z.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	9UmxQPSiTJMbA	NVUKZ.exe	"Added by the AGENT-LMN TROJAN!"
X	accwizz.exe	accwizz.exe	"Added by the RULAND.A WORM!"
X	accwizzz.exe	accwizzz.exe	"Added by the RULAND.A WORM!"
X	Adwarz Spy Remover	ADWARZ.EXE	"Added by the SPYBOT-EV WORM!"
X	authz	authz.exe	"Added by an unidentified VIRUS
X	Bar Ding lolt	Analiz.exe	"Added by the RBOT-RP WORM!"
U	Bluetooth Connection Assistant	LBTWiz.exe	"Bluetooth connection manager for Logitech based bluetooth wireless products"
X	bmz	bmz.exe	"180Search adware"
N	Broadband Wizard	bbwiz.exe	"Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs"
X	BsRte	MemoteXZZ.exe	"Added by the AUTORUN-AJU WORM!"
X	ccApp	WMADZ.EXE	"Added by the RBOT-LJ WORM!"
N	cfgwiz	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
?	Client Access Express Welcome	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
X	CompanionWizard	compwiz.exe	"Part of WinAntiVirusPro 2007 rogue security software (and possibly others) - not recommended
N	Creative AGP Wizard	agpwiz.exe	Part of Creative's BlasterControl
N	csecwiz	csecwiz.exe	"Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once
X	csrss	nwiz.exe	"Added by the CHODE-J WORM!"
?	cwbwlwiz	cwbwlwiz.exe	"Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
X	dsd	zz.exe	"Added by the RBOT-FOX WORM!"
U	EOUApp	EOUWiz.exe	Intel ProSET Wireless related - provides additional configuration options for these devices
U	EOUWiz	EOUWiz.exe	Intel ProSET Wireless related - provides additional configuration options for these devices
X	ErrorWiz	ErrorWiz.exe	"ErrorWiz rogue system error and cleaning utility - not recommended
X	FMSZ	fmsz.exe	"Added by the FMSZ TROJAN!"
X	frun	derc32xz.exe	Added by an unidentified TROJAN!
X	fukerservice	fukerz.exe	"Added by a variant of the RBOT WORM!"
X	HanUpdate	hanz.exe	"Added by the RBOT-GLJ WORM!"
N	IBM Client Security Software	csecwiz.exe	"Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once
X	ipyjy	woniz.exe	"Added by the SDBOT.BQD WORM!"
N	IS CfgWiz	cfgwiz.exe	Norton Internet Security configuration wizard
X	kimochiz.exe	kimochiz.exe	"Added by the MDROP-BB TROJAN!"
X	LBTWiz.exe	LBTWiz.exe	"Added by the SDBOT-DHY WORM! Note - this is not the legitimate Logitech file which is normally located in %Program Files%\Logitech\SetPoint or %Program Files%\SetPoint. This one is located in %Windir%"
U	Logitech BT Wizard	LBTWiz.exe	"Bluetooth connection manager for Logitech based bluetooth wireless products"
N	McRegWiz	mcregwiz.exe	Product registration wizard for McAfee's range of internet security tools
X	MDN	MDNZ.exe	"Added by the RBOT.AQD WORM!"
X	MeuPrograma	accwizz.exe	"Added by the RULAND.A WORM!"
X	Mi7sft sdce	b0yz.exe	"Added by the RBOT.CWG WORM!"
X	Microsft Confige 32	msaconfigurez.exe	"Added by the RBOT.CLC WORM!"
X	Microsoft Corp SSL Certificates	windowz.exe	"Added by the RBOT-GCZ WORM!"
X	Microsoft Macro Protection Subsystems	msmacroprotxz.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Servicez Manager	servicemgrz.exe	"Added by the RBOT-ASN WORM!"
X	Microsoft Update Machine	servicz.exe	"Added by the RBOT-HU WORM!"
X	Microsoft Update Machine	servicez.exe	"Added by the SPYBOT.BI WORM!"
X	Microsoft Update Machine	serviz.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update Machine	jkfrnz.exe	"Added by the RBOT-GOZ WORM!"
X	Microsoft Update Mechene	Updatez.exe	"Added by the RBOT-GI WORM!"
X	Microsoft Windows GUI	Windowz.exe	"Added by the RANDEX.AEV WORM!"
X	Microsofts Updatez	exploirez.exe	"Added by a variant of the RBOT WORM!"
X	Micrsft Updese	xagwxz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN File Sharing Wizard	msnsharewiz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	msoffwz	msoffwz.EXE	"Added by the BANCBAN-HQ TROJAN!"
X	msupdtwiz	msupdtwiz.exe	"Added by the STRATION.DD WORM!"
N	NAV CfgWiz	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
N	NAV Configuration Wizard	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
X	nodriver	AUEKXRZ.EXE	"Added by a variant of the SPYBOT WORM!"
Y	Norton Personal Firewall	IntroWiz.exe	Part of Norton Personal Firewall or Norton Internet Security
N	Norton SystemWorks	cfgwiz.exe	Norton System Works configuration wizard. Reportedly a resource hog. Many users find they can live without loading it
X	Norton Wizzard	nwiz.exe	"Added by the GAOBOT.ADV WORM! Note - this is not the valid nVidia application that shares the same name"
X	NTSF Microsoft System	fylez.exe	"Added by a variant of the RBOT WORM!"
N	nwiz	nwiz.exe	"Part of NVIDIA's NVIEW Display Management Software - included in drivers for consumer and professional graphics products. This entry runs the ""NVIDIA Display Setup Wizard"" if you connect (or already have connected) an additional display once the drivers have been installed. In later drivers it also loads the ""nView Desktop Manager"" (if you enable it via Control Panel → NVIDIA nView Desktop Manager) if you want to use features such as Hot Keys and Zoom. In both cases nwiz.exe doesn't remain in memory"
X	oddworldz.exe	oddworldz.exe	"Added by the MULTIDR-EG TROJAN!"
X	quartz	quartz.exe	"Malware installed by different rogue security software including SpyKillerPro"
X	RavUptkt	agetlktz.exe	"Added by the QQPASS-AJ TROJAN!"
X	RAX SYSTEM	scrigz.exe	"Added by the MYTOB.KR WORM!"
?	RSRCMTZ	RSRCMTZ.exe	"??"
X	SDKCprords	SDKc55rezzz.exe	"Added by the RBOT.VD WORM!"
X	Serices Hostin	servicez.exe	"Added by the SLENFBOT.MF WORM!"
X	service updaer	qualityz.exe	"Added by an unidentified VIRUS
X	Socket Utility	svchostz.exe	"Added by the DAEMONI-E TROJAN!"
X	System	systemz.exe	"Added by the VILSEL-B TROJAN!"
X	System Service	servicez.exe	"Added by the RBOT-AOY WORM!"
X	System Service	b4db0yz.exe	"Added by the RBOT-CLO WORM!"
X	SystemTasks	filez.exe	Adult content dialler
X	SystemTasks	sexypicz.exe	Adult content dialler
X	SYSTEMZ Patch	SYSZ.exe	"Added by the ALADINZ.P TROJAN!"
U	TnPopUp	billbrz.exe	"Related to Technesis ""award-winning solutions for tracking and managing print
X	Update	hanz.exe	"Added by a variant of the RBOT-GLJ WORM!"
?	Update for Works	MSWkstz.exe	"Maybe related to later versions of MS Works?"
?	Updatewiz	updatewiz.exe	"??"
X	uz	uz.exe	"Added by the AGENT-GGH WORM!"
N	warez	warez.exe	"Warez P2P client"
X	Windows Automatical Updater	dcz.exe	"Added by the RBOT.CXS WORM!"
X	Windows DLL Loader	defragfat32z.exe	"Added by the LINKBOT.A WORM!"
X	Windows DLL Loader	defragfatz.exe	"Added by the LINKBOT.H WORM!"
X	Windows modez Verifier	winl0g0z.exe	"Added by the RBOT-FNB WORM!"
X	Windows Service	windowz.exe	"Added by the SDBOT-AYI WORM! Note - dissables the automatic startup of other software and deactivates the Microsoft Internet Connection Firewall (ICF)"
X	Windows Service Agccnt	rmizjgz.exe	"Added by the SDBOT-SIM WORM!"
X	Windows Service Agent	izszbayz.exe	"Added by the KOLAB.TC WORM!"
X	Windows Service Pack Auto Update	figgaz.exe	"Detected by Kaspersky as the AGENT.BT TROJAN!"
X	Windows Services	servicez.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Update	scrigz.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Update Manager	bootwiz.exe	Added by the MYBOT WORM!
X	Windows-XP-Service-Pack	xpspz.exe	"Added by the SDBOT-AAC WORM!"
X	Winds Sersc Agts	rzrzncrtz.exe	"Added by the RBOT-GTV WORM!"
U	WinFast Schedule	Wfwiz.exe	Leadtek WinFast TV tuner scheduler and remote control driver - required if you use the latter
X	Wins32 Online	cfgpwnz.exe	"Added by the BROPIA.R WORM!"
X	winui	z.exe	"Added by the KONDELI TROJAN!"
X	wupdate	wisvccz.exe	"Added by the ORSE-B TROJAN!"
X	yz.exe	yz.exe	"Added by the VARDO TROJAN!"
X	Zeno	nwinrqez.exe	"Added by the QEXREZ family of TROJANS!"
X	zvb0dl2X8tt	NVUKZ.exe	"Added by the AGENT-LMN TROJAN!"
N	Z_acamucli wizard	csecwiz.exe	"Setup wizard for the Client Security Software for IBM\Lenovo notebooks. This entry only runs once
X	[various names]	NopeZ.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	Trayz.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	xwiz.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ABCXYZ.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	{157627A6-2A10-4aa1-B97F-90B8DC6F24AC}	sysqkmwfedz.exe	"Added by the FAKEALERT-AH TROJAN!"
X	{DD651081-A909-45ad-BD71-2335B0ADE043}	sysutrnez.exe	"Added by the FAKEALERT-AH TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.