ld

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	3DLabsHelperDemon	3dldemon.exe	"Directly from the programs author ""It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore)
U	aaLDISCN32	LDISCN32.EXE	"LANDesk® Management Suite software component"
U	aaLDTaskCompletion	amclient.EXE	"LANDesk® Management Suite software component"
U	Absolute Shield	dseraser.exe	"Absolute Shield Evidence Eliminator - internet history eraser"
U	AbsoluteShield Internet Eraser	cseraser.exe	"AbsoluteShield Internet Eraser - ""protects your privacy by cleaning up all the tracks of your Internet and computer activities"""
N	AccessRampLAN01	ARUpld32.exe	"Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file
U	Active shield	Activeshield.exe	"Active Shield is ""an heuristic screen that actively protects your computer from trojans
Y	ActiveShield	mcvsshld.exe	"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
X	aldefr ere service	tay0x.exe	"Added by the RBOT-XS WORM!"
X	AlevirOld	[worm filename]	"Added by the OPASERV WORM!"
Y	ANIWZCS2Service	WZCSLDR2.exe	"ALPHA Networks wireless driver"
?	ANIWZCSService	WZCSLDR.exe	D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
U	Anonymizer Total Net Shield	AnonTns.exe	"Anonymizer Total Net Shield - ID protection and privacy software"
X	AntiSpyGolden	AntiSpyGolden 5.1.exe	"AntiSpyGolden rogue spyware remover - not recommended"
X	AntiSpyGolden 5.1	AntiSpyGolden 5.1.exe	"AntiSpyGolden rogue spyware remover - not recommended"
X	antispysoldier	antispysoldier.exe	"AntiSpyware Soldier rogue spyware remover - not recommended
X	AntiSpywareShield	AntiSpywareShield.exe	"AntiSpywareShield rogue security software - not recommended
X	AntiviralGolden	AntiviralGolden.exe	"AntiviralGolden rogue security software - not recommended
X	Antivirus-Golden	Antivirus-Golden.exe	"Antivirus-Golden rogue security software - not recommended"
X	AntivirusGold	AntivirusGold.exe	"AntivirusGold rogue security software - not recommended
X	AntivirusGold 5.1	AntivirusGold 5.1.exe	"AntivirusGold rogue security software - not recommended
N	AOLDialer	AOLDial.exe	AOL ISP software dialer - can be activated through a desktop shortcut
U	Application Explorer	Naldesk.exe	"Novell Zenworks Application Explorer Executable. ""For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."""
Y	APVXDWIN	ClShield.exe	"""Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam
Y	Arovax Shield	ArovaxShield.exe	"Part of Arovax Shield from Arovax
Y	ArovaxShield	ArovaxShield.exe	"Part of Arovax Shield from Arovax
X	ASDPLUGIN	dsldbaccess.exe	"AsdPlug premium rate adult content dialer"
X	asr64_ldm.exe	asr64_ldm.exe	"Added by the Dr. Guard rogue security software - not recommended
X	Avg Antivirus	icpldrvx.exe	"Added by the BANKER.BYU TROJAN!"
Y	BitDefender Virus Shield	vsserv.exe	"BitDefender antivirus"
N	bldbubg	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BrasilOld	[worm filename]	"Added by the OPASERV.P WORM!"
U	BTopenworld	DialBTYahoo.exe	BT Yahoo! internet connection manager
N	BuildBU	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BuildLab	services.exe	"Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process
X	BuildLab	winlogon.exe	"Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process
X	BuildLabs	csrss.exe	"Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
X	BuildLabs	lsass.exe	"Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
Y	BullguardoptIn	bulldownload.exe	"Part of Bullguard antivirus"
U	C:Program Filesdfjdkjfdkjfldjfdfjdkjfdkjfldjfwinlogin.exe	CritProc.exe	"KeyProwler keystroke logger/monitoring program - remove unless you installed it yourself!"
X	CiaBackdoor	msldr.com	Added by a VIRUS!
