O21 HijackThis Entries

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

BleepingComputer.com -> Startup Programs Database -> O21 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (3) 1 [2] 3

Name	Filename	Status	Description
RamPrx	RamPrx.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
DrvBoot	DrvBoot.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
CDChk	CDChk.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
DrvUnknown	DrvUnknown.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
VolumeService	VolumeService.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
CheckAvp	CheckAvp.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
MonKbd	MonKbd.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
ChkBoot	ChkBoot.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
AlrtRunOnce	AlrtRunOnce.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
PrxCheck	PrxCheck.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
CheckWin	CheckWin.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
ChkVolume	ChkVolume.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
KernelVolume	KernelVolume.dll	X	Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
WinRam	WinRam.dll	X	Identified by Kaspersky antivirus as a variant of the Trojan.Win32.Agent.feh malware.
BurnWin	apiuser32.dll	X	Identified by Kaspersky as a variant of the Trojan-PSW.Win32.Delf.aow password-stealing Trojan.
bdmnopx	bdmnopx.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
admggxp	admggxp.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
zip	zip.dll	X	Added by the Trojan-Downloader.Win32.Agent.ipp malware.
afxlspw	afxlspw.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bfrgnos	bfrgnos.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
adsoowf	adsoowf.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bgrlsmn	bgrlsmn.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bxsnvqt	bxsnvqt.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
aslpmqk	aslpmqk.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bqxomdo	bqxomdo.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
aswmklt	aswmklt.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bmlvqkn	bmlvqkn.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
agrlmvp	agrlmvp.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bgntlvo	bgntlvo.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
asvdnmo	asvdnmo.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bklgvsf	bklgvsf.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
ampkfst	ampkfst.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
sb0t	service1.dll	X	Identified as a variant of the Worm:Win32/MSNWorm.gen malware.
ProcService	service32.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
bvtqfvx	bvtqfvx.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
alxvdvm	alxvdvm.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
hjoqor	hjoqor.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
xcvwer	xcvwer.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
oledll	wmldap.dll	X	Identified as a variant of the Trojan-PSW.Win32.Agent.uv malware.
Version3	syslinks2.dll	X	Added by the W32.Mubla.C@mm worm. W32.Mubla.C@mm is a mass-mailing worm that spreads through email and MSN Messenger. It also opens a back door on the compromised computer.
kopmet	kopmet.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
jetctrl	jetctrl.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
E404Helper	e404d.dll	X	Part of the Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program.
pmkret	pmkret.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
gormet	gormet.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
Java	javasy.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
kbdctrl	kbdctrl.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
neobus	neobus.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
hupsrv	hupsrv.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bindmod	bindmod.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
ocgrep	ocgrep.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
bxsbang	bxsbang.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
hstsys	hstsys.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
hostctrl	hostctrl.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
OleExport	CertMgr.dll	X	Identified by Kaspersky Antivirus as the Trojan.Win32.BHO.gb malware.
MailExport	sendmail.dll	X	Identified by Kaspersky Antivirus as the Trojan.Win32.BHO.gb malware.
version	libinets.dll	X	Added by the W32/Dabber-D worm.
sysdx	sysdx.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
msvb	msvb.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
msmduo2	msmduo2.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
syscore	syscore.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
mssql	mssql.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
w32s	win442.dll	X	A variant of the Backdoor.Win32.IRCBot.bam family of worms and IRC backdoor Trojans.
msmduo	msmduo.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
drvsvp	drvsvp.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
Version3	winviews32.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Version3	direct3dx.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
DL5	deamon.dll	X	Added by the W32.Almanahe.A worm.
msmdev	msmdev.dll	X	Identified by Nod32 as Win32/Adware.Agent.NBD.
msmhost	msmhost.dll	X	Identified by Nod32 as Win32/Adware.Agent.NBD.
mjd	w32_mjd.dll	X	Identified as a variant of the W32.Mimbot malware.
Version1	syspoint.dll	X	Identified as a variant of the W32.Mimbot malware.
wmpdev	wmpdev.dll	X	Malware related to Smitfraud infections.
wmphost	wmphost.dll	X	Malware related to Smitfraud infections.
Version1	syspoints.dll	X	Added by the W32/IRCBot-XN worm and IRC backdoor.
prodigy1	newsystem25.dll	X	Added by the W32/IRCBot-XL worm and IRC backdoor.
Version1	libweb.dll	X	Identified as the W32.Mimbot.A malware.
wmpenv	wmpenv.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
wmpconf	wmpconf.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
prodigy1	prodigys323.dll	X	Added by the W32/Delf-EXR worm.
printers	libmsns.dll	X	A variant of the Backdoor.Win32.IRCBot.acd family of worms and IRC backdoor Trojans.
__adware2__	__adware2__.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
__adware1__	__adware1__.dll	X	Added by a variant of the MyGeek/CPVFeed adware.
syshelps	systesrt32.dll	X	Added by the W32/IRCBot-XF worm.
SysRegClass	sysreg.dll	X	Identified as the Trojan-Downloader.Win32.Agent.bzc malware.
printers	libwinets.dll	X	A variant of the Backdoor.IRCBot.acd family of worms and IRC backdoor Trojans.
syshelps	sysrcvr246.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
shellservice	ShellService.dll	U	Added by the WebWatcher surveillance tool. This program should be removed if it was not installed by yourself.
modems	notice.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
printers	libcintle2.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
rdshost	cymdda.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
rdshost	rafba.dll	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
printers	libcintles3.dll	X	A variant of the Backdoor.Win32.IRCBot.acd worm and IRC backdoor.
syshelps	wmhs32.dll	X	Identified as a variant of the IM-Worm.Win32.Agent worm.
antivirus	firewallav.dll	X	Identified as a variant of the IM-Worm.Win32.Agent worm.
printers	msn.dll	X	Added by the Troj/IRCbot-WX Trojan.
wmsound	wmsound.dll	X	A variant of the Cpvfeed adware.
wmplayer	wmplayer.dll	X	A variant of the Cpvfeed adware.
printers	notiffy.dll	X	Added by the W32.Mubla.B worm.
sounddrv	sounddrv.dll	X	A variant of the CPVFeed adware.

Pages: (3) 1 [2] 3

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.