xy

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
U	A4Proxy	A4Proxy.exe	"Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites"
?	addproxy	addproxy.exe	Related to Adobe Photoshop
N	Adobe Photo Downloader	apdproxy.exe	"Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here)"
X	BrowseProxy	FindService.exe	"Actual Names (AdvSearch) Internet Keywords parasite"
X	bxproxy	bxproxy.exe	"Added by the BXPROXY TROJAN!"
X	bxproxy	[random].dll	"SoftStop rogue security software - not recommended"
U	ccProxy	CCPROXY.EXE	"Part of Norton Internet Security
X	ccPrxy.exe	ccPrxy.exe	"Added by the SHIPUP-H WORM!"
Y	CcPxySvc	CCPXYSVC.exe	"Part of Norton's AntiVirus 2003
X	Configuration Loader	msgfixy.exe	"Added by the SLINBOT.QW BACKDOOR!"
X	dpcproxy	dpcproxy.exe	"Added by the GOLDENP-A TROJAN!"
Y	DPCProxyLoadOnStartup	dpcstart.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
X	ELNKProxy	smproxy.exe	"Surfmonkey adware"
Y	Email Protection	emlproxy.exe	"AntiVirus Quick Heal - E-mail protection"
U	FaxCtrl.exe	ASMediaProxyServer.exe	"Part of Avaya's Contact Center Express - ""a multi-channel
U	Fellowes Proxy	R3proxy.exe	Installed with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
X	Gay_Sexy_**	Gay_Sexy_**.exe	Premium rate adult content dialler (where * is a random char)
X	ixproxy	[path to trojan]	"Added by the XORPIX-A TROJAN!"
U	LocalProxy	proxy4free.exe	"""ProxyTools is a package of Perl network utilities designed mainly to assist those whose Internet access is censored
X	Microsoft Windows DLL Services Configuration	proxy.exe	"Added by the SDBOT-ZL WORM!"
X	msconfig.exe	proxy.exe	Added by a variant of the AGENT.AH downloader TROJAN!
N	NetPumper	NetPumperIEProxy.exe	"NetPumper download manager - bundles Cydoor and SaveNow adware
Y	Norton eMail Protect	POPROXY.EXE	"Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed
X	odnexy	odbnsy.exe	"Added by the VESLORUKI.DWJ TROJAN!"
X	OSS	ossproxy.exe	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
X	OSSProxy	OSSPROXY.EXE	"MarketScore parasite - ActiveX control used to download premium-rate dialers"
?	PmProxy	PmProxy.exe	"Associated with Analog Devices ""SoundMAX"" audio chipset - often built-in to motherboards. What does it do and is it required?"
Y	Poproxy	POPROXY.EXE	"Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed
U	Privoxy	privoxy.exe	"Privoxy - web proxy with advanced filtering capabilities for protecting privacy
Y	ProxyCap	ProxyCap.exe	"""ProxyCap enables you to tunnel Internet applications through HTTP
U	ProxyFirewall	ProxyFirewall.exe	"Proxy Firewall by Unique Internet Services
U	ProxyWay	proxyway.exe	"ProxyWay anonymous proxy surfing software"
U	PSwitch	ProxySwitcher.exe	"""Proxy Switcher offers full featured connection management solution"" as different internet connections often require completely different proxy server settings and it's a real pain to change them manually"
U	pumcfgp	proxycfg.exe	"""GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"""
U	scheduler_proxy Application	scheduler_proxy.exe	"Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates)
X	Sexy_Blondes	Sexy_Blondes.exe	"Added by the Sexy DIALER! Related also to Hot Tarts DIALER!"
X	Sexy_sg	Sexy_sg.exe	Premium rate adult content dialler
X	superproxy	superproxy.exe	"Added by the DELBACK-B TROJAN!"
X	Sygate Personal Firewall	sexy.exe	"Added by the RBOT-XY WORM!"
X	SystemTasks	sexypicz.exe	Adult content dialler
Y	tmproxy	tmproxy.exe	"Part of Trend Micro web-security products - Internet Security 2005
X	tor anonymous proxy	tor32.exe	"Added by the SDBOT-ADR WORM!"
U	TVT Scheduler Proxy	scheduler_proxy.exe	"Found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks. Included with versions of ThinkVantage System Update (for software updates)
Y	VrProxyc	vrproxyc.exe	"Part of the HAURI ViRobot series of internet security products. HAURI's ViRobot engine is included in those used by VirusTotal
Y	VrProxyd	vrproxyd.exe	"Part of the HAURI ViRobot series of internet security products. HAURI's ViRobot engine is included in those used by VirusTotal
X	Win Proxy32 Protocol	bsvtem.exe	"Added by a variant of the SDBOT WORM!"
X	WinMenssage	winmaxy.exe	"Added by the BANCOS TROJAN!"
U	WinProxy	WinProxy.EXE	""WinProxy is the world-first proxy server and a firewall with integrated mail server for Windows 95/98/ME/NT/2000/XP""
X	Winproxy Personal	WINPROXY.EXE	"Added by the SDBOT.BMF WORM!"
X	xy	svhost32.exe	"Added by the LINEAG-ABB TROJAN!"
X	[various names]	ABCXYZ.exe	"Wareout - malware masquerading as a spyware and dialer remover"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.