O4 HijackThis Entries

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

BleepingComputer.com -> Startup Programs Database -> O4 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (144) 1 2 [3] 4 5 ... Last »

Name	Filename	Status	Description
UTab	utab.exe	X	Identified as a variant of the Adware/UTab malware.
hantiat6	hantiat6.exe	X	Identified by AVG as a variant of the Win32:Delf-PXN malware.
CouponAlert_2p Browser Plugin Loader	2pbrmon.exe	X	Detected by ESET Nod32 as a variant of the Win32/AdInstaller malware.
DefenseVirusMain	DefenseVirus.exe	X	Added by the Korean rogue called Defensevirus.
WinSideMatchUpDate.exe	WinSideMatchUpDate.exe	X	Detected by Kaspersky Antivirus as AdWare.Win32.Agent.seb.
sidematchup	sidematchup.exe	X	Identified by AVG antivirus as a variant of the Skodna.Generic.BV malware.
TRSearch	TRSearchU.exe	X	Detected by Malwarebytes' Anti-Malware as Adware.K.TRSearch.
infoguardr	infoguardrun.exe	X	Added by the Korean rogue called InfoGuard.
CodeScanMain	CodeScan.exe	X	Added by the CodeScan rogue anti-spyware program.
DualVaccine	DualVaccine.exe	X	Added by the Korean rogue called DualVaccine.
MacroVirus	MacroVirus.exe	X	Added by the MacroVirus rogue.
Zentom System Guard	vcc70dep2r.exe	X	Added by the Zentom System Guard rogue anti-spyware program.
vcc70dep2r.exe	vcc70dep2r.exe	X	Added by the Zentom System Guard rogue anti-spyware program.
{<random numbers>}	RtlDriver32.exe	X	Added by the Total Protect rogue anti-spyware program.
Windows upgrade	svchost.exe	X	Added by the Antivirus 2011 Edition limitée rogue anti-spyware program. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.
Home Safety Essentials	<random chars and numbers>.exe	X	Added by the Home Safety Essentials rogue anti-spyware program.
Windows Login access	windows.exe	X	Added by the Troj/DwnLdr-JDP Trojan.
msinfo	2.tmp.exe	X	Added by the Troj/Newmen-A Trojan.
safe360	coiome.exe	X	Unknown malware.
XP-C300C3AC	XP-C300C3AC.EXE	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Downloader.Win32.FlyStudio.ho malware.
(Default)	ctfmot.exe	X	Identified by Kaspersky as a variant of the Packed.Win32.Black.a malware.
HotKeysCommands	HKCwin32.exe	X	Unknown Trojan.
javarun	runsysdlls.exe	X	Unknown malware.
iexplorer	iexopllorer.exe	X	Unknown malware.
oxygener	oxygener.exe	X	Identified by Kaspersky as a variant of the Trojan.Win32.BHO.argt malware.
BoanClear	BoanClear.exe	X	Identified by Kaspersky as a variant of the Trojan.Win32.FakeAV.dfeg malware.
upbb	bb.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Banker.Win32.Banker.bgaf malware.
<random chars>	utilmanh.exe	X	Unknown malware.
Ldxaxl	Ldxaxl.exe	X	Unknown malware.
Ecxaxe	Ecxaxe.exe	X	Unknown Malware.
ACTIVfilter	ACTIVfilter.exe	Y	Added by Promethean's interactive whiteboard software.
ActivDRVAutostart	ACTIVcontrol.exe	Y	Added by Promethean's interactive whiteboard software.
Msmsgs	Msmsgs.exe	X	Added by the W32/SillyFDC-AP removable media worm.
PDFCreatorClient	PDFClient.exe	U	Added by the Jaws PDF Creator.
Advanced SystemCare 3	AWC.exe	N	Added by the Advanced SystemCare system optimization software.
FlashTray Pro	FlashTray.exe	Y	FlashTray Pro is a Windows tray application that allows you to launch applications using scripted macros.
VPN.EXE	VPN.EXE	Y	Part of the Nortel Contivity VPN client.
Kernel Video Driver	kdvhost.exe	X	A variant of the Win32/Rbot worm.
Easy Synchronization	LogitechEasySync.exe	N	Logitech software that allows you to synchronize your Bluetooth devices with your computer.
TweakVI	tweakvi.exe	N	Added by the TweakVI Vista system optimization software.
TweakVIDesktops	desktops.exe	N	Added by the TweakVI Vista system optimization software.
lxdvamon	lxdvmon.exe	U	Lexmark 5400 Series Device Monitor.
lxdvmon.exe	lxdvmon.exe	U	Lexmark 5400 Series Device Monitor.
adobeupd	adobeupd.exe	X	Unknown malware.
nwiz	alitte32.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Spy.Win32.Agent.gmo malware.
V0400Mon.exe	V0400Mon.exe	N	Added by Creative Labs Webcam software.
Windows Service Processor	shdocvw.exe	X	Identified by Kaspersky Antivirus as a variant of the not-a-virus:FraudTool.Win32.PcPrivacyCleaner.t malware.
Java Runtime Update	Java Update.exe	X	Unknown malware
Adobe System Update	Adobe_Update.exe	X	Unknown malware
NSLauncher	NSLauncher.exe	N	Added by the Nokia PC Suite software. This program detects when you connect your Nokia devices and then automatically launches the program.
LPMailChecker	LPMLCHK.exe	N	Added by the ThinkVantage Productivity Center software. This software checks for new messages from IBM/Lenovo.
McAfeeHIPReg	FireEpo.dll	Y	Part of McAfee Desktop Firewall.
Ovt Wia	OV530EM.exe	N	Software that detects when an OmniVision device is connected to your computer.
SunJavaUpdater v2	javaw.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Dropper.Win32.Agent.aefe malware.
HF	hf1222.exe	X	Unknown malware.
