Windows XP A to Z - http://www.softwaretipsandtricks.com/windowsxp
Start Up Applications M
http://www.softwaretipsandtricks.com/windowsxp/articles/606/1/Start-Up-Applications-M
Super Admin
 
By Super Admin
Published on 03/28/2005
 
Starting with letter M

Start Up Applications M Page 1

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

? M Player Post Installer postinstallm.exe ??
X M-soft Office M-soft Office.hta HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X M1cr0s0ft S3rcurity systemconfig.exe Added by the RBOT.BKB WORM!
X M1cr0s0ft Upd4t4zS update32.exe Added by the RBOT-MI WORM!
X m32info m32info.exe Added by the CRYPTER.A TROJAN!
N M3Tray m3tray.exe Movielink - internet movie rental System Tray access
X Macfee Security Patch Mpfsheild.exe Added by the RBOT-NP WORM!
U Machine Debug Manager mdm.exe Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable
N MacLic MacLic.exe Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
N MacName MacName.exe Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
Y MAD.EXE MAD.EXE MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
N MadExe LaunchRA.exe Dell Resolution Assistant
U MagicDsk MAGICDSK.EXE Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
N Magitime Magitime.exe Magitime - connection tracking utility which monitors online time, expense, data transfer
? Mail.com mcalert.exe Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
U MailBell mailbell.exe MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
U Mailbox Verifier mboxvrfy.exe Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
Y MailScan Dispatcher Launch.exe MailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned
X Mail_Check Mail_Check.exe Added by the PANOIL.C WORM!
U MAIN main.exe SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
? Main Executable (HP) HP05T0R5.exe HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?
X main16 main16.exe Added by the CRYPTER.A TROJAN!
X main32 main32.exe Added by the CRYPTER.A TROJAN!
X mainviewex mainviewex.exe Added by the GEMA.D TROJAN!
N Mania Win Restore RESWIN.EXE Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
X Mantis [filename] Added by the MANTIBE VIRUS!
X MapiDrv mpisvc.exe Added by the MIPSIV TROJAN!
X mapisvc32 mapisvc32.exe Added by the KX VIRUS and also recognised by Symantec as FPAI adware
N masqform.exe masqform.exe PureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms
N Mass storage check registry rundll32.exe MSDServ.dll, check registry Used with a USB based smartmedia card reader
U Master Volume Spy MASTERVOLUMESPY.EXE Volume control for the Gateway Destination "DestiVu" media interface
U Matador mlfbuddy.exe MailFrontier - anti-spam application
U Matador mantispm.exe MailFrontier Desktop (Matador) email spam blocker software
X MatrixScreen [filename] Added by the MATRIXSCREEN TROJAN!
X MatrixScreenSaver mss.exe Malware, see here
N Matrox Color Control hgcctl95.exe For Matrox video cards. Quick access to changing colors
N Matrox Control Center mgactrl.exe For Matrox video cards. Quick access to settings
N Matrox Diagnostic mgadiag.exe For Matrox video cards. Quick access to diagnostics
N Matrox Powerdesk PDesk.exe For Matrox video cards. Quick access to tweak your card to your liking
N Matrox PowerDesk 8 Matrox.PowerDesk.exe /silent For Matrox video cards. Quick access to tweak your card to your liking
N Matrox QuickDesk mgaqdesk.exe For Matrox video cards. Quick access to tweak your card to your liking
X MaxAlerts max.exe Bonzi MaxALERT - spyware
Y MaxtorCombo ComboButton.exe Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
U MaxtorReg AUTOREG.EXE Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
U MBM 4 MBM4.exe Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U MBM 5 MBM5.exe Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U MBProbe mbrpobe.exe MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
X MC wintrims.exe Added by the WINTRIM TROJAN!
X Mcafee Anti Scan NortonScn.exe Added by a variant of the RBOT WORM!
X Mcafee Antivirus Monitoring System32mn VSStatmn32.exe Added by a variant of the RBOT WORM!
