manager

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
N	3dfx Task Manager	3dfxMan.exe	System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
?	3Dlabs Taskbar Display Manager	3DLman.exe	"3DLabs graphics driver related. System Tray access to display settings?"
U	AccessManager	AccessMgr.exe	"Part of SmartPipes SecureSite software. ""SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management
U	AcerNotebookManager	almxptray.exe	System Tray access on some Acer Notebooks to give faster access to system settings
N	Action Manager 32	am32.exe	Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
U	Actual Window Manager	ActualWindowManagerCenter.exe	"Actual Window Manager from Actual Tools - ""an innovative desktop organization application which introduces unconventional window controls and also automatic general window operations making your work more productive
X	Admanager Controller	AdManCtl.exe	"Adware
X	AdobeManager	rundtl.exe	"Added by the INJECT.IB TROJAN!"
X	Adope File Manager	lsasv.exe	Added by an unidentified WORM or TROJAN!
U	Alarm Manager	Alarmapp.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
X	Altnet	points manager.exe	"Altnet TopSearch adware"
X	AltnetPointsManager	points manager.exe	"Altnet TopSearch adware"
N	Anapod Manager	anamgr.exe	"Anapod Explorer from Red Chair Software ""is the most advanced Windows iPod® software available
N	Anti-Blaxx Manager	Anti-Blaxx.exe	"Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives"
U	AnVir Task Manager	AnVir.exe	"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Task Manager Free	AnVir.exe	"AnVir Task Manager Free - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Task Manager Pro	AnVir.exe	"AnVir Task Manager Pro - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
X	apmanager.exe	apmanager.exe	"AP Manager ransomware download manager - not recommended
X	Application Manager	acnsvc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Application Manager	apnsvc.exe	"Added by the SMALLTRO.FN TROJAN!"
U	ATI Technologies Inc. HydraVision Desktop Manager	HydraDM.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
X	Audio Device Manager	winfp.exe	"Added by the IRCBOT-XS WORM!"
X	Audio Device Manager	WinNT.exe	"Added by the IRCBOT.USP BACKDOOR!"
X	Audio Device Manager	WNDXP.exe	"Added by the IRCBOT.AJL BACKDOOR!"
X	Audio Device Manager	sfhgj.exe	"Added by the IRCBOT-ZA BACKDOOR!"
U	Auto Run Software for Photo Frame	PhotoManager.exe	"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
X	Automatic Defrag Manager	defrag.exe	"Added by the RBOT-AKE WORM!"
X	AVManager	csrss.exe	"Added by the AUTORUN-DV WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
U	BellSouthAlertManager.exe	BellSouthAlertManager.exe	"Related to BellSouth Alert Manager"
U	BOINC Manager	boincmgr.exe	"BOINC manager - ""controls the use of your computer's disk
X	Boot Manager	Njgal.exe	"Added by the KILO TROJAN!"
X	Boot Manager	bootmng.exe	"Added by a variant of the SPYBOT WORM!"
U	Broadcom Wireless Manager UI	bcmntray.exe	"Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems"
N	Broadcom Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
U	CCD Manager	DDS.EXE	"Project Labs Century CD manager for their CD/DVD storage device"
U	CFi ShellToys Utility Manager	CFiShlMan.exe	"Manager for CFi ShellToys from Cool Focus International Ltd - which ""puts all the tools you need right where you need them - just a click away on your context menu. Right-click one or more files or folders
U	CHIPDRIVEPinManager	sokscmpn.exe	"ChipDrive Smartcard software"
U	CHIPDRIVESmartcardManager	SCMgr.exe	"ChipDrive Smartcard software"
Y	Cingular Communication Manager	CingularCCM.exe	"Cingular Communication Manager - now taken over by AT&T. ""provides a robust set of wireless communication tools for businesses and individuals. With wireless access to email
X	Clip Service Manager	clipmg.exe	"Added by the DELF.DXJ TROJAN!"
X	Clock Manager	amsngr.exe	"Added by the SDBOT-XM TROJAN!"
?	CompaqHW Comp Manager	cpqhcm.exe	"Running on a Compaq laptop - any ideas?"
X	Configuration Manager	CNFGLD32.EXE	"Added by the SDBOT TROJAN!"
X	Configuration Manager	Cnfgldr.exe	"Added by the SDBOT TROJAN!"
X	Configuration Manager	cfg32.exe	"BookedSpace parasite. Note - the ""cfg32.exe"" file is located in %Windir%"
N	Connection Manager	CManager.exe	SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
X	CPU Manager	cpumgr.exe	"Added by the PANDEM.B WORM!"
U	Creative Live! Cam Manager	CTLCMgr.exe	"Creative Live! Cam Manager"
X	CS Update	copy /Y [path] ActivationManager.dll.upd [path] ActivationManager.dll	Added by an unidentified malware
X	CSNetManagerXp	isass.exe	"Added by the HIDER-O TROJAN!"
X	ctflog manager	ctflog.exe	"Added by the DONBOMB.A TROJAN!"
X	Date Manager	datemanager.exe	"Date Manager - calender program. Spyware/adware based provided by The Gator Corporation. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	DCE Manager	dcemgr.exe	"Added by the TUMAG TROJAN!"
U	Default Manager	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
N	DELL Webcam Manager	DellWMgr.exe	Dell Webcam Manager - Webcam management software provided on Dell PCs
N	Dell Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
X	Device Manager	wfxmgr.exe	"Added by the RBOT.AJU WORM!"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	DiscUpdateManager	DiscUpdMgr.exe	"Disc Update Manager for Digital interactive's DISCover Console. Provider of on-demand video games"
N	DiscUpdateManager	DiscUpdateMgr.exe	"DISCover from Digital Interactive Systems Corporation Inc. ""The company's patented Drop 'n' Play technology provides a simple
X	Disk Manager	diskver.exe	"Added by the RBOT.AQT WORM!"
X	Dlite	dllmanager.exe	"Added by the WOOTBOT.DN WORM!"
X	DLL Manager	dllmngr32.exe	"Added by a variant of the RBOT WORM!"
X	DLL Service Manager	[path to worm]	"Added by the RPCBOT.F TROJAN!"
N	dlmMgr	AdobeDownloadManager.exe	"Adobe Download Manager - ""can prevent you from having to start from the beginning should your download process be interrupted
U	Document Manager	docmgr.exe	"Wave Systems Corp. Document Manager - ""provides secure storage and management capabilities for file and folder level encryption"""
N	Download Accelerator Manager Free Edition	dam.exe	"Download Accelerator Manager Free Edition from Tensons Corp"
X	drvrmanager	drvrquery32.exe	"Added by the BOOHOO WORM!"
