Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
N SM1NINT SM1NINT.exeCypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98
N SM56 Helper Win32 Utility sm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
N Sm56acl sm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
U sma sma.exe"SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X sman app***.tmp [* = digit]Unidentified adware
X SManager smanager.*.exe [* = digit]"Added by the AGENT.BJO TROJAN!"
X SManager smanager.7.exe"Added by the DWNLDR-GVG TROJAN!"
X SmansaApp winlogon.exe"Added by the ROMARIO-A WORM! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder"
N Smapp smtray.exeSystem Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N Smart Card Service ScardSvr.exe"For Smart Card readers. Known to cause problems especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly"
U Smart Connect Monitor SCMon.exeAppears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U Smart Connect Setup SCSetup.exeAppears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U Smart Keyboard Smartkbd.exeNetropa Smart Keyboard driver
N Smart Label O Server ssloserv.exePart of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N Smart Label RFViewer SSLFVIEW.EXEPart of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N Smart Start UP PnPDetect.exe"Part of Presto! Mr.Photo - ""an ideal program for creating sharing and manag-ing digital images and videos"""
U Smart Touch STouch.exe"Related to Plustek OpticSlim scanner"
N Smart Type Assistant sta.exe"Smart Type Assistant - a complex typing automation tool intended to make your work faster and safer"
U Smartalec pcaccel.exe"Smartalec PC Accelerator - system optimization utility"
U SmartAudio SmartAudio.exeConexant SmartAudio PC audio chipset software - typically available on HP notebooks with built-in microphones
N SmartBarXP SmartBarXP.exe"SmartBarXP is a bar that runs down the side of your screen and can be configured to display interactive panels known as 'panes'. These panes include media players slideshow and image viewing panes a virtual desktop manager and live news weather and stock feeds to mention but a few"
N sMaRTcaPs SMARTC~1.EXE"sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock Num Lock & Insert keys"
N SmartDefrag IObit SmartDefrag.exe"""IObit SmartDefrag helps defragment your hard drive more efficiently than any other product on the market - free or not"""
U Smarthruengine QS.exeSamsung smarthru software used with Lexmark Z82 or Samsung multifunction printers
U SmartPCXL pcaccel.exe"Smartalec PC Accelerator - system optimization utility"
U SmartRAM MemCleaner.exe"Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional"
U SmartRAM Sup_SmartRAM.exe"Memory management part of the Advanced SystemCare system utility from IObit"
U SmartSync Pro SmartSync.exe"Related to CompanionLink Software Inc. Synchronization solutions for ACT! GoldMine Lotus Notes and Microsoft Outlook"
N SMax4 SMax4.exeSystem Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
U SMax4PNP SMax4PNP.exeSoundMax integrated sound. Required if you have custom settings for your sound such as effects and environments
? smbdpmi smbdpmi.exe"IBM Netfinity Director and Universal Management Services related. What does it do and is it required?"
Y smc smc.exeSygate Firewall
Y smc spfsmc.exeSygate Firewall
Y SMC Service smc.exeSygate Firewall
Y SMC Service spfsmc.exeSygate Firewall
X smcserv winsrv.exe"Added by the AGOBOT-OU WORM!"
Y SmcService smc.exeSygate Firewall
Y SmcServices smc.exeSygate Firewall
Y SmcServices spfsmc.exeSygate Firewall
X smcss smcss.exe"Added by the SCLOG-AJ TROJAN!"
? Smcsta.exe Smcsta.exe"SMC Networks wireless PCI card driver. Is it required?"
X SmcSVR SmcSVR.exe"Added by the LEGMIR.JU TROJAN!"
X smgr mgrs.exe"Covert Sys Exec malware variant"
X smgr smgr.exeAdded by an unidentified WORM or TROJAN!
N SmileboxTray SmileboxTray.exe"System Tray access to Smilebox photo sharing/printing service"
X Smiley District plugin.exe"Smiley District adware"
N Smith Micro try smiptray.exeSmith Micro shared files. Comes with D-Link web cam
U smodul smodule.exe"UserMonitor from Neuber. Teachers can broadcast screen to other screens see students screens in a network and detect unauthorized software"
N SmoothView SmoothView.exe"TOSHIBA Zooming Utility - allows ""automatic"" zoom feature in some appications like IE MS-Office WMPlayer Adobe Reader and also desktop icons"
U SMPAutoStart smpdemo.exe"Smart Phone Recorder demo from KenGolf.com. Answering Machine Caller ID Call Recording"
U SmpcSys SmpSys.exe"""Set Up My PC"" utility supplied with some Packard Bell computers"
X smres smres.exe"Added by the AGOBOT-UA WORM!"
X smrtdrv runtime.exe"Added by the AGOBOT.MT WORM!"
X SMS iro.bat"Added by the IROFFER.CT TROJAN!"
U SMS Application Launcher LAUNCH32.EXE"Microsoft Systems Management Server - used to manage computers on a network remotely"
U SMS Client Service clisvc95.exeWhen the SMS Client service starts on a domain controller the Client service modifies the SMSCliToknAcct & user account group membership user rights and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes such as the Software Inventory and Software Distribution agents (MS Systems Management Server)
X Sms System32 SmsSystem32.exeUnidentified malware
U SMS Win9x Message Agent SMSMsg.exeThis program assigns a user to a Systems Management Server site
N SmsDiscount SmsDiscount.exe"SmsDiscount - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
N Smserial sm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
X SMSERIALSTARTER win32st.exe"Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended see here"
X SMSERIALWORKERSTART shellexcon.exe"Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended see here"
X SMSERIALWORKERSTARTER winstrse.exe"Added by an unidentified WORM or TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended see here"
X SMSERIALWORKSTARTER comsysobj.exe"Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended see here"
X smsger Win.exe"Added by a variant of the SDBOT WORM!"
N SMSI Loader SMLoader.exe"Smith Micro HotFax - fax software"
X smsm smsm.exe"Added by the BANKER-CO TROJAN!"
X smsrv smsrv.exe"Added by the AGOBOT-SX WORM!"
X SMSS smss.exe"Added by the FLOOD.F TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""Catroot"" subfolder"
X smss [path to smss.exe]"Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X smss smss.exe"Added by the AGENT-TR TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X smss smss.exe"Added by the BOROBOT-J TROJAN and variants! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X Smss ssms.exe"Added by the RBOT.OP WORM!"
X Smss Host smhost.exe"Added by the IRCBOT-ACC TROJAN!"
X smss.exe csrss.exe"Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X smssLevel4 smss.exe"Unidentified malware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in Program FilesWindows Media PlayerSkinsWindowsMediaSkinDataLevel4 folder"
X SMSSS smsss.exe"Added by the SDBOT.ZD WORM!"
X SMSSS Loader smsss.exe"Added by the AGOBOT.MQ WORM!"
X SMSSU SMSSU.EXE"Added by the STARTPAGE.O TROJAN!"
X smsys Explorer.exe"Added by the CLICKER-C BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a ""Template"" subfolder"
X smsys vi.exeAdult content dialler
U SMSystemAnalyzer SMSystemAnalyzer.exe"Part of the Iolo System Mechanic optimization tool"
X sms_msn sms_msn.exeAdded by an unknown WORM or TROJAN!
X sms_msn40 sms_msn40.exeAdded by an unknown WORM or TROJAN infection
U Smt SMT.exe"Win-Spy keyboard logger/monitoring software - remove unless you installed it yourself"
N SMToolbar SMToolbar.exeStartMake.com toolbar
X SMTP32 Mailing Protocol smtp32.exe"Added by a variant of the RBOT WORM!"
? SmWizard SmWizard.exe"SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?"
X SM_IAN ian_monitor.exe"AdvancedCleaner misleading security software - not recommended see here"
X SN Messenger msnmsgr.exe"Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility"
U SnagIt 8 SnagIt32.exe"""SnagIt lets you capture edit and share exactly what you see on your screen - fast"""
U Snapfish Media Detector SnapfishMediaDetector.exe"Snapfish Media Detector - ""Upload your photos to Snapfish where you can store and share your photos for free on line"""
U SnapfishMediaDetector SnapfishMediaDetector.exe"Snapfish Media Detector - ""Upload your photos to Snapfish where you can store and share your photos for free on line"""
X snapple snapple.exe"Added by the FORBOT-EG WORM!"
? snbr snbr.exe"??"
X snbupt snbupt.exe"UpSpiralBar adware"
X sncntr sncntr.exe"Added by the DLUCA-I TROJAN!"
? SNCT511 vsnct511.exe"Unidentified ""Snapshot Viewer""- what does it do and is it required?"
X SND Volumes sndvolumes.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X snd332 snd332.exe"Added by the B1LD0 AIM WORM!"
X Sndcompat Sndcompat.exe"Added by the GEMA TROJAN!"
U sndmi13 vsndmi13.exe"Driver for DualCam cameras - that combine the best features of a digital still camera and a webcam"
U SNDMon SNDMon.exe"Part of Symantec's LiveUpate (eg Norton). Not required if you run manual updates but probably require if you leave them to run automatically. Also if one runs a small office network and SNDMon is disabled on one of the computers ? then other computers disappear from the network for this computer including shared devices like printers and scanners. Hence the ""U"" recommendation"
X Sndsaver Sndsaver.exe"Added by the GEMA TROJAN!"
? sndsrvc SNDSRVC.EXE"Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required?"
X SNInstall [various filenames]"Spy Sheriff/SpywareNO malware also detected as the SPYHOAX-A TROJAN pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE NS6281400.so CVXH8JKDQ2.EXE down3.exe sefe.exe winstall.exe and tool2.exe"
U Snippet SnippingTool.exe"The Snipping Tool (part of the Experience Pack for Tablet PC) allows you to easily ""cut out"" anything on screen and share it with other people. The whole screen becomes an ""inkable"" surface that you can add comments to and mark up however you like. You can then save that annotated image to use later or send it to someone else in an E-mail message"
U SNM SNM.exe"SpyNoMore anti-spyware"
U SnoopFreeUI SnoopFreeUI.exe"Anti-keylogging software made by SnoopFree Software"
X SNP Generic Host Process svchost.exe"Added by the ZAPCHAS-O TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
N snp2std vsnp2std.exeDigital camera related
? snpstd vsnpstd.exe"Sonix PC Camera Monitor MFC Application. What does it do and is it required?"
? SNPSTD2 vsnpstd2.exe"CameraMonitor MFC Application. Appears to be related to a USB connection to a digital camera -is it required?"
Y snpstd3 vsnpstd3.exe"Sonix Inc. Camera Monitor MFC Application"
N Snsicon Snsicon.exeLaunches a screensaver program from Second Nature
X SNSS.EXE SNSS.EXE"Nunci premium rate dialer"
X snvc snvc.exeAdded by an unidentified WORM or TROJAN!
? SO5 Integrator Pass One sointgr.exe"StarOffice 5. See here for more details"
? SO5 Integrator Pass Two sointgr.exe"StarOffice 5. See here for more details"
X Soar Rwon.exe"PurityScan/Clickspring adware"
X Social Security Agency rpcxsocsa.exe"Added by a variant of the RBOT WORM!"
X Sock32 sock32.exe"Added by the SDBOT TROJAN!"
X Socket Utility svchostz.exe"Added by the DAEMONI-E TROJAN!"
X Socket Utility socket.exe"Added by the DAEMONI-E TROJAN!"
Y SoDA Startup SodaStartup.exe"Used by the IBM Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software"
N soffice SOFFICE.EXEDisplays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).
X Soft Profile Inc hxdef.exe..."Added by the LOVGATE.AO WORM!"
X Soft Profile Inc hxdef.exe"Added by the LOVGATE.E WORM!"
X soft2 ********.exe [* = random digit]"Added by the KARDPHISHER TROJAN!"
U Softany Monitor Control MonitorControl.exe"Softany Monitor Control - ""control your computer's monitor and screensaver"""
U SoftGridTray SFTTray.exe"System Tray access to SoftGrid from Microsoft - ""the only virtualization solution that delivers applications that are never installed and dynamically delivered on demand"""
X softIce Update 32 wininits.exe"Added by the RBOT-ANB WORM!"
U SoftickPPP PPPGate.exe"Softick PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer"
Y SOFTinst N/AFor Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
U SoftStuff Wallpaper Changer softstrt.exe"AzureBay wallpaper changer"
X Software software.exe"Added by the CRABTON-B TROJAN!"
X Software Soft Stop Spyware Soft Stop.exe"SoftStop misleading security software - not recommended see here"
U SoftwareStation station.exe"eAcceleration Stop-Sign security software related. Previously not recommended see here"
U SolidWorks Task Scheduler Engine swBOEngine.exe"Task scheduler for SolidWorks 3D CAD software"
Y Solo Sentry Solosent.exe"Solo Antivirus"
U SoloSchedule Solocfg.exe"Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis"
U SoloSysCheck Syscheck.exe"Solo antivirus System Integrity Check - Monitors system registry system.ini win.ini and startup to protect you from new Internet Worms and Backdoors"
X somatic somatic.exe"Searchcentrix hijacker"
X some icthis.exe"Online Video Add-on - masquerades as a helper application for watching videos. In reality though it installs a rogue anti-spyware or SmitFraud application on your computer"
X some scit.exeNetproject malware
N Sonic A3D Control vrtxctrl.exeSound related options
X Sonic RecordNow! smsc.exe"Added by a variant of the SDBOT WORM!"
N SonicFocus SFIGUI.EXE"Sonic Focus - ""enhances music movie and game sound by analyzing compressed audio streams in realtime then restoring and enriching audio back to its original performance qualities"""
N SoniqueQuickStart sqstart.exe"Quickstart for the discontinued Sonique audio player. Available via Start -> Programs"
N SonnReg SonnReg.exe"Registration for Colorific® and 3Deep® monitor calibartion sofware from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™"
X SonudMan SonudMan.exe"Added by the STARTPAGE.Q TROJAN!"
X SonudMan WNILOGON.exe"Added by the QQROB-DC TROJAN! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!"
X SonudMon SonudMon.exe"Added by the LEWOR-J TROJAN!"
U Sony Ericsson PC Suite Application Launcher.exeApplication launcher from the Sony Ericsson PC Suite for their mobile phones
U SonyPowerCfg SPMgr.exeRelated to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices
? Soot rcea.exe"??"
? sophagnt sophagnt.exe"Possibly related to Sophocles Screenwriting Software?"
X SOProc_RegSoAlertWxLiteNnAj rundll32 shell32.dll ShellExec_RunDLL [path] soproc.exe"SoftwareOnline Intelligent Downloader - ""Bundle engine to enable download of end user approved third party applications and reporting of installs for billing purposes only"". Said to monitor user's browsing habits and display pop-up ads"
X SOS SOS.exe"Added by the PHILIS VIRUS!"
? SoSyncMonitor SoSyncMonitor.exe"SuperOffice related. What does it do and is it required?"
X Sound Loader sndloader.exe"Added by the AGOBOT-BV WORM!"
X Sound services SOUND32.EXE"Added by the AGOBOT.GG WORM!"
X Sound System WinSound1.exeAdded by an unidentified VIRUS WORM or TROJAN!
X Sound Volume svchosI.exe"Added by a variant of the IRCBOT TROJAN! See here"
X soundcontrl soundcontrl.exe"Added by the GAOBOT.AFJ WORM!"
X sounddrv sndbdrv3104.exe"CoolWebSearch parasite variant"
? SoundFusion rundll32 cwcprops.cpl"Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?"
? SoundFusion rundll32 hercplgs.cpl BootEntryPoint"Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?"
? SoundFusion RunDll32 cwaprops.cpl C25CrystalControlWnd"Control panel item for a Terratec soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic ""SoundFusion"" DSP. Does it need to run at start-up every time?"
X SoundMam SVOHOST.exe"Added by the QQROB-AAL TROJAN!"
N soundman soundman.exeSystem Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel
X SoundMan soundman.exe"Added by the AGOBOT.HM WORM! Note - this is not the legitimate SiS or Realtek file of the same name that is located in the Windows or WINNT directory"
X SOUNDMAN Microsoft Help soun.pif"Added by the RBOT-AIU WORM!"
N SoundMAX SMax4.exeSystem Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
X SoundMAX SoundMAX.exe"Added by the RIZON-A WORM! Note - this file is placed in the Startup folder itself and has NO relation to SoundMax sound cards!"
X SoundMax Audio Drivers SndMAX.exe"Added by a variant of the SDBOT WORM!"
U SoundMAXPnP SMax4PNP.exeSoundMax integrated sound. Required if you have custom settings for your sound such as effects and environments
X soundmix soundmix.exe"Added by the AGENT.PGV WORM!"
X SoundMixer smvss.exe"Added by the DEDLER-G TROJAN!"
X SoundMnEx32 [path to worm]"Added by the STRATION-FW WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list