U	CMGShieldUI	CMGShieldUI.exe	"UI for CMG (CREDANT Mobile Guardian) Shield from Credant Technologies. ""The CMG Shield resides on devices and external media to enforce security policies even if the device is disconnected from the network."" Used to protect sensitive corporate on laptops
X	Coldlife -icmp	Systray.exe	"Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process"
X	Config Loader	sysldr32.exe	"Added by the GAOBOT WORM!"
X	Configuration Loader	confgldr.exe	"Added by the GAOBOT.GEN!POLY WORM!"
X	Configuration Loader	ldasp.exe	"Added by the AGOBOT.BH WORM!"
X	Configuration Loader	configldr.exe	"Added by the AGOBOT-PP TROJAN!"
X	Configuration Loader 2	confuldr.exe	"Added by the AGOBOT-FC WORM!"
X	Configuration Loading	configldr.exe	"Added by the AGOBOT-EC WORM!"
X	Configuration Manager	CNFGLD32.EXE	"Added by the SDBOT TROJAN!"
X	Configuration Manager	Cnfgldr.exe	"Added by the SDBOT TROJAN!"
X	CoolDownloads	"rundll32.exe MSA64CHK.dll	DllMostrar"
X	CorelDraw Toolbox	CorelDraw.exe	"Added by the SDBOT-VZ WORM!"
N	CorelMedia FoldersIndexer8	MFindexer.exe	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
N	CorelMedia FoldersIndexer8	MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
N	CPLDBL10	CPLDBL10.exe	Related to EZbutton quick launcher for the Media player app that comes with certain laptops
U	CPLDFL10	CPLDFL10.EXE	Part of the EzButton feature on some Toshiba (and maybe others) laptops which support additional buttons
X	cqlyg	world_cup_.bat	"Added by the WCUP.A WORM!"
X	cximddl	ldfrmmd.exe	"Added by the BUZUS.CQMU TROJAN!"
?	DellDMI	delldmi.exe	"Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
U	devldr16.exe	devldr16.exe	"Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use ""Sound Play Control"" and ""Sound Recorder"". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable ""Creative SB16 Emulation"" under Creative Miscellaneous Devices"
X	Divx4 codec	devldr32.exe	"Added by an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file"
X	dlder	dlder.exe	"Dlder spyware. Also creates a fake ""explorer.exe"" file and can be installed via versions of Grokster
X	DlDir1	caKe	"Added by the CAKE WORM!"
U	dldtamon	dldtamon.exe	Dell AIO Printer V305 device monitor
U	dldtmon	dldtmon.exe	Dell AIO Printer V305 device monitor
U	dldtmon.exe	dldtmon.exe	Dell AIO Printer V305 device monitor
X	dlldmt	dlldmt.exe	"Added by a variant of the CRYPTER.C TROJAN!"
N	DMILDR	dmildr.exe	"Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
X	drvsyskit	hldrrr.exe	"Added by the BAGLE.QU TROJAN!"
N	Dulux WeatherShield WeatherDesk	weather.exe	"Dulux WeatherShield WeatherDesk - latest weather information from across Australia"
U	EFI Hot Folders	hffw.exe	"""EFI Hot Folders improves productivity by simplifying the printing of PostScript and PDF files into a select
?	Execute	delfolders.exe	"??"
Y	ezShieldProtector for Px	ezSP_Px.exe	"Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
Y	ezShieldProtector for Px	ezSP_PxEngine.exe	"Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
U	FieldForms Sync	SyncService.exe	"Resco FieldForms. A solution for building of mobile forms that can be viewed or filled in on the run
X	filename process	kerneldll.exe	"Added by the AGOBOT-PO WORM!"
X	Folder Service	wssdtu.exe	"Added by the MANIFEST TROJAN!"
U	Folder View	folderview.exe	"Folder View enhances the Windows file Explorer by making all folders you need available in a single click"
U	FolderClone v..*	folderclone.exe	"Folderclone backup and synchronization software"
X	FolderRaper	[path to worm]	"Added by the VB.GOZ WORM!"
