Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
X$WindowsRegKey%updateIEXPLORE.EXE"Added by the RBOT-EZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X(Default)KEYBOARD.exe"Added by the AUTORUN.BUK WORM! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
U00THotkey00THotKey.exe"For Toshiba Satellite notebook series to use the front buttons
U00THotkeysystem32THotkey.exe"For Toshiba Satellite notebook series to use the front buttons
U1Win32CfgKeyloggerpro.exe"Keyloggerpro keystroke logger/monitoring program - remove unless you installed it yourself!"
?AAAKeyboard??"??"
UABCkeylogger.exeKeystroke logger/monitoring program - remove unless you installed it yourself!
UAcerPowerkeyPowerkey.exePowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
UActivboardMMKeybd.exe"Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock
UActiveKeys.AAB635BD7D054a37A576akeys.exe"""Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"""
?AidemHotKeyDVMAIN.EXE"Keyboard related"
?AidemHotKeyKEYAPP.EXE"Keyboard related"
XAKEYNAMEWinServ.exe"Added by the EVILBOT.C TROJAN!"
Uakeysakeys.exe"""Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"""
UAnti-keylogger checkantikey.exe"Anti-keylogger - protects against keylogger programs monitoring your keystrokes"
XAOLRegKey32AOREGSVR512.EXE"Unidentified malware - see here"
Xara-key[random filename]"Added by the ANTINNY WORM!"
UArdamax Keyloggerakl.exe"Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!"
XASDPLUGINturkey.exe"AsdPlug premium rate adult content dialer"
NASUSKeyV38SHELL.EXESystem tray Icon for quickly changing video modes
NATI Task Application (Atikey)Atitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
XATI VIDEO REGKEYati2vid.exe"Added by the SDBOT.UR WORM!"
NAtiKeyAtiKey32.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
NAtiKeyatiptkad.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Control Panel → Display
NAtikeyAtitask.exeSystem Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
Xauto__antiav__keyantiav_exe.exe"Added by the BAGLEDI-AA TROJAN!"
Xauto__hloader__keyhloader_exe.exe"Added by the BAGLE.AB TROJAN!"
?BTSETBOOTKEYBTSetBootKey.exe"Related to a USB Bluetooth adaptor. What does it do and is it required?"
NButtonKeyButtonKey.exe"CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut"
UCeEKEYCeEKey.exeHot Key utility included on Toshiba Satellite laptops
UCherryKeyManKeyMan.exe"Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys"
UCHotKeymhotkey.exe"Enables special keys on Chicony keyboards. Special combinations include Internet
UCHotKeyMK9805.EXE"Enables special keys on Chicony keyboards. Special combinations include Internet
UCHotKeyzHotkey.exe"Enables special keys on Chicony keyboards. Special combinations include Internet
?ChromeMarkkeysh.exe"Related to this. Don't know what keysh.exe does though and if it's required"
UCleverKeysCK.exe"CleverKeys - ""is free software that provides instant access to definitions at Dictionary.com
UCompuSpy KeyLoggercswin2008.exe"CompuSpy surveillance software. Uninstall this software unless you put it there yourself"
XCPQHotKeyshotkeysvc.exe"Added by the RBOT-XA WORM!"
?CYNHKeyCYNHKey.exe"??"
UDellTouchMMKeybd.exeDell multimedia keyboard manager. Required if you use the additional keys
UDirkeyDirkey.exe"Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders"
XDisableKeybaord"Rundll32.exe KeyboardDisable"
UDMHotKeyDMLoader.exeHotKey access to the Samsung Display Manager on laptops and ultra-mobiles that support it - such as the M55 and Q1
Xdrv_st_keyhidn.exe"Added by the BEAGLE.FF WORM!"
UDSKEYDsKey.exe"Part of PC PhoneHome - ""secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection"". Security software from Brigadoon Security Group for tracking down lost/stolen computers"
XDSKEY[path to trojan]"Added by the STARTER-G TROJAN!"
UEasy Keyeasykey.exeFor programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
UEasyKeyeasykey.exeFor programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
UEasyKeyboardLoggerEasyKeyboardLogger.exe"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
UeDonkey2000edonkey2000.exe"File sharing network - not recommended as the free version of this application should be avoided as it installs
UFamilyKeyLoggercisvc.exe"Family Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Located in %ProgramFiles%\FamilyKeyLogger"
UFLMK08KBMMKEYBD.EXEMultimedia keyboard manager. Required if you use the additional keys
UFree Key Loggerfreekeylogger.exe"Free Key Logger keystroke logger/monitoring program - remove unless you installed it yourself!"
