sc.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	avidrv	drvsc.exe	"Detected by Kaspersky as the AGENT.PH TROJAN!"
X	CS	tsc.exe	"Cyber Security rogue security software - not recommended
U	csc	csc.exe	Command line compiler for Microsoft C# it gets installed with the .NET SDK
X	csrsc	csrsc.exe	"Added by an unidentified VIRUS
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
N	Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software
N	Drag-to-Disc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
N	DrgToDsc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
N	evntsvc	evntsc.exe	"Application Scheduler installed along with RealOne Player. Once installed
X	File System Service	wmiprvsc.exe	"Added by the AGOBOT-HZ TROJAN!"
N	HP JetDiscovery	HPJETDSC.EXE	HP JetAdmin software which monitors printing jobs on a network environment
Y	JetAdmin Discovery Indicator	HPJETDSC.EXE	"HP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry
X	Jnskdfmf9eldfd	csrssc.exe	"Added by the AGENT.EBC TROJAN!"
U	MagicDisc	MagicDisc.exe	"MagicISO - ""very helpful utility designed for creating and managing virtual CD drives and CD/DVD discs"""
X	Microsoft Corporation Svchost Service	mswsc.exe	Added by the AGENT.MAB TROJAN!
X	Microsoft Update	mvsc.exe	"Added by the SPYBOT.DAZ WORM!"
X	msavsc.exe	msavsc.exe	"Added by the AGENT.ANQ TROJAN!"
X	msc	msc.exe	"MaCatte Antivirus 2009 rogue security software - not recommended
X	msnToolbaar	msnmsgesc.exe	"Added by the RBOT.BMF WORM!"
X	mstsdsc.exe	mstsdsc.exe	"Added by the CIMUZ-CD TROJAN!"
X	NT Printing Service	spoolsc.exe	"Added by the BUZUS-K WORM!"
N	OptusNet Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software
N	RoxioDragToDisc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
U	sc	sc.exe	"Watchdog 2.0 Software - monitoring program"
X	Shell	smsc.exe	"Added by the BANCBAN-OY TROJAN!"
X	Sonic RecordNow!	smsc.exe	"Added by a variant of the SDBOT WORM!"
U	SRS Audio Sandbox	SRSSSC.exe	"SRS Audio Sandbox ""provide amazing audio immersion and maximum thump for a personalized audio experience!"""
X	strmsnmgrs	msnxmsgrsc.exe	"Added by the SDBOT.JDR WORM!"
X	strmsnmsgrs	msnmsgrsc.exe	"Added by a variant of the RBOT WORM!"
X	System Management Service	smsc.exe	"Added by the RBOT-ANN WORM!"
X	System Security Checker	ssc.exe	"Added by the IRCBOT-WI TROJAN!"
X	TS	tsc.exe	"Total Security rogue security software - not recommended
U	UniSc	Unisc.exe	McAfee UnInstaller
X	Win32 USB2 Driver	smsc.exe	"Added by the SDBOT.FO WORM!"
X	Windows 32 Rescue	win32resc.exe	"Added by the FORBOT-EU WORM!"
X	Windows Data Server	autodisc.exe	"Added by the SPYBOT-CB WORM!"
X	Windows Essensials	mvnesc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Loader Service	civsc.exe	"Added by a variant of the RBOT WORM!"
X	Windows Messenger 4.14	landisc.exe	"Added by the SDBOT-KR WORM!"
X	Windows Pool Manager	poolsc.exe	"Added by the OBOT.CH WORM!"
X	Windows Secure Connection	winsc.exe	"Added by the SDBOT.BTN WORM!"
X	Windows Services	smsc.exe	"Added by a variant of the SDBOT WORM!"
X	WINDOWS SYSTEM	smsc.exe	"Added by the MYTOB-BR WORM!"
X	Windows System Manager	smsc.exe	"Added by a variant of the RBOT WORM!"
X	Windows UDP Control Center	wksvcsc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Services	wksvcsc.exe	"Added by the ANTIAV-C TROJAN!"
X	Windows Update	winsc.exe	"Added by the BUZUS.RYI TROJAN!"
X	Windows Update Process	wmiprvsc.exe	"Added by the SDBOT-CB WORM!"
X	WOOZ	autodisc.exe	"Added by the AGENT-CPS TROJAN!"
X	WPSVC Services	wpnsc.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	WSConfiguration	spoolsc.exe	"Added by the AGOBOT-HY WORM!"
X	WSSVC	smsc.exe	"Added by the AUTORUN-AGA WORM!"
X	[12 random characters]	autodisc.exe	"IeDriver adware variant"
X	[32 random hex numbers]	tsc.exe	"Total Security rogue security software - not recommended
X	[random characters]	rsbmsc.exe	"Detected by AntiVir antivirus as the BDS/Agent.adt TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.