Home Computer Repair Online - Startup Applications List

Home Computer Repair Online Startup Applications List

Home » Welcome to the Startup Applications List
Status Code Key:
  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown

  • To lookup a startup program by file name, click the letter it starts with or use the search feature.

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z - Other

    Status CodeNameCommand Description
    XMyWebSearch Email Pluginmwsoemon.exe"My Web Search" malware
    UMyVitalAgentVtlAgent.exeMyVitalAgent from Lucent Technologies. Replacement for Net.Medic, monitoring all popular internet transactions and alerting the user of the loaction of connection problems. Available via Start -> Programs
    XMyVirt.exeMyVirt.exeAdded by the REMADM-C TROJAN!
    XMyTotalSearch Email Pluginmtsoemon.exeMyTotalSearchBar adware
    UMytekSystrayExePathMyTekSystray.exeMyTek system tray - web site providing computer tech support in Australia
    ?MySoftware NewsFlashNewsflsh.exe??
    Xmysoftwinexplor.exeHomepage hijacker
    Umyprint mileagempm.exeReports battery status on a portable printer
    XMyPointsPointAlertwjview ...MyPointsPointAlertrun.exe"With MyPoints you can earn rewards from name-brand merchants. You can even earn vacations and frequent flyer miles". Dubious privacy policy
    UmyNetWatchmannwclient.exeSends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running
    XMyLifeCmdServ.exeAdded by the HOLAR.A WORM!
    NMyFastAccessmyfastupdate.exeMy-Fast-Access toolbar updater
    XMyDailyHoroscopeMyDailyHoroscope.exeMyDailyHoroscope foistware
    XMyDailyHoroscopeMYDAIL~1.EXEMyDailyHoroscope foistware
    XMyCometCursorMYCOME~1.EXEComet Cursor adware
    UmyCIO.com ASaPMyAgtTry.exeSystem tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
    NmyCIO.com SplashSplash.exeSplash screen for McAfee VirusScan ASaP on-line scanner
    YMyCIO Agent Servicemyagtsvc.exeMcAfee VirusScan ASaP Agent service
    XMyAVavpguard.exeAdded by the NETSKY.J WORM!
    XMyappservice.exeHomepage hijacker
    XMyapp[filename]Added by the FATEE.B WORM!
    UMyAgtTryMyAgtTry.exeSystem tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
    XMy Search Bar EqS4BAREQ.EXEMySearch bar parasite
    XMy AppSMSSvc.exeAdded by the NEGASMS.A TROJAN!
    XMy Agentmsagent.exeAdded by the NEGASMS.A TROJAN!
    UMxRunnerMxRunner.exeEasyUninstall from Aladdin Systems (formerly by Ontrack)
    UMXO Auto LoaderMXOaldr.exeMaxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
    XMxHLp32MxHLp32.exeAdded by a variant of the VAGRNOCKER TROJAN!
    XMwsvmmwsvm.exeSeekSeek search hijacker related - as seen here
    Xmwsoemonmwsoemon.exe"My Web Search" malware
    NMWSnapMWSnap.exeMWSnap - screen capture utility. Start manually when required
    NMWProEngMWProEng.exeLogitech Mouseware Pro software - only required when using special functions
    NMutexServiceExSys32Smm.exeWebroot Sofware's discontinued "Privacy Master"
    Umwavscanmwavscan.comMicroWorld Anti Virus Toolkit is a free anti-virus scanner that runs on-demand. You can choose to scan your entire system, including memory, services, starup items and registry, or only scan files in a specified folder or drive
    XMusIRC (irc.music.com) clientmusirc4.71.exeAdded by the RANDEX.Q WORM!
    NMusic01 ServerMusic01 Server.exeJ River Media Jukebox
    Ymurphy shieldlmgui.exeFirewall part of BitDefender virus scanner/firewall
    UMUPSMUPS.exeLauches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions
    UMULTIMEDIA KEYBOARDMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
    UMultiResMultiRes.exeMultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP
    UMultimedia KBDMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
    XMultimedia extensionsmservice.exeEasySearch adware
    XMultimedia Codecsmcc.exeAdded by the MCC TROJAN!
    UMultiCAM InitializerMCamBoot.exeThe MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled
    UMulti-function keyboardGWHotkey.exeSoftware that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail, browser, volume and CD/DVD controls, etc)
    ?Mufixmufix.exePart of INFOConnect, web-based, enterprise client configuration, management, and deployment software, as used by ABSS (a financial management system used by the US military which will allow purchase request packages to be electronically submitted to contracting, and which also facilitates electronic receipt of items and EFT) - what does it do and is it required
    Umuamgrmuamgr.exeQuick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs
    XMtr2mtr2.exeAdded by the KRYPTONIC GHOST TROJAN!
    UMUALmual.exeMillesky video mail updater and launcher
    XMS_SETUP.EXEMS_SETUP.EXEAdded by the CHARGE TROJAN!
    XMS_NETD_WIN32netd32.EXEAdded by the RANDEX.F WORM!
    XMsys32morfitwebentrance.exeMorfit ADjectPager - "uses home page rental technology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage 
    Xmsys lptt01msys.exeNew variant of the RapidBlaster parasite (in a "Msyss" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    Xmswsplsearchbarcash.exeSearchBarCash adware
    Xmswspl[random filename]Added by the SMALL.IQ TROJAN!
    XMSWinSrv32MSWinSrv32.exeAdded by the MTRON-B TROJAN!
    XMSWinSrvMSWinSrv.exeAdded by the MTRON TROJAN!
    XMswinpid32mswinpid32.exeAdded by the LAPOS.A TROJAN! This is a keylogger which emails back to China PayPal passwords and account information - thus allowing the perpetrators to steal PayPal funds in the name of the victim!
    XMsWindows SysDatesysmsvc.exeAdded by the SPYBOT.FCD WORM!
    XMswincfgMswincfg32.exeAdded by the CYBRSPY.D TROJAN!
    UMSwheelmswheel.exeMicrosoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
    XMswavedllmswavedll.exeAdded by the CRYPTER-C TROJAN!
    Xmswavemswave.exeAdded by the CRYPTER.A TROJAN!
    XMSVXDMSVXD.EXEAdded by the DATOM.A WORM!
    XMSVSyncvideosync.exeAdded by a variant of the SPYBOT WORM!
    Xmsvsc32msdev.exeAdded by the RBOT-GJ WORM!
    XMSVersionclrschp038.exeAdded by the POPMON.A TROJAN! - also known as PopMonster adware
    XMSVersionINTERNETFEATURES.exeAdded by the POPMON.A TROJAN! - also known as PopMonster adware
    Xmsvccmsvchost.exeAdded by the XOMBE TROJAN!
    Xmsvc32msvc32.exeClientMan parasite variant
    Xmsuser32.exemsuser32.exeAdded by the ANDROV TROJAN!
    XMSUpdSrvmsupdsrv.exeBrowser hijacker, redirecting to a porn site
    Xmsurlmsurl32.exeAdded by the CRYPTER.A TROJAN!
    Xmsupdatesmsupdt.exeAdded by the RBOT-JO WORM!
    XMSupdater.exeN/ACoolWebSearch parasite related. Installs the Winshow.dll browser plugin
    XMSupdate.exeN/ACoolWebSearch parasite related - resets home page to an adult content site
    Xmsupdatemsupdate.exeAdded by the RBOT-MZ WORM!
    XMSUpdatesvchosthlp.exeAdded by the BLASTER.T WORM!
    XMSUpdatewupd.exeAdded by the ALADINZ.M TROJAN!
    XMstng32MSTng32.exeAdded by the TANG WORM!
    ?MstcgwwMSTCGWW.EXE??
    Xmstasksmstasks.exeAdded by the MULTIDR-AY TROJAN!
    XMstaskmstask.exeAdded by the OPASERV.N WORM! Note - this is not the legitimate mstask.exe system file and the executable resides in C:Windows or C:WINNT
    XMstapiMstapi.exeKeylogger trojan
    XMsSystemmssys.exeAdded by the VANTA.A TROJAN!
    XMsSystemmsdos.exeAdult content downloader - see here
    Xmssyslanhelpermsmsgri32.exeAdded by the RANDEX.D WORM!
    XmssysintIexplore .exeAdded by the PWSTEAL.ABCHLP and PSPIDER.310.B TROJANS! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
    Xmssysmssys.exeAdded by the MYSS.B TROJAN!
    YMSSVC.EXEMSSVC.EXEStealthdisk - hides folders, files and applications. Will also encrypt them for better protection
    Xmssvc32mssvc32.exeAdded by the AGOBOT-ME WORM!
    Xmssvc[path to trojan]Added by the PSK TROJAN!
    Xmssurfer ml097emssurfer.exeVariant of the RapidBlaster parasite (in a "surfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    Xmssurfer lptt01mssurfer.exeVariant of the RapidBlaster parasite (in a "surfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    Xmsstaskmsstask.exeAdded by the MYPARTY WORM!
    XMSStartOptimizerWINUPD.EXEAdult content dialler - see here. This has to be cleared at the same time as RegCompres (REGCPM32.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
    XMSStartOptimizerIexpres.exeAdded by the POLDO.B TROJAN!
    XMsstartmsstart.exeAdded by the LIVUP.C TROJAN!
    Xmssoulmsmscc2.exeAdded by the DAPIZL.A banker WORM! (A "banker worm" is designed to pillage banking information and send it back to the perpetrators!)
    XMSSQLMssql.exeAdded by the SDBOT TROJAN!
    XMSSHVCMSSHVC.exeAdded by the NUFFY.A WORM!
    Xmsservicemsserv.exeAdded by the HYD WORM!
    Xmsrunocx32msrunocx32.exeAdded by the SKUS WORM!
    XMSRegSvcregsvc32.exeHomepage hijacker that changes your homepage to an adult content site
    Xmsreg.exemsrege.exeAdded by the ZINX TROJAN!
    XMSREGITMsgp.exeAdded by the KRYPGHOS.13 TROJAN!
    XMsrcMsrc.exeAdded by the KRYPTONIC GHOST TROJAN!
    NMSPY2002ImScInst.exePart of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
    Umspwrpupstman.exe"Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me) 
    XMSprotect.exeMSprotect.exeAdded by the DABYREV.A VIRUS!
    XMSPQFileMSA****.TMPHomepage hijacker. See here for more information. **** can be anything
    XMspatch89cnqmax.exeAdded by the RANDEX.P WORM!
    XMSOOBDMSOOBD.EXEAdded by the MAGISTR.A VIRUS!
    XMspatch69[path to trojan]Added by the MPROX TROJAN!
    XMSOfficeservices.exeBrowser hijacker. The file is placed in a newly created MSOffice folder in System32. Note - this is NOT the legitimate services.exe process, which should NOT figure in Msconfig/Startup!
    XMSNSysRestorepc32.exeAdded by a variant of the MASTAK VIRUS!
    XMSObject32MSObject32.jsAdded by the PUN TROJAN!
    XMsofficemsoffice.htaHijacker - redirecting to Searchdot.net
    XMSNServiceMSNService.exeAdded by the CARPET.C WORM!
    Xmsnmsgsgsmsnmsgsgs.exeAdded by the "Catal" alias Spy.Delitall.B backdoor TROJAN!
    XMSNMSGRS1swed.batIRC backdoor TROJAN or WORM!
    XMSNMSGREswef.batIRC backdoor TROJAN or WORM!
    XMSNMSGRRswin.batIRC backdoor TROJAN or WORM!
    XMSNMSGR5MSNMSGR5.exeAdded by the RBOT.PQ WORM!
    Xmsnmsgr32-.exemsnmsgr-.exeAdded by a variant of the SPYBOT WORM!
    XMsnMsgrMsnMsgrs.exeAdded by the NETSKY-AD WORM!
    Nmsnmsgrmsnmsgr.exeMSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
    XMSNMESENGERMain.exeAdded by the PRORAT TROJAN!
    Xmsnload32.exemsnload32.exeAdded by the BANCOS.M TROJAN!
    NMSNIAMSNIASVC.EXEAdded with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
    XMSNGrabberMSNgrabber.exeAdded by the ENVID.A WORM!
    ?MsnFixermsnfixjs.jsLocated in the HPbinmsnfix directory of a HP PC
    XMSNETmsnet.exeAdded by the BOA WORM!
    XMsnarratormsnarrator.exeAdded by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware
    Nmsnappaumsnappau.exeUpdater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to "update" the toolbar
    XMSN UPDATERSvirtualmemory.exeAdded by the RBOT-JK WORM!
    XMsn Updatermsnplugins.exeAdded by the RBOT-HS WORM!
    XMSN Updatermsnms.exeAdded by the FORBOT-CG WORM!
    XMsn Update Manager (Sp2)MSMSGS.EXEAdded by the AGOBOT-NL WORM!
    XMSN Startmsnmsgr7.exeAdded by the RBOT-PH WORM!
    NMSN Quick ViewMsndc.exeQuick way to connect to MSN internet service
    XMsn Plus Updatermsnplus.exeAdded by the RBOT-MU WORM!
    XMsn MessengersMSNMSGR.EXEAdded by the RBOT.KX WORM!
    XMSN messenger servicemssgs.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger, see this thread
    XMSN messengermessenger.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger, see this thread
    XMSN Messangermsnmsng.exeAdded by the SDBOT.XN WORM!
    XMSN Managercvss.exeAdded by a variant of the SPYBOT WORM!
    NMSN Internet Accesstrayclnt.exeQuick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
    XMsn Configmsngf.exeAdded by the RBOT-QG WORM!
    XMSN angcssrss.exeAdded by the FORBOT-CE WORM!
    XMSNctfmoons.exeAdded by the SPYBOT.HI WORM!
    XMSNmsnmsgs.exeAdded by the RBOT-KL WORM!
    Xmsnmsnmsg.exeAdded by the RBOT-GO WORM!
    Xmsnsystem32.exeAdded by the KITRO.A WORM!
    XMSMsgSvcMSMSGSVC.exeBrowser hijacker, identified by some antiviruses as a variant of the StartPage.QC TROJAN!
    UMSMSGSmsmsgs.exeWindows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
    ?MsmqIntCertregsvr32 /s mqrt.dllMicrosoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?
    Xmsmonmsmon.exeAdded by a variant of the GEMA.D TROJAN!
    XMsmgtmsmgt.exeTotal Velocity adware/hijacker
    ?msmgrmsmgr.exe??
    XMSMcAfeeSAvsynmgr32S.exeAdded by the VOLAC or VOLAC.DR TROJANS!
    XMSMcAfeehAvsynmgr32h.exeAdded by the FRANGO TROJAN!
    XMSMcAfeeeAvsynmgr32e.exeAdded by the FRAMAR TROJAN!