UFujitsu Hotkey UtilityIndicatorUty.exe"Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook
UGammaHotKeyssetgamma.exe"Part of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop"
UHawkEyeHAWK_95.EXE"Control Panel application for the old Number Nine graphics cards to change resolution
UHawkEye IV Control PanelHAWK_32.EXE"Control Panel application for the old Number Nine graphics cards to change resolution
XHighKey1HighKey1.exe"Detected by AVG as GENERIC12.LHE - see here"
XHKEYokrunlli32.exe"Added by the QQPASS-U TROJAN!"
UHomeKeyLoggerKeyLogger.exe"SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself"
UHot Key Kbd 2690 DaemonSK2690DM.EXEMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
UHot Key Kbd 9910 DaemonSK9910DM.exeMulti-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
UHotkeyAppHotkeyApp.exe"Programmable keys on Acer
UHotKeysCmdshkcmd.exe"Hot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled
XHotKeysCmds[path to worm]"Added by the PAHATIA-A WORM!"
UHP Gaming Keyboardrazerhid.exeHP VoodooDNA Gaming Keyboard (powered by Razer) driver - required if you use the additional features and programmed keys/macros
XIBM Keyboard Driverikeybdrv.exe"Added by the SDBOT.IC TROJAN!"
NIC_KEY_3spvic.exe"Instant Chess related"
UiKeyWorksIKEYMAIN.EXE"A4Tech wireless keyboard driver and utility"
NInControl Desktop ManagerDMHKEY.EXEFor Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
XIncredible KeyloggerAdvKeylog.exe"IncredibleKeylogger spyware"
Ujx_Key"Rundll32 JXKey.dllRundll32Main"
Xkeysysxp.exe"Added by the BEAGLE.AB WORM!"
Xkeysys_xp.exe"Added by the BEAGLE.AC WORM!"
Xkeywinxp.exe"Added by the BEAGLE.AG WORM!"
XKey Loggercsrss.exe"Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root folder (ie
NKey TextKeyText.exe"Key Text 2000 from MJMSoft Design - utility to automate repetitive keyboard tasks. Available via Start -> Programs"
XKey1Rlid.exe"Added by the LIXY TROJAN!"
?Key2serve.exe"??"
Xkey2winlog.exe"Added by the BAGLEDI-AL TROJAN!"
YKeyAccesskeyacc32.exe"KeyServer KeyAccess client software - ""when the KeyServer program is launched
XKeybdcntlkeybdcntl.exe"Added by a variant of the CRYPTER.C TROJAN!"
UKeyBoardKeyboard.exe"
Xkeyboardkeyboard*.exe [* = number]"Detected by Kaspersky as the VB.ZG TROJAN!"
Xkeyboardkybrdef_7.exe"DollarRevenue adware"
Xkeyboard[path to trojan]"Added by the DLOADR-AOZ TROJAN!"
XKeyboardlsass.exe"Added by the AGENT.US WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %CommonAppData%\Fearghus"
NKeyboard CustomizerTpKmapAp.exe"Part of the Keyboard Customizer Utility for IBM/Lenovo Thinkpad notebooks. This is the main user interface for the utility but it doesn't normally seem to be running if enabled at startup. Also
UKeyboard ManagerMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
YKeyboard Preload CheckPreload.exeMillenium Multi-Function Keyboard driver
?Keyboard StatusKeyStat.exe"Multimedia keyboard manager for Medion desktop and notebook PCs? Located in %ProgramFiles%\Medion\KeyStat"
Xkeyboard_enumkeyboard_enum.exe"Added by the BDOOR-GP BACKDOOR!"
Ukeyhookkeyhook.exe"Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys"
UKeyMaestrokmaestro.exeMultimedia keyboard manager. Required if you use the multimedia keys
Ukeymapkeymap.exeSystem Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game
Xkeymgrldr"rundll32 setupapi InstallHinfSection... keymgr3.inf"
UKeyPatrolKeyPatrol.exe"KeyPatrol - key logger detector using both behavioral and pattern-matching algorithms that used to be part of PestPatrol before CA's aquisition"
Ukeyplusplusstartk.exe"Key++ Invisible Spy Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
Xkeyservkeyserv.exe"KeyThief spyware"
UKeyspan Digital Media RemoteKDMRdmn.exe"Remote control driver for Keyspan Digital Media Remote devices"
Ukeystrokekeystroke.exe"QuickLaunch surveillance software. Uninstall this software unless you put it there yourself"
UKeyWalletKWallet.exe""KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins
UKLogKeyspy.exe"KeyLoggPro.B keystroke logger/monitoring program - remove unless you installed it yourself!"
