O20 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help

RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O20 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List

· Submit a Startup

· Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (5) [1] 2 3 ... Last »

Name	Filename	Status	Description
upsctl	upsctl.dll	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
WinNt64	WinNt64.dll	X	Added by the Troj/DwnLdr-HEI Trojan.
WinCtrl32	WinCtrl32.dll	X	Added by a variant of the Trojan-Downloader.Win32.Mutant.yf Trojan.
droute	droute.dll	X	Identified as a variant of the BDS/Agent.evh malware.
byXOgdba	byXOgdba.dll	X	Added by the Downloader.gen.a Trojan.
ibuntu	ibuntu.dll	X	Identified as a variant of the Trojan-Proxy.Win32.Agent.zh malware.
divxps	divxps.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the klite.sys rootkit.
divxrs	divxrs.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the dprot.sys rootkit.
ipsec	ipsec.dll	X	Added by the Fribet Trojan.
ibudu	ibudu.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the itcoe.sys rootkit.
<not used>	iSecurity.cpl	X	Added by the iSecurity Trojan. The iSecurity Trojan displays fake alerts and advertisements for rogue anti-spyware programs.
crehcjid	crehcjid.dll	X	Identified as a variant of the Email-Worm.Win32.Locksky.bp malware.
cryptonet	cryptonet.dll	X	Added by the Troj/Oscor-M backdoor Trojan.
reset6	AUHook.dll	X	Identified by Kaspersky as a variant of the Email-Worm.Win32.Bagle.to worm.
RegCompact	RegCompact.dll	Y	Related to AMUST Registry Cleaner 3.5.
LMIinit	LMIinit.dll	Y	Related to the LogMeIn remote control software.
WLogon	wlogon32.dll	X	Identified as a variant of the Trojan-Spy.Banker malware.
mp3res	mp3res.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the xprot.sys rootkit.
<not used>	cert2app.dll	X	Added by the Troj/Agent-GSW Trojan.
fsp_abwl	fsp_abwl.dll	Y	Related to Access Boss. Access Boss allows you to restrict the time that specified groups of users may use the computer.
<not used>	dnsq.dll	X	Added by the PE_PAGIPEF.CE-O virus.
ibutu	ibutu.dll	X	Identified as a variant of the Trojan.Proxy.Bunitu.B Trojan.
mplink	mplink.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the fprot.sys rootkit.
cbxvssp	cbxvssp.dll	X	Identified by Kaspersky antivirus as a varient of the AdWare.Win32.Virtumonde.gen malware.
alcopt	alcopt.dll	X	Added by a variant of the Goldun.Fam Trojan. This infection utilizes the alcop.sys rootkit to hide itself.
ceedabde	ceedabde.dll	X	Added by the Troj/Dropper-TV Trojan.
alcomt	alcomt.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the alcom.sys rootkit.
<not used>	swggbzc.dll	X	Added by the PWS-OnlineGames.q.dll password-stealing Trojan.
ljjgddc	ljjgddc.dll	X	Added by the Trojan.Vundo Trojan.
WLCtrl32	WLCtrl32.dll	X	Identified as a variant of the Email-Worm.Win32.Agent.e worm.
LogCrypt	LogCrypt.dll	X	Identified as a variant of the Trojan.Win32.Agent.eub Trojan.
wvurqqo	wvurqqo.dll	X	Identified by Kaspersky antivirus as a variant of the not-a-virus:AdWare.Win32.Virtumonde.gen malware.
winghy32	winghy32.dll	X	Identified by Kaspersky antivirus as a variant of the Trojan.Win32.Dialer.yz malware.
fcccaby	fcccaby.dll	X	Added by an unknown malware.
<not used>	smsikfik.dll	X	Added by the Trojan.Goldun Trojan. Trojan.Goldun is a hidden process that steals personal information such as usernames and passwords for financial accounts. It then sends this data to a remote server located at sturfajtn.com.
iebvss32	iebvss32.dl	X	Added by the Trojan.Win32.Delf.axk Trojan.
iifcbxv	iifcbxv.dll	X	Added by the Trojan-Downloader.Win32.Small.eyx Trojan.
winzwr32	winzwr32.dll	X	Added by the Trojan.Win32.Dialer.qn malware.
winetn32	winetn32.dll	X	Added by the BackDoor-CVT malware.
<not used>	helps.dll	X	Added by the Hacktool.Rootkit rootkit.
<not used>	mxbman.dll	X	Identified by Kaspersky as the Trojan-PSW.Win32.OnLineGames.bjf password-stealing Trojan.
<not used>	logonui.dll	X	Identified by Kaspersky as the Trojan.Win32.Agent.aqo Trojan.
<not used>	rwinsta.dll	X	Identified by Kaspersky as the Trojan.Win32.Agent.bea Trojan.
<not used>	swrcfzc.dll	X	Added by the PWS-OnlineGames.q password-stealing Trojan.
<not used>	ddcyvtr.dll	X	Added by an unknown malware.
<not used>	kvdxscma.dll	X	Added by the TSPY_ONLINEG.IRZ malware.
<not used>	avwgcmn.dll	X	Added by the Infostealer.Gampass malware.
<not used>	rtmp.dll	X	Added by the Troj/Lineag-DE password-stealing Trojan for the online game Lineage.
px86emul	px86emul.dll	X	Added by a variant of the Haxdoor Trojan family. This infection utilizes the x86emul.sys rootkit to hide itself.
msdtc32	msdtc32.dll	X	Identified as a variant of the Trojan-Downloader.Win32.Small.hoa malware.
<not used>	hookhelp.dll	X	Added by the PWS-OnlineGames.q.dll information stealing Trojan for online games.
ENTERPRISE	ENTERPRISE.dll	X	Unknown malware.
<not used>	wowfx.dll	X	Identified as a variant of the Win32/TrojanDownloader.Fakealert.G Trojan. This Trojan displays fake security alerts on your computer.
securityService	securityService.dll	X	Added by the Troj/KillJWS-A Trojan.
isodvrtg	isodvrtg.dll	X	Added by a variant of the Goldun.Fam Trojan. This infection utilizes the isodvstg.sys rootkit.
crypt32	crypt32rt.dll	X	Unknown malware.
<not used>	kus109.dat	X	Identified as a variant of the AdWare.Win32.Agent.zo malware.
Antiwpa	antiwpa.dll	X	An illegal software crack used to bypass copy protection for Windows.
yaywxxw	yaywxxw.dll	X	A variant of the Adware.Virtumonde infection.
rqrqrqq	rqrqrqq.dll	X	Identified by AVG as a variant of the Trojan horse BHO.CWF malware.
<not used>	kurva.dat	X	Identified as a variant of the Trojan.Virantix.B malware.
<not used>	win32ipzip.dll	X	Added by the Trojan.Goldun Trojan.
winrvc32	winrvc32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
winwly32	winwly32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
winuqw32	winuqw32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
winmxw32	winmxw32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
winhoq32	winhoq32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
wingsa32	wingsa32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
winemx32	winemx32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
wineij32	wineij32.dll	X	Identified as a variant of the Trojan.Win32.Dialer.yz malware.
bootrom8	bootrom8.dll	X	A variant of the Troj/Haxdor-Gen Trojan. This infection utilizes the necsort.sys rootkit.
ssqroon	ssqroon.dll	X	Identified by AVG as Trojan.Awax.
<not used>	SysWln74_3.dll	X	Added by the PSW.OnlineGames.NNM password-stealing Trojan.
<not used>	mslogon.dll	X	Added by the W32.Vapka.A worm. W32.Vapka.A is a worm that spreads by copying itself to removable media and steals confidential information.
<not used>	murka.dat	X	Added by the Trojan.Virantix.B Trojan. Trojan.Virantix.B is a Trojan horse that ends antivirus applications and displays a fake security alert. It also uses a rootkit to hide itself and modifies the Internet Explorer home page.
PSUTY	PSUWNP.dll	?	Related to FUJITSU LIMITED.
crypt	crypts.dll	X	Added by the Troj/Agent-GJR Trojan.
md4hsh	md4hsh.dll	X	Added by a variant of the Goldun.Fam Trojan. This infection utilizes the nvnatv.sys and the nvnati.sys rootkits to hide itself.
csfdll	smartwarxyu.dll	X	Identified as a variant of the Trojan-Spy.Win32.Delf.asq malware.
winwim32	winwim32.dll	X	Identified as Win32/Nebuler variants.
winosz32	winosz32.dll	X	Identified as Win32/Nebuler variants.
winepi32	winepi32.dll	X	Identified as Win32/Nebuler variants.
kerberos4	(Random Name).dll	X	A variant of the Win32:Agent-NZR malware.
ati2krtg	ati2krtg.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the ati2kstg.sys rootkit.
ke32paag	ke32paag.dll	X	A variant of the Haxdoor Trojan. This infection is hidden by the ke32psag.sys rootkit.
acautsrv	ackpbsc.dll	Y	Related to ActivIdentity security software.
acunlock	acunlock.dll	Y	Related to ActivIdentity security software.
ackpbsc	ackpbsc.dll	Y	Related to ActivIdentity security software.
DeviceNP	DeviceNP.dll	Y	Installed with certain Hewlett Packard software/hardware.
<not used>	kvmxfma.dll	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Dropper.Win32.Mudrop.fg malware.
xtav3des	xtav3des.dll	X	A variant of the Haxdoor Trojan. This infection utilizes the xdrve9d.sys rootkit to hide itself.
<not used>	guard32.dll	Y	Related to Comodo Firewall Pro.
ewsmsg	ewsmsg.dll	X	Added by a variant of the Troj/Haxdoor Trojan.
ivn4reg	ivn4.dll	X	Identified as a variant of the Trojan-Proxy.Win32.Xorpix.ci Trojan.
winhld32	winhld32.dll	X	Identified as a variant of the Trojan.Agent.qt malware.
winbfi32	winbfi32.dll	X	Identified as a variant of the Trojan.Win32.Agent.qt Trojan.
winexy32	winexy32.dll	X	Identified as a variant of the Trojan.Win32.Agent.qt malware.
avgwlntf	avgwlntf.dll	Y	Related to AVG Antivirus.
TPSvc	TPSvc.dll	?	Related to the Vmware Workstation 6.0 virtualization software.
abc32reg	abc32.dll	X	Identified as a variant of the Win32/TrojanProxy.Xorpix.BS Trojan.

Pages: (5) [1] 2 3 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from Uniblue Systems. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Advertise \| About Us \| Terms of Use \| Privacy Policy \| Contact Us \| Site Map \| Chat \| Tutorials
Discussion Forums \| The Computer Glossary \| Resources \| RSS Feeds \| Startups \| The File Database \| Malware Removal Guides