Y McAfee Firewall CPD.EXE Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
N McAfee Guardian CMGRDIAN.EXE McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
N McAfee QuickClean Imonitor Plguni.exe McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
X McAfee Windows Protection mcafee32.exe Added by a variant of the SPYBOT WORM!
N McAfee Winguage ?? Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
U McAfee.InstantUpdate.Monitor RuLaunch.exe Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
Y McAfeeUpdaterUI UpdaterUI.exe Associated with McAfee Enterprise 7.0.0. - background process
Y McAfeeVirusScanService Avsynmgr.exe From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
Y McAfeeWebscanX WebScanX.exe From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
X Mcaffe Antivirus Mcafeescn.exe Added by a variant of the SPYBOT WORM!
U McAgentExe mcagent.exe From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
? Mcappins.exe mcappins.exe McAfee Application Installer. What does it do and is it required?
N MChanger MChanger.exe Media Changer - utility that allows you to change wallpapers, sounds, themes, etc
? McRegWiz mcregwiz.exe McAfee antivirus related. What does it do and is it required?
U McUpdateExe mcupdate.exe From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
Y McVsRte mcusrt.exe Part of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why
Y mcvsshld mcvsshld.exe McAfee VirusScan On-line. See also the McAgentExe entry
X MD IE Plugin md.exe Adult content dialler
X MD IE Plugin winy.exe Adware
N mdac_runonce runonce.exe Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". 
X mdetect [path to trojan] Added by the SPABOT TROJAN!
X Mdm Mdm.vbs Added by the WHITEHO VIRUS or TRAPPY WORM!
X mdm mdm.exe Added by the LYDRA-F TROJAN! Note - this is not the valid Machine Debug Manager which shares the same filename
U MDM7 mdm.exe Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable
X Mdmdll mdmdll.exe Added by the CRYPTER TROJAN!
X Mdmdll32 mdmdll32.exe Added by a variant of the CRYPTER.C TROJAN!
X MDN MDNS.exe Added by the SPYBOT.JPB WORM!
X MDN MDNZ.exe Added by the RBOT.AQD WORM!
X mdwmdmsp mdwmdmsp.exe Adware - recognized by Kaspersky antivirus and others as TrojanDownloader.Win32.Agent.am
N MECA Meca.exe Meca instant messenging client
X Media Access MediaAccK.exe Windupdates adware variant
X Media Load msn32.exe Added by a unidentified WORM or TROJAN!
U Media Manager Indexer AIRSVCU.EXE Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
X Media Pass MediaPassK.exe Windupdates adware variant
X Media Player media.exe Added by the FLDMEDIA-A TROJAN!
X Media Player wmplayer.exe Added by the AGOBOT-BM WORM!
X Media Plug x.1.2 msdm.exe Added by the MULDROP.352 VIRUS!
X Media Service msn64.exe Added by the SPYBOT.EV WORM!
X Media service msnmsgxr.exe Added by the SDBOT.TF WORM!
X Media service SYSTEM64.EXE Added by the RBOT.QV WORM!
N MediaFace Integration Sethook.exe Fellowes Neato™ cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
U Mediafour Mac Volume Notifications Macvntfy.exe Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
U Mediafour XPlay Tray Notification Icon Xptryicn.exe Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
U MediaKey MediaKey.exe Multimedia keyboard manager. Required if you use the multimedia keys
X MediaLoads dw.exe Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
X MediaLoads Installer dw.exe Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
N MediaMonitor Mediam~1.exe Installed by Smartdisk MVP CD burning software. Software will work fine without it
X mediamotor.exe mmups.exe Roimoi/Media-Motor adware
X MediaPath Proyecto1.exe Added by the GRUEL WORM!
X MediaPath Root.exe Added by the GRUEL WORM!
N MediaRing Talk mrtalk.exe Media Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
X media_manager mediaman.exe Mini-Player,  IMESH related foistware, see here
X media_stub stub.exe Mini-Player,  IMESH related foistware, see here
X MemConfig SetupIE.com Added by the TAPLAK WORM!
U MemoKit MK.EXE Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
X Memory Check memore.exe Added by the KILLAV.C TROJAN!
N Memory Stick Monitor MSTAT.exe Used with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
U Memory Stick Monitor MSstat.exe Sony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive
X Memory Watcher MemoryWatcher.exe MemoryWatcher spyware
U Memory+ tfimemsr.exe Memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
X MemoryMeter MemoryMeter.exe Autoinstalling spyware by Total Velocity
X MEMreaload MEMreaload.exe Added by the LAZAR TROJAN!
N MemScanner MemScanner.exe SpyHunter - spyware remover of somewhat dubious repute, see note
U MemTurbo memturbo.exe MemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
N MenuSnap MenuSnap.exe MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe
X Message Queuing msmqs.exe Added by the FREEFORS TROJAN!
N MessagerStarter Freeserve StartMessager.exe Freeserve Messenger
U Message_Blocker messageblock.exe Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"
X Messanger trillian.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Messenger messenger.exe Added by the KUTEX TROJAN!
X Messenger Block msngrblock.exe Added by the PATOO WORM!
X Messenger start-up Msgran.exe Added by the GRAMOS WORM!
X Messenger6 command.pif Added by the INZAE.B WORM!
U MessengerDiscovery MessengerDiscovery.exe MessengerDiscovery is a MSN Messenger add-on - adding over 70 new features
N MessengerPlus MsgPlus.exe MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
N MessengerPlus2 MsgPlus.exe MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
N MessengerPlus3 MsgPlus.exe MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
X messnger [worm filename] Added by the DELODER WORM!
X messnger Dvldr32.exe Added by the DELODER.A WORM!
X MeTaLRoCk (irc.musirc.com) has sex with printers metalrock-is-gay.exe Added by the RANDEX.Q WORM!
? mfgboot ?? ??
X mfin32 mfin32.exe MyFreeInternetUpdate - adware downloader
? MGA Hook Mgahook.exe MATROX Graphics card related. What does it do and is it required?
N MGA Quickdesk MGAQDESK.EXE For Matrox video cards. Quick access to tweak your card to your liking
? Mgabg Mgabg.exe Matrox BIOS Guard. What does it do and is it required?
Y mgavctrl mgavrtcl.exe McAfee's Virus Scan Online
Y mgavctrl mgavrte.exe McAfee's Virus Scan Online
Y mgavrtclexe mgavrtcl.exe McAfee's Virus Scan Online
Y mgavrtclexe mgavrte.exe McAfee's Virus Scan Online
N MGA_CD_Install mgasetup.exe Matrox Millennium video driver. Not required once drivers installed
X MHDOGStart mhdogst.EXE Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS
N MHINIT MHINIT.EXE Part of the Cybermedia Clean Sweep package
X Mickey Mouse Cereal [random filename].exe Added by the RANKY.Q TROJAN!
X Micr Update soundblaster.exe Added by the SDBOT.NP WORM!
U Microangelo Desktop Muamgr.exe Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs


Start Up Applications M Page 2
N microAttuneDownload atmdlusr.exe USR (US Robotics) modem auto updater. May be a sub-set of Attune
U MicroDialler atdialler1.exe Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
X Microfinder lptt01 mcf.exe Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X Microfinder ml097e mcf.exe Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X MicroLoad [random filename] Added by the DARBY WORM!
X Microsof Windows Host svhost32.exe Added by the RBOT.ADY WORM!
X Microsof Winlog Host wilogon32.exe Added by the RBOT.XC WORM!
X Microsofot x386 System Monitor system32.exe Added by the WOOTBOT.M WORM!
X microsoft svchost.exe Added by the ASTEF or RESPAN WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X microsoft microsoft.hta HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
X Microsoft Associates, Inc. iexplorer.exe Added by a variant of the LOVGATE WORM!
X Microsoft .NET Confingurator msnconf.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Microsoft 16Bit Update wuapdate16.exe Added by the RBOT.CZ WORM!
X Microsoft ALG32 Protocol alg32.exe Added by a variant of the SPYBOT WORM!
N Microsoft Announcement Listener Annclist.exe MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X Microsoft Ansti Update msie.exe Added by the RBOT-LE WORM!
X Microsoft AOL32 Protocol aol32.exe Added by a variant of the SPYBOT WORM!
X Microsoft Associates, Inc. iexplorer.exe Added by a variant of the LOVGATE WORM!
X Microsoft AUT Update MSlti32.exe Added by the RBOT-X WORM!
X Microsoft AUT Update MSlti16.exe Added by the RBOT.EB WORM!
X Microsoft auto update winupdate.exe Added by the BMBOT TROJAN!
X Microsoft AutoUpdater svhost.exe Added by the RBOT.QG WORM!
X Microsoft boot system cfg32 actboost.exe Added by the BROPIA.R WORM!
X Microsoft Conf Ldr sysconf.exe Added by a variant of the SDBOT TROJAN!
X Microsoft Config msconf.exe Added by the RBOT.PV WORM!
X Microsoft Config MSCONF.EXE Added by the RBOT-LG WORM!
X Microsoft Config File config.exe Added by the KILLFILES.GR TROJAN! This is malware that will attempt to delete all system dlls!
X Microsoft Corporation [random filename] Added by various VIRUSES, WORMS & TROJANS!
X Microsoft CSRSS32 Protocol csrss32.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Microsoft CSRSS386 Protocol csrss386.exe Added by a variant of the SPYBOT WORM!
X Microsoft Cvrt mscvrt32.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Microsoft Data Helper cihost.exe Malware, possibly a variant of the LINST TROJAN
X Microsoft Data Machine csdata32.exe Added by a variant of the RBOT WORM!
X Microsoft Database Handler mssql32.exe Added by the RANDEX.AX WORM!
X Microsoft Decryption Technology Msfenoe.exe Added by the SPYBOT-DG WORM!
X Microsoft Device Manager msdevmgr32.exe Added by the LATEDA.B TROJAN!
X Microsoft Diagnostic [random filename] Added by the ACEBOT TROJAN!
X Microsoft Digital Clock msclock.exe Added by the NACKBOT-D WORM!
X Microsoft DirectX Spoolserv.exe Added by the DINFOR WORM!
X Microsoft DirectX rasmngr.exe Added by a variant of the RBOT WORM!
X Microsoft DirectX PDSched.exe Added by the SDBOT.CN WORM!
X Microsoft DirectX wuamgrd.exe Added by the SDBOT.MY WORM!
X Microsoft Dll Management windll.exe Added by the RBOT-MT WORM!
X Microsoft DNS Query msdns.exe Added by a variant of the WOOTBOT WORM!
X Microsoft Document krisp.exe Added by the SDBOT-RQ WORM!
X Microsoft Drivers WSconf.exe Added by a variant of the SDBOT WORM!
X Microsoft ErgoPack wserb32.exe Added by the RBOT-RI WORM!
X Microsoft Excel msexcel.exe Added by the RBOT-TQ WORM!
X Microsoft Excell wuamngr32.exe Added by the RBOT-QH WORM!
X Microsoft Executing microsoft.exe Added by the AGOBOT.UV WORM!
X Microsoft Explorer svapache.exe Added by the RBOT-VR WORM!
X Microsoft EXPLOREXP Protocol explorexp.exe Added by a variant of the SPYBOT WORM!
X Microsoft Features ms32cfg.exe Added by the RBOT.HO WORM!
X Microsoft Find Fast Findfast.exe Complete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
X Microsoft Firewall firewallsp2.exe Added by the RBOT-MC WORM!
Y MICROSOFT FIREWALL CLIENT ISATRAY.EXE MS Internet Security and Acceleration Server 2000
X Microsoft Gina V Encryption MSGINAV.EXE Added by an unidentified VIRUS, WORM or TROJAN!
N Microsoft Greetings Reminders MHPRMIND.EXE Microsoft Home Publishing greetings reminder
N Microsoft Greetings Workshop Reminder Gwremind.exe You really want to be reminded about somebody's birthday at the expense of resources?
N Microsoft Greetings  Reminder MHPRMINF.EXE You really want to be reminded about somebody's birthday at the expense of resources?
X Microsoft Help SVC msnmngr.exe Added by the SDBOT-PQ WORM!
X Microsoft Help System mshelp32.exe Added by a variant of the RBOT WORM!
X Microsoft IE Iexplore.exe Added by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X Microsoft IE Execute shell IEExec.exe Added by the ALADINZ.N TROJAN!
X Microsoft IIS syshost.exe Added by the FRANCETTE WORM!
X Microsoft Inc. iexplorer.exe Added by a variant of the LOVGATE WORM!
X Microsoft Inet Xp.. teekids.exe Added by the BLASTER.C WORM!
X Microsoft Instant Messenger msngmsngr32.exe Added by the SPYBOTER.GEN TROJAN!
U Microsoft Intellitype Pro speedkey.exe Additional keyboard shortcuts on MS programmable keyboard
X Microsoft Internet expl0rer.exe Added by a variant of the SPYBOT WORM!
X Microsoft Internet windows32.exe Added by the SDBOT-F WORM!
X Microsoft Internet Acceleration Utility iau.exe EasySearch adware
X Microsoft Internet Exp iiexplorer.exe Added by the RBOT-KX WORM!
X Microsoft Internet Explorer iexplore.exe Downloader trojan. Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
X Microsoft Internet Firewall Manager GMT16.exe Added by the RANDEX.AT WORM!
X Microsoft Internet Services Smss32.exe Added by the RBOT.MS WORM!
X Microsoft IPC system.exe Added by the NULLBOT TROJAN!
X Microsoft IPC svshost.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Microsoft IT Update win64.exe Added by the RBOT.GA WORM!
X Microsoft IT Update [random filename] Added by a variant of the RBOT WORM!
X Microsoft IT Update IEserv.exe Added by a variant of the RBOT WORM!
X Microsoft IT Update msupdate.exe Added by a variant of the RBOT WORM!
X Microsoft IT Update winn43.exe Added by a variant of the RBOT WORM!
X Microsoft IT Update svchsst.exe Added by the RBOT-DH WORM!
X Microsoft IT Update win43.exe Added by the RBOT-SA WORM!
X Microsoft IT Update windows.exe Added by the RBOT-GL WORM!
X Microsoft Java Virtual Machine winscr32.exe Added by a variant of the WOOTBOT WORM!
X Microsoft Java Virtual Machine MsConfiG.exe Added by the FORBOT-DV WORM!
X Microsoft Java Windows Update [filename] Added by the RBOT-DZ WORM!
X Microsoft JavaVM msjarun.exe Added by the RBOT-JW WORM!
X Microsoft Kernel Windows_kernel32.exe Added by the NETSKY.AE WORM!
X Microsoft Lmhosting Service lmhosts.exe Added by the RBOT-RC WORM!
X Microsoft Locals 332 [random filename] Added by the RBOT-KU WORM!
X Microsoft LSASS386 Protocol scvhost32.exe Added by a variant of the SPYBOT WORM!
X Microsoft Macro Protection SubSsy msacroprots386.exe Added by the RBOT-KE WORM!
X Microsoft Macro Protection Subsystems msmacroprotxz.exe Added by a variant of the SPYBOT WORM!
X Microsoft Macro Protection Subsystems Msmacroprot32.exe Added by the RBOT.KN WORM!
X Microsoft Management lmas.exe Added by the FORBOT-CZ WORM!
X Microsoft Management Console lssas.exe EasySearch adware
X Microsoft media winmplayers.exe Added by a variant of the SPYBOT WORM!
X Microsoft media services Iassd.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Microsoft media services winmplayer.exe Added by the RBOT.ZO WORM!
X Microsoft Movie Maker Mmaker.exe Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program
X Microsoft MSGPLUS32 Protocol msgplus32.exe Added by a variant of the SPYBOT WORM!
X Microsoft MSNGR32 Protocol msngr32.exe Added by a variant of the SPYBOT WORM!
X Microsoft MsnST msnst32.exe Added by a variant of the RBOT WORM!