UKM9801UMMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
ULaoKeyLaoKey.exe"Lao Script for Windows (LSWin) is an extension to the Windows operating system to allow Lao language to be used with many different Windows-based applications"
UledpointerCNYHKey.exeChicony Electronics Multimedia Keyboard Hotkey Driver
Xlivekeywebgrade.exe"LiveKeys adware. File located in %Program Files%\livekey\livekeys"
Xlivekeyswebgrade.exe"LiveKeys adware. File located in %Program Files%\livekey\livekeys"
ULManagerHotkeyApp.exe"Programmable keys on Acer
Yload=hotkey.exeSolo 5300 display driver for Win2K on some Gateway laptops
ULWBKEYBOARDKbdAp32A.exeKeyboard utility for a Labtec brand (and possibly others) keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
UMagicKeyboardPreMKBD.exe"Related to Samsung laptops. Provides ability to program keys to perform specific functions"
UMediaKeyMediaKey.exe"Multimedia keyboard manager. Required if you use the multimedia keys"
XMickey Mouse Cereal[random filename].exe"Added by the RANKY.Q TROJAN!"
XMicrosoft ConfgKeyswurmgrd32.exe"Added by the RBOT-ARX WORM!"
UMicrosoft Intellitype Prospeedkey.exeAdditional keyboard shortcuts on MS programmable keyboard
XMicrosoft Keyboard Enhance 2.0.iasrecst.exe"Added by the BCKDR-QIL BACKDOOR!"
XMicrosoft Keyboard Enhance V2.0iasrecst.exe"Detected by F-Prot as the DOWNLOADER2.AILI TROJAN!"
XMicrosoft System CheckupKeymgr.exe"Added by the DONK.M WORM!"
XMicrosoft Taskmanager Updaterkeyboard.exe"Added by the RBOT-ALU WORM!"
XMicroSoft Toolbarkey.exe"Added by the RBOT-AEW WORM!"
XMicrosoft Windows Keyboard servicekeyboard.exe"Added by the RBOT-CRF WORM!"
XMicrosoft Winedows startupWinKey.exe"Added by a variant of the SDBOT WORM! See here"
XMicrosoft Winedows UpdateingNinKey.exe"Added by a variant of the SPYBOT WORM! See here"
XMicrosoftkeysdsystemproc.exe"Added by the FORBOT-BI WORM!"
XMicrosoftkeysdsystemwin32s.exe"Added by the WOOTBOT.CO WORM!"
XMicrosoftkeysdslass32.exe"Added by a variant of the RBOT WORM!"
XMircrosoft Technic HelpEditKey.exe"Added by the KOLABC.AS WORM!"
XMircrosoft Technic HelpRegKey.exe"Added by a variant of the SPYBOT WORM! See here"
NMMHotKeyMMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
UMMKeybdMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
UModPS2ModPS2Key.exe"Hotkey drivers for Chicony keyboard. Required if you use the hotkeys"
XMS-RunKeyarr.exeMS-Connect dialler/hijacker
Xmule_st_keyflec006.exe"Added by the BAGLE.AV TROJAN!"
UMulti-function keyboardGWHotkey.exe"Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail
UMultimedia KBDMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
UMULTIMEDIA KEYBOARDMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
XMULTIMEDIA KEYBOARD88smss.exe"Added by the SILLYFDC WORM! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
UMy-disgoMyKey disgo.exe"Related to disgo pro. Program will synchronize data"
NNaggerrunkeynagger.exePackard Bell Free Internet Signup screen
UNBKeyScanNBKeyScan.exe"This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup"
XNetworkKeynetkey.exe"Added by the IRCBOT-AJ TROJAN!"
XNLS Keyboardkeyboard.exe"Added by a variant of the SPYBOT WORM!"
