Startup Letter s

Letter s

Startup Files Database

[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]


Yes	No	Users Choice	Warning	Unknown
Normally leave to run at startup	Not Required, often infrequently run tasks that can be run manually.	Depends if the task is deemed necessary	Typically viruses, spyware, adware and resource hogs	An unknown item
Search by name/file :

Required	Process Name / Details	Startup File
	SystemBoot Added by the SOBER-Q TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a HelpHelp subfolder of the Windows or Winnt folder	services.exe
	S Added by the AGOBOT-LN WORM!	svhost.exe
	S0undMan Added by the LOVGATE.AB WORM! Note - the filename has the digit 0 rather then the uppercase "o"	svch0st.exe
	S24EvMon Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?	S24EvMon.exe
	S3 Internal Chip Added by the AGOBOT-DD WORM!	s3serv.exe
	S3apphk A tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems	S3apphk.exe
	S3Hotkey Hotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card	s3hotkey.exe
	S3Mon S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required?	S3Mon.exe
	S3TRAY S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display	S3Tray.exe
	s3tray2 Same as the s3tray entry in this table?	s3tray2.exe
	S3TRAYHP S3 Video driver related. What does it do and is it required?	S3trayhp.exe
	S4F FilterPak from S4F, Inc - internet filtering software	S4F.exe
	s4helper Searchcentrix hijacker	s4helper.exe
	SA Logitech QuickCam driver. Is it required?	Sa3.exe
	SA Service Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?	SAservice.exe
	Sa3dsrv 3D sound extension for Windows	Sa3dsrv.exe
	saap NCase adware	saap.exe
	Sabreserver Airline reservation software from Sabre. Available via Start -> Programs	SABSERV.EXE
	sac NCase adware	sac.exe
	SACC SurfAccuracy adware	sacc.exe
	SAClient AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging	RegCon.exe
	sacmemds Added by the MAILBOT-BZ TROJAN!	smcntlwio.exe
	Safe Added by the FOCOSENHA TROJAN!	SafeWin.exe
	Safe Added by the BANKER-DT TROJAN!	[path to trojan]
	SafeGuard Popup Blocker Updater SafeguardProtect/Veevo hijacker	regsvr32 [path] sfgupd.dll
	SafeGuard Popup Blocker Updater (required) SafeguardProtect/Veevo hijacker	regsvr32 [path] sfg*.dll [ = ramdom char]**
	SafeGuard Popup Updater (required) SafeguardProtect/Veevo hijacker	regsvr32 [path] sfg*.dll [ = random char]**
	SafeGuard Popup Updater (required) SafeguardProtect/Veevo hijacker	regsvr32 [path] PDF*.dll [ = random char]**
	SafeHouseSystemTray SafeHouse "Personal Privacy" system tray icon - PP protects and hides your private and personal photos, videos, files and folders by making them "invisible" and encrypted	SDWTRAY.EXE
	SafeInstall.exe Monitors a download and ensures an newer version of a file isn't replaced by an older one	SAFEIN~1.EXE
	SafeOFF Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation	SafeOff.exe
	SafeSearch SafeSearch.A adware	safesearch.exe
	SafeSurfingUpdate MoneyTree parasite - ActiveX control used to download premium-rate dialers	SSUpdate.exe
	SafetyNet Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"	ipcTray.exe
	SafetyNet_Notifier Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"	ipcLn.exe
	Safeworld SafeWorld Internet Security - now no longer available	Freedom.exe
	Sagate Security Firewall Added by the GAOBOT.BOW WORM!	sagate.exe
	SAgent2ExePath Seiko Epson printer status agent. Disable if printer is not used often	SAgent2.exe
	SAGENTSERVICE TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself	Sagent.exe
	sagnt Adware web downloader	sagnt.exe
	SAHagent ShopAtHomeSelect parasite	Sahagent.exe
	SAHBundle ShopAtHomeSelect parasite	bundle.exe
	SAHBundle ShopAtHomeSelect parasite	shop1003.exe
	saie NCase adware	saie.exe
	SaiMfd Configuration software for Saitek game controllers	SaiMfd.exe
	SAIMON Saitek joystick driver	SaiMon.exe
	sain NCase adware	sain.exe
	sais NCase adware	sais.exe
	SaiSmart Smart Button Special Sauce - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature	SaiSmart.exe
	SaitekAutoConfigure Configuration for Saitek game controllers	saicnfig.exe
	Sakemsneql Added by the SDBOT.BTO WORM!	simenu.exe
	Salestart WinAntiSpyware misleading spyware remover - not recommended, see here	WAS7Mon.exe
	salm 180Search adware	salm.exe
	salm NCase adware	salm.exe
	Sam-sung Added by a variant of the SDBOT WORM!	Sam-sung.exe
	SaMail Added by the VBS.LIDO WORM!	[WORM FILE NAME].vbs
	SAMcal SamCal - calendar/reminder program	SAMcal.exe
	Sametime Connect IBM Lotus Sametime - instant messaging and Web conferencing software	Connect.exe
	Samsong Added by the SDBOT.BNE WORM!	Samsong.exe
	Samsung Added by an IRC TROJAN variant!	Samsungs.exe
	SandboxieControl SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it	Control.exe
	SandIcon SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources	SandIcon.exe
	SANS Service Added by the VANEBOT-AH WORM!	sansv.exe
	sapp NCase adware	sapp.exe
	SaskTel Accelerated Dial-up Experience faster surfing, downloading and e-mail by adding SaskTel Accelerated Dial-up Internet	sasktelgui.exe
	sasserfix Added by the DABBER.B WORM!	package.exe
	saSyncMgr Browser hijacker - redirecting to Searchant.com	rundll32.exe sasync.dll, SyncWait
	SATARaid RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives	SATARaid.exe
	satmat VX2.Transponder parasite updater/installer related	satmat.exe
	sau 180Solutions adware related	sau.exe
	SAUpdate Big Brother from Quest Software. System and network monitor	SAUpdate.exe
	SAutoLaunchExe Sharp Zaurus PDA related, needed to synchronize information with a Desktop or Notebook	SAutoLaunchExe.exe
	SAVAgent Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users	SAVAgent.exe
	Save WhenU.Save adware	Save.exe
	SaveDate Unidentified adware	SaveStartDate.Exe
	Savenow WhenU.Save adware	SaveNow.exe
	Savenow Added by the SPREDA.B VIRUS!	savenow.exe
	SAW SmartAdware adware	saw.exe
	Say The Time 5.0 This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly	SAYTIME.EXE
	SB Acer Soft Button on Acer Tablet PCs	SB.exe
	SB Audigy 2 Startup Menu Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function	/l:eng
	SB Watchdog Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank	SBWatchdog.exe
	SB13mini Added by the SPYBOT-EJ WORM!	RYZO32.EXE
	SBAutoUpdate SpywareBlaster auto-updater	sbautoupdate.exe
	SBC RoamingClient Part of AT&T FreedomLink Wi-Fi connection software	SBCFL.exe
	SBC Self Support Tool matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide	matcli.exe
	SBC Yahoo! Connection Manager Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection	ConnectionManager.exe
	SBCSTray System Tray access to CounterSpy anti-spyware from Sunbelt Software	SBCSTray.exe
	SBDrvDet Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one	SBDrv.exe
	sbdrvdet Checks to see if Creative sound card driver should be updated	sbdrvdet.exe
	SBHC SuperBar parasite - uninstall available here	sbhc.exe
	SBMPOP SearchByMedia adware	SBMPop.exe
	SBMX SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)	sbmx.exe
	sbss Launcher SideBySide adware	sbss.exe
	SbUsb AudCtrl Control for Soundblaster MP3 external (USB) sound card	RunDll32 sbusbdll.dll, RCMonitor
	sc ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc	scrubxp.exe
	sc Watchdog 2.0 Software - monitoring program	sc.exe
	sc All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file	run.exe
	sc23exec Possibly related to a digital camera	sc23exec.exe
	SC3300CC SiPix digital camera Twain device driver	SC3300CC.exe
	scain Delfin Media Viewer adware related	s030109.Stub.exe
	ScamDisk Added by the LEWOR.D WORM!	SVOHOST.exe
	scan ClientMan parasite variant	mscman.exe
	Scan Detector Associated with PrimaScan scanners. Is it required?	Pmxdetect.exe
	Scan Register Added by the RBOT-AT WORM!	ssms.exe
	Scan Wizard Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required?	button.exe
	ScanDisc Added by the GREGSTAR TROJAN!	satan.exe
	ScanDisk Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker	ScanDisk.exe
	scands32.exe Added by a variant of the ADCLICKER TROJAN!	scands32.exe
	Scandsk2 Added by the AGOBOT-PK WORM!	scandsk2.exe
	scandskx.exe Added by the DLOADR-ARM TROJAN!	scandskx.exe
	ScanFile ??	??
	ScanInicio Part of Panda Antivirus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active	Inicio.exe
	Scanner Detector ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button	SDetect.exe
	Scanner File Utility Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation	NsCatCom.exe
	ScanPanel Trust Easy Webscan scanner related - what does it do and is it required?	ScanPanel.exe
	Scanreg Added by the QQPASS.E TROJAN!	[filename]
	ScanRegistry Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe	nsrvnt.exe
	ScanRegistry Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe	scanregv.exe
	ScanRegistry Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:Windows or C:Winnt)	Scanregw.exe
	ScanRegistry Added by the STATOR WORM! Not to be confused with the legitimate ScanRegistry entry - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%System (where %windir% is the Windows directory - C:Windows or C:Winnt). Runs from the registry RunServices key as opposed to the Run key	Scanregw.exe
	ScanRegistry Added by the DINOXI or DINOXI.B WORMS!	N/A
	ScanRegistry Added by the NYXEM-D WORM! Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines. This worm file is found in the System (9x/ME) or System32 (NT/2K/XP) folder	scanregw.exe
	ScanRegistry Added by the DWNLDR-FZY TROJAN!	update.exe
	ScanSpyware v * Spyware remover (where * = the version number) - not recommended, see here	Scanner.exe
	scApp Added by the STANDO-E WORM!	scApp.exe
	scApp Added by the ACNATT.A WORM!	suchost.exe
	SCardSvr Related to SmartCard readers and sometimes uses lots of system resources	scardsvr.exe
	SCardSvr Added by the MOFEI.B WORM!	SCardSvr32.Exe
	SCDEmuApp.exe Related to PowerISO - CD/DVD image file processing tool	SCDEmuApp.exe
	scheck45 Related to unknown malware - hidden installer associated with it	scheck45.exe
	schedl Added by the VB-DVW WORM!	schedl.exe
	schedm Part of Antivir PersonalEdition Classic anti-virus	schedm.exe
	ScheduIe Premium rate adult content dialler	nrchk.exe
	ScheduIr Added by a variant of the SDBOT WORM!	msexploren.exe
	ScheduIr Added by a variant of the SDBOT WORM!	shch.exe
	ScheduIr Added by a variant of the SDBOT WORM!	svchst.exe
	ScheduIr Added by a variant of the SDBOT WORM!	winagent.exe
	Schedule Scheduler for Mercury Ez View TV Tuner Card	Schedule.exe
	Scheduled Maintenance Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs	Scheduled_Maintenance.exe
	Scheduler Added by the TACTSLAY.A TROJAN!	expIorer.exe
	Scheduler Added by the HOSTBANK-A TROJAN! Note - this particular msmsgs.exe file is located in the WindowsSystem32Config or WinntSystem32Config folder, and should not be mistaken for the MSN Messenger file of the same name!	MSMSGS.EXE
	Scheduler Added by the TACTSLAY.A TROJAN!	outIook.exe
	Scheduler Added by the TACTSLAY.A TROJAN!	svcrhost.exe
	Scheduler Added by the TACTSLAY.A TROJAN!	svcshost.exe
	Scheduler Added by the TACTSLAY.B TROJAN!	winagent.exe
	Scheduler Tenebril GhostSurf or SpyCatcher related scheduler - you can schedule daily, weekly, monthly or one-time only cleanings	Scheduler daemon.exe
	Scheduler Added by the TACTSLAY.B TROJAN!	msnexploren.exe
	Scheduler Added by the TACTSLAY.B TROJAN!	sdhch.exe
	Scheduler Added by the TACTSLAY.B TROJAN!	svchst.exe
	Scheduler Service Added by the LIOTEN.KX WORM!	wsass.exe
	SchedulerMgr Premium rate adult content dialer	navchk.exe
	Scheduling Agent Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect	Scheduler.exe
	SchedulingAgant Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename	MMTASK.EXE
	SchedulingAgent MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans	mstask.exe
	SchedulingAgent MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans	mstinit.exe
	SchedulingAgent Added by the DINOXI or DINOXI.B WORMS!	N/A
	Schmaili Schmaili - insert animated smilies into your e-mail	Schmaili.exe
	schost Added by the TJSERV.D TROJAN!	[path to trojan]
	SchSvr WinScheduler is installed with Home Theater or WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs	SchSvr.exe
	SCHWIZEX Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot	SCHWIZEX.EXE
	sck121 Added by a variant of the MAILBOT TROJAN!	helpsyss.exe
	sclick Added by the FAKEALERT TROJAN!	sclick.exe
	ScManager Added by the FORBOT-CW WORM!	scman.exe
	scopedll Added by a variant of the CRYPTER.C TROJAN!	scopedll.exe
	Scotia OnLine Recovery Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. . represents the version number. Now obsolete after Scotiabank modernised their login process	etdirrcv.exe
	*Scotia OnLine Security v.* Recovery** Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. . represents the version number. Now obsolete after Scotiabank modernised their login process	etdirrcv.exe
	Scr Added by the OPASERV.T WORM!	scr.scr
	ScrapPad ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper	Scrappad.exe
	scrbmk Added by the DLOADER-VP TROJAN!	[path to trojan]
	Screen Calendar Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler	scrcal.exe
	Screen Guard Part of Access Denied security and privacy software	launch.exe
	Screen Guard Message Scan Part of Access Denied security and privacy software	sgms.exe
	Screen Saver Added by the RBOT-AGP WORM!	scrnsaver.scr
	Screen Saver Control Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon	FSScrCtl.exe
	ScreenHunter 4.0 Free ScreenHunter 4.0 Free is a completely free screen capture software for you to easily take screenshots	ScreenHunter.exe
	ScreenPrint32 ScreenPrint32 screen capture software - can be launched manually	ScreenPrint32.exe
	screxe ??	scruser2k.exe
	script Maybe associated with DOS on a Win9x machine	script.bat
	ScriptBlocking Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information	SBServ.exe
	ScriptSentry Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly	Scriptsentry.exe
	Scroll-In-Mouse V2.0 Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features	SCROLL.EXE
	scrss Added by the HACDEF-R TROJAN!	scrss.exe
	scrsvc Added by the AGENT-DS TROJAN!	scrsvc.exe
	ScrSvr Added by the OPASERV WORM!	ScrSvr.exe
	ScrSvrOld Added by the OPASERV WORM!	[worm filename]
	Scsi SCSI Miniport driver	Scsi.exe
	sctrlmgr Added by a variant of the DWNLDR-GAH TROJAN!	sescmgr.exe
	scvhost Added by a variant of the SPYBOT WORM!	svzhost.exe
	scvhost Wiretap surveillance software. Uninstall this software unless you put it there yourself	scvhost.exe
	scvhost loader Added by the SDBOT-CY TROJAN!	ixplore.exe
	scvhost.exe Added by the LOHAV-N TROJAN!	scvhost.exe
	sd32info Added by the CRYPTER.A TROJAN!	sd32info.exe
	SDaemon PC Security from Tropical Software. 'PC Security(tm) 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security(tm) offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'	sdaemon.exe
	SDAutoLiveupdate Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here	LiveUpdateSD.exe
	SDAv Added by the SERFLOG.C WORM!	csnss.exe
	SDAv Added by the SERFLOG.C WORM!	svhost.exe
	sdchosts32 Added by the RANKY.AG TROJAN!	vbdd.exe
	SDClientMonitor Related to LANDesk Management Suite from LANDesk Software Ltd. What does it do and is it required?	sdclientmonitor.exe
	SDetect ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button	SDetect.exe
	sdfsdfsdf Added by a variant of the SPYBOT WORM!	sp2update.exe
	SDIN Adapter Added by the FORBOT-AP WORM!	sdin.exe
	SDJobCheck Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup?	triggusr.exe
	SDK Codre Function22 Added by the SDBOT-YJ WORM!	sdkimddprovment2.exe
	SDK Core Component Added by the SDBOT-WC WORM!	sdkcore.exe
