Startup Entries

! | ' | $ | % | ( | * | , | - | . | / | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | \ | space | ? | @ | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | ^ | _ | {
Rundll32
File Name: Rundll32.exe
Description:
Added by a variant of the External: DVLDR TROJAN! Note - this is not the legitimate External: rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Fonts
(0) | (0) | (0)
RUNDLL32
File Name: RUNDLL32.EXE NvQTwk,NvCplDaemon
Description:
Installed with display drivers for External: NVIDIA based graphics cards prior to late 2002, this entry allows the System Tray icon to be displayed - which gives access to (amongst others) the display settings (such as Antialiasing, OpenGL, Direct3D and colour) and Desktop Manager (nView). If you don't change display settings very often then this is not required and settings can be changed manually via display properties
(0) | (0) | (0)
RunDLL32
File Name: RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Description:
Installed with display drivers for External: NVIDIA based graphics cards since late 2002, this entry allows the System Tray icon to be displayed - which gives access to (amongst others) the display settings (such as Antialiasing, Rotation and Colour) and the Desktop Manager (nView). If you don't change display settings very often then this is not required and settings can be changed manually via display properties. No tray icon option is available in Vista. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest"
(0) | (0) | (0)
RunDLL32
File Name: winupdate.exe
Description:
Added by an unidentified TROJAN! - possibly a External: BMBOT variant
(0) | (0) | (0)
Rundll32
File Name: Windows.exe
Description:
Added by the External: QQPASS.E TROJAN!
(0) | (0) | (0)
Rundll32
File Name: Rundll32.exe ptipbm.dll, SetWriteBack
Description:
Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. Tells the drivers that the connected Drives should use the "Write Back" Caching. You can disable this if you don't want to use "Write Back" Caching or if you have not connected any driver to your Promise Controller
(0) | (0) | (0)
rundll32
File Name: [path to worm]
Description:
Added by the External: AUTEX WORM!
(0) | (0) | (0)
rundll32
File Name: rundll32.exe ptipbmf.dll, SetWriteCacheMode
Description:
Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller
(0) | (0) | (0)
rundll32
File Name: rundll32.exe
Description:
Added by the External: SANKER WORM! Note - this is not the legitimate External: rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%
(0) | (0) | (0)
rundll32
File Name: csrss.exe
Description:
Added by the External: GUTTA TROJAN! Note - this is not the legitimate External: csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
(0) | (0) | (0)
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96