UNSRKeyNSRTray.exe"System Tray access to Norton Save & Restore backup utility"
UNVHotkeyrundll32.exe nvHotkey.dll"Enables the use of ""hot keys"" for changing setting on Nvidia graphics"
XOneMoreKeyxpa.exe"XP Antivirus rogue security software - not recommended"
UPanasonic HotKey ManagerHKEYAPP.EXEHotKey management for Panasonic rugged mobile PCs
UPC Spy KeyloggerToolKeylogger.exe"PCSpyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
UPowerKeyPowerKey.exe"Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610"
NPrintkey2000printkey2000.exeScreen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
UPrivacyKeyboardPrivacyKeyboard.exe"PrivacyKeyboard is a product ""that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices
NProdikeysAutorunProdload.exe"Creative Prodikeys software - 'an interactive music entertainment device which not only functions as a full-featured
Upsklkeyspy.exe"KeyboardLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
URCHotKeyRCHotKey.exe"Part of RingCentral Call Controller™ which ""turns your PC into your personal business command center. It brings you real time control of your calls
XRegkey for autostartwinservice.exe"Added by the RBOT-NU WORM!"
Xreg_keyFUKULAMER.exe"Added by the BEAGLE.AH WORM!"
Xreg_keyloader_name.exe"Added by the BEAGLE.Y or BEAGLE.Z or BEAGLE.AA WORMS!"
US3Hotkeys3hotkey.exeHotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card
NShortKeys 99SHORTKEY.EXE"ShortKeys from Insight Software Solutions - allows you to program keys with text strings"
UShortKeys Liteshklite.exe"ShortKeys Lite from Insight Software Solutions
YsHotKeysHotKey.exe"Special function key manager for Chicony keyboards - see here"
USiS Compatible Super VGA Keyboard Daemonkeyhook.exe"Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys"
USiS Windows KeyHookkeyhook.exe"Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys"
USmart KeyboardSmartkbd.exeNetropa Smart Keyboard driver
USpeedkeySPEEDKEY.EXEAdditional keyboard shortcuts on MS programmable keyboard
USpy-Keyloggerskl.exe"SpyKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
USpykEySpyky.exe"SpyKy keystroke logger/monitoring program - remove unless you installed it yourself!"
Uspyshelterantikeylogger.exe"SpyShelter - anti-keylogger protects against keylogger programs monitoring your keystrokes"
YStart RF Wireless Keyboardktrexe.exeYuanxun Electronics RF wireless keyboard driver
Xstartkeysvcmgr.exe"Added by the HIPPER-B TROJAN!"
Xstartkeyupdate.exe"Added by the BIFROSE-DG TROJAN!"
XstartkeyXMCHAI.EXE"Added by the BIFROSE-AO TROJAN!"
Xstartkeyexplore32.exe"Added by the BDOOR-MT BACKDOOR!"
XstartkeyCKOTS.exe"Added by the BIFROSE-HM TROJAN!"
XStartKeypligde.exe"Added by the BIFROSE.E TROJAN!"
XstartkeyRunWinRaR.exeAdded by a variant of the BIFROSE-LV TROJAN!
XstartkeyMysia.exeAdded by the CEP TROJAN!
Xstartkeyexplorer.exe"Added by the BCKDR-MLD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xstartkeyfurzi.exe"Added by the BIFROSE-OK TROJAN!"
Xstartkeykrnl.exe"Added by the BIFROSE-S TROJAN!"
Xstartkeyroyale.exe"Added by a variant of the SDBOT WORM!"
Xstartkeyrtfmsv.exe"Added by the EDEPOL-C TROJAN!"
Xstartkeyscvhost.exe"Added by the BIFROSE-PM TROJAN!"
Xstartkeyserver.exe"Added by the BIFROSE-DB TROJAN!"
Xstartkeywin32i.exe"Added by the BIFROSE-R TROJAN!"
XstartkeywinampXP.exe"Added by the BIFROSE-OY TROJAN!"
Xstartkeysvchost32.exe"Added by a variant of the SDBOT WORM!"
Xstartkeywinlogin.exe"Added by the BIFROSE-PM TROJAN!"
Xstartkeyantivir.exe"Added by the BIFROSE-TO TROJAN!"
Xstartkeysvchost.exe"Added by the AGENT-FPL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
XStartKeymsnmsie.exe"Added by the BIFROSE.M BACKDOOR!"
Xstartwindowskeyuserrundle2.exe"Added by the JAVAKILLER TROJAN!"
USysconfigStealth KeySpy.exe"StealthKeySpy - keystroke logger/monitoring program - remove unless you installed it yourself!"
XSyskeysysinit.exe"Added by the BEAGLE.AX WORM!"