N	EEventManager	EEventManager.exe	"Part of the Epson Creativity Suite supplied with their multi-function printer/scanners
U	Evoluent Mouse Manager	EvoMouExec.exe	"Mouse manager for Evoluent VertcialMouse"
X	explore manager	explore.exe	"Added by the DONBOMB.A TROJAN!"
Y	F-Secure Manager	FSM32.EXE	"F-Secure antivirus - carry out scheduled virus scans automatically"
U	FEELitDeviceManager	feelitdm.exe	Associated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
X	FileManager32	Wscript.exe ChkMgr32.vbs	"Added by the NOTUP.A WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The ""ChkMgr32.vbs"" file is located in %System%"
X	Firefox Plugin Manager	firefoxpgm.exe	Added by the MSNPHOTO.E WORM!
X	Flashget Download Manager	Flashget.exe	"Added by the RBOT-AGZ WORM!"
U	forteManager	dthtml.exe	"forteManager from LG. Rebranded version of Display Tune from Portrait Displays
N	Free Download Manager	fdm.exe	"""Free Download Manager"" - see here"
N	FTPManager	FTPDM.exe	"""Robust FTP is a Windows-based file transfer client application that transfers files between a user's local PC and another
X	FW Manager	fwcheck.exe	"Added by the DELBOT-H WORM!"
X	helpmanager	spoler.exe	"Added by the RANDEX.J WORM!"
X	Hewlett Packard Manager	hpmanager.exe	"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
U	HostManager	AOLHostManager.exe	"Manages a component essential to the operation of most current AOL software. If you remove it from startup it will load when IE is launched
N	HostManager	AOLSoftware.exe	"Quoted from AOL Beta Team
X	Hostname Manager Server	host32srv.exe	"Added by a variant of the RBOT WORM!"
N	HotSync Manager	hotsync.exe	Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start → Programs
N	HP Component Manager	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
X	HP Photo Manager	HPPhotoManager.exe	"Added by the SDBOT.AXU WORM!"
U	HydarVisionDesktopManager	desk95.exe	"ATI's HydraVision desktop management software
U	HydraVisionDesktopManager	desk98.exe	ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
U	HydraVisionDesktopManager	HydraDM.exe	"Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which ""customizes the behaviour of windows and dialog boxes
Y	IBM Password Manager	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
?	ILO_Office_Manager	IntEdReg.exe /OFFMAN	"Intense Educational Ltd - Language Office Software. Is it required?"
N	InControl Desktop Manager	DMHKEY.EXE	For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
X	inetinfomon manager	inetinfomon.exe	"Added by the DONBOMB.A TROJAN!"
U	Internet Call Manager	ICM.EXE	"Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail"
X	Internet download manager service	idman.exe	"Added by the RBOT-BMS WORM!"
N	Intervideo Win Cinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo Win Cinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WINCIN~1.EXE	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Introducing Media Manager	SPLASHA.EXE	"MS Media Manager tour. Not required"
Y	Intuit SyncManager	IntuitSyncManager.exe	"Synchronizes local Intuit Quickbooks data with online data - ""Use the Intuit Sync Manager to find the status of your latest QuickBooks data sync
X	IPC Spool Manager	wnmgre.exe	"Added by the SDBOT-ZC WORM!"
X	IPC Spool Manager	winspec.exe	"Added by the SDBOT-BLU WORM!"
U	iPodManager	iPodManager.exe	"Apple iPod® management software for the iPod® player - updates
X	iqmanager.exe	iqmanager.exe	"IQ-Manager ransomware copyright scanner - not recommended
X	ivHost	taskManager.exe	"Added by a variant of the SPYBOT WORM! See here"
X	JW Manager	jwmngr.exe	"Added by the DELBOT-G WORM!"
X	Kernel Manager	krnlmgr.exe	"Added by the JUNY.A TROJAN!"
U	Keyboard Manager	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
U	Launch Manager	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	Lexmark X63 Button Manager	AcBtnMgr_X63.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X73 Button Manager	AcBtnMgr_X73.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X83 Button Manager	AcBtnMgr_X83.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X84-X85 Button Manager	AcBtnMgr_X84-X85.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
X	License Manager	license_manager.exe	"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
N	LifeDrive Manager	LifeDriveMgr.exe	"Keeps the Palm LifeDrive Manager utility in the systray. Shortcut available via Start -> Programs"
U	LifeDrive? Manager	LifeDriveMgrTray.exe	"System Tray utility for the Palm LifeDrive Mobile Manager"
X	LMA Manager	lmamanager.exe	"Added by the TILEBOT-AD WORM!"
U	LManager	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	LManager	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	LManager	HotkeyApp.exe	"Programmable keys on Acer
U	LManager	QtaET2S.EXE	"Acer Launch Manager - on Acer laptops
U	LManager	CPLBCL53.EXE	System Tray icon found on Acer Travelmate laptops that allow you control access to the Internet and email buttons and other computer configurations
U	Lmanager	LManager.exe	"Acer Launch Manager - manages configuration of the multimedia keys on their range of notebooks
X	LoadManager	msload.exe	"Added by the OPASERV.T WORM!"
U	Loadout Manager	nost_LM.exe	"Manager for the Belkin Nostromo n50 SpeedPad game controller - see here"
Y	LogitechCommunicationsManager	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
U	LPManager	LPMGR.exe	"Part of Lenovo's (was IBM) ThinkVantage Productivity Center - ""guides you to a host of information and tools to help you set up
X	LsaManager	lsamgr.exe	"Added by the BEAGLE.DR WORM!"
X	Lsass 32 Manager	lsass32.exe	"Added by the SDBOT.EOG WORM!"
Y	Lto Manager	DesktopLtoManager.exe	"Related to Global Positioning System (GPS) found on HP iPAQ hw6500 unit and others"
U	Machine Debug Manager	MDM.EXE	"Used by developers for debugging and is a component of several MS products including Office and Visual Studio. Those who have encountered it have unchecked it with no degradation in performance. It may cause your computer to ""hang"" if you have Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendation. For this entry it loads under the ""RunServices"" key in Me (located in C:\WINDOWS\SYSTEM). It also loads a service in XP/Vista (located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug)"
X	Machine Debug Manager	msdn.exe	"Added by a variant of the RBOT WORM!"
X	Machine Debug Manager	mdm.exe	"Added by the SDBOT-APE WORM! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or %System% (Me only). This one is located in %Windir%"
X	Machine Debug Manager	mdms.exe	"Added by the SDBOT-CH WORM!"
X	manager	manager.exe	"Detected by Kaspersky as the SMALL.CVT TROJAN!"
