sh.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	12Ghosts Wash	12wash.exe	"12Ghosts Wash - ""Protect your privacy
X	Application In System	Snxmsh.exe	"Added by the AGENT-LNV TROJAN!"
?	ChromeMark	keysh.exe	"Related to this. Don't know what keysh.exe does though and if it's required"
X	farkrish	farkrish.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X	Fash	Fash.exe	Unidentified adware
X	FBSSA	ie3sh.exe	"Fast Browser Search/Search Guard Plus parasite - installed with ""Make the Web Better"" applications such as My Web Tattoo
X	Global Startup	WinDash.EXE	"Detected by Kaspersky as the VB.Q WORM!"
U	IFSplash.exe	IFSplash.exe	I-FORCE driver for force feedback steering wheel
X	MalwareCrush	MalwareCrush.exe	"MalwareCrush rogue security software - not recommended
X	mediapluscash.exe	mediapluscash.exe	"MediaGateway adware"
X	Microsoft Security Monitor Process	flash.exe	"Added by the EGGDROP.EE BACKDOOR!"
U	MMERefresh	MMERefresh.exe	"Part of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R"
X	mswspl	searchbarcash.exe	SearchBarCash adware
N	MVS Splash	Splash.exe	Splash screen for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses
N	myCIO.com Splash	Splash.exe	Splash screen for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses
N	MySoftware NewsFlash	Newsflsh.exe	"Runs in your task bar and receives alerts and release information on MySoftware products from Avenquest"
X	Network Access	winssh.exe	"Added by a variant of the SDBOT WORM!"
U	PopupVanish	PopupVanish.exe	Pop-up blocker
N	Refresh	Refresh.exe	(Iomega) Refresh - loads the Iomega desktop icons at startup
U	SetRefresh	SetRefresh.exe	"Found on some Compaq & HP PCs. SetRefresh is a utility which attempts to optimize the monitor's refresh rate
X	SpyCrush	SpyCrush.exe	"SpyCrush rogue spyware remover - not recommended
X	Stubbish	Stubbish.exe	"Added by the STUBBOT-A WORM!"
U	WinBrush	winbrush.exe	"WinBrush - ""handy tool that keep your privacy and make your system clean. It works by cleaning up your tracks (document histories
X	Windows SSH Client	winssh.exe	"Added by the RBOT-AXC WORM!"
X	xflash	xflash.exe	"Added by the BANCJ-A TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.