    Xmsmcmsmc.exeClientMan parasite variant
    Xmsmcmsongn.exeClientMan parasite variant
    Xmsmcmsgdmf.exeClientMan parasite variant
    Xmsmcmscpbo.exeClientMan parasite variant
    XMsManagermsmgr32.exeAdded by the YAHA.AF WORM!
    Xmsmanager32msmngr32.exeAdded by the RANDON-R (or WOMANIZ.A) WORM!
    XMslogon ml097emslogon.exeVariant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    ?MSLIB32mswatch32.exe??
    XMslogon lptt01mslogon.exeVariant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    Xmslagentmslagent.exeAdded by SIMCSS.B adware!
    UMSKServerExeMSKSrvr.exePart of McAfee Spamkiller
    UMSKExespamkiller.exeMcAfee SpamKiller
    XMSKernel32MSKernel32.vbsAdded by the LOVELETTER (I LOVE YOU) VIRUS!
    XMSkernel32System.exe 4820Added by the TUXDER TROJAN!
    UMSKDetectorExeMSKDetct.exePart of McAfee Spamkiller
    XMSKCES32[random filename]Added by the CLONER TROJAN!
    UMSKAGENTEXEMskAgent.exePart of McAfee Spamkiller
    Xmsjava servicexpcd.exeAdded by the SDBOT.VM WORM!
    XMSInfoAVBgle.exeAdded by the NETSKY.O WORM!
    XMSInfomsinfo.exeAdded by the ALADINZ.M TROJAN!
    XMSIEXECMSIEXEC32.exeAdded by the AINESEY.A WORM!
    ?MSINMSin.exe??
    Xmsidlemsidle.exeAdded by the OPASERV-O WORM!
    XMSHT@MSHT@.EXEAdded by the MAGISTR.A VIRUS!
    XMsgtraysys16.exeAdded by an unknown VIRUS!
    Xmsgsvr32msgsvr32.exeAdded by the DEADHAT.B WORM! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:WindowsSystem) on a Win9x/Me machine
    YMSGSRV32.exemsgsrv32.exeWindows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background
    XMsgsrv16Msgsrv16.exeAdded by the DELF family of TROJANS!
    Xmsgserv_Syss.exeAdded by the FANTA TROJAN!
    XMsgmgr[path to worm]Added by the BABYBEAR WORM!
    Xmsgb1msgb1.exeAdded by the DLUCA.GEN TROJAN!
    XMsgApi[path to file]Added by the DEDLER-D TROJAN!
    Xmsfindosa.exemsfindosa.exeAdded by the DOWNLOADER-BS TROJAN!
    XMSFind32msfind32.exeAdded by the CAYAM WORM!
    XMsfindMsfind.exeCoolWebSearch parasite variant
    NMSDTCmsdtc.exeMS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
    XMsemu32Msemu32.exeUnidentified spyware/adware/hijacker
    NMSDosdrvmsdosdrv.exeAdded by the BACROS WORM!
    Xmsdos423msdos423.exeAdded by the MENACE.A WORM!
    XMsdmxmmsdmxm.exeAdult premium rate dialler
    XMsdos32Msdos32.pifAdded by the RECORY WORM!
    XMSDLLsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    Xmsdevmsconfig.exeAdded by the AGOBOT.AAU WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting
    Xmsdevmsdev.exeAdded by the FORBOT-CR WORM!
    XMSCVTMSCVT.exeAdded by the SLIDESHOW WORM!
    XMsctrl32Msctrl32.scrAdded by the REDIST WORM!
    XMscsgs32MSCSGS32.EXEAdded by the ZEZER WORM!
    XMscsgsMSCSGS.EXEAdded by the ZEZER WORM!
    XMSCOREsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    NMSConfigRemindermsconfig.exeEntry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
    XMSConfigrjdbgmrg.exeAdded by the DASMIN.C TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here
    Xmsconfig.exeproxy.exeAdded by a variant of the AGENT.AH downloader TROJAN!
    Xmsconfig.exeuline.exeAdded by a variant of the AGENT.AH downloader TROJAN!
    XMSConfig45MSConfig45.exeAdded by the SDBOT.OJ TROJAN!
    Xmsconfig serviceMSupdate32.exeAdded by a variant of the SPYBOT WORM!
    XMsconfig ml097emsconfig.exeVariant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executable name
    XMSConfig Managermsupdate.exeCoolWebSearch parasite related
    XMsconfig lptt01msconfig.exeVariant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executable name
    Xmsconfigwins.exeAdded by an unidentified IRC WORM with backdoor trojan capabilities!
    XMsconfigmsconfig.exeAdded by the WINUR WORM! Note - this is not the real msconfig.exe as it's located in C:winrun
    Xmsconfigmsconfig.exeCoolWebSearch parasite related. Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting
    XMSConfigMSCONFIG32.EXEUnidentified adware, spyware or virus
    NMSConfigmsconfig.exeEntry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
    XMSCONFG32.EXEMSCONFG32.EXEAdded by the OPTIX.04.C TROJAN!
    XMscolourmscolour.exeAdded by the GEMA TROJAN!
    XMSCommXmscommx.exeAdded by a variant of the RBOT WORM!
    XMscntmscnt.exeAdult content dialler
    Umscnmscn.exePart of the SafeChildNet internet filtering program - required if you use it
    Xmscmanmscman.exeSpyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
    ?mscimcinfo.exeMcAfee Internet Security related. What does it do and is it required?
    XMSBBmsbb.exeAdvertising spyware
    XMSChoExEsuge.exeAdded by a variant of the RBOT WORM!
    XMSAgentmshtm.exeBrowser hijacker - redirecting to buldog-search.com
    Xmsadcheckmsadcheck32.exeBrowser hijacker, redirecting to search-system.com
    XMSAdminjdbgmrg.exeAdded by the DASMIN.A TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here
    XMSACMmsacm.exeAdded by the OPASERV-O WORM!
    XMS-RunKeyarr.exeMS-Connect dialler/hijacker
    XMS7531ms7531.exeHomepage hijacker
    XMS-HTML[random filename]Added by the LATINUS.15 TROJAN!
    XMS-Connectweb.exeAdult content dialler - see here
    XMS-Connectmsite18.exeAdult content dialler - see here
    XMS-Connectgame.exeAdult content dialler - see here
    XMS-Connectcdm.exeAdult content dialler - see here
    XMS-Connectarr.exeAdult content dialler - see here
    XMS Updatesaupd.exeSpyware web downloader
    XMS Updatesmscache.exeSpyware web downloader
    XMS Updatessyshosts.exeAdded by the MYDOOM.Y WORM!
    XMS Updatesyshost.exeAdded by the EVAMAN-F WORM!
    XMS SyS Restoresysrestore.exeAdded by the RBOT.XM WORM!
    XMs Spool32MS SPOOL32.EXEAdded by the ASASSIN TROJAN!
    XMS Sound Config 16bitsndcfg16.exeAdded by the SDBOT.MB TROJAN!
    XMS Security Hotfixservice5.exeAdded by the GAOBOT.AG WORM!
    XMS Network Controlmswin.exeAdded by the DUMBA TROJAN!
    XMS Remote Procedure Callmsrpc32.exeAdded by the RBOT-QL WORM!
    ?MS management consolemms.exeSuspicious as the Microsoft Management Console is "mmc.exe" and doesn't normally run at startup
    XMS lsass Startuplsass135.exeAdded by the RBOT.WM WORM!
    XMS HTMLmslat.exeAdded by the LATINUS.SVR TROJAN!
    XMS HTMLmsHtml.exeAdded by the PESTDOOR.31 TROJAN!
    XMS FIREWALLmsfirewall.exeAdded by the SDBOT-QH WORM!
    XMS FIREWALLmsfrewall.exeAdded by the SDBOT-PU WORM!
    XMS Explorermexplore.exeAdded by the YAHA.AE WORM!
    XMS Decryption Softwareactive.exeMediaTickets adware variant
    XMS ConfigurationMSFramer.exeAdded by the RANDEX.OL WORM!
    XMS Config ServiceMsloader32.exeAdded by the RBOT-KJ WORM!
    XMS Config LoaderMSWin32bck.exeAdded by the GAOBOT.AA WORM!
    XMS Config Loadersvchos1.exeAdded by the AGOBOT.R WORM!
    NMRU-Blaster Silent Cleanmrublaster.exeMRU-Blaster - performs silent cleaning of MRU lists at boot
    UMRU-Blaster Schedulerscheduler.exeMRU-Blaster scheduler - detects and cleans MRU (most recently used) lists on your computer
    Xmqbkupmqbkup.exeAdded by the OPASERV.K WORM!
    NmrtMngrmrtMngr.exeMaintenance Release Task Manager for Intuit?s QuickBooks or Quicken
    ?MP_STATUS_MONITORmonitr32.exeRelated to Cannon Multi-Pass
    NMPXTraympxptray.exeWindows Media Player PowerToy which is run from the taskbar. It can be used to hide Windows Media Player (when in use) and choose various standard buttons (play/pause, next,previous) etc
    NMPTBoxMPTBOX.EXECannon Multi-Pass toolbox - a button bar
    XMPtask Servicesmptask.exeAdded by the LALA or AOT TROJANS!
    ?MPTMPT.exe??
    UMPSExemscifapp.exeMcAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"
    XMprHTMLMprHTML.exeAdded by a variant of the VAGRNOCKER TROJAN!
    YMPREXE.exemprexe.exeWIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here and here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus
    XMPREXEMPREXE.EXEAdded by the OPASERV.T WORM! Note - this is not the legitimate Mprexe.exe system file
    UMPowerMPower.exeMPower from MindBeat. "Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load". Some users swear by programs such as this but I suggest you read this article and make up your own mind
    XMPL32 driverMPL32.exeAdded by the LOONY-M TROJAN!
    UMplSetupMplSetup.exeUsed by Ricoh network printers to enable network printing from the client
    YMPFExempf.exeMcAfee Personal Firewall
    YMPFExeMpfTray.exeMcAfee Personal Firewall
    UMPEOCsinsm32.exeAutomatic logging of installs from Norton CleanSweep - available via Start -> Programs
    XMP Tcloaxsmptcloaxs.exeAdded by the RANDEX.CT WORM!
    NMozilla Quick LaunchMozilla.exeNetscape 6 and Mozilla browsers
    XMovieplaceMovieplace.exeMoviePlace malware
    NMozilla Quick LaunchNetscp6.exeNetscape 6 and Mozilla browsers
    XMovieNetworksMovieNetworks.exeMovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:Program FilesMovieNetworks directory
    NMovielink Manager Uninstallmsvcmm32.exeAuto-update for Movielink - internet movie rental System Tray access
    UMousinfomousinfo.exeMS mouse information tool - for troubleshooting mouse problems
    UmouseElfMC.exeGenius NetScroll mouse driver - required if you use non-standard Windows driver features
    UMouseImpMImpHost.exeMouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device"
    Xmousedrvmousedrv.exeAdded by the CRYPTER.A TROJAN!
    NMouseCountMC.exeMouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required
    XMousecntlmousecntl.exeAdded by a variant of the CRYPTER.C TROJAN!
    Xmousebutmousebut.exeAdded by the CRYPTER.A TROJAN!
    NMouse Suite 98 Daemonpelmiced.exeMouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
    NMouse 32AMouse32A.exeMouse driver to control mouse functions from Azona. Available via Start -> Programs
    UMount Safe & SoundFbmount.exeFrom McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
    UMotMonmotmon.exeFound on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
    NMotiveSBMotiveSB.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    UMotiveMonitormotmon.exeFound on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
    NMotive SmartBridgeMotiveSB.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    NMotive SmartBridgempbtn.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    Xmosearchmosearch.exeFast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here
    NMorpheusmorpheus.exeMusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"
    Nmoon phasemoon.exeMoon Phase - tray icon that indicates the phases of the moon
    UMoodBookmb.exeMoodBook is a free Windows utility that brings art to your desktop
    NMonstersoundtrayFreectrl.exeDiamond Multimedia sound card control panel
    XMonitormgtMonitormgt.exeAdded by the GEMA TROJAN!
    UMonitor Apache ServersApacheMonitor.exePart of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
    XMonitoring Servicesvchost.exeAdded by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
    NMoneyStartUpMoney Startup.exeMicrosoft Money
    NMoneyStartUp10.0Activation.exePart of MS Money 2002. Available via Start -> Programs
    NMoneyAgentmoney express.exePart of MS Money. Available via Start -> Programs
    NMoneyAgentmnyexpr.exeMicrosoft Money
    NMoney Expressmoneyexpress.exePart of MS Money. Available via Start -> Programs
    XModule Call initializeRUNDLL32.EXE reg.dll, ondll_regAdded by a variant of the LOVGATE WORM!
    XModularConfigsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    NModemUtilitymdmsetpe.exeSystem Tray configuration icon for Aztech modems
    UModemOnHoldMOH.EXENetWaiting Modem-on-Hold Application
    UMODEMBTRMODEMBTR.EXEModem Booster from inKline Global to improve ISP connections
    XModeminfModeminf.exeAdded by a variant of the CRYPTER.C TROJAN!
    NMODmuamger.exeMicroAngelo On Display from Impact Software lets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them
    XMOBSYNC32.EXEmobsync32.exeAdded by the FINERO TROJAN!
    Nmobsyncmobsync.exeMS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages
    Xmnsvcspmnsvcsp.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    Xmnsvcmnsvc.exeAdded by the AUTOUPDER TROJAN!
    UMNSMNS.exeMobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the correct drive mappings, printer settings, IP settings and much more
    XMNPolmnpol.exeAdult content dialler
    Xmmxrunmsosa.exeAdult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and RegCompres (REGCPM32.EXE), otherwise they return
    ?mmusrstpprocrun.exe??
    NMMTrayLSIMMTrayLSI.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    NMMTray2KMMTray2K.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    NMMTrayMMTray.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    NMMTraymm_tray.exeMusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator
    XMMtask Servicemmtask.exeAdded by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename
    Nmmtaskmmtask.exePart of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator
    YMMTASKmmtask.tskA check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc
    XMMSystemRunDll32Added by the FUNNER-A WORM!
    ?mmsysrecover.exe??
    ?MMRunmmrun.exe??
    Nmmptim1mmpti.exeMpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
    Xmmodmmod.exeEzula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
    UMMKeybdMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
    NMMHotKeyMMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
    ?MMHKmmhk.exeA driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?
    UMMhidmmhid.dllThis is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP
    XMmgsvcmmgsvc.exeMmgsvc spyware
    UMMERefreshMMERefresh.exePart of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R
    NMMCWINMGMTwinmgmt.exeUsed for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth "scheduler" - refer here
    Xmmcndmgrmmcndmgr.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    ?MM Installsetup.exePossibly Money Manager from Moneysoft?