	SDK Core Function Added by the RBOT.BHL WORM!	sdkimprovment.exe
	SDK Core Function2 Added by the SPYBOT.OGX WORM!	sdkimprovment2.exe
	Sdk.exe [* = random char] Sdk.exe [* = random char]	Sdk.exe [* = random char]**
	Sdk.exe [* = random char]** CoolWebSearch/HomeSearch adware - for examples, see this log	Sdk.exe [* = random char]**
	Sdk32.exe [* = random char]** CoolWebSearch/HomeSearch adware - for examples, see this log	Sdk32.exe [* = random char]**
	SDKcore Update Components2 Added by the RBOT-ABA WORM!	SDKC0R3.exe
	sdkupdate22 Added by the FORBOT-DT WORM!	SDK0mCORE.exe
	SDPhotoBar.exe SmartDraw Photo (now FotoFinsh) - "organize, enhance, print, and share your photos. It's also a powerful graphic editor for creating images and web graphics"	SDPhotoBar.exe
	SDR6_Check DriveCleaner is a security assesment tool which gives exaggerated reports of security and privacy risks on a computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported risks	udcsdr.exe
	sdrss Added by the SDBOT-SQ WORM!	sdrss.exe
	sds20 InlookExpress logs keystrokes and captures screenshots. If you didn't install this yourself remove it. Note - this should not be confused with the svchost.exe system process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder! This file is located in a "sds20" folder	svchost.exe
	SDTray RSA Keon Web PassPort - software that allows organizations to use digital certificates in a Web-based environment to help ensure that their transactions are authentic, confidential and digitally signed	sdtray.exe
	SDTray Spyware Doctor spyware remover - system tray access	SDTrayApp.exe
	sdxsys32 Added by the BROGGER-A TROJAN!	sdxsys32.exe
	sealmon SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint and Email	sealmon.exe
	Search Bar Added by the OPANKI-F WORM!	taskbar.exe
	Search Hook ??	srchhook.exe
	Search Page Naupoint browser hijacker	http://find.naupoint.com
	Search-Exe Search-Exe hijacker	SE.exe
	Search.vbs Hijacker
	searchbar SearchBarCash adware variant	vnmispoisn downloader.exe
	SearchEnhancement SCBar foistware	scbar.exe
	searchnav SearchNav adware - IEFeatures/Popnav variant	searchnav.exe
	SearchNavVersion SearchNav adware - IEFeatures/Popnav variant	searchnavversion.exe
	SearchNet_Up SearchNet adware	ServeUp.exe
	SearchSetter Browser hijacker - redirecting to FindWhateverNow.com	searchsetter[1].exe
	SearchSpy SearchSpy misleading spyware remover - not recommended, see here	SearchSpy.exe
	SearchSquire[number] SearchSquire adware	SearchSquire[number].exe
	SearchUpgrader Hijacker	SearchUpgrader.exe
	Secboot Added by the HAXDOOR.D TROJAN!	w32tm.exe
	secboot Added by a variant of the HAXDOOR.BC TROJAN!	mszx23.exe
	secboot Added by the HAXDOOR-AE TROJAN!	vtd 16.exe
	Second Copy 2000 Related to Second Copy(r) - a files/folders backup utility	SecCopy.exe
	SecondChance Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash	sctray.exe
	Secret Added by the DELF-LW TROJAN!	Secret.exe
	Secret-Crush Hijacker that may reset your browser's home page and/or search settings to point to undesired sites	start.exe
	SECRETMAKER Secretmaker is a combonation of eight privacy-defending programs, including Spam Fighter Pro, Worm Hunter, Pop-Up Killer, Banner Blocker, Cookie Eraser, Privacy Protector, History Cleaner, and Garbage Cleaner	secretmaker.exe
	SecretSmileys Secret Smileys is an add-on for AIM that provides users access to 1000's of new Smileys that can be viewed by anyone using a current version of AIM. Secret Smileys also adds other features such as logging of IM conversations, and it gets rid of that annoying advertisement on your buddy list window	ss.exe
	secserv.exe Reported by Panda as an EasySearch Adware variant. Note - EasySearch modifies the Internet Explorer settings and may download programs onto the infected computer	secserv.exe
	secsvc32 Added by the GLOBAL PATROL TROJAN!	secsvcnt.exe
	Secsys UltraSoft Key Interceptor surveillance software - uninstall this unless you put it there yourself!	Secsys.exe
	secure DealHelper adware	secure.exe
	secure Added by the RBOT-AFO WORM!	svshost.exe
	secure socket layer Added by an IRCBOT TROJAN!	wins32a.exe
	Secure Socket Layer Certification Added by the VANEBOT-AN WORM!	sslcert.exe
	Secure System Added by the AGOBOT.ACI WORM!	integitor.exe
	SecureClean4RegManager WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually	scregmanager4.exe
	SecureClean4Tray WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually	sctray4.exe
	SecureCleanIEClean SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches	SCIEClean.exe
	SecureItPro SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop	Secureitpro470p.exe
	SecureLogin Added by the REDZED WORM!	Mslg32.exe
	SecureOnlineAccountNumbers Related to Secure Online Account Numbers by Discover(R) Card from Orbiscom Ltd. Secure and innovative payment solutions	SOAN.exe
	SecurePCCleaner SecurePCCleaner misleading security program - not recommend, see here	GDC.exe
	Security Added by a variant of the SDBOT WORM!	WindowsSecurityUpdate.exe
	Security Accounts Manager SM Added by the SPYBOT.JE WORM!	samsm.exe
	Security Agent Added by the BANCBAN-F TROJAN!	securag.exe
	Security Agent Manager Added by the RBOT-SV WORM!	mssams.exe
	Security Center Added by the SDBOT.CFT WORM!	AppControl.exe
	Security iGuard Spyware remover - not recommended, see here	Security iGuard.exe
	Security Manager A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private	SecurityManager.exe
	Security Patch Added by the RBOT-ZW WORM!	scmss.exe
	Security Patch Added by the SDBOT-BM WORM!	WinUpdate32.exe
	Security Patches Added by the RBOT.WW WORM!	msnkn.exe
	Security Patches Added by the SDBOT-KB WORM!	WinLab32.exe
	security service Added by an unidentified WORM or TROJAN!	syss.exe
	Security Service Added by the RBOT-GGF WORM!	secsvc.exe
	Security Service Process Added by the AGOBOT-LC WORM!	svhost.exe
	securw Added by the NOPIR.A WORM!	Nctrup.exe
	SECWIZ98 Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here	SECWIZ98.EXE
	seekmo Seekmo Search, a 180Solutions adware variant - also see here	seekmo.exe
	SeekmoToolbar 180solutions/Seekmo adware	${HOOKOE_FILE}
	seeve Medload adware	seeve.exe
	Select server Added by the DLOADER-WD TROJAN!	slcsvr.exe
	SelfHostUtil ??	slefhost.exe
	seli Added by the LOWZONE-AS TROJAN!	[path to file]
	SemanticInsight Added by RXToolbar ADAWARE! Software that displays pop-up/pop-under advertisements when the primary user interface is not visible	SemanticInsight.exe
	SeMS PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone	SeMS.exe
	Sen Detected by Kaspersky as PurityScan.ah	tlii.exe
	Sensiva Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly	Sensiva.exe
	SENTRY From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it	SENTRY.exe
	Sepate Security Firewall Added by a variant of the RBOT WORM!	sepate.exe
	septpop06apsept MediaMotor.Popupwithcast adware	septpop06apsept.exe
	Serials Any one of a variety of worms and trojans	serials.exe
	SernellApp.pcx Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "D5133" subfolder	csrss.exe
	serpe Added by the SERFLOG.A WORM!	formatsys.exe
	serpe Added by the SERFLOG.A WORM!	msmbw.exe
	serpe Added by the SERFLOG.A WORM!	serbw.exe
	serrdctl.exe Shared Modem Service Client Event Viewer - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems	serrdctl.exe
	serrv Added by the WAREZOV.DC WORM!	serrv.exe
	SERV PacK2 Added by the SDBOT-ACP WORM!	nerx.exe
	Serv-U FTP server	serv-u32.exe
	Serv-U Added by the MANIFEST TROJAN!	wssdsu.exe
	server Added by the DELTAD.A WORM!	server.exe
	server Added by the METHS-A TROJAN!	system.exe
	server Added by the SINGU-Q TROJAN!	server.exe
	Server Backbone Added by the RBOT-ZM WORM!	server05.exe
	Server Runtime Error Added by the SDBOT-DFA WORM!	unsec.exe
	Server Runtime Process Added by the SDBOT-DDB WORM!	wbemstest.exe
	SERVER.EXE Added by the BUSHTRO122 or SMOKODOOR TROJANS!	SERVER.EXE
	serverex Added by the DELTAD.A WORM!	Server.txt.vbs
	Serverx Added by the MADANGEL VIRUS!	Serverx.exe
	Service Added by the ALADINZ.H TROJAN!	service.exe
	Service Added by the KAITEX.E TROJAN!	[trojan filename]
	Service Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder	services.exe
	Service Added by the CHA TROJAN!	SYSNT.exe
	Service Added by the ASSIRAL-C WORM!	Service.pif
	service Added by a variant of the RBOT WORM!	wN2S.exe
	Service Cleaner Added by the RBOT.BRH WORM!	filen.exe
	Service Connection For Compaq PC's. Part of Backweb	sccenter.exe
	Service Connection For Compaq PC's. Part of Backweb	bwtray.exe
	Service Controller Added by the GAOBOT.AO WORM!	Csrrs.exe
	Service Controller Added by the PREVERT TROJAN!	service.exe
	Service Drivers Added by the RBOT.BMD WORM!	msnpg.exe
	Service Drivers Added by the SDBOT-WK WORM!	PC.EXE
	Service Drivers Added by the RBOT-ZJ WORM!	Compt.exe
	Service Drivers Added by the SDBOT-YX WORM!	abl.exe
	Service Drivers Added by a variant of the RBOT WORM!	MSNMEssenger.exe
	Service Host Added by the TORVEL.B WORM!	[filename].exe
	Service Host Added by the TORVEL WORM!	spoolxx.exe
	Service Host Added by the DAOSER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services{C922CCC4-CF61-4589-A0D1-828160704853} subfolder	svchost.exe
	Service Host Added by the DAOSER-C TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services[random] subfolder	svchost.exe
	Service Host Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder	svchost.exe
	Service Host Driver Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder	svchost.exe
	Service Host Process Added by the GAOBOT.GEN!POLY WORM!	spoolsvc.exe
	Service Manager SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs	sqlmangr.exe
	Service Manager Added by the PASSMAIL-D VIRUS!	SERVICEMGR.EXE
	Service Manager Added by the PROXY-GRIC TROJAN!	dxsound.exe
	service manager Added by the DONBOMB.A TROJAN!	service.exe
	Service Monitor Added by the RBOT-ALE WORM!	msnfilen.exe
	Service Monitor Added by the DELF-NK TROJAN!	javams32.exe
	Service Monitor Added by the SDBOT-AFO WORM!	javams64.exe
	Service Monitor Added by the SPYBOT.YQW WORM!	msnserve.exe
	Service Monitor Added by the RBOT-AQJ WORM!	WinOcx.exe
	Service Monitor Added by the RBOT.EEH WORM!	csnss.exe
	Service Monitor Added by a variant of the RBOT WORM!	filen.exe
	Service Pack Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe, common.pif, common.scr, Sexo.exe, Sexo.jpg.pif, ini_file__.pif, load_me__.tmp, msfile.pif, system_load_.pif or zipped.rar.pif	[various filenames]
	Service Pack 1 Added by the VXGAME.Z TROJAN! Note - the filename is random - see the link. Typical examples are vexg6ame4.exe, vexga3me2.exe, vexga4m1et4.exe, etc	[random filename]
	Service Pack DLL Runtime Added by a variant of the RBOT WORM!	spdll32.exe
	Service Process Added by the DARKER WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder	SVCHOST.EXE
	Service Process Added by a variant of the SPYBOT WORM!	winset.exe
	Service Process Added by the DCMBOT-C TROJAN!	service.exe
	Service Process Added by the DCMBOT-E TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder	smss.exe
	Service Process Added by the DCMBOT-E TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in "config" subfolder	smss.exe
	Service Process Added by the DCMBOT-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder	svchost.exe
	Service Registry NT Save Added by the BANCOS-CG TROJAN!	jdbgmgrnt.exe
	Service Registry NT Save Added by the BANCOS-BY TROJAN!	taskmgrnt.exe
	Service Registry NT Save Added by the BANCOS-BM TROJAN!	regeditnt.exe
	Service Scheduler Added by the AGOBOT-PH WORM!	scheduler.exe
	Service System Added by the BANCOS-DA TROJAN!	kernels32.exe
	Service System Added by the BANCOS-EL TROJAN!	windowsXP.exe
	Service System Added by the BANCOS-FS TROJAN!	kgbfsm344.exe
	Service System Added by the BANCOS-FJ TROJAN!	wernell87.exe
	service updaer Added by an unidentified VIRUS, WORM or TROJAN! - probably a SPYBOT variant	qualityz.exe
	Service.exe servedby.advertising popup generator	Service.exe
	service32 Added by the AGOBOT-ST WORM!	service32.exe
	service32.exe Added by the DLOADR-AYX TORJAN!	[path to trojan]
	ServiceConfig Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation	ispbeg.exe
	serviceconnect Added by the AGOBOT.AIR WORM!	serviceconnect.exe
	ServiceLayer Nokia Connectivity Library support task that is needed by NCLTRAY and by the Nokia Connection Manager for either to work properly	ServiceLayer.exe
	servicemng Added by the TAME-C WORM!	service.exe
	services Added by the ZCREW TROJAN!	start.bat
	Services Added by the METEORSHELL TROJAN!	[path to trojan]
	Services Added by an unidentified VIRUS, WORM or TROJAN! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe	back32.exe ...service.exe
	Services Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!	services.exe
	Services Added by an unidentified VIRUS, WORM or TROJAN!	winread.exe
	Services Added by a variant of the RBOT WORM!	windns.exe
	Services Added by the LANFILT-J TROJAN!	mshost.exe
	services Added by the SDBOT.N WORM!	Svchosts.exe
	Services Added by a variant of the RANKY.U TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!	csrss.exe
	Services Added by a Proxy Trojan variant	scks32.exe
	Services Added by the RANKY.L TROJAN!	sockys32.exe
	Services Added by a Proxy Trojan variant	sys.exe
	services Added by the FLYVB-C WORM!	windows32.exe
	services Added by the WIN32.SMALL.N TROJAN!	socks.exe
	Services Added by the ZINCITE.A TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder	services.exe
	Services Added by the RANCK-DB TROJAN!	[path to trojan]
	Services Added by the MOGI WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder	iexplore.exe
	Services Added by the REPER-B WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	svchost.exe
	Services Added by a variant of the SDBOT WORM!	sysamp.exe
	Services Added by an unidentified WORM or TROJAN!	prosys32.exe
	Services Added by an unidentified WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)	iexplorer.exe
	Services Added by the RANCK-LT TROJAN!	iexploler.exe
	Services Added by the RANCK.LU TROJAN!	iexpolere.exe
	services Added by a variant of the RANKY TROJAN!	sample.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	localsvc.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	netsvc.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	spoolsvc.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	svcadmin.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	svcman.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	svcrun.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	tcpsvc.exe
	Services Administrator Added by the DLOADER-NY TROJAN!	websvc.exe
	Services Controller Added by the CIADOOR.122 VIRUS!	lsassa.exe
	Services Controller Added by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder	services.exe
	Services Host Added by the DONK WORM!	Scchost.exe
	Services Host Added by the AGOBOT-TG WORM!	svchost32.exe
	Services Logon Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! By default this file is located in Documents and Settings[user name]Templates	services.exe
	Services Process Spyware - detected by Kaspersky as the SMALL.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!	services.exe
	Services Process Added by the SMALL-EK TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder	smss.exe
	Services Startup Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! By default this file is located in Documents and Settings[user name]Templates	services.exe
	Services Startup Added by a variant of the RBOT WORM!	svhost33.exe
	Services.dll Added by the SOBER-L WORM! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a msagentsystem subfolder of the Winnt or Windows folder	smss.exe
	Services.EXE Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder	services.exe
	services.exe Added by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder	Services.exe
	services.exe Added by the MSNSPY-B TROJAN!	servicess.exe
	Services004 Added by the BUGBROS WORM!	[worm filename]
	services32 Added by the TrojanDownloader.Agent.rv TROJAN!	mc-110-12-0000079.exe
	services32 Shorty adware - also detected as the AGENT.FD TROJAN!	mc-58-12-0000120.exe
	services32 Shorty adware - also detected as the AGENT.FD TROJAN!	mc-58-12-0000140.exe
	Services32 Startup Added by the SDBOT-XO WORM!	win32dll.exe
	ServicesAdministrator Added by the PUNYA-B WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!	SERVICES.EXE
	ServicesLoad Added by the DEARIS-A TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	lsass.exe
	ServicesLog Added by the RBOT-AMX WORM!	ccapp32.exe
	ServicesNotify Defender Pro Antispy	ServicesNotify.exe
	Servicewin Added by the MSNVB-D WORM!	Hide32.exe
	Servicing Added by the SDBOT.BUI WORM!	hostd.exe
	Servicio Local Added by the SPYBOT.BGX WORM!	svhost.exe
	Servicos Added by the BANKER-EHR TROJAN!	AdobeLanc.exe
	Servicos Added by the BANCOS-BCM TROJAN!	System.exe
	servics Added by the SINGU-J TROJAN!	servics.exe
	SERVlCE Added by the AGOBOT-UB WORM!	SERVlCE.EXE
	ServUTrayIcon System Tray icon for Serv-U FTP server. Is it required?	ServUTray.exe
	SES Service Added by the SDBOT-CZU WORM!	sesvc.exe
	Session Client SurfSpy keystroke logger/monitoring program - remove unless you installed it yourself!	sescli.exe
	Session Manager Subsystem Added by the RBOT-AGS WORM!	smssa.exe
	SESync DownloadWare adware	sed.exe
	SetCacheMode Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller	rundll32.exe ptipbmf.dll, SetWriteCacheMode
	SetDefaultMIDI Related to a Soundblaster Audigy soundcards. What does it do and is it required?	MIDIDef.exe
	SetDefaultPrinter Used by HP and Compaq computers to hide the windows of programs passed as arguments to it	cloaker.exe
	setdefprt Used to set a Brother MFC printer/copier/scanner as the default printer after installation	setdefprt.exe
	SetDefPrt Used to set a Brother MFC printer/copier/scanner as the default printer after installation	BrStDvPt.exe
	SetecCertUtil Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV	Certutil.exe
	setFTPBack Added by the FTP_BMAIL TROJAN!	createsw.exe
	SetHook Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"	SetHook.exe
	SETI@home SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data	SETI@home.exe
	seticlient SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data	SETI@home.exe
	SetIcon Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog	SetIcon.exe
	SetiQueue Provides work unit buffering for Seti@Home clients - see here for more details	Setiqu~1.exe
	SetiSpy SETI Spy is a little program to "spy" on the progress and performance of the SETI@home client. Called a "spy" because it is unobtrusive as possible	SetiSpy.exe
	SetPoint Added by the RBOT-BWI WORM! Note - this is not the valid Logitech Setpoint mouse and keyboard entry that uses the same filename and is located in the LogitechSetpoint sub-folder of Program Files. This file is located in the System (9x/Me) or System32 (NT/2K/XP/Vista) folder	SetPoint.exe
	SetPoint Logitech SetPoint Event Manager for their range of mice and keyboards. Required if you want to use the advanced features of these devices and is located in the LogitechSetpoint sub-folder of Program Files	Setpoint.exe
	SETPOINT Logitech Inc Added by the RBOT-AAX WORM!	KHALMNP.exe
	SetRefresh Found on a Compaq PC. Video refresh rate utility? Is it required?	SetRefresh.exe
	Setting Added by the SDBOT.GEN TROJAN!	sysweb.exe
	setup HP DeskJet Setup - printers function normally without it	hphprld.exe ....setup.exe
	Setup experation Added by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder	svchost.exe
	setupa Added by the QQPASS-K TROJAN!	runt32.exe
	setupdata Added by the QQPASS-AC TROJAN!	rnll32.exe
	SetupICWDesktop Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway	icwconn1.exe
	setupuser Regfile in disguise - another CoolWebSearch parasite variant	regedit.exe setupuser.log
	setuzp ??	setuzp.exe
	SetVrc Added by the HUNTOCX WORM!	setvrc.exe
	Sex Teris Added by the REPAD WORM!	st01b.exe
	Sexnow Added by the SENOW-B premium rate adult content dialler	Sexnow.exe
	Sexy_Blondes Added by the Sexy DIALER! Related also to Hot Tarts DIALER!	Sexy_Blondes.exe
	Sexy_sg Premium rate adult content dialler	Sexy_sg.exe
	sf SurfEnhance adware component	sf.exe
	SFIGUI Sonic Focus - "enhances music, movie and game sound by analyzing compressed audio streams in realtime, then restoring and enriching audio back to its original performance qualities"	SFIGUI.EXE
	sfita Added by the FAVADD-H TROJAN! Also known as SurfEnhance adware	sfita.exe
	SfKg6w Added by the AGENT.BUO WORM!	rayiou.exe
	SFP Verizon Online Support Center - prompts for online updates	vzSFPWin.EXE
	sfpc Spy4PC surveillance software. Uninstall this software unless you put it there yourself	sfpc.exe
	SFtrb Service Added by the SOBIG.D WORM!	cftrb32.exe
	SfWinStartInfo SFIRM32 Online Banking software	sfWinStartupInfo.exe
	Sgecrypt SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"	Sgecrypt.exe
	Sgeecview SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"	Ecview.exe
	sginst eAcceleration Stop-Sign security software related. Previously not recommended, see here	sginst.exe
	SGTBox Canon scanner driver. Is it required?	SGTBox.exe
	sgtray StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups	sgtray.exe
	Shadow NTI Shadow 3 is an award-winning easy-to-use backup application that automatically protects your photo, music, video, and various data files. It makes data restoration as easy as dragging and dropping files from one place to another	Shadow.exe
	ShadowUser Pro Edition StorageCraft(tm) ShadowUser(tm) provides easy to use desktop security and protection for Windows operating systems. ShadowUser is the best way to prevent unwanted changes to PCs and laptops	ShadowUser.exe
	shambl3r Added by the REMABL WORM!	cnf.bat
	shambl3r* Added by the REMABL WORM! where * is 2 to 11	shambl3r.exe
	Shania Added by the SHANIA VIRUS! - NOTE: this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot. Name field may be empty	Shania.vbs
	Share-to-Web Namespace Daemon HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites. In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs	hpgs2wnd.exe
	Shareaza Shareaza P2P client	Shareaza.exe
	Shareaza Shareaza P2P client related	bindata.exe
	sharedprem Added by the MAKECALL TROJAN!	sharedprem.exe
	ShareSearcher Added by the AGENT-FPE TROJAN!	[path to trojan]
	Sharing and Mapping Software Intel AnyPoint internet sharing software. Now discontinued	DShmap.exe
	SharkEject Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required	AEJCT32.exe
	SharpTray Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents"	SharpTray.exe
	Shcenter IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"	chcenter.exe
	shdef Added by the VB-DVS TROJAN!	shdef.exe
	SheduIer Premium rate adult content dialler	svchst.exe
	SheduIer Added by the EB TROJAN!	shch.exe
	SheduIer Added by the EB TROJAN!	winagent.exe
	Shedule Connection Added by the PPDOOR-R WORM!	arpo412.exe
	Sheduler Added by the TACTSLAY.B TROJAN!	nerocheck.exe
	Shell Added by the BADSECTOR TROJAN!	Shell32.exe
	Shell Homepage hijacker re-directing browsers to adult content websites	ray.exe
	Shell Homepage hijacker re-directing browsers to adult content websites	Tray.exe
	Shell Added by the GOLDUN TROJAN!	wmedia16.exe
	Shell Added by the SMALL-DL TROJAN!	Open32.exe
	Shell Added by the GP TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System subfolder	Explorer.exe sound_drive16.exe
	Shell Added by the ZLOB TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System (9x/Me) or System32 (NT/2K/XP) folder	Explorer.exe, msmsgs.exe
	Shell Added by the DOYORG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder	Explorer.exe [path] svchost.exe
	shell Added by the KAKKEYS TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System32 subfolder	explorer.exe
	Shell Added by the KIPIS-U TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in a "Microsoft" subfolder	iexplore.exe
	Shell Added by the TORPIG-C and TORPIG-J TROJANS! Filenames spotted include ibm00001.exe, ibm00002.exe, ibm00005.exe and so on	*ibm0000.exe [* = digit]**
	Shell Added by the BANCBAN-FT TROJAN!	taskmrg.exe
	Shell Added by the AGENT-FD TROJAN!	Explorer.exe winupdate.exe
	Shell Added by the ANSERIN TROJAN!	ibm[RANDOM 5 DIGIT NUMBER].exe
	Shell Added by the GOLDSPY-B TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	svchost.exe
	Shell Added by the TORPIG-Q TROJAN!	ibm00001.dll
	Shell Added by the AGENT-BR TROJAN!	wmedia32.exe
	Shell API32 Added by the TIBICK.C WORM!	svcnet.exe
	Shell Extension Added by a variant of the LOVGATE WORM!	spollsv.exe
	Shell Tray Window Added by the STULTDOR-A TROJAN!	ShellTraywnd.exe
	shell update Added by the AGOBOT-TH WORM!	shellexec.exe
	Shell.exe Added by the EMERLEOX.S WORM!	Shell.exe
	Shell32 Added by the SCAFENE WORM!	Shell32.vbs
	shell32 Added by the JLOK-A WORM!	ntldrt.exe
	Shell32 Added by the IRCBOT-AY TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup unless you add it manually! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder	iexplore.exe
	ShellApi Added by the NETDEV.B TROJAN!	SHELLMSN.EXE
	Shellapi32 Added by the NETDEVIL (or NERTE) TROJAN!	Shellapi32.exe
	Shellapi32 Added by an unidentified WORM! Note - do not confuse with the McAfee SecurityCenter file of the same name	mcvsrte.exe
	ShellCommand Added by the REMCON-A TROJAN!	[path to file]
	Shelldaemon Added by a variant of the AGENT.ALN TROJAN!	Shelldaemon.exe
	ShellEx Added by the ANAKHA TROJAN!	ShellEx.exe
	ShellN Added by the IBILL.Z TROJAN!	isca.exe
	ShellOS Added by the AV TROJAN!	A+++.exe
	ShellRun Added by the MSNOPT-A TROJAN!	lexplore_.exe
	ShellRun32 Added by the IRCBOT-AY TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup unless you add it manually! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder	iexplore.exe
	Shellspl Added by the YALER-A TROJAN!	lsas.exe
	Shellspl Added by the PROXAGE-A TROJAN!	spools.exe
	shellsystem Added by the UPCHAN TROJAN!	shellsystem.exe
	shhost Added by the AGENT.CE TROJAN!	shhost.exe
	shicoxp Installed with the drivers for multi card readers of various brands. To differentiate between the various card slots on multi slot readers the shicoxp.exe file assigns and loads unique drive icons for the various card slots that are displayed in Windows Explorer	shicoxp.exe
	Shine Added by the HAPPYLOW (or NISHE-A) VIRUS!	Shine.exe
	SHINITV ??	shinitv.exe
	Shmgrate.exe Added by the GASTER TROJAN!	ibot4.exe
	ShockmachineReminder Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline. Could be a registration reminder for the trial version	SmReminder.exe
	Shockwave Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	csrss.exe
	Shockwave Init Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs	SWINIT.EXE
	Shockwave Support Added by the DELF-DRA WORM!	FlashPlayer.exe
	ShortKeys 99 ShortKeys from Insight Software Solutions - allows you to program keys with text strings	SHORTKEY.EXE
	ShortKeys Lite ShortKeys Lite from Insight Software Solutions, Inc. A macro utility to automate a task that you perform repeatedly or on a regular basis	shklite.exe
	sHotKey Special function key manager for Chicony keyboards - see here	sHotKey.exe
	Showbehind Advertisement display which can be stopped here	SHOWBEHIND.EXE
	ShowFF Added by the Adware.FFToolBar adware toolbar	ShowFF.exe
	ShowIcon_Justrams_USB Product Driver v2.12r012 Related to Just Rams USB product driver. Is it required?	shwicon.exe
	ShowIcon_PNY_PNY Attach‚ PNY Attach‚ USB flash memory stick System Tray icon - shows when the device is plugged in	shwicon.exe
	ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051 Card reader for memory cards from digital cameras. Is it required?	shwicon.exe
	ShowLOMControl Note that there is a strange symbol in the command field. HKLMSoftwareMicrosoftWindowsCurrent VersionRunShowLOMControl Reg_DWORD 0x00000001 (1) LOM = LAN on Motherboard.It mean Show "LAN on Motherboard" Control.On systems where you can install an external LAN interface, it will warn you that you already have a built-in LAN interface. Appears to be a feature on certain Dell systems	[strange symbol]
	Showme Added by the HANDLE-A VIRUS!	Ruden.vbs
	ShowWnd Found on Gateway computers (and maybe others) - see here. "Showwnd is included with the Chicony keyboard software and is used by the software to stop the keyboard driver's taskbar entry from reappearing. It is not necessary to remove the keyboard software, however if you wish it can be removed through Add or Remove Programs"	ShowWnd.exe
	SHPC32 Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled	SHPC32.exe
	ShStatEXE From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs	SHSTAT.EXE
	Shutdownaware Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system	shutdownaware.exe
	ShutDownPro ShutDownPro - shutdown, reboot, logoff your System with one mouse click	ShutDownPro.exe
	Si Meter Si Meter - keep track of things like CPU activity, network activity and speed, hard-drive activity, hard-drive space, system memory, running processes, or just date and time	SIMETER.EXE
	si91e44b LZIO.com adware downloader	rundll32.exe [path] si91e44b.dll, EnableRunDLL32
	SIA2006 Part of Steganos Internet Anonym privacy software	SIA2006.exe
	SIAPRO6 Steganos Internet Anonym privacy software	sia.exe
	Sicom Added by the NETLIP WORM!	Sicom.exe
	SideACT SideACT organizer software	SideACT.exe
	Sidebar Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. But on other versions of Windows it can be a part of the Searchcentrix hijacker	Sidebar.exe
	SIDEBAR Desktop Sidebar provides you with instant access to the information you most desire by grabbing data from your PC and the internet. The result is a dynamic visual display you configure and control	dsidebar.exe
	SideWinderTrayV4 MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs	SWTrayV4.exe
	SigmaTel Audio Sigmatel audio driver	setup.exe
	SigmatelSysTrayApp System tray program for the Sigmatel Audio sound card. Often found on Dell computers	stsystra.exe
