPQ TROJAN!"
U	Wireless PCI Card Configuration Utility	WMP11Cfg.exe	"Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration"
U	Wireless-G Notebook Adapter Utility	WPC54CFG.EXE	"Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G)"
U	wlancfg	wlancfg.exe	Inventel wireless router related - required in order to automatically connect to the Net at bootup
Y	WLAN_Cfg.exe	WLAN_Cfg.exe	Linksys Instant Wireless USB Network Adapter driver
U	WMPNSCFG	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
U	WonderFrog	WonderFrog.exe	"Wonder Frog typing monitor"
X	wzdmg	wzdmg.exe	"Added by a generic downloader TROJAN - see here"
N	XeroxRegistation	EReg.exe	Registration reminder from Leader Technologies for software from Xerox
U	XFilesDialog	XFilesDialog.EXE	"""XFilesDialog is designed to improve all the (more or less standard) Windows file dialogs (Open / Load / Save)"""
?	XGIWatchDog	XWatDog.exe	"Related to XGI Technology's Volari graphics cards - what does it do and is it required?"
X	xmstart	xuming.exe	"Added by the GMIN-A WORM!"
X	Xp	p2pnetworking.exe	"Added by the SDBOT.XA WORM!"
?	xpcfg	xpcfg.exe	"??"
X	XXXmpeg	XXXmpeg.exe	Adult content dialler
X	Yahoo Messenger	Yahoomsg.exe	Added by an unidentified WORM or TROJAN!
X	ying	ying.exe	"Constructor VC2000 malware"
?	ZDConfig	ZDConfig.exe	"Related to various brands of Wireless USB LAN Adapter - what does it do and is it required?"
N	ZipGenius Clean	zg.exe	"ZipGenius file compression utility"
X	[12 random characters]	ati2dvag.exe	"IeDriver adware variant"
X	[14 random numbers]	rwg.exe	"Green AV rogue security software - not recommended
X	[random name]	ping.exe	"PurityScan adware. Note - do not confuse with the Microsoft utility of the same name as described here"
X	[random name]	m?config.exe	"PurityScan adware"
X	[Randomly chosen existing folder name]	_cfg.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_config.exe	"Added by the ANTINNY-L WORM!"
X	[various names]	bling.exe	"Added by the RBOT-NI WORM!"
X	[various names]	borlandg.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	jopplerg.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	msag.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{78B578D7-BCE1-4d83-9CD4-195BC34D8CB3}	syssfzvakqg.exe	"Added by the FAKEALERT-AM TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.