O20 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O20 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (6) [1] 2 3 ... Last »

Name	Filename	Status	Description
<not used>	tawaluvu.dll	X	Added by the Troj/Sadop-A Trojan.
<not used>	ms32clod.dll	X	Added by the Troj/Spy-EC Trojan.
reset5c	reset5c.dll	X	Added by the Troj/DwnLdr-HTJ Trojan.
<not used>	liser.dll	X	Related to the System Security rogue anti-spyware program.
<not used>	blocker.dll	X	Added by the WinBlueSoft rogue anti-spyware program. This Trojan disables the running of any application unless it is named a certain way. This essentially takes your computer ransom until you purchase WinBlueSoft, which will then remove this infection.
winxyl32	winxyl32.dll	X	Added by the Troj/Nebule-B Trojan.
<not used>	fuvokevu.dll	X	Added by the Troj/Dwnldr-HQB downloader Trojan.
NTP	CryptWan.dll	X	Added by the Troj/PWS-AZQ password-stealing Trojan.
Love	LoveFly.dll	X	Identified by F-Prot as a variant of the W32/Downloader.F.gen!Eldorado malware.
System	winnet.dll	X	Added by the BKDR_AGENT.XZMS backdoor.
<not used>	mega2.dll	X	Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Inject.ouw Trojan.
<not used>	mega.dll	X	Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Inject.ouw Trojan.
udt	udt.dll	X	Added by the W32/Autorun-VO removable media worm.
isapips32	isapips32.dll	X	Added by the TROJ_AGENT.AQR Trojan.
sbfxi	sbfxi.dll	X	Added by a variant of the Goldun.Fam Trojan.
<not used>	GameMon.des	X	Added by the Trojan.Downexec.C Trojan. Trojan.Downexec.C is a Trojan horse that may download files and steal information from the compromised computer.
swapdm	swapdm.dll	X	Added by a variant of the Goldun.Fam Trojan.
modzlib	modzlib.dll	X	Added by a variant of the Goldun.Fam Trojan.
syncps	syncps.dll	X	Added by a variant of the Goldun.Fam Trojan.
modgzip	modgzip.dll	X	Added by a variant of the Goldun.Fam Trojan.
xliftm	xliftm.dll	X	Added by a variant of the Goldun.Fam Trojan.
snjava	snjava.dll	X	Added by a variant of the Goldun.Fam Trojan.
sbrige	sbrige.dll	X	Added by a variant of the Goldun.Fam Trojan.
wrapkm	wrapkm.dll	X	Added by a variant of the Goldun.Fam Trojan.
mckwave	mckwave.dll	X	Added by a variant of the Goldun.Fam Trojan.
priarsz	priarsz.dll	X	Identified as a variant of the Goldun infection.
mt49hub	mt49hub.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the msvtch.sys rootkit.
status	status.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the tage32.sys rootkit.
mdhash	mdhash.dll	X	Added by a variant of the Goldun.Fam Trojan.
kryostm	kryostm.dll	X	Added by a variant of the Goldun.Fam Trojan.
ctlsys	ctlsys.dll	X	Added by a variant of the Goldun.Fam Trojan.
hpstp	hpstp.dl	X	Added by a variant of the Goldun.Fam Trojan.
acpiz	acpiz.dll	X	Added by a variant of the Goldun.Fam Trojan.
QConGina	QConGina.dll	Y	GINA used by the IBM Access Connections software.
<not used>	karna.dat	X	Added by the Troj/FakeVir-GL Trojan.
Csrss	csrss5.dll	X	Identified by Avira as a variant of the TR/Agent.rnn malware.
mt47hub	mt47hub.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the svitch.sys rootkit.
gzipmod	gzipmod.dll	X	Related to the Haxdoor infection.
winlig32	winlig32.dll	X	Added by the Troj/Geezo-F Trojan.
asplug	asplug.dll	X	Added by a variant of the Goldun.Fam Trojan. This infection utilizes the asplg.sys rootkit to hide itself.
arm80reg	arm80.dll	X	Identified as a variant of the TrojanProxy.Xorpix malware.
arm65reg	arm65.dll	X	Identified as a variant of the Trojan-Proxy.Win32.Xorpix malware.
__c0028830	__c0028830.dat	X	Added by the Troj/Mdrop-BUX Trojan.
winxtx32	winxtx32.dll	X	Added by the Troj/Mdrop-BUO Trojan.
<not used>	karina.dat	X	A variant of the Trojan.Agent malware.
mcrwave	mcrwave.dll	X	Identified as a variant of the Trojan-Spy.Win32.Goldun.api malware.
<not used>	avgrsstx.dll	Y	Related to the AVG Free antivirus software.
lstream	lstream.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the fsxxd.sys rootkit.
<not used>	adialhk.dll	Y	Related to Kaspersky Internet Security.
upsctl	upsctl.dll	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
WinNt64	WinNt64.dll	X	Added by the Troj/DwnLdr-HEI Trojan.
WinCtrl32	WinCtrl32.dll	X	Added by a variant of the Trojan-Downloader.Win32.Mutant.yf Trojan.
droute	droute.dll	X	Identified as a variant of the BDS/Agent.evh malware.
byXOgdba	byXOgdba.dll	X	Added by the Downloader.gen.a Trojan.
ibuntu	ibuntu.dll	X	Identified as a variant of the Trojan-Proxy.Win32.Agent.zh malware.
divxps	divxps.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the klite.sys rootkit.
divxrs	divxrs.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the dprot.sys rootkit.
ipsec	ipsec.dll	X	Added by the Fribet Trojan.
ibudu	ibudu.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the itcoe.sys rootkit.
<not used>	iSecurity.cpl	X	Added by the iSecurity Trojan. The iSecurity Trojan displays fake alerts and advertisements for rogue anti-spyware programs.
crehcjid	crehcjid.dll	X	Identified as a variant of the Email-Worm.Win32.Locksky.bp malware.
cryptonet	cryptonet.dll	X	Added by the Troj/Oscor-M backdoor Trojan.
reset6	AUHook.dll	X	Identified by Kaspersky as a variant of the Email-Worm.Win32.Bagle.to worm.
RegCompact	RegCompact.dll	Y	Related to AMUST Registry Cleaner 3.5.
LMIinit	LMIinit.dll	Y	Related to the LogMeIn remote control software.
WLogon	wlogon32.dll	X	Identified as a variant of the Trojan-Spy.Banker malware.
mp3res	mp3res.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the xprot.sys rootkit.
<not used>	cert2app.dll	X	Added by the Troj/Agent-GSW Trojan.
fsp_abwl	fsp_abwl.dll	Y	Related to Access Boss. Access Boss allows you to restrict the time that specified groups of users may use the computer.
<not used>	dnsq.dll	X	Added by the PE_PAGIPEF.CE-O virus.
ibutu	ibutu.dll	X	Identified as a variant of the Trojan.Proxy.Bunitu.B Trojan.
mplink	mplink.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the fprot.sys rootkit.
cbxvssp	cbxvssp.dll	X	Identified by Kaspersky antivirus as a varient of the AdWare.Win32.Virtumonde.gen malware.
alcopt	alcopt.dll	X	Added by a variant of the Goldun.Fam Trojan. This infection utilizes the alcop.sys rootkit to hide itself.
ceedabde	ceedabde.dll	X	Added by the Troj/Dropper-TV Trojan.
alcomt	alcomt.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the alcom.sys rootkit.
<not used>	swggbzc.dll	X	Added by the PWS-OnlineGames.q.dll password-stealing Trojan.
ljjgddc	ljjgddc.dll	X	Added by the Trojan.Vundo Trojan.
WLCtrl32	WLCtrl32.dll	X	Identified as a variant of the Email-Worm.Win32.Agent.e worm.
LogCrypt	LogCrypt.dll	X	Identified as a variant of the Trojan.Win32.Agent.eub Trojan.
wvurqqo	wvurqqo.dll	X	Identified by Kaspersky antivirus as a variant of the not-a-virus:AdWare.Win32.Virtumonde.gen malware.
winghy32	winghy32.dll	X	Identified by Kaspersky antivirus as a variant of the Trojan.Win32.Dialer.yz malware.
fcccaby	fcccaby.dll	X	Added by an unknown malware.
<not used>	smsikfik.dll	X	Added by the Trojan.Goldun Trojan. Trojan.Goldun is a hidden process that steals personal information such as usernames and passwords for financial accounts. It then sends this data to a remote server located at sturfajtn.com.
iebvss32	iebvss32.dl	X	Added by the Trojan.Win32.Delf.axk Trojan.
iifcbxv	iifcbxv.dll	X	Added by the Trojan-Downloader.Win32.Small.eyx Trojan.
winzwr32	winzwr32.dll	X	Added by the Trojan.Win32.Dialer.qn malware.
winetn32	winetn32.dll	X	Added by the BackDoor-CVT malware.
<not used>	helps.dll	X	Added by the Hacktool.Rootkit rootkit.
<not used>	mxbman.dll	X	Identified by Kaspersky as the Trojan-PSW.Win32.OnLineGames.bjf password-stealing Trojan.
<not used>	logonui.dll	X	Identified by Kaspersky as the Trojan.Win32.Agent.aqo Trojan.
<not used>	rwinsta.dll	X	Identified by Kaspersky as the Trojan.Win32.Agent.bea Trojan.
<not used>	swrcfzc.dll	X	Added by the PWS-OnlineGames.q password-stealing Trojan.
<not used>	ddcyvtr.dll	X	Added by an unknown malware.
<not used>	kvdxscma.dll	X	Added by the TSPY_ONLINEG.IRZ malware.
<not used>	avwgcmn.dll	X	Added by the Infostealer.Gampass malware.
<not used>	rtmp.dll	X	Added by the Troj/Lineag-DE password-stealing Trojan for the online game Lineage.
px86emul	px86emul.dll	X	Added by a variant of the Haxdoor Trojan family. This infection utilizes the x86emul.sys rootkit to hide itself.
msdtc32	msdtc32.dll	X	Identified as a variant of the Trojan-Downloader.Win32.Small.hoa malware.
<not used>	hookhelp.dll	X	Added by the PWS-OnlineGames.q.dll information stealing Trojan for online games.

Pages: (6) [1] 2 3 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.