U	Manager Monitor	monitor.exe	"MindStorm AnalyzerPro from Secure Associates. ""A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"""
X	Mcafee VirusScan Manager	mvcsvm.exe	"Added by the SILLYFDC.BBV TROJAN!"
U	Media Manager Indexer	AIRSVCU.EXE	"Part of MS Visual InterDev
X	media_manager	mediaman.exe	"Mini-Player
X	Memory manager	himem32.exe	"Added by the MANCSYN TROJAN!"
X	Memory Manager	memorymanager.pif	"Added by the DELF-JJ TROJAN!"
U	MemoryCardManager	MemCard.exe	"Memory Card Manager - for removable memory cards found on Dell or Lexmark photo printers"
X	MemoryManager	[random name].dll	Virtumondo adware related
X	Microsoft (R) Windows Protocol Deployment Manager	[random].tmp	Added by an unidentified WORM or TROJAN!
X	Microsoft Application Manager	msapl32.exe	"Added by the BROPIA-AE TROJAN!"
X	Microsoft Cab Manager	exec.exe	"Affilred adware"
X	Microsoft Cab Manager	cab.exe	"Added by the DELF-JJ TROJAN!"
X	Microsoft Com Port Manager	svdhost.exe	"Added by the SDBOT-NI WORM!"
X	Microsoft Connection Manager Monitor	cmmon.pif	"Added by the RBOT-AKV WORM!"
X	Microsoft CP Web Manager	webcp.exe	"Added by the IRCBOT.HP TROJAN!"
X	Microsoft CPU Over Heat Manager	CPU.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft CRT Monitor Manager	crtmon.exe	"Added by the ROBOTON.A WORM!"
X	Microsoft Debug Manager Console	mdm32.exe	"Added by the AGOBOT-AQ WORM!"
U	Microsoft Default Manager	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
X	Microsoft Desktop Manager	msdesk32.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Device Manager	msdevmgr32.exe	"Added by the LATEDA.B TROJAN!"
X	Microsoft Device Manager	mscmtl32.exe	"Added by the AGENT.BMQ BACKDOOR!"
X	Microsoft Device Manager	svcswin.exe	"Added by the IRCBOT-YH TROJAN!"
X	Microsoft Dll Manager	microsoft32dll.exe	"Added by the SHEUR.LH TROJAN!"
X	Microsoft DLL Manager	dllmgr.exe	"Added by the SDBOT-KJ WORM!"
X	Microsoft Dll Printer Manager	dllpt.exe	"Added by the SDBOT.BIH WORM!"
X	Microsoft Driver Manager	mswindrv.exe	"Added by the FORBOT-EZ WORM!"
X	Microsoft File Demand Manager	wmgrdf.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Games	gamemanager.exe	"Added by the SPYBOT.AHQ WORM!"
X	Microsoft Generic Update Manager	wupdate.exe	"Added by the RBOT-AWC TROJAN!"
X	Microsoft Internet Explorer Manager	ie.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Internet Firewall Manager	GMT16.exe	"Added by the RANDEX.AT WORM!"
X	Microsoft Lsass Manager	lsass.exe	"Added by a variant of the SDBOT WORM! Note - this is not the legitimate lsass.exe process
X	Microsoft Manager	msmanager.exe	"Added by the MYTOB.LF WORM!"
X	Microsoft Media Manager	medman.exe	"Added by the RBOT.EUZ WORM!"
X	Microsoft PCI Manager	mspci.exe	"Added by the RBOT.BBG WORM!"
X	Microsoft Process Manager	process32.exe	"Added by the CHECKOUT WORM!"
X	Microsoft Profile Manager	profile.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Regestry Edit Manager	regedit.exe	"Added by the SHEUR.HC TROJAN! Note - this is not the valid Windows registry editor which resides in %Windir% and will not normally figure in Msconfig/Startup! This version resides in %System%"
X	Microsoft Regestry Manager	regedit32.exe	"Added by a variant of the IRCBOT.ARD WORM!"
X	Microsoft Regestry Manager	registry32.exe	"Added by the IRCBOT.ARD WORM!"
X	Microsoft Router Manager	linksys.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Router Manager	router.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Safe Mode Manager	safemode.exe	"Added by the IRCBOT.HM BACKDOOR!"
X	Microsoft Security GManagers	[random filename]	"Added by a variant of the SDBOT WORM!"
X	Microsoft Security Manager	winamp.exe	"Added by the RBOT.TU WORM! Note - this is NOT the popular Winamp media player which is located in %ProgramFiles%\Winamp. This one is located in %System%"
X	Microsoft Service Access Manager	Access.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Service Execution Manager	execute.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Microsoft Service firewall Manager	firewall.exe	"Added by a variant of the SDBOT BACKDOOR! Located in %System%"
X	Microsoft Service Host Manager	32svchost.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Service Login Manager	winlogin.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Service Manager	service32.exe	"Added by the IRCBOT.WDW BACKDOOR!"
X	Microsoft Service Manager	winsvc.exe	"Added by a variant of the RBOT WORM! See here"
X	Microsoft Servicez Manager	servicemgrz.exe	"Added by the RBOT-ASN WORM!"
X	Microsoft Session Manager Subsystem	smss.exe	"Added by the KALEL-D WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	Microsoft Startup Manager	sysservice.exe	"Added by the AVALANEC TROJAN!"
X	Microsoft Syn Manager	Manager.exe	"Added by the SDBOT.BEF WORM!"
X	Microsoft Synchronization Manager	asgard.exe	"Added by the SDBOT-AEA WORM!"
X	Microsoft Synchronization Manager	bot.exe	"Added by the SDBOT.IH WORM!"
X	Microsoft Synchronization Manager	netscape.exe	"Added by the RANDEX.AE WORM!"
X	Microsoft Synchronization Manager	slhost.exe	"Added by the SDBOT.YH WORM!"
X	Microsoft Synchronization Manager	svhost.exe	"Added by the SDBOT-PY WORM!"
X	Microsoft Synchronization Manager	WinLoginnn.exe	"Added by the SPYBOT.FO WORM!"
X	Microsoft Synchronization Manager	winupdate.exe	"Added by the SDBOT.ER WORM!"
X	Microsoft Synchronization Manager	xXx.exe	"Added by the SDBOT-KZ WORM!"
X	Microsoft Synchronization Manager	___synmgr.exe	"Added by the MASLAN.A or MASLAN.C WORMS!"
X	Microsoft Synchronization Manager	al.exe	"Added by the OPTXPRO.132 TROJAN!"
X	Microsoft Synchronization Manager	win.exe	"Added by the SDBOT.AK WORM!"
X	Microsoft Synchronization Manager	java.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Synchronization Manager	svchosts.exe	"Added by the SDBOT-LM WORM!"