X Microsoft MSUPDATE SpoolSvc.exe Added by the SXTB-A TROJAN!
X Microsoft NetMeeting Associates, Inc. NetMeeting.exe Added by a variant of the LOVGATE WORM!
X Microsoft Netview gesfm32.exe Added by the RANDEX.C WORM!
X Microsoft Netview mssvc32.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Microsoft Netview Component v5.1 msnv32.exe Added by the RANDEX.F WORM!
X Microsoft Network msnet.exe Added by the MOCKBOT.A WORM!
X Microsoft Network Daemon for Win32 Netd32.exe Added by the SDBOT.R TROJAN!
X Microsoft NT Update winexec32.exe Added by a variant of the RBOT WORM!
N Microsoft Office Osa.exe Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
N Microsoft Office Msoffice.exe Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
X Microsoft Office MSMSGR.exe Added by the GAOBOT.BB WORM!
N Microsoft Office Osa9.exe Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
X Microsoft Office lserv.exe Added by the SDBOT.MH WORM!
X Microsoft Office Microsoft Office.hta HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!
N Microsoft Office Fast Cache Fastboot.exe Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled
U Microsoft Office OneNote 2003 Quick Launch ONENOTEM.EXE ONENOTEM.EXE is a part of the note taking program that ships with Microsoft Office 2003. It's required for the side note windows to work
N Microsoft Office Shortcut Bar Msoffice.exe Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
X Microsoft Office Start winupdates.exe Added by the GAOBOT.BC WORM!
N Microsoft Office Startup Osa.exe Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
N Microsoft Office Startup Osa9.exe Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show
X Microsoft Office Studio scvhvst.exe Added by the RANDEX.CST WORM!
X Microsoft Personal Firewalls bakw.exe Added by the RBOT-KS WORM!
X Microsoft QMGR msnqmgr.exe Added by the IRCBOT-S TROJAN!
X Microsoft RDLL sysconf32.exe Added by a variant of the SDBOT TROJAN!
X Microsoft Registry csrse.exe Added by the RBOT-PC WORM!
X MicroSoft Remote Secure Service MSRSS.exe Added by a variant of the RBOT WORM!
X Microsoft Restore scrgrd.exe Added by the SPYBOT.BR WORM!
X Microsoft Runtime CfgDll32.exe Added by the RANDEX.BD WORM!
X Microsoft Scanreg microsoftscanreg.exe Added by the FRANRIV.A WORM!
X Microsoft SCVHOST32 Protocol scvhost32.exe Added by a variant of the RBOT WORM!
X Microsoft Secure Messenger.NET Service securitychk.exe Added by the SDBOT.VT WORM!
X Microsoft Security Hot Fix Update mshotfix.exe Affilred adware
X Microsoft Security Management winnt.exe Added by the RBOT-MQ WORM!
X Microsoft Security Management winserv.exe Added by the RBOT-MJ WORM!
X Microsoft Server Application Sound.exe Added by the RBOT-NE WORM!
X Microsoft Service microhost.exe Added by the RBOT-LC WORM!
X Microsoft Service winsvc.exe Added by the SPYBOT-DB WORM!
X Microsoft Services lsserv.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Microsoft Services lssrv.exe Added by the RBOT.CW WORM!
X Microsoft Services services.exe Added by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X Microsoft Services lsrv.exe Added by the RBOT-BK WORM!
X Microsoft Services svshost.exe Added by the ALETS.B TROJAN!
X Microsoft Services Unitd MSU32.exe Added by a variant of the RBOT WORM!
N Microsoft Sidewinder Game Controller Software SWTRAY.EXE MS SideWinder game controller system tray icon. Available via Start -> Programs
X Microsoft Software sysinfo33.exe Added by the RBOT.LS WORM!
X microsoft software ****.exe E255 [* = random char] Added by an unidentified WORM or TROJAN!
X Microsoft software cdaccess.exe Added by the RBOT.ABK WORM!
X Microsoft Software Update nmon.exe Added by the RBOT.HZ WORM!
X Microsoft Sound Driver sound32.exe Added by a variant of the SPYBOT WORM!
N Microsoft Sound Volume Tool mssvol.exe This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
X Microsoft SourceSafe csrss.exe Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X Microsoft Spool Server for Win32 spoolsrv.exe Added by the RANDEX.H WORM!
X Microsoft SSISVRI32 Protocol ssisvri.exe Added by a variant of the SPYBOT WORM!
X Microsoft Synchronization Manager asgard.exe Added by the SDBOT.PH WORM!
X Microsoft Synchronization Manager bot.exe Added by the SDBOT.IH WORM!
X Microsoft Synchronization Manager netscape.exe Added by the RANDEX.AE WORM!
X Microsoft Synchronization Manager slhost.exe Added by the SDBOT.YH WORM!
X Microsoft Synchronization Manager svhost.exe Added by the SDBOT-PY WORM!
X Microsoft Synchronization Manager WinLoginnn.exe Added by the SPYBOT.FO WORM!
X Microsoft Synchronization Manager winupdate.exe Added by the SDBOT.ER WORM!
X Microsoft Synchronization Manager xXx.exe Added by the SDBOT-KZ WORM!
X Microsoft Synchronization Manager ___synmgr.exe Added by the MASLAN.A or MASLAN.C WORMS!
X Microsoft Synchronization Manager al.exe Added by the OPTXPRO.132 TROJAN!
X Microsoft Synchronization Manager win.exe Added by the SDBOT.AK WORM!

Start Up Applications M Page 3
X Microsoft System Checkup Cool.exe Added by the DONK.B WORM!
X Microsoft System Checkup Wnetlib.exe Added by the DONK.C WORM!
X Microsoft System Checkup dbnetlib.exe Added by the DONK.L WORM!
X Microsoft System Checkup Keymgr.exe Added by the DONK.M WORM!
X Microsoft System Checkup inetman.exe Added by the DONK.O WORM!
X Microsoft System Checkup ntsysmgr.exe Added by the DONK.S WORM!
X Microsoft System Checkup ntsysman.exe Added by the SDBOT-QW WORM!
X Microsoft System Checkup libsysmgr.exe Added by the SDBOT-CAF WORM!
X Microsoft System Checkup sysmgr.exe Added by the SDBOT-OO TROJAN!
X Microsoft System Restore Configuration CBRSS.EXE Added by a variant of the SPYBOT WORM!
X Microsoft System32 Update cmsrg.exe Added by the RBOT-GN WORM!
X Microsoft Time Manager dveldr.exe Added by the RBOT-HQ WORM!
X Microsoft Transfer File Server mtfs.exe Added by the RBOT.AFE WORM!
X Microsoft Tray [random filename] Added by the DELF.BZ TROJAN!
X Microsoft Update Microsoft.exe Added by the GAOBOT.AFJ WORM!
X Microsoft Update mssmgrd.exe Added by the SDBOT.JT WORM!
X Microsoft Update mvsc.exe Added by the SPYBOT.DAZ WORM!
X Microsoft Update ascdl.exe Added by the GAOBOT.SY WORM!
X Microsoft Update Isac.exe Added by the RBOT-AU WORM!
X Microsoft Update automgr32.exe Added by a variant of the RBOT WORM!
X Microsoft Update mediap.exe Added by a variant of the RBOT WORM!
X Microsoft Update Microsoftx.exe Added by a variant of the RBOT WORM!
X Microsoft Update msconfg.exe Added by the RBOT.H WORM!
X Microsoft Update Mslti32.exe Added by the RBOT-LX WORM!
X Microsoft Update muamgrd.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Microsoft Update navmgrd.exe Added by the SDBOT.DP TROJAN!
X Microsoft Update Smss32.exe Added by the RBOT.CB WORM!
X Microsoft Update sys32cfg.exe Added by a variant of the SPYBOT WORM!
X Microsoft Update VPC32.EXE Added by the AGOBOT.XM WORM!
X Microsoft Update winsys32.exe Added by a variant of the RBOT WORM!
X Microsoft Update wuamgrd.exe Added by the RBOT-LK WORM!
