O23 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O23 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (26) [1] 2 3 ... Last »

Name	Filename	Status	Description
tdifw_drv	tdifw_drv.sys	X	Added by the Desktop Defender 2010 rogue anti-spyware program. This driver is potentially legitimate, but is commonly bundled with malware programs.
WDefend	svohost.exe	X	Part of the Windows Police Pro rogue anti-spyware infection.
GbpSvc	GbpKms.sys	X	Added by the nfostealer.Bancos.BB Trojan. Infostealer.Bancos.BB is a Trojan horse that attempts to steal information from the compromised computer.
Microsoft USB Bus Controller	usbctl.exe	X	Added by the WORM_ASPXOR.AB worm.
SecureWarrior Security Service	SecureWarriorSvc.exe	X	Added by the SecureWarrior rogue anti-spyware program.
AntiPol	svchast.exe	X	Added by the Windows Police Pro rogue anti-spyware program.
SecureFighter Security Service	SecureFighterSvc.exe	X	Added by the SecureFighter rogue anti-spyware program.
SecureVeteran Security Service	SecureVeteranSvc.exe	X	Added by the SecureVeteran rogue anti-spyware program.
SecuritySoldier Security Service	SecuritySoldierSvc.exe	X	Added by the SecuritySoldier rogue anti-spyware program.
SecurityFighter Security Service	SecurityFighterSvc.exe	X	Added by the SecurityFighter rogue anti-spyware program.
SaveArmor Security Service	SaveArmorSvc.exe	X	Added by the SaveArmor rogue anti-spyware program.
sofatnet Service	sofatnet.exe	X	Identified by Comodo as Backdoor.Win32.Refpron.~B.
Net_Login	svchust.exe	X	Identified as a variant of the Trojan-Clicker.Win32.Delf.cpm malware.
Net Login	svchost.exe	X	Identified as a variant of the Trojan-Clicker.Win32.Delf.cps malware.
SaveDefender Security Service	SaveDefenderSvc.exe	X	Added by the SaveDefender rogue anti-spyware program.
TrustWarrior Security Service	TrustWarriorSvc.exe	X	Added by the TrustWarrior rogue anti-spyware program.
SoftSafeness Security Service	SoftSafenessSvc.exe	X	Added by the SoftSafeness rogue anti-spyware program.
Alerter AlerterALG	<random>.exe	X	Added by the W32/Backdr-AR backdoor.
SafetyKeeper Security Service	SafetyKeeperSvc.exe	X	Added by the SafetyKeeper rogue security program.
SaveKeeper Security Service	SaveKeeperSvc.exe	X	Added by the SaveKeeper rogue anti-spyware program.
QuickHealCleaner Security Service	QuickHealCleanerSvc.exe	X	Added by the QuickHealCleaner rogue anti-spyware program.
SystemCop Security Service	SystemCopSvc.exe	X	Added by the SystemCop rogue anti-spyware program.
AntipyProex	svchasts.exe	X	Added by the Windows Police Pro rouge anti-spyware program.
BlockDefense Security Service	BlockDefenseSvc.exe	X	Added by the BlockDefense rogue anti-spyware program.
SaveDefense Security Service	SaveDefenseSvc.exe	X	Added by the SaveDefense rogue anti-spyware program.
TrustNinja Security Service	TrustNinjaSvc.exe	X	Added by the TrustNinja rogue anti-spyware program.
SaveSoldier Security Service	SaveSoldierSvc.exe	X	Added by the SaveSoldier rogue anti-spyware program.
SaveKeep Security Service	SaveKeepSvc.exe	X	Added by the SaveKeep rogue anti-spyware program.
WiniShield Security Service	WiniShieldSvc.exe	X	Added by the WiniShield rogue anti-spyware program.
Google Update Service (gupdate<numbers and characters>)	GoogleUpdate.exe	N	This startup is used by Google products such as Picasa and Chrome, among others, to check for new updates.
NDISRD	ndisrd.sys	X	Added by the Trojan.Interrupdate Trojan. Trojan.Interrupdate is a Trojan horse that lowers security settings.
AntipyPro_12	svchast.exe	X	Added by the Windows Antivirus Pro rogue anti-spyware program.
Genesis Streaming Service	WPGApplicationLauncher.exe	U	Allows you to communicate with projectors via wireless.
AuthenTec Fingerprint Service	AtService.exe	U	Used by IBM Thinkpad's fingerprint identification software.
Data Transfer Service	DTS.exe	U	Used by IBM Thinkpad's fingerprint identification software.
Firewall Client Agent	FwcAgent.exe	Y	Microsoft ISA Firewall Client.
Web Management Service	WMSvc.exe	U	Allows you to manage Microsoft Internet Information Services (IIS) via the web.
IDrive WebManager	IDriveWebM.exe	U	Added by the IDrive online backup solution. IDrive offers a free 2GB online backup of your local files and a paid solution if you need more space. This service allows you to control your backup settings from the web.
IDriveE Service	IDriveE Service.exe	U	Added by the IDrive online backup solution. IDrive offers a free 2GB online backup of your local files and a paid solution if you need more space.
WiniFighter Security Service	WiniFighterSvc.exe	X	Added by the WiniFighter rogue anti-spyware program.
ComodoBackupService	CmdBkSvc.exe	Y	Related to Comodo BackUp.
MRSVSS Service	mrsvss.exe	X	Added by the W32/IRCBot-AES worm and IRC backdoor.
podmena	Podmena.dll	X	Added by the Podmena malware. Please note that C:\Windows\System32\svchost.exe is a legitimate program and should not be deleted.
podmenadrv	podmena.sys	X	Added by the Podmena malware.
<various characters>	QQmusic.exe	X	Identified by Kaspersky as a variant of the Trojan-Downloader.Win32.Agent.afen malware.
COM+ Windows System	winsyscom.exe	X	Identified by Symantec as a variant of the Backdoor.Trojan malware.
HNC Engine Service	hnceng.exe	U	Added by the Green Dam-Youth Escort surveillance program. This program is an Internet filtering software that the Chinese government will require to be installed on all new computers sold in China after July 1, 2009.
MsPowerSvc	MPSvcC.exe	U	Added by the Green Dam-Youth Escort surveillance program. This program is an Internet filtering software that the Chinese government will require to be installed on all new computers sold in China after July 1, 2009.
DrvFltIp	Drvfltip.sys	X	Added by the UnVirex rogue anti-virus program.
websrvx	websrvx.exe	X	Added by the WORM_KOOBFACE.EY worm.
system performance logging for TrueTime Driver Edition	chkzero.ex	X	Added by the Troj/Hackda-A Trojan & Rootkit.
WMI Sync-DB	wmisynd.exe	X	Added by the W32/IRCBot-AEH worm and IRC backdoor.
DokanMounter	mounter.exe	Y	This service allows you to mount filesystems that have been created by the Dokan user mode file driver library.
Windows Management Network (WMN)	conime.exe	X	Unknown malware.
Remote Storage (RS)	taskmrg.exe	X	Unknown malware.
C-DillaService	CDANSRV.EXE	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Downloader.Win32.Agent.qzk malware.
BroadCam Service	broadCam.exe	U	Related to the BroadCam video streaming server.
AVG7 Resident Shield Service	avgrssvc.exe	Y	This service is the real-time protection for the AVG 7 Anti-virus software.
Rising Personal Firewall Services	RfwSrv.exe	X	Added by the Troj/Delf-FBV Trojan.
srute	srute.exe	X	Added by the Troj/Agent-JKX Trojan.
Net Login	serviecs.exe	X	Added by the Troj/Bckdr-QSV backdoor Trojan.
Rising Scan Services	RavCopy.exe	X	Added by the Troj/Bckdr-QSU backdoor Trojan.
jwam	jwam.exe	X	Added by the Troj/Agent-JLC Trojan.
Connection Sharing Networkection	Mighng.exe	X	Added by the Troj/Delf-FBU Trojan.
jaxk	jfxk.exe	X	Added by the Troj/Agent-JKS Trojan.
eEye Application Bus	eeyeevnt.exe	Y	Part of the Blink Personal computer security program.
eEye Blink Engine	blinksvc.exe	Y	Part of the Blink Personal computer security program.
Antispyware Server Agent	tmassa.exe	Y	Related to the discontinued TrendMicro Anti-Spyware program.
C-DillaCdaC11BA	CDAC11BA.EXE	Y	Copy protection software used by companies to stop people from pirating their software. Disabling this service could cause any programs to rely on it to stop working.
