O4 HijackThis Entries

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

BleepingComputer.com -> Startup Programs Database -> O4 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (144) 1 [2] 3 4 ... Last »

Name	Filename	Status	Description
SeRvEr	messngeer.exe	X	Unknown malware.
Adobe Center	adobeupd.EXE	X	Added by the TROJ_SYSWRT.DVD Trojan.
axaa.exe	axaa.exe	X	Added by the Troj/Mdrop-DRM Trojan.
mslivesvc.exe	mslivesvc.exe	X	Added by the Troj/SpyEye-DO Trojan.
SBAMTray	SBAMTray.exe	Y	Installed with various Sunbelt security products, this file is the tray icon through which the user manages the program. The file will have different file paths depending on which security program you installed.
PS3 Media Server	PMS.exe	Y	PS3 Media Server is a DLNA compliant Upnp Media Server for the PS3, written in Java, with the purpose of streaming or transcoding any kind of media files, with minimum configuration.
DS3 Tool	DS3_Tool.exe	Y	MotioninJoy driver that allows you to use your Playstation 3 controller (Sixaxis or Dualshock 3) on a Windows computer.
king_tw	twking.exe	X	Identified by Kaspersky Antivirus as a variant of the Worm.Win32.AutoRun.bsma removable media worm.
king_za	zaking.exe	X	Identified by Kaspersky Antivirus as a variant of the Worm.Win32.AutoRun.bsma removable media worm.
*ntfsqueuedns.exe	ntfsqueuedns.exe	X	Added by the Troj/FakeAV-EMN Trojan.
*streamresamd.exe	streamresamd.exe	X	Added by the Troj/FakeAV-EMM Trojan.
NVHotkey	rundll32.exe nvHotkey.dll,Start	U	Installed with certain NVIDIA graphics cards, this file allows the user to change graphics settings with hotkeys.
WinServices	msvc32.exe	X	Unknown malware.
runAPI78	runAPI47.exe	X	Added by the Troj/Mdrop-DRE Trojan.
Windows Services	service2.exe	X	Added by the Mal/VB-ZH malware.
strFree	strFree.dll	X	Added by the Troj/Mdrop-DRG Trojan. Please note that C:\Windows\System32\rundll32.exe is a legitimate file and should not be removed.
BatangIN	BatangIN.exe	X	Added by the Mal/Dbot-G malware.
McENUI	McENUI.exe	U	Installed with various McAfee security products that include network security, this file is the main file for the Easy Network User Interface involved with sharing printing and files, helping to set up a home network, and helping protect the wireless network. If you have only one computer, or if you do not share files or printing or use McAfee for that if you do, you can safely disable this startup.
ClauerUpdate	ClUpdate.exe	Y	This file is installed with the Clauer Project, developed by the Universitat Jaume I, that converts a CD-ROM or a Flash drive into an authentication tool. This file handles the updates of the program.
ClauerUpdate	ClUpdate.exe	Y	This file is installed with the Clauer Project, developed by the Universitat Jaume I, that converts a CD-ROM or a Flash drive into an authentication tool. This file handles the updates of the program.
Game Keyboard	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
KB350e	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Povolit program Bezdrátová klávesnice a myš Labtec	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
MagicKey	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
MagicKey	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Draadloze Labtec-desktop inschakelen	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Kabellosen Labtec-Desktop aktivieren	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Media Key	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Versato	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Labtec Cordless Keyboard Driver	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Enable Wireless Keyboard Driver	Magickey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Enable Labtec NumPad	Magickey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Enable Labtec Wireless Desktop	Magickey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Activar o desktop sem fio Labtec	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
Enable Belkin Wireless Keyboard Driver	MagicKey.exe	U	This program is part of the keyboard software used by various manufacturers and allows the user to map keyboard buttons to various functions.
DevconDefaultDB	READREG.exe	Y	Installed with various sound cards made by Creative Technology Limited, this file is connected with the ReadReg MFC Application. It might be an audio converter.
DevconDefaultDB	READREG.exe	Y	Installed with various sound cards made by Creative Technology Limited, this file is connected with the ReadReg MFC Application. It might be an audio converter.
cfFncEnabler.exe	cfFncEnabler.exe	N	This file has two different commands, but the same file path in each case. Preinstalled on certain Toshiba laptops, this file launches the Config. Free application which helps in finding and connecting to wireless networks.
PMCLoader	PMCLoader.exe	U	This file is the launcher for Pinnacle TV Center developed by Pinnacle Systems GmbH ;however, have been unable to determine what the "checktasks" part of this particular command is for.
HJRUDZ5DT2	<random 3 letters or 3 letters and numbers>.exe	X	HJRUDZ5DT2 is associated with several file names and a couple different file paths and is connected with a trojan and downloader. Please see ThreatExpert's report that includes HJRUDZ5DT2.
LchDrvKey	LchDrvKey.exe	?	Research thus far indicates that this file is preinstalled on some HP computers.
winupdater	winupdate.exe	X	Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.Agent.bjev malware.
Scxaxs	Scxaxs.exe	X	Unknown Trojan.
Windows Defender	lsass.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Gibi.yf malware.
runAPI93	runAPI79.exe	X	Added by the Mal/MsilDyn-C malware.
Microsofts	csrcs.exe	X	Added by the Mal/Malat-A malware.
KB991869.exe	KB991869.exe	X	Added by the Troj/DwnLdr-JGZ Trojan.
Grfsfy	Grfsfy.exe	X	Added by the Mal/DorkBot-A Malware.
mslivemsn	svchost.exe	X	Added by the Troj/Delf-FIC Trojan. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe.
Windows System Devices Manager	csrss.exe	X	Added by the Troj/Inject-PX Trojan.
Microsoft Windows LiveMessenger	msnlmsgrsn.exe	X	Added by the Troj/Agent-TDN Trojan.
Acronis Scheduler2 Service	schedhlp.exe	U	Scheduler for backup jobs created with the Seagate's DiscWizard software that comes bundled with certain Seagate hard drives.
AcronisTimounterMonitor	TimounterMonitor.exe	Y	This file is associated with Seagate's DiscWizard software which may come bundled with various hard-drives or may be installed separately. This file monitors and manages mounted images.
mssSort	msssort.exe	Y	This file is installed with software for Maxtor Shared Storage Drives and is part of the Drag and Sort feature which you can read about in Seagate's Knowledge Base.
PostCopy	postcopy.exe	Y	Added by software installed with Belkin F5D5050 USB 10/100 Ethernet Adapter
PostCopy	postcopy.exe	Y	Added by software installed with Belkin F5U409 USB PDA Adapter
SunJavaUpdateSched9	jusched.exe	X	Added by the Troj/Lolbot-A Trojan.
WinUpdate	VX-BioKernel32.exe	X	Added by the W32/PTweak worm.
MircProtection	Io.vbs	X	Added by the VBS/Thea-A malware.
Rato	Rato.vbs	X	Added by the VBS/Rabfu-A malware.
aRato	Rato.vbs	X	Added by the VBS/Rabfu-A malware.
msg	Bun.bat	X	Added by the Bat/Nub-A worm.
update	Update.scr	X	Added by the W32/VB-FMT worm.
Taskman	aegvvp.exe	X	Unknown malware.
Edxaxe	Edxaxe.exe	X	Unknown malware.
Auslogics BoostSpeed 4	boostspeed.exe	N	Added by the Auslogics BoostSpeed system optimization software.
ecc	assist.exe	N	BigPond ISP diagnostic and support software.
SophosNAC_Agent	AgntTray.exe	Y	Agent for Sophos NAC Advanced.
BIH	bih.dll	N	Notebook Battery Info displays information and statistics about your battery performance and charge.
DivX Connected	DivXConnected.exe	Y	Allows you to stream media stored on your computer to a TV that is connected to a DivX Connected device.
mpx	mpx.exe	X	Identified by GData as a variant of the Win32:Trojan-gen malware.
DSPrinterMgr	DSPrinterMgr.exe	N	UPS label printing software.
DSPrintKey	DSPrintKey.exe	N	UPS label printing software.
GetModule33	GetModule33.exe	X	Related to the ISMonitor adware.
ctfmon	rundll32.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. This infection should not be confused with the legitimate C:\Windows\System32\rundll32.exe program.
SunUpdater	javacpl.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Buzus.agev malware.
Alcmtr	anynice360.exe	X	Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.Small.hep malware.
SoftAuto.exe	SoftAuto.exe	N	Creative Labs software updater.
RCHotKey	RCHotKey.exe	Y	Added by the RingCentral Mobile Call Controller virtual phone system.
Free Uploader Oe Integration	fumoei.exe	N	Added by the Free Download Manager program.
DrivehqBackup	DrivehqBackup.exe	Y	DriveHQ Online Backup allows you to backup your files, emails, servers, and database online to DriveHQ's online storage facilities.
DriveHQ FileManager	DriveHQClient.exe	Y	DriveHQ FileManager allows you to backup, synchronize, restore, and host files using DriveHQ online storage.
DriveHQ Email Manager	EmailManager.exe	Y	DriveHQ Email Manager allows you to backup, restore, and manage your hosted DriveHQ email.
PSDiagnosticM	PSDiagnosticM.exe	?	Related to the Linksys Wireless-G Printer Server.
IJNetworkScanUtility	CNMNSUT.EXE	Y	Software agent that allows your computer to receive scan from a network Canon scanner.
CyberDefender Early Detection Center	ISSIntro.exe	Y	Related to the Cyberdefender security program.
Creative SB Monitoring Utility	sbavmon.dll,	?	Creative utility that monitors AVStreams. Is this needed?
ContentTransferWMDetector	ContentTransferWMDetector.exe	N	Sony Content Transfer software allows you to transfer music, video, photos, and podcasts to the Walkman player.
CAPPActiveProtection	CAPPActiveProtection.exe	Y	Related to CA Internet Security.
BlackBerryAutoUpdate	RIMAutoUpdate.exe	N	Process that checks for new updates for the BlackBerry Desktop Manager.
ActivControl	ActivControl2.exe	Y	Added by Promethean's interactive whiteboard software.
iOmem	iOmem101.exe	X	Identified by Sophos as a variant of the Troj/Clicker-FE malware.
iOmem	iOmem.exe	X	Identified by Sophos as a variant of the Troj/Clicker-FE malware.
IEPRS	IEPRS.exe	X	Identified by AntiVir as a variant of the TR/Dldr.JLMR malware.
IEPR	IEPR.exe	X	Identified by AntiVir as a variant of the TR/Dldr.JLMR malware.
SystemExplorerAutoStart	SystemExplorer.exe	N	Added by System Explorer. This program includes process monitors, task manager replacements, install snapshots, and other useful features.
ICompXpSp	cap.exe	X	Added by the Troj/Mdrop-DQO Trojan.
SafePrivacy	SafePrivacy.exe	X	Added by the Koren Rogue anti-spyware program called SafePrivacy.
FineTop	FineTop.exe	X	Identified as a variant of the Adware.FineTop malware.
FineTopUDF	FineTopUDF.exe	X	Identified as a variant of the Adware.FineTop malware.

Pages: (144) 1 [2] 3 4 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.