sm

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
?	.NET config	sysmon32.exe	"??"
X	.nvsvc	smss.exe	"Added by the IRCBOT-FP TROJAN! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	.nvsvcb	smssb.exe	"Added by the BOXED.CG TROJAN!"
X	27	msm32.exe	"Added by the SLSORVE-E TROJAN!"
U	Absolute StartUp monitor	ASMon.exe	"Absolute Startup - startup monitor from F-Group Software"
U	AccessManager	AccessMgr.exe	"Part of SmartPipes SecureSite software. ""SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management
X	AccessMedia P2P Loader	amp2pl.exe	"My AccessMedia toolbar related
?	Acer Empowering Technology Monitor	SysMonitor.exe	"Part of Acer Empowering Technology. What does it do and is it required?"
X	AdobeReaderPros	sysmsn.exe	"Added by the RBOT-BGH WORM!"
Y	ADSMTray	ADSMTray.exe	ASUS Data Security Manager provides password protected data encryption on ASUS notebooks
X	afmsmsgs	afmsmsgs.exe	"Added by the DLOADR-CUX TROJAN!"
U	Agere SoftModem Messaging Applet	AGRSMMSG.exe	Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem
U	AGRSMMSG	AGRSMMSG.exe	Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem
X	AltnetPointsManager	points manager.exe	"Altnet TopSearch adware"
X	AntiSpywareMaster	asm.exe	"AntiSpywareMaster rogue security software - not recommended
X	AntiVir	smss.exe	"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%"
U	AntiWindowsMessenger	AntiMsMsg.exe	"Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory"
U	AOL TopSpeedMonitor	aoltsmon.exe	"AOL's TopSpeed ""web-acceleration technology speeds up your web-browsing experience by storing and reusing elements of web pages that you visit
X	ApplicationProtocolRun	smsbvl32.exe	"Added by the IRCBOT-CX TROJAN!"
X	Asia	easm.exe	"PurityScan adware"
U	ASM	ASMonitor.exe	"Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses
U	Asmw Soft Popups Burner	popups burner.exe	"Popup blocker
U	ASUS SmartDoctor	VGAProbe.exe	ASUS video card fan/thermal monitor
U	ATISmart	ati2s9ag.exe	"ATI's ""SMARTGART""
X	AudioMan	Explorer.sm1	"Added by the HUPIGON.IFZ BACKDOOR!"
X	Audoi Device Loader	smssv.exe	"Added by the AGOBOT-ZY WORM!"
X	auloadplx	mplprogsm.exe	"Added by the SLAPER.K TROJAN!"
U	Autoroute SMTP	AutoSmtp.exe	"Autoroute SMTP - ""automatic switching between SMTP servers depending on what network you are currently working in."" You need to have two Internet service providers"
X	AutoUpdate	smss.exe	"Added by WINSPY.88! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\debug64"
X	avnort	msmbw.exe	"Added by the SERFLOG.A WORM!"
X	AvSer	dsm.exe	"Added by the SERFLOG.B WORM!"
X	AvSer	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	AvSer	svosm.exe	"Added by the SERFLOG.B WORM!"
X	Awoa	smmo.exe	"PurityScan adware"
X	b99	msmm.exe	"ClientMan parasite variant"
X	Backup One	smbguard.exe	"Added by the SDBOT-MI WORM!"
X	bal	SYSMONMS.EXE	"Added by the FAKEALERT TROJAN!"
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
X	BedreigingsMonitoor	pgs.exe	"BedreigingsMonitoor rogue security software - not recommended. A member of the AVSystemCare family"
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
X	blah service	smnp.exe	"Added by the RBOT.IZ WORM!"
X	BootClean	smartdrv.exe	"Added by the LURKA-A VIRUS!"
?	BsMnt	BsMnt.exe	"Related to a Bison webcam - which is used on notebooks from a number of manufacturers including Acer
X	cdmmslpo	klpllsm.exe	"Added by the TEDIJINI-A TROJAN!"
X	cesmain.dll	"Rundll32.exe [path] cmail.dll	Rundll32"
U	ChangeICON	SPMSMON.EXE	Card reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem
X	ChansonsMP3	"rundll32.exe MSA64CHK.dll	DllMostrar"
U	CHIPDRIVESmartcardManager	SCMgr.exe	"ChipDrive Smartcard software"
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
X	Client Server Runtime Process	smmss.exe	"Backdoor TROJAN! Possible SDBOT-GEN variant"
?	CLMLServer for HP TouchSmart	CLMLSvc.exe	"Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required?"
?	CM-SmWizard	SmWizard.exe	"SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?"
X	cmonitor	pasmon.exe	"SystemDoctor rogue security software - not recommended
X	cmssSystemProcess	csmss.exe	"Added by the AGENT-CO TROJAN!"
X	cmssSystemProcess	mcsmss.exe	"Added by the PROXYSER-F TROJAN!"
X	cmssSystemProcess	csms.exe	"Added by the AGENT-Y TROJAN!"
X	CnsMax	Internat.exe	"Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%"
X	CnsMin	"Rundll32.exe [path] CNSMIN.DLL	Rundll32"
N	COMSMDEXE	comsmd.exe	3Com tray icon
X	Config Loader	SYSMGR.EXE	"Added by the AGOBOT.C WORM!"
X	Configuration Loader	smss32.exe	"Added by the AGOBOT.MB WORM!"
X	Configuration Loader	smsai.exe	"Added by the SDBOT-YE WORM!"
X	Connector	sms.EXE	"Added by the ExDial-B premium rate adult content dialer"
N	control panel	smctrlw.exe	System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X	ControlServiceMgr	csmsv.exe	"Added by the AGENT-XC TROJAN!"
X	CrossMenu	CrossMenu	Toshiba CrossMenu Utility - allows the user to create their own menus
U	CrossMenu	CrossMenu.exe	Toshiba CrossMenu Utility - allows the user to create their own menus
X	crsmons	iomssls.exe	"Added by the BACKDR-AU TROJAN!"
X	csm Win Updates	csm.exe	"Added by the ZOTOB.B WORM!"
X	csrss	msmsgs.exe	"Added by the CHODE-J BACKDOOR! Note - this malware uses MSN Messenger (which is located in %Program Files%\Messenger) in the background to propogate itself"
X	csrss	ssms.exe	Added by an unidentified malware
X	dcsm	dcsm.exe	"Part of the PrivacyProtector and DriveCleaner rogue security tools"
X	Debug	SMSS.exe	"DreamAd adware. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
U	Dell PanelMgr	SSMMgr.exe	"Monitors ink levels
X	devenv	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	DHCP	smss.exe	"Added by the WINSPY.AG TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display"
U	dRMON SmartAgent	SmartAgt.exe	"Part of the network monitoring program group for 3Com NIC cards. See here for more info"
X	DsmSer	dsm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	svosm.exe	"Added by the SERFLOG.B WORM!"
X	DsmSer	sysup.exe	"Added by the SERFLOG.B WORM!"
U	Easy-PrintToolBox	BJPSMAIN.EXE	A utility to launch the applications that are bundled with a Canon bubblejet printer
X	EbatesMoeMoneyMaker	wjview ...Code	"Ebates adware"
X	EbatesMoeMoneyMaker0	EbatesMoeMoneyMaker0.exe	"Ebates adware"
X	ebmmm	ebatesmmmv.exe	"Ebates adware"
X	ELNKProxy	smproxy.exe	"Surfmonkey adware"
?	ENSMIX32.EXE	ENSMIX32.EXE	"Sound card driver. Is it required?"
U	Enterprise Harmony	rsMenu.exe	"Enterprise Harmony 99 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000"
U	Enterprise Harmony '99	rsMenu.exe	"Enterprise Harmony 99 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000"
X	Ethernet Drivers	smrrs.exe	"Added by the RBOT-AAK WORM!"
Y	eTrustCIPE	ezdsmain.exe	eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior
X	EventApplicationCmd	smschk.exe	"Added by the IRCBOT-AO TROJAN!"
U	EZSMART App	ezsmart.exe	EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported
U	F-Secure Management Agent	FSMA32.EXE	"F-Secure antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products"
Y	F-Secure Manager	FSM32.EXE	"F-Secure antivirus - carry out scheduled virus scans automatically"
X	fastsmell	fastsmell.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
U	FaxCtrl.exe	ASMediaProxyServer.exe	"Part of Avaya's Contact Center Express - ""a multi-channel
?	FBI	FBISM.exe	"Compaq related but what does it do?"
X	FireFox Service Drivers	ssmss.exe	"Added by a variant of the SDBOT WORM!"
N	fkSysMon	fksysmon.exe	"fkWrae SysMon - system monitor - ""displays the current memory consumption
X	G3	GSMedia3.exe	"Malware downloader - detected by Kaspersky as the VB.UX TROJAN!"
U	GARO Status Monitor	cnwism.exe	Print monitor for certain Canon printers
N	Get Smile	getsmile.exe	Puts smilie faces in your E-mail. Run manually when required
X	gimmysmileys	gimmysmileys.exe	"GimmySmileys adware"
X	GLSetT32	smsiexec.exe	"Added by the OPTIX-D TROJAN!"
X	GMedia2	GSM2.exe	"Malware downloader - detected by Kaspersky as the VB.UX TROJAN!"
X	GMedia2	GSMedia3.exe	"Malware downloader - detected by Kaspersky as the VB.UX TROJAN!"
X	GotSmiley	GotSmiley.exe	"GotSmiley - ad supported program that provides the user with smileys for use in emails. Not recommended. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	Graphic Driver	smss32.exe	"Added by a variant of the RBOT WORM!"
U	HostsMan	hm.exe	"""HostsMan is a freeware application that lets you manage your Hosts file with ease"". It is mainly intended to block specific domains (mostly advertising servers) by redirecting them to localhost
N	HP Photosmart Premier Fast Start	hpqthb08.exe	"Improves the startup time of HP Image Zone. If you disable it
Y	ICSMGR	ICSMGR.EXE	Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers
X	IE6	ssmss.exe	"Added by the GAOBOT.DXO WORM!"
X	info	smss.exe	"Added by the VB.EIW WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\inetsrv"
X	Intec Service Drivers	msmsgrs.exe	"Added by the SDBOT-ADN WORM!"
X	Intec Service Drivers	msmsgredss.exe	"Added by the SDBOT-AGL WORM!"
X	InteliSys	smss.exe	"Advertisingvision adware. Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	internet	smss.exe	"Added by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
N	iolo Utility Bar	SMUtilityBar.exe	"Iolo System Mechanic Utility Bar - can be launched manually"
X	ISMModule	ISMModule.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMModule2	ISMModule2.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMModule3	ISMModule3.exe	"Internet Speed Monitor C adware"
X	ISMModule4	ISMModule4.exe	"Internet Speed Monitor A adware related"
X	ISMModule6	ISMModule6.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMModule7	ISMModule7.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMModule8	ISMModule8.exe	"Internet Speed Monitor C adware related"
X	ISMPack5	ISMPack5.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMPack6	ISMPack6.exe	"Internet Speed Monitor C adware related - see example here"
X	ISMPack7	ISMPack7.exe	"Internet Speed Monitor C adware"
X	ISMPack8	ISMPack8.exe	"Internet Speed Monitor C adware related - see example here"
X	Java Application	vssmf32.exe	"Added by the SPIGOT BACKDOOR!"
X	Kernel Safe Mode	smss.exe	"Added by the 78CRACK-A TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	KernelFaultChk	sms.exe	"Added by the DEADHAT WORM! Do not confuse with the valid ""kernelfaultcheck"" which runs ""dumprep 0 -k"" or ""dumprep 0 -u"""
X	KernellApps32	smss.exe	"Added by the BANCBAN-AN TROJAN! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	Layersecurity Servicemonitor	LSSMON.EXE	"Added by the BANKER.ZAQ TROJAN!"
U	LCD Smartie	LCDSmartie.exe	"""LCD Smartie is software for Windows that you can use to show lots of different types of information on your LCD/VFD."" Typically used by the PC modding community to display statistics such as CPU temp
X	LiveUpdate	smss.exe	"Added by the VB.BAU BACKDOOR! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\isas"
X	loadMefs	smss32.exe	"Added by the FLOOD-EL TROJAN!"
U	Logitech ClickSmart	ISStart.exe	"Installed with Logitech's QuickSmart webcam software. The exact purpose of this startup entry is unknown at present
U	Logitech ClickSmart	LogiTray.exe	"System Tray access to My Logitech Pictures
U	Logitech ClickSmart	LVCOMS.EXE	Entry added when you install Logitech ClickSmart webcam software. It allows the camera to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required
Y	LogitechCommunicationsManager	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
X	LosMejoresMP3	"rundll32.exe MSA64CHK.dll	DllMostrar"
N	Lotus QuickStart	smartctr.exe	"Lotus central application
X	lsmass	lsmass.exe	"Added by the WALLOP-B TROJAN!"
X	lsmss.exe	lsmss.exe	"Added by the PROXY-GG TROJAN!"
N	LTSMMSG	LTSMMSG.exe	"Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook
X	LTSMSG	Shell32.exe	"Added by the LEMIR.B TROJAN!"
X	ltwob	msmbw.exe	"Added by the SERFLOG.A WORM!"
X	mackfy.exe	msms.exe	"Added by the SDBOT-DID WORM!"
X	ManageProtocolCtrl	csmsv.exe	"Added by the LOOKSKY.B TROJAN!"
X	mbsmon32	mbsmon32.exe	"Micro Bill Systems Billing Software - ""is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet"""
X	mbssm32	mbssm32.exe	"Micro Bill Systems Billing Software - ""is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet"""
X	mbssm32	monstu.exe	"Detected by AVG as the AGENT.CNM TROJAN - see here"
U	MDSA Sentinel X	smss.exe	"SentinelX surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the smss.exe process which is always located in %System%. This one is located in %ProgramFiles%\MDSA Software"
X	Message Queuing	msmqs.exe	"Added by the FREEFORS TROJAN!"
N	Messenger	msmsgs.exe	"Windows Messenger instant messenger utility included with Windows 2K/XP. Available via the Start menu. Go to Windows Messenger → Tools → Options → Preferences and uncheck ""Run this program when Windows starts"""
X	Messenger Gateway	msmgs.exe	"Added by the AGENT-IGK TROJAN!"
X	Messenger Service	msmsgs.exe	"Added by the SDBOT-ZB WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
U	MFP PanelMgr	SSMMgr.exe	"Monitors ink levels
X	MicroedSoft Toolbar	Smoked.exe	"Added by the RBOT-ALN WORM!"
X	Microsft Security Monitor Process	mssmppp.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsft Security Monitor Process	mssmpp.exe	"Added by the SDBOT-DJW WORM!"
X	Microsoft	ssmss.exe	"Added by the RBOT-FZF WORM!"
X	Microsoft	msmsger.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft (R) Windows Network Security Management Service	nsms.exe	"Added by the RANKY.LC TROJAN!"
X	Microsoft CSRSS Service	nsmscrs.exe	"Added by the RBOT-BPT WORM!"
X	Microsoft DirectX	rasmngr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Driver Setup	sysmngsr322.exe	"Added by the BUZUS-AS TROJAN!"
X	Microsoft Excele	msmsgs.exe	"Added by the AGENT.AJQG TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Microsoft Internel Corporat	smbvhost.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Internet Services	Smss32.exe	"Added by the RBOT.MS WORM!"
X	Microsoft Macro Protection Subsystems	msmacroprotxz.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Macro Protection Subsystems	Msmacroprot32.exe	"Added by the RBOT.KN WORM!"
X	Microsoft Manager	msmanager.exe	"Added by the MYTOB.LF WORM!"
X	Microsoft Media player 9	msmedia32.exe	"Added by the RBOT-ADO WORM!"
X	Microsoft Message Machine	msmesg32.exe	"Added by the SPYBOT.BI WORM!"
X	Microsoft Messenger Management Controls	msmgmctl.exe	"Added by the RBOT-APA WORM!"
X	Microsoft Messenger Service	msmsg32.exe	"Added by the RBOT.BOK WORM!"
X	Microsoft Messenger XP	MSMSN32.exe	"Added by the RBOT-ZP WORM!"
X	Microsoft Msn Messenger	msmsgs.exe	"Added by the BUZUS.AYX TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Microsoft MSN Services	msnsm.exe	"Added by the RBOT.ARV BACKDOOR!"
X	Microsoft Office	MSMSGR.exe	"Added by the GAOBOT.BB WORM!"
X	Microsoft Office	msmsgr.exe	"Added by the GAOBOT.BB WORM!"
X	Microsoft Oftice	msmsgs.exe	"Added by the IRCBOT.ALT WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Microsoft Security Monitor Process	mssmp.exe	"Added by the RBOT-FUB WORM!"
X	Microsoft Security Monitor Process	mnsmp.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	msmp.exe	"Added by the RBOT.GKQ WORM!"
X	Microsoft Security Monitor Process	mssm32.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Security Monitor Process	mssm32.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft Security Monitor Process	mssmpi32.exe	"Added by a variant of the RBOT WORM! See here"
X	Microsoft Services	Smss32.exe	"Added by the RBOT-AD WORM!"
X	Microsoft Services	msmpserv.exe	"Added by the IRCBOT.BKA BACKDOOR!"
X	Microsoft Session Manager Subsystem	smss.exe	"Added by the KALEL-D WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	MicroSoft sys32	sysmsgr32.exe	"Added by a variant of the SPYBOT WORM! See here"
X	Microsoft System Checkup	ntsysmgr.exe	"Added by the DONK.S WORM!"
X	Microsoft System Checkup	ntsysman.exe	"Added by the SDBOT-QW WORM!"
X	Microsoft System Checkup	libsysmgr.exe	"Added by the SDBOT-CAF WORM!"
X	Microsoft System Checkup	sysmgr.exe	"Added by the SDBOT-OO TROJAN!"
X	Microsoft System Firewall 2006.2	msmsgr.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft System Services	msmsgr.exe	"Added by the RBOT-ZH WORM!"
X	Microsoft Update	mssmgrd.exe	"Added by the SDBOT.JT WORM!"
X	Microsoft Update	Smss32.exe	"Added by the RBOT-CB WORM!"
X	Microsoft Update Machine	psmszw.exe	"Added by the KOLABC.CC WORM!"
X	Microsoft Virual Machine	sms.exe	"Added by the RBOT-SP WORM!"
X	Microsoft Windows GUI	msmonk32.exe	"Added by the SDBOT-PE WORM!"
X	Microsoft Windows Session Manager Subsystem	smss.exe	"Added by the PROXYSER-R TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Microsoft's System Module	Sysmodule.exe	"Added by the BDOOR-FJ BACKDOOR!"
X	Microsoft(R) System Manager	sysmgr.exe	"Added by the AGENT.QTR TROJAN!"
X	MicrosoftOEM	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	Microsoft� System Mapper	SysMap.exe	"Added by the MAPSY TROJAN!"
X	Mismo	win32x.exe	"Added by the RBOT-JP WORM!"
X	mlibsysmc	comzcinc.exe	"Added by the SDBOT-CXS WORM!"
N	Motive SmartBridge	mpbtn.exe	"System tray icon for the Virtual Assistant from AT&T Broadband
N	Motive SmartBridge	MotiveSB.exe	"System tray icon for the Virtual Assistant from AT&T Broadband
N	Motive SmartBridge	BTHelpNotifier.exe	"System tray icon for help from BT Broadband
U	MPEO	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
X	MS Config Stream	msasm.exe	"Added by the AGOBOT-BA WORM!"
X	MS MSN Menssenger 7.0	MSMSN7.exe	"Added by the RBOT-ACA WORM!"
X	MS Unix Binary	msmq2inst.exe	"Added by the RBOT-YF WORM!"
X	MSFWAVTSM	FTPDev.exe	"Added by the RBOT-ACF WORM!"
X	msgsm32	msgsm32.exe	"Added by the RBOT-ASG WORM!"
X	MSInstall	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	msm	msm.scr	"Added by the BANKER-EHJ TROJAN!"
X	msmacro32	msmacro32.exe	Identified as a variant of the AGENT.QB TROJAN!
X	msmacro32	msmacro64.exe	"Added by a variant of the BACKDOOR-DOQ TROJAN!"
X	MsManager	msmgr32.exe	"Added by the YAHA.AF WORM!"
X	msmanager32	msmngr32.exe	"Added by the RANDON-R (or WOMANIZ.A) WORM!"
X	msmautoprotect	msmssgs.exe	"Added by the BIFROSE-AJ TROJAN!"
X	msmc	mscpbo.exe	"ClientMan parasite variant"
X	msmc	msgdmf.exe	"ClientMan parasite variant"
X	msmc	msongn.exe	"ClientMan parasite variant"
X	msmc	msmc.exe	"ClientMan parasite variant"
X	msmc	ms***.exe [ = random char]	"ClientMan parasite variant"
X	MSMcAfeee	Avsynmgr32e.exe	"Added by the FRAMAR TROJAN!"
X	MSMcAfeeh	Avsynmgr32h.exe	"Added by the FRANGO TROJAN!"
X	MSMcAfeeS	Avsynmgr32S.exe	"Added by the VOLAC or VOLAC.DR TROJANS!"
X	MSMessnger	msnupd.exe	"Added by the RBOT-ADY WORM!"
?	msmgr	msmgr.exe	"??"
X	msMGR	rtkmsg.exe	"Added by the SDBOT-BPY WORM!"
X	Msmgt	msmgt.exe	"Total Velocity adware/hijacker"
X	msmmi	msmmi.exe	"Added by the AGENT.RFR TROJAN!"
X	MSMNTGNT	MSMNTGNT.EXE	"Added by the BANKER-IE TROJAN!"
X	MSMNTJBE	MSMNTJBE.EXE	"Added by the BANCOS-EF TROJAN!"
X	MSMNTJNG	MSMNTJNG.EXE	"Added by the GRABER-G TROJAN!"
X	MSMNTMTS	MSMNTMTS.EXE	"Added by the BANKER-GZ TROJAN!"
X	msmon	msmon.exe	"Added by a variant of the GEMA.D TROJAN!"
X	MsMon32	MsMon32b.exe	"Added by the SDBOT.O BACKDOOR!"
X	MsMovies	MsMovies.exe	"Added by the ALCRA-E WORM!"
?	MsmqIntCert	regsvr32 /s mqrt.dll	"Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?"
X	MSMSGNER	[4-8 random letters].exe	"Added by the FOWLDO-GEN TROJAN!"
X	MSMSGNER	zzgf.exe	"Added by the PWS-CCB TROJAN!"
X	MSMSGNER	fgozmox.exe	"Added by the AGENT-EBJ BACKDOOR!"
X	msmsgr	msmsgss.exe	"Detected by Kaspersky as the RBOT.AJJ WORM!"
N	MSMSGS	msmsgs.exe	"Windows Messenger instant messenger utility included with Windows 2K/XP. Available via the Start menu. Go to Windows Messenger → Tools → Options → Preferences and uncheck ""Run this program when Windows starts"""
X	Msmsgs	Msmsgs.exe	"Added by the SILLYFDC-AP WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	MSMsgs	msmessgs.exe	"Added by the SMALL-EW TROJAN!"
X	msmsgs	msmsgs.exe	"Added by the SCLOG-AL TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	MSMSGS	winlogon.exe	"Added by the BRONTOK-BS WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS"
X	msmsgs.exe	IEXPLORE.EXE	"Added by the VB.FQX TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%"
X	MsMsgSrv	msmsgsrv.exe	"Added by the CQO TROJAN!"
X	msmsgss	[path to trojan]	"Added by the RANKY.G BACKDOOR!"
X	MSMsgSvc	MSMSGSVC.exe	"Browser hijacker
X	msmsngr	msmsngr.exe	"Added by the DOPBOT-B WORM!"
X	MSN	smsss.exe	"Added by the BUZUS-D WORM!"
X	MSN Configuration Loader	msmsncfg.exe	"Added by the AGOBOT-KX BACKDOOR!"
X	MSN messanger	msnmsgsm.exe	"Added by the RBOT-FMP WORM!"
X	MSN Messanger	msnmsgsmn.exe	"Added by the RBOT-FOQ WORM!"
X	MSN Messenger	Reosmsngr.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN MESSENGER	msmmsgr.exe	"Added by the KELVIR.Q WORM!"
X	MSN Messenger	msmsgs.exe	"Added by the ZLOB TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	MSN Messenger User Controls	msmsgr.exe	"Added by the KELVIR.HI WORM!"
X	MSN MMISSENGER	mssmmspgr.exe	"Added by the KELVIR.AJ WORM!"
X	MSN Registry loader	msmnwin.exe	"Added by the KELVIR.FK WORM!"
X	MSN Serv	msmsnserv.exe	"Added by the IRCBOT.AVF BACKDOOR!"
X	MSN Server	msmsnserver.exe	"Added by the IRCBOT.AUS BACKDOOR!"
X	Msn Update Manager (Sp2)	MSMSGS.EXE	"Added by the AGOBOT-NL WORM! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	msnsmgr	MsnMsr.exe	"Added by the LOONY-N TROJAN!"
X	mssoul	msmscc2.exe	"Added by the DAPIZL.A banker WORM! (A ""banker worm"" is designed to pillage banking information and send it back to the perpetrators!)"
X	mssoul	msmscc.exe	"Added by the BANCOS.HKT TROJAN!"
X	mssyslanhelper	msmsgri32.exe	"Added by the RANDEX.D WORM!"
X	MSVsmt	rpcxctx.exe	Added by an unidentified WORM or TROJAN!
X	MsWindows SysDate	sysmsvc.exe	"Added by the SPYBOT.FCD WORM!"
X	MULTIMEDIA KEYBOARD88	smss.exe	"Added by the SILLYFDC WORM! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
N	MutexServiceEx	Sys32Smm.exe	"Webroot Sofware's discontinued ""Privacy Master"""
?	mxomssmenu	maxmenumgr.exe	"Related to Maxtor's One Touch series of external hard drives. What does it do and is it required?"
X	My App	SMSSvc.exe	"Added by the NEGASMS.A TROJAN!"
X	MyAccessMedia	tmp*.exe [ = random char/digit]	"My AccessMedia toolbar related
X	NarmonVirusAnti	smss.exe	"Added by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
N	NCS_SS	Csinsm32.exe	Same as CleanSweep Smart Sweep-Internet Sweep
N	Nero PhotoShow Media Manager	mssysmgr.exe	"Nero rebranded version of Simple Star's PhotoShow photo editing and organizing software
X	NeroAutoStartClient	NeroASM.exe	"Added by the AGOBOT.VG WORM!"
U	NETGEAR WG111T Smart Wizard	wlan111t.exe	"Configuration utility for the Netgear WG111T multi-rate Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
X	Network Host Service	msmnart32.exe	"Added by the RBOT-CJV WORM!"
X	Netzip Smart Downloader	npnzdad.exe	Advertising spyware
X	New Csnm Manager	csmn.exe	"Added by the SDBOT.BZS WORM!"
X	NI.UERSM_0001_N68M1602	[path to file]	"Installer for the ErrorSafe rogue system error and cleaning utility - see here"
X	NI.UGESM_0001_N122M0303	[path to file]	"Installer for the DokterFix Dutch rogue system error and cleaning utility - see here"
X	NLS Monitor	nlsmon.exe	"Added by the RBOT-AXJ WORM!"
X	notepad.exe	msmsgs.exe	"Added by the ZLOB TROJAN and variants! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	ntfsmonitorpro	ntfs64.exe	"Added by the FORBOT-EB WORM!"
X	NTSF MICROSOFT SYSTEM	sysman.exe	"Added by the RBOT.EDP WORM!"
X	ntsmod	ntsmod.exe	"Adware downloader/installer
X	NvCplDaemon	msmsgrs.exe	"Added by the DLOADER-YI TROJAN!"
U	OnlinePCfix SmoothSurfer	SS.exe	"Smooth-Surfer - blocks banners
X	order_Shell	order_smey.exe	"Added by the BANKSNIF-H TROJAN!"
X	PaintingRoom smile monitor	paintingroom.exe	Paintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
X	PASMonitor	pbm.exe	"PersonalAntiSpy rogue spyware remover - not recommended
X	pas_check	pasmon.exe	"SystemDoctor rogue security software - not recommended
N	PC Suite for Smartphones	Application Launcher.exe	"System Tray access to the Sony Ericsson PC Suite mobile phone management utility for some models
U	Pervasive.SQL Workgroup Engine	W3dbsmgr.exe	Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup
N	PhotoShow Deluxe Media Manager	mssysmgr.exe	"Simple Star PhotoShow Deluxe photo editing and organizing software
U	Pop-Up Smasher	PopupSmasher.exe	"Pop-Up Smasher - pop-up killer"
U	PRISMSTA.EXE	PRISMSTA.EXE	Creates a system tray icon for accessing information about Intersil Prism Wireless Settings. Intersil silicon is used by Trendware/Trendnet for example
U	PRISMSVR	PRISMSVR.EXE	Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
U	PRISMSVR.EXE	PRISMSVR.EXE	Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
X	Prote��o de tela	ssmaze.scr	"Added by the BANCBAN-FB TROJAN!"
U	PsMFCard	PsMFCard.exe	"Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue
U	Randsoft Harmony '98	rsMenu.exe	"Randsoft Harmony '98 (superseded by Enterprise Harmony 99) for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000"
X	RasCon Remote Access Service Manager	rasmngr.exe	"Added by the SPYBOT.EM WORM!"
X	rasman	rasman32.exe	"Added by the BCKDR-QGN BACKDOOR!"
X	RasMan.exe	RasMan.exe	"Added by the FEUTEL-H TROJAN!"
U	Real Spy Monitor	Winrsm.exe	"Realspy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	RegSvr32	msmsgs.exe	"Added by the ZLOB.B TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
X	Remote Access Service Manager	rasmngr.exe	"Added by the AGOBOT.KU WORM!"
X	Remote Event System	resmsvc.exe	"Added by the IRCBOT.YF BACKDOOR!"
X	Remove 54tr10	smss.exe	"Added by the BRONTOK-CH WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data"
X	rollbk	dsm.exe	"Added by the SERFLOG.B WORM!"
X	rollbk	msmpatch.exe	"Added by the SERFLOG.B WORM!"
X	rollbk	svosm.exe	"Added by the SERFLOG.B WORM!"
?	Roxio Engine	MSMNGR32.EXE	"Not believed to be a valid Roxio program - more likely a variant on the WOMANIZ.A TROJAN!"
X	RPCall_[ComputerName]	smhost.exe	"Added by the REDPLUT-B TROJAN!"
X	rsmb	rsmb.exe	"Added by the WAREZOV.C WORM!"
X	rsmb32	rsmb32.exe	"Added by the STRATION.AV WORM!"
U	rsMenu	rsMenu.exe	"Enterprise Harmony 99 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000. Formally Randsoft Harmony '98"
Y	run=	smsrun16.exe	"Microsoft Systems Management Server (SMS) related - program that reads SMSRUN16.INI on clients running Win 3.1
X	RunOnceEx	sms.exe	IESearchToolbar parasite. Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.LF TROJAN!
X	sacmemds	smcntlwio.exe	"Added by the MAILBOT-BZ TROJAN!"
U	SaiSmart	SaiSmart.exe	"""Smart Button Special Sauce"" - included with the latest software for Saitek game controllers. Related to the ""S""
X	Salestart	dcpasmon.exe	"SystemDoctor rogue security software - not recommended
X	Salestart	dcsm.exe	"Part of the PrivacyProtector and DriveCleaner rogue security tools"
X	Salestart	PASmon.exe	"Part of rogue security tools
U	Samsung MJC-900 Series Monitor	"RUNDLL32.EXE SMMASHLL.DLL	AutoUpdatePnPValue"
U	Samsung PanelMgr	SSMMgr.exe	"Monitors ink levels
U	SamsungSM PanelMgr	SSMMgr.exe	"Monitors ink levels
X	Scan Register	ssms.exe	"Added by the RBOT-AT WORM!"
X	Scheduler	MSMSGS.EXE	"Added by the HOSTBANK-A TROJAN! Note - this particular msmsgs.exe file is located in %System%\Config and should not be mistaken for the MSN Messenger file of the same name which is located in %Program Files%\Messenger"
U	SecretSmileys	ss.exe	"""Secret Smileys is an add-on for AIM that provides users access to 1000's of new Smileys that can be viewed by anyone using a current version of AIM. Secret Smileys also adds other features such as logging of IM conversations
X	Security Accounts Manager SM	samsm.exe	"Added by the SPYBOT.JE WORM!"
X	Security Master AV	SM[random characters].exe	"Security Master AV rogue security software - not recommended
X	serpe	msmbw.exe	"Added by the SERFLOG.A WORM!"
X	Service Process	smss.exe	"Added by the DCMBOT-E TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""config"" subfolder"
X	Service System	kgbfsm344.exe	"Added by the BANCOS-FS TROJAN!"
X	Services Manager	svsmanager.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Services Process	smss.exe	"Added by the SMALL-EK TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""config"" subfolder"
X	Services.dll	smss.exe	"Added by the SOBER-L WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\system and note the space at the beginning of the ""Startup Item"" field"
X	Session Manager Subsystem	smssa.exe	"Added by the RBOT-AGS WORM!"
X	Shell	smsc.exe	"Added by the BANCBAN-OY TROJAN!"
X	Shell	Explorer.exe smssnt.exe	"Added by the AGOBOT.EE TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""smssnt.exe"" file is located in %System%"
N	ShockmachineReminder	SmReminder.exe	"""Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline"". Could be a registration reminder for the trial version"
?	ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051	shwicon.exe	"Card reader for memory cards from digital cameras. Is it required? "
N	Simple Star PhotoShow Media Manager	mssysmgr.exe	"Simple Star PhotoShow photo editing and organizing software
Y	SkySurfer Management Service	SmaServ.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
X	sm	sa_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sf_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sm_exe.exe	"Added by the OLFEB.A TROJAN!"
X	sm	sr_exe.exe	"Added by the LUKUSPAM TROJAN!"
X	SM	iro.bat	"Added by the IROFFER.CT TROJAN!"
N	SM1BG	SM1BG.EXE	USB driver for downloading from within Napster and iTunes to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required
N	SM1NINT	SM1NINT.exe	Cypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98
N	SM56 Helper Win32 Utility	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
N	Sm56acl	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
U	sma	sma.exe	"SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	SmallAndSecure	mssecure.exe	"Added by the RBOT.CU WORM!"
X	sman	app**.tmp [ = digit]	Unidentified adware
X	SManager	smanager..exe [ = digit]	"Added by the AGENT.BJO TROJAN!"
X	SManager	smanager.7.exe	"Added by the DWNLDR-GVG TROJAN!"
X	SmansaApp	winlogon.exe	"Added by the ROMARIO-A WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
N	Smapp	Smtray.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
X	Smart Antivirus-2009.exe	Smart Antivirus-2009.exe	"Smart Antivirus 2009 rogue security software - not recommended
N	Smart Card Service	ScardSvr.exe	"For Smart Card readers. Known to cause problems
U	Smart Connect Monitor	SCMon.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U	Smart Connect Setup	SCSetup.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
X	Smart Defender PRO	smrtdefp.exe	"Smart Defender PRO rogue security software - not recommended
U	Smart Keyboard	Smartkbd.exe	Netropa Smart Keyboard driver
N	Smart Label O Server	ssloserv.exe	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N	Smart Label RFViewer	SSLFVIEW.EXE	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
U	Smart Protector Pro	SmartProtector-Pro.exe	"Smart Protector Pro internet eraser from SmartSoft - ""keeps out prying eyes and protects your private data on all Windows systems"""
N	Smart Start UP	PnPDetect.exe	"Part of Presto! Mr.Photo - ""an ideal program for creating
U	Smart Touch	STouch.exe	"Related to Plustek OpticSlim scanner"
N	Smart Type Assistant	sta.exe	"Smart Type Assistant - a complex typing automation tool
X	Smart Virus Eliminator	SM[random characters].exe	"Smart Virus Eliminator rogue security software - not recommended
U	Smartalec	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
U	SmartAudio	SmartAudio.exe	Conexant SmartAudio PC audio chipset software - typically available on HP notebooks with built-in microphones
N	SmartBarXP	SmartBarXP.exe	"SmartBarXP is a bar that runs down the side of your screen
N	sMaRTcaPs	SMARTC~1.EXE	"sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock
?	SmartCopy	SmartCopy.exe	"Related to SmartCopy from Northstar Systems Corp. What does it do and is it required?"
N	SmartDefrag	IObit SmartDefrag.exe	"""IObit SmartDefrag helps defragment your hard drive more efficiently than any other product on the market - free or not"""
X	Smartfixer	SmartFixer.exe	"SmartFixer rogue system error and cleaning utility - not recommended"
U	Smarthruengine	QS.exe	"Samsung smarthru software
?	SmartLauncher	SmartLauncher.exe	"Related to SmartLauncher from Northstar Systems Corp. What does it do and is it required?"
U	SmartPCXL	pcaccel.exe	"Smartalec PC Accelerator - system optimization utility"
X	smartprotector	smartprotector.exe	"Smart Protector rogue security software - not recommended
U	SmartProtector-Pro	SmartProtector-Pro.exe	"Smart Protector Pro internet eraser from SmartSoft - ""keeps out prying eyes and protects your private data on all Windows systems"""
U	SmartRAM	MemCleaner.exe	"Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional"
U	SmartRAM	Sup_SmartRAM.exe	"Memory management part of the Advanced SystemCare system utility from IObit"
X	SmartSecurity	SmartSecurity.exe	"Smart Security rogue security software - not recommended
U	SmartSync Pro	SmartSync.exe	"Related to CompanionLink Software Inc. Synchronization solutions for ACT!
?	SmAudio	SmAudio.exe	"Audio driver for Conexant SmartAudio HD integrated soundcards. System Tray access to the control panel?"
N	Smax4	Smax4.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
U	SMax4PNP	SMax4PNP.exe	"Analog Devices SoundMax integrated soundcard utility. Brings up the SoundMAX Control Panel when it detects if new audio devices (such as microphones
U	SMax4PNP Application	SMax4PNP.exe	"Analog Devices SoundMax integrated soundcard utility. Brings up the SoundMAX Control Panel when it detects if new audio devices (such as microphones
?	smbdpmi	smbdpmi.exe	"IBM Netfinity Director and Universal Management Services related. What does it do and is it required?"
Y	smc	smc.exe	Sygate Firewall
Y	smc	spfsmc.exe	Sygate Firewall
X	smc	smc.exe	"Added by the EBOD TROJAN! Note that this should not be confused with the now discontinued Sygate Firewall which shares the same filename. This file is located in %System%"
Y	SMC Service	smc.exe	Sygate Firewall
Y	SMC Service	spfsmc.exe	Sygate Firewall
X	smcserv	winsrv.exe	"Added by the AGOBOT-OU WORM!"
Y	SmcService	smc.exe	Sygate Firewall
Y	SmcServices	smc.exe	Sygate Firewall
Y	SmcServices	spfsmc.exe	Sygate Firewall
X	smcss	smcss.exe	"Added by the SCLOG-AJ TROJAN!"
?	Smcsta.exe	Smcsta.exe	"SMC Networks wireless PCI card driver. Is it required?"
X	SmcSVR	SmcSVR.exe	"Added by the LEGMIR.JU TROJAN!"
X	smgr	mgrs.exe	"Covert Sys Exec malware variant"
X	smgr	smgr.exe	Added by an unidentified WORM or TROJAN!
X	smile	wcs.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
N	SmileboxTray	SmileboxTray.exe	"System Tray access to Smilebox photo sharing/printing service"
X	Smiley District	plugin.exe	"Smiley District adware"
X	SmileyApp	stbapp.exe	"DoubleD adware"
N	Smileycons	smileycons.exe	"Smileycons - free smileys
N	Smith Micro try	smiptray.exe	Smith Micro shared files. Comes with D-Link web cam
U	smodul	smodule.exe	"UserMonitor from Neuber. Teachers can broadcast screen to other screens
N	SmoothView	SmoothView.exe	"TOSHIBA Zooming Utility - allows ""automatic"" zoom feature in some appications
U	SMPAutoStart	smpdemo.exe	"Smart Phone Recorder demo from KenGolf.com. Answering Machine
U	SmpcSys	SmpSys.exe	"""Set Up My PC"" utility supplied with some Packard Bell computers"
U	smr	cvshost.exe	"Silent Monitoring surveillance software. Uninstall this software unless you put it there yourself"
X	smres	smres.exe	"Added by the AGOBOT-UA WORM!"
X	smrss	smrss.exe	"Added by the BANPAES-B TROJAN!"
X	smrtdrv	runtime.exe	"Added by the AGOBOT.MT WORM!"
X	smrtprt	smrtprt.exe	"Smart Protector rogue security software - not recommended
X	SMS	iro.bat	"Added by the IROFFER.CT TROJAN!"
U	SMS Application Launcher	LAUNCH32.EXE	"Microsoft Systems Management Server - used to manage computers on a network remotely"
U	SMS Client Service	clisvc95.exe	"When the SMS Client service starts on a domain controller
X	Sms System32	SmsSystem32.exe	Unidentified malware
U	SMS Win9x Message Agent	SMSMsg.exe	This program assigns a user to a Systems Management Server site
N	SmsDiscount	SmsDiscount.exe	"SmsDiscount - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
N	Smserial	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
X	SMSERIALSTARTER	win32st.exe	"Added by the FAKEALERT-AH TROJAN! Installed with the SpyBurner spyware remover - which is not recommended
X	SMSERIALWORKERSTART	shellexcon.exe	"Added by the FAKEALERT-AH TROJAN! Installed with the SpyBurner spyware remover - which is not recommended
X	SMSERIALWORKERSTARTER	winstrse.exe	"Added by the RENOS.IC TROJAN! Installed with the SpyBurner spyware remover - which is not recommended
X	SMSERIALWORKSTARTER	comsysobj.exe	"Added by the FAKEALERT-AH TROJAN! Installed with the SpyBurner spyware remover - which is not recommended
X	smsger	Win.exe	"Added by a variant of the SDBOT WORM!"
N	SMSI Loader	SMLoader.exe	"Smith Micro HotFax - fax software"
X	smsm	smsm.exe	"Added by the BANKER-CO TROJAN!"
X	smsrv	smsrv.exe	"Added by the AGOBOT-SX WORM!"
X	SMSS	smss.exe	"Added by the FLOOD.F BACKDOOR! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""Catroot"" subfolder"
X	smss	[path to smss.exe]	"Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	smss	smss.exe	"Added by the AGENT-TR TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	smss	smss.exe	"Added by the BOROBOT-J TROJAN and variants! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!"
X	Smss	ssms.exe	"Added by the RBOT.OP WORM!"
X	Smss Host	smhost.exe	"Added by the IRCBOT-ACC TROJAN!"
X	smss.exe	csrss.exe	"Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Smss.exe driver	winupd32.exe	"Added by the SDBOT.MI BACKDOOR!"
X	smss32.exe	smss32.exe	"Added by the FAKEAV-ATH TROJAN!"
X	smssLevel4	smss.exe	"Unidentified malware! ! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Windows Media Player\Skins\WindowsMediaSkin\Data\Level4"
X	SMSSS	smsss.exe	"Added by the SDBOT.ZD WORM!"
X	SMSSS Loader	smsss.exe	"Added by the AGOBOT.MQ WORM!"
X	SMSSU	SMSSU.EXE	"Added by the STARTPAGE.O TROJAN!"
U	SMSTray	SMSTray.exe	System tray access to Samsung Media Studio
X	SMSvc32	smsvc32.exe	"Added by the AGOBOT-OL WORM!"
X	smsys	Explorer.exe	"Added by the CLICKER-C BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a ""Template"" subfolder"
X	smsys	vi.exe	Adult content dialler
U	SMSystemAnalyzer	SMSystemAnalyzer.exe	"Part of the Iolo System Mechanic optimization tool"
X	sms_msn	sms_msn.exe	Added by an unknown WORM or TROJAN!
X	sms_msn40	sms_msn40.exe	Added by an unknown WORM or TROJAN infection
U	Smt	SMT.exe	"Win-Spy keyboard logger/monitoring software - remove unless you installed it yourself"
N	SMToolbar	SMToolbar.exe	StartMake.com toolbar
X	SMTP32 Mailing Protocol	smtp32.exe	"Added by a variant of the RBOT WORM!"
N	SMTray	Smtray.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
?	SmWizard	SmWizard.exe	"SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?"
X	SM[random]	[random].exe	"Malware Protector 2008 rogue security software - not recommended
X	SM_IAN	ian_monitor.exe	"AdvancedCleaner rogue security software - not recommended
X	Sonic RecordNow!	smsc.exe	"Added by a variant of the SDBOT WORM!"
N	SoundMAX	Smax4.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
N	SoundMAX Control Panel	Smax4.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
N	SoundMAX Integrated Digital Audio	Smtray.exe	"System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
U	SoundMAXPnP	SMax4PNP.exe	"Analog Devices SoundMax integrated soundcard utility. Brings up the SoundMAX Control Panel when it detects if new audio devices (such as microphones
X	SoundMixer	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	Spooler Host	smhost.exe	"Added by the IRCBOT.BSQ BACKDOOR!"
X	Spooler Subsystem Application	smss.exe	"Added by the IRCBOT-ZO TROJAN! Note - the legitimate smss.exe process should not normally figure in Msconfig/Startup!"
X	spoolsvr32	csmss.exe	"Added by the AGENT-AU TROJAN!"
X	spoolsvr32	csmss32.exe	"Added by a variant of the AGENT-AU TROJAN!"
U	Sprint SmartView	SprintSV.exe	"Sprint SmartView wireless connectivity manager which supports cards from multiple manufacturers including Intel
U	SPSTEALT	SmartProtectorPro.exe	"Smart Protector Pro - internet privacy tool that erases tracks
U	SPSTEALT	SmartProtector-Pro.exe	"Smart Protector Pro internet eraser from SmartSoft - ""keeps out prying eyes and protects your private data on all Windows systems"""
X	SpyOnThis Monitor	SpyOnThisMonitor.exe	"SpyOnThis rogue spyware remover - not recommended"
U	SSMMgr	SSMMgr.exe	"Monitors ink levels
X	ssms.exe	SSMS.EXE	"Added by the GISMOR WORM!"
X	ssms.exe	winn.exe	"Added by the SDBOT-DHE WORM!"
X	ssmss	ssmss.exe	"Added by the AGENT-MOF TROJAN!"
X	start uploading	smsss.exe	"Added by a variant of the SDBOT WORM!"
X	Start Upping	taksmgr.exe	"Added by the RBOT-QK WORM!"
U	StopSignSsTsMon	"sstsmon.dll	VerifyStatus"
X	Sunjava	javasmart.exe	"Added by the AGENT.AHV TROJAN!"
X	SunJavaUpdate	smvss.exe	"Added by the DEDLER-G TROJAN!"
X	support-reverse-smileys	[trojan filename]	"Added by the LITEBOT TROJAN!"
U	Sup_SmartRAM	Sup_SmartRAM.exe	"Memory management part of the Advanced SystemCare system utility from IObit"
U	Sup_SmartRAM.exe	Sup_SmartRAM.exe	"Memory management part of the Advanced SystemCare system utility from IObit"
X	Syesm	Syesm.exe	"Added by the BUZUS WORM!"
X	SysMain	buff.exe	"Added by the AGENT-ECW TROJAN!"
U	Sysman	Sysman.exe	"KeyTrap is a surveillance software program that records all keyboard activities. Uninstall this software unless you put it there yourself"
X	SysManager	Manager.EXE	"Added by the DAGGER.140 TROJAN!"
X	sysme	sysme.exe	"Added by the PSW_STEALER_C TROJAN!"
X	sysmem	mmsete.exe	"Added by the NOPIR.C WORM!"
X	sysmem	outlookrem.exe	"Added by the NOPIR-C WORM!"
X	SysMemory manager	mdms.exe	"Added by the CIMUZ-D TROJAN!"
U	SysMetrix	SysMetrix.exe	"SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics"
X	sysMett1	explorer.exe	"Added by the LEGMIR-Y TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	sysmini	sysmini.exe	"Added by the ADLOAD.DD TROJAN!"
X	sysmngr32	sys64mnger.exe	"Added by a variant of the RBOT WORM!"
X	sysmntrc	sysmntrc.exe	"Added by the BANCOS-FX TROJAN!"
X	sysmod	sysmod.exe	"Added by the SPYBOT-DU WORM!"
X	sysmon	sysmon.exe	"Added by the BIZEX WORM!"
X	Sysmon	rpcmon.exe	"Added by the RANDEX.ATX WORM!"
X	sysmon	sysmon44.exe	"Added by a variant of the BACKDOOR-CBA TROJAN!"
X	SysMon	wowexece.exe	"Added by the MULAN-A TROJAN!"
X	Sysmon	SystemMonitor.exe	"Added by the NUJAMA-A WORM!"
X	Sysmon	msnmssgs.exe	"Added by the SDBOT.FK WORM!"
X	sysmon12	[various filenames]	"Wareout - malware masquerading as a spyware and dialer remover"
X	SysmonLog	mslog.exe	"Added by the AGENT.AOV TROJAN!"
X	sysmonnt	sysmonnt.exe	"SearchPounder sends keywords typed into HTML forms and popular Internet search engines to a remote server"
X	SysMonXP	SysMonXP.exe	"Added by the NETSKY.Q WORM!"
X	Sysmppcvppp	SysTdSvr.dll	"Generic2.PQG adware"
X	sysmss	sysems.exe	"Added by a variant of the SLAPER TROJAN!"
X	SysR	sysmd.exe	"Ulubione adult content dialer"
X	SYSTEM	VSSMON.exe	"Added by the RBOT-AWW TROJAN!"
X	System	smss.exe	"Added by the AGENT.EP BACKDOOR! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	System Config Manager	smssl.exe	"Added by the AGOBOT-ZJ WORM!"
X	System Download Manager	SysMgr.exe	"Added by the RBOT.CIG WORM!"
X	System Initialization	msmsgri32.exe	"Added by the RANDEX.D WORM or ROXY or ROXY.B TROJANS!"
X	System Management Service	smsc.exe	"Added by the RBOT-ANN WORM!"
X	System Manager	sysmng.exe	"Added by the TAME-C WORM!"
X	System Manager	sysmgr.exe	"Added by the IRCBOT.AGW BACKDOOR!"
X	System Manager	sysmngr.exe	"Added by the IRCBOT.BAQ BACKDOOR!"
N	System Mechanic Professional Update [Incinerator.dll]	SysMech4.exe /REREG: [path] Incinerator.dll	"Iolo System Mechanic ""Incinerator"" feature securely deletes files and folders from your PC so they can never be recovered again"
X	System Messaging Queue	SMCSS.EXE	"Added by a variant of the RBOT WORM!"
X	System Messenger	SYSMSG32.EXE	"Added by the SPYBOT-DK WORM!"
X	System Microsoft Core	smc.exe	"Added by the RIZO.A TROJAN!"
U	System Monitor	SYSMON.EXE	"Comes with some Aopen motherboards. Monitors CPU temp
X	System Monitor	Sysmon16.exe	"Added by the SDBOT TROJAN!"
X	System Security Updaters	vsmons.exe	"Added by the RBOT-OW WORM!"
X	System Service Manager	lsmas.exe	"Added by the AGOBOT-IK BACKDOOR!"
X	System Services	ssms.exe	"Added by a variant of the RBOT WORM!"
X	System Session Manager	smss.exe	"Added by the KALEL-E WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	System Startup Manager	smcss.exe	"Added by the RBOT.AMD WORM!"
X	SystemManager	Sysman32.exe	"Added by the DOWNLOADER-BW.B TROJAN!"
X	SystemMonitor	Sysmon32.exe	"Added by the AIDID.A WORM!"
X	Systems	sysmon.exe	"Added by the VIXUP-BI WORM!"
X	Systesms.exe	systesms.exe	"Added by the RBOT-HI WORM!"
X	SysUtils	smss.exe	"Added by the AUTORUN-AWW WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile%"
X	TAKSMGN	taskmr.exe	"Added by the RBOT-AHS WORM!"
U	TallyGenicom PanelMgr	SSMMgr.exe	"Monitors ink levels
X	Tasmgr	Taskmgr.bat	"Added by the YPSAN.G WORM!"
X	Tok-Cirrhatus	smss.exe	"Added by the BRONTOK-A WORM and variants! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%"
X	Tok-Cirrhatus-2784	smss.exe	"Added by the BRONTOK-S WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%"
X	Torjan Program	smss.exe	"Added by the WOWCRAFT.B TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Y	TosMem	tosmem.exe	Toshiba laptop related. Win98/Me ACPI system can not hibernate or go on standby if all of the physical memory lower than 640KB is locked. This utility allocates and locks three pages on boot and then releases them on standby/hibernation for ACPI.SYS in order to solve the above problem
U	TPSmain	TPSMain.exe	Toshiba Power Saver - associated with Toshiba laptops/desktops. Manages the power save function to make sure that the system goes to a power saver mode when not used
Y	TrueVector	VSMON.EXE	Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this
X	tsa	tsm.exe	"TargetSaver adware"
X	Tsa2	tsm2.exe	"TargetSaver adware"
?	TSMAgent	TSMAgent.exe	"Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required?"
N	TSMsger	TSMsger.exe	"Epson scannner software - required for ""one-touch"" operation. Can be launched manually"
?	tsyssmon	tsyssmon.exe	"Found in a Toshiba\sysstability directory"
N	UC_SMB	ucstart.exe	Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed
U	UPSMON	UPSMON.exe	"UPSMON Power Management software"
X	UsbD	smss32.exe	"Adware - detected by Kaspersky as the AGENT.CJ TROJAN!"
X	userinit	smss.exe	"Added by the DLOADR-B TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Virscanner	smss.exe	"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
?	voowsmcr	huhdir.exe	"??"
X	vsadmin	smrs.exe	"Added by the AGOBOT-RC WORM!"
X	VSMP	hlojsnigc.exe	"Added by the RBOT-GQS WORM!"
X	vssms32	vssms32.exe	"Added by the BCKDR-LBF BACKDOOR!"
X	was_check	PASmon.exe	"Part of the ErrorSafe rogue system error and cleaning utility - not recommended"
X	WCESMngr	spoolsb.exe	"Added by the AGOBOT-QZ WORM!"
X	WCESMngr	WCEMNGR.EXE	"Added by the AGOBOT-QX WORM!"
U	WDSmartWare	WDSmartWare.exe	"Western Digital's WD SmartWare management software for selected external drives in the My Book and My Passport range"
X	Web Service	sm.exe	"Added by the BUBE-F VIRUS!"
U	WG111v2 Smart Wizard Wireless Setting	RtlWake.exe	"Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that ""provides wireless access to your desktop or notebook PC through the computer's USB port"""
X	WheelsMouse	[path to trojan]	"Added by the SOCKSPR-D TROJAN!"
X	Whistler	whismng.exe	"Added by the WHISTLER-F TROJAN!"
X	Win32	sysmon.exe	"Added by the MYTOB-HQ TROJAN!"
X	Win32 Driver	sysmls.exe	"Added by the MYTOB.JH WORM!"
X	Win32 USB2 Driver	smsc.exe	"Added by the SDBOT.FO WORM!"
X	WIN3S2SNDS	winabsmod.exe	"Added by the AGENT.DN TROJAN - known to BOClean as ""CWS/INDEX""
X	WinDLL (csmss.exe)	"rundll32.exe CSMSS.EXE	start"
X	WinDLL (smaprnter.exe)	"rundll32.exe smaprnter.exe	start"
X	WinDLL (smms.exe)	"rundll32.exe smms.exe	start"
X	Windows	smss.exe	"Added by the BANCBAN-QF TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows bypass security SMSS Service	SbiCvy.exe	"Added by the RBOT-GRF WORM!"
X	Windows Drivers	ssms.exe	"Added by the RBOT-AT WORM!"
X	Windows Live Messenger Servicer	msmgslive.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Media Center	smss.exe	"Added by the WARBOT TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Windows Memory Manager	windowsmem.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Messenger	msnsmgs.exe	"Added by the RBOT-ANJ WORM!"
X	Windows Messenger Live Startup	windowsmsnlive.exe	"Added by the DELF.DAX TROJAN!"
X	Windows Messenger Service	winsmsgr.exe	"Added by the RBOT-VW WORM!"
X	Windows Msn Live Messanger	msnmsgsman.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Nivedia Driver	sysMGT.exe	"Added by a variant of the RBOT WORM!"
X	Windows NT Login Session Manager	WNSM.EXE	"Added by the RBOT.BIV WORM!"
X	Windows Registry Manager	tasksmanagers.exe	"Added by the MYTOB.ER WORM!"
X	Windows Rundll Center	msnsmgr.exe	"Added by the AGENT-LLB TROJAN!"
X	Windows Rundll Center	msmsgrs.exe	"Added by the IRCBOT-AFA WORM!"
X	Windows Secure Services	ssms.exe	"Added by the RBOT-GAR WORM!"
X	Windows Service Agent	sjbsm.exe	"Added by the SMALLTRO.II TROJAN!"
X	Windows Service Agent	sjbsmgm.exe	"Added by the IRCBOT.AHX WORM!"
X	Windows Service Controller Agent	taksmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Services	smsc.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Session Manager	smss32.exe	"Added by a variant of the RBOT WORM!"
X	Windows Session Manager Subsystem	smss.exe	"Added by the KALEL-B WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!"
X	Windows Smart Manager	smart.exe	"Added by the RBOT-SL WORM!"
X	Windows SMB Manager	smb32.exe	"Added by the RBOT-BHZ WORM!"
X	Windows smss service	service.exe	"Added by the AGENT-FPY TROJAN!"
X	WINDOWS SYSTEM	smoc.exe	"Added by the MYTOB.FU WORM!"
X	WINDOWS SYSTEM	smsc.exe	"Added by the MYTOB-BR WORM!"
X	Windows System Manager	smsc.exe	"Added by a variant of the RBOT WORM!"
X	Windows System Manager	crssm.exe	"Added by the RBOT-AFH WORM!"
X	Windows System Manager	winsysmgr.exe	"Added by the IRCBOT.BJG BACKDOOR!"
X	Windows System Manager Loader	smsls.exe	"Added by the AGOBOT.TF WORM!"
X	Windows System Manager Proc	winsmc.exe	"Added by the RBOT.JH WORM!"
X	windows system notepad	wnpsm.exe	"Added by a variant of the RBOT WORM!"
X	Windows UDP Control Center	taksmrg.exe	"Added by the AGENT.WOH TROJAN!"
X	Windows UDP Control Center	msnsmsgrs.exe	"Added by the PUSHBOT.MF WORM!"
X	Windows Update	smsscr.exe	"Added by the BANKER-DK TROJAN!"
X	Windows Update Service	smcg.exe	"Added by the SDBOT.QY WORM!"
X	Windows32 Messenger Service	msmsgv.exe	"Added by the RBOT.ANS WORM!"
X	WindowsDiskLog	cstsm.exe	"Added by the STINX-C or STINX-D TROJANS!"
X	Windowsfw	vssmf32.exe	"Added by the SPIGOT BACKDOOR!"
X	WindowsMGM	Winmgm32.exe	"Added by the SOBIG.A WORM and LALA.C TROJAN!"
X	windowsmp	windowsmp.exe	"Added by the AUTORUN-DP WORM!"
X	WinDOwsUPdate	smss.exe	"Added by the AUTORUN.DIB WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ï¿½ subfolder"
X	WinScMngr	winsmc.exe	"Added by the SDBOT-BPZ WORM!"
X	WinSecured32	ssmr.exe	"Added by a variant of the FORBOT WORM!"
U	WinService32	ssmgr.exe	"007 Spy Software - ""stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"""
X	winsplog	wsmmlog.exe	"Added by the MAILBOT-CA TROJAN!"
X	WinsSystem	syssmss.exe	"Added by the DELF.IG TROJAN!"
X	winsupdatesysmngr64	winsys64mnger.exe	"Added by the RBOT-BAG WORM!"
X	WinSysM	371662M.exe	"Added by the WINKO.AO WORM!"
X	WinSysModule	[path to trojan]	"Added by the AGENT-DIQ TROJAN!"
X	winsystem.sys	smss.exe	"Added by the SOBER.K WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\win32 and note the space at the beginning of the ""Startup Item"" field"
X	WINTASK	msmgrxp.exe	"Added by the MYTOB.AQ WORM!"
X	WINTASK DLL32	smsrss.exe	"Added by the MYTOB.BS WORM!"
X	WinXPService	taksmgr.exe	Identified as a variant of the IRC/Flood.tool malware
X	WinXPService	taksmgr.exe	"Added by the KIRSUN.A BACKDOOR! The file is located in %System%"
X	WinXPService	taksmgr.exe	"Added by the KIRSUN.A BACKDOOR! The file is located in the root directory
U	WireLessMouse	StartAutorun.exe MouseDrv.exe	"Related to WireLess Mouse Multimedia Combo Set by SANSUN Industries"
X	WSSVC	smsc.exe	"Added by the AUTORUN-AGA WORM!"
U	Xerox PanelMgr	SSMMgr.exe	"Monitors ink levels
X	yemarvd	sysmon.exe	"Added by the AGENT-CH TROJAN!"
X	YhooUapdates	ymssmsgs.exe	"Added by a variant of the SMALL_K TROJAN!"
X	YhooUpdates	ymsmsgs.exe	"Added by the SMALL_K TROJAN!"
X	Zone Alarm	vsmon.exe	"Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector"
X	zsms	smss.exe	"Added by the BANCOS-CK TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	zsmscc	rundll32.exe zsmscc071001.dll mymain	"Added by the GENETIK.KQ TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""zsmscc071001.dll"" file is found in %System%"
X	zsmscc	rundll32.exe mycc071208.dll mymain	"Added by the AGENT.FZK TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""mycc071208.dll"" file is found in %System%"
X	zsmsgs	iservice.exe	"Added by the BANCOS-BU TROJAN!"
X	zsmss	smss.exe	"Added by the BANCOS-DD TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	[various names]	ParisM.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	sysmon12.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	_Cat3	msmsgrxp.exe	"Added by a variant of the SMALL-DT downloader TROJAN"
X	_Cat4	msmsgr2.exe	"Added by the SMALL-EB TROJAN!"
X	_Services.dll	smss.exe	"Added by the SOBER-L WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\system"
X	_winsystem.sys	smss.exe	"Added by the SOBER.K WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\win32"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.