X	Microsoft Synchronization Manager	winlogon32.exe	"Added by the SDBOT.AEU WORM!"
X	Microsoft Synchronization Manager	svxhost.exe	"Added by the SDBOT-ZU WORM!"
X	Microsoft Synchronization Manager	wincfg32.exe	"Added by the SDBOT.DO WORM!"
X	Microsoft Synchronization Manager	screen.exe	"Added by the SDBOT-ACO WORM!"
X	Microsoft Synchronization Manager	devldr32.exe	"Added by a variant of the RBOT WORM! Note - do not confuse with the legitimate Creative Labs devldr32.exe file"
X	Microsoft Synchronization Manager	explorer.exe	"Added by the SDBOT-AEA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft Synchronization Manager	firewire.exe	"Added by the SDBOT-AFC WORM!"
X	Microsoft Synchronization Manager	wmedia.exe	"Added by the SDBOT.BFC WORM!"
X	Microsoft Synchronization Manager	win932.exe	"Added by the SDBOT.AH WORM!"
X	Microsoft Synchronization Manager	mircup.exe	"Added by the SDBOT.BQD WORM!"
U	Microsoft Synchronization Manager	mobsync.exe	"Microsoft Synchronization Manager for 2K/XP - used to update network copies of materials that were edited offline
X	Microsoft Synchronization Manager	alien.exe	"Added by the SDBOT-MV BACKDOOR!"
X	Microsoft Synchronization Manager	microsoft.exe	"Added by the SDBOT-OM WORM!"
X	Microsoft Synchronization Manager 2	svhostc.exe	"Added by the SLINBOT.ST WORM!"
X	Microsoft Task Manager Daemon	spoolsrv.exe	"Added by the SDBOT.FLL WORM!"
X	Microsoft Taskmanager Updater	keyboard.exe	"Added by the RBOT-ALU WORM!"
X	Microsoft Time Manager	dveldr.exe	"Added by the RBOT-HQ WORM!"
X	Microsoft Update Manager	WINRLS.EXE	"Added by the RBOT-AF WORM!"
X	Microsoft Update Manager	svshost.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update Manager	scvhost.exe	"Added by the AGOBOT.AXJ WORM!"
X	Microsoft Update Manager	scvideo.exe	"Added by the SDBOT-CVP TROJAN!"
X	Microsoft Viewer Monitor Manager	viewmon.exe	"Added by the XPAK.A TROJAN!"
X	Microsoft Virtual Service Manager	vservice32.exe	"Added by the MSNWORM.T WORM!"
X	Microsoft Web CP Manager	webcp32.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Windows DLL Services Configuration	dllmanager32.exe	"Added by the SDBOT-BTU WORM!"
X	Microsoft Windows Session Manager Subsystem	smss.exe	"Added by the PROXYSER-R TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Microsoft Windows System Service Manager	winsvc.exe	"Added by the SPYBOT.LR WORM!"
X	Microsoft(R) System Manager	sysmgr.exe	"Added by the AGENT.QTR TROJAN!"
X	Microsofts Security Manager	**.exe [** = random char]	"Added by the RBOT-WH TROJAN!"
X	MicrosoftServiceManager	mstask32.exe	"Added by the YAHA.P WORM!"
X	MicrosoftServiceManager	Wintsk32.exe	"Added by the YAHA.U WORM!"
X	MicrosoftServiceManager	EXPLORERE.EXE	"Added by the YAHA.AB WORM!"
X	MicrosoftServiceManager	msupdat.exe	"Added by the YAHA.AA WORM!"
N	Movielink Manager Uninstall	msvcmm32.exe	"Auto-update for Movielink - internet movie rental System Tray access"
X	MPM Manager	MPM.exe	"Added by the DONBOMB.A TROJAN!"
X	MS DLL Library Manager	dllsys64.exe	"Added by the RANKY TROJAN!"
X	MS Host Manager	ivhost.exe	"Added by the RBOT-BJN WORM!"
X	Ms Processe Manager	msproc.exe	"Added by the RBOT.ATO WORM!"
X	Ms task manager	tskmgr.exe	"Added by the SDBOT.CCD WORM!"
X	MS Task Manager 32	[trojan filename] .exe	"Added by the RANKY.NF TROJAN!"
X	MS taskmanager	tskmgr.exe	"Added by the RBOT-AKA WORM!"
X	MSConfig Manager	msupdate.exe	"CoolWebSearch parasite variant"
X	MsManager	msmgr32.exe	"Added by the YAHA.AF WORM!"
X	msmanager32	msmngr32.exe	"Added by the RANDON-R (or WOMANIZ.A) WORM!"
X	MSN Client Manager	msnclimgr.exe	"Added by the AUTORUN-FV WORM!"
X	MSN CNF Manager	msncnfmgr.exe	"Added by the VUNDO TROJAN!"
X	MSN Communication Manager	msncommgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN CST Manager	mancstmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Manager	cvss.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN Manager	mscmgr.exe	Unidentified malware - causes multiple browser windows to open
X	MSN Manager	msnmgrsv.exe	"Added by the IRCBOT.BAZ BACKDOOR!"
X	MSN Manager	usnmsn.exe	"Added by a variant of the IRCBOT TROJAN!"
X	MSN P2P Manager	msnp2pmgr.exe	"Added by the SLENFBOT.YH WORM!"
X	Msn Processe Manager	msni32.exe	"Added by the RBOT-ADX WORM!"
X	MSN RPC Manager	msnrpcmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Rx Manager	msnrxmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Settings Manager	msnsetmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Msn Update Manager (Sp2)	MSMSGS.EXE	"Added by the AGOBOT-NL WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Msn Updater	windatemanager.exe	"Added by the SDBOT.TS WORM!"
X	MSSQL Manager	mssqlmgr.exe	"Added by the RBOT-BWU WORM!"
N	Nero PhotoShow Media Manager	mssysmgr.exe	"Nero rebranded version of Simple Star's PhotoShow photo editing and organizing software
X	NetManagerService	ntss.exe	"Added by the BESTPICS.A TROJAN!"
X	Network Service Manager	netsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	New Csnm Manager	csmn.exe	"Added by the SDBOT.BZS WORM!"
?	NotebookManager	nbm.exe	"Associated with Acer notebook PCs. What does it do and is it required?"
X	NT Windows System Manager Loader	csrlss.exe	"Added by the AGOBOT.OX WORM!"
X	NT-Virtual Device Manager	ntvdmn.exe	"Added by the SDBOT-AAA WORM!"
X	NvCplScan	dllmanager.exe	"Added by the FORBOT.R WORM!"