StarForce Protection VFS Driver (version 2.x)	sfvfs02.sys	Y	Related to StarForce Protection software that protects software from being copyrighted. Disabling this service could make programs that use its protection to stop working.
StarForce Protection Synchronization Driver (version 2.x)	sfsync02.sys	Y	Related to StarForce Protection software that protects software from being copyrighted. Disabling this service could make programs that use its protection to stop working.
StarForce Protection Helper Driver (version 2.x)	sfhlp02.sys	Y	Related to StarForce Protection software that protects software from being copyrighted. Disabling this service could make programs that use its protection to stop working.
StarForce Protection Environment Driver (version 1.x)	sfdrv01.sys	Y	Related to StarForce Protection software that protects software from being copyrighted. Disabling this service could make programs that use its protection to stop working.
rxp	rxp.sys	Y	StarSkin allows you to change the view and appearence of your Windows XP box with the use of publicaly available themes. Users may customize all visual attributes, including colors, fonts, headings, borders, and button styles.
Microsoft Database Service	msmnsg.exe	X	Identified by Norman antivirus as a variant of the W32/Downloader.STY malware.
SafeSysDrv	SafeSys.exe	X	Added by the WORM_AUTORUN.DMI removable media worm.
system Tools	Remote.exe	X	Added by the Troj/DInject-A Trojan.
fzg	Hacker.com.cn.exe	X	Identified by McAfee as a variant of the BackDoor-SO malware.
ci	tcim.exe	X	Added by the TROJ_DLOADR.ACG Trojan downloader.
sopidkc Service	sopidkc.exe	X	Identified by Avast Anti-virus as a variant of the Win32:Refpron-M worm.
mabidwe Service	mabidwe.exe	X	Identified by Avast Anti-virus as a variant of the Win32:Refpron-M worm.
afisicx Service	afisicx.exe	X	Identified by Avast Anti-virus as a variant of the Win32:Refpron-M worm.
svohost.exe	svchcst.exe	X	Added by the W32/Autorun-ZC removable media worm.
Sony Ericsson Device 115 USB WMC OBEX Interface	s115obex.sys	Y	Drivers that allow your computer to communicate with your Sony Ericsson phone/PDA.
Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM)	s115mgmt.sys	Y	Drivers that allow your computer to communicate with your Sony Ericsson phone/PDA.
Sony Ericsson Device 115 USB WMC Modem Driver	s115mdm.sys	Y	Drivers that allow your computer to communicate with your Sony Ericsson phone/PDA.
Sony Ericsson Device 115 USB WMC Modem Filter	s115mdfl.sys	Y	Drivers that allow your computer to communicate with your Sony Ericsson phone/PDA.
Sony Ericsson Device 115 driver (WDM)	s115bus.sys	Y	Drivers that allow your computer to communicate with your Sony Ericsson phone/PDA.
SABKUTIL	SABKUTIL.sys	Y	Related to Super Ad Blocker.
UltraMonMirror	UltraMonMirror.sys	U	Related to the UltraMon multi-monitor software.
UltraMon Utility Driver	UltraMonUtility.sys	U	UltraMon multi-monitor software.
MBAMProtector	mbam.sys	Y	Related to MalwareBytes' Anti-malware.
hwinterface	hwinterface.sys	Y	Driver that communicates with the Parallel Port.
avast! Self Protection	aswSP.sys	Y	Driver used by Avast Antivirus.
NETGEAR FA410TX Fast Ethernet PC Card Driver	\fa410nd5.sys	Y	Driver for the Netgear FA410TX PCMCIA network card.
Sony Programmable I/O Control Device	SonyPI.sys	Y	This driver is the interface between Sony Programmable I/O controls, such as jogdials, bluetooth buttons, and Function buttons, and Windows.
AVG Free8 Network Redirector	avgtdix.sys	Y	Related to AVG Anti-virus.
AVG Free AVI Loader Driver x86	avgldx86.sys	Y	Related to AVG Anti-virus.
Macrium Reflect Image Mounting Service	ReflectService.exe	U	Related to the Reflect disk imaging and backup software.
Paramount Software Snapshot Filter	pssnap.sys	U	Related to the Reflect disk imaging and backup software.

Pages: (26) [1] 2 3 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.