Added by the Troj/Goldun-R password stealing trojan. If you are infected with this you should immediately change all your passwords and bank pins. This infection utilizes the estsprt.sys rootkit to hide itself.
Added by the Troj/Haxdoor-CN rootkit infection. This file is installed as system driver and is used to hide processes, files, and registry keys from being seen.
Added by the Troj/Haxdoor-R rootkit. This infection makes it so you can not see certain processes, files, or registry keys on your computer. It is usually installed in conjunction with other malware.
Added by the Troj/Goldun-G password stealing trojan. If you have this infection you should change all your passwords. This infection utilizes the IESPRT.SYS rootkit to hide itself.
It is assumed that users are familiar with the operating system they
are using and comfortable with making the suggested changes. BleepingComputer.com will not
be held responsible if changes you make cause a system failure.
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them
listed via this method. Pressing CTRL+ALT+DEL identifies programs that
are currently running - not necessarily at startup.
Therefore, before ending a task/process via CTRL+ALT+DEL just because
it has an "X" recommendation, please check whether it's in MSCONFIG or
the registry first. An example would be "svchost.exe" - which doesn't
appear in either under normal conditions but does via CTRL+ALT+DEL. If
in doubt, don't do anything.