svc32.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	?ekio Startups	?nksvc32.exe	"Added by the AGOBOT-OV WORM where ? is a random character"
X	DLLService32	dllsvc32.exe	"Added by the AGOBOT.VX WORM!"
X	Dmsvc32	Dmsvc32.exe	"Added by the AGOBOT.ABU WORM!"
X	Fen Startups	fensvc32.exe	"Added by the RANDEX.CCF WORM!"
X	Fenio Startups	fnesvc32.exe	"Added by the AGOBOT-OS BACKDOOR!"
X	Gekio Startups	gnksvc32.exe	"Added by the AGOBOT.AFJ WORM!"
X	Generic Host Process for Win32 Services	winsvc32.exe	"Added by the SDBOT-P WORM!"
X	Generic Service Process	regsvc32.exe	"Added by the GAOBOT.UJ or GAOBOT.UL WORMS!"
X	Generic Services Process	regsvc32.exe	"Added by the GAOBOT.SY WORM!"
X	Gmsvc32	gmsvc32.exe	"Added by the AGOBOT.ABN WORM!"
X	Hekio Startups	Hnksvc32.exe	"Added by the AGOBOT-QE WORM!"
X	HMI PowerSystem	hmisvc32.exe	"Added by the RANDEX.CZZ WORM!"
X	HML PowerSource	hmlsvc32.exe	"Added by the SDBOT-XL WORM!"
X	HMV PowerSource	hmusvc32.exe	"Added by the SDBOT-YW WORM!"
X	HOI Services	holsvc32.exe	"Added by the AGOBOT-SF WORM!"
X	HPl Services	hmlsvc32.exe	"Added by the AGOBOT-SI WORM and variants!"
X	HQI Services	hqisvc32.exe	"Added by the AGOBOT-RO WORM!"
X	HQI Services	hqlsvc32.exe	"Added by the AGOBOT-RP WORM!"
X	Hrn_qtv	hrnsvc32.exe	"Added by the SDBOT-AET WORM!"
X	JvcHost	jvcsvc32.exe	"Added by the AGOBOT-AIU WORM!"
X	mapisvc32	mapisvc32.exe	"Added by the KX VIRUS and also recognised by Symantec as FPAI adware"
X	Microsoft Netview	mssvc32.exe	"Added by an unidentified VIRUS
X	Microsoft Network Services Controller	mmsvc32.exe	"Added by the NANPY-A WORM!"
X	Microsoft Service 32	mssvc32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Spool Svc	spoolsvc32.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Update Machine	WINSVC32.EXE	"Added by the RBOT.CU WORM!"
X	MSRegSvc	regsvc32.exe	Homepage hijacker that changes your homepage to an adult content site
X	mssvc32	mssvc32.exe	"Added by the AGOBOT-ME WORM!"
X	MSTaskbar 32	tbsvc32.exe	"Added by the RBOT.BQZ WORM!"
X	msvc32	msvc32.exe	"ClientMan parasite variant"
X	msvc32	msvc32.exe	"Added by the AGOBOT-NT WORM!"
X	MySLScan	msvc32.exe	"Added by the FORBOT-EH WORM!"
X	Network Administration Service	rsvc32.exe	"Added by the RBOT.ABH WORM!"
X	Nvidia Control Daemon	nksvc32.exe	Added by an unidentified WORM or TROJAN!
X	Nvidia Control Panel	ncsvc32.exe	"Added by an unidentified VIRUS
X	Nvidia Startup Manager	ksvc32.exe	"Added by the AGENT-IWD TROJAN!"
X	PDA Commander	stisvc32.exe	"Added by the AGOBOT-TX WORM!"
X	Print Spooler	spoolsvc32.exe	"Added by the SDBOT.BB TROJAN!"
X	regsvc32	regsvc32.exe	Homepage hijacker that changes your homepage to an adult content site
X	RunServices	runsvc32.exe	"Added by the AGOBOT.QJ WORM!"
X	SMSvc32	smsvc32.exe	"Added by the AGOBOT-OL WORM!"
X	svc32	svc32.exe	Identified as a variant of the Banker-EQC/DLoader.GPJI malware
X	SysPool	MSSVC32.EXE	"Added by the BANCBAN-IO TROJAN!"
X	System Document Application	winsvc32.exe	"Added by the SDBOT-VA WORM!"
X	System File Drivers	nvsysvc32.exe	"Added by the AGOBOT.WJ WORM!"
X	Task Commander	regsvc32.exe	"Added by the AGOBOT-RX WORM!"
X	Task Scheduler Engine	schedsvc32.exe	"Added by the RBOT-ASJ WORM!"
X	TCP Internet Services	TCPSVC32.EXE	"Added by the SPYBOT.X TROJAN!"
X	Vekio Startups	Pnksvc32.exe	"Added by the AGOBOT.AJG WORM!"
X	Windows DLL Services	winsvc32.exe	"Added by the RBOT-ZF WORM!"
X	Windows driver update	dmsvc32.exe	"Added by the SDBOT-GP BACKDOOR!"
X	Windows Generic Services	winsvc32.exe	"Added by the AGOBOT-ZF BACKDOOR!"
X	Windows Services	winsvc32.exe	"Added by the MYTOB-CB WORM!"
X	WINDOWS SYSTEM	winsvc32.exe	"Added by the MYTOB.HH WORM!"
X	Windows Workstation Service (32-bits)	wkssvc32.exe	"Added by a variant of the SDBOT WORM!"
X	winsvc32	winsvc32.exe	"Added by the IRCBOT-AEG WORM!"
X	winsvc32.exe	winsvc32.exe	"Added by the GREPAGE TROJAN!"
X	wscsvc32.exe	wscsvc32.exe	"Antivirus rogue security software - not recommended
X	Zekio Startups	znksvc32.exe	"Added by the AGOBOT-AGI WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.