"SCNotification.exe" Process on Windows 7

Q

What is the "SCNotification.exe" process on windows 7? Is the "SCNotification.exe" process a virus? Can I terminate the "SCNotification.exe" process?

✍: FYIcenter.com

A

"SCNotification.exe" process represents "SCNotification" program. "SCNotification.exe" is part of the "SMS Agent Host" service, provides change and configuration services for computer management systems. It actually acts as the agent for Systems Management Server to push out patches and keeps your software updated to your computer.

"SCNotification.exe" process is normally running under the parent process "CcmExec" as shown in the process tree below:

Boot
   wininit
      services
         CcmExec
            SCNotification

On the Processes tab of "Task Manager", "SCNotification.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
SCNotification.exe       38,784 K   SCNotification

Additional information about "SCNotification.exe" process:

Command line:
   "C:\windows\CCM\SCNotification.exe"

Programe file information:
   Name: SCNotification.exe
   Location: C:\windows\CCM\SCNotification.exe
   Description: SCNotification
   Version: 5.0.8239.1000
   Size: 642232 bytes
   Last modified: 4/14/2015 5:00:00 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows
C:\Windows\CCM
C:\Windows\CCM\SCNotification.exe
C:\Windows\assembly\pubpol133.dat
C:\Windows\CCM\SCClient.common.dll
C:\Windows\CCM\SCClient.data.dll
C:\Windows\CCM\SCClient.Pages.dll

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SOFTWARE\Wow6432Node\Microsoft\.NETFramework
HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts
HKLM\SYSTEM\ControlSet001\Control\Nls\Language Groups

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\windows\CCM\SCNotification.exe
C:\windows\SysWOW64\ntdll.dll
C:\windows\SysWOW64\MSCOREE.DLL
C:\windows\syswow64\KERNEL32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\windows\syswow64\ADVAPI32.dll

"SCNotification.exe" process is not a virus. You should not terminate "SCNotification.exe" process or its parent process "CcmExec.exe", if you don't want it to interrupt you working on the computer, because it uses lots of CPU resources when it runs. You can restart it later, when your computer is free to let it receive updates and patches from Microsoft.

 

System Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-07-25, 5209👍, 0💬