O4 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O4 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List

· Submit a Startup

· Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (125) 1 2 [3] 4 5 ... Last »

Name	Filename	Status	Description
s9201	av2008xp.exe	X	Added by the Antivirus 2008 XP rogue security software.
<random number>	av2009.exe	X	Added by the Antivirus 2009 rogue anti-spyware program.
incorrectnesses	xevhbpw.dll	X	Zlob Trojan which installs the AntiSpyCheck rogue anti-spyware program. This program displays fake security alerts stating that your computer has a security problem and then downloads and install AntiSpyCheck onto your computer without permissions. This Trojan pretends to be a fake video codec required to watch videos online.
Windows Genuine Validate	winservicessss.exe	X	A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote server. It then uploads one or more files and runs them on the compromised system.
Windows Helper	wsctnfy.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
System Task Manager	taskmrg.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Microsoft Update	enule.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
Microsoft Security Monitor Process	svcchost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
SYSTEM	SystemFile.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Local ISP	winthcr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
XP System	systemxp.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
XP Loader	loaderxp.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Temperate Services	wintmp.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Win Security	winsecure.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Messenger Live Startup	windowslivemsn.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Win Config	winconfig.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System IP	systemip.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Kinetik Svc	msftksvc.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Initialization Services	initserv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Initialization Service	initsvc.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Excele	msmsgs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
IPLog Security	iplogsec.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Generic Host Process for Win32 Services	winlogon.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans. This infection should not be confused with the legitimate C:\Windows\System32\winlogon.exe file.
File-Sharing Wizard	shwizard.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Csrss Host	csrhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Boot Service	bootservice.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Boot Server	bootserver.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Srv Host	srvhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
SND Volumes	sndvolumes.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Smss Host	smhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Services DLL Loader	srvdll.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Servicer	msnservicer.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Router	msnrouter.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Messenger Service Startup	msnservice.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Messenger Live Login	msnmessengerlive.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Messenger Inbox Loader	msninbox.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Messages	msnmessgs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
USS	USS.exe	X	Trojan that create fake alerts and popups advertising rogue anti-spyware program. Though the guide below is not for this particular infection, it will remove it.
Windows Update	msnsa32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Services	winsysdll.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN File Sharing Wizard	msnsharewiz.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN File Configuration	msnfilecfg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN6.1 Auto-Updater	v6msn.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Notifications	popuper.exe	X	Added by the InternetSecurityDeluxe rogue anti-spyware program.
InternetSecurityDeluxe	InternetSecurityDeluxe.exe	X	Added by the InternetSecurityDeluxe rogue anti-spyware program.
Antispyware-2008.exe	Antispyware-2008.exe	X	Added by the AntiSpyware 2008 rogue anti-spyware program.
Antivirus	avm.exe	X	Added by the Antivirus Master rogue anti-spyware program.
The Registry Sentinel	The Registry Sentinel.exe	X	Added by the The Registry Sentinel rogue anti-spyware program.
The Web Sentinel	The Web Sentinel.exe	X	Added by the The Web Sentinel rogue anti-spyware program.
PCTotalDefender	pgs.exe	X	Identified as a variant of the PCTotalDefender rogue anti-spyware program.
win aggiornamento	winupdt.exe	X	Identified as a variant of the BKDR_SMALL.GSJ malware.
win aggior	winupdt.exe	X	Identified as a variant of the BKDR_SMALL.GSJ malware.
win	winupdt.exe	X	Identified as a variant of the BKDR_SMALL.GSJ malware.
Windows WKS Services	wkssvr1.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Services	w32edus.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Messanger Control Center	winlogin.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Service Update Client	svcupdcli.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Update	scrigz.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows MSN Live Messenger	winlivemsn.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Host Booter	hostbooter.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows	spoovlss.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN RPC Manager	msnrpcmgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Communication Manager	msncommgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Generic Host Process for Win Services	mscvs.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
GT15J4R49V	cpuserv.exe	X	Identified as a variant of the Trojan.Win32.Radi.gu malware.
Doctor Antivirus 2008	antvr.exe	X	Added by the Doctor Antivirus 2008.
DRam prosessor	msupdate.exe	X	Added by the Troj/Delf-FAW Trojan.
NETGEAR WG111v2 Smart Wizard	WG111v2.exe	N	Setup and diagnostics program for the Netgear WG111v2 wireless USB adapter.
wblogon	ubpr01.exe	X	Added by the Troj/Agent-HFI Trojan.
Windows Services	winudp.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Services	winlogon.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Service2	Service2.exe	X	Identified as a variant of the Backdoor.Win32.Iroffer malware.
Windows Kernel Log	WinKettle.exe	X	Added by the Troj/Agent-HFA Trojan.
darkbyte23	darkbyte23.exe	X	Added by the W32/DarkBit-A worm.
AVP	avp.exe	Y	Related to Kaspersky Internet Security.
UPD Client	updclient.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Boot Client	bootcli.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
{H9I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}	hackshen.vbs	X	Added by the W32/AutoRun-GB removable media worm.
AUTORUN_VAL	asc 2.1.exe	X	Added by the AntiSpyCheck rogue anti-spyware program. AntiSpyCheck is a misleading application that may give exaggerated reports of threats on the computer.
asc32	asc 2.1.exe	X	Added by the AntiSpyCheck rogue anti-spyware program. AntiSpyCheck is a misleading application that may give exaggerated reports of threats on the computer.
sprof	sprof.exe	X	Identified as a variant of the Trojan-Downloader.Win32.FraudLoad.vagm malware.
pctdf.exe	pctdf.exe	X	Identified as a variant of the PCTotalDefender rogue anti-spyware program.
Service Client	winsvcli.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Firewall	rundll32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans. This infection should not be confused with the legitimate C:\Windows\System32\rundll32.exe file.
Windows UDP Control Center	winudpmgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Driver Sup	windvrhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Win32Updater	KERNAL32.EXE	X	Added by the W32/Spybot-OK worm and IRC backdoor.
Windows UDP Control Center	winrofl32.exe	X	Added by the Troj/LdPinch-RZ Trojan.
%Temp%\delwdef2008.bat	delwdef2008.bat	X	Added by the WinDefender 2008 rogue privacy program.
WinDefender 2008	WDefDemo.exe	X	Added by the WinDefender 2008 rogue privacy program.
PC-Antispy	PC-Antispy.exe	X	Added by the PC Antispy rogue anti-spyware program.
VirusRemover2008	VRM2008.exe	X	Added by the VirusRemover2008 rogue anti-spyware program.
<random number>	total.exe	X	Added by the Total Antivirus rogue anti-spyware program.
wistaantivirus	wistaantivirus.exe	X	Added by the Wista Antivirus rogue anti-spyware program.
Windows Messenger User Agent	msnmsrg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Ms System Config	xplsass.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows ARP Detectioncx	winlogon.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
OS Boot Loader	bootloader.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Update Client	msnupdcli.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Auto-Updater	msnaupdater.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.

Pages: (125) 1 2 [3] 4 5 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.