Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.
To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.
Alternatively use your browsers search facility - Ctrl+F for IE users.
Key:
"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
Use your browsers search facility - Ctrl+F for IE users.
| ? | M Player Post Installer | postinstallm.exe | ?? |
| X | M-soft Office | M-soft Office.hta | HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! |
| X | M1cr0s0ft S3rcurity | systemconfig.exe | Added by the RBOT.BKB WORM! |
| X | M1cr0s0ft Upd4t4zS | update32.exe | Added by the RBOT-MI WORM! |
| X | m32info | m32info.exe | Added by the CRYPTER.A TROJAN! |
| N | M3Tray | m3tray.exe | Movielink - internet movie rental System Tray access |
| X | Macfee Security Patch | Mpfsheild.exe | Added by the RBOT-NP WORM! |
| U | Machine Debug Manager | mdm.exe | Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable |
| N | MacLic | MacLic.exe | Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks |
| N | MacName | MacName.exe | Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks |
| Y | MAD.EXE | MAD.EXE | MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up? |
| N | MadExe | LaunchRA.exe | Dell Resolution Assistant |
| U | MagicDsk | MAGICDSK.EXE | Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons |
| N | Magitime | Magitime.exe | Magitime - connection tracking utility which monitors online time, expense, data transfer |
| ? | Mail.com | mcalert.exe | Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived? |
| U | MailBell | mailbell.exe | MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance) |
| U | Mailbox Verifier | mboxvrfy.exe | Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance) |
| Y | MailScan Dispatcher | Launch.exe | MailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned |
| X | Mail_Check | Mail_Check.exe | Added by the PANOIL.C WORM! |
| U | MAIN | main.exe | SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan |
| ? | Main Executable (HP) | HP05T0R5.exe | HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do? |
| X | main16 | main16.exe | Added by the CRYPTER.A TROJAN! |
| X | main32 | main32.exe | Added by the CRYPTER.A TROJAN! |
| X | mainviewex | mainviewex.exe | Added by the GEMA.D TROJAN! |
| N | Mania Win Restore | RESWIN.EXE | Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs |
| X | Mantis | [filename] | Added by the MANTIBE VIRUS! |
| X | MapiDrv | mpisvc.exe | Added by the MIPSIV TROJAN! |
| X | mapisvc32 | mapisvc32.exe | Added by the KX VIRUS and also recognised by Symantec as FPAI adware |
| N | masqform.exe | masqform.exe | PureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms |
| N | Mass storage check registry | rundll32.exe MSDServ.dll, check registry | Used with a USB based smartmedia card reader |
| U | Master Volume Spy | MASTERVOLUMESPY.EXE | Volume control for the Gateway Destination "DestiVu" media interface |
| U | Matador | mlfbuddy.exe | MailFrontier - anti-spam application |
| U | Matador | mantispm.exe | MailFrontier Desktop (Matador) email spam blocker software |
| X | MatrixScreen | [filename] | Added by the MATRIXSCREEN TROJAN! |
| X | MatrixScreenSaver | mss.exe | Malware, see here |
| N | Matrox Color Control | hgcctl95.exe | For Matrox video cards. Quick access to changing colors |
| N | Matrox Control Center | mgactrl.exe | For Matrox video cards. Quick access to settings |
| N | Matrox Diagnostic | mgadiag.exe | For Matrox video cards. Quick access to diagnostics |
| N | Matrox Powerdesk | PDesk.exe | For Matrox video cards. Quick access to tweak your card to your liking |
| N | Matrox PowerDesk 8 | Matrox.PowerDesk.exe /silent | For Matrox video cards. Quick access to tweak your card to your liking |
| N | Matrox QuickDesk | mgaqdesk.exe | For Matrox video cards. Quick access to tweak your card to your liking |
| X | MaxAlerts | max.exe | Bonzi MaxALERT - spyware |
| Y | MaxtorCombo | ComboButton.exe | Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect) |
| U | MaxtorReg | AUTOREG.EXE | Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of |