DaemonUI	DaemonUI.exe	N	This software provides a graphical user interface for the DaemonTools program.
tscuninstall	tscupgrd.exe	Y	Migrates Pre-XP Terminal Server Client software and its connections to the latest version when a user logs onto the computer.
EPGServiceTool	EPGClient.exe	Y	Tuner software for Hauppauge TV tuner devices.
VibeFireAlerts	VibeFire.exe	Y	A program that alerts you when a RSS feed has been updated.
SMSTray	SMSTray.exe	U	Samsung Media Studio was developed to manage audio, video, photo collections on Samsung media player devices. This program will check for new media that should be imported to your computer every time you connect your device.
USB Safely Remove	USBSafelyRemove.exe	Y	USB Safely Remove is a replacement for the Windows safe removal tool for removable media devices.
BJLaunchEXE	BJLaunch.exe	N	Canon Bubblejet Printer software that is launched when a flash/memory card is inserted into the printer.
MTController	lolactrl.exe	Y	Added by the Lola music streaming software.
fmplug	fmplug.exe	X	Detected by McAfee as a variant of the Downloader-QN malware.
GetModule30	GetModule30.exe	X	Added by a variant of the Adware.ISM/Adware.Adsponsor adware.
GetModule29	GetModule29.exe	X	Added by a variant of the Adware.ISM/Adware.Adsponsor adware.
Adobe Acrobat Speed Launcher	Acrobat_sl.exe	N	Added by Adobe Acrobat Reader Standard 9.0, and possibly other versions. This program preloads certain aspects of the program so that it will launch quicker as necessary.
Local Account Service	lssas.exe	X	Related to the Virus.Win32.Virut.ce malware. This file should not be confused with the legitimate C:\Windows\System32\lsass.exe file.
<random chars>	xztblg.exe	X	Related to the Virus.Win32.Virut.ce malware.
apps	eghmi3.exe	X	Related to the Virus.Win32.Virut.ce malware.
#ozkan#	tskmanager.exe	X	Unknown Malware.
tskmanager.exe	tskmanager.exe	X	Unknown Malware.
Gamevance	gamevance32.exe	X	Added by the GameVance adware. GameVance is a potentially unwanted application that displays keyword advertisements on the computer.
HotKey	SFCsrvc.pif	X	Added by the W32/AutoIt-OC worm.
adobe_System_App	Toolkit.exe	X	Added by the Troj/FakeAV-ELH Trojan.
Windows Update System	hostsys.exe	X	Added by the Troj/VB-FMO Trojan.
ccepic	ccepic.exe	X	Added by the Troj/MSIL-H Trojan.
System Init	logic.exe	X	Added by the W32/AutoIt-OB removable media worm.
conhost	conhost.exe	X	Added by the rogue anti-spyware program called Wolfram Antivirus.
infodataS	infodataU.exe	X	Koren rogue anti-virus program. This file is identified by ESET Nod32 as a variant of the Win32/Adware.IScan.A adware.
SearchLitekr	SearchLite.exe	X	Identified by ESET Nod32 as a variant of the Win32/Adware.Kraddare.AR adware. This program originates from the Korean site searchlite.kr.
QdrModule15	QdrModule15.exe	X	Added by the Internet Speed Monitor I adware.
ocomm.exe	ocomm.exe	Y	Related to Oracle Fusion.
DllHst	dllhst3g.exe	X	Added by the Troj/Bckdr-QQX backdoor Trojan.
NT Printing Services6	dllhosts.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan-Downloader.Win32.Agent.aswc malware.
WindowsUpdate	cmd32.exe	X	Identified as a variant of the Backdoor:Win32/Coolvidoor.D malware.
Alcmtr	aliwe32.exe	X	Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.Small.hay malware.
adsnt	AdsNT.exe	X	Added by the TROJ_ADLOAD.GL Trojan.
Windows Printing Driver	gpedits.exe	X	Added by the Win32/DCKeyg.A worm.
Virtual Java	wintgtsv.exe	X	Identified by Kaspersky Antivirus as a variant of the Spy-Agent.cs malware.
GDR driver	gdrhost.exe	X	Identified as a variant of the Backdoor.SdBot malware.
MS Windows State Monitor	twunk_16.exe	X	Identified by Kaspersky Antivirus as a variant of the Trojan-PSW.Win32.Agent.keh malware.
helperdll	Pupw.sys	X	Added by the Adware.Henbang adware. Adware.Henbang displays pop-up advertisements on the compromised computer. Please note that C:\Windows\System32\rundll32.exe is a legitimate file and should not be deleted.
BCUpdate	BCUP.exe	X	Added by the Adware.BocaiToolbar adware.
Windows Printing Driver	doskeys.exe	X	Identified as a variant of the Backdoor.Graybird malware.
Alcmtr	anyone360.exe	X	Identified by Symantec as a variant of the Infostealer.Lemir malware.
compmgmt	CTFM0N.EXE	X	Added by the TROJ_INJECT.PT Trojan. Please note that this file should not be confused with the legitimate C:\Windows\System32\ctfmon.exe. Please note that the virus filename contains a zero and not the letter oh.
Logman	logman.exe	X	Identified as a variant of the TrojanDownloader:Win32/Horst.Q malware.
rsvp	rsvp.exe	X	Added by the Gafermus.A Trojan. Gafermus.A is designed to download malware to the affected computer. In order to do so, it connects to several websites from which it attemps to download malicious files.
DF	windf.exe	X	Added by the Win32/Windage.A password-stealing Trojan.

Pages: (144) 1 2 [3] 4 5 ... Last »

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.