Enter your Keyword, Search here,

Windows Malicious Files Start Up List

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup.

For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first.

An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
Operating System Differences

A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.
Alternatively use your browsers search facility - Ctrl+F for IE users.
Key:
"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
Use your browsers search facility - Ctrl+F for IE users.

X w32 w32.exe Added by the SOKEVEN TROJAN!
X W32.Scran Scran.exe Added by the NARCS WORM!
X w32alanis mope.scr Added by the SINALA WORM!
X W32Load [random filename].scr Added by the CASPID WORM!
X w32sup w32sup.exe Adult content dialler
X W32Tc WTC32.scr Added by the VOTE.D or VOTE.K WORMS!
X W3KNetwork rundll32.exe w3knet.dll, dllinitrun Advertising spyware. Check here for more info on this particular one
Y W75P2PSERVER W75P2PS.EXE Printer utility which is required in order to make the printer work correctly
? W815DM W815DM.exe ??
N Wanadoo Messenger.exe Wanadoo Messenger.exe Wanadoo ISP instant messenger client
Y WanMPSvc WanMPSvc.exe An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling AOL doesn’t help
X WAPI wts**.exe [* = random char] PurityScan/Clickspring adware
N war-ftpd.exe WAR-FTPD.EXE War FTP Daemon from JGAA's Internet - FTP client
X Wardo syslaunch.exe Added by the ADLCICKER.G TROJAN!
X WareOut WareOut.exe Malware masquerading as a spyware and dialer remover, see here
N warez warez.exe Warez P2P client
U Warner warner.exe Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
U Warnet warnet.exe Warnet - system cleanup software
U Warning: do not remove it! fpplock.exe Part of Folder Password Expert by ZQS Software Team - "a software program to restrict access to the folders that contain your sensitive data"
N WARSVR war-ftpd.exe "War FTP Daemon - the original free FTP server for windows"
U WashAndGo - Cleanup of old Backupfiles checker.exe WashAndGo - temp file cleaner
U Washer washer.exe Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
N Washerie.exe washerie.exe Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available via Start -> Programs
U washindex washidx.exe Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
X Wast wast.exe Grokster ads updater
N Watch watch.exe Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted
? Watch 1200UBWATCH.EXE ??
N Watch Dog Program watchdog.exe For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do
N Watchdog Watchdog.exe Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, but not required as they give instructions on removing it on their webpage
? WatchDog watchdog.exe Part of Motorola "Mobile Phone Tools" v3 - in a "Mobiile Phone Tools" sub-directory of Program Files
N WaveTop Launcher WaveTop.exe WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N WaveTop Receiver 1 N/A WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N WaveTop Receiver 2 N/A WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N WaveTop Upload Manager N/A WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N Wbiff Wbiff.exe Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received
? Wbutton Wbutton.exe Related to the Wacom Penabled driver on Acer Tablet PCs. Appears to do nothing so is it required?
N WCESCOMM WCESCOMM.EXE Active sync for use with Windows CE based palm PC
U wcmdmgr wcmdmgrl.exe Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N wcmdmgr.exe wcmdmgr.exe Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
U wcmdmgrl wcmdmgrl.exe Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
U WCOLOREAL coloreal.exe Makes colours sharper and brighter, but will only work with coloreal capable monitors
? WCPC wintsvcc.exe ??
X WCPI wintsvit.exe PurityScan/Clickspring adware
X WCPS Wint**.exe [* = random char] PurityScan/Clickspring adware
X WCPT wintsvtr.exe PurityScan/Clickspring adware
U WD Button Manager WDBtnMgr.exe Button manager installed with a western digital external disk drive. Allows you to back up your system with one click
X WDInfo wdinfo.exe Added by the DLUCA.B TROJAN!
X wdskctl wdskctl.exe IEPlugin spyware
X wdwctrl wdwctrl.exe Added by the DLUCA.E TROJAN!
N WEATHER WEATHER.EXE Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs
N WeatherCast Weather.exe Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
X WeatherOnTray WeatherOnTray.exe Hotbar's Weather Forecast tool for your desktop - adware
N WeatherWatcher ww.exe WeatherWatcher - weather reporting in the System Tray
X web ******.exe [* = random char] Added by a variant of the EASTO.A TROJAN!
? Web Search ?? ??
X Web Service [random filename].exe Added by the ADMINCASH TROJAN!
Y web3trap web3trap.exe PC-Cillin 2000 anti-virus software -> ActiveX filter. Guards against malicious ActiveX programs, etc 
X webalize webalize.exe Searchcentrix hijacker
N WebArmyKnife WAK.exe Web Army Knife - a suite of web site developer's tools
X webassist webassist.exe Adware popup generator
? Webcam Go Sti Service Application wbcgosvc.exe Control software for the portable Creative Video Blaster Webcam Go digital camera/PC web cam. What does it do and is it required?
N WebcamRT.exe WEBCAMRT.exe For Logitech Web Cams. Not required - camera works fine without it
X Webcelerator webcel.exe Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Spyware and troublesome - see here
X WebCheck WebCheck.pif Added by the CONE.C or CONE.F WORMS!
X WebCpr0 WebCpr0.exe Web_CPR/TopMoxie adware
X Webdav.exe webdav.exe IRC DDoS bot which gives the hacker full control over your system
X WebHancer Agent whagent.exe System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here
X webHancer Survey Companion whSurvey.exe WebHancer foistware - traffic measurement service that uses a client agent that is stealth installed on user machines, gathering detailed data about sites visited, their performance and, most important, what the user actually does while there
X WebInstall WebInstall.exe ClipGenie adware downloader
X WebInstall2 WebInstall.exe ClipGenie adware downloader
N WebKey WebKey.exe WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet
N WebOutfitterTray sttray.exe Intel WebOutfitter service System Tray icon
N Webposition Gold 2 wpsche~1.exe Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines
X WebRebates0 WebRebates0.exe WebRebates adware
X WebRun [Trojan filename] Added by the ADWARELOADER TROJAN!
U websaverlive websaverlive.exe WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle
X WebSavingsfromEbates WebSavingsfromEbatesrun.exe Web Savings From Ebates Software, a shopping tool that opens pop-up windows
X WebSavingsFromEbates0 WebSavingsFromEbates0.exe Web Savings From Ebates Software, a shopping tool that opens pop-up windows
X WebScan DEFSCANGUI.EXE eAcceleration Stop-Sign related - not recommended, see note
N webscan stopsignav.exe eAcceleration Stop-Sign related - not recommended, see note
Y WebScanX WebScanX.exe From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
X websearch wjview ...websearch.exe "Web Savings" From Ebates Software, a shopping tool that opens pop-up windows
X WebSecureAlert WebSecureAlert.exe WebSecureAlert. "Can help protect your browser security and privacy". However, it's by GAIN Publishing, and will display pop up ads on your computer screen based on your online Web surfing behavior
? WebServer VBI_SE~1.EXE Related to a Pinnacle sound card. What does it do and is it needed?
N Webshots Webshots Tray.exe Screensaver program that automatically downloads from the webshots web site
N Webshots websho~1.exe Screensaver program that automatically downloads from the webshots web site
X WebSpecials rundll32 [path] webspec.dll WebSpecials spyware
X Websx Int*****.exe Adult content dialler - where ***** are random
Y Webtrap webtrap.exe Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating
Y WebTrapNT.exe WebTrapNT.exe Part of PC-Cillin Anti-Virus software. Checks visited web-sites for malicious Java and ActiveX elements
U WebWasher wwasher.exe Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs
N Welcome Welcome.exe Launches the Welcome to Windows tutorial on boot up
? WEPstat Wepstat.exe Cisco Aironet 340 Series PC Card driver. If it can be started manually it shouldn't be required if you don't use the PC card facility regularily - hence the status could be "U". Can anybody confirm this?
X wersds doriot.exe Added by the JECT.C TROJAN!
N WetSock wetsock.exe RoboMagic Wetsock - weather reporting in the System Tray
N WFGStartup WFGStartup.exe World Weather. "This midlet displays the current weather conditions for major cities around the world. This version is for memory limited mobile phones"
U wfips iphider.exe ICQ (messaging/chat program) anti-bomb software. "WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed." For more information about ICQ bombs see here
N WFXCTL32.EXE WFXCTL32.EXE From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y wfxsnt40 wfxsnt40.exe WinFax 10.0 and maybe earlier versions. The program that opens the port for WinFax and not normally in the start menu. Needed if you want to run WinFax
? WFXSwtch WFXSWTCH.exe Related to WinFax. What does it do and is it required?
Y WG511WLU WG511WLU.exe Netgear configuration programme for the 54g wireless lan card - required to monitor and manage the lan card
U WGWLocalManager WGWLocalManager.exe Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so. It could be started by creating a shortcut, running it only when connecting to the internet. If internet is used often, it's recommended to leave it in startup so it starts with the system

No comments :

Post a Comment

Comment on this Post!!

More Posts that you may be interested...