USystemKeyrundll32.exe [path] SystemKey.dll rdl"Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
XTaskMgrkeymayker.exe"Added by the LDPINCH-EP TROJAN!"
UTEscKeyTEscKey.exeToshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
UTFunckeyTFuncKey.exeDeals with the <Fn> - <Function> key combinations on a Toshiba laptop
UTHOTKEYTHotkey.exe"Associated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked
UTOSHIBA AccessibilityFnKeyHook.exe"""Allows you to use the Fn key to create a hot key combination with one of the function keys without pressing the two keys simultaneously as is usually required. Using Accessibility lets you make the Fn key a sticky key
UToshiba Key StateKEYSTATE.EXE"Displays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g.
UTPHOTKEYTPHKMGR.exe"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
UTPHOTKEYTPOSDSVC.exe"Supports the hotkeys on IBM/Lenovo ThinkPad notebooks - displays the result of the using of function keys on the desktop screen. For example
?USB Hub Keyboard PatchSKBPATCH.EXEUSB HUB Update
Uva10keyva10key.exeOnly required if you use the 10 kay bay unit with a Sony Vaio laptop
UVC_Logkeylog.exe"PaqKeylog is a surveillance software program that logs keystrokes and can run in stealth mode. Uninstall this software unless you put it there yourself"
NWebKeyWebKey.exe"WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet"
XWindowRegKey updatewins.exe"Added by the SPYBOT.I WORM!"
Xwindowshkey.exe"Added by the GAOBOT.AFW WORM!"
XWindows Explorer Keyexplorer.exe"Added by the IRCBOT-YB WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindows Keyboard Serviceswinkeyboard.exe"Added by the IRCBOT.AFS WORM!"
XWindows Keyboard Serviceswinkeybrd.exe"Added by a variant of the IRCBOT TROJAN! See here"
XWindows Keyboard Serviceswinkeybrd32.exe"Added by a variant of the IRCBOT TROJAN! See here"
XWindows XP SP2 KeyGenWindows XP SP2 KeyGen.exe"Added by the TIBICK-C WORM!"
XWindowsKeyUpdatemaster.exe"Added by the JOSAM WORM!"
XWindowsRegKey Autoupdate[random filename]"Added by a variant of the RBOT WORM!"
XWindowsRegKey upd4te2d4te*********.exe [* = random char]"Added by the RBOT.XQ WORM!"
XWindowsRegKey updatewinupdate.exe"Added by the RBOT-QJ WORM!"
XWindowsRegKey updatewindns.exe"Added by the RBOT.IE WORM!"
XWindowsRegKey updatewinupdatexx.exe"Added by the RBOT.LW WORM!"
XWindowsRegKey update[random filename]"Added by the RBOT.QT WORM!"
XWindowsRegKey updatesvchoosts.exe"Added by the RBOT.ADB WORM!"
XWindowsRegKey updatesvchostc.exe"Added by the RBOT.IF WORM!"
XWindowsRegKey updatewdnupdate.exe"Added by the SDBOT.QX WORM!"
XWindowsRegKey updateWindowsup.exe"Added by the SDBOT.PU WORM!"
XWindowsRegKey updateWINUPDATES.EXE"Added by the RBOT-MM WORM!"
XWindowsRegKey updaterkbuouoxfl.exe"Added by the RBOT-OO WORM!"
XWindowsRegKey updatewinsys.exe"Added by the RBOT-JY WORM!"
XWindowsRegKey updatewinupdat32.exe"Added by the RBOT-AGW WORM!"
XWindowsRegKey update XPwindexv1.exe"Added by the RBOT-ABM WORM!"
XWindowsRegKey%$ updatemsi332.exe"Added by the RBOT-IX WORM!"
XWindowsRegKey%updateethernet32m.exe"Added by the RBOT-EN WORM!"
XWindowsRegKeys updatewinsysi.exe"Added by the SDBOT.WE WORM!"
XWinEssentialKeyhost.exeHijacker - hailing from jraun.com
XWinEssentialkeyword.exe"Jraun adware"
UWinKeywinkey.exe"Loads Copernic's WinKey. Used to map out Windows key hotkey combinations. Not required for the system
UWireLessKeyboardPS2USBKbdDrv.exe"Related to WireLess Keyboard Multimedia Combo Set by SANSUN Industries"
X[various names]keybdll.exe"Wareout - malware masquerading as a spyware and dialer remover"
X[various names]KeywordFinder.exe"Wareout - malware masquerading as a spyware and dialer remover"


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.