    Xmloadlxmstart.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    NMixghostmixghost.exeManagement software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu
    NMixerMixer.exeC-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
    ?misiCTRLmisiCTRL.exeMiro video driver related. Is it required?
    ?misiTRAYmisiTRAY.exeMiro video driver related. Is it required?
    UMirrorFolderShellmrfshl.exeMirrorFolder backup software
    NmiroVIDEO Tray Toolmisitray.exeTool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card, e.g. for the above actions
    XMirate Sp 2 Informationmiratesp2.exeAdded by the RBOT.QH WORM!
    NMirabilis ICQICQNet.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    UMiramar Systems, Inc.atmsg.exeMiramar PC/Mac networking software
    NMirabilis ICQicq.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    XMiosf Updatewimsqaad.exeAdded by the SDBOT.AG TROJAN!
    NMirabilis ICQNDetect.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    UMinMaxExtenderMmext.exeMinMaxExtender - window handling tool
    NMiniNoteMININOTE.EXEMini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software
    NMiniMavisMiniMavis.exeMavis Beacon typing tutor
    UminilogMINILOG.EXEIf you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
    NMINIFERT.EXEMINIFERT.EXEPart of Backweb
    ?MigrationVendorSetupCallerrundll32.exe migrate.dll, CallVendorSetupDlls??
    XMINIBUGMINIBUG.EXEDisplays ads inside Weatherbug - see here
    NMightyFAX ControllerMFNTCTL.EXEMighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software"
    XMicrsoft Driverwindrive.exeAdded by the SDBOT.AF TROJAN!
    XMicrozoft_OfizKdzEregli.exeAdded by the AMUS.A WORM!
    XMicroszoft Update Mach1nezssvchst.exeAdded by the RBOT-ED WORM!
    XMicrosoft? System MapperSysMap.exeAdded by the MAPSY TROJAN!
    XMicrosoft? PID LexPIDLex.exeAdded by the NIOVADOOR TROJAN!
    XMicrosoftWindows[various filenames]MagicSearch - a CoolWebSearch parasite variant
    XMicrosoftvirussysoverload.exeAdded by the FORBOT-AL WORM!
    XMicrosoftValuesyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    XMicrosoftUpdatesyshelper.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftUpdateWinUp32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftSourceSafelsass.exeAdded by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
    XMicrosoftServiceManagermsupdat.exeAdded by the YAHA.AA WORM!
    XMicrosoftServiceManagerEXPLORERE.EXEAdded by the YAHA.AB WORM!
    XMicrosoftServiceManagerWintsk32.exeAdded by the YAHA.U WORM!
    XMicrosofts Updatezcmsssr.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftServiceManagermstask32.exeAdded by the YAHA.P WORM!
    XMicrosoftNetwork Daemon for Win32NETD32.EXEAdded by the RANDEX.F WORM!
    XMicrosoftMultimediaTaskMmtask.exeAdware downloader - not the valid MusicMatch Jukebox which shares the same filename
    XMicrosoftmsn32.exemicrosoftmsn32.exeAdded by the CERTIF-C TROJAN!
    XMicrosoftkeysdsystemwin32s.exeAdded by the WOOTBOT.CO WORM!
    Xmicrosoft420microsoft420.exeAdded by the MENACE.B WORM!
    XMicrosoftkeysdsystemproc.exeAdded by the FORBOT-BI WORM!
    XMicrosoft-Updatessvxhost.exeAdded by the RBOT-CT WORM!
    XMicrosoft-Updatewngard.exeAdded by the RBOT-JV WORM!
    XMicrosoft XML Servicemsxmlx.exeAdded by the RBOT.KS WORM!
    XMicrosoft--Updatessxvhost.exeAdded by the RBOT-FH WORM!
    Xmicrosoft xdaemon 2.0xdaemon.exeAdded by the DELF.D TROJAN!
    XMicrosoft WxdateSyswu32.exeAdded by the SPYBOT.HZ WORM!
    XMicrosoft World Servicewinworld.exeAdded by an unidentified IRC worm with backdoor capability!
    NMicrosoft Works Update Detection wkdetect.exeChecks for updates to MS Works
    NMicrosoft Works PortfolioWksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
    NMicrosoft Works Calendar Reminderswkcalrem.exeProduces a pop-up reminder of events scheduled using the MS Works Calendar
    XMicrosoft WinUpdatesyswin32.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft WinUpdatesserm32.exeAdded by the RBOT.GE WORM!
    XMicrosoft WinUpdatesyslx32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft WinUpdatesvh0st.exeAdded by the SPYBOT.DL WORM!
    XMicrosoft WinUpdatemntcgf032.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft Winsock Wrapperws2_32s.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Windows Updatesexplorer32.exeAdded by the SDBOT.VQ WORM!
    XMicrosoft Windows updaterDlog32zx.exeAdded by the MYDOOM.W WORM!
    XMicrosoft Windows UpdaterWINUPDATE.EXEAdded by the SDBOT-PU WORM!
    XMicrosoft Windows Updatersvchostz.exeAdded by the DAEMONI-E TROJAN!
    XMicrosoft Windows UpdaterWINIUPDATES.EXEAdded by the RBOT-KK WORM!
    XMicrosoft Windows Update Servicewupdmgr32.exeAdded by the DOS.AUTOCAT TROJAN!
    XMicrosoft Windows Updaterwinupdgm.exeAdded by the GAOBOT.BI WORM!
    XMicrosoft Windows Updatesvmhost.exeAdded by the FORBOT-CH WORM!
    XMicrosoft Windows Updatesvshost.exeAdded by the WOOTBOT.CJ WORM!
    XMicrosoft Windows Updatesvcshost.exeAdded by the FORBOT-CF WORM!
    XMicrosoft Windows Updatesvchos.exeAdded by the SDBOT.AC WORM!
    XMicrosoft Windows Updatespools.exeAdded by the SDBOT.TD WORM!
    XMicrosoft Windows Updatemsoffice2.exeAdded by the RBOT-GB WORM!
    XMicrosoft Windows Updaterundlls.exeAdded by the HABRACK WORM!
    XMicrosoft Windows Task MangerMstosk.exeAdded by the SDBOT-WW WORM!
    XMicrosoft Windows Secure ServerrpcxWindows.exeAdded by the RBOT-LL WORM!
    XMicrosoft Windows Loaderwloader.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft Windows Kernel Serviceswinkrnl386.exeAdded by the ZEBROXY TROJAN!
    XMicrosoft Windows GUIWindowz.exeAdded by the RANDEX.AEV WORM!
    XMicrosoft Windows DHCP___r.exeAdded by the MASLAN.A WORM!
    XMicrosoft Windows 2000Winupdsdgm.exeAdded by the GAOBOT.AO WORM!
    XMicrosoft Windowsmstask0.exeAdded by the SDBOT.FQ WORM!
    XMicrosoft Visual Studio VSAvarpc32.exeAdded by a variant of the SPYBOT WORM!
    UMicrosoft Webserversvctrl.exePersonal web server program which enables you to create and host a web server from your computer. Not required for most people
    XMicrosoft Visual SourceSafewinlogon.exeAdded by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
    XMicrosoft Visual SourceSafeservices.exeAdded by the NEVEG.B or NEVEG.C WORMS!. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
    XMicrosoft Video Controlstskmsgr.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft upnp Updatemsie.exeAdded by the RBOT-LQ WORM!
    XMicrosoft Utility StartupOSA9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    XMicrosoft Updates ResourcesWinFixIDs.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updaters ProsWINDLL32XP.EXEAdded by the SPYBOTTER.GEN VIRUS!
    XMicrosoft UPDATER32lsass.exeAdded by the RANDEX.AR WORM! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
    XMicrosoft Update Win32awinupdate32a.exeAdded by the RBOT-LO WORM!
    XMicrosoft Update Timewuam.exeAdded by the RBOT-M WORM!
    XMicrosoft Update Servicemswin32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Update Servicecsrss32.exeAdded by the AGOBOT-HC WORM!
    XMicrosoft Update Servermssrv.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Update MecheneUpdatez.exeAdded by the RBOT-GI WORM!
    XMicrosoft Update Security Patchmssecurityupdatepatch.exeAdded by the AGENT.EF TROJAN!
    XMicrosoft Update Machinewuagrd.exeAdded by the RBOT-GF WORM!
    XMicrosoft Update Machinewinxpini.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewuamgrd.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update MachineWinmsixp32.exeAdded by the RBOT.DN WORM!
    XMicrosoft Update MachineWinregs32.exeAdded by the RBOT.DN WORM!
    XMicrosoft Update Machinewinmgr.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewininigo.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewindowsu.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinelmrss.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinelinux.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machine[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update Machinewupdt32x.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft Update Machinewuamgd.exeAdded by the SDBOT.HQ WORM!
    XMicrosoft Update Machinesvshost.exeAdded by the RBOT.AK WORM!
    XMicrosoft Update Machinewinupdt.exeAdded by the RBOT-FP WORM!
    XMicrosoft Update Machinesystemll.exeAdded by the RBOT-JT WORM!
    XMicrosoft Update Machinewuawx.exeAdded by the RBOT-CE WORM!
    XMicrosoft Update Machinezonealarm.exeAdded by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program!
    XMicrosoft Update Machinesystem03.exeAdded by the RBOT-NM WORM!
    XMicrosoft Update Machinentce.exeAdded by the RBOT-FA WORM!
    XMicrosoft Update Machinememstat.exeAdded by the RBOT-OM WORM!
    XMicrosoft Update Machinexvshost.exeAdded by the RBOT.QP WORM!
    XMicrosoft Update Machinewinini.exeAdded by the RBOT-KV WORM!
    XMicrosoft Update MachineSP2.exeAdded by the SPYBOT.FP WORM!
    XMicrosoft Update Machineservicz.exeAdded by the RBOT-HU WORM!
    XMicrosoft Update Machinerxhost.exeAdded by the RBOT.FC WORM!
    XMicrosoft Update Machineexpl0rer.exeAdded by the SDBOT.OK WORM!
    XMicrosoft Update Loader[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update Machine[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update 32MSupdate32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Update Emulatorkern-mxe.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update 32explore32.exeAdded by the SPYBOT.CYM WORM!
    XMicrosoft Updatewuagrd.exeAdded by the RBOT-FK WORM!
    XMicrosoft Updatewebm.exeAdded by the SDBOT.WK WORM!
    XMicrosoft Updatesystemi32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Updatexpupdate.exeAdded by the RBOT-QE WORM!
    XMicrosoft UpdateNAV.exeAdded by the RBOT-IV WORM!
    XMicrosoft Updatewuamgrd32.exeAdded by the RBOT.ZB WORM!
    XMicrosoft Updatemsiwin84.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Updatemsawindows.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Updatewudmate.exeAdded by the RBOT.AP WORM!
    XMicrosoft Updatewuammgr32.exeAdded by the RBOT-AW WORM!
    XMicrosoft Updatewinsys32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updatewuamgrd.exeAdded by the RBOT-LK WORM!
    XMicrosoft UpdateVPC32.EXEAdded by the AGOBOT.XM WORM!
    XMicrosoft Updatesys32cfg.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft UpdateSmss32.exeAdded by the RBOT.CB WORM!
    XMicrosoft Updatenavmgrd.exeAdded by the SDBOT.DP TROJAN!
    XMicrosoft Updatemuamgrd.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft UpdateMslti32.exeAdded by the RBOT-LX WORM!
    XMicrosoft UpdateMicrosoftx.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updatemsconfg.exeAdded by the RBOT.H WORM!
    XMicrosoft Updatemediap.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updateautomgr32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft UpdateIsac.exeAdded by the RBOT-AU WORM!
    XMicrosoft Updateascdl.exeAdded by the GAOBOT.SY WORM!
    XMicrosoft Updatemvsc.exeAdded by the SPYBOT.DAZ WORM!
    XMicrosoft Updatemssmgrd.exeAdded by the SDBOT.JT WORM!
    XMicrosoft UpdateMicrosoft.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Tray[random filename]Added by the DELF.BZ TROJAN!
    XMicrosoft Time Managerdveldr.exeAdded by the RBOT-HQ WORM!
    XMicrosoft System Checkuplibsysmgr.exeAdded by the SDBOT-CAF WORM!
    XMicrosoft System Restore ConfigurationCBRSS.EXEAdded by a variant of the SPYBOT WORM!
    XMicrosoft System Checkupntsysman.exeAdded by the SDBOT-QW WORM!
    XMicrosoft System Checkupinetman.exeAdded by the DONK.O WORM!
    XMicrosoft System Checkupntsysmgr.exeAdded by the DONK.S WORM!
    XMicrosoft System CheckupKeymgr.exeAdded by the DONK.M WORM!
    XMicrosoft System Checkupdbnetlib.exeAdded by the DONK.L WORM!
    XMicrosoft System CheckupCool.exeAdded by the DONK.B WORM!
    XMicrosoft System CheckupWnetlib.exeAdded by the DONK.C WORM!
    XMicrosoft Synchronization Manager___synmgr.exeAdded by the MASLAN.A or MASLAN.C WORMS!
    XMicrosoft Synchronization ManagerxXx.exeAdded by the SDBOT-KZ WORM!
    XMicrosoft Synchronization Managerwinupdate.exeAdded by the SDBOT.ER WORM!
    XMicrosoft Synchronization ManagerWinLoginnn.exeAdded by the SPYBOT.FO WORM!
    XMicrosoft Synchronization Managersvhost.exeAdded by the SDBOT-PY WORM!
    XMicrosoft Synchronization Managerslhost.exeAdded by the SDBOT.YH WORM!
    XMicrosoft Synchronization Managernetscape.exeAdded by the RANDEX.AE WORM!
    XMicrosoft Synchronization Managerbot.exeAdded by the SDBOT.IH WORM!
    XMicrosoft Synchronization Managerasgard.exeAdded by the SDBOT.PH WORM!
    XMicrosoft SSISVRI32 Protocolssisvri.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Spool Server for Win32spoolsrv.exeAdded by the RANDEX.H WORM!
    XMicrosoft SourceSafecsrss.exeAdded by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
    NMicrosoft Sound Volume Toolmssvol.exeThis is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
    XMicrosoft Software Updatenmon.exeAdded by the RBOT.HZ WORM!
    XMicrosoft Sound Driversound32.exeAdded by a variant of the SPYBOT WORM!
    NMicrosoft Sidewinder Game Controller SoftwareSWTRAY.EXEMS SideWinder game controller system tray icon. Available via Start -> Programs
    XMicrosoft Softwaresysinfo33.exeAdded by the RBOT.LS WORM!
    XMicrosoft Serviceslsrv.exeAdded by the RBOT-BK WORM!