X	Nvidia Startup Manager	ksvc32.exe	"Added by the AGENT-IWD TROJAN!"
U	OopsBackup.Manager	OopsBackup.exe	"Oops!Backup backup software by Altaro - ""not only allows you to bring back lost
N	Palo Alto Software Update Manager 8.0	PAS8_UD.exe	"Update manager for small business planning software from Palo Alto Software - such as Business Plan Pro
U	Panasonic HotKey Manager	HKEYAPP.EXE	HotKey management for Panasonic rugged mobile PCs
U	Philips PhotoFrame Manager	PFM30.exe	"Management software for the Philips 8FF3WMI/27 digital PhotoFrame. Used to configure the device
N	PhilipsDM	DeviceManager.exe	Device manager for Philips portable media players such as the GoGear
U	PhotoManager	PhotoManager.exe	"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
N	PhotoShow Deluxe Media Manager	mssysmgr.exe	"Simple Star PhotoShow Deluxe photo editing and organizing software
X	Points Manager	points manager.exe	"Altnet TopSearch adware"
X	pool manager	popsvr.exe	"Added by the AGENT-S BACKDOOR!"
X	POP Manager	popmgr.exe	"Added by the BCKDR-PYV BACKDOOR!"
U	Popup Terminator	GLADManager.exe	"Popup Terminator - pop-up killer"
X	PowerManager	svchost.exe	"Added by the JEEFO VIRUS! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	PROCESS SESSION MANAGER	PIDSERV.EXE	"Added by the RBOT-Y WORM!"
U	PwrUpManager	PuXpMan2.exe	"System Tray access to the Ashampoo® PowerUp XP Platinum 2 tweaking utility from Ashampoo GmbH & Co. KG - which includes (amongst others) one-click tuning
X	Quick Time file manager	quicktimeprom.exe	"Added by the SDBOT TROJAN!"
U	QuickBooks Database Server Manager	QBServerUtilityMgr.exe	"Part of QuickBooks Pro/Premier from Intuit - ""QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access."" See here for further information"
X	Random Interface Network Manager	rinsv.exe	"Added by the DELBOT-L WORM!"
X	RasCon Remote Access Service Manager	rasmngr.exe	"Added by the SPYBOT.EM WORM!"
N	Realtek HD Audio Sound Effect Manager	RTHDCPL.EXE	"Realtek HD Audio Control Panel
U	Realtek HD Sound Manager	SOUNDMAN.EXE	"Realtek Sound Manager
X	Realtek Sound Manager	Tecompntwx.exe	"Added by a variant of the IRCBOT BACKDOOR!"
U	Realtek Voice Manager	Skytel.exe	"Realtek Voice Manager
X	Register Manager	RegistryManage.exe	"Added by the SDBOT.AYH WORM!"
X	Remote Access Service Manager	rasmngr.exe	"Added by the AGOBOT.KU WORM!"
X	Remote Desktop Help Session Manager	WinRDH.exe	"Added by a variant of the SDBOT WORM!"
X	Remote Services Manager	msrmsvc.exe	"Added by the SLENFBOT.AJ WORM!"
N	Riorad Manager	riomgr.exe	"""Riorad Explorer is hands-down the most advanced Windows software companion for your Rio MP3 player"""
X	Run	Manager.exe	"Added by the DELF.EUN TROJAN! The file is found in %AppData%\Roaming\Adobe - see the link for more information"
U	Runmarc8mManager	marc8m95.exe	"MARC Sound System Manager for the Marc 8 MIDI sound card - allows for easy adjustment of the settings"
N	SBC Yahoo! Connection Manager	ConnectionManager.exe	Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection
X	ScManager	scman.exe	"Added by the FORBOT-CW WORM!"
N	SecureClean4RegManager	scregmanager4.exe	"WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data
X	Security Accounts Manager SM	samsm.exe	"Added by the SPYBOT.JE WORM!"
X	Security Agent Manager	mssams.exe	"Added by the RBOT-SV WORM!"
U	Security Manager	SecurityManager.exe	"A ComCast Internet software suite that provides a variety of features (firewall
X	Server Daemon Host Manager	sdhost.exe	"Added by the RBOT-GWC WORM!"
X	Service Control Manager	scm.exe	"Added by the AGOBOT-GD BACKDOOR!"
N	Service Manager	sqlmangr.exe	"SQL Server Service Manager - provides tray access to SQL server
X	Service Manager	SERVICEMGR.EXE	"Added by the PASSMAIL-D VIRUS!"
X	Service Manager	dxsound.exe	"Added by the PROXY-GRIC TROJAN!"
X	service manager	service.exe	"Added by the DONBOMB.A TROJAN!"
X	Service Manager	serv3manager.exe	"Added by the SDBOT-AGO WORM!"
X	Services Manager	svsmanager.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Services Manager!	svmanager.exe	"Added by the IRCBOT.ATZ BACKDOOR!"
X	Services Managers	svcmanager.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Session Manager Subsystem	smssa.exe	"Added by the RBOT-AGS WORM!"
N	Simple Star PhotoShow Media Manager	mssysmgr.exe	"Simple Star PhotoShow photo editing and organizing software
U	Sinus 1054 data WLAN Manager	Wifiusb.exe	Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter
N	SleepManager	SleepMgr.exe	"This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY
X	SManager	smanager..exe [ = digit]	"Added by the AGENT.BJO TROJAN!"
X	SManager	smanager.7.exe	"Added by the DWNLDR-GVG TROJAN!"
N	Software Manager	ISUSPM.exe	"InstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis"
N	Software Manager	issch.exe	"InstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis"
X	sountskmanager	sountaskmgr	Added by an unidentified WORM or TROJAN!
U	Speedport W 100 Stick WLAN Manager	Wifiusb.exe	Wireless management utility for the Speedport W 100 Stick WLAN USB stick
X	Spool Manager	spoolsrv.exe	"Added by the BANKER-FR TROJAN!"
X	spoolsv manager	SpoolMgr.exe	"Added by the ASSIRAL WORM!"
X	SSL Manager	amsnmsgs.exe	"Added by a variant of the SDBOT WORM!"
U	Startup Manager Scanner	StartupMonitor.exe	"Startup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans
N	STManager	drst.exe	"Dr. SpeedTouch is some sort of diagnostics software which sends out information to a server which then relays the information back to the program to test the network to see if the SpeedTouch ADSL modem connection is working properly. Not required if connected via Ethernet (and probably USB). Can cause a slow down in Win2K - see here"
X	svchost Netware Manager	svchost.exe	"Added by the EXVID.A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	SvcManager	restore3.exe	"Added by the AGENT-DSS TROJAN!"
