wl

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	00saskda	newlock.exe saskda	"Part of Access Manager
U	802.11b+g USB Wireless LAN Utility	ZDWlan.exe	802.11b+g USB Wireless LAN Utility
U	ACWLIcon	ACWLIcon.exe	"Part of the ThinkVantage Access Connections connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
?	Aeiwlsta.exe	Aeiwlsta.exe	"IBM High Rate Wireless LAN Adapter driver. Is it required?"
X	All Sea web link	FWLink.exe	"Free screensaver
Y	AVMWlanClient	wlangui.exe	Related to broadband products from avm.de
?	AVWLPSTA	AVWLPSTA.exe	"PRISM Status Tray Applet - but what is it for and is it required?"
?	bcmwltry	bcmwltry.exe	"Broadcom Corporation Wireless Network Tray Applet. Is it required?"
N	Belkin PCMCIA WLAN Monitor	monitorbk.exe	Belkin USB Network Adapter Management utility - can be started manually
N	Blitzz BWI715	WLANmon.exe	Blitzz Technology BWI715 Wireless PC modem connection monitor
N	Broadcom Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
?	Client Access Express Welcome	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
U	Compaq Knowledge Center	silent.exe & matcli.exe	""matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address
U	Configuration Utility	wlanutil.exe	"NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)"
?	cwbwlwiz	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
N	Dell Wireless Manager UI	wltray.exe	System tray access to wireless LAN card configuration options
U	DT 11Mbps WLAN PC Card Station	DTCARDMonitor.exe	11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
U	DT 11Mbps WLAN USB Station	DTUSBMonitor.exe	11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
N	DwlClient	support.exe	Download manager for Dell support alerts
X	Hewlett Packard Manager	hpmanager.exe	"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
N	Hewlett Packard Recorder	Remind32.exe	HP multifunction registration
N	IDW Logging Tool	idwlog.exe	Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
X	KnowledgeBase GUI	wppewafaj.exe	"Added by the RBOT-GRZ WORM!"
X	Live Messanger	wllmsngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Logitech Wireless	logitechwls.exe	"Added by the MYTOB-BS WORM!"
X	Microsoft Update Machine	wlimyc.exe	"Added by the RBOT-GQN WORM!"
X	Microsoft Windows Loader	wloader.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	MS Windows Local Directory	MSWLD32.exe	"Added by a variant of the RBOT WORM!"
U	MWLExe	MwlGui.exe	"Part of McAfee Wireless Protection for Wi-Fi users"
U	NETGEAR WG111T Smart Wizard	wlan111t.exe	"Configuration utility for the Netgear WG111T multi-rate Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
U	newlock	newlock.exe	"Part of Access Manager
U	newlock.exe	newlock.exe	"Part of Access Manager
X	NTdhcp	CiKewl.exe	"Added by the QQROB-N TROJAN!"
U	QCWLICON	QCWLICON.EXE	"Part of IBM Access Connections - forerunner to the current ThinkVantage verison. Connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
X	rawload	[path to trojan]	"Added by the DARKIRC.QZ TROJAN!"
X	RelevantKnowledge	rlvknlg.exe	"Marketscore.RelevantKnowledge adware"
U	RtWLan	RtWLan.exe	"Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
U	ShowLOMControl	[strange symbol]	"Note that there is a strange symbol in the command field and in logs it's shown as ""O4 - HKLM\..\Run: [ShowLOMControl] [strange symbol]"". Additional registry information for the entry is ""Reg_DWORD 0x00000001 (1)"". It means Show ""LAN on Motherboard"" Control. On systems where you can install an external LAN interface
U	Sinus 1054 data WLAN Manager	Wifiusb.exe	Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter
U	SiSSWLED	sisswled.exe	System Tray utility for SiS 900 network cards
U	Speedport W 100 Stick WLAN Manager	Wifiusb.exe	Wireless management utility for the Speedport W 100 Stick WLAN USB stick
U	SWL	rundll32.exe [path] SWL.dll rdl	"StealthWeblog surveillance software. Uninstall this software unless you put it there yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted"
U	T-Com WLAN Manager	TS154USB.exe	Wireless management utility for the T-Com Sinus 154 Data II WLAN adapter
U	ThinkVantage Access Connections	ACWLIcon.exe	"Part of the ThinkVantage Access Connections connectivity-assistant program for IBM/Lenovo ThinkPad or 3000 Family notebook computers - ""allowing users to seamlessly switch between wired and wireless environments
U	TI WLAN	TIWLANCu.exe	"Texas Instruments TI wireless LAN products"
U	U.S.Robotics WLAN Adapter Configuration Utility	USRWLAN.exe	"U.S.Robotics LAN Adapter - wireless LAN (WLAN) configuration utility"
N	USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	"USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapter. You must uncheck ""Use Windows to configure my wireless settings"" for the program to work properly. Has Site Survey capabilities
Y	WG511WLU	WG511WLU.exe	Netgear configuration programme for the 54g wireless lan card - required to monitor and manage the lan card
U	WGWLocalManager	WGWLocalManager.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
X	Windows Live Messenger Addon	wllivemsngr.exe	"Added by a variant of the SDBOT WORM! See here"
X	Windows Live Msgs	wlivemsg.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Live Msgs!	wlivemsgs.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows live Support	wlmsngr.exe	"Added by the RBOT-BKL WORM!"
X	Windows_LowLevel_Security_Core	lsass.exe	"Added by the PADMIN-A TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Repair"
X	winlogon	wpwlogon.exe	Added by an unidentified WORM or TROJAN!
X	wl	svhost32.exe	"Added by the WOWPWS-AF TROJAN!"
X	Wlan Drier	Winusb2.exe	"Added by the WOOTBOT.DC WORM!"
X	Wlan Driver	avscan.exe	"Added by the WOOTBOT.DH WORM!"
U	WLAN Manager	WLANManager.exe	Wireless management utility for the T-Com Speedport W 100 Card WLAN PCMCIA card
N	WLAN Status Tray Applet	WLANSTA.EXE	System Tray icon for checking the status of a Wireless LAN
U	wlancfg	wlancfg.exe	Inventel wireless router related - required in order to automatically connect to the Net at bootup
Y	wlancfg5	wlancfg5.exe	"NetGear WG311v3 wireless PCI adapter driver - required in order to automatically connect to the wireless router/gateway at bootup. Note - may not install correctly on Windows9x/ME computers which have Slipstream accelerator installed. Uninstall Slipstream first
N	WLANSTA.EXE	WLANSTA.EXE	System Tray icon for checking the status of a Wireless LAN
Y	WLAN_Cfg.exe	WLAN_Cfg.exe	Linksys Instant Wireless USB Network Adapter driver
X	wlinles	svchost.exe	"Added by the LIJI-A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the ""spool"" sub-folder"
X	WLiveCD.exe	WLiveCD.exe	"Added by the VB-EQI TROJAN!"
X	wlm	[path to trojan]	"Added by the BANCOS-BCY TROJAN!"
X	wlsass	wlsass.exe	"Added by the RANKY.CY TROJAN!"
N	wltray	wltray.exe	System tray access to wireless LAN card configuration options
X	WLWin	WINSYS.EXE	"Added by the NAVER.A WORM!"
X	Wnsck2 driver	wlogf.exe	"Added by the SPYBOT-AF WORM!"
U	zzsecagent	newlock.exe login shutdown	"Part of Access Manager

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.