Autorun Details: svchost.exe

Name: (default)
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-CN WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a %ProgramFiles%\Common Files\Services. Note - this malware actually changes the value data of the "(Default)" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank

Name: .mscsbl
Command: SVCHOST.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the BOROBOT-A TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: [empty]
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-UX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%. Note - has a blank entry under the Startup Item/Name field

Name: [random name]
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANCBAN-JC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\config

Name: [trojan name]
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANCBAN-CI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: \SysInit
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the STARTPA-BD TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files

Name: 333
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the JD-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Syswm1i" directory

Name: alpha
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies

Name: applicationgateway
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: PCProwler surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\MSWSPXP\!Executables\Release

Name: Auto Update
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DUMARDI-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Auto Updates
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CHEUKO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: beta
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies

Name: CashToolbar
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: BrowserAid/CashToolbar adware. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "inetsrv" sub-directory

Name: CDriver
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies

Name: Configuration Loader
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PARADROP-A WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: CTFMON.EXE
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the JUEGO-B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: DDriver
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies

Name: defragsys
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BIFROSE-TH TROJAN! Note - this is not the legitimate svchost.exe process which should normally figure in Msconfig/Startup!

Name: Dll Link
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTOSKY WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Favourites folder

Name: DriverCheck
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc

Name: DriverLoad
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc

Name: Eservice
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MULAR.A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files\System\EService

Name: F-Secure 2005
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BIFROSE-CH TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: France
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MIMAIL.L WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: gamma
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies

Name: Generic Host Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DLOADER-NX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: GenSrv
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: StealthLogger surveillance software. Uninstall this software unless you put it there yourself

Name: GNP Generic Host Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ZAPCHAS-F BACKDOOR! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: hellfire
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LEOX.D TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Host Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT.AGF BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the Fonts directory

Name: I just want to say I love Milko and I need a drink
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CHIKO WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\Administrator\Local Settings\Application Data

Name: internat.exe
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF.AFJ BACKDOOR! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: KAVPersonal
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: kavs
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-GLC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Kernel32
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\drivers

Name: LocalSystem
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: EHU adware. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: LTM2
Command: SVCHOST.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LITMUS.203 BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random sub-directory of %Windir%

Name: microsoft
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ASTEF or RESPAN WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: Microsoft
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ADUYO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Microsoft (R) Windows Configuration Backup Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RANKY.X TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in either a "config", "mapping" or "security" subfolder of %Windir%

Name: Microsoft Corp
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PUSHBOT.QD WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Microsoft dll Host Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT.BMS BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Microsoft Genetic Procress
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the SDBOT WORM!

Name: Microsoft Genuine Logon
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SDBOT.EXT WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Microsoft Internet Explorer
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: Microsoft Service Host Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the KRYNOS.B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Help

Name: Microsoft Software
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBRUTE-O TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%

Name: Microsoft Windows SVCHOST
Command: SVCHOST.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VB.KV WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: Microsoft? Operating System:
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-PAF TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Mircosoft DNS Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-AK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: Monitoring Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks

Name: mset
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BIZEX-F TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "mset" sub-directory

Name: MSN
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PUSHBOT.FA WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: MStask
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LDPINCH-BV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: MyApp
Command: Svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SESWOL TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: nano
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: NetStart
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MKAR-A VIRUS! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "NETSTART" subfolder

Name: Network maneger
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT.BX BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: Network Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the STARTPA-CC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: nodriver
Command: SVCHOST.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the SPYBOT-Z BACKDOOR! Note - this is not the legitimate svchost.exe process which should normally figure in Msconfig/Startup!

Name: NortonVPlus
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ROAMER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: NT_Authority
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the KUKOO-B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%

Name: ntuser
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the POLYCRYP.DY TROJAN!

Name: NvClipRsv
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DUMARU-K WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Online Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the HOSTIDEL.B or HOSTIDEL.C or TARNO.B TROJANS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: P0w3rF1Y
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BDOOR-MM BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Perfomance Settings
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TOFGER-AP TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Photoshop
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CDOPEN-E TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%

Name: PolicyRun
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SILLYFDC-AW WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: PowerManager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the JEEFO VIRUS! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Processor
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-KIR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root directory (i.e. C:\ or D:\)

Name: Recoveru systems
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SMALL.DDX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Temp%

Name: renascimento
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANKER.GAX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Help

Name: reseurce
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-FV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: risings
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-GLC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Runner
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: sds20
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: InlookExpress logs keystrokes and captures screenshots. If you didn't install this yourself remove it. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\sds20

Name: Service Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Service Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DAOSER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\Services\{C922CCC4-CF61-4589-A0D1-828160704853}

Name: Service Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DAOSER-C TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\Services\[random]

Name: Service Host Driver
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Service Host Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-CQ WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile%

Name: Service Process
Command: SVCHOST.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the DARKER WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Service Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DCMBOT-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "config" subfolder

Name: Services
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the REPER-B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Setup experation
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Shell
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the GOLDSPY-B TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: SNP Generic Host Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ZAPCHAS-O TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: spoolsv
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DLOADER-FI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\HELP

Name: Srv32Win
Command: Svchost.exe
Status: User's choice. Start if necessary.
Description: Realtime-Spy keystroke logger/monitoring program - remove unless you installed it yourself!

Name: SSL
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: startkey
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-FPL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Startup
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-QCK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%\Microsoft

Name: SVC
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: ElfSpy keystroke logger/monitoring program - remove unless you installed it yourself!

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANCBAN-HL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\config

Name: Svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ADCLICK-AM TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Internet Explorer

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BDOOR-ES BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Microsoft" subfolder

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DLOADER-EV TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%

Name: svchost
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: Infine Keylogger surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup. This one is located in an "svc" subfolder

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VB-EOK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "MsDtds" sub-directory

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: 2Search adware. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\2search

Name: SVCHOST
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: System1060 homepage hi-jacker. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\System1060

Name: svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by many TROJANS amd WORMS, such as MORB or TARNO. Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: Svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MOZE-A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: svchost Agent
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-DB WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "28463" sub-folder

Name: SVCHOST Generic application
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DAEMONI-K TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: svchost Netware Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the EXVID.A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Svchost Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VB-DVQ WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\help

Name: SVCHOST.EXE
Command: SVCHOST.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the WRMSCAN-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: svchost.exe
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ZAPCHAS-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: svchost.exe
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VIRUT.CF WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "3361" subfolder

Name: SVCHOST.EXE
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SILLYFDC.BBI WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Conf" sub-directory

Name: System
Command: SVCHOST.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the LDPINCH-AU TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: system configure
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-C TROJAN! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: System Host Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CONE.F WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks

Name: System Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANKER-AE TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: System Process
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: System Update2
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTOTROJ-C TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: System32
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ZAPCHAS-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: SystemCheck
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc

Name: SystemDriverCheck
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc

Name: SystemDriverLoad
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc

Name: SystemReg
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DEWIN.E BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Task Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SOHANA-P WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: Task Monitoring Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CONE.D WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks

Name: THCS
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: AllMonitor surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup. This one is located in a "drivers\imon" subfolder

Name: Update
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Update Srv
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DELF.OB TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\winservxv

Name: Video Driver
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: WinAppLog
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: StingKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!

Name: windows
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SLOMIRC-A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: windows
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TIBS.VQ TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Temp%

Name: Windows
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-QFR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%

Name: Windows Default Configuration
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DLOADER-U TROJAN! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: Windows DLL Services
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: AGENT.H spyware. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: Windows Driver Adapter
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ANTINNY-K WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: Windows Firewall
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PROXY-HT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows Internet Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-AAC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows Security Manager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ANTINNY.AX WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Microsoft" subfolder

Name: Windows Service
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SPYBOT-AW TROJAN! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Name: Windows Service Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CONE.B WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows Service Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the KALEL-C WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: Windows Services
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-BFU WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%

Name: Windows Services Host
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CONE or CONE.E WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: Windows Stortup
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TOGER-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows svchost
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-ZQ WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows Taskmanager
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IMBOT.AC WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: Windows Xp Service Pack 2
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the XPLOS-A TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: WindowsExplorer
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Messenger Blocker rogue security software - not recommended. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files\System

Name: WindowsServicesStartup
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ECUP WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Temp%

Name: WindowsUpdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ASTEF or RESPAN WORMS or AGENT-V TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: WindowsUpdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BDOOR-IK BACKDOOR! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: WindowsUpdatem2
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified WORM or TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name: winservice
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CVK BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "services" sub-folder

Name: WinService32
Command: svchost.exe
Status: User's choice. Start if necessary.
Description: 007 Spy Software - "stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"

Name: winsupdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-RHZ TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AllUserProfile%

Name: WinUp
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SILLY.BR WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This file is located in a "4350" sub-folder

Name: winupdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MDROP-CHC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Temp%

Name: wlinles
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LIJI-A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the "spool" sub-folder

Name: wnddrv
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: wsock32
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the HORST-A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: xor
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the XORDOOR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "xor" subfolder

Name: Zone Labs Client Ex
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the NETSKY.F WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name: zztp
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the TANNICK.B TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner