| Status | Autorun name | Command | Description |
| X | TaskMon | taskmon.exe | Added by the MYDOOM.A or MYDOOM.J WORMS! Note - this is not the legitimate Win98/Me file of the same name which is located in %Windir% as this version is located in %System%. It is not normally found on a WinXP system |
| X | TaskMon | [path to trojan] | Added by the DROPPER.EAT TROJAN! |
| X | Taskmon driver | winampa.exe | Added by the LOONY-I TROJAN! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a "Winamp" subdirectory of %ProgramFiles% whereas this file is located in %System% |
| X | taskmone | taskmone.exe | Added by the SINGU-S TROJAN! |
| U | TaskMonitor | taskmon.exe | The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase) |
| X | TaskMrg | csrss.exe | Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | taskmrg | taskmrg.exe | Added by the BANKER-BZZ TROJAN! |
| X | taskmrg.exe | taskimg.exe | Added by the DLOADER-QZ TROJAN! |
| X | taskmrg.exe | [path to trojan] | Added by the BANCBAN-BN TROJAN! |
| X | taskmsgs | [path to trojan] | Added by the BANCOS-BBW TROJAN! |
| X | taskngr | taskngr.exe | Added by the BANCOS-AWX TROJAN! |
| X | taskopen.exe | taskopen.exe | Added by the HIDD.C TROJAN! |
| N | TaskPlus | TASKPLUS0.EXE | Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN |
| N | TaskPlus | TASKPL~1.EXE | Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN |
| X | TaskReg | [random filename] | Added by the CBLAD WORM! |
| X | TaskS manager | taskmgrs.exe | Added by the AGOBOT.QU WORM! |
| X | Taskschd | TRAYWND.EXE | Added by the LITMUS.002 BACKDOOR! |
| U | TaskScheduler | TaskSch.exe | ProSeries accounting software related |
| U | taskswitch | taskswitch.exe | ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen |
| U | TaskSwitchXP | TaskSwitchXP.exe | "TaskSwitchXP from NTWind Software. Advanced task management utility that picks up where the standard Windows Alt Tab switcher leaves off. It provides the same functionality, and adds visual styles to the dialog and also enhances it by displaying thumbnail preview of the application that will be switched to" |
| X | tasksys | tasksys.vbs | Added by the BYRON WORM! |
| U | tasktrap | tasktrap.exe | Real-time monitor for Task Catcher from BillP Studios - which "allows you to efficiently monitor programs running on your computer without slowing you down or hogging all your memory. Task Catcher will block unwanted programs from running and restart your favorite programs if they are disabled or crash". If the program isn't registered the monitor will initially load and then close at start-up. If registered it will continue to run and optional System Tray access will also be available |
| N | Tasktray | CTLTray.exe | Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon. Also allows you to launch the Taskbar via right-click → Show Taskbar. The tasktray can be accessed via Start → Programs → Creative → Sound Blaster Audigy → Taskbar |
| X | Tasmgr | Taskmgr.bat | Added by the YPSAN.G WORM! |
| X | tat | tatss.exe | Delfin PromulGate adware |
| Y | Tau monitor | Taumon.exe | "Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system." Now discontinued |
| ? | TAudEffect | TAudEff.exe | TOSHIBA Notebook related. What does it do and is it required? |
| X | tava | tavo.exe | Added by the CRPYT.DE TROJAN! |
| ? | TB_setup | TB_ANI~1.EXE | ?? |
| X | TB_setup | tb_setup.exe | HuntBar hijacker, toolbar installer |
| U | TB2PROEXE | tb2start.exe | Timbuktu Pro - remote desktop access software |
| U | tbbMeter | tbbmeter.exe | tbbMeter - bandwidth meter developed by thinkbroadband.com "to help you monitor your Internet usage. It allows you to see how much your computer is sending to and receiving from the Internet in real time. It also shows you how your Internet usage varies at different times of the day" |
| U | TBC Pro | tbcpro.exe | TitleBarClock Pro - displays Day, Time, Date, Month, Year, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus |
| U | TBC.exe | TBC.exe | TitleBarClock Pro - displays Day, Time, Date, Month, Year, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus |
| N | tbctray | tbctray.exe | Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start → Settings → Control Panel |
| Y | TBLFUNC | tblmouse.exe | Aiptek HyperPen graphics tablet driver |
| Y | tbm | tbm.exe | Taskbar Button Manager from Innovative Solutions - "is a simple utility that helps you arrange the buttons on your Windows taskbar in any way you want by using drag and drop" |
| X | tbon | tbon.exe | BestOffers adware |
| U | TBPanel | TBPanel.exe | Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel |
| X | TBPS | TBPS.exe | WebSearch Toolbar - HuntBar hijacker, toolbar installer variant |
| N | TBTray | tbtray.exe | VLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel |
| Y | tcactive | tca.exe | Part of The Cleaner from MooSoft - stops virus trojans before they can do any damage |
| N | TCASUTIEXE | tcaudiag.exe | 3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs |
| N | TCASUTIEXE | TCASUTI.exe | Associated with the 3COM diagnostic module (3COM NIC Doctor).?No further information is available |
| N | TCAUDIAG -off | tcaudiag.exe | 3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs |
| ? | TCDPbtn | TCDPbtn.exe | Found on a Toshiba laptop |
| ? | TCDPlay | TCDPlay.drv | Found on a Toshiba laptop - sounds like the driver for the CD-ROM but why doesn't it use the standard Windows drivers - any comments? |
| U | TClock | TCLOCK.EXE | Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs |
| X | TClock.exe | tclock_install.exe | TClock - distributed and installed without user permission by other rogue software or malware. TClock contains no uninstall facility through Windows. As TClock is of dubious origin and usefulness, it should be terminated and removed if detected |
| U | TClockEx | TCLOCKEX.EXE | Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks |
| U | tcmonitor | tcm.exe | Part of The Cleaner from MooSoft - warns of changes to the registry |
| U | tcnzTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for Telecom New Zealand users |
| U | tcomantidialerrun | T-Com Antidialer.exe | T-Com Antidialer from T-Com internet provider. It's a small antidialer utility which monitors whether you're trying to dial a new connection. It basically asks you do you want to dial the shown number or not. Protects agains dialer malware |
| U | TCOYFReminder | tcoyftray.exe | My ParenTime Fertility Planner Reminder. The calendar provides a quick overview of the status of your fertility |
| X | Tcp Application Manager | localsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | netsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | spoolsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | svcadmin.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | svcman.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | svcrun.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | tcpsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Tcp Application Manager | websvc.exe | Added by the DLOADER-NY TROJAN! |
| X | tcp checker | tcpcheck.exe | Added by the VBBOT-A TROJAN! |
| X | TCP Internet Services | TCPSVC32.EXE | Added by the SPYBOT.X BACKDOOR! |
| X | TCP Monitoring | LanNSvc.exe | Added by the RANDEX.AAS WORM! |
| X | TCPIP Protocol | mstcpip.exe | Added by the SDBOT-LR WORM! |
| X | tcpipmon | tcpipmon.exe | Added by the CLICKER-EF TROJAN! |
| X | tcpippui | tcpippui.exe | Added by the RBOT-APS WORM! |
| X | tcpippui32 | tcpippui32.exe | Added by the RBOT-ART WORM! |
| X | tcpipsvc.exe | tcpipsvc.exe | Added by the AGOBOT-PG WORM! |
| X | TCPServer | TCPServer.exe | Added by a variant of the SDBOT WORM! |
| X | TCPXP Update | tcpxp.exe | Added by the RBOT-UL WORM! |
| X | Tcsvc | rundll32.exe tcsvc.dll,start | Added by the AGENT.BCL BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tcsvc.dll" file is found in %System% |
| ? | TCtlIHook.exe | TCtrlIOHook.exe | TOSHIBA Control Utility Hotkey Hook - hotkey configuration process unique to Toshiba laptops. What does it do and is it required? |
| ? | TCtrlIOHook | TCtrlIOHook.exe | TOSHIBA Control Utility Hotkey Hook - hotkey configuration process unique to Toshiba laptops. What does it do and is it required? |
| ? | TCtryIOHook | TCtrlIOHook.exe | TOSHIBA Control Utility Hotkey Hook - hotkey configuration process unique to Toshiba laptops. What does it do and is it required? |
| X | tcupdater | tcupdater.exe | Topconverting.com/180Search adware updater |
| U | TDAlert | TDAlert.exe | Part of Trust Delete from EgisTec Inc - which "is a remote data deletion software to protect your confidential data and prevent them from falling into the wrong hands when your PC is stolen or missing" |
| U | TDispVol | TDispVol.exe | Used on Toshiba computers to make the Fn key have control over the volume on/off |
| U | TDKSTART | TDKSTART.EXE | Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW. |
| N | TDKTASK | TDKTASK.EXE | Taskbar utility for a "control panel" for a CD-RW |
| ? | TDockNUndock | N/A | Found on a Toshiba laptop - for use with a docking station? |
| X | Tdrb | ompa.exe | PurityScan adware |
| U | TDS3 | TDS-3.exe | DiamondCS TDS-3 antitrojan. Can be used to scan on demand, but required in startup if you prefer real time protection |
| ? | TDspOff | Tdspoff.exe | Found on a Toshiba laptop |
| U | TE_RegProtect | TERegPct.exe | Registry repair utility part of the Anti Trojan Elite (ATE) anti-malware tool |
| N | Teach In Box | teachbox.exe | Tutoring program that comes with a SystemAX Computer |
| Y | TeaTimer | TeaTimer.exe | Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. "Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options, how to deal with this process in the future". Also provides System Tray access to Spybot S&D and detects when processes want to change critical registry settings such as the startup entries - giving the user the option to allow/deny the change |
| Y | Tech-In-A-Box | techbox.exe | Tech-in-a-Box "provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs, Tech-in-a-Box is your tool to stay up and running" |
| U | Teco | Teco.exe | Toshiba's Eco Utility™ that "offer improved energy management. With a single click you can switch to a pre-configured power plan that will not only let you go green, but let you see the measurable savings too" |
| U | TEData_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for TEData users |
| X | teiteq | teiteq.exe | Added by the VB-WC MALWARE! |
| U | Telechips,Mass | patch.exe | Removable disk driver for the Muro MP3 player |
| N | Telemeter 3.0 | telemeter3.exe | Internet connection bandwidth meter from a user ISP |
| Y | Telepath | telepath.exe | Drivers for the WinModem versions of the US Robotics "Telepath" series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| X | Telephony Provider | Iexplore.exe | Added by the FORBOT-DF BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System% |
| X | Telnet | Telnet.exe | Added by the VOUMIT-A WORM! Note - this is not the legitimate telnet.exe application which is always located in %System% and should not normally figure in Msconfig/Startup! This file is located in a "mirc32" folder |
| X | Telnet24 | [random filename] | Added by the RBOT-ARD WORM! |
| U | TelstraClear Broadband Support | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". TelstraClear Broadband Support is required to run with the Help and Support program. If you uncheck TelstraClear Broadband Support and then run Help and Support it will add another TelstraClear Broadband Support entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| U | TELUS eCare | matcli.exe | TELUS Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". TELUS Resolution Assistant is required to run with the Help and Support program. If you uncheck TELUS Resolution Assistant and then run Help and Support it will add another in the startup menu. If you remove TELUS Resolution Assistant via add/remove programs some menus in Help and Support will not be available. You decide |