Windows Startup Item Database

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	SISSoundman	Soundman.exe	"Related to a Silicon Integrated Systems Corp (SiS) product?"
U	SiSSWLED	sisswled.exe	System Tray utility for SiS 900 network cards
X	sistrai.exe	sistrai.exe	"Added by the PROVA TROJAN!"
X	sistray	sistray.exe	"Added by the PROVA TROJAN!"
U	sistray	sistray.exe	System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem
X	Sistray32	remotehost.pif	"Added by the HOLCAS.A WORM!"
X	Sistray32	win.bat	"Added by the JUMPRED.A WORM!"
X	Sistray32	virus.exe	"Added by the TOMETA-C TROJAN!"
X	sistry	sistry.exe	"Added by the CEBE WORM!"
N	SiSUSBRG	SiSUSBrg.exe	SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP
X	sixtysix	sixtypopsix.exe	"Medload adware"
U	SK51	SK51.EXE	"SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!"
U	SK60	SK60.EXE	"SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!"
U	SK9910DM	SK9910DM.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	SKDAEMON	SKDAEMON.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	skinkers	skinkers.exe	"Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's ""Desktop Ozzy"" and Arsenal's ""Desktop Wenger"" - see here. Leave enabled if you want to receive messages"
X	sks-32	SKS32P~1.EXE	"SpyKeySpy logs keystrokes and sends the stolen information to a configurable email address"
X	Skunk	Skunk.exe	"Added by the SUNK-A WORM! Note - this file is found in the root folder (C:)
Y	SkyBlaster Scheduler	SSFSch.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
X	skynetave.exe	skynetave.exe	"Added by the SASSER.D WORM!"
X	SkynetRevenge	winlogon.scr	"Added by the NETSKY.AA WORM!"
N	Skype	Skype.exe	""Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes""
N	SkypeMate	SkypeMate.exe	"SkypeMate acts as a bridge between networks of VoIP and PSTN"
Y	SkySurfer Management Service	SmaServ.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
X	sl4 rules	rbot32.exe	"Added by the SDBOT-QC WORM!"
X	Slayhacker734	slay7383.exe	"Added by the SIKBOT-A TROJAN!"
N	SleepManager	SleepMgr.exe	"This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY
U	SlickRun	sr.exe	"""SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords)
X	slide	Iexplore.exe	"Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process
N	slimp3	SliMP3 Server.exe	"Slimp3 Server - ""presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards
N	Slingshot	SLINGS~1.EXE	"Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms
Y	slipcore	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
Y	slipgui	slipgui.exe	"User interface for Slipstream - internet acceleration through compression/decompression techniques
Y	SlipStream	slipcore.exe	"Core module for Slipstream - internet acceleration through compression/decompression techniques
X	slmss	slmss.exe	"SeekSeek search hijacker related - see here"
X	sload	sload.exe	"Win SynchroAd adware
X	slvchost32	slvchost32.exe	"Added by an unidentified VIRUS
X	sm	sa_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sf_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sm_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sr_exe.exe	"Added by the LUKUSPAM TROJAN!"
N	SM1BG	SM1BG.EXE	USB driver for downloading from within Napster to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required
N	SM1NINT	SM1NINT.exe	Cypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98
N	Sm56acl	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
X	sman	app**.tmp [ = digit]	Unidentified adware
N	Smapp	smtray.exe	System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N	Smart Card Service	ScardSvr.exe	"For Smart Card readers. Known to cause problems
U	Smart Connect Monitor	SCMon.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U	Smart Connect Setup	SCSetup.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U	Smart Keyboard	Smartkbd.exe	Netropa Smart Keyboard driver
N	Smart Label O Server	ssloserv.exe	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N	Smart Label RFViewer	SSLFVIEW.EXE	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N	Smart Start UP	PnPDetect.exe	"Part of Presto! Mr.Photo - ""an ideal program for creating
N	Smart Type Assistant	sta.exe	"Smart Type Assistant - a complex typing automation tool
U	Smartalec	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
N	SmartBarXP	SmartBarXP.exe	"SmartBarXP is a bar that runs down the side of your screen
N	sMaRTcaPs	SMARTC~1.EXE	"sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock
U	Smarthruengine	QS.exe	"Samsung smarthru software
U	SmartPCXL	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
U	SmartSync Pro	SmartSync.exe	"Related to CompanionLink Software Inc. Synchronization solutions for ACT!
N	SMax4	SMax4.exe	System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
U	SMax4PNP	SMax4PNP.exe	"SoundMax integrated sound. Required if you have custom settings for your sound
?	smbdpmi	smbdpmi.exe	"IBM Netfinity Director and Universal Management Services related. What does it do and is it required?"
Y	smc	smc.exe	Sygate Firewall
Y	smc	spfsmc.exe	Sygate Firewall
Y	SMC Service	smc.exe	Sygate Firewall
Y	SMC Service	spfsmc.exe	Sygate Firewall
X	smcserv	winsrv.exe	"Added by the AGOBOT-OU WORM!"
Y	SmcService	smc.exe	Sygate Firewall
Y	SmcServices	smc.exe	Sygate Firewall
Y	SmcServices	spfsmc.exe	Sygate Firewall
?	Smcsta.exe	Smcsta.exe	"SMC Networks wireless PCI card driver. Is it required?"
X	SmcSVR	SmcSVR.exe	"Added by the LEGMIR.JU TROJAN!"
N	Smith Micro try	smiptray.exe	Smith Micro shared files. Comes with D-Link web cam
X	SmoothView	SmoothView.exe	"TOSHIBA Zooming Utility - allows ""automatic"" zoom feature in some appications
U	SMPAutoStart	smpdemo.exe	"Smart Phone Recorder demo from KenGolf.com. Answering Machine
X	smres	smres.exe	"Added by the AGOBOT-UA WORM!"
U	SMS Application Launcher	LAUNCH32.EXE	"Microsoft Systems Management Server - used to manage computers on a network remotely"
U	SMS Client Service	clisvc95.exe	"When the SMS Client service starts on a domain controller
X	Sms System32	SmsSystem32.exe	Unidentified malware
U	SMS Win9x Message Agent	??	This program assigns a user to a Systems Management Server site
U	SMS Win9x Message Agent	SMSMsg.exe	This program assigns a user to a Systems Management Server site
Y	Smserial	sm56hlpr.exe	Motorola based modem driver
N	SMSI Loader	SMLoader.exe	"Smith Micro HotFax - fax software"
X	smsm	smsm.exe	"Added by the BANKER-CO TROJAN!"
X	smsrv	smsrv.exe	"Added by the AGOBOT-SX WORM!"
X	SMSS	smss.exe	"Added by the FLOOD.F TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""Catroot"" subfolder"
X	smss	[path to smss.exe]	"Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	smss	smss.exe	"Added by the AGENT-TR TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	smss	smss.exe	"Added by the BOROBOT-J TROJAN and variants! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	Smss	ssms.exe	"Added by the RBOT.OP WORM!"
X	smss.exe	csrss.exe	"Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	smssLevel4	smss.exe	"Unidentified malware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in Program FilesWindows Media PlayerSkinsWindowsMediaSkinDataLevel4 folder"
X	SMSSS	smsss.exe	"Added by the SDBOT.ZD WORM!"
X	SMSSS Loader	smsss.exe	"Added by the AGOBOT.MQ WORM!"
X	SMSSU	SMSSU.EXE	"Hijacker
X	smsys	Explorer.exe	"Added by the CLICKER-C TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a ""Template"" subfolder"
X	smsys	vi.exe	Adult content dialler
U	SMSystemAnalyzer	SMSystemAnalyzer.exe	"Part of the System Mechanic optimization tool from Iolo"
X	sms_msn	sms_msn.exe	Added by an unknown WORM or TROJAN!
X	sms_msn40	sms_msn40.exe	Added by an unknown WORM or TROJAN infection
U	Smt	SMT.exe	"Win-Spy keyboard logger/monitoring software - remove unless you installed it yourself"
N	SMToolbar	SMToolbar.exe	StartMake.com toolbar
X	SMTP32 Mailing Protocol	smtp32.exe	"Added by a variant of the RBOT WORM!"
?	SmWizard	SmWizard.exe	"SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?"
X	SN Messenger	msnmsgr.exe	"Added by the RBOT-AVP WORM!"
X	snapple	snapple.exe	"Added by the FORBOT-EG WORM!"
?	snbr	snbr.exe	"??"
X	snbupt	snbupt.exe	"UpSpiralBar adware"
X	sncntr	sncntr.exe	"Added by the DLUCA-I TROJAN!"
?	SNCT511	vsnct511.exe	"Unidentified ""Snapshot Viewer""- what does it do and is it required?"
X	snd332	snd332.exe	"Added by the B1LD0 AIM WORM!"
X	Sndcompat	Sndcompat.exe	"Added by the GEMA TROJAN!"
U	SNDMon	SNDMon.exe	"Part of Symantec's LiveUpate (eg
X	Sndsaver	Sndsaver.exe	"Added by the GEMA TROJAN!"
?	sndsrvc	SNDSRVC.EXE	"Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required?"
X	SNInstall	[various filenames]	"Spy Sheriff/SpywareNO malware
U	Snippet	SnippingTool.exe	"The Snipping Tool (part of the Experience Pack for Tablet PC) allows you to easily ""cut out"" anything on screen and share it with other people. The whole screen becomes an ""inkable"" surface that you can add comments to and mark up however you like. You can then save that annotated image to use later
U	SNM	SNM.exe	"SpyNoMore anti-spyware"
U	SnoopFreeUI	SnoopFreeUI.exe	"Anti-keylogging software made by SnoopFree Software"
X	SNP Generic Host Process	svchost.exe	"Added by the ZAPCHAS-O TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!"
N	snp2std	vsnp2std.exe	Digital camera related
?	snpstd	vsnpstd.exe	"Sonix PC Camera Monitor MFC Application. What does it do and is it required?"
?	SNPSTD2	vsnpstd2.exe	"CameraMonitor MFC Application. Appears to be related to a USB connection to a digital camera -is it required?"
Y	snpstd3	vsnpstd3.exe	"Sonix Inc. Camera Monitor MFC Application"
N	Snsicon	Snsicon.exe	Launches a screensaver program from Second Nature
X	SNSS.EXE	SNSS.EXE	"Added by the Nunci premium rate dialer"
?	SO5 Integrator Pass One	sointgr.exe	"StarOffice 5. See here for more details"
?	SO5 Integrator Pass Two	sointgr.exe	"StarOffice 5. See here for more details"
X	Soar	Rwon.exe	"PurityScan/Clickspring adware"
X	Social Security Agency	rpcxsocsa.exe	"Added by a variant of the RBOT WORM!"
X	Sock32	sock32.exe	"Added by the SDBOT TROJAN!"
X	Socket Utility	svchostz.exe	"Added by the DAEMONI-E TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.