| U | MBM 4 | MBM4.exe | Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| U | MBM 5 | MBM5.exe | Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| U | MBProbe | mbrpobe.exe | MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| X | MC | wintrims.exe | Added by the WINTRIM TROJAN! |
| X | Mcafee Anti Scan | NortonScn.exe | Added by a variant of the RBOT WORM! |
| X | Mcafee Antivirus Monitoring System32mn | VSStatmn32.exe | Added by a variant of the RBOT WORM! |
| Y | McAfee Firewall | CPD.EXE | Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE |
| N | McAfee Guardian | CMGRDIAN.EXE | McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic |
| N | McAfee QuickClean Imonitor | Plguni.exe | McAfee QuickClean 3.0 - removes internet clutter and unwanted programs |
| X | McAfee Windows Protection | mcafee32.exe | Added by a variant of the SPYBOT WORM! |
| N | McAfee Winguage | ?? | Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs |
| U | McAfee.InstantUpdate.Monitor | RuLaunch.exe | Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis |
| Y | McAfeeUpdaterUI | UpdaterUI.exe | Associated with McAfee Enterprise 7.0.0. - background process |
| Y | McAfeeVirusScanService | Avsynmgr.exe | From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application |
| Y | McAfeeWebscanX | WebScanX.exe | From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc |
| X | Mcaffe Antivirus | Mcafeescn.exe | Added by a variant of the SPYBOT WORM! |
| U | McAgentExe | mcagent.exe | From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed |
| ? | Mcappins.exe | mcappins.exe | McAfee Application Installer. What does it do and is it required? |
| N | MChanger | MChanger.exe | Media Changer - utility that allows you to change wallpapers, sounds, themes, etc |
| ? | McRegWiz | mcregwiz.exe | McAfee antivirus related. What does it do and is it required? |
| U | McUpdateExe | mcupdate.exe | From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions |
| Y | McVsRte | mcusrt.exe | Part of McAfee's SecurityCenter. Must remain checked but one user reports Windows glitches with no response from McAfee as to why |
| Y | mcvsshld | mcvsshld.exe | McAfee VirusScan On-line. See also the McAgentExe entry |
| X | MD IE Plugin | md.exe | Adult content dialler |
| X | MD IE Plugin | winy.exe | Adware |
| N | mdac_runonce | runonce.exe | Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". |
| X | mdetect | [path to trojan] | Added by the SPABOT TROJAN! |
| X | Mdm | Mdm.vbs | Added by the WHITEHO VIRUS or TRAPPY WORM! |
| X | mdm | mdm.exe | Added by the LYDRA-F TROJAN! Note - this is not the valid Machine Debug Manager which shares the same filename |
| U | MDM7 | mdm.exe | Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable |
| X | Mdmdll | mdmdll.exe | Added by the CRYPTER TROJAN! |
| X | Mdmdll32 | mdmdll32.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | MDN | MDNS.exe | Added by the SPYBOT.JPB WORM! |
| X | MDN | MDNZ.exe | Added by the RBOT.AQD WORM! |
| X | mdwmdmsp | mdwmdmsp.exe | Adware - recognized by Kaspersky antivirus and others as TrojanDownloader.Win32.Agent.am |
| N | MECA | Meca.exe | Meca instant messenging client |
| X | Media Access | MediaAccK.exe | Windupdates adware variant |
| X | Media Load | msn32.exe | Added by a unidentified WORM or TROJAN! |
| U | Media Manager Indexer | AIRSVCU.EXE | Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here |
| X | Media Pass | MediaPassK.exe | Windupdates adware variant |
| X | Media Player | media.exe | Added by the FLDMEDIA-A TROJAN! |
| X | Media Player | wmplayer.exe | Added by the AGOBOT-BM WORM! |
| X | Media Plug x.1.2 | msdm.exe | Added by the MULDROP.352 VIRUS! |
| X | Media Service | msn64.exe | Added by the SPYBOT.EV WORM! |
| X | Media service | msnmsgxr.exe | Added by the SDBOT.TF WORM! |
| X | Media service | SYSTEM64.EXE | Added by the RBOT.QV WORM! |
| N | MediaFace Integration | Sethook.exe | Fellowes Neato™ cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar" |
| U | Mediafour Mac Volume Notifications | Macvntfy.exe | Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod |
| U | Mediafour XPlay Tray Notification Icon | Xptryicn.exe | Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod |
| U | MediaKey | MediaKey.exe | Multimedia keyboard manager. Required if you use the multimedia keys |
| X | MediaLoads | dw.exe | Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information |
| X | MediaLoads Installer | dw.exe | Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information |
| N | MediaMonitor | Mediam~1.exe | Installed by Smartdisk MVP CD burning software. Software will work fine without it |
| X | mediamotor.exe | mmups.exe | Roimoi/Media-Motor adware |
| X | MediaPath | Proyecto1.exe | Added by the GRUEL WORM! |
| X | MediaPath | Root.exe | Added by the GRUEL WORM! |
| N | MediaRing Talk | mrtalk.exe | Media Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs |
| X | media_manager | mediaman.exe | Mini-Player, IMESH related foistware, see here |
| X | media_stub | stub.exe | Mini-Player, IMESH related foistware, see here |
| X | MemConfig | SetupIE.com | Added by the TAPLAK WORM! |
| U | MemoKit | MK.EXE | Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| X | Memory Check | memore.exe | Added by the KILLAV.C TROJAN! |
| N | Memory Stick Monitor | MSTAT.exe | Used with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer |
| U | Memory Stick Monitor | MSstat.exe | Sony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive |
| X | Memory Watcher | MemoryWatcher.exe | MemoryWatcher spyware |
| U | Memory+ | tfimemsr.exe | Memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| X | MemoryMeter | MemoryMeter.exe | Autoinstalling spyware by Total Velocity |
| X | MEMreaload | MEMreaload.exe | Added by the LAZAR TROJAN! |
| N | MemScanner | MemScanner.exe | SpyHunter - spyware remover of somewhat dubious repute, see note |
| U | MemTurbo | memturbo.exe | MemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| N | MenuSnap | MenuSnap.exe | MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe |
| X | Message Queuing | msmqs.exe | Added by the FREEFORS TROJAN! |
| N | MessagerStarter Freeserve | StartMessager.exe | Freeserve Messenger |
| U | Message_Blocker | messageblock.exe | Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message" |
| X | Messanger | trillian.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Messenger | messenger.exe | Added by the KUTEX TROJAN! |
| X | Messenger Block | msngrblock.exe | Added by the PATOO WORM! |
| X | Messenger start-up | Msgran.exe | Added by the GRAMOS WORM! |
| X | Messenger6 | command.pif | Added by the INZAE.B WORM! |
| U | MessengerDiscovery | MessengerDiscovery.exe | MessengerDiscovery is a MSN Messenger add-on - adding over 70 new features |
| N | MessengerPlus | MsgPlus.exe | MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"! |
| N | MessengerPlus2 | MsgPlus.exe | MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"! |
| N | MessengerPlus3 | MsgPlus.exe | MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"! |
| X | messnger | [worm filename] | Added by the DELODER WORM! |
| X | messnger | Dvldr32.exe | Added by the DELODER.A WORM! |
| X | MeTaLRoCk (irc.musirc.com) has sex with printers | metalrock-is-gay.exe | Added by the RANDEX.Q WORM! |
| ? | mfgboot | ?? | ?? |
| X | mfin32 | mfin32.exe | MyFreeInternetUpdate - adware downloader |
| ? | MGA Hook | Mgahook.exe | MATROX Graphics card related. What does it do and is it required? |
| N | MGA Quickdesk | MGAQDESK.EXE | For Matrox video cards. Quick access to tweak your card to your liking |
| ? | Mgabg | Mgabg.exe | Matrox BIOS Guard. What does it do and is it required? |
| Y | mgavctrl | mgavrtcl.exe | McAfee's Virus Scan Online |
| Y | mgavctrl | mgavrte.exe | McAfee's Virus Scan Online |
| Y | mgavrtclexe | mgavrtcl.exe | McAfee's Virus Scan Online |
| Y | mgavrtclexe | mgavrte.exe | McAfee's Virus Scan Online |
| N | MGA_CD_Install | mgasetup.exe | Matrox Millennium video driver. Not required once drivers installed |
| X | MHDOGStart | mhdogst.EXE | Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS |
| N | MHINIT | MHINIT.EXE | Part of the Cybermedia Clean Sweep package |
| X | Mickey Mouse Cereal | [random filename].exe | Added by the RANKY.Q TROJAN! |
| X | Micr Update | soundblaster.exe | Added by the SDBOT.NP WORM! |
| U | Microangelo Desktop | Muamgr.exe | Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs |
| N | microAttuneDownload | atmdlusr.exe | USR (US Robotics) modem auto updater. May be a sub-set of Attune |
| U | MicroDialler | atdialler1.exe | Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered |
| X | Microfinder lptt01 | mcf.exe | Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Microfinder ml097e | mcf.exe | Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | MicroLoad | [random filename] | Added by the DARBY WORM! |
| X | Microsof Windows Host | svhost32.exe | Added by the RBOT.ADY WORM! |
| X | Microsof Winlog Host | wilogon32.exe | Added by the RBOT.XC WORM! |
| X | Microsofot x386 System Monitor | system32.exe | Added by the WOOTBOT.M WORM! |
| X | microsoft | svchost.exe | Added by the ASTEF or RESPAN WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| X | microsoft | microsoft.hta | HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! |
| X | Microsoft Associates, Inc. | iexplorer.exe | Added by a variant of the LOVGATE WORM! |
| X | Microsoft .NET Confingurator | msnconf.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Microsoft 16Bit Update | wuapdate16.exe | Added by the RBOT.CZ WORM! |
| X | Microsoft ALG32 Protocol | alg32.exe | Added by a variant of the SPYBOT WORM! |
| N | Microsoft Announcement Listener | Annclist.exe | MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| X | Microsoft Ansti Update | msie.exe | Added by the RBOT-LE WORM! |
| X | Microsoft AOL32 Protocol | aol32.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Associates, Inc. | iexplorer.exe | Added by a variant of the LOVGATE WORM! |
| X | Microsoft AUT Update | MSlti32.exe | Added by the RBOT-X WORM! |
| X | Microsoft AUT Update | MSlti16.exe | Added by the RBOT.EB WORM! |
| X | Microsoft auto update | winupdate.exe | Added by the BMBOT TROJAN! |
| X | Microsoft AutoUpdater | svhost.exe | Added by the RBOT.QG WORM! |
| X | Microsoft boot system cfg32 | actboost.exe | Added by the BROPIA.R WORM! |
| X | Microsoft Conf Ldr | sysconf.exe | Added by a variant of the SDBOT TROJAN! |
| X | Microsoft Config | msconf.exe | Added by the RBOT.PV WORM! |
| X | Microsoft Config | MSCONF.EXE | Added by the RBOT-LG WORM! |
| X | Microsoft Config File | config.exe | Added by the KILLFILES.GR TROJAN! This is malware that will attempt to delete all system dlls! |
| X | Microsoft Corporation | [random filename] | Added by various VIRUSES, WORMS & TROJANS! |
| X | Microsoft CSRSS32 Protocol | csrss32.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Microsoft CSRSS386 Protocol | csrss386.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Cvrt | mscvrt32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Microsoft Data Helper | cihost.exe | Malware, possibly a variant of the LINST TROJAN |
| X | Microsoft Data Machine | csdata32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Database Handler | mssql32.exe | Added by the RANDEX.AX WORM! |
| X | Microsoft Decryption Technology | Msfenoe.exe | Added by the SPYBOT-DG WORM! |
| X | Microsoft Device Manager | msdevmgr32.exe | Added by the LATEDA.B TROJAN! |
| X | Microsoft Diagnostic | [random filename] | Added by the ACEBOT TROJAN! |
| X | Microsoft Digital Clock | msclock.exe | Added by the NACKBOT-D WORM! |
| X | Microsoft DirectX | Spoolserv.exe | Added by the DINFOR WORM! |
| X | Microsoft DirectX | rasmngr.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft DirectX | PDSched.exe | Added by the SDBOT.CN WORM! |
| X | Microsoft DirectX | wuamgrd.exe | Added by the SDBOT.MY WORM! |
| X | Microsoft Dll Management | windll.exe | Added by the RBOT-MT WORM! |
| X | Microsoft DNS Query | msdns.exe | Added by a variant of the WOOTBOT WORM! |
| X | Microsoft Document | krisp.exe | Added by the SDBOT-RQ WORM! |
| X | Microsoft Drivers | WSconf.exe | Added by a variant of the SDBOT WORM! |
| X | Microsoft ErgoPack | wserb32.exe | Added by the RBOT-RI WORM! |
| X | Microsoft Excel | msexcel.exe | Added by the RBOT-TQ WORM! |
| X | Microsoft Excell | wuamngr32.exe | Added by the RBOT-QH WORM! |
| X | Microsoft Executing | microsoft.exe | Added by the AGOBOT.UV WORM! |
| X | Microsoft Explorer | svapache.exe | Added by the RBOT-VR WORM! |
| X | Microsoft EXPLOREXP Protocol | explorexp.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Features | ms32cfg.exe | Added by the RBOT.HO WORM! |
| X | Microsoft Find Fast | Findfast.exe | Complete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier |
| X | Microsoft Firewall | firewallsp2.exe | Added by the RBOT-MC WORM! |
| Y | MICROSOFT FIREWALL CLIENT | ISATRAY.EXE | MS Internet Security and Acceleration Server 2000 |
| X | Microsoft Gina V Encryption | MSGINAV.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| N | Microsoft Greetings Reminders | MHPRMIND.EXE | Microsoft Home Publishing greetings reminder |
| N | Microsoft Greetings Workshop Reminder | Gwremind.exe | You really want to be reminded about somebody's birthday at the expense of resources? |
| N | Microsoft Greetings Reminder | MHPRMINF.EXE | You really want to be reminded about somebody's birthday at the expense of resources? |
| X | Microsoft Help SVC | msnmngr.exe | Added by the SDBOT-PQ WORM! |
| X | Microsoft Help System | mshelp32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft IE | Iexplore.exe | Added by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Microsoft IE Execute shell | IEExec.exe | Added by the ALADINZ.N TROJAN! |
| X | Microsoft IIS | syshost.exe | Added by the FRANCETTE WORM! |
| X | Microsoft Inc. | iexplorer.exe | Added by a variant of the LOVGATE WORM! |
| X | Microsoft Inet Xp.. | teekids.exe | Added by the BLASTER.C WORM! |
| X | Microsoft Instant Messenger | msngmsngr32.exe | Added by the SPYBOTER.GEN TROJAN! |
| U | Microsoft Intellitype Pro | speedkey.exe | Additional keyboard shortcuts on MS programmable keyboard |
| X | Microsoft Internet | expl0rer.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Internet | windows32.exe | Added by the SDBOT-F WORM! |
| X | Microsoft Internet Acceleration Utility | iau.exe | EasySearch adware |
| X | Microsoft Internet Exp | iiexplorer.exe | Added by the RBOT-KX WORM! |
| X | Microsoft Internet Explorer | iexplore.exe | Downloader trojan. Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Microsoft Internet Firewall Manager | GMT16.exe | Added by the RANDEX.AT WORM! |
| X | Microsoft Internet Services | Smss32.exe | Added by the RBOT.MS WORM! |
| X | Microsoft IPC | system.exe | Added by the NULLBOT TROJAN! |
| X | Microsoft IPC | svshost.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Microsoft IT Update | win64.exe | Added by the RBOT.GA WORM! |
| X | Microsoft IT Update | [random filename] | Added by a variant of the RBOT WORM! |
| X | Microsoft IT Update | IEserv.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft IT Update | msupdate.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft IT Update | winn43.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft IT Update | svchsst.exe | Added by the RBOT-DH WORM! |
| X | Microsoft IT Update | win43.exe | Added by the RBOT-SA WORM! |
| X | Microsoft IT Update | windows.exe | Added by the RBOT-GL WORM! |
| X | Microsoft Java Virtual Machine | winscr32.exe | Added by a variant of the WOOTBOT WORM! |
| X | Microsoft Java Virtual Machine | MsConfiG.exe | Added by the FORBOT-DV WORM! |
| X | Microsoft Java Windows Update | [filename] | Added by the RBOT-DZ WORM! |
| X | Microsoft JavaVM | msjarun.exe | Added by the RBOT-JW WORM! |
| X | Microsoft Kernel | Windows_kernel32.exe | Added by the NETSKY.AE WORM! |
| X | Microsoft Lmhosting Service | lmhosts.exe | Added by the RBOT-RC WORM! |
| X | Microsoft Locals 332 | [random filename] | Added by the RBOT-KU WORM! |
| X | Microsoft LSASS386 Protocol | scvhost32.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Macro Protection SubSsy | msacroprots386.exe | Added by the RBOT-KE WORM! |
| X | Microsoft Macro Protection Subsystems | msmacroprotxz.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Macro Protection Subsystems | Msmacroprot32.exe | Added by the RBOT.KN WORM! |
| X | Microsoft Management | lmas.exe | Added by the FORBOT-CZ WORM! |
| X | Microsoft Management Console | lssas.exe | EasySearch adware |
| X | Microsoft media | winmplayers.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft media services | Iassd.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Microsoft media services | winmplayer.exe | Added by the RBOT.ZO WORM! |
| X | Microsoft Movie Maker | Mmaker.exe | Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program |
| X | Microsoft MSGPLUS32 Protocol | msgplus32.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft MSNGR32 Protocol | msngr32.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft MsnST | msnst32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft MSUPDATE | SpoolSvc.exe | Added by the SXTB-A TROJAN! |
| X | Microsoft NetMeeting Associates, Inc. | NetMeeting.exe | Added by a variant of the LOVGATE WORM! |
| X | Microsoft Netview | gesfm32.exe | Added by the RANDEX.C WORM! |
| X | Microsoft Netview | mssvc32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Microsoft Netview Component v5.1 | msnv32.exe | Added by the RANDEX.F WORM! |
| X | Microsoft Network | msnet.exe | Added by the MOCKBOT.A WORM! |
| X | Microsoft Network Daemon for Win32 | Netd32.exe | Added by the SDBOT.R TROJAN! |
| X | Microsoft NT Update | winexec32.exe | Added by a variant of the RBOT WORM! |
| N | Microsoft Office | Osa.exe | Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show |
| N | Microsoft Office | Msoffice.exe | Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly |
| X | Microsoft Office | MSMSGR.exe | Added by the GAOBOT.BB WORM! |
| N | Microsoft Office | Osa9.exe | Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show |
| X | Microsoft Office | lserv.exe | Added by the SDBOT.MH WORM! |
| X | Microsoft Office | Microsoft Office.hta | HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! |
| N | Microsoft Office Fast Cache | Fastboot.exe | Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled |
| U | Microsoft Office OneNote 2003 Quick Launch | ONENOTEM.EXE | ONENOTEM.EXE is a part of the note taking program that ships with Microsoft Office 2003. It's required for the side note windows to work |
| N | Microsoft Office Shortcut Bar | Msoffice.exe | Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly |
| X | Microsoft Office Start | winupdates.exe | Added by the GAOBOT.BC WORM! |
| N | Microsoft Office Startup | Osa.exe | Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show |
| N | Microsoft Office Startup | Osa9.exe | Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required. Note - if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show |
| X | Microsoft Office Studio | scvhvst.exe | Added by the RANDEX.CST WORM! |
| X | Microsoft Personal Firewalls | bakw.exe | Added by the RBOT-KS WORM! |
| X | Microsoft QMGR | msnqmgr.exe | Added by the IRCBOT-S TROJAN! |
| X | Microsoft RDLL | sysconf32.exe | Added by a variant of the SDBOT TROJAN! |
| X | Microsoft Registry | csrse.exe | Added by the RBOT-PC WORM! |
| X | MicroSoft Remote Secure Service | MSRSS.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Restore | scrgrd.exe | Added by the SPYBOT.BR WORM! |
| X | Microsoft Runtime | CfgDll32.exe | Added by the RANDEX.BD WORM! |
| X | Microsoft Scanreg | microsoftscanreg.exe | Added by the FRANRIV.A WORM! |
| X | Microsoft SCVHOST32 Protocol | scvhost32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Secure Messenger.NET Service | securitychk.exe | Added by the SDBOT.VT WORM! |
| X | Microsoft Security Hot Fix Update | mshotfix.exe | Affilred adware |
| X | Microsoft Security Management | winnt.exe | Added by the RBOT-MQ WORM! |
| X | Microsoft Security Management | winserv.exe | Added by the RBOT-MJ WORM! |
| X | Microsoft Server Application | Sound.exe | Added by the RBOT-NE WORM! |
| X | Microsoft Service | microhost.exe | Added by the RBOT-LC WORM! |
| X | Microsoft Service | winsvc.exe | Added by the SPYBOT-DB WORM! |
