mon.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	2wSysTray	2portalmon.exe	"2Wire Homeportal user interface"
U	3DLabsHelperDemon	3dldemon.exe	"Directly from the programs author ""It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore)
Y	ABRegmon	ABregmon.exe	"Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?"
U	Absolute StartUp monitor	ASMon.exe	"Absolute Startup - startup monitor from F-Group Software"
N	ACDaemon	ACDaemon.exe	"Used to serve notice of product information and updates when running ArcSoft products such as TotalMedia
Y	ACMON	ACMON.exe	"ASUS Splendid ""is a breathtaking innovation that brings the video viewing experience on PC to the next level. Built into the driver of ASUS graphics cards
U	ADUserMon	ADUserMon.exe	"Part of Active Disk from Iomega - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk"
Y	Amon	AMON.EXE	"Monitoring part of Eset's NOD32 virus-scanner"
Y	Amonitor	amon.exe	"Tiny Personal Firewall"
X	AntiSpyMon	AntiSpyMon.exe	"Antispyware Protector rogue security software - not recommended"
U	AOL TopSpeedMonitor	aoltsmon.exe	"AOL's TopSpeed ""web-acceleration technology speeds up your web-browsing experience by storing and reusing elements of web pages that you visit
N	ArcSoft Connect	ACDaemon.exe	"Used to serve notice of product information and updates when running ArcSoft products such as TotalMedia
N	ArcSoft Connection Service	ACDaemon.exe	"Used to serve notice of product information and updates when running ArcSoft products such as TotalMedia
U	AsusEPCMonitor	AsEPCMon.exe	"Part of the ACPI driver for the Asus Eee PC range. Manages the Fn function keys and ""on screen display"""
X	autoload	cftmon.exe	"Added by the SOCKS-E WORM!"
X	avc	avmon.exe	Added by an unidentified TROJAN!
N	Backpack UDF	bpudfmon.exe	"Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk"
U	bandmon	bandmon.exe	"Rokario Bandwidth Monitor"
U	BHODemon 2.0	BHODemon.exe	"BHODemon ""protects you from unknown Browser Helper Objects (BHOs)
U	BitDefender for MSN Messenger	msnmon.exe	"Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website"
U	BitDefender for Yahoo! Messenger	yahmon.exe	"Bitdefender anti-virus for Yahoo! Messenger - no longer supported at the BitDefender website"
N	BitWare Print Monitor	bwprnmon.exe	"FaxServe network fax software"
U	BJPD HID Control	TVMon.exe	"Related to Canon Photo viewer"
N	Blitzz BWI715	WLANmon.exe	Blitzz Technology BWI715 Wireless PC modem connection monitor
X	BMN	strpmon.exe	"Part of CleanPCTool
X	BMN	dcmon.exe	"SystemDoctor rogue security software - not recommended
X	browser	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
N	bwprnmon.exe	bwprnmon.exe	"FaxServe network fax software"
U	Caddais BackupOnDemand	BODMon.exe	"Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing
?	CamMonitor	hpqcmon.exe	"From HP and related to digital imaging"
U	CDLoader	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
U	ChangeICON	SPMSMON.EXE	Card reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem
X	chkdrv	iemon.exe	"Detected by Symantec as the ADCLICKER TROJAN!"
X	clfmon	clfmon.exe	"Added by the TACTSLAY.E TROJAN!"
X	clfmon.exe	clfmon.exe	"Added by the AGENT-BJ TROJAN!"
X	cmonitor	startupmon.exe	"SystemDoctor rogue security software - not recommended
X	cmonitor	pasmon.exe	"SystemDoctor rogue security software - not recommended
U	CoolMon	CoolMon.exe	"""CoolMon monitors vital system stats and almost anything else you wish to display on the desktop"""
X	cpl	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
N	CPUMon	CPUMon.exe	"""CPUMon continuously displays the updated system statistics in a floating window as well as in system tray area"""
U	ctfmon	ctfmon.exe	"Supports multiple languages and alternative method inputs in Windows and MS Office. The language bar is displayed alongside the System Tray if more than one keyboard layout is enabled (for switching input languages) or
X	ctfmon	cftmon.exe	"Added by the DELIVE-A BACKDOOR! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %Windir%"
U	CTFMon	ctfmon.exe	"Family KeyLogger keystroke logger/monitoring program - remove unless you installed it yourself! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in a ""CTF"" sub-folder"
X	Ctfmon.exe	ctfmon32.exe	"CoolWebSearch Ctfmon32 parasite variant"
X	ctfmon.exe	ctfmon.exe	"Added by the RAIDYS TROJAN! Note - this overwrites the legitimate ctfmon.exe process associated with alternate text inputs which is located in %System%"
X	ctfmon.exe	msupdate32.exe	"Spy Sheriff/SpywareNO malware
U	ctfmon.exe	ctfmon.exe	"Supports multiple languages and alternative method inputs in Windows and MS Office. The language bar is displayed alongside the System Tray if more than one keyboard layout is enabled (for switching input languages) or
X	ctfmon.exe	ctfmon.exe eminem.exe	"Added by the BHARAT.A WORM!"
X	CTFMON.EXE	svchost.exe	"Added by the JUEGO-B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	ctfnnon	ctfmon.exe	"Added by the TURKOJAN.IL BACKDOOR! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %Windir%"
X	CTMON.EXE	cfmon.exe	"Added by the CLCKR-AN TROJAN!"
X	ctpmon	ctpmon.exe	"Registry Cleaner rogue - not recommended
U	CypressLinkMon	CypressLinkMon.exe	"Related to CypressViewer from Siemens that ""allows ACUSON Cypress cardiovascular system PLUS users to store
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
N	daemon	daemon.exe	"Older version of Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
X	Daemon	daemon.exe c daemon2.exe	"Added by the SELOTIMA.A WORM!"
N	DAEMON Tools	daemon.exe	"Older version of Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
N	DAEMON Tools Lite	daemon.exe	"Older version of Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
N	DAEMON Tools-1033	daemon.exe	"Older version of Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso
U	DAZEL Delivery Agent	DcDaemon.exe	"Control and send documents
X	DC6	dc6_startupmon.exe	"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
X	DC6_check	dc6_startupmon.exe	"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
X	dc6_check	dcmon.exe	"SystemDoctor rogue security software - not recommended
U	DDWMon	ddwmon.exe	"Direct Disc Writer Event Monitor from TOSHIBA"
N	Dell Alert	DAMon.exe	""Dell Alert" utility
U	Dell Photo AIO Printer 962	dlbxmon.exe	DellPhoto AIO Printer 962 Device Monitor
?	demon	demon.exe	"Part of the French Wanadoo ADSL extense pack. What does it do and is it required?"
N	DigitalWizard Monitor	dwMon.exe	"InstallShield's DigitalWizard - free
?	DISKMON.EXE	DISKMON.EXE	"??"
?	Divamon.exe	Divamon.exe	"Associated with an Eicon Networks Diva ISDN or ADSL modem - what does it do and is it required?"
U	dlccmon.exe	dlccmon.exe	Dell Photo AIO Printer 924 device monitor
U	dlcdmon.exe	dlcdmon.exe	Dell Photo AIO Printer 944 device monitor
U	dlcgmon.exe	dlcgmon.exe	Dell Photo AIO Printer 810 device monitor
U	dlcjmon.exe	dlcjmon.exe	Dell Photo AIO Printer 964 device monitor
U	dlcqmon.exe	dlcqmon.exe	Dell Photo AIO Printer 966 device monitor
U	dlcxmon.exe	dlcxmon.exe	Dell Photo AIO Printer 926 device monitor
U	dldtamon	dldtamon.exe	Dell AIO Printer V305 device monitor
U	dldtmon	dldtmon.exe	Dell AIO Printer V305 device monitor
U	dldtmon.exe	dldtmon.exe	Dell AIO Printer V305 device monitor
U	DrvMon.exe	DrvMon.exe	"Alcor drive monitor software"
Y	dslmon	dslmon.exe	Sagem DSL modem related. Apparently needed to detect the modem
U	eBayToolbar	eBayTBDaemon.exe	"eBay toolabar related - also contains eBay account Guard which monitors for fraudulent eBay sites"
X	ERS	ers_startupmon.exe	"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
X	ERS_check	ers_startupmon.exe	"Part of the WinAntiVirus Pro 2006 rogue security software - not recommended
X	eTrust Realtime Monitor	realmon.exe	"Added by the LAZAR.B TROJAN!"
?	ExxtremeHelperDemon	exxdemon.exe	"Creative Exxtreme graphics card related?"
?	fapmon	fapmon.exe	"Fair Access Policy monitor for DirecPC/DirecWay internet access"
X	File Protection Monitor	filemon.exe	"Added by a variant of the RBOT WORM!"
X	Firewall	ctfmon.exe	"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %Windir%"
N	fkSysMon	fksysmon.exe	"fkWrae SysMon - system monitor - ""displays the current memory consumption
?	Free Downloads Monitor	fdcmon.exe	"??"
X	FWDMON.EXE	fwdmon.exe	"Added by the PROXY-S TROJAN!"
U	Google IME Autoupdater	GooglePinyinDaemon.exe	"Google Pinyin Input Method Editor (IME) - allows a user to input Chinese characters by entering the pinyin of a Chinese character (with or without tone
X	hachimitsu-lemon	hachimitsu-lemon.exe	"Added by the HACHILEM TROJAN!"
X	HP	mon.exe	"Added by the SILLYFDC WORM!"
U	Hpha1mon	Hpha1mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 2.0 to 2.3 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	Hpha2mon	Hpha2mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.1 to 3.2 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
U	Hpha3mon	Hpha3mon.exe	"Supports the memory card reader on some HP Photosmart and AIO (all-in-one) printers - displaying a System Tray icon for the drive and allowing you to transfer files directly via the SAVE button. This verison is applicable for version 3.3.138 to 3.4.13 drivers - see here. Known to cause 100% CPU load in some cases. Only needed if you use this feature"
?	hpqcmon	hpqcmon.exe	"From HP and related to digital imaging"
?	hpqSRMon	hpqSRMon.exe	"Related to HP Digital Imaging products. What does it do and is it required?"
X	httpd	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	httpd	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
?	Ibmmon.exe	Ibmmon.exe	"??"
X	inetinfomon manager	inetinfomon.exe	"Added by the DONBOMB.A TROJAN!"
U	Infra-red Monitor	IRMON.EXE	System Tray access to infra-red devices. Not required unless you use infra-red devices
X	Instant Buzz Daemon	IBDaemon.exe	"Instant Buzz adware"
N	Intel PROSet Tray Icon	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
Y	InterCheck Monitor	Icmon.exe	"Part of Sophos ant-virus sofware"
Y	InterCheckMonitor	ICMON.EXE	"Part of Sophos anti-virus sofware"
N	iPalm	mon.exe	"Installed with a Panasonic iPalm digital camera. Used to upload photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded"
X	ipmon.exe	ipmon.exe	"Added by the RECERV or R3C.B TROJANS!"
Y	IPSecMon	IPSecMon.exe	"Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet"
U	IrMon	IRMON.EXE	System Tray access to infra-red devices. Not required unless you use infra-red devices
?	IRPMonitor	itcnmon.exe	"??"
X	irwftp	ftpmon.exe	"Added by the BANCBAN-BO TROJAN!"
U	Job-oversigt	taskmon.exe	"Task Monitor (on Danish language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
U	KICKMON.EXE	KICKMON.EXE	"KeepItClean - utility that deletes safe to remove files
Y	Launch LCDMon	LCDMon.exe	Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. This the LCD control panel driver on models where it's included such as the G15 and G19
X	Layersecurity Servicemonitor	LSSMON.EXE	"Added by the BANKER.ZAQ TROJAN!"
Y	LCDMon	LCDMon.exe	Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. This the LCD control panel driver on models where it's included such as the G15 and G19
N	Logitech Gaming Software	LWEMon.exe	Part of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed
Y	LT DAEMON	ltdaemon.exe	Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
N	LWEMon	LWEMon.exe	Part of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed
N	lxbtmon.exe	lxbtmon.exe	Lexmark 5200 Series printer device monitor
U	lxbumon.exe	lxbumon.exe	Lexmark 6200 Series printer device monitor
U	lxbxmon.exe	lxbxmon.exe	Lexmark 7100 Series printer device monitor
U	lxbymon.exe	lxbymon.exe	Lexmark P910 Series printer device monitor
U	lxccmon.exe	lxccmon.exe	Lexmark 3300 Series printer device monitor
N	lxcdmon.exe	lxcdmon.exe	Lexmark 6300 Series printer device monitor
N	lxcemon.exe	lxcemon.exe	Lexmark 4300 Series printer device monitor
U	lxcgmon.exe	lxcgmon.exe	Lexmark 2300 Series printer device monitor
N	lxcjmon.exe	lxcjmon.exe	Lexmark 8300 Series printer device monitor
U	lxcqmon.exe	lxcqmon.exe	Lexmark 9300 Series printer device monitor
U	lxcrmon.exe	lxcrmon.exe	Lexmark 2400 Series printer device monitor
U	lxctmon.exe	lxctmon.exe	Lexmark 5400 Series printer device monitor
U	lxcymon.exe	lxcymon.exe	Lexmark 3400 Series printer device monitor
U	lxdcamon	lxdcamon.exe	Lexmark 1300 Series printer device monitor
U	lxdcmon.exe	lxdcmon.exe	Lexmark 1300 Series printer device monitor
U	lxddamon	lxddamon.exe	Lexmark 2500 Series printer device monitor
U	lxddmon.exe	lxddmon.exe	Lexmark 2500 Series printer device monitor
U	lxdfamon	lxdfamon.exe	Lexmark 6500 Series printer device monitor
U	lxdfmon.exe	lxdfmon.exe	Lexmark 6500 Series printer device monitor
U	lxdiamon	lxdiamon.exe	Lexmark 3500-4500 Series printer device monitor
U	lxdimon.exe	lxdimon.exe	Lexmark 3500-4500 Series printer device monitor
U	lxdjamon	lxdjamon.exe	Lexmark 1400 Series printer device monitor
U	lxdjmon.exe	lxdjmon.exe	Lexmark 1400 Series printer device monitor
U	lxdmamon	lxdmamon.exe	Lexmark 5000 Series printer device monitor
U	lxdmmon.exe	lxdmmon.exe	Lexmark 5000 Series printer device monitor
U	lxdvamon	lxdvamon.exe	Lexmark X5400 Series printer device monitor
U	lxdvmon.exe	lxdvmon.exe	Lexmark X5400 Series printer device monitor
U	lxdwamon	lxdwamon.exe	Lexmark 7600 Series printer device monitor
U	lxdwmon.exe	lxdwmon.exe	Lexmark 7600 Series printer device monitor
N	LXSUPMON	LXSUPMON.EXE	"Lexmark printer related. The printer should work fine without it but what does it do?"
X	MAV_check	mav_startupmon.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	mav_startupmon	mav_startupmon.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	Messanger	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
X	Micrcsoft Certificate Services	cflmon.exe	"Added by the RBOT-FWV WORM!"
X	Microsoft CRT Monitor Manager	crtmon.exe	"Added by the ROBOTON.A WORM!"
U	Microsoft CTF Loader	ctfmon.exe	"Supports multiple languages and alternative method inputs in Windows and MS Office. The language bar is displayed alongside the System Tray if more than one keyboard layout is enabled (for switching input languages) or
X	microsoft hotmail monitor	mshotmon.exe	"Added by the MYTOB-FL WORM!"
X	Microsoft Software Update	nmon.exe	"Added by the RBOT.HZ WORM!"
X	Microsoft Urlmon	urlmon.exe	"Added by the AGENT-GOO TROJAN!"
X	Microsoft Viewer Monitor Manager	viewmon.exe	"Added by the XPAK.A TROJAN!"
X	Microsoft Vista Upgrade Validation Service	cfmon.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	microsoft xdaemon 2.0	xdaemon.exe	"Added by the DELF.D TROJAN!"
U	MotiveMonitor	motmon.exe	Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used by the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufacturer. For most users it's not required
U	MotMon	motmon.exe	Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used by the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufacturer. For most users it's not required
X	msiemon.exe	msiemon.exe	"Microsoft Security Adviser rogue security software - not recommended"
X	msmon	msmon.exe	"Added by a variant of the GEMA.D TROJAN!"
X	MSTask Monitor	mstaskmon.exe	"Added by the SDBOT-LU WORM!"
X	mwsoemon	mwsoemon.exe	"MyWebSearch parasite"
X	MyTotalSearch Email Plugin	mtsoemon.exe	"MyTotalSearchBar adware"
X	MyWebSearch Email Plugin	mwsoemon.exe	"MyWebSearch parasite"
N	NADaemon	NADAEMON.EXE	"Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after ""digital rights management"". One user reports disabling it has no detrimental affect - not required"
X	NET DEMON	ndemon.exe	"Added by the AGOBOT-LA WORM!"
X	NetMon	netmon.exe	"Added by the MIMAIL.M WORM!"
U	Network Associates Error Reporting Service	TBMon.exe	Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
X	Nfo	nfomon.exe	"Delfin Media Viewer adware related"
N	NkvMon.exe	NkvMon.exe	Nikon View 5 - for transferring pictures from Nikon digital cameras
N	NkVwMon.exe	NkVwMon.exe	Nikon View - for transferring pictures from Nikon digital cameras
X	NLS Monitor	nlsmon.exe	"Added by the RBOT-AXJ WORM!"
N	NSystemMonitor	Symmon.exe	Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging
X	ntuser	ctfmon.exe	"Added by the AGENT-GSG TROJAN! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %UserProfile%"
U	NUSB3MON	nusb3mon.exe	"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
U	NvPvrNetMon	NvPvrNetMon.exe	"Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - ""makes sure you don't miss your favorite show. If you won't be home to watch the show
X	nvsvca32	clfmon.exe	"Added by the TACTSLAY.E TROJAN!"
?	oadaemon	oadaemon.exe	"Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually?"
U	OEM02Mon.exe	OEM02Mon.exe	"Creative Live! Cam Console Auto Launcher"
?	OEM07Mon.exe	OEM07Mon.exe	"Related to Live Camera Console Auto Launcher by Creative Technology LTD. What does it do and is it required?"
Y	OE_OEM	TMAS_OEMon.exe	Related to Trend Micro PC-cillin - Internet Security 12
Y	OfficeScanNT Monitor	pccntmon.exe	"Trend Micro OfficeScan Antivirus real-time scan monitor"
N	OneTouch Monitor	OneTouchMon.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
Y	OutpostMonitor	op_mon.exe	"Monitor for Outpost Firewall PRO (and Free) from Agnitum"
X	pas_check	pasmon.exe	"SystemDoctor rogue security software - not recommended
Y	PCCIOMON.exe	PCCIOMON.exe	"Part of Trend Micro web-security products - PC-cillin 2000
?	PCMCIA Resource Monitor	nvp2pmon.exe	"NVIDIA nForce P2P Driver. What does it do and is it required?"
X	pctp_check	startmon.exe	"Part of the PcTurboPro rogue system optimization tool - not recommended
U	PDUiP6000DMon	PDUiP6000DMon.exe	"Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
U	PDUiP6210DMon	PDUiP6210DMon.exe	"Memory Card Utility for the Canon PIXMA iP6210D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
U	PDUiP6220DMon	PDUiP6220DMon.exe	"Memory Card Utility for the Canon PIXMA iP6220D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
U	PDUiP6600DMon	PDUiP6600DMon.exe	"Memory Card Utility for the Canon PIXMA iP6600D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
U	PDUiP6700DMon	PDUiP6700DMon.exe	"Memory Card Utility for the Canon PIXMA iP6600D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
X	procmon	procmon.exe	"Added by the BIONET.40A TROJAN!"
X	Program File	Progmon.exe	"Added by the PEEPER TROJAN!"
N	Promon.exe	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
Y	Rabo Session Monitor	RaboSessionMon.exe	"Related to RaboBank electronic banking software"
Y	RavMon	RavMon.exe	"RAV AntiVirus"
Y	Realtime Monitor	realmon.exe	"Realtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates"
X	Registry Integrity Checker	regintmon.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Registry Monitor	regmon.exe	"Added by the BCKDR-QKH BACKDOOR!"
U	RegUpdate	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
U	RepliGo Assistant	RepliGoMon.exe	"Cerience RepliGo software - ""any document you have on your PC can be transferred to your mobile device"""
N	RexSyMon	rexsymon.exe	"Intellisync for REX sychronization software for Xircom REX MicroPDAs for sharing information between the PDA and PC"
N	rmmon	mprmmon.exe	Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card
N	RoxioAudioCentral	RxMon.exe	"Part of Roxio EasyCD Creator 6.0 - places the Roxio AudioCentral icon in you system tray. ""Includes a player
X	rsrvmon.exe	rsrvmon.exe	"Added by the AGENT.NY TROJAN!"
N	RtlMon.exe	RtlMon.exe	Monitor for RealTek network card
?	S24EvMon	S24EvMon.exe	"Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?"
?	S3Mon	S3Mon.exe	"S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required?"
U	SAIMON	SaiMon.exe	"Saitek joystick driver"
X	Salestart	WAS7Mon.exe	"Part of the WinAntiSpyware 2007 rogue spyware remover - not recommended"
X	Salestart	dcpasmon.exe	"SystemDoctor rogue security software - not recommended
X	Salestart	strpmon.exe	"Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples"
X	Salestart	stmon.exe	"Part of rogue software including members of the AVSystemCare security suite family (see here for examples) and the PcRaiser and SystemOptimizer2008 optimization utilities"
X	Salestart	mav_startupmon.exe	"Part of the WinAntiVirus Pro 2007 rogue security software - not recommended
X	Salestart	PASmon.exe	"Part of rogue security tools
X	Salestart	dcmon.exe	"SystemDoctor rogue security software - not recommended
X	Salestart	startmon.exe	"ErrorProtector rogue system error and cleaning utility - not recommended"
U	ScanSys32	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
U	Scheduler	Scheduler daemon.exe	"Tenebril GhostSurf or SpyCatcher related scheduler - you can schedule daily
U	SDaemon	sdaemon.exe	"PC Security™ from Tropical Software - ""is the ultimate in computer security
U	sealmon	sealmon.exe	"SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word
X	Security Monitor	securemon.exe	"Added by the SLENFBOT.ABH WORM!"
X	Shelldaemon	Shelldaemon.exe	Added by a variant of the AGENT.ALN TROJAN!
N	SigmaTel StacMon	stacmon.exe	Installed with the drivers for a SigmaTel C-Major Audio card (on a Dell Inspiron 600m PC for example). Appears as though it can be disabled with no ill effects
U	SKDAEMON	SKDAEMON.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	Smart Connect Monitor	SCMon.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U	SNDMon	SNDMon.exe	"Part of Symantec's LiveUpate (eg
X	SonudMon	SonudMon.exe	"Added by the LEWOR-J TROJAN!"
N	Stacmon	Stacmon.exe	Installed with the drivers for a SigmaTel C-Major Audio card (on a Dell Inspiron 600m PC for example). Appears as though it can be disabled with no ill effects
N	Start Wingman Profiler	LWEMon.exe	Part of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed
X	StartMenu	deamon.exe	"Added by the TACTSLAY.C TROJAN!"
U	StillImageMonitor	Stimon.exe	"Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example
X	strpmon	strpmon.exe	"Part of BugsDestroyer
U	svcmon	svcmon.exe	"PersonInspect surveillance software. Uninstall this software unless you put it there yourself"
U	Symantec NetDriver Monitor	SNDMon.exe	"Part of Symantec's LiveUpate (eg
U	SysCheck32	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
X	sysmon	sysmon.exe	"Added by the BIZEX WORM!"
X	Sysmon	rpcmon.exe	"Added by the RANDEX.ATX WORM!"
X	SYSTEM	VSSMON.exe	"Added by the RBOT-AWW TROJAN!"
U	System Monitor	SYSMON.EXE	"Comes with some Aopen motherboards. Monitors CPU temp
X	System Update2	taskmon.exe	"Added by the AUTOTROJ-C TROJAN! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system"
U	System32	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
U	Systemcheck	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
X	Systems	sysmon.exe	"Added by the VIXUP-BI WORM!"
X	SystemTray Monitor	SysTraymon.exe	"Added by a variant of the SPYBOT WORM! See here"
X	SYSTMON.EXE	SYSTMON.EXE	"Added by the SILLY-H WORM!"
U	Taakcontrole	taskmon.exe	"Task Monitor (on Dutch language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
X	TaskMon	taskmon.exe	"Added by the MYDOOM.A or MYDOOM.J WORMS! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system"
U	TaskMonitor	taskmon.exe	"The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
Y	Tau monitor	Taumon.exe	"""Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system"""
X	tcpipmon	tcpipmon.exe	"Added by the CLICKER-EF TROJAN!"
?	Ticket API Monitor	tktmon.exe	"Syntegra Device Identification Logger. What does it do and is it required?"
U	TIxDSL	tidslmon.exe	Actiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start -> Programs
U	ToADiMon.exe	ToADiMon.exe	T-Online ISP software connection assistant
U	tp4mon	tp4mon.exe	"Supports the ""pointer stick"" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the ""scroll"" button to work"
U	TrackpointSrv	daemon.exe	"Supports the ""pointer stick"" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the ""scroll"" button to work"
U	TrackPointSrv	tp4mon.exe	"Supports the ""pointer stick"" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the ""scroll"" button to work"
U	Traymon	traymon.exe	Netropa Internet Receiver traymonitor. Will only launch the bar if you are connected to the internet and there's new news
Y	TrueVector	VSMON.EXE	Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this
U	Trunk32	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
U	TSE_PLUtil	PLBkMon.exe	"Prolific USB Flash Disk Log On Application"
?	tsyssmon	tsyssmon.exe	"Found in a Toshiba\sysstability directory"
?	UFD Monitor9382	ufdlmon.exe	"Part of USB Flashdisk software - what does it do and is it required?"
?	UltraDVDMon	DVDMon.exe	"UltraDVD DVD player software - is it required?"
U	UnHackMe Monitor	hackmon.exe	"UnHackMe allows you to detect and remove a new generation of 'invisible' Trojan programs called ""rootkits"""
U	UPSMON	UPSMON.exe	"UPSMON Power Management software"
U	USB 3.0 Monitor	nusb3mon.exe	"Included with external USB 3.0 hard drives based upon NEC's µPD720200 controller (and maybe others in the future) such as the Western Digital My Book 3.0 range. Disabling it does not appear to cause a problem - but it may be required to achieve full USB 3.0 transfer speeds"
U	V0220Mon.exe	V0220Mon.exe	"Creative Live! Cam Console Auto Launcher"
U	V0230Mon.exe	V0230Mon.exe	"Creative Live! Cam Console Auto Launcher"
Y	V0250Mon.exe	V0250Mon.exe	Part of Creative Webcam Launcher
X	vidmon	VIDMON.EXE	"Delfin Media Viewer adware related"
X	Virtual CDROM	deamon.exe	"Added by the RBOT.VP WORM!"
N	VirtualCloneDrive	VCDDaemon.exe	"Virtual Clone Drive
X	VMware hptray	hpmon.exe	"Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not a legitimate VMware entry"
X	was_check	PASmon.exe	"Part of the ErrorSafe rogue system error and cleaning utility - not recommended"
X	wdmon	wdmon.exe	Detected as the BUZUS.DVE TROJAN!
N	Wildwire Monitor	WWMon.exe	This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem
X	Win32	sysmon.exe	"Added by the MYTOB-HQ TROJAN!"
X	Windows Live Messenger 8.12	ctfmon.exe	"Added by the LIPARK-A WORM! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %UserProfile%"
X	Windows Monitor	winmon.exe	"Added by the SDBOT.VB WORM!"
X	Windows Monitoring Service	winmon.exe	"Added by a variant of the SDBOT WORM!"
X	WINDOWS SYSTEM	winmon.exe	"Added by the MYTOB.GB WORM!"
U	WinGate Engine Monitor	wgengmon.exe	"WinGate Internet Client Dialup Monitor - component of WinGate proxy server software. Displays the status of the WinGate engine
X	Winsock2 driver	CFTMON.EXE	"Added by a variant of the IRCBOT BACKDOOR!"
U	WinSysCheck	sb32mon.exe	"Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!"
X	WinXPService	ctfmon.exe	"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in a ""ctf"" sub-folder"
N	WooCnxMon	CnxMon.exe	"Wanadoo ISP software related - not required - here's how to bypass it"
U	Write DVD-R!	saimon.exe	"Saimon's WriteDVD! ""gives total support for DVD-RAM drives. It provides many functions such as setting partitions on DVD-RAM disks and FixDVD! can diagnose and repair UDF formatted disks"""
U	WrtMon.exe	WrtMon.exe	"Related to Presto PageManager which is bundled with Canon Scanners"
X	yemarvd	sysmon.exe	"Added by the AGENT-CH TROJAN!"
X	Z	zmon.exe	"Added by the DELBOT-AO WORM!"
X	Zone Alarm	vsmon.exe	"Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector"
X	[various names]	PasswdMon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	InpriseMon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	prcmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	stuffmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	utsgmon.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.