U	FolderShare	FolderShare.exe	"""FolderShare allows you to create a private peer-to-peer network that will help you to synchronize files across multiple devices and access or share files with colleagues and friends"""
N	Folding@home	WINFAH.EXE	"Folding@Home is a distributed computing project which studies protein folding
X	FontsLoader	ldfnt32.hta	Unidentified malware
Y	FoolProof	fpwinldr.exe	"FoolProof Security PC security software from SmartStuff"
Y	fspr	FolderShield.exe	"Folder Shield - hide personal files and folders"
U	GazelDisplay	gsyno.exe	"BT Digital Access USB - Gazel ISDN installation System Tray icon"
X	GoldenAntiSpy	pgs.exe	"GoldenAntiSpy rogue security software - not recommended. A member of the AVSystemCare family"
U	Goldensoft_MndlSvr	MndlSvr.exe	"Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive
X	helloworld	nb32ext2.exe	"Added by the MYDOOM.BV WORM!"
X	helloworld	nb32ext3.exe	"Added by the MYTOB.JT WORM!"
X	helloworld3	nb32ext4.exe	"Added by the RITDOOR.A WORM!"
X	hldrrr	hldrrr.exe	"Added by the BAGLE-KF WORM!"
N	HPAIO_PrintFolderMgr	hpoopm07.exe	"Directly from HP: "This process has one purpose - detects if the device moves to a different port
X	http://www.lienvandekelder.be	LienVandeKelder.exe	"Added by the MYTOB-AZ WORM!"
X	http://www.lienvandekelder.be	Lien Van de Kelder.exe	"Added by the MYTOB-AP WORM and variants!"
X	http://www.lienvandekelder.be	Lien Vande Kelder.exe	"Added by the MYTOB-AQ WORM!"
X	http://www.lienvandekelder.be	Lien vd Kelder.exe	"Added by the MYTOB-M WORM!"
X	http://www.lienvandekelder.be	Lien.exe	"Added by the MYTOB-CZ WORM!"
X	http://www.lienvandekelder.be	Lientjeuh.exe	"Added by the MYTOB-P WORM!"
X	http://www.lienvandekelder.be	LienVdK.exe	"Added by the MYTOB-U WORM!"
X	http://www.lienvandekelder.be	Van de Kelder Lien.exe	"Added by the MYTOB-BF WORM!"
X	http://www.lienvandekelder.be	We Love Lien Van de Kelder.exe	"Added by the MYTOB-CV WORM!"
X	http://www.lienvandekelder.com	Lien Van de Kelder.exe	"Added by the MYTOB-EQ WORM!"
X	http://www.lienvandekelder.com/	LienVandeKelder.exe	"Added by the MYTOB-EO WORM!"
N	InstallAurealDemos	InstallAurealDemos.js	Used to initialize the Aureal A3D demos InstallShield wizard
X	InternetShield	INTERN~1.EXE	"InternetShield rogue security software - not recommended
X	InternetShield	InternetShield.exe	"InternetShield rogue security software - not recommended
U	Inventory Scan	LDISCN32.EXE	"LANDesk® Management Suite software component"
U	iShield	iShield.exe	"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
X	Java Runtime Environment	jbuild.exe	"Added by the DELBOT-J WORM!"
X	Jnskdfmf9eldfd	csrssc.exe	"Added by the AGENT.EBC TROJAN!"
X	keymgrldr	"rundll32 setupapi	InstallHinfSection... keymgr3.inf"
U	LANDeskInventoryClient	LDIScn32.exe	"LANDesk® Management Suite software component"
X	LAsIAf32	RePEAtLD.exe	"Added by the REPEATLD WORM!"
X	layersldm	hostplsrvc.exe	"Added by a variant of the SDBOT WORM!"
X	ld	ld.exe	"CoolWebSearch Tooncomics parasite affiliate variant - redirects to fastwebfinder.com"
N	LDM	backweb-8876480.exe	"Installed with older versions of the software for Logitech products. Automatically checks for software upgrades and new products
N	LDM	LogitechDesktopMessenger.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
X	ldriver	ldriver.exe	"Added by the CHORUS-A TROJAN! Searchforfree browser hijacker"
X	li-rcash00001	vldial.exe	"Added by the Vl TROJAN!"
X	load32	winldra.exe	"Added by the NIBU.J BACKDOOR or DUMARU-BI TROJAN! Note - also known as Srv.SSA-KeyLogger by Sunbelt Software which has developed a free removal tool for this keylogger"
N	Logitech Desktop Messenger	ldmconf.exe	"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
N	Logitech Desktop Messenger Agent	ldmconf.exe	"Installed with older versions of the software for Logitech products. Configures the options for Logitech Desktop Messenger to activate notifications about software upgrades and/or new products
X	Macfee Security Patch	Mpfsheild.exe	"Added by the RBOT-NP WORM!"
X	Mcafee Auto Protect	mcafeshield.exe	"Added by the RBOT-UH WORM!"
Y	McAfee VirusScan	mcvsshld.exe	"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
X	MCAFFE FLD LOADER	MCAFFEFLD.EXE	"Added by the RBOT-PY WORM!"
X	Mcaffee	mcsheild.exe	"Added by the RBOT-FDP WORM!"
Y	McShld9x	mcshld9x.exe	"Window 9x/Me on-access scanner for older McAfee's internet security products such as VirusScan and VirusScan Online which scans files in real-time for malware as you access
Y	mcvsshld	mcvsshld.exe	"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
X	messnger	Dvldr32.exe	"Added by the DELODER.A WORM!"
X	Microfot Update	winldx32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Conf Ldr	sysconf.exe	"Added by a variant of the SDBOT TROJAN!"
X	Microsoft Install Shield Services	rundll64	"Added by the RBOT-FSH WORM!"
X	Microsoft Installshield	nundll32.exe	"Added by the AGOBOT-AHZ WORM!"
X	Microsoft Synchronization Manager	devldr32.exe	"Added by a variant of the RBOT WORM! Note - do not confuse with the legitimate Creative Labs devldr32.exe file"
X	Microsoft Time Manager	dveldr.exe	"Added by the RBOT-HQ WORM!"
X	Microsoft World Service	winworld.exe	Added by an unidentified IRC worm with backdoor capability!
X	MicrosoftUpdate	RBuilder.exe	"Added by the DLOADR-BMV TROJAN!"
N	Microsoft� Windows� Operating System	"rundll32.exe oobefldr.dll	ShowWelcomeCenter"
U	MilShieldSlave	ShieldWorker.exe	"Mil Shield from Mil Incorporated. It protects your privacy by removing all tracks from your online or offline computer activities"
U	MirrorFolderShell	mrfshl.exe	"MirrorFolder backup software"
U	ModemOnHold	MOH.EXE	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
U	ModemOnHold	netWaiting.exe	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
X	MooNlight	MySqld-nt.cmd	"Added by the BOBANDY-A WORM!"
X	Ms Builders	Wupated.exe	"Added by the AGOBOT-SS WORM!"
X	MS Windows AOL Driver	MSAOLdrv.exe	"Added by the RBOT-ASP WORM!"
X	MS Windows Local Directory	MSWLD32.exe	"Added by a variant of the RBOT WORM!"
X	Msconfig	icpldrvx.exe	"Added by the BANLOAD.BFT TROJAN!"
X	MSN File & Folder Sharing App	msnfileshare.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Msshield.exe	Msshield.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSWorld	msworld.exe	"Added by the AGENT.DED TROJAN!"