| X | Microsoft Services | lsserv.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Microsoft Services | lssrv.exe | Added by the RBOT.CW WORM! |
| X | Microsoft Services | services.exe | Added by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | Microsoft Services | lsrv.exe | Added by the RBOT-BK WORM! |
| X | Microsoft Services | svshost.exe | Added by the ALETS.B TROJAN! |
| X | Microsoft Services Unitd | MSU32.exe | Added by a variant of the RBOT WORM! |
| N | Microsoft Sidewinder Game Controller Software | SWTRAY.EXE | MS SideWinder game controller system tray icon. Available via Start -> Programs |
| X | Microsoft Software | sysinfo33.exe | Added by the RBOT.LS WORM! |
| X | microsoft software | ****.exe E255 [* = random char] | Added by an unidentified WORM or TROJAN! |
| X | Microsoft software | cdaccess.exe | Added by the RBOT.ABK WORM! |
| X | Microsoft Software Update | nmon.exe | Added by the RBOT.HZ WORM! |
| X | Microsoft Sound Driver | sound32.exe | Added by a variant of the SPYBOT WORM! |
| N | Microsoft Sound Volume Tool | mssvol.exe | This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel |
| X | Microsoft SourceSafe | csrss.exe | Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| X | Microsoft Spool Server for Win32 | spoolsrv.exe | Added by the RANDEX.H WORM! |
| X | Microsoft SSISVRI32 Protocol | ssisvri.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Synchronization Manager | asgard.exe | Added by the SDBOT.PH WORM! |
| X | Microsoft Synchronization Manager | bot.exe | Added by the SDBOT.IH WORM! |
| X | Microsoft Synchronization Manager | netscape.exe | Added by the RANDEX.AE WORM! |
| X | Microsoft Synchronization Manager | slhost.exe | Added by the SDBOT.YH WORM! |
| X | Microsoft Synchronization Manager | svhost.exe | Added by the SDBOT-PY WORM! |
| X | Microsoft Synchronization Manager | WinLoginnn.exe | Added by the SPYBOT.FO WORM! |
| X | Microsoft Synchronization Manager | winupdate.exe | Added by the SDBOT.ER WORM! |
| X | Microsoft Synchronization Manager | xXx.exe | Added by the SDBOT-KZ WORM! |
| X | Microsoft Synchronization Manager | ___synmgr.exe | Added by the MASLAN.A or MASLAN.C WORMS! |
| X | Microsoft Synchronization Manager | al.exe | Added by the OPTXPRO.132 TROJAN! |
| X | Microsoft Synchronization Manager | win.exe | Added by the SDBOT.AK WORM! |
| X | Microsoft System Checkup | Cool.exe | Added by the DONK.B WORM! |
| X | Microsoft System Checkup | Wnetlib.exe | Added by the DONK.C WORM! |
| X | Microsoft System Checkup | dbnetlib.exe | Added by the DONK.L WORM! |
| X | Microsoft System Checkup | Keymgr.exe | Added by the DONK.M WORM! |
| X | Microsoft System Checkup | inetman.exe | Added by the DONK.O WORM! |
| X | Microsoft System Checkup | ntsysmgr.exe | Added by the DONK.S WORM! |
| X | Microsoft System Checkup | ntsysman.exe | Added by the SDBOT-QW WORM! |
| X | Microsoft System Checkup | libsysmgr.exe | Added by the SDBOT-CAF WORM! |
| X | Microsoft System Checkup | sysmgr.exe | Added by the SDBOT-OO TROJAN! |
| X | Microsoft System Restore Configuration | CBRSS.EXE | Added by a variant of the SPYBOT WORM! |
| X | Microsoft System32 Update | cmsrg.exe | Added by the RBOT-GN WORM! |
| X | Microsoft Time Manager | dveldr.exe | Added by the RBOT-HQ WORM! |
| X | Microsoft Transfer File Server | mtfs.exe | Added by the RBOT.AFE WORM! |
| X | Microsoft Tray | [random filename] | Added by the DELF.BZ TROJAN! |
| X | Microsoft Update | Microsoft.exe | Added by the GAOBOT.AFJ WORM! |
| X | Microsoft Update | mssmgrd.exe | Added by the SDBOT.JT WORM! |
| X | Microsoft Update | mvsc.exe | Added by the SPYBOT.DAZ WORM! |
| X | Microsoft Update | ascdl.exe | Added by the GAOBOT.SY WORM! |
| X | Microsoft Update | Isac.exe | Added by the RBOT-AU WORM! |
| X | Microsoft Update | automgr32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update | mediap.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update | Microsoftx.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update | msconfg.exe | Added by the RBOT.H WORM! |
| X | Microsoft Update | Mslti32.exe | Added by the RBOT-LX WORM! |
| X | Microsoft Update | muamgrd.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Microsoft Update | navmgrd.exe | Added by the SDBOT.DP TROJAN! |
| X | Microsoft Update | Smss32.exe | Added by the RBOT.CB WORM! |
| X | Microsoft Update | sys32cfg.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Update | VPC32.EXE | Added by the AGOBOT.XM WORM! |
| X | Microsoft Update | winsys32.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update | wuamgrd.exe | Added by the RBOT-LK WORM! |
| X | Microsoft Update | wuammgr32.exe | Added by the RBOT-AW WORM! |
| X | Microsoft Update | wudmate.exe | Added by the RBOT.AP WORM! |
| X | Microsoft Update | msawindows.exe | Added by the GAOBOT.AFJ WORM! |
| X | Microsoft Update | msiwin84.exe | Added by the GAOBOT.AFJ WORM! |
| X | Microsoft Update | wuamgrd32.exe | Added by the RBOT.ZB WORM! |
| X | Microsoft Update | NAV.exe | Added by the RBOT-IV WORM! |
| X | Microsoft Update | systemi32.exe | Added by a variant of the SPYBOT WORM! |
| X | Microsoft Update | xpupdate.exe | Added by the RBOT-QE WORM! |
| X | Microsoft Update | webm.exe | Added by the SDBOT.WK WORM! |
| X | Microsoft Update | wuagrd.exe | Added by the RBOT-FK WORM! |
| X | Microsoft Update | aaupdt.exe | Added by the RBOT-RQ WORM! |
| X | Microsoft Update | lsac.exe | Added by the GAOBOT.XW WORM! |
| X | Microsoft Update | Mupdate.exe | Added by the RBOT-AG WORM! |
| X | Microsoft Update | prowind32.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Microsoft Update | snlogsvc.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update | svhost.exe | Added by the RBOT-PI WORM! |
| X | Microsoft Update | wauguard.exe | Added by the RBOT.AEE WORM! |
| X | Microsoft Update | winscv.exe | Added by the RBOT-BH WORM! |
| X | Microsoft Update | winsys.exe | Added by the RBOT-GV WORM! |
| X | Microsoft Update | wserv32.exe | Added by the RBOT.AF WORM! |
| X | Microsoft Update | wtm32.exe | Added by the RBOT-AQ WORM! |
| X | Microsoft Update | wumgrd.exe | Added by the SDBOT-KY WORM! |
| X | Microsoft Update | wuampd.exe | Added by the RBOT-UT WORM! |
| X | Microsoft Update 32 | explore32.exe | Added by the SPYBOT.CYM WORM! |
| X | Microsoft Update 32 | MSupdate32.exe | Added by a variant of the SPYBOT WORM! |
| X | MICROSOFT UPDATE CONFIGURATION | WIN32SNC.EXE | Added by the RBOT-AI WORM! |
| X | Microsoft Update Emulator | kern-mxe.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update Loader | [random filename] | Added by a variant of the RBOT WORM! |
| X | Microsoft Update Machine | expl0rer.exe | Added by the SDBOT.OK WORM! |
| X | Microsoft Update Machine | rxhost.exe | Added by the RBOT.FC WORM! |
| X | Microsoft Update Machine | servicz.exe | Added by the RBOT-HU WORM! |
| X | Microsoft Update Machine | SP2.exe | Added by the SPYBOT.FP WORM! |
| X | Microsoft Update Machine | winini.exe | Added by the RBOT-KV WORM! |
| X | Microsoft Update Machine | xvshost.exe | Added by the RBOT.QP WORM! |
| X | Microsoft Update Machine | memstat.exe | Added by the RBOT-OM WORM! |
| X | Microsoft Update Machine | ntce.exe | Added by the RBOT-FA WORM! |
| X | Microsoft Update Machine | system03.exe | Added by the RBOT-NM WORM! |
| X | Microsoft Update Machine | wuawx.exe | Added by the RBOT-CE WORM! |
| X | Microsoft Update Machine | zonealarm.exe | Added by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program! |
| X | Microsoft Update Machine | systemll.exe | Added by the RBOT-JT WORM! |
| X | Microsoft Update Machine | winupdt.exe | Added by the RBOT-FP WORM! |
| X | Microsoft Update Machine | svshost.exe | Added by the RBOT.AK WORM! |
| X | Microsoft Update Machine | wuamgd.exe | Added by the SDBOT.HQ WORM! |
| X | Microsoft Update Machine | wupdt32x.exe | Added by a variant of the SDBOT WORM! |
| X | Microsoft Update Machine | [random filename] | Added by a variant of the RBOT WORM! |
| X | Microsoft Update Machine | linux.exe | Added by the RBOT-IM WORM! |
| X | Microsoft Update Machine | lmrss.exe | Added by the RBOT-DY WORM! |
| X | Microsoft Update Machine | windowsu.exe | Added by a variant of the RBOT WORM! |
| X | Microsoft Update Machine | wininigo.exe | Added by a variant of the |