    XMicrosoft Serviceslssrv.exeAdded by the RBOT.CW WORM!
    XMicrosoft Servicesservices.exeAdded by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
    XMicrosoft Servicewinsvc.exeAdded by the SPYBOT-DB WORM!
    XMicrosoft Serviceslsserv.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Servicemicrohost.exeAdded by the RBOT-LC WORM!
    XMicrosoft Server ApplicationSound.exeAdded by the RBOT-NE WORM!
    XMicrosoft Security Managementwinnt.exeAdded by the RBOT-MQ WORM!
    XMicrosoft Secure Messenger.NET Servicesecuritychk.exeAdded by the SDBOT.VT WORM!
    XMicrosoft SCVHOST32 Protocolscvhost32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Scanregmicrosoftscanreg.exeAdded by the FRANRIV.A WORM!
    XMicrosoft RuntimeCfgDll32.exeAdded by the RANDEX.BD WORM!
    XMicrosoft Restorescrgrd.exeAdded by the SPYBOT.BR WORM!
    XMicrosoft Registrycsrse.exeAdded by the RBOT-PC WORM!
    XMicrosoft RDLLsysconf32.exeAdded by a variant of the SDBOT TROJAN!
    XMicrosoft Personal Firewallsbakw.exeAdded by the RBOT-KS WORM!
    NMicrosoft Office StartupOsa9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    NMicrosoft Office StartupOsa.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    XMicrosoft Office Startwinupdates.exeAdded by the GAOBOT.BC WORM!
    NMicrosoft Office Shortcut BarMsoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
    UMicrosoft Office OneNote 2003 Quick LaunchONENOTEM.EXEONENOTEM.EXE is a part of the note taking program that ships with Microsoft Office 2003. It's required for the side note windows to work
    NMicrosoft OfficeOsa9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    NMicrosoft Office Fast CacheFastboot.exePart of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled
    XMicrosoft OfficeMSMSGR.exeAdded by the GAOBOT.BB WORM!
    NMicrosoft OfficeMsoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
    NMicrosoft OfficeOsa.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    XMicrosoft Network Daemon for Win32Netd32.exeAdded by the SDBOT.R TROJAN!
    XMicrosoft Networkmsnet.exeAdded by the MOCKBOT.A WORM!
    XMicrosoft Netviewmssvc32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Netview Component v5.1msnv32.exeAdded by the RANDEX.F WORM!
    XMicrosoft Netviewgesfm32.exeAdded by the RANDEX.C WORM!
    XMicrosoft MSUPDATESpoolSvc.exeAdded by the SXTB-A TROJAN!
    XMicrosoft NetMeeting Associates, Inc.NetMeeting.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft MsnSTmsnst32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft MSNGR32 Protocolmsngr32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft MSGPLUS32 Protocolmsgplus32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Movie MakerMmaker.exeAdded by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program
    XMicrosoft media serviceswinmplayer.exeAdded by the RBOT.ZO WORM!
    XMicrosoft media servicesIassd.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft mediawinmplayers.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Management Consolelssas.exeEasySearch adware
    XMicrosoft Macro Protection SubsystemsMsmacroprot32.exeAdded by the RBOT.KN WORM!
    XMicrosoft Macro Protection SubSsymsacroprots386.exeAdded by the RBOT-KE WORM!
    XMicrosoft Macro Protection Subsystemsmsmacroprotxz.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft LSASS386 Protocolscvhost32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft KernelWindows_kernel32.exeAdded by the NETSKY.AE WORM!
    XMicrosoft Locals 332[random filename]Added by the RBOT-KU WORM!
    XMicrosoft JavaVMmsjarun.exeAdded by the RBOT-JW WORM!
    XMicrosoft IT Updatewinn43.exeAdded by a variant of the RBOT WORM!
    XMicrosoft IT Updatemsupdate.exeAdded by a variant of the RBOT WORM!
    XMicrosoft IT UpdateIEserv.exeAdded by a variant of the RBOT WORM!
    XMicrosoft IT Update[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft IPCsvshost.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft IT Updatewin64.exeAdded by the RBOT.GA WORM!
    XMicrosoft IPCsystem.exeAdded by the NULLBOT TROJAN!
    XMicrosoft Internet ServicesSmss32.exeAdded by the RBOT.MS WORM!
    XMicrosoft Internet Firewall ManagerGMT16.exeAdded by the RANDEX.AT WORM!
    XMicrosoft Internet Exploreriexplore.exeDownloader trojan. Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
    XMicrosoft Internet Expiiexplorer.exeAdded by the RBOT-KX WORM!
    XMicrosoft Internetwindows32.exeAdded by the SDBOT-F WORM!
    XMicrosoft Internet Acceleration Utilityiau.exeEasySearch adware
    XMicrosoft Internetexpl0rer.exeAdded by a variant of the SPYBOT WORM!
    UMicrosoft Intellitype Prospeedkey.exeAdditional keyboard shortcuts on MS programmable keyboard
    XMicrosoft Inet Xp..teekids.exeAdded by the BLASTER.C WORM!
    XMicrosoft Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft IISsyshost.exeAdded by the FRANCETTE WORM!
    XMicrosoft IE Execute shellIEExec.exeAdded by the ALADINZ.N TROJAN!
    XMicrosoft IEIexplore.exeAdded by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
    XMicrosoft Help SVCmsnmngr.exeAdded by the SDBOT-PQ WORM!
    NMicrosoft Greetings  ReminderMHPRMINF.EXEYou really want to be reminded about somebody's birthday at the expense of resources?
    NMicrosoft Greetings Workshop ReminderGwremind.exeYou really want to be reminded about somebody's birthday at the expense of resources?
    XMicrosoft Gina V EncryptionMSGINAV.EXEAdded by an unidentified VIRUS, WORM or TROJAN!
    NMicrosoft Greetings RemindersMHPRMIND.EXEMicrosoft Home Publishing greetings reminder
    YMICROSOFT FIREWALL CLIENTISATRAY.EXEMS Internet Security and Acceleration Server 2000
    XMicrosoft Firewallfirewallsp2.exeAdded by the RBOT-MC WORM!
    XMicrosoft Featuresms32cfg.exeAdded by the RBOT.HO WORM!
    XMicrosoft Find FastFindfast.exeComplete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
    XMicrosoft EXPLOREXP Protocolexplorexp.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Documentkrisp.exeAdded by the SDBOT-RQ WORM!
    XMicrosoft Excellwuamngr32.exeAdded by the RBOT-QH WORM!
    XMicrosoft Dll Managementwindll.exeAdded by the RBOT-MT WORM!
    XMicrosoft DNS Querymsdns.exeAdded by a variant of the WOOTBOT WORM!
    XMicrosoft DirectXPDSched.exeAdded by the SDBOT.CN WORM!
    XMicrosoft DirectXrasmngr.exeAdded by a variant of the RBOT WORM!
    XMicrosoft DirectXSpoolserv.exeAdded by the DINFOR WORM!
    XMicrosoft Digital Clockmsclock.exeAdded by the NACKBOT-D WORM!
    XMicrosoft Diagnostic[random filename]Added by the ACEBOT TROJAN!
    XMicrosoft Decryption TechnologyMsfenoe.exeAdded by the SPYBOT-DG WORM!
    XMicrosoft Database Handlermssql32.exeAdded by the RANDEX.AX WORM!
    XMicrosoft Data Machinecsdata32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Cvrtmscvrt32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Data Helpercihost.exeMalware, possibly a variant of the LINST TROJAN
    XMicrosoft CSRSS386 Protocolcsrss386.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft CSRSS32 Protocolcsrss32.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft Corporation[random filename]Added by various VIRUSES, WORMS & TROJANS!
    XMicrosoft Configmsconf.exeAdded by the RBOT.PV WORM!
    XMicrosoft Conf Ldrsysconf.exeAdded by a variant of the SDBOT TROJAN!
    XMicrosoft AutoUpdatersvhost.exeAdded by the RBOT.QG WORM!
    XMicrosoft auto updatewinupdate.exeAdded by the BMBOT TROJAN!
    XMicrosoft AUT UpdateMSlti32.exeAdded by the RBOT-X WORM!
    XMicrosoft Associates, Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft Ansti Updatemsie.exeAdded by the RBOT-LE WORM!
    NMicrosoft Announcement ListenerAnnclist.exeMS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
    XMicrosoft ALG32 Protocolalg32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft 16Bit Updatewuapdate16.exeAdded by the RBOT.CZ WORM!
    XMicrosoft .NET Confinguratormsnconf.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Associates, Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    Xmicrosoftsvchost.exeAdded by the ASTEF or RESPAN WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
    XMicrosofot x386 System Monitorsystem32.exeAdded by the WOOTBOT.M WORM!
    XMicrosof Winlog Hostwilogon32.exeAdded by the RBOT.XC WORM!
    XMicrosof Windows Hostsvhost32.exeAdded by a variant of the RBOT WORM!
    XMicroLoad[random filename]Added by the DARBY WORM!
    XMicrofinder ml097emcf.exeVariant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    XMicrofinder lptt01mcf.exeVariant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    UMicroDialleratdialler1.exePart of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
    NmicroAttuneDownloadatmdlusr.exeUSR (US Robotics) modem auto updater. May be a sub-set of Attune
    UMicroangelo DesktopMuamgr.exeQuick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs
    NMHINITMHINIT.EXEPart of the Cybermedia Clean Sweep package
    XMicr Updatesoundblaster.exeAdded by the SDBOT.NP WORM!
    XMHDOGStartmhdogst.EXEAdded by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS
    NMGA_CD_Installmgasetup.exeMatrox Millennium video driver. Not required once drivers installed
    Ymgavrtclexemgavrte.exeMcAfee's Virus Scan Online
    Ymgavrtclexemgavrtcl.exeMcAfee's Virus Scan Online
    Ymgavctrlmgavrte.exeMcAfee's Virus Scan Online
    Ymgavctrlmgavrtcl.exeMcAfee's Virus Scan Online
    ?MgabgMgabg.exeMatrox BIOS Guard. What does it do and is it required?
    NMGA QuickdeskMGAQDESK.EXEFor Matrox video cards. Quick access to tweak your card to your liking
    ?mfgboot????
    Xmfin32mfin32.exeMyFreeInternetUpdate - adware downloader
    ?MGA HookMgahook.exeMATROX Graphics card related. What does it do and is it required?
    XMeTaLRoCk (irc.musirc.com) has sex with printersmetalrock-is-gay.exeAdded by the RANDEX.Q WORM!
    XmessngerDvldr32.exeAdded by the DELODER.A WORM!
    Xmessnger[worm filename]Added by the DELODER WORM!
    NMessengerPlus3MsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    NMessengerPlus2MsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    NMessengerPlusMsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    UMessengerDiscoveryMessengerDiscovery.exeMessengerDiscovery is a MSN Messenger add-on - adding over 70 new features
    XMessenger start-upMsgran.exeAdded by the GRAMOS WORM!
    XMessenger6command.pifAdded by the INZAE.B WORM!
    XMessenger Blockmsngrblock.exeAdded by the PATOO WORM!
    XMessengermessenger.exeAdded by the KUTEX TROJAN!
    UMessage_Blockermessageblock.exeMessage Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"
    NMessagerStarter FreeserveStartMessager.exeFreeserve Messenger
    XMessage Queuingmsmqs.exeAdded by the FREEFORS TROJAN!
    NMenuSnapMenuSnap.exeMenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe
    NMemScannerMemScanner.exeSpyHunter - spyware remover of somewhat dubious repute, see note
    UMemTurbomemturbo.exeMemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    XMemoryMeterMemoryMeter.exeAutoinstalling spyware by Total Velocity
    UMemory+tfimemsr.exeMemory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    XMemory WatcherMemoryWatcher.exeMemoryWatcher spyware
    UMemory Stick MonitorMSstat.exeSony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive
    NMemory Stick MonitorMSTAT.exeUsed with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
    XMemory Checkmemore.exeAdded by the KILLAV.C TROJAN!
    UMemoKitMK.EXEMemory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    XMemConfigSetupIE.comAdded by the TAPLAK WORM!
    Xmedia_managermediaman.exeMini-Player,  IMESH related foistware, see here
    Xmedia_stubstub.exeMini-Player,  IMESH related foistware, see here
    NMediaRing Talkmrtalk.exeMedia Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
    XMediaPathRoot.exeAdded by the GRUEL WORM!
    XMediaPathProyecto1.exeAdded by the GRUEL WORM!
    Xmediamotor.exemmups.exeRoimoi/Media-Motor adware
    NMediaMonitorMediam~1.exeInstalled by Smartdisk MVP CD burning software. Software will work fine without it
    XMediaLoads Installerdw.exeMedialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
    XMediaLoadsdw.exeMedialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
    UMediaKeyMediaKey.exeMultimedia keyboard manager. Required if you use the multimedia keys
    UMediafour XPlay Tray Notification IconXptryicn.exeMediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
    UMediafour Mac Volume NotificationsMacvntfy.exeMediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
    NMediaFace IntegrationSethook.exeFellowes Neato? cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
    XMedia servicemsnmsgxr.exeAdded by the SDBOT.TF WORM!
    XMedia serviceSYSTEM64.EXEAdded by the RBOT.QV WORM!
    XMedia Servicemsn64.exeAdded by the SPYBOT.EV WORM!
    XMedia Playerwmplayer.exeAdded by the AGOBOT-BM WORM!
    XMedia Plug x.1.2msdm.exeAdded by the MULDROP.352 VIRUS!
    XMedia Playermedia.exeAdded by the FLDMEDIA-A TROJAN!
    UMedia Manager IndexerAIRSVCU.EXEPart of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
    NMECAMeca.exeMeca instant messenging client
    XMedia Loadmsn32.exeAdded by a unidentified WORM or TROJAN!
    XMdmdll32mdmdll32.exeAdded by a variant of the CRYPTER.C TROJAN!
    XMdmdllmdmdll.exeAdded by the CRYPTER TROJAN!
    UMDM7mdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable
    Xmdmmdm.exeAdded by the LYDRA-F TROJAN! Note - this is not the valid Machine Debug Manager which shares the same filename
    XMdmMdm.vbsAdded by the WHITEHO VIRUS or TRAPPY WORM!
    Xmdetect[path to trojan]Added by the SPABOT TROJAN!
    Nmdac_runoncerunonce.exeAssociated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". 
    XMD IE Pluginmd.exeAdult content dialler
    XMD IE Pluginwiny.exeAdware
    Ymcvsshldmcvsshld.exeMcAfee VirusScan On-line. See also the McAgentExe entry
    YMcVsRtemcusrt.exePart of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why
    UMcUpdateExemcupdate.exeFrom McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
    ?McRegWizmcregwiz.exeMcAfee antivirus related. What does it do and is it required?
    NMChangerMChanger.exeMedia Changer - utility that allows you to change wallpapers, sounds, themes, etc
    ?Mcappins.exemcappins.exeMcAfee Application Installer. What does it do and is it required?
    UMcAgentExemcagent.exeFrom McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
    XMcaffe AntivirusMcafeescn.exeAdded by a variant of the SPYBOT WORM!
    YMcAfeeWebscanXWebScanX.exeFrom McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
    YMcAfeeVirusScanServiceAvsynmgr.exeFrom McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
    ?McAfeeUpdaterUIUpdaterUI.exeAssociated with McAfee Enterprise 7.0.0. Updater for McAfee anti-virus and security programs?
    UMcAfee.InstantUpdate.MonitorRuLaunch.exeInstant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
    NMcAfee Winguage??Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
    NMcAfee GuardianCMGRDIAN.EXEMcAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
    YMcAfee FirewallCPD.EXEFirewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
    XMcafee Antivirus Monitoring System32mnVSStatmn32.exeAdded by a variant of the RBOT WORM!
    XMcafee Anti ScanNortonScn.exeAdded by a variant of the RBOT WORM!
    XMCwintrims.exeAdded by the WINTRIM TROJAN!
    UMBProbembrpobe.exeMBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    UMBM 5MBM5.exeMotherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    UMBM 4MBM4.exeMotherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    UMaxtorRegAUTOREG.EXEPart of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
    YMaxtorComboComboButton.exeRequired to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
    NMatrox QuickDeskmgaqdesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
    XMaxAlertsmax.exeBonzi MaxALERT - spyware
    NMatrox PowerDesk 8Matrox.PowerDesk.exe /silentFor Matrox video cards. Quick access to tweak your card to your liking
    NMatrox PowerdeskPDesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
    NMatrox Control Centermgactrl.exeFor Matrox video cards. Quick access to settings
    NMatrox Diagnosticmgadiag.exeFor Matrox video cards. Quick access to diagnostics
    NMatrox Color Controlhgcctl95.exeFor Matrox video cards. Quick access to changing colors
    XMatrixScreenSavermss.exeMalware, see here
    XMatrixScreen[filename]Added by the MATRIXSCREEN TROJAN!
    UMatadormlfbuddy.exeMailFrontier - anti-spam application
    UMatadormantispm.exeMailFrontier Desktop (Matador) email spam blocker software
    UMaster Volume SpyMASTERVOLUMESPY.EXEVolume control for the Gateway Destination "DestiVu" media interface
    NMass storage check registryrundll32.exe MSDServ.dll, check registryUsed with a USB based smartmedia card reader
    Nmasqform.exemasqform.exePureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms
    Xmapisvc32mapisvc32.exeAdded by the KX VIRUS and also recognised by Symantec as FPAI adware
    XMapiDrvmpisvc.exeAdded by the MIPSIV TROJAN!
    XMantis[filename]Added by the MANTIBE VIRUS!
    NMania Win RestoreRESWIN.EXEPinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
    Xmainviewexmainviewex.exeAdded by the GEMA.D TROJAN!
    Xmain16main16.exeAdded by the CRYPTER.A TROJAN!
    Xmain32main32.exeAdded by the CRYPTER.A TROJAN!
    ?Main Executable (HP)HP05T0R5.exeHP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?
    UMAINmain.exeSpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
    XMail_CheckMail_Check.exeAdded by the PANOIL.C WORM!
    YMailScan DispatcherLaunch.exeMailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned
    UMailbox Verifiermboxvrfy.exeMailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
    UMailBellmailbell.exeMailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
    ?Mail.commcalert.exeMail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
    NMagitimeMagitime.exeMagitime - connection tracking utility which monitors online time, expense, data transfer
    UMagicDskMAGICDSK.EXEMagic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
    NMadExeLaunchRA.exeDell Resolution Assistant
    NMacNameMacName.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
    YMAD.EXEMAD.EXEMAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
    NMacLicMacLic.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
    UMachine Debug Managermdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable
    XMacfee Security PatchMpfsheild.exeAdded by the RBOT-NP WORM!
    NM3Traym3tray.exeMovielink - internet movie rental System Tray access
    XM1cr0s0ft Upd4t4zSupdate32.exeAdded by the RBOT-MI WORM!
    Xm32infom32info.exeAdded by the CRYPTER.A TROJAN!
    ?M Player Post Installerpostinstallm.exe??
    ?M Player Post Installerpostinstallm.exe??
    XM1cr0s0ft Upd4t4zSupdate32.exeAdded by the RBOT-MI WORM!
    Xm32infom32info.exeAdded by the CRYPTER.A TROJAN!
    NM3Traym3tray.exeMovielink - internet movie rental System Tray access
    XMacfee Security PatchMpfsheild.exeAdded by the RBOT-NP WORM!
    UMachine Debug Managermdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable
    NMacLicMacLic.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
    NMacNameMacName.exePart of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
    YMAD.EXEMAD.EXEMAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
    NMadExeLaunchRA.exeDell Resolution Assistant
    UMagicDskMAGICDSK.EXEMagic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
    NMagitimeMagitime.exeMagitime - connection tracking utility which monitors online time, expense, data transfer
    ?Mail.commcalert.exeMail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
    UMailBellmailbell.exeMailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
    UMailbox Verifiermboxvrfy.exeMailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
    YMailScan DispatcherLaunch.exeMailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned
    XMail_CheckMail_Check.exeAdded by the PANOIL.C WORM!
    UMAINmain.exeSpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
    ?Main Executable (HP)HP05T0R5.exeHP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?
    Xmain16main16.exeAdded by the CRYPTER.A TROJAN!
    Xmain32main32.exeAdded by the CRYPTER.A TROJAN!
    Xmainviewexmainviewex.exeAdded by the GEMA.D TROJAN!
    NMania Win RestoreRESWIN.EXEPinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
    XMantis[filename]Added by the MANTIBE VIRUS!
    XMapiDrvmpisvc.exeAdded by the MIPSIV TROJAN!
    Xmapisvc32mapisvc32.exeAdded by the KX VIRUS and also recognised by Symantec as FPAI adware
    Nmasqform.exemasqform.exePureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms
    NMass storage check registryrundll32.exe MSDServ.dll, check registryUsed with a USB based smartmedia card reader
    UMaster Volume SpyMASTERVOLUMESPY.EXEVolume control for the Gateway Destination "DestiVu" media interface
    UMatadormlfbuddy.exeMailFrontier - anti-spam application
    UMatadormantispm.exeMailFrontier Desktop (Matador) email spam blocker software
    XMatrixScreen[filename]Added by the MATRIXSCREEN TROJAN!
    XMatrixScreenSavermss.exeMalware, see here
    NMatrox Color Controlhgcctl95.exeFor Matrox video cards. Quick access to changing colors
    NMatrox Control Centermgactrl.exeFor Matrox video cards. Quick access to settings
    NMatrox Diagnosticmgadiag.exeFor Matrox video cards. Quick access to diagnostics
    NMatrox PowerdeskPDesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
    NMatrox PowerDesk 8Matrox.PowerDesk.exe /silentFor Matrox video cards. Quick access to tweak your card to your liking
    NMatrox QuickDeskmgaqdesk.exeFor Matrox video cards. Quick access to tweak your card to your liking
    XMaxAlertsmax.exeBonzi MaxALERT - spyware
    YMaxtorComboComboButton.exeRequired to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
    UMaxtorRegAUTOREG.EXEPart of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
    UMBM 4MBM4.exeMotherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    UMBM 5MBM5.exeMotherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    UMBProbembrpobe.exeMBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
    XMCwintrims.exeAdded by the WINTRIM TROJAN!
    XMcafee Anti ScanNortonScn.exeAdded by a variant of the RBOT WORM!
    XMcafee Antivirus Monitoring System32mnVSStatmn32.exeAdded by a variant of the RBOT WORM!
    YMcAfee FirewallCPD.EXEFirewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
    NMcAfee GuardianCMGRDIAN.EXEMcAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
    NMcAfee Winguage??Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
    UMcAfee.InstantUpdate.MonitorRuLaunch.exeInstant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
    ?McAfeeUpdaterUIUpdaterUI.exeAssociated with McAfee Enterprise 7.0.0. Updater for McAfee anti-virus and security programs?
    YMcAfeeVirusScanServiceAvsynmgr.exeFrom McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
    YMcAfeeWebscanXWebScanX.exeFrom McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
    XMcaffe AntivirusMcafeescn.exeAdded by a variant of the SPYBOT WORM!
    UMcAgentExemcagent.exeFrom McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
    ?Mcappins.exemcappins.exeMcAfee Application Installer. What does it do and is it required?
    NMChangerMChanger.exeMedia Changer - utility that allows you to change wallpapers, sounds, themes, etc
    ?McRegWizmcregwiz.exeMcAfee antivirus related. What does it do and is it required?
    UMcUpdateExemcupdate.exeFrom McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
    YMcVsRtemcusrt.exePart of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why
    Ymcvsshldmcvsshld.exeMcAfee VirusScan On-line. See also the McAgentExe entry
    XMD IE Pluginmd.exeAdult content dialler
    XMD IE Pluginwiny.exeAdware
    Nmdac_runoncerunonce.exeAssociated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". 
    Xmdetect[path to trojan]Added by the SPABOT TROJAN!
    XMdmMdm.vbsAdded by the WHITEHO VIRUS or TRAPPY WORM!
    Xmdmmdm.exeAdded by the LYDRA-F TROJAN! Note - this is not the valid Machine Debug Manager which shares the same filename
    UMDM7mdm.exeUsed by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable
    XMdmdllmdmdll.exeAdded by the CRYPTER TROJAN!
    XMdmdll32mdmdll32.exeAdded by a variant of the CRYPTER.C TROJAN!
    NMECAMeca.exeMeca instant messenging client
    XMedia Loadmsn32.exeAdded by a unidentified WORM or TROJAN!
    UMedia Manager IndexerAIRSVCU.EXEPart of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
    XMedia Playermedia.exeAdded by the FLDMEDIA-A TROJAN!
    XMedia Playerwmplayer.exeAdded by the AGOBOT-BM WORM!
    XMedia Plug x.1.2msdm.exeAdded by the MULDROP.352 VIRUS!
    XMedia Servicemsn64.exeAdded by the SPYBOT.EV WORM!
    XMedia servicemsnmsgxr.exeAdded by the SDBOT.TF WORM!
    XMedia serviceSYSTEM64.EXEAdded by the RBOT.QV WORM!
    NMediaFace IntegrationSethook.exeFellowes Neato? cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
    UMediafour Mac Volume NotificationsMacvntfy.exeMediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
    UMediafour XPlay Tray Notification IconXptryicn.exeMediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
    UMediaKeyMediaKey.exeMultimedia keyboard manager. Required if you use the multimedia keys
    XMediaLoadsdw.exeMedialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
    XMediaLoads Installerdw.exeMedialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
    NMediaMonitorMediam~1.exeInstalled by Smartdisk MVP CD burning software. Software will work fine without it
    Xmediamotor.exemmups.exeRoimoi/Media-Motor adware
    XMediaPathProyecto1.exeAdded by the GRUEL WORM!
    XMediaPathRoot.exeAdded by the GRUEL WORM!
    NMediaRing Talkmrtalk.exeMedia Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
    Xmedia_managermediaman.exeMini-Player,  IMESH related foistware, see here
    Xmedia_stubstub.exeMini-Player,  IMESH related foistware, see here
    XMemConfigSetupIE.comAdded by the TAPLAK WORM!
    UMemoKitMK.EXEMemory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    XMemory Checkmemore.exeAdded by the KILLAV.C TROJAN!
    NMemory Stick MonitorMSTAT.exeUsed with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
    UMemory Stick MonitorMSstat.exeSony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive
    XMemory WatcherMemoryWatcher.exeMemoryWatcher spyware
    UMemory+tfimemsr.exeMemory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    XMemoryMeterMemoryMeter.exeAutoinstalling spyware by Total Velocity
    NMemScannerMemScanner.exeSpyHunter - spyware remover of somewhat dubious repute, see note
    UMemTurbomemturbo.exeMemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
    NMenuSnapMenuSnap.exeMenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe
    XMessage Queuingmsmqs.exeAdded by the FREEFORS TROJAN!
    NMessagerStarter FreeserveStartMessager.exeFreeserve Messenger
    UMessage_Blockermessageblock.exeMessage Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"
    XMessengermessenger.exeAdded by the KUTEX TROJAN!
    XMessenger Blockmsngrblock.exeAdded by the PATOO WORM!
    XMessenger start-upMsgran.exeAdded by the GRAMOS WORM!
    XMessenger6command.pifAdded by the INZAE.B WORM!
    UMessengerDiscoveryMessengerDiscovery.exeMessengerDiscovery is a MSN Messenger add-on - adding over 70 new features
    NMessengerPlusMsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    NMessengerPlus2MsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    NMessengerPlus3MsgPlus.exeMessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software does offer you a choice during setup - make sure to install MessengerPlus WITHOUT that "sponsor program"!
    Xmessnger[worm filename]Added by the DELODER WORM!
    XmessngerDvldr32.exeAdded by the DELODER.A WORM!
    XMeTaLRoCk (irc.musirc.com) has sex with printersmetalrock-is-gay.exeAdded by the RANDEX.Q WORM!
    ?mfgboot????
    Xmfin32mfin32.exeMyFreeInternetUpdate - adware downloader
    ?MGA HookMgahook.exeMATROX Graphics card related. What does it do and is it required?
    NMGA QuickdeskMGAQDESK.EXEFor Matrox video cards. Quick access to tweak your card to your liking
    ?MgabgMgabg.exeMatrox BIOS Guard. What does it do and is it required?
    Ymgavctrlmgavrtcl.exeMcAfee's Virus Scan Online
    Ymgavctrlmgavrte.exeMcAfee's Virus Scan Online
    Ymgavrtclexemgavrtcl.exeMcAfee's Virus Scan Online
    Ymgavrtclexemgavrte.exeMcAfee's Virus Scan Online
    NMGA_CD_Installmgasetup.exeMatrox Millennium video driver. Not required once drivers installed
    XMHDOGStartmhdogst.EXEAdded by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS
    NMHINITMHINIT.EXEPart of the Cybermedia Clean Sweep package
    XMicr Updatesoundblaster.exeAdded by the SDBOT.NP WORM!
    UMicroangelo DesktopMuamgr.exeQuick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs
    NmicroAttuneDownloadatmdlusr.exeUSR (US Robotics) modem auto updater. May be a sub-set of Attune
    UMicroDialleratdialler1.exePart of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
    XMicrofinder lptt01mcf.exeVariant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    XMicrofinder ml097emcf.exeVariant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    XMicroLoad[random filename]Added by the DARBY WORM!
    XMicrosof Windows Hostsvhost32.exeAdded by a variant of the RBOT WORM!
    XMicrosof Winlog Hostwilogon32.exeAdded by the RBOT.XC WORM!
    XMicrosofot x386 System Monitorsystem32.exeAdded by the WOOTBOT.M WORM!
    Xmicrosoftsvchost.exeAdded by the ASTEF or RESPAN WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
    XMicrosoft Associates, Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft .NET Confinguratormsnconf.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft 16Bit Updatewuapdate16.exeAdded by the RBOT.CZ WORM!
    XMicrosoft ALG32 Protocolalg32.exeAdded by a variant of the SPYBOT WORM!
    NMicrosoft Announcement ListenerAnnclist.exeMS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
    XMicrosoft Ansti Updatemsie.exeAdded by the RBOT-LE WORM!
    XMicrosoft Associates, Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft AUT UpdateMSlti32.exeAdded by the RBOT-X WORM!
    XMicrosoft auto updatewinupdate.exeAdded by the BMBOT TROJAN!
    XMicrosoft AutoUpdatersvhost.exeAdded by the RBOT.QG WORM!
    XMicrosoft Conf Ldrsysconf.exeAdded by a variant of the SDBOT TROJAN!
    XMicrosoft Configmsconf.exeAdded by the RBOT.PV WORM!
    XMicrosoft Corporation[random filename]Added by various VIRUSES, WORMS & TROJANS!
    XMicrosoft CSRSS32 Protocolcsrss32.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft CSRSS386 Protocolcsrss386.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Cvrtmscvrt32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Data Helpercihost.exeMalware, possibly a variant of the LINST TROJAN
    XMicrosoft Data Machinecsdata32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Database Handlermssql32.exeAdded by the RANDEX.AX WORM!
    XMicrosoft Decryption TechnologyMsfenoe.exeAdded by the SPYBOT-DG WORM!
    XMicrosoft Diagnostic[random filename]Added by the ACEBOT TROJAN!
    XMicrosoft Digital Clockmsclock.exeAdded by the NACKBOT-D WORM!
    XMicrosoft DirectXSpoolserv.exeAdded by the DINFOR WORM!
    XMicrosoft DirectXrasmngr.exeAdded by a variant of the RBOT WORM!
    XMicrosoft DirectXPDSched.exeAdded by the SDBOT.CN WORM!
    XMicrosoft Dll Managementwindll.exeAdded by the RBOT-MT WORM!
    XMicrosoft DNS Querymsdns.exeAdded by a variant of the WOOTBOT WORM!
    XMicrosoft Documentkrisp.exeAdded by the SDBOT-RQ WORM!
    XMicrosoft Excellwuamngr32.exeAdded by the RBOT-QH WORM!
    XMicrosoft EXPLOREXP Protocolexplorexp.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Featuresms32cfg.exeAdded by the RBOT.HO WORM!
    XMicrosoft Find FastFindfast.exeComplete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
    XMicrosoft Firewallfirewallsp2.exeAdded by the RBOT-MC WORM!
    YMICROSOFT FIREWALL CLIENTISATRAY.EXEMS Internet Security and Acceleration Server 2000
    XMicrosoft Gina V EncryptionMSGINAV.EXEAdded by an unidentified VIRUS, WORM or TROJAN!
    NMicrosoft Greetings RemindersMHPRMIND.EXEMicrosoft Home Publishing greetings reminder
    NMicrosoft Greetings Workshop ReminderGwremind.exeYou really want to be reminded about somebody's birthday at the expense of resources?
    NMicrosoft Greetings  ReminderMHPRMINF.EXEYou really want to be reminded about somebody's birthday at the expense of resources?
    XMicrosoft Help SVCmsnmngr.exeAdded by the SDBOT-PQ WORM!
    XMicrosoft IEIexplore.exeAdded by the FORBOT-AG WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
    XMicrosoft IE Execute shellIEExec.exeAdded by the ALADINZ.N TROJAN!
    XMicrosoft IISsyshost.exeAdded by the FRANCETTE WORM!
    XMicrosoft Inc.iexplorer.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft Inet Xp..teekids.exeAdded by the BLASTER.C WORM!
    UMicrosoft Intellitype Prospeedkey.exeAdditional keyboard shortcuts on MS programmable keyboard
    XMicrosoft Internetexpl0rer.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Internetwindows32.exeAdded by the SDBOT-F WORM!
    XMicrosoft Internet Acceleration Utilityiau.exeEasySearch adware
    XMicrosoft Internet Expiiexplorer.exeAdded by the RBOT-KX WORM!
    XMicrosoft Internet Exploreriexplore.exeDownloader trojan. Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
    XMicrosoft Internet Firewall ManagerGMT16.exeAdded by the RANDEX.AT WORM!
    XMicrosoft Internet ServicesSmss32.exeAdded by the RBOT.MS WORM!
    XMicrosoft IPCsystem.exeAdded by the NULLBOT TROJAN!
    XMicrosoft IPCsvshost.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft IT Updatewin64.exeAdded by the RBOT.GA WORM!
    XMicrosoft IT Update[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft IT UpdateIEserv.exeAdded by a variant of the RBOT WORM!
    XMicrosoft IT Updatemsupdate.exeAdded by a variant of the RBOT WORM!
    XMicrosoft IT Updatewinn43.exeAdded by a variant of the RBOT WORM!
    XMicrosoft JavaVMmsjarun.exeAdded by the RBOT-JW WORM!
    XMicrosoft KernelWindows_kernel32.exeAdded by the NETSKY.AE WORM!
    XMicrosoft Locals 332[random filename]Added by the RBOT-KU WORM!
    XMicrosoft LSASS386 Protocolscvhost32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Macro Protection SubSsymsacroprots386.exeAdded by the RBOT-KE WORM!
    XMicrosoft Macro Protection Subsystemsmsmacroprotxz.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Macro Protection SubsystemsMsmacroprot32.exeAdded by the RBOT.KN WORM!
    XMicrosoft Management Consolelssas.exeEasySearch adware
    XMicrosoft mediawinmplayers.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft media servicesIassd.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft media serviceswinmplayer.exeAdded by the RBOT.ZO WORM!
    XMicrosoft Movie MakerMmaker.exeAdded by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program
    XMicrosoft MSGPLUS32 Protocolmsgplus32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft MSNGR32 Protocolmsngr32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft MsnSTmsnst32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft MSUPDATESpoolSvc.exeAdded by the SXTB-A TROJAN!
    XMicrosoft NetMeeting Associates, Inc.NetMeeting.exeAdded by a variant of the LOVGATE WORM!
    XMicrosoft Netviewgesfm32.exeAdded by the RANDEX.C WORM!
    XMicrosoft Netviewmssvc32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Netview Component v5.1msnv32.exeAdded by the RANDEX.F WORM!
    XMicrosoft Networkmsnet.exeAdded by the MOCKBOT.A WORM!
    XMicrosoft Network Daemon for Win32Netd32.exeAdded by the SDBOT.R TROJAN!
    NMicrosoft OfficeOsa.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    NMicrosoft OfficeMsoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
    XMicrosoft OfficeMSMSGR.exeAdded by the GAOBOT.BB WORM!
    NMicrosoft OfficeOsa9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    NMicrosoft Office Fast CacheFastboot.exePart of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled
    UMicrosoft Office OneNote 2003 Quick LaunchONENOTEM.EXEONENOTEM.EXE is a part of the note taking program that ships with Microsoft Office 2003. It's required for the side note windows to work
    NMicrosoft Office Shortcut BarMsoffice.exeAlternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
    XMicrosoft Office Startwinupdates.exeAdded by the GAOBOT.BC WORM!
    NMicrosoft Office StartupOsa.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    NMicrosoft Office StartupOsa9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    XMicrosoft Personal Firewallsbakw.exeAdded by the RBOT-KS WORM!
    XMicrosoft RDLLsysconf32.exeAdded by a variant of the SDBOT TROJAN!
    XMicrosoft Registrycsrse.exeAdded by the RBOT-PC WORM!
    XMicrosoft Restorescrgrd.exeAdded by the SPYBOT.BR WORM!
    XMicrosoft RuntimeCfgDll32.exeAdded by the RANDEX.BD WORM!
    XMicrosoft Scanregmicrosoftscanreg.exeAdded by the FRANRIV.A WORM!
    XMicrosoft SCVHOST32 Protocolscvhost32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Secure Messenger.NET Servicesecuritychk.exeAdded by the SDBOT.VT WORM!
    XMicrosoft Security Managementwinnt.exeAdded by the RBOT-MQ WORM!
    XMicrosoft Server ApplicationSound.exeAdded by the RBOT-NE WORM!
    XMicrosoft Servicemicrohost.exeAdded by the RBOT-LC WORM!
    XMicrosoft Servicewinsvc.exeAdded by the SPYBOT-DB WORM!
    XMicrosoft Serviceslsserv.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Serviceslssrv.exeAdded by the RBOT.CW WORM!
    XMicrosoft Servicesservices.exeAdded by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
    XMicrosoft Serviceslsrv.exeAdded by the RBOT-BK WORM!
    NMicrosoft Sidewinder Game Controller SoftwareSWTRAY.EXEMS SideWinder game controller system tray icon. Available via Start -> Programs
    XMicrosoft Softwaresysinfo33.exeAdded by the RBOT.LS WORM!
    XMicrosoft Software Updatenmon.exeAdded by the RBOT.HZ WORM!
    XMicrosoft Sound Driversound32.exeAdded by a variant of the SPYBOT WORM!
    NMicrosoft Sound Volume Toolmssvol.exeThis is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
    XMicrosoft SourceSafecsrss.exeAdded by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
    XMicrosoft Spool Server for Win32spoolsrv.exeAdded by the RANDEX.H WORM!
    XMicrosoft SSISVRI32 Protocolssisvri.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Synchronization Managerasgard.exeAdded by the SDBOT.PH WORM!
    XMicrosoft Synchronization Managerbot.exeAdded by the SDBOT.IH WORM!
    XMicrosoft Synchronization Managernetscape.exeAdded by the RANDEX.AE WORM!
    XMicrosoft Synchronization Managerslhost.exeAdded by the SDBOT.YH WORM!
    XMicrosoft Synchronization Managersvhost.exeAdded by the SDBOT-PY WORM!
    XMicrosoft Synchronization ManagerWinLoginnn.exeAdded by the SPYBOT.FO WORM!
    XMicrosoft Synchronization Managerwinupdate.exeAdded by the SDBOT.ER WORM!
    XMicrosoft Synchronization ManagerxXx.exeAdded by the SDBOT-KZ WORM!
    XMicrosoft Synchronization Manager___synmgr.exeAdded by the MASLAN.A or MASLAN.C WORMS!
    XMicrosoft System CheckupCool.exeAdded by the DONK.B WORM!
    XMicrosoft System CheckupWnetlib.exeAdded by the DONK.C WORM!
    XMicrosoft System Checkupdbnetlib.exeAdded by the DONK.L WORM!
    XMicrosoft System CheckupKeymgr.exeAdded by the DONK.M WORM!
    XMicrosoft System Checkupinetman.exeAdded by the DONK.O WORM!
    XMicrosoft System Checkupntsysmgr.exeAdded by the DONK.S WORM!
    XMicrosoft System Checkupntsysman.exeAdded by the SDBOT-QW WORM!
    XMicrosoft System Checkuplibsysmgr.exeAdded by the SDBOT-CAF WORM!
    XMicrosoft System Restore ConfigurationCBRSS.EXEAdded by a variant of the SPYBOT WORM!
    XMicrosoft Time Managerdveldr.exeAdded by the RBOT-HQ WORM!
    XMicrosoft Tray[random filename]Added by the DELF.BZ TROJAN!
    XMicrosoft UpdateMicrosoft.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Updatemssmgrd.exeAdded by the SDBOT.JT WORM!
    XMicrosoft Updatemvsc.exeAdded by the SPYBOT.DAZ WORM!
    XMicrosoft Updateascdl.exeAdded by the GAOBOT.SY WORM!
    XMicrosoft UpdateIsac.exeAdded by the RBOT-AU WORM!
    XMicrosoft Updateautomgr32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updatemediap.exeAdded by a variant of the RBOT WORM!
    XMicrosoft UpdateMicrosoftx.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updatemsconfg.exeAdded by the RBOT.H WORM!
    XMicrosoft UpdateMslti32.exeAdded by the RBOT-LX WORM!
    XMicrosoft Updatemuamgrd.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft Updatenavmgrd.exeAdded by the SDBOT.DP TROJAN!
    XMicrosoft UpdateSmss32.exeAdded by the RBOT.CB WORM!
    XMicrosoft Updatesys32cfg.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft UpdateVPC32.EXEAdded by the AGOBOT.XM WORM!
    XMicrosoft Updatewinsys32.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Updatewuamgrd.exeAdded by the RBOT-LK WORM!
    XMicrosoft Updatewuammgr32.exeAdded by the RBOT-AW WORM!
    XMicrosoft Updatewudmate.exeAdded by the RBOT.AP WORM!
    XMicrosoft Updatemsawindows.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Updatemsiwin84.exeAdded by the GAOBOT.AFJ WORM!
    XMicrosoft Updatewuamgrd32.exeAdded by the RBOT.ZB WORM!
    XMicrosoft UpdateNAV.exeAdded by the RBOT-IV WORM!
    XMicrosoft Updatesystemi32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Updatexpupdate.exeAdded by the RBOT-QE WORM!
    XMicrosoft Updatewebm.exeAdded by the SDBOT.WK WORM!
    XMicrosoft Updatewuagrd.exeAdded by the RBOT-FK WORM!
    XMicrosoft Update 32explore32.exeAdded by the SPYBOT.CYM WORM!
    XMicrosoft Update 32MSupdate32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Update Emulatorkern-mxe.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Loader[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update Machine[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update Machineexpl0rer.exeAdded by the SDBOT.OK WORM!
    XMicrosoft Update Machinerxhost.exeAdded by the RBOT.FC WORM!
    XMicrosoft Update Machineservicz.exeAdded by the RBOT-HU WORM!
    XMicrosoft Update MachineSP2.exeAdded by the SPYBOT.FP WORM!
    XMicrosoft Update Machinewinini.exeAdded by the RBOT-KV WORM!
    XMicrosoft Update Machinexvshost.exeAdded by the RBOT.QP WORM!
    XMicrosoft Update Machinememstat.exeAdded by the RBOT-OM WORM!
    XMicrosoft Update Machinentce.exeAdded by the RBOT-FA WORM!
    XMicrosoft Update Machinesystem03.exeAdded by the RBOT-NM WORM!
    XMicrosoft Update Machinewuawx.exeAdded by the RBOT-CE WORM!
    XMicrosoft Update Machinezonealarm.exeAdded by the RBOT-BZ WORM! Note - this is not the valid Zone Labs firewall program!
    XMicrosoft Update Machinesystemll.exeAdded by the RBOT-JT WORM!
    XMicrosoft Update Machinewinupdt.exeAdded by the RBOT-FP WORM!
    XMicrosoft Update Machinesvshost.exeAdded by the RBOT.AK WORM!
    XMicrosoft Update Machinewuamgd.exeAdded by the SDBOT.HQ WORM!
    XMicrosoft Update Machinewupdt32x.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft Update Machine[random filename]Added by a variant of the RBOT WORM!
    XMicrosoft Update Machinelinux.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinelmrss.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewindowsu.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewininigo.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewinmgr.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update MachineWinmsixp32.exeAdded by the RBOT.DN WORM!
    XMicrosoft Update MachineWinregs32.exeAdded by the RBOT.DN WORM!
    XMicrosoft Update Machinewinxpini.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewuamgrd.exeAdded by a variant of the RBOT WORM!
    XMicrosoft Update Machinewuagrd.exeAdded by the RBOT-GF WORM!
    XMicrosoft Update MecheneUpdatez.exeAdded by the RBOT-GI WORM!
    XMicrosoft Update Security Patchmssecurityupdatepatch.exeAdded by the AGENT.EF TROJAN!
    XMicrosoft Update Servermssrv.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft Update Servicecsrss32.exeAdded by the AGOBOT-HC WORM!
    XMicrosoft Update Servicemswin32.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Update Timewuam.exeAdded by the RBOT-M WORM!
    XMicrosoft Update Win32awinupdate32a.exeAdded by the RBOT-LO WORM!
    XMicrosoft UPDATER32lsass.exeAdded by the RANDEX.AR WORM! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
    XMicrosoft Updaters ProsWINDLL32XP.EXEAdded by the SPYBOTTER.GEN VIRUS!
    XMicrosoft Updates ResourcesWinFixIDs.exeAdded by a variant of the RBOT WORM!
    XMicrosoft upnp Updatemsie.exeAdded by the RBOT-LQ WORM!
    XMicrosoft Utility StartupOSA9.exeResource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
    XMicrosoft Video Controlstskmsgr.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft Visual SourceSafeservices.exeAdded by the NEVEG.B or NEVEG.C WORMS!. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
    XMicrosoft Visual SourceSafewinlogon.exeAdded by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
    XMicrosoft Visual Studio VSAvarpc32.exeAdded by a variant of the SPYBOT WORM!
    UMicrosoft Webserversvctrl.exePersonal web server program which enables you to create and host a web server from your computer. Not required for most people
    XMicrosoft Windowsmstask0.exeAdded by the SDBOT.FQ WORM!
    XMicrosoft Windows 2000Winupdsdgm.exeAdded by the GAOBOT.AO WORM!
    XMicrosoft Windows DHCP___r.exeAdded by the MASLAN.A WORM!
    XMicrosoft Windows GUIWindowz.exeAdded by the RANDEX.AEV WORM!
    XMicrosoft Windows Kernel Serviceswinkrnl386.exeAdded by the ZEBROXY TROJAN!
    XMicrosoft Windows Loaderwloader.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
    XMicrosoft Windows Secure ServerrpcxWindows.exeAdded by the RBOT-LL WORM!
    XMicrosoft Windows Task MangerMstosk.exeAdded by the SDBOT-WW WORM!
    XMicrosoft Windows Updaterundlls.exeAdded by the HABRACK WORM!
    XMicrosoft Windows Updatemsoffice2.exeAdded by the RBOT-GB WORM!
    XMicrosoft Windows Updatespools.exeAdded by the SDBOT.TD WORM!
    XMicrosoft Windows Updatesvchos.exeAdded by the SDBOT.AC WORM!
    XMicrosoft Windows Updatesvcshost.exeAdded by the FORBOT-CF WORM!
    XMicrosoft Windows Updatesvmhost.exeAdded by the FORBOT-CH WORM!
    XMicrosoft Windows Updatesvshost.exeAdded by the WOOTBOT.CJ WORM!
    XMicrosoft Windows Update Servicewupdmgr32.exeAdded by the DOS.AUTOCAT TROJAN!
    XMicrosoft Windows Updaterwinupdgm.exeAdded by the GAOBOT.BI WORM!
    XMicrosoft Windows Updatersvchostz.exeAdded by the DAEMONI-E TROJAN!
    XMicrosoft Windows UpdaterWINIUPDATES.EXEAdded by the RBOT-KK WORM!
    XMicrosoft Windows UpdaterWINUPDATE.EXEAdded by the SDBOT-PU WORM!
    XMicrosoft Windows updaterDlog32zx.exeAdded by the MYDOOM.W WORM!
    XMicrosoft Windows Updatesexplorer32.exeAdded by the SDBOT.VQ WORM!
    XMicrosoft Winsock Wrapperws2_32s.exeAdded by a variant of the SPYBOT WORM!
    XMicrosoft WinUpdatemntcgf032.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft WinUpdatesvh0st.exeAdded by the SPYBOT.DL WORM!
    XMicrosoft WinUpdatesyslx32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoft WinUpdatesyswin32.exeAdded by a variant of the SDBOT WORM!
    XMicrosoft WinUpdatesserm32.exeAdded by the RBOT.GE WORM!
    NMicrosoft Works Calendar Reminderswkcalrem.exeProduces a pop-up reminder of events scheduled using the MS Works Calendar
    NMicrosoft Works PortfolioWksSb.exeThe Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
    NMicrosoft Works Update Detection wkdetect.exeChecks for updates to MS Works
    XMicrosoft World Servicewinworld.exeAdded by an unidentified IRC worm with backdoor capability!
    XMicrosoft WxdateSyswu32.exeAdded by the SPYBOT.HZ WORM!
    Xmicrosoft xdaemon 2.0xdaemon.exeAdded by the DELF.D TROJAN!
    XMicrosoft XML Servicemsxmlx.exeAdded by the RBOT.KS WORM!
    XMicrosoft--Updatessxvhost.exeAdded by the RBOT-FH WORM!
    XMicrosoft-Updatewngard.exeAdded by the RBOT-JV WORM!
    XMicrosoft-Updatessvxhost.exeAdded by the RBOT-CT WORM!
    Xmicrosoft420microsoft420.exeAdded by the MENACE.B WORM!
    XMicrosoftkeysdsystemproc.exeAdded by the FORBOT-BI WORM!
    XMicrosoftkeysdsystemwin32s.exeAdded by the WOOTBOT.CO WORM!
    XMicrosoftmsn32.exemicrosoftmsn32.exeAdded by the CERTIF-C TROJAN!
    XMicrosoftMultimediaTaskMmtask.exeAdware downloader - not the valid MusicMatch Jukebox which shares the same filename
    XMicrosoftNetwork Daemon for Win32NETD32.EXEAdded by the RANDEX.F WORM!
    XMicrosofts Updatezcmsssr.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftServiceManagermstask32.exeAdded by the YAHA.P WORM!
    XMicrosoftServiceManagerWintsk32.exeAdded by the YAHA.U WORM!
    XMicrosoftServiceManagerEXPLORERE.EXEAdded by the YAHA.AB WORM!
    XMicrosoftServiceManagermsupdat.exeAdded by the YAHA.AA WORM!
    XMicrosoftSourceSafelsass.exeAdded by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
    XMicrosoftUpdatesyshelper.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftUpdateWinUp32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    XMicrosoftValuesyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    XMicrosoftvirussysoverload.exeAdded by the FORBOT-AL WORM!
    XMicrosoftWindows[various filenames]MagicSearch - a CoolWebSearch parasite variant
    XMicrosoft? PID LexPIDLex.exeAdded by the NIOVADOOR TROJAN!
    XMicrosoft? System MapperSysMap.exeAdded by the MAPSY TROJAN!
    XMicroszoft Update Mach1nezssvchst.exeAdded by the RBOT-ED WORM!
    XMicrozoft_OfizKdzEregli.exeAdded by the AMUS.A WORM!
    XMicrsoft Driverwindrive.exeAdded by the SDBOT.AF TROJAN!
    NMightyFAX ControllerMFNTCTL.EXEMighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software"
    ?MigrationVendorSetupCallerrundll32.exe migrate.dll, CallVendorSetupDlls??
    XMINIBUGMINIBUG.EXEDisplays ads inside Weatherbug - see here
    NMINIFERT.EXEMINIFERT.EXEPart of Backweb
    UminilogMINILOG.EXEIf you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
    NMiniMavisMiniMavis.exeMavis Beacon typing tutor
    NMiniNoteMININOTE.EXEMini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software
    UMinMaxExtenderMmext.exeMinMaxExtender - window handling tool
    XMiosf Updatewimsqaad.exeAdded by the SDBOT.AG TROJAN!
    NMirabilis ICQNDetect.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    NMirabilis ICQicq.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    NMirabilis ICQICQNet.exeIf connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
    UMiramar Systems, Inc.atmsg.exeMiramar PC/Mac networking software
    XMirate Sp 2 Informationmiratesp2.exeAdded by the RBOT.QH WORM!
    NmiroVIDEO Tray Toolmisitray.exeTool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card, e.g. for the above actions
    UMirrorFolderShellmrfshl.exeMirrorFolder backup software
    ?misiCTRLmisiCTRL.exeMiro video driver related. Is it required?
    ?misiTRAYmisiTRAY.exeMiro video driver related. Is it required?
    NMixerMixer.exeC-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
    NMixghostmixghost.exeManagement software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu
    Xmloadlxmstart.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    ?MM Installsetup.exePossibly Money Manager from Moneysoft?
    Xmmcndmgrmmcndmgr.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    NMMCWINMGMTwinmgmt.exeUsed for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth "scheduler" - refer here
    UMMERefreshMMERefresh.exePart of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R
    XMmgsvcmmgsvc.exeMmgsvc spyware
    UMMhidmmhid.dllThis is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP
    ?MMHKmmhk.exeA driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?
    NMMHotKeyMMHotKey.exeMultimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
    UMMKeybdMMKeybd.exeMultimedia keyboard manager. Required if you use the additional keys
    Xmmodmmod.exeEzula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
    Nmmptim1mmpti.exeMpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
    ?MMRunmmrun.exe??
    ?mmsysrecover.exe??
    XMMSystemRunDll32Added by the FUNNER-A WORM!
    YMMTASKmmtask.tskA check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc
    Nmmtaskmmtask.exePart of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator
    XMMtask Servicemmtask.exeAdded by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename
    NMMTraymm_tray.exeMusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator
    NMMTrayMMTray.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    NMMTray2KMMTray2K.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    NMMTrayLSIMMTrayLSI.exePart of Morgan Multimedia Codecs. Only required when the codecs are used
    ?mmusrstpprocrun.exe??
    Xmmxrunmsosa.exeAdult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and RegCompres (REGCPM32.EXE), otherwise they return
    XMNPolmnpol.exeAdult content dialler
    UMNSMNS.exeMobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the correct drive mappings, printer settings, IP settings and much more
    Xmnsvcmnsvc.exeAdded by the AUTOUPDER TROJAN!
    Xmnsvcspmnsvcsp.exeAdded by an unidentified VIRUS, WORM or TROJAN!
    Nmobsyncmobsync.exeMS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages
    XMOBSYNC32.EXEmobsync32.exeAdded by the FINERO TROJAN!
    NMODmuamger.exeMicroAngelo On Display from Impact Software lets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them
    UMODEMBTRMODEMBTR.EXEModem Booster from inKline Global to improve ISP connections
    XModeminfModeminf.exeAdded by a variant of the CRYPTER.C TROJAN!
    UModemOnHoldMOH.EXENetWaiting Modem-on-Hold Application
    NModemUtilitymdmsetpe.exeSystem Tray configuration icon for Aztech modems
    XModularConfigsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    XModule Call initializeRUNDLL32.EXE reg.dll, ondll_regAdded by a variant of the LOVGATE WORM!
    NMoney Expressmoneyexpress.exePart of MS Money. Available via Start -> Programs
    NMoneyAgentmoney express.exePart of MS Money. Available via Start -> Programs
    NMoneyAgentmnyexpr.exeMicrosoft Money
    NMoneyStartUpMoney Startup.exeMicrosoft Money
    NMoneyStartUp10.0Activation.exePart of MS Money 2002. Available via Start -> Programs
    UMonitor Apache ServersApacheMonitor.exePart of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
    XMonitoring Servicesvchost.exeAdded by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
    XMonitormgtMonitormgt.exeAdded by the GEMA TROJAN!
    NMonstersoundtrayFreectrl.exeDiamond Multimedia sound card control panel
    UMoodBookmb.exeMoodBook is a free Windows utility that brings art to your desktop
    Nmoon phasemoon.exeMoon Phase - tray icon that indicates the phases of the moon
    NMorpheusmorpheus.exeMusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"
    Xmosearchmosearch.exeFast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here
    NMotive SmartBridgempbtn.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    NMotive SmartBridgeMotiveSB.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    UMotiveMonitormotmon.exeFound on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
    NMotiveSBMotiveSB.exeSystem tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
    UMotMonmotmon.exeFound on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used?the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufcaturer. For most users it's not required
    UMount Safe & SoundFbmount.exeFrom McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
    NMouse 32AMouse32A.exeMouse driver to control mouse functions from Azona. Available via Start -> Programs
    NMouse Suite 98 Daemonpelmiced.exeMouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
    Xmousebutmousebut.exeAdded by the CRYPTER.A TROJAN!
    XMousecntlmousecntl.exeAdded by a variant of the CRYPTER.C TROJAN!
    NMouseCountMC.exeMouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required
    Xmousedrvmousedrv.exeAdded by the CRYPTER.A TROJAN!
    UmouseElfMC.exeGenius NetScroll mouse driver - required if you use non-standard Windows driver features
    UMouseImpMImpHost.exeMouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device"
    UMousinfomousinfo.exeMS mouse information tool - for troubleshooting mouse problems
    NMovielink Manager Uninstallmsvcmm32.exeAuto-update for Movielink - internet movie rental System Tray access
    XMovieNetworksMovieNetworks.exeMovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:Program FilesMovieNetworks directory
    XMovieplaceMovieplace.exeMoviePlace malware
    NMozilla Quick LaunchNetscp6.exeNetscape 6 and Mozilla browsers
    NMozilla Quick LaunchMozilla.exeNetscape 6 and Mozilla browsers
    XMP Tcloaxsmptcloaxs.exeAdded by the RANDEX.CT WORM!
    UMPEOCsinsm32.exeAutomatic logging of installs from Norton CleanSweep - available via Start -> Programs
    YMPFExempf.exeMcAfee Personal Firewall
    YMPFExeMpfTray.exeMcAfee Personal Firewall
    XMPL32 driverMPL32.exeAdded by the LOONY-M TROJAN!
    UMplSetupMplSetup.exeUsed by Ricoh network printers to enable network printing from the client
    UMPowerMPower.exeMPower from MindBeat. "Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load". Some users swear by programs such as this but I suggest you read this article and make up your own mind
    XMPREXEMPREXE.EXEAdded by the OPASERV.T WORM! Note - this is not the legitimate Mprexe.exe system file
    YMPREXE.exemprexe.exeWIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here and here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus
    XMprHTMLMprHTML.exeAdded by a variant of the VAGRNOCKER TROJAN!
    UMPSExemscifapp.exeMcAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"
    ?MPTMPT.exe??
    XMPtask Servicesmptask.exeAdded by the LALA or AOT TROJANS!
    NMPTBoxMPTBOX.EXECannon Multi-Pass toolbox - a button bar
    NMPXTraympxptray.exeWindows Media Player PowerToy which is run from the taskbar. It can be used to hide Windows Media Player (when in use) and choose various standard buttons (play/pause, next,previous) etc
    ?MP_STATUS_MONITORmonitr32.exeRelated to Cannon Multi-Pass
    Xmqbkupmqbkup.exeAdded by the OPASERV.K WORM!
    NmrtMngrmrtMngr.exeMaintenance Release Task Manager for Intuit?s QuickBooks or Quicken
    UMRU-Blaster Schedulerscheduler.exeMRU-Blaster scheduler - detects and cleans MRU (most recently used) lists on your computer
    NMRU-Blaster Silent Cleanmrublaster.exeMRU-Blaster - performs silent cleaning of MRU lists at boot
    XMS Config Loadersvchos1.exeAdded by the AGOBOT.R WORM!
    XMS Config LoaderMSWin32bck.exeAdded by the GAOBOT.AA WORM!
    XMS Config ServiceMsloader32.exeAdded by the RBOT-KJ WORM!
    XMS ConfigurationMSFramer.exeAdded by the RANDEX.OL WORM!
    XMS Decryption Softwareactive.exeMediaTickets adware variant
    XMS Explorermexplore.exeAdded by the YAHA.AE WORM!
    XMS FIREWALLmsfrewall.exeAdded by the SDBOT-PU WORM!
    XMS FIREWALLmsfirewall.exeAdded by the SDBOT-QH WORM!
    XMS HTMLmsHtml.exeAdded by the PESTDOOR.31 TROJAN!
    XMS HTMLmslat.exeAdded by the LATINUS.SVR TROJAN!
    XMS lsass Startuplsass135.exeAdded by the RBOT.WM WORM!
    ?MS management consolemms.exeSuspicious as the Microsoft Management Console is "mmc.exe" and doesn't normally run at startup
    XMS Network Controlmswin.exeAdded by the DUMBA TROJAN!
    XMS Remote Procedure Callmsrpc32.exeAdded by the RBOT-QL WORM!
    XMS Security Hotfixservice5.exeAdded by the GAOBOT.AG WORM!
    XMS Sound Config 16bitsndcfg16.exeAdded by the SDBOT.MB TROJAN!
    XMs Spool32MS SPOOL32.EXEAdded by the ASASSIN TROJAN!
    XMS SyS Restoresysrestore.exeAdded by the RBOT.XM WORM!
    XMS Updatesyshost.exeAdded by the EVAMAN-F WORM!
    XMS Updatesmscache.exeSpyware web downloader
    XMS Updatessyshosts.exeAdded by the MYDOOM.Y WORM!
    XMS Updatesaupd.exeSpyware web downloader
    XMS-Connectarr.exeAdult content dialler - see here
    XMS-Connectcdm.exeAdult content dialler - see here
    XMS-Connectgame.exeAdult content dialler - see here
    XMS-Connectmsite18.exeAdult content dialler - see here
    XMS-Connectweb.exeAdult content dialler - see here
    XMS-HTML[random filename]Added by the LATINUS.15 TROJAN!
    XMS-RunKeyarr.exeMS-Connect dialler/hijacker
    XMS7531ms7531.exeHomepage hijacker
    XMSACMmsacm.exeAdded by the OPASERV-O WORM!
    Xmsadcheckmsadcheck32.exeBrowser hijacker, redirecting to search-system.com
    XMSAdminjdbgmrg.exeAdded by the DASMIN.A TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here
    XMSAgentmshtm.exeBrowser hijacker - redirecting to buldog-search.com
    XMSBBmsbb.exeAdvertising spyware
    XMSChoExEsuge.exeAdded by a variant of the RBOT WORM!
    ?mscimcinfo.exeMcAfee Internet Security related. What does it do and is it required?
    Xmscmanmscman.exeSpyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
    Umscnmscn.exePart of the SafeChildNet internet filtering program - required if you use it
    XMscntmscnt.exeAdult content dialler
    XMscolourmscolour.exeAdded by the GEMA TROJAN!
    XMSCommXmscommx.exeAdded by a variant of the RBOT WORM!
    XMSCONFG32.EXEMSCONFG32.EXEAdded by the OPTIX.04.C TROJAN!
    NMSConfigmsconfig.exeEntry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
    XMSConfigMSCONFIG32.EXEUnidentified adware, spyware or virus
    Xmsconfigmsconfig.exeCoolWebSearch parasite related. Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting
    XMsconfigmsconfig.exeAdded by the WINUR WORM! Note - this is not the real msconfig.exe as it's located in C:winrun
    Xmsconfigwins.exeAdded by an unidentified IRC WORM with backdoor trojan capabilities!
    XMsconfig lptt01msconfig.exeVariant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executable name
    XMSConfig Managermsupdate.exeCoolWebSearch parasite related
    XMsconfig ml097emsconfig.exeVariant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executable name
    Xmsconfig serviceMSupdate32.exeAdded by a variant of the SPYBOT WORM!
    Xmsconfig.exeproxy.exeAdded by a variant of the AGENT.AH downloader TROJAN!
    Xmsconfig.exeuline.exeAdded by a variant of the AGENT.AH downloader TROJAN!
    XMSConfig45MSConfig45.exeAdded by the SDBOT.OJ TROJAN!
    XMSConfigrjdbgmrg.exeAdded by the DASMIN.C TROJAN! Note - this is not the valid JDBGMGR.EXE file - see here
    NMSConfigRemindermsconfig.exeEntry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
    XMSCOREsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    XMscsgsMSCSGS.EXEAdded by the ZEZER WORM!
    XMscsgs32MSCSGS32.EXEAdded by the ZEZER WORM!
    XMsctrl32Msctrl32.scrAdded by the REDIST WORM!
    XMSCVTMSCVT.exeAdded by the SLIDESHOW WORM!
    Xmsdevmsdev.exeAdded by the FORBOT-CR WORM!
    Xmsdevmsconfig.exeAdded by the AGOBOT.AAU WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box unchecked after changing an Msconfig entry and rebooting
    XMSDLLsyscnfg.exeAdded by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in C:windowsfonts (or C:winntfonts) directory where no *.exe files should reside
    XMsdmxmmsdmxm.exeAdult premium rate dialler
    XMsdos32Msdos32.pifAdded by the RECORY WORM!
    Xmsdos423msdos423.exeAdded by the MENACE.A WORM!
    NMSDosdrvmsdosdrv.exeAdded by the BACROS WORM!
    NMSDTCmsdtc.exeMS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
    XMsemu32Msemu32.exeUnidentified spyware/adware/hijacker
    XMsfindMsfind.exeCoolWebSearch parasite variant
    XMSFind32msfind32.exeAdded by the CAYAM WORM!
    Xmsfindosa.exemsfindosa.exeAdded by the DOWNLOADER-BS TROJAN!
    XMsgApi[path to file]Added by the DEDLER-D TROJAN!
    Xmsgb1msgb1.exeAdded by the DLUCA.GEN TROJAN!
    XMsgmgr[path to worm]Added by the BABYBEAR WORM!
    Xmsgserv_Syss.exeAdded by the FANTA TROJAN!
    XMsgsrv16Msgsrv16.exeAdded by the DELF family of TROJANS!
    YMSGSRV32.exemsgsrv32.exeWindows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background
    Xmsgsvr32msgsvr32.exeAdded by the DEADHAT.B WORM! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:WindowsSystem) on a Win9x/Me machine
    XMsgtraysys16.exeAdded by an unknown VIRUS!
    XMSHT@MSHT@.EXEAdded by the MAGISTR.A VIRUS!
    Xmsidlemsidle.exeAdded by the OPASERV-O WORM!
    XMSIEXECMSIEXEC32.exeAdded by the AINESEY.A WORM!
    ?MSINMSin.exe??
    XMSInfomsinfo.exeAdded by the ALADINZ.M TROJAN!
    XMSInfoAVBgle.exeAdded by the NETSKY.O WORM!
    Xmsjava servicexpcd.exeAdded by the SDBOT.VM WORM!
    UMSKAGENTEXEMskAgent.exePart of McAfee Spamkiller
    XMSKCES32[random filename]Added by the CLONER TROJAN!
    UMSKDetectorExeMSKDetct.exePart of McAfee Spamkiller
    XMSKernel32MSKernel32.vbsAdded by the LOVELETTER (I LOVE YOU) VIRUS!
    XMSkernel32System.exe 4820Added by the TUXDER TROJAN!
    UMSKExespamkiller.exeMcAfee SpamKiller
    UMSKServerExeMSKSrvr.exePart of McAfee Spamkiller
    Xmslagentmslagent.exeAdded by SIMCSS.B adware!
    ?MSLIB32mswatch32.exe??
    XMslogon lptt01mslogon.exeVariant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    XMslogon ml097emslogon.exeVariant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
    XMsManagermsmgr32.exeAdded by the YAHA.AF WORM!
    Xmsmanager32msmngr32.exeAdded by the RANDON-R (or WOMANIZ.A) WORM!
    Xmsmcmscpbo.exeClientMan parasite variant
    Xmsmcmsgdmf.exeClientMan parasite variant
    Xmsmcmsongn.exeClientMan parasite variant
    Xmsmcmsmc.exeClientMan parasite variant
    XMSMcAfeeeAvsynmgr32e.exeAdded by the FRAMAR TROJAN!
    XMSMcAfeehAvsynmgr32h.exeAdded by the FRANGO TROJAN!
    XMSMcAfeeSAvsynmgr32S.exeAdded by the VOLAC or VOLAC.DR TROJANS!
    ?msmgrmsmgr.exe??
    XMsmgtmsmgt.exeTotal Velocity adware/hijacker
    Xmsmonmsmon.exeAdded by a variant of the GEMA.D TROJAN!
    ?MsmqIntCertregsvr32 /s mqrt.dllMicrosoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?
    UMSMSGSmsmsgs.exeWindows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
    XMSMsgSvcMSMSGSVC.exeBrowser hijacker, identified by some antiviruses as a variant of the StartPage.QC TROJAN!
    Xmsnsystem32.exeAdded by the KITRO.A WORM!
    Xmsnmsnmsg.exeAdded by the RBOT-GO WORM!
    XMSNmsnmsgs.exeAdded by the RBOT-KL WORM!
    XMSNctfmoons.exeAdded by the SPYBOT.HI WORM!
    XMSN angcssrss.exeAdded by the FORBOT-CE WORM!
    XMsn Configmsngf.exeAdded by the RBOT-QG WORM!
    NMSN Internet Accesstrayclnt.exeQuick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
    XMSN Managercvss.exeAdded by a variant of the SPYBOT WORM!
    XMSN Messangermsnmsng.exeAdded by the SDBOT.XN WORM!
    XMSN messengermessenger.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger, see this thread
    XMSN messenger servicemssgs.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger, see this thread
    XMsn MessengersMSNMSGR.EXEAdded by the RBOT.KX WORM!
    XMsn Plus Updatermsnplus.exeAdded by the RBOT-MU WORM!
    NMSN Quick ViewMsndc.exeQuick way to connect to MSN internet service
    XMSN Startmsnmsgr7.exeAdded by the RBOT-PH WORM!
    XMsn Update Manager (Sp2)MSMSGS.EXEAdded by the AGOBOT-NL WORM!
    XMSN Updatermsnms.exeAdded by the FORBOT-CG WORM!
    XMsn Updatermsnplugins.exeAdded by the RBOT-HS WORM!
    XMSN UPDATERSvirtualmemory.exeAdded by the RBOT-JK WORM!
    Nmsnappaumsnappau.exeUpdater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to "update" the toolbar
    XMsnarratormsnarrator.exeAdded by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware
    XMSNETmsnet.exeAdded by the BOA WORM!
    ?MsnFixermsnfixjs.jsLocated in the HPbinmsnfix directory of a HP PC
    XMSNGrabberMSNgrabber.exeAdded by the ENVID.A WORM!
    NMSNIAMSNIASVC.EXEAdded with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
    Xmsnload32.exemsnload32.exeAdded by the BANCOS.M TROJAN!
    XMSNMESENGERMain.exeAdded by the PRORAT TROJAN!
    Nmsnmsgrmsnmsgr.exeMSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
    XMsnMsgrMsnMsgrs.exeAdded by the NETSKY-AD WORM!
    Xmsnmsgr32-.exemsnmsgr-.exeAdded by a variant of the SPYBOT WORM!
    XMSNMSGR5MSNMSGR5.exeAdded by the RBOT.PQ WORM!
    XMSNMSGREswef.batIRC backdoor TROJAN or WORM!
    XMSNMSGRRswin.batIRC backdoor TROJAN or WORM!
    XMSNMSGRS1swed.batIRC backdoor TROJAN or WORM!
    Xmsnmsgsgsmsnmsgsgs.exeAdded by the "Catal" alias Spy.Delitall.B backdoor TROJAN!
    XMSNServiceMSNService.exeAdded by the CARPET.C WORM!
    XMSNSysRestorepc32.exeAdded by a variant of the MASTAK VIRUS!
    XMSObject32MSObject32.jsAdded by the PUN TROJAN!
    XMsofficemsoffice.htaHijacker - redirecting to Searchdot.net
    XMSOfficeservices.exeBrowser hijacker. The file is placed in a newly created MSOffice folder in System32. Note - this is NOT the legitimate services.exe process, which should NOT figure in Msconfig/Startup!
    XMSOOBDMSOOBD.EXEAdded by the MAGISTR.A VIRUS!
    XMspatch69[path to trojan]Added by the MPROX TROJAN!
    XMspatch89cnqmax.exeAdded by the RANDEX.P WORM!
    XMSPQFileMSA****.TMPHomepage hijacker. See here for more information. **** can be anything
    XMSprotect.exeMSprotect.exe