X	SvcManager	[path to trojan]	"Added by the ZALON-A BACKDOOR!"
X	SvcManager	mdmex2.exe	"Added by the ZALON-B BACKDOOR!"
X	Svcsys Registry Manager	svcsysreg.exe	"Detected by Kaspersky as the AGENT.CV TROJAN!"
U	Synchronization Manager	mobsync.exe	"Microsoft Synchronization Manager for 2K/XP - used to update network copies of materials that were edited offline
X	Synchronization Manager	rservers.exe	"Added by the FORBOT-FM WORM!"
X	SyncManager	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
X	SysManager	Manager.EXE	"Added by the DAGGER.140 TROJAN!"
X	SysMemory manager	mdms.exe	"Added by the CIMUZ-D TROJAN!"
X	SysRes	TASKMANAGER.exe	"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X	System CGI Manager	syscgmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Config Manager	crss.exe	"Added by the AGOBOT.GH WORM!"
X	System Config Manager	smssl.exe	"Added by the AGOBOT-ZJ WORM!"
X	System CPL manager	[random filename]	"Added by the RBOT-SR WORM!"
X	System DB Manager	sysdbmg.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Download Manager	SysMgr.exe	"Added by the RBOT.CIG WORM!"
X	System Event Manager	secsvc.exe	"Added by the RBOT.BMY WORM!"
X	System Host Manager	syshost.exe	"Added by the BANWORM-C WORM!"
X	System Information Manager	Navcpe.exe	"Added by the SDBOT-QB WORM!"
X	System Information Manager	Msbb.exe	"Added by the SLINBOT.YR BACKDOOR!"
X	System Information Manager	iexplore.exe	"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	System Information Manager	mslog.exe	"Added by the DELF.AKO TROJAN!"
X	System Information Manager	no.exe	"Added by the SPYBOT.NO WORM!"
X	System Information Manager	syspass.exe	"Added by the SDBOT-MO WORM!"
X	System Information Manager	win.exe	"Added by the SDBOT-MU WORM!"
X	System Information Manager	windowsNt.com	"Added by the SDBOT-ND WORM!"
X	System Manager	svchost.exe	"Added by the BANKER-AE TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	system manager	System.exe	"Added by the FORBOT-BO WORM!"
X	System Manager	winsrv32.exe	Added by an unidentified WORM or TROJAN!
X	System Manager	sysmng.exe	"Added by the TAME-C WORM!"
X	System Manager	sysmgr.exe	"Added by the IRCBOT.AGW BACKDOOR!"
X	System Manager	User Documents.exe	"Added by the VB.GF VIRUS!"
X	System Manager	sysmngr.exe	"Added by the IRCBOT.BAQ BACKDOOR!"
X	System Manager	ncvs32.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	System Manager Updates	winsvc.exe	"Added by the AGOBOT.AEM WORM!"
X	System RAID Manager	raid64.exe	"Added by the AGENT-NNZ TROJAN!"
X	System Registry Manager	sysrgmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Service Manager	lsmas.exe	"Added by the AGOBOT-IK BACKDOOR!"
X	System Service Manager	norton.exe	"Added by the GAOBOT.AJE WORM!"
X	System Service Manager Device	svho.exe	"Added by the RBOT.GCG BACKDOOR!"
X	System Session Manager	smss.exe	"Added by the KALEL-E WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	System Startup Manager	smcss.exe	"Added by the RBOT.AMD WORM!"
X	System Task Manager	taskmrg.exe	"Added by a variant of the SPYBOT WORM! See here"
X	System Updates Manager	winserv32.exe	"Added by the AGOBOT-AGA WORM!"
X	System32 PCI Manager	syspci32.exe	"Added by the RBOT-AFR WORM!"
X	System32 TCP Manager	systcpm.exe	"Added by a variant of the RBOT WORM!"
X	System32 TCP Manager	systerm.exe	"Added by the RBOT.AFD WORM!"
X	SystemManager	Sysman32.exe	"Added by the DOWNLOADER-BW.B TROJAN!"
X	SystemManager	[random filename]	"Added by the SETTEC ROOTKIT!"
U	SystemSuite Task Manager	MXTASK.EXE	"vcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program's configuration options to enable only the parts you want running all the time - such as Virusscanner Pro"
U	T-Com WLAN Manager	TS154USB.exe	Wireless management utility for the T-Com Sinus 154 Data II WLAN adapter
X	Taesk managers	tase.pif	"Added by the RBOT-AYK TROJAN!"
?	TangoManager	TangoManager.exe	"Tango Broadband access software. Is it required?"
X	Task Manager	taskmngr.exe	"Added by the RBOT.Y WORM!"
X	Task Manager	taskman.exe	"Added by the FORBOT-T WORM!"
X	Task Manager	prcview.exe	"Added by the AGOBOT-RT WORM!"
X	Task manager	taskemngr.exe	"Added by the RBOT-AGA WORM!"
X	Task manager	TikTo.exe	"Added by the RBOT.LV WORM!"
X	Task manager	taskmngr.exe	"Added by the RBOT-AYZ WORM!"
X	Task Manager	svchost.exe	"Added by the SOHANA-P WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!"
X	Task Manager	taskmng.exe	"Added by the TIOTUA-E WORM!"
X	Task Manager	svhost32.exe	"Added by the TERMX.A WORM!"
X	Task manager	taskmgr2.exe	"Added by a variant of the RBOT WORM!"
X	Task Manager	tskmngr.exe	"Added by the RBOT-GOU WORM!"
X	Task manager	UPDATEWIN.exe	"Added by the RBOT.BBS WORM!"
X	Task manager	taskmangr.exe	"Added by the SPYBOT-CH WORM!"
X	Task Manager Win32	taskmngr32.exe	"Added by the RANCK-EX BACKDOOR!"
Y	Taskbar Button Manager	tbm.exe	"Taskbar Button Manager from Innovative Solutions - ""is a simple utility that helps you arrange the buttons on your Windows taskbar in any way you want by using drag and drop"""
X	taskmanager	taskmgr.com	"Added by the BEREB WORM!"
X	taskmanager	taskmanager.exe	"Added by the AGOBOT-TF WORM!"
X	TaskManager	[path to trojan]	"Added by the LDPINCH-CF TROJAN!"
X	TaskManager Load Module	TSKMNGR32.EXE	"Added by the SPYBOT.I WORM!"
X	taskmgr	taskmanager.exe	"Added by the BCKDR-QHT BACKDOOR!"
X	TaskS manager	taskmgrs.exe	"Added by the AGOBOT.QU WORM!"
X	Tcp Application Manager	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Tcp Application Manager	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Time Manager	TimeManager.exe	"Added by the MYTOB-BV WORM!"
N	Timed Backups Manager Startup	BACKTIME.EXE	"Backup Plus - backup software"
U	Timemanager.exe	Timemanager.exe	"Time Manager will let you track billable and non-billable time by customer
U	Touch Manager	WinLED.exe	Dell keyboard utility. Disabling can result in loss of screen saver and power saver functionality
X	Tray manager system	traysys.exe	"Added by the RIZO.A TROJAN!"
U	TrayManager	Trayman.exe	TrayManager hides system tray icons (FreeCell won't work when TrayMan is loaded)
Y	TrueMobile 1150 Client Manager	cmdel.exe	"Client Manager for the Dell TrueMobile 1150 Series PC Card - ""a wireless network PC Card that fits into any standard PC Card Type II slot. It has two LED indicators and an integrated antenna"""
N	Turbine Download Manager Tray Icon	TurbineDownloadManagerIcon.exe	"Turbine Download Manager (TDM) - download manager associated with the game ""The Lord of the Rings Online™"""
?	Tweak Manager	WinManager.Exe	"WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed?"
U	UberIcon	UberIcon Manager.exe	"Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders"
X	UNleaded Syn Manager	Edit.exe	"Added by the SLINNBOT.ALD BACKDOOR!"
N	Update Manager	UpdateManager.exe	"Searches for updates for the Rogers Yahoo! Browser - can be run manually"
U	UpdateManager	sgtray.exe	"StorageGuard from Veritas (this version by Sonic). Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop)
X	UpdateManager	updmanager.exe	"Added by the ANYHOMB.F TROJAN!"
N	updateMgr	AdobeUpdateManager.exe	Automatic updates for the Adobe Reader file viewer
X	UPnP Manager	upnpman.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	User Debug Manager	usndebug.exe	"Added by a variant of the SPYBOT WORM! See here"
X	User Manager	fcllls.exe	"Added by the ZAGABAN-B TROJAN!"
X	User Messages Manager	usnmsgs.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	User Messenger Manager	usnmsgr.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	User Sharing Manager	usnsharen.exe	"Added by a variant of the IRCBOT TROJAN! See here"
?	VDI Manager (HP)	HPO0VDX05.exe	"HP (Hewlett-Packard) related. Now - what does it do?"
X	Video Manager	videomgr.exe	"Added by the PANDEM.C WORM!"
X	Voltage Manager	[random filename]	"Added by the DREFFORT WORM!"
X	Volume Shadow Manager	vbcsvc.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	VStudio Manager	vstudio.exe	"Added by the RIZO.A TROJAN!"
U	VZAccess Manager	VZAccess Manager.exe	Verizon Access manager for enterprises
N	WaveTop Upload Manager	N/A	"WaveTop - ""Get push content from TV without an Internet connection"" - now possibly a defunct system in the US included as an optional part of WebTV in Win98"
U	WD Button Manager	WDBtnMgr.exe	Button manager installed with a western digital external disk drive. Allows you to back up your system with one click
U	WD Drive Manager	WDBtnMgrUI.exe	"System Tray access to the WD Drive Manager management software for selected external drives in the My Book and My Passport range. Hovering over the icon displays health status (temperature
U	WGWLocalManager	WGWLocalManager.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
X	Win32 Debug Manager	Win32Debug.exe	"Added by a variant of the WOOTBOT WORM!"
X	Win32 Debug Manager	microsoftupd.exe	"Added by the RBOT-GRJ WORM!"
X	Windosupdate manager	runwin32.exe	"Added by the SDBOT.NNS BACKDOOR!"
X	Windows .Net Manager	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows .Net Manager	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Config Manager	winconf.exe	"Added by the RBOT-AIT WORM!"
X	Windows Config Manager	Wincfgman32.exe	"Added by the AGOBOT-AL BACKDOOR!"
X	Windows connection manager	Internet.exe	"Added by the RBOT-APN WORM! Note - file is found in the Windows or Winnt folder. Make sure you check the link on this one
X	Windows Disk Manager	cmnvc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Download Manager	windlmngr.exe	Added by an unidentified TROJAN!
X	Windows File XP Manager	wfdmgr.exe	"Added by the SDBOT.XD TROJAN!"
X	Windows Firewall Manager	msfw.exe	"Added by the RBOT.WR WORM!"
X	Windows firewall manager	chh.exe	"Added by a variant of the RANDEX.GEL WORM!"
X	Windows firewall manager	msguard.exe	"Added by a variant of the RANDEX.GEL WORM!"
X	Windows Help Manager	svchost32.exe	"Added by the RBOT-OZ WORM!"
X	Windows Icons Manager	wicomgr.exe	"Added by the RBOT-AIF WORM!"
X	Windows Internet Manager	svchost.exe	"Added by the IRCBOT-AAC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Live Manager	winlivemgr.exe	"Added by the SHEUR.EB TROJAN!"
X	Windows Login Manager	winlogin.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Logon Manager	logon.exe	"Added by a variant of the RBOT WORM!"
X	Windows Manager	winmants.exe	"Added by the MANTAS WORM!"
X	Windows Manager	winsrv.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Windows Manager	taskmgrs.exe	"Added by the SILLYFDC.BBZ WORM!"
X	Windows Manager Control	WINMUR32.EXE	"Added by the AGOBOT-AR WORM!"
X	Windows Manager Update Inc	tgb.exe	"Added by the SDBOT-ACM WORM!"
X	Windows Memory Manager	windowsmem.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows NT Login Session Manager	WNSM.EXE	"Added by the RBOT.BIV WORM!"
X	Windows NT Session Manager	sess.exe	"Added by a variant of the RBOT WORM!"
X	Windows NT Update Manager	WINL0G0N.exe	"Added by the AGOBOT-NU WORM! Note that those are zeroes in the filename and not capital ""o"""
X	Windows Pool Manager	poolsc.exe	"Added by the OBOT.CH WORM!"
X	Windows Process Manager	winproc.exe	Added by an unidentified WORM or TROJAN!
X	Windows Processe Manager	mspn32.exe	"Added by the RBOT.AXO WORM!"
X	Windows Registry Manager	tasksmanagers.exe	"Added by the MYTOB.ER WORM!"
X	Windows Security Manager	winsecurity.exe	"Added by the AGOBOT-KI WORM!"
X	Windows Security Manager	winsecure.exe	"Affilred adware"
X	Windows Security Manager	svchost.exe	"Added by the ANTINNY.AX WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""Microsoft"" subfolder"
X	Windows Security Manager	svhost.exe	"Added by the GAOBOT.ALU WORM!"
X	Windows Service Manager	userint32.exe	"Added by the OSCABOT-C WORM!"
X	Windows Service Manager	localsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	msgs.exe	"Added by the OSCABOT-E WORM!"
X	Windows Service Manager	msnmrg.exe	"Added by the OSCABOT-G WORM!"
X	Windows Service Manager	netsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	spoolsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	svcadmin.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	svcman.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	svcmgr32.exe	"Added by the OSCABOT-D WORM!"
X	Windows Service Manager	svcrun.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	tcpsvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	websvc.exe	"Added by the DLOADER-NY TROJAN!"
X	Windows Service Manager	taskmgr.exe	"Detected by Kaspersky as the IAMBIGBROTHER.91 TROJAN! Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""fonts\svc"" sub-folder"
X	Windows Service Manager	initsvc.exe	"Added by the RBOT-BWT WORM!"
X	Windows Session Manager	smss32.exe	"Added by a variant of the RBOT WORM!"
X	Windows Session Manager Subsystem	smss.exe	"Added by the KALEL-B WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	Windows Smart Manager	smart.exe	"Added by the RBOT-SL WORM!"
X	Windows SMB Manager	smb32.exe	"Added by the RBOT-BHZ WORM!"
X	Windows Sound Manager	SndMon32.exe	"Added by the FORBOT-BU WORM!"
X	Windows Sound Manager	SndMon16.exe	"Added by a variant of the FORBOT WORM!"
X	Windows Sound Manager	sound.exe	"Added by the AGOBOT-CD WORM!"
X	Windows Sound Manager	gearsec.exe	"Added by the PUSHBOT.DF WORM!"
X	Windows System Manager	winsystem.exe	"Added by the RBOT-AN WORM!"
X	Windows System Manager	CRSL.EXE	"Added by the SDBOT.MG WORM!"
X	Windows System Manager	sysconf.exe	"Added by the MYTOB.AL WORM!"
X	Windows System Manager	smsc.exe	"Added by a variant of the RBOT WORM!"
X	Windows System Manager	crssm.exe	"Added by the RBOT-AFH WORM!"
X	WINDOWS SYSTEM MANAGER	spoolsvc.exe	"Added by the MYTOB-LY WORM!"
X	Windows System Manager	winsysmgr.exe	"Added by the IRCBOT.BJG BACKDOOR!"
X	Windows System Manager Loader	smsls.exe	"Added by the AGOBOT.TF WORM!"
X	Windows System Manager Proc	winsmc.exe	"Added by the RBOT.JH WORM!"
X	Windows Task Manager	ACCOUNT_DETAILS.DOC.exe	"Added by the QUATERS.A WORM!"
X	Windows Task Manager	taskmgn.exe	"Added by the AGENT-CIP BACKDOOR!"
X	Windows Task Manager	taskmrg.exe	"Added by the MYTOB.AV WORM!"
X	Windows Task Manager	taskgmr.exe	"Added by the MYTOB.BJ WORM!"
X	Windows Task Manager	taskmg.exe	"Browser hijacker - identified by DrWeb antivirus as ""Trojan.StartPage.601"""
X	Windows Task Manager	taskmngr.exe	"Added by the RBOT-ANM WORM!"
X	Windows Task Manager Emulator	kennewr.exe	"Added by the SPYBOT-FA WORM!"
X	Windows Taskbar Manager	internat.exe	"Added by the PROTORIDE-H WORM!"
X	Windows Taskbar Manager	[path to file]	"Added by the PROTORIDE.B WORM!"
X	Windows Taskmanager	lsassx.exe	"Added by the KELVIR.E WORM!"
X	Windows Taskmanager	iexplorer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Windows Taskmanager	service.exe	"Added by the PUSHBOT.OR WORM!"
X	Windows Taskmanager	svchost.exe	"Added by the IMBOT.AC WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Taskmanager	taskmrg.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Taskmanager	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Taskmanager	tskmngr.exe	"Added by the IRCBOT.DHR BACKDOOR!"
X	Windows Taskmanager	wdtsvc.exe	"Added by the PUSHBOT.AU WORM!"
X	Windows Taskmanager	winpifviewer.exe	"Added by the PUSHBOT.BB WORM!"
X	Windows Taskmanager	winrl.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Taskmanager	taskxphost.exe	"Added by the PUSHBOT.BI WORM!"
X	Windows Taskmanager Data	csrrss.exe	"Added by the RBOT-BBH WORM!"
X	Windows TaskManager Service	windns32.exe	"Added by the AGOBOT-JP WORM!"
X	Windows Terminal Manager	rmbsvc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows UDP Control Manager	winudpmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Update Manager	wupdmngr.exe	"Added by the RANDEX.BTB WORM!"
X	Windows Update Manager	Winlog0n.exe	"Added by the AGENT-BO TROJAN!"
X	Windows Update Manager	wupdate.exe	"Added by a variant of the RBOT WORM!"
X	Windows Update Manager	bootwiz.exe	Added by the MYBOT WORM!
X	Windows Update Manager	WindowsUpdateManager.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Update Manager for NT	wupdmgr32.exe	"Added by the SDBOT.AH WORM!"
X	Windows Updater Service Manager	winupdatr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows USB Hub Manager	usbhub.exe	"Added by the RBOT-BJX WORM!"
X	Windows User Mode Driver Manager	wdfmrg.exe	"Added by the SDBOT-ZN WORM!"
X	Windows Virtual Manager	vmnat.exe	"Added by the SILLYFDC.BCB WORM!"
X	WindowsUpdateManager	wupdmng.exe	"Added by the IRCBOT.OE BACKDOOR!"
X	WinDynManager	amsnmsg.exe	"Added by the SDBOT-IA BACKDOOR!"
X	winlog manager	winlog.exe	"Added by the DONBOMB.A TROJAN!"
?	WinManager	schost.exe	"??"
X	WinPWD Manager	wpwdmgr.exe	"Added by the RBOT-AUT WORM!"
X	Winsvr manager	DDEsvr.exe	"Added by the TIRBOT-C WORM!"
X	WINTASKMANAGER	taskgmr.exe	"Added by the MYTOB-AF WORM!"
U	Wireless Connection Manager	wirelesscm.exe	"Wireless adapter configuration utility for D-Link's range"
U	WLAN Manager	WLANManager.exe	Wireless management utility for the T-Com Speedport W 100 Card WLAN PCMCIA card
U	XtreamLok License Manager	xl.exe	"License manager for xLok (XtreamLok) - prevents software being reverse engineered"
N	Zinio DLM	ZinioDeliveryManager.exe	"Related to Zinio used to read magazines in digital rather than paper format"
X	_explore manager	_explore.exe	"Added by the SPEXTA-C TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.