Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Startup Name Process Name Details
U SybaseCentral43 scjview.exe"Related to SQL Anywhere from Sybase. A comprehensive package providing data management and data exchange technologies"
X SyBot v2.1 By Sky-Dancer HPSV.exe"Added by the ZOTOB.I WORM!"
X SYDNEY [file path]"Added by the SYNEY WORM!"
X syelimS-esreveR-troppuS [filename]"Added by the LITBOT.C TROJAN!"
X Syga432te Pe432rsonal Firewall MrNo4236.exe"Added by the RBOT-AQY WORM!"
X Sygaete Personal Firewall SyGate.exe"Added by the RBOT-GLX WORM!"
X Sygate Peral Firewall Syga.exe"Added by the RBOT-AQK WORM!"
X Sygate Personal 3 svrv.exe"Added by the RBOT-XD WORM!"
X Sygate Personal Block Studio.exe"Added by the RBOT-TW WORM!"
X Sygate Personal Firewall Win32x.exe"Added by the RBOT-KZ WORM!"
X Sygate Personal Firewall system32.exe"Added by the RBOT.VI WORM!"
X Sygate Personal Firewall sysgut.exe"Added by the SDBOT.WM WORM!"
X Sygate Personal Firewall Sygate.exe"Added by the RBOT-PN WORM!"
X Sygate Personal Firewall Mcafeeupdate.exe"Added by the RBOT.YN WORM!"
X Sygate Personal Firewall Sygate32.exe"Added by the RBOT.ATW WORM!"
X Sygate Personal Firewall MSNSRV32.exe"Added by a variant of the RBOT WORM!"
X Sygate Personal Firewall service.exe"Added by a variant of the RBOT WORM!"
X Sygate Personal Firewall t1ktik.exe"Added by the RBOT-VP WORM!"
X Sygate Personal Firewall host32.exe"Added by the RBOT.ALD WORM!"
X Sygate Personal Firewall sexy.exe"Added by the RBOT-XY WORM!"
X Sygate Personal Firewall sys.exe"Added by the RBOT-ZC WORM!"
X Sygate Personal Firewall syserror.exe"Added by the RBOT.UC WORM!"
X Sygate Personal Firewall hostserv.exe"Added by the RBOT.BKO WORM!"
X Sygate Personal Firewall msnmsgrs.exe"Added by the RBOT.XN WORM!"
X Sygate Personal Firewall Sygat.exe"Added by a variant of the RBOT WORM!"
X Sygate Personal Firewall wins.exe"Added by the RBOT.AOB WORM!"
X Sygate Personal Firewall winxpstat.exe"Added by a variant of the RBOT WORM!"
X Sygate Personal Firewall Syga.exe"Added by the RBOT-AQD WORM!"
X Sygate Personal Firewall svchots.exe"Added by the RBOT.ABT WORM!"
X Sygate Personal Firewall win31243.exe"Added by a variant of the IRCBOT TROJAN!"
X Sygate Personal Firewall Start services32.exe"Added by the RBOT-MB WORM!"
X Sygate Personal Firewall Start servic.exe"Added by the RBOT-RY WORM!"
X Sygate Personal Port crss.exe"Added by the RBOT-PX WORM!"
X Sygate Personal Port Blocker volume.exe"Added by a variant of the RBOT WORM!"
X Sygate Personal Port Blocker winupdate.exe"Added by a variant of the RBOT WORM!"
X Sygate Personals Firewalls ccsrn.exe"Added by a variant of the RBOT WORM!"
U SyGateService sgserv95.exe"SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs"
X Symantec ccapp.exe"Added by the REATLE WORM! Note - this is not a Symantec file"
X Symantec Anti Virus symantec32.exe"Added by a variant of the WOOTBOT WORM!"
X Symantec Antivirus professional dfrgfrat.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional autoformat.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional dyndns.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional f0dns.exe"Added by the FORBOT-GT WORM!"
X Symantec Antivirus professional flushdns.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional for.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional regedit.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional Symantex.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional windows .exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional Winhp32.exe"Added by a variant of the FORBOT WORM!"
X Symantec Antivirus professional winudp.exe"Added by a variant of the WOOTBOT WORM! See here"
X Symantec Antivirus professional xplrer.exe"Added by a variant of the FORBOT WORM!"
X Symantec Autoscan [random filename]"Added by the RBOT-AJO WORM!"
X Symantec Client Security symclient.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X Symantec Configuration Loader ccApp32.exe"Added by a variant of the GAOBOT WORM!"
Y Symantec Core LC symlcsvc.exe"Part of Norton AntiVirus 2004. What does it do?"
X Symantec Debug Client symdebugs.exe"Added by the IRCBOT-ACM TROJAN!"
N Symantec Fax Starter Edition Port OLFSNT40.EXEOffers a virtual printer as a fax machine. Can be run via a desktop shortcut
U Symantec NetDriver Monitor SNDMon.exe"Part of Symantec's LiveUpate (eg Norton). Not required if you run manual updates but probably require if you leave them to run automatically. Also if one runs a small office network and SNDMon is disabled on one of the computers ? then other computers disappear from the network for this computer including shared devices like printers and scanners. Hence the ""U"" recommendation"
U Symantec NetDriver Warning SNDWarn.exePart of Symantec Live Update - displays the warning when you need to update the firewall database
U Symantec PIF AlertEng PIFSvc.exe"Symantec LiveUpdate Notice Service"
X Symantec Secure Server svrhost.exe"Added by the IRCBOT-UB TROJAN!"
X Symantec Security symantec32.exe"Added by the RANDEX.PR or RANDEX.YR WORMS!"
X Symantec Security Addon nvsvc.exe"Added by a variant of the AGOBOT/GAOBOT WORM! Note - do NOT confuse with the legitimate NVIDIA Driver Helper Service file of the same name as described here"
X Symantec Security Routine Addon for Microsoft Windows navpxaw32.exe"Added by the AGOBOT-GJ TROJAN!"
X Symantec Service ccApp.exe"Added by the AKHER.D WORM! Note - this is also not the valid Norton AV file with the same filename"
X SymantecFilterCheck svhost.exe"Added by the BANKER-EEO TROJAN!"
X SymantecFilterCheck bsyys.scr"Added by the BANLOAD.DZC TROJAN!"
X SymAV SymAV.exe"Added by the NETSKY.U WORM!"
U SymKeepAlive CKA.exe"Part of Norton SystemWorks 2003 - keeps a dial-up modem connection alive"
X Symlcs [path to file]"Added by the YASPY-A TROJAN!"
X Symmetrical Network symmec.exe"Added by the DELBOT-N WORM!"
X SymRun N/A"Added by the KANGAROO-A TROJAN!"
X SymRun ccApps.exe"Added by the KAGEN-A TROJAN!"
N SymTray - Norton SystemWorks SYMTRAY.EXEKeeps all System Tray icons for Norton SystemWorks together to reduce clutter. SystemWorks includes Norton Anti-Virus Norton Utilities and Norton CleanSweep - mentioned elsewhere here. Personally I only have Norton eMail Protect running which doesn't need SymTray
U Synaptics Pointing Device Driver SynTPEnh.exeSynaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll
U Sync Data Hndsync.exe"Pocket Real Estate - mobile synchronization manager"
X Sync Server drwatsoon.exe"Added by the WATSOON.A TROJAN!"
U Sync-It Syncit.exe"Sync-It - synchronizes the system clock with time servers on the internet"
U SyncAgent syncagent.exe"Ghost Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X Synchronization Manage rservers.exe"Added by the FORBOT-FM WORM!"
N Synchronization Manager mobsync.exe"MS Syncrhonization Manager - updates the network copy of materials that were edited offline such as documents calendars and e-mail messages. Find more information about its use here"
X syncman winsync.exe"Added by the MANCSYN-A TROJAN!"
X SyncManager msorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
X SyncMon adslcomdos.exe"Added by the CLUNKY-A TROJAN!"
X SyncMon fixcomdos.exe"Added by the CLUNKY-B TROJAN!"
? SynSetup SynTP.tmp RunOnce.exe"Probably associated Synaptics touchpads on laptops as for the SynTPEnh and SynTPLpr entries but what does it do and is it required?"
X Syntax windows32.exe"Added by the SDBOT.CQ WORM!"
X Syntax Script systacq.exe"Added by the SDBOT.AI WORM!"
U SynTPEnh syntpenh.exeSynaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll
Y SynTPLpr syntplpr.exeSynaptics touchpad driver helper. Required for touchpad features to work
U SynTPStart SynTPStart.exeSynaptics Pointing Device starter belonging to Synaptics Pointing Device Driver
X sys regedit /s sys.regHijacker
X sys regedit sysdllwm.reg"CoolWebSearch parasite variant - also detected as the FEMAD-L TROJAN!"
X Sys Ren SysRen.exe"Part of FlashEnhancer adware"
X sys************* [* = random digit] sys*************.exe [* = random digit]"WINBO adware"
X Sys**.exe [* = random char] Sys**.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X Sys**32.exe [* = random char] Sys**32.exe [* = random char]"CoolWebSearch/HomeSearch adware - for examples see this log"
X Sys-Stat wuapdxe.exe"Added by the SDBOT.HK WORM!"
X sys008 sys008.exe"Hijacker also detected as the STARTPA-GK TROJAN!"
X sys009 sys009.exe"Added by the STARTPA-ZB TROJAN!"
X sys201 sys209.exe"Added by the STARTPA-ZY TROJAN!"
X Sys29 win***32.exe [* = random char]"EliteBar adware"
X sys32 sys32.exe"Added by the FLUX.E TROJAN!"
X sys32 sysx32.exe"Added by the KVEX-A VIRUS!"
U sys32cmd sys32win.exe"Active Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X sys32dll sys32dll.exe"Added by the AIMDES.B WORM!"
U sys32sql sys32win.exe"Active Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X sys33 sys33.exe"Added by the AGOBOT-WJ WORM!"
X SysA win***32.exe [* = random char]"EliteBar adware"
U SysAgent SysAgent.exeSYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
X SysAI SysAI.exe"AproposMedia adware"
X SysATW sysatw.exe"Added by the VANEBOT-AM WORM!"
U SysBkup [path to file]"Keyspy keystroke logger/monitoring program - remove unless you installed it yourself!"
X SysBoot syskernel.exe"Added by the AUTORUN-EY WORM!"
U Sysbot sysbot.exe"Spector - spying (or monitoring) software to record internet activity"
X syscfg syscfg32.exe"Added by the KWBOT.S WORM!"
X syscfg34.exe syscfg34.exe"Added by the ELECTRON WORM!"
X Syscheck win.htaBrowser hijacker
X syscheck iexplorer.exeAdded by the AGENT.DM TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
X sysclx ntldrt.exe"Added by the JLOK-A WORM!"
X syscm Syscm.exe"Vanish adware"
? SysComp mssdnl.com"Unknown but suspect as *.com are not usually run at start up and the name isn't recognized"
X syscon syscon.exe"Added by the APRILCONE.A WORM!"
X syscon lptt01 syscon.exe"RapidBlaster variant (in a ""Syscon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X syscon ml097e syscon.exe"RapidBlaster variant (in a ""Syscon"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X sysconfig iexplorer.exe"Added by the CULT.C WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X SysConfig syscfg35.exe"Added by the KAZMOR.C WORM!"
X SysConfig wincfg32.exe"Added by the SDBOT.ZD WORM!"
U Sysconfig Stealth KeySpy.exe"StealthKeySpy - keystroke logger/monitoring program - remove unless you installed it yourself!"
X Syscpy Syscpy.exe"Firewall-bypassing proxied spam relayer. Detected by Symantec as the HOGLE TROJAN!"
X SysCtl sysctl.exe"Added by the AOK TROJAN!"
X Sysctrls procdll.exe"Added by the WEEDBOTZ.14 TROJAN!"
X Sysctrls winupdate.exeAdded by an unidentified WORM or TROJAN!
X Sysctrls mscntrl.exe"Detected by Kaspersky as the KOLABC.BB WORM! See here"
X Sysctrls Sysctrls.exe"Detected by Kaspersky as the AGENT.AWZ TROJAN! See here"
X Sysctrls win32dll.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
X Sysctrls32 sevchost.exe"Detected by Kaspersky as the RBOT.ADF BACKDOOR! See here"
X SysCVMS.exe SysCVMS.exe"Added by the SMALL.CBA TROJAN!"
X sysdat.dll sysdat.dll.exeAdded by the NISHICA 1.1 TROJAN!
X SysData [path to file]"Added by the RANCK-BA TROJAN!"
X SysDeskqqfx qqfx.exe"Added by the QQPASS.H TROJAN!"
X SysDeskqqfx Runddll32.exe"Added by the CHANGGAME TROJAN!"
X SysDesktop fswanQQ.exe"Added by the QQSEND-A TROJAN!"
X sysdir winrun.exe"Added by the WINBUR.B WORM!"
X sysdll [trojan filename]"Added by the HUGESOT TROJAN!"
X Sysdpt sysdpt.exe"CRYPT trojan downloader"
X sysdxvid sysdxvid.exe"Added by the DLUCA-S TROJAN!"
X sysemls sysem.exe"Added by a variant of the SDBOT WORM!"
X SysEQ svclgx32.exe"Added by the IRCBOT-AC TROJAN!"
X sysfiler sysfiler.exe"Added by the RETSAM TROJAN!"
X SYSfit SYSfit.exe"AdShooter adware variant"
X sysflg32 sysflg32.exe"Added by a variant of the CRYPTER.C TROJAN!"
X sysformat sysformat.exe"Added by the BAGLE-BK WORM!"
X sysfrcx sysfrcx.exe"Added by the KEYLOG-SCLOG TROJAN!"
X Sysgate Personal Firewall syst3ms.exe"Added by a variant of the IRCBOT TROJAN!"
X syshelp syshelp.exe"Added by the LOVGATE.C WORM!"
X syshost syshost.exe"Added by the VB-DVZ TROJAN!"
X sysin [path to file]"Added by the DSRC-A TROJAN!"
X sysinfo sysinfo.exe"Added by the BEDRILL TROJAN!"
X sysinfo.exe sysinfo.exe"Added by the BEAGLE.V WORM!"
X SysInit svchost.exe"Added by the STARTPA-BD TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Program Files/Common Files folder"
X SysInit wininit32.exe"Added by the XABOT WORM!"
X sysinit services.exe"Added by the NEWLFRM-A TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in an ""golumm"" subfolder"
X Sysino lsess.exe"Added by the FORBOT-BF WORM!"
X sysint16 sysint16.exe"Added by the CRYPTER.A TROJAN!"
X sysinter ADIRSS.EXE"Added by the AGENT.JVJ TROJAN!"
X Syskey sysinit.exe"Added by the BEAGLE.AX WORM!"
X Syslib Syslib.exeAdult content related downloader trojan
X Syslog lptt01 Syslog.exe"RapidBlaster variant (in a ""Syslog"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X Syslog ml097e Syslog.exe"RapidBlaster variant (in a ""Syslog"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X syslogin.exe syslogin.exe"Added by the BAGZ-B WORM!"
U Sysman Sysman.exe"KeyTrap is a surveillance software program that records all keyboard activities. Uninstall this software unless you put it there yourself"
X SysManager Manager.EXE"Added by the DAGGER.140 TROJAN!"
X sysme sysme.exe"Added by the PSW_STEALER_C TROJAN!"
X sysmem mmsete.exe"Added by the NOPIR.C WORM!"
X sysmem outlookrem.exe"Added by the NOPIR-C WORM!"
X SysMemory manager mdms.exe"Added by the CIMUZ-D TROJAN!"
U SysMetrix SysMetrix.exe"SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics"
X sysMett1 explorer.exe"Added by the LEGMIR-Y TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X sysmini sysmini.exe"Added by the ADLOAD.DD TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list