Y	murphy shield	lmgui.exe	"Firewall part of BitDefender virus scanner/firewall"
U	MXO Auto Loader	MXOaldr.exe	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MXOBG	MXOALDR.EXE	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
X	My Kazaa Gold	MyGoldKazaa.exe	"My Kazaa Gold - regarded as a scam by McAfee SiteAdvisor as you're paying for something which available for free elsewhere"
X	Ndpldaemon	[path to trojan]	"Added by the RPCSDBOT-A TROJAN!"
X	NDplDeamon	nstask32.exe	"Added by the RANDEX.E WORM!"
X	NDplDeamon	winlogin.exe	"Added by the RANDEX.E WORM!"
U	NetOnHold	FTNOHMgr.EXE	"""FaxTalk NetOnHold 1.5 works with the Modem-On-Hold capabilities found in V.92 modems to provide the ability to place an Internet connection ""on hold"" and receive incoming calls or place outgoing calls"""
N	NetZIPFolders	nzfprop.exe	"
X	NeuerSchild	pgs.exe	"NeuerSchild
X	ntldr	ntldr.exe	"Browser hijacker re-directing to search-control.com. In addition to the registry changes found by HijackThis it also creates the following system files: %System%\ntldr.exe
X	NvCplD	m2gr32.exe	"""Switch"" premium rate adult content dialler variant"
X	NvCplD	ntcpl.exe	"""Switch"" premium rate adult content dialler variant"
U	NvCplDaemon	"RUNDLL32.EXE NvQTwk	NvCplDaemon"
U	NvCplDaemon	"RUNDLL32.EXE NvCpl.dll	NvStartup"
X	NvCplDaemon	msmsgrs.exe	"Added by the DLOADER-YI TROJAN!"
X	NvCplDaemon	Xplorer.exe	"Added by the ORBINA-A WORM!"
X	NvCplDaemon32	anvshell32.exe	"Added by the VB-XU TROJAN!"
X	NvCplDeamon	nvdisp.exe	"Added by the PEEPVIE-I TROJAN!"
X	NvCplDmn	NAVSVC.EXE	"Added by an unidentified VIRUS
X	NvXplDeamon	xstyles.exe	Added by the SMALL.AJ VIRUS!
X	oddworldz.exe	oddworldz.exe	"Added by the MULTIDR-EG TROJAN!"
X	OpenGL Drivers	0penGLD.exe	"Added by the YIMP-A WORM!"
X	PCShield	regsvr32 sfg_***.dll [ = random char]	"SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System%"
X	PCTotalDefender	pgs.exe	"PCTotalDefender rogue security software - not recommended. A member of the AVSystemCare family"
?	PreloadApp	hphprld.exe	"HP PhotoSmart printers related. What does it do and is it required?"
X	ProtectSoldier	ProtectSoldier.exe	"ProtectSoldier rogue security software - not recommended
X	ProtocolDiskChk	ssrms.exe	"Added by the BDOOR-ML BACKDOOR!"
X	ProtocolDiskChk	svcvlw32.exe	"Added by the STINX-Y TROJAN!"
N	QuikShield	qkshield.exe	"QuikShield popup blocker - reportedly stealth installed
N	RealDownload	RealPlay.exe	Download manager. Available via Start -> Programs
X	RealDownload Express	npnzdad.exe	Advertising spyware
X	RNBc Test	bvldv32.exe	"Added by the RBOT-AJF WORM!"
X	run=	fntldr.exe	"CoolWebSearch Tapicfg parasite variant"
U	Safeworld	Freedom.exe	SafeWorld Internet Security - now no longer available
X	SaveSoldier	SaveSoldier.exe	"SaveSoldier rogue security software - not recommended
X	ScrSvrOld	[worm filename]	"Added by the OPASERV WORM!"
X	SecuritySoldier	SecuritySoldier.exe	"SecuritySoldier rogue security software - not recommended
N	setup	hphprld.exe ....setup.exe	HP DeskJet Setup - printers function normally without it
X	shell32	ntldrt.exe	"Added by the JLOK-A WORM!"
X	Shelldaemon	Shelldaemon.exe	Added by a variant of the AGENT.ALN TROJAN!
X	Shield Security	shield.exe	"Added by the RIZO.A TROJAN!"
X	Shield32 Security	shield32.exe	"Added by the RIZO.A TROJAN!"
X	ShieldSafeness	ShieldSafeness.exe	"ShieldSafeness rogue security software - not recommended
X	SoftSoldier	SoftSoldier.exe	"SoftSoldier rogue security software - not recommended
X	SoftStronghold	SoftStronghold.exe	"SoftStronghold rogue security software - not recommended
U	Speaking Clock Deluxe	SpClDlx.exe	"Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date
X	spysoldier	spysoldier.exe	"SpySoldier rogue spyware remover - not recommended
U	SpyWare Shield	Shield.exe	"Acronis Privacy Expert Spyware Shield prevents spyware and other suspicious programs from being installed on PCs"
Y	SpywareTerminator	SpywareTerminatorShield.exe	"Spyware Terminator's real-time protection. Initially not recommended due to false positives but the later versions have since improved - see here"
X	Srv32Old	[worm filename].PIF	"Added by the OPASERV.J WORM!"
X	SSLDyn	SSLDyn.exE	"FRETHOG.MM spyware"
N	Streamload Downloader	SlDB.exe	"Downloader for MediaMax (was Streamload) - ""gives you a private and secure place to upload
X	syncman	wuaucldt.exe	"Added by the NAMSYS-A TROJAN!"
X	sysclx	ntldrt.exe	"Added by the JLOK-A WORM!"
X	sysldtray	ld02.exe	"Added by the KOOBFACE.BG WORM!"
X	sysldtray	ld03.exe	"Added by the KOOBFACE.CA WORM!"
X	sysldtray	ld11.exe	"Added by the KOOBFACE.JG WORM!"
X	sysLDtray	ld08.exe	"Added by the AGENT-JSV TROJAN!"
X	sysldtray	ld09.exe	"Added by the AGENT-KFI TROJAN!"
X	sysldtray	ld10.exe	"Added by the FAKEAV-UD TROJAN!"
X	sysldtray	ld12.exe	"Added by the KOOBFACE.V WORM!"
X	sysldtray	ld01.exe	"Added by the KOOBFACE.I WORM!"
X	sysldtray	ld15.exe	"Added by the AGENT-LNH TROJAN!"
X	sysldtray	ld04.exe	"Added by the KOOBFACE WORM!"
X	sysldtray	ld06.exe	"Added by the KOOBFACE WORM!"
X	sysldtray	ld07.exe	"Added by the KOOBFACE WORM!"
X	sysldtray	ld14.exe	"Added by the VIRUT.CE VIRUS!"
X	sysldtray	ld16.exe	"Added by the AGENT-MMO TROJAN!"
X	SystemLoader	sysldr32.exe	"Added by the DOWNLDR-NS TROJAN!"
U	TPP Auto Loader	Tppaldr.exe	"Installed with DataStor's (and some other manufacturers) USB 2.0 based external DVD
U	Tray Folder	Tray Folder.exe	"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
U	TrayFolder	Tray Folder.exe	"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
X	Trojan Guarder Gold Version	Trojan Guarder.exe	"TrojanGuarder rogue security software - not recommended"
U	TrojanShield	Init.exe	"TrojanShield"
U	TrojanShield Protector	Port.exe	"TrojanShield anti-hacker/anti-trojan software"
X	TrustSoldier	TrustSoldier.exe	"TrustSoldier rogue security software - not recommended
X	ttool	essldev.exe	"Added by the AGENT-LWB TROJAN!"
Y	umxldra	umxldra.exe	"User mode executive module DLL loader - part of Tiny Personal Firewall V4"
Y	UMXLDRW	UMXLDRW.exe	"Tiny Personal Firewall (pre V4)"
X	unldr16	unldr16.exe	"Added by a variant of the CRYPTER.C TROJAN!"
X	unldr32	unldr32.exe	"Added by a variant of the CRYPTER.C TROJAN!"