X Microsoft Update wuammgr32.exe Added by the RBOT-AW WORM!
X Microsoft Update wudmate.exe Added by the RBOT.AP WORM!
X Microsoft Update msawindows.exe Added by the GAOBOT.AFJ WORM!
X Microsoft Update msiwin84.exe Added by the GAOBOT.AFJ WORM!
X Microsoft Update wuamgrd32.exe Added by the RBOT.ZB WORM!
X Microsoft Update NAV.exe Added by the RBOT-IV WORM!
X Microsoft Update systemi32.exe Added by a variant of the SPYBOT WORM!
X Microsoft Update xpupdate.exe Added by the RBOT-QE WORM!
X Microsoft Update webm.exe Added by the SDBOT.WK WORM!
X Microsoft Update wuagrd.exe Added by the RBOT-FK WORM!
X Microsoft Update aaupdt.exe Added by the RBOT-RQ WORM!
X Microsoft Update lsac.exe Added by the GAOBOT.XW WORM!
X Microsoft Update Mupdate.exe Added by the RBOT-AG WORM!
X Microsoft Update prowind32.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Microsoft Update snlogsvc.exe Added by a variant of the RBOT WORM!
X Microsoft Update svhost.exe Added by the RBOT-PI WORM!
X Microsoft Update wauguard.exe Added by the RBOT.AEE WORM!
X Microsoft Update winscv.exe Added by the RBOT-BH WORM!
X Microsoft Update winsys.exe Added by the RBOT-GV WORM!
X Microsoft Update wserv32.exe Added by the RBOT.AF WORM!
X Microsoft Update wtm32.exe Added by the RBOT-AQ WORM!
X Microsoft Update wumgrd.exe Added by the SDBOT-KY WORM!
X Microsoft Update wuampd.exe Added by the RBOT-UT WORM!
X Microsoft Update 32 explore32.exe Added by the SPYBOT.CYM WORM!
X Microsoft Update 32 MSupdate32.exe Added by a variant of the SPYBOT WORM!
X MICROSOFT UPDATE CONFIGURATION WIN32SNC.EXE Added by the RBOT-AI WORM!
X Microsoft Update Emulator kern-mxe.exe Added by a variant of the RBOT WORM!
X Microsoft Update Loader [random filename] Added by a variant of the RBOT WORM!
X Microsoft Update Machine expl0rer.exe Added by the SDBOT.OK WORM!
X Microsoft Update Machine rxhost.exe Added by the RBOT.FC WORM!
X Microsoft Update Machine servicz.exe Added by the RBOT-HU WORM!
X Microsoft Update Machine SP2.exe Added by the SPYBOT.FP WORM!
X Microsoft Update Machine winini.exe Added by the RBOT-KV WORM!
X Microsoft Update Machine xvshost.exe Added by the RBOT.QP WORM!
X Microsoft Update Machine memstat.exe Added by the RBOT-OM WORM!
X Microsoft Update Machine ntce.exe Added by the RBOT-FA WORM!
X Microsoft Update Machine system03.exe Added by the RBOT-NM WORM!
X Microsoft Update Machine wuawx.exe Added by the RBOT-CE WORM!
X Microsoft Update Machine zonealarm.exe Added by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program!
X Microsoft Update Machine systemll.exe Added by the RBOT-JT WORM!
X Microsoft Update Machine winupdt.exe Added by the RBOT-FP WORM!
X Microsoft Update Machine svshost.exe Added by the RBOT.AK WORM!
X Microsoft Update Machine wuamgd.exe Added by the SDBOT.HQ WORM!
X Microsoft Update Machine wupdt32x.exe Added by a variant of the SDBOT WORM!
X Microsoft Update Machine [random filename] Added by a variant of the RBOT WORM!
X Microsoft Update Machine linux.exe Added by the RBOT-IM WORM!
X Microsoft Update Machine lmrss.exe Added by the RBOT-DY WORM!
X Microsoft Update Machine windowsu.exe Added by a variant of the RBOT WORM!
X Microsoft Update Machine wininigo.exe Added by a variant of the