	SigmatelSysTrayApp System tray program for the Sigmatel Audio sound card. Often found on Dell computers	sttray.exe
	SigX ??	sigx.exe
	SigXC SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more"	SigX.exe
	Simcast Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say	SimcastAlerts.exe
	Simple Star PhotoShow Media Manager Simple Star PhotoShow photo editing and organizing software, makes it easy to send and share digital photos. Bundled with software from Nero, ComCast, SnapFish, MacroMedia and others	mssysmgr.exe
	SimpLite-MSN Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)	SimpLite-MSN.exe
	sInErA Added by the SILLYFDC-AB WORM!	.exe
	Singapore Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself	singapore.exe
	SIPPS Web.de Internet phone utility	SIPPSSIPPS.exe
	SiS Dns Added by the DLOADER-UE TROJAN!	dnssvc.exe
	SiS KHooker SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required	khooker.exe
	SiS Mpc Service Added by an unidentified WORM or TROJAN!	mpcsvc.exe
	SiS Mpc Service Added by the CIAFOOR-CJ TROJAN!	mpcsvc.exe
	SiS Tray System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem	sistray.exe
	SiS Windows KeyHook SIS graphics cards related: "Super VGA Keyboard Daemon" - hooks into the keyboard processing chain in order to enable hotkey settings	keyhook.exe
	SiS7012Utility SiS Corporation sound card driver	SiSAudUt.exe
	SISAM10M ??	SISAM10M.exe
	SiSAudio WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems	MP_S3.exe
	siscolor Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board	color.exe
	siService.exe Spam Inspector - anti email spam software	siService.exe
	SiSPower Responsible for power management for SIS chipsets - is it required?	Rundll32.exe SiSPower.dll, ModeAgent
	SiSRaid Related to the SIS Raid system from Silicon Integrated Systems	SRaid.exe
	SiSSetCDfmt Related to a Silicon Integrated Systems Corp (SiS) product?	SiSSetCDfmt.exe
	SISSoundman Related to a Silicon Integrated Systems Corp (SiS) product?	Soundman.exe
	SiSSWLED System Tray utility for SiS 900 network cards	sisswled.exe
	sistrai.exe Added by the PROVA TROJAN!	sistrai.exe
	sistray Added by the PROVA TROJAN!	sistray.exe
	sistray System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem	sistray.exe
	Sistray32 Added by the HOLCAS.A WORM!	remotehost.pif
	Sistray32 Added by the JUMPRED.A WORM!	win.bat
	Sistray32 Added by the TOMETA-C TROJAN!	virus.exe
	sistry Added by the CEBE WORM!	sistry.exe
	SiSUSBRG SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP	SiSUSBrg.exe
	SiteAdvisor SiteAdvisor from McAfee warns you before you interact with a dangerous Web site	SiteAdv.exe
	sittachasnahalbasya Added by the HANSAH-A WORM!	ntoskernel.exe
	sixer566 Added by an unidentified WORM or TROJAN!	sscc.exe
	sixtysix Medload adware	sixtypopsix.exe
	SK51 SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!	SK51.EXE
	SK60 SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!	SK60.EXE
	SK9910DM Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys	SK9910DM.EXE
	SKDAEMON Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys	SKDAEMON.EXE
	skinkers Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here. Leave enabled if you want to receive messages	skinkers.exe
	sks-32 SpyKeySpy logs keystrokes and sends the stolen information to a configurable email address	SKS32P~1.EXE
	Skunk Added by the SUNK-A WORM! Note - this file is found in the root folder (C:), (D:), etc	Skunk.exe
	SkyBlaster Scheduler For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system	SSFSch.exe
	skynetave.exe Added by the SASSER.D WORM!	skynetave.exe
	SkynetRevenge Added by the NETSKY.AA WORM!	winlogon.scr
	Skype Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes	Skype.exe
	Skype Startup Added by the VANBOT-C WORM!	skyp.exe
	SkypeMate SkypeMate acts as a bridge between networks of VoIP and PSTN	SkypeMate.exe
	SkypeStartup Added by the PYKSE-A WORM!	Skype.exe
	SkySurfer Management Service For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system	SmaServ.exe
	SkyTel Process associated with Realtek Voice Manager for some of their audio chipsets	SkyTel.exe
	sl4 rules Added by the SDBOT-QC WORM!	rbot32.exe
	slack12 Added by a variant of the SDBOT WORM!	mfcee.exe
	Slayhacker734 Added by the SIKBOT-A TROJAN!	slay7383.exe
	SleepManager This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode	SleepMgr.exe
	Slibe.com Sliber - freeware screen capturing & online sharing tool	Sliber.EXE
	SlickRun SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:Program FilesOutlook Expressmsimn.exe becomes MAIL	sr.exe
	slide Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!	Iexplore.exe
	slimp3 Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"	SliMP3 Server.exe
	Slingshot Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more". Now superseed by 1-Click Answers	SLINGS~1.EXE
	slipcore Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server	slipcore.exe
	slipgui User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server	slipgui.exe
	SlipStream Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server	slipcore.exe
	slmss SeekSeek search hijacker related - see here	slmss.exe
	sload Win SynchroAd adware, also detected as DLOADER-QG TROJAN!	sload.exe
	slvchost32 Added by an unidentified VIRUS, WORM or TROJAN!	slvchost32.exe
	sm Added by the OLFEB.A TROJAN!	sa_exe.exe
	sm Added by the OLFEB.A TROJAN!	sf_exe.exe
	sm Added by the OLFEB.A TROJAN!	sm_exe.exe
	sm Added by the LUKUSPAM TROJAN!	sr_exe.exe
	SM Added by the IROFFER.CT TROJAN!	iro.bat
	SM1BG USB driver for downloading from within Napster and iTunes to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required	SM1BG.EXE
	SM1NINT Cypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98	SM1NINT.exe
	SM56 Helper Win32 Utility Helper utility for Motorola based SM56 software modems - resides in the System Tray	sm56hlpr.exe
	Sm56acl Helper utility for Motorola based SM56 software modems - resides in the System Tray	sm56hlpr.exe
	sman Unidentified adware	app.tmp [ = digit]**
	SManager Added by the AGENT.BJO TROJAN!	*smanager..exe [* = digit]**
	SManager Added by the DWNLDR-GVG TROJAN!	smanager.7.exe
	SmansaApp Added by the ROMARIO-A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder	winlogon.exe
	Smapp System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller	smtray.exe
	Smart Card Service For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly	ScardSvr.exe
	Smart Connect Monitor Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio	SCMon.exe
	Smart Connect Setup Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio	SCSetup.exe
	Smart Keyboard Netropa Smart Keyboard driver	Smartkbd.exe
	Smart Label O Server Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely	ssloserv.exe
	Smart Label RFViewer Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely	SSLFVIEW.EXE
	Smart Start UP Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos"	PnPDetect.exe
	Smart Touch Related to Plustek OpticSlim scanner	STouch.exe
	Smart Type Assistant Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer	sta.exe
	Smartalec Smartalec PC Accelerator - system optimization utility	pcaccel.exe
	SmartAudio Conexant SmartAudio PC audio chipset software - typically available on HP notebooks with built-in microphones	SmartAudio.exe
	SmartBarXP SmartBarXP is a bar that runs down the side of your screen, and can be configured to display interactive panels known as 'panes'. These panes include media players, slideshow and image viewing panes, a virtual desktop manager, and live news, weather and stock feeds to mention but a few	SmartBarXP.exe
	sMaRTcaPs sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys	SMARTC~1.EXE
	SmartDefrag IObit SmartDefrag helps defragment your hard drive more efficiently than any other product on the market - free or not	IObit SmartDefrag.exe
	Smarthruengine Samsung smarthru software, used with Lexmark Z82 or Samsung multifunction printers	QS.exe
	SmartPCXL Smartalec PC Accelerator - system optimization utility	pcaccel.exe
	SmartSync Pro Related to CompanionLink Software Inc. Synchronization solutions for ACT!, GoldMine, Lotus Notes and Microsoft Outlook	SmartSync.exe
	SMax4 System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel	SMax4.exe
	SMax4PNP SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments	SMax4PNP.exe
	smbdpmi IBM Netfinity Director and Universal Management Services related. What does it do and is it required?	smbdpmi.exe
	smc Sygate Firewall	smc.exe
	smc Sygate Firewall	spfsmc.exe
	SMC Service Sygate Firewall	smc.exe
	SMC Service Sygate Firewall	spfsmc.exe
	smcserv Added by the AGOBOT-OU WORM!	winsrv.exe
	SmcService Sygate Firewall	smc.exe
	SmcServices Sygate Firewall	smc.exe
	SmcServices Sygate Firewall	spfsmc.exe
	smcss Added by the SCLOG-AJ TROJAN!	smcss.exe
	Smcsta.exe SMC Networks wireless PCI card driver. Is it required?	Smcsta.exe
	SmcSVR Added by the LEGMIR.JU TROJAN!	SmcSVR.exe
	smgr Covert Sys Exec malware variant	mgrs.exe
	smgr Added by an unidentified WORM or TROJAN!	smgr.exe
	Smiley District Smiley District adware	plugin.exe
	Smith Micro try Smith Micro shared files. Comes with D-Link web cam	smiptray.exe
	smodul UserMonitor from Neuber. Teachers can broadcast screen to other screens, see students screens in a network and detect unauthorized software	smodule.exe
	SmoothView TOSHIBA Zooming Utility - allows "automatic" zoom feature in some appications, like IE, MS-Office, WMPlayer, Adobe Reader and also desktop icons	SmoothView.exe
	SMPAutoStart Smart Phone Recorder demo from KenGolf.com. Answering Machine, Caller ID, Call Recording	smpdemo.exe
	SmpcSys Set Up My PC utility supplied with some Packard Bell computers	SmpSys.exe
	smres Added by the AGOBOT-UA WORM!	smres.exe
	SMS Added by the IROFFER.CT TROJAN!	iro.bat
	SMS Application Launcher Microsoft Systems Management Server - used to manage computers on a network remotely	LAUNCH32.EXE
	SMS Client Service When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)	clisvc95.exe
	Sms System32 Unidentified malware	SmsSystem32.exe
	SMS Win9x Message Agent This program assigns a user to a Systems Management Server site	??
	SMS Win9x Message Agent This program assigns a user to a Systems Management Server site	SMSMsg.exe
	Smserial Helper utility for Motorola based SM56 software modems - resides in the System Tray	sm56hlpr.exe
	SMSI Loader Smith Micro HotFax - fax software	SMLoader.exe
	smsm Added by the BANKER-CO TROJAN!	smsm.exe
	smsrv Added by the AGOBOT-SX WORM!	smsrv.exe
	SMSS Added by the FLOOD.F TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "Catroot" subfolder	smss.exe
	smss Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!	[path to smss.exe]
	smss Added by the AGENT-TR TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	smss.exe
	smss Added by the BOROBOT-J TROJAN and variants! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!	smss.exe
	Smss Added by the RBOT.OP WORM!	ssms.exe
	smss.exe Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder	csrss.exe
	smssLevel4 Unidentified malware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in Program FilesWindows Media PlayerSkinsWindowsMediaSkinDataLevel4 folder	smss.exe
	SMSSS Added by the SDBOT.ZD WORM!	smsss.exe
	SMSSS Loader Added by the AGOBOT.MQ WORM!	smsss.exe
	SMSSU Hijacker, detected by Norton antivirus as Trojan.StartPage.O	SMSSU.EXE
	smsys Added by the CLICKER-C TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a "Template" subfolder	Explorer.exe
	smsys Adult content dialler	vi.exe
	SMSystemAnalyzer Part of the Iolo System Mechanic optimization tool	SMSystemAnalyzer.exe
	sms_msn Added by an unknown WORM or TROJAN!	sms_msn.exe
	sms_msn40 Added by an unknown WORM or TROJAN infection	sms_msn40.exe
	Smt Win-Spy keyboard logger/monitoring software - remove unless you installed it yourself	SMT.exe
	SMToolbar StartMake.com toolbar	SMToolbar.exe
	SMTP32 Mailing Protocol Added by a variant of the RBOT WORM!	smtp32.exe
	SmWizard SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?	SmWizard.exe
	SN Messenger Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility	msnmsgr.exe
	SnagIt 8 SnagIt lets you capture, edit, and share exactly what you see on your screen - fast	SnagIt32.exe
	snapple Added by the FORBOT-EG WORM!	snapple.exe
	snbr ??	snbr.exe
	snbupt UpSpiralBar adware	snbupt.exe
	sncntr Added by the DLUCA-I TROJAN!	sncntr.exe
	SNCT511 Unidentified "Snapshot Viewer"- what does it do and is it required?	vsnct511.exe
	snd332 Added by the B1LD0 AIM WORM!	snd332.exe
	Sndcompat Added by the GEMA TROJAN!	Sndcompat.exe
	sndmi13 Driver for DualCam cameras - that combine the best features of a digital still camera and a webcam	vsndmi13.exe
	SNDMon Part of Symantec's LiveUpate (eg, Norton). Not required if you run manual updates but probably require if you leave them to run automatically. Also, if one runs a small office network and SNDMon is disabled on one of the computers - then other computers disappear from the network for this computer, including shared devices like printers and scanners. Hence the "U" recommendation	SNDMon.exe
	Sndsaver Added by the GEMA TROJAN!	Sndsaver.exe
	sndsrvc Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required?	SNDSRVC.EXE
	SNInstall Spy Sheriff/SpywareNO malware, also detected as the SPYHOAX-A TROJAN, pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE, NS6281400.so, CVXH8JKDQ2.EXE, down3.exe, sefe.exe, winstall.exe, and tool2.exe	[various filenames]
	Snippet The Snipping Tool (part of the Experience Pack for Tablet PC) allows you to easily "cut out" anything on screen and share it with other people. The whole screen becomes an "inkable" surface that you can add comments to and mark up however you like. You can then save that annotated image to use later, or send it to someone else in an E-mail message	SnippingTool.exe
	SNM SpyNoMore anti-spyware	SNM.exe
	SnoopFreeUI Anti-keylogging software made by SnoopFree Software	SnoopFreeUI.exe
	SNP Generic Host Process Added by the ZAPCHAS-O TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!	svchost.exe
	snp2std Digital camera related	vsnp2std.exe
	snpstd Sonix PC Camera Monitor MFC Application. What does it do and is it required?	vsnpstd.exe
	SNPSTD2 CameraMonitor MFC Application. Appears to be related to a USB connection to a digital camera -is it required?	vsnpstd2.exe
	snpstd3 Sonix Inc. Camera Monitor MFC Application	vsnpstd3.exe
	Snsicon Launches a screensaver program from Second Nature	Snsicon.exe
	SNSS.EXE Added by the Nunci premium rate dialer	SNSS.EXE
	snvc Added by an unidentified WORM or TROJAN!	snvc.exe
	SO5 Integrator Pass One StarOffice 5. See here for more details	sointgr.exe
	SO5 Integrator Pass Two StarOffice 5. See here for more details	sointgr.exe
	Soar PurityScan/Clickspring adware	Rwon.exe
	Social Security Agency Added by a variant of the RBOT WORM!	rpcxsocsa.exe
	Sock32 Added by the SDBOT TROJAN!	sock32.exe
	Socket Utility Added by the DAