O4 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O4 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List

· Submit a Startup

· Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (125) 1 [2] 3 4 ... Last »

Name	Filename	Status	Description
Windows Logon Applicationedc	winlogon.exe	X	Added by the Troj/DwnLdr-HGR Trojan.
Microsoft Windows (D)	iexplore.exe	X	Identified as a variant of the TrojanSpy.Agent malware. This infection should not be confused with the legitimate C:\Program Files\Internet Explorer\iexplore.exe file.
Security Service DB	secservice.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Security Server DB	secserver.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Security Center Distribution	securesec.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Device Security Driver	devicesec.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Device IO System	deviceio.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Device Hardware	devicehnd.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Core System Hardware	syscorehd.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
dcom	ritz8.dll	X	Identified as a variant of the Troj/Alpha-H malware.
ashDsp.exe	ashDsp.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
logonUiInit	rgtndz.dll	X	Identified as a variant of the Trojan-Clicker.Win32.Agent.bqy malware.
NMBgMonitor.exe	NMBgMonitor.exe	X	Added by the Troj/Bravo-G Trojan.
NT Printing Service	spoolsc.exe	X	Added by the Troj/Buzus-K Trojan.
LGBLiveUpdate	lgbpd.exe	U	Added by the LGB LivePro live auction software.
MSRegScan	KSPDemo.exe	U	Added by the Spyware.KeyStalker surveillance software. Spyware.KeyStalker is a spyware program that records screen shots and logs keystrokes on the computer. If this program is found on your computer without your knowledge, then we advise that you uninstall it.
Winexec32	windhelp32.exe	X	Added by the Troj/Agent-HKU Trojan.
default	mskbw.exe	U	Added by the Spyware.PCSurveilPro surveillance software. If this software is found on your computer without your knowledge, you should uninstall it.
WinProtector	WinProtector.exe	X	Added by the WinProtector rogue anti-spyware program.
adsnwk	adsnwk.exe	U	Added by the Spyware.SpyMonitor surveillance software. Spyware.SpyMonitor is a Spyware program that records keystrokes made on the computer. This software should be uninstalled if found on your computer without your knowledge.
Hidetools Spy Monitor	wmispe.exe	U	Added by the Spyware.HidetoolsSpy surveillance software. Spyware.HidetoolsSpy is a spyware program that records screen shots and logs keystrokes on the computer. This software should be uninstalled if found on your computer without your knowledge.
Task Manager	controlsys.exe	X	Added by the Troj/Tiotua-S Trojan.
BkavFw	controlsys.exe	X	Added by the Troj/Tiotua-S Trojan.
Windows UDP Control Center	winudpmsgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
SVGA Adapter	svghost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Security System	securesys.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSWTL32	MSATL32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Security Agent	msnsecure.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Msn Message Acount Helper 7.7	msnmessage7.7.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MbarInstall	tem<random>.tmp.exe	X	Identified as a variant of the Adware.Mirar malware.
ctfnnon	ctfmon.exe	X	Identified as a variant of the Backdoor.Win32.Turkojan.ake malware. Please note that C:\Windows\System32\ctfmon.exe is legitimate and should not be deleted.
Antivirus-2008.exe	Antivirus-2008.exe	X	Identified as a variant of the FraudTool/FakeAV malware.
s9201	as2008xp.exe	X	Added by the AntiSpyware XP 2008 rogue anti-spyware program.
IEServer	IEServer.exe	U	Added by the Spyware.HBScreenSpy surveillance software. Spyware.HBScreenSpy is a Spyware program that allows remote viewing of the computer screen. This software should be uninstalled if found on your computer without your knowledge.
smr	cvshost.exe	U	Added by the Spyware.SilentMonitor surveillance software. This software should be uninstalled if found on your computer without your knowledge.
Windows Taskmanager	taskngr.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
WinDLL (windns32.dll)	windns32.dll	X	Identified as a variant of the Backdoor.Win32.Akbot.e malware.
Windows Servser	serviser.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Services	winsyssrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows MSN Live Messenger	winmessengerlive.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Messenger Live Startup	windowsmsnlive.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Messenger Live MSN	winlivemsnmessenger.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Settings Manager	msnsetmg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Messenger Live Windows	messengerlive.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Database Client	msndbcli.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN CST Manager	mancstmgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN	wmev.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN	iTuneshelp.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Winedows startup	WinKey.exe	X	Identified as a variant of the Net-Worm.Win32.Kolabc.bzi malware.
Microsoft Windows Expl0rer	expl0rer.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Microsoft Security Monitor Process	windowsupdate.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
neos	neos.exe	X	Added by the Troj/BdoorB-Fam backdoor.
Topic Tilesys	Tilesys.com	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Live Windows Messenger Version	msnmsngrlive.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
buritos	buritos.exe	X	Identified as a variant of the Downloader.FraudLoad.C malware.
wmpdriver	wmpdriverd.exe	X	Added by the Troj/Agent-HJE Trojan.
Amie Release V6.9D	services.exe	X	Added by the Troj/VB-EAN Trojan. This infection should not be confused with the legitimate C:\Windows\System32\services.exe file.
PC Protection Center	PcProtection.exe	X	Added by the PC Protection Center 2008 rogue anti-spyware program.
Windows Services	dllhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsft Remote Procedure Daemon	msrpcd.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
CLI Services	clisrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
systray	mstre6.exe	X	Added by the W32.Koobface.A worm. W32.Koobface.A is a worm that spreads through social networking sites.
PyroAntiSpy	PyroAntiSpy.exe	X	Added by the PyroAntiSpy rogue security software. PyroAntiSpy is a misleading application that may give exaggerated reports of threats on the computer.
Microsoft Manager 4	KKI4.exe	X	Added by the Troj/Banker-EMT information-stealing Trojan for online banks.
Microsoft Manager 3	KKI3.exe	X	Added by the Troj/Banker-EMT information-stealing Trojan for online banks.
Microsoft Manager 2	KKI2.exe	X	Added by the Troj/Banker-EMT information-stealing Trojan for online banks.
Microsoft Manager 1	KKI1.exe	X	Added by the Troj/Banker-EMT information-stealing Trojan for online banks.
<not used>	karina.dat	X	A variant of the Trojan.Agent malware.
nVidia Application Drivers	nvidiav32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Clip Servicer	clipsrvc.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Clip Service Manager	clipmg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Power-Antivirus-2009	Power-Antivirus-2009.exe	X	Added by the Power Antivirus 2009 rogue antivirus program.
ukl	wmpusrvc.exe	U	Added by the Spyware.UltimateKeylog surveillance software. Spyware.UltimateKeylog is a program that records keystrokes and takes screenshots of the computer. You should uninstall this program if found without your permission on your computer.
initnyuser	svchosd.exe	X	Added by the TROJ_POPHOT.OJ Trojan.
Windows Server IP Verification Service	wsivs.exe	X	Added by the Backdoor.Ranky backdoor Trojan.
Skra	Skra.exe	X	Identified as a variant of the TrojanDownloader.Matcash malware.
nVidia System Drivers	nvsys32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
1	mrcmgr.exe	X	Identified as a variant of the Trojan-Banker.Win32.Banker.rqk malware.
Win Antivir 2008	Win Antivir 2008.exe	X	Added by the Win Antiv 2008 rogue antivirus program.
Win Antivirus 2008	Win Antivirus 2008.exe	X	Added by the Win Antivirus 2008 rogue antivirus program.
RegistryDoctor2008	registrydoctor.exe	X	Added by the RegistryDoctor2008 rogue Windows Registry cleaner.
nVidia Display Drivers (x86)	nvsys86.exe	X	Unknown malware. If infected it will create a lmhosts file on your computer that blocks you from reaching a variety of antimalware and computer help sites, including BleepingComputer.com. To resolve this issue, you can delete the C:\Windows\System32\drivers\etc\lmhosts file.
Microsoft	ntsvr.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
wmisrv	wmisrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System Registry Manager	sysrgmgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System Config Boot	syscgboot.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
ASpyC	ASpyC.exe	X	Added by the AntiSpyCheck rogue anti-spyware program. AntiSpyCheck is a misleading application that may give exaggerated reports of threats on the computer.
Msconfige	solari.exe	X	Added by the W32/Autorun-GU removable media worm.
Cliente	system.exe	X	Added by the W32/Autorun-GS removable media worm.
delol	hiquooc.exe	X	Added by the Troj/Bdoor-AMP backdoor.
OpenDNS Update	OpenDNS Updater.exe	U	OpenDNS Updater that automatically updates your OpenDNS account when your IP address changes. Should be allowed to run if you use their Dashboard features.
VisualStyle	desktop.sysm	X	Added by the W32.Azero.A virus.
lphc3pgj0e3ct	lphc3pgj0e3ct.exe	X	Added by the TROJ_RENOS.ACO Trojan.
Windows Service Agent	mssngear.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Windows Service Agnts	(Random 8 Letter).exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Windows Services	servicez.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Registery Center	svhchosts.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System DB Manager	sysdbmg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System CGI Manager	syscgmgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
WinManage	wmanage.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.

Pages: (125) 1 [2] 3 4 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.