U	V.92 Modem On Hold	Ltmoh.exe	Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
U	Virtual Dimension	VirtualDimension.exe	"Virtual Dimension by Typz - ""a free
U	VirtualDimension.exe	VirtualDimension.exe	"Virtual Dimension by Typz - ""a free
N	VirtualDrive	VDTask.exe	"VirtualDrive from Farstone - virtual CD/DVD drive emulator. Available via Start → Programs"
X	Virus Shield 2009	VShield.exe	"Virus Shield 2009 rogue security software - not recommended
Y	VirusScan Online	mcvsshld.exe	"ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed
N	vTPass	vtpassld.exe	"Part of vTrails - a live media delivery solution. vTPass is the driver enabling the system to work. If unavailable via Start -> Programs
U	WashAndGo - Cleanup of old Backupfiles	checker.exe	"WashAndGo - temp file cleaner"
N	WebCallDirect	WebCallDirect.exe	"WebCallDirect - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
N	Webposition Gold 2	wpsche~1.exe	"Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines"
X	WebSpyShield	WebSpyShield.exe	"WebSpyShield rogue security software - not recommended"
X	WildFlics	WildFlics.exe	"Direct-B premium rate adult content dialler"
?	WildTangent CDA	"RUNDLL32.exe cdaEngine0400.dll	cdaEngineMain"
U	WildTangent Web Driver updater	wcmdmgrl.exe	"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
N	Wildwire Monitor	WWMon.exe	This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem
X	Win Patch	ntldr.exe	"Added by the SDBOT-GS WORM!"
X	Win32 Device Loader	Win32ldr.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	WinDLL (dlfksdld.exe)	"rundll32.exe dlfksdld.exe	start"
X	WinDLL (wchshield.exe)	"rundll32.exe wchshield.exe	start"
X	Windowfdgfds DLL fgfdg Verifier	Windowsdldfglcheckkk.exe	"Added by the RBOT.CSP WORM!"
X	Windows applications server	SysShield.exe	"Added by the unregistered version of Personal Anti Malware rogue security software - not recommended
X	Windows Automatic Updates	dvldr.exe	"Added by the RBOT.MF WORM!"
X	Windows Explorer Update Build 1142	EXPLORER32.EXE	"Added by the KaZaA based KWBOT or KWBOT.Y WORMS!"
X	Windows Login Folder	winzep.exe	"Added by the AGOBOT-TZ WORM!"
X	WINDOWSflashbrg	sqldata1.exe	"Added by a variant of the AGENT-IC TROJAN!"
N	WindowsWelcomeCenter	"rundll32.exe oobefldr.dll	ShowWelcomeCenter"
X	WiniShield	WiniShield.exe	"WiniShield rogue security software - not recommended
X	winldr	[path to file]	"Added by the VIDLO-P TROJAN!"
X	winldr	Rechnung.pdf.exe	"Added by the ACS TROJAN!"
X	WorldAntiSpy	worldantispy.exe	"WorldAntiSpy rogue spyware remover - not recommended
U	WorldTime.exe	WorldTime.exe	"Part of AnyTime Organizer Deluxe from Individual Software Inc - ""Check the time anywhere in the world and know when to communicate. Place up to twelve clocks on your desktop"""
X	Wsecurity	ldanw32.exe	"Added by the AGENT-BUC TROJAN!"
U	WSEP Status+Configuration	controldGUI.exe	"User interface for the WatchGuard Security Event Processor (WSEP) Status/Configuration dialog box associated with the Firebox series of security products from Watchguard"
U	xbtl	bootldr.exe	"Active Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	XPShield	XP-Shield.exe	"XP-Shield rogue security software - not recommended
X	[Randomly chosen existing folder name]	_autorun.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_cfg.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_config.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_env.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_loader.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_login.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_setup.exe	"Added by the ANTINNY-L WORM!"
X	[Randomly chosen existing folder name]	_start.exe	"Added by the ANTINNY-L WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.