secure

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	.mssecure	mssecure.exe	"Added by the DDOS_BOXED.X TROJAN!"
X	APcSecure	APcSecure.exe	"APcSecure rogue security software - not recommended
X	b3d	BDEsecureinstall.exe	"B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in the ""System"" directory. (3) Disable and ideally delete it from the registry. (4) Remove the ""BDE"" directory and all its contents"
X	Bat	secure2.bat	"Added by the ZCREW.C TROJAN!"
?	Compaq Computer Security	"Rundll32.exe SECURE32.CPL	Service"
X	Current Security Config	csecure.exe	"Added by the RBOT-AMO WORM!"
X	Device Security	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Device Security Manager	dvcsecure.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	EMBASSY Trust Suite Secure Update	AutoUpdate.exe	"Updates for Wave Systems Corp. Embassy Trust Suite - ""delivers advanced levels of security to the client PC using the TPM security chip found on most enterprise PCs today"""
X	F-Secure 2005	svchost.exe	"Added by the BIFROSE-CH TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Y	F-Secure 2006	fspex.exe	"F-Secure Anti-Virus automatic updater"
X	F-Secure Gatekeeper	[malware name].exe	"Added by the NUWAR.AXQ WORM!"
U	F-Secure Management Agent	FSMA32.EXE	"F-Secure antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products"
Y	F-Secure Manager	FSM32.EXE	"F-Secure antivirus - carry out scheduled virus scans automatically"
Y	F-Secure Startup Wizard	FSSW.EXE	"F-Secure antivirus"
Y	F-Secure TNB	TNBUtil.exe	"F-Secure antivirus"
U	Fortis Secure Layer Config	cseinst.exe	Fortis Bank Home Banking part. Installed during the installation of the software necessary to run the Home Banking. According to Fortis Bank this will not in any way be harmful to the system or relay system information
U	GoTrusted	GoTrusted Secure Tunnel.exe	"""GoTrusted is the fast
X	HF Security	hfsecure.exe	"Added by the AGOBOT-TI WORM!"
X	InSysSecure	InSysSecure.exe	"InSysSecure rogue security software - not recommended
X	KvmSecure.exe	KvmSecure.exe	"KvmSecure rogue security software - not recommended
X	MenaceSecure	pgs.exe	"MenaceSecure rogue security software - not recommended. A member of the AVSystemCare family"
X	Microsoft DLL Authentification	dllsecure.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Information	securenet.exe	"Added by the SDBOT.AJM WORM!"
X	MicroSoft Remote Secure Service	MSRSS.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Secure	Messenger.NET Service	"Added by the FORBOT-AM WORM!"
X	Microsoft Secure Messenger.NET Service	securitychk.exe	"Added by the SDBOT.VT WORM!"
X	Microsoft Windows Secure	windocs.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Windows Secure	windocs.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft Windows Secure Server	rpcxWindows.exe	"Added by the RBOT-LL WORM!"
X	Microsoft Windows Secure Update	rpcxwinupdt.exe	Added by an unidentified WORM or TROJAN!
X	Microsoft Windows Securety	wurguar.exe	"Added by the RBOT-KY WORM!"
X	MicrosoftCorp	securebind.exe	"Added by the INJECT TROJAN!"
X	MicrosoftNAPC	securebind.exe	"Added by the INJECT TROJAN!"
X	MSN Security Agent	msnsecure.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MyPcSecure	MyPcSecure.exe	"MyPcSecure rogue security software - not recommended
X	Office Monitor Secure Systema	absecure32.exe	"Added by the RBOT.FPW WORM!"
X	PcSecureNet	PcSecureNet.exe	"PcSecureNet rogue security software - not recommended
X	PCSecureSystem	pgs.exe	"PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family"
X	PcsSecure	PcsSecure.exe	"PcsSecure rogue security software - not recommended
X	Provan Security	psecure.exe	"Added by the RBOT.BRV WORM!"
X	rundll***	die.exe [path] secure.bat	"Added by the SUMTAX TROJAN! where *** is 134
X	rundll***	die.exe [path] secure.exe	"Added by the SUMTAX TROJAN! where *** is 134
X	secure	[random].exe	"DealHelper adware"
X	secure	svshost.exe	"Added by the RBOT-AFO WORM!"
X	Secure AntiVirus Pro	av.exe	"Secure AntiVirus Pro rogue security software - not recommended
X	secure socket layer	wins32a.exe	"Added by an IRCBOT TROJAN!"
X	Secure Socket Layer Certification	sslcert.exe	"Added by the VANEBOT-AN WORM!"
X	Secure System	integitor.exe	"Added by the AGOBOT.ACI WORM!"
X	Secure32	Shell32.com StartUp	"Added by the BRONTOK-CJ WORM!"
X	Secure64	Regedit32.com StartUp	"Added by the BRONTOK-CJ WORM!"
N	SecureClean4RegManager	scregmanager4.exe	"WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data
N	SecureClean4Tray	sctray4.exe	"WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data
X	SecureCleaner	SecureCleaner.exe	"SecureCleaner spyware remover - not recommended
N	SecureCleanIEClean	SCIEClean.exe	"SecureClean - scans your system for hidden temporary files
X	SecureExpertCleaner	sec.exe	"Secure Expert Cleaner rogue privacy program - not recommended
X	SecureFighter	SecureFighter.exe	"SecureFighter rogue security software - not recommended
U	SecureItPro	Secureitpro470p.exe	"SecureIt Pro - lock your computer when you're not there
X	SecureKeeper	SecureKeeper.exe	"SecureKeeper rogue security software - not recommended
X	SecureLogin	Mslg32.exe	"Added by the REDZED WORM!"
U	SecureOnlineAccountNumbers	SOAN.exe	"Related to Secure Online Account Numbers by Discover(R) Card from Orbiscom Ltd. Secure and innovative payment solutions"
X	SecurePcAv	SecurePcAv.exe	"SecurePcAv rogue security software - not recommended
X	SecurePCCleaner	GDC.exe	"SecurePCCleaner rogue privacy tool - not recommended
U	SecurePCSolutionsBootCheck	BootCheck.exe	"1 Click Fixer PLUS from Secure PC Solutions ""takes the guesswork out of locating and solving problems in the Windows registry"""
X	secures23	mssecure.exe	"Added by the AGOBOT-ABY WORM!"
X	SecureVeteran	SecureVeteran.exe	"SecureVeteran rogue security software - not recommended
X	SecureWarrior	SecureWarrior.exe	"SecureWarrior rogue security software - not recommended
X	Security Center Distribution	securesec.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Security Monitor	securemon.exe	"Added by the SLENFBOT.ABH WORM!"
X	Security System	securesys.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	SmallAndSecure	mssecure.exe	"Added by the RBOT.CU WORM!"
X	Spyware-Secure	Spyware-Secure_trial.exe	"Spyware-Secure rogue spyware remover - not recommended
X	Symantec Secure Server	svrhost.exe	"Added by the IRCBOT-UB TROJAN!"
X	TotalSecure2009	scan.exe	"Total Secure 2009 rogue security software - not recommended
N	WebSecureAlert	WebSecureAlert.exe	"WebSecureAlert - ""helps to protect your browser security by monitoring for unauthorized tampering with Internet Explorer's security settings
X	Win Secure Update	[random filename]	"Added by the RBOT-AGI WORM!"
X	Win Security	winsecure.exe	"Added by the SLENFBOT.RD WORM!"
X	Win32 Secure	msconfigsvc.exe	"Added by a variant of the SDBOT WORM!"
X	Win32 Security Protocol	secure32.exe	"Added by the RBOT-ETI WORM!"
X	Windowfdgfds DLL fgfdg Verifier	winsecure.exe	"Added by a variant of the RBOT WORM!"
X	Windows Insecure	[path to worm]	"Added by the RBOT-FSM WORM!"
X	Windows Proffesional Security	WinSecure32.exe	"Added by the AGOBOT.VA WORM"
X	Windows secure	setver32.exe	"Added by the SPYBOT.EP WORM!"
X	Windows Secure Connection	winsc.exe	"Added by the SDBOT.BTN WORM!"
X	Windows Secure Fix	iPodFixer.exe	"Added by the WOOTBOT.BM BACKDOOR!"
X	Windows Secure Layer	[random filename]	"Added by the RBOT.DRF WORM!"
X	Windows Secure Messaging System	msnmsgrsrvc.exe	"Added by the RBOT-RE WORM!"
X	Windows Secure Services	ssms.exe	"Added by the RBOT-GAR WORM!"
X	Windows Secure talal32	[7 random letters].exe	"Added by the RBOT.HTP TROJAN!"
X	Windows Secure Update	winupser.exe	"Added by the RBOT-GCG WORM!"
X	Windows Secure Update	WinSecUp.exe	"Added by the RBOT-GCD WORM!"
X	Windows Secure Update	load.exe	"Added by the FORBOT-GU WORM!"
X	Windows Secure Update	WinSecure.exe	"Added by the RBOT-GDO WORM!"
X	Windows Securety	wurger.exe	"Added by the AGOBOT-NC BACKDOOR!"
X	Windows Security Center Notification Applsee	sysecurex.exe	"Added by a variant of the RBOT-GKX WORM!"
X	Windows Security Manager	winsecure.exe	"Affilred adware"
X	Windows Security Tool	WinSecure.exe	"Added by the AGENT-GPY TROJAN!"
X	winsecure	winsecure.exe	"Browser hijacker
X	WinSecure	[random].exe	"Added by the AGENT-LR TROJAN!"
X	Winsecure Antivirus	Secureantivirus.exe	"Added by a variant of the SPYBOT WORM!"
X	WinSecureAv	pgs.exe	"WinSecureAv rogue security software - not recommended
X	WinSecured32	ssmr.exe	"Added by a variant of the FORBOT WORM!"
X	[random characters]	securewinload32x.exe	"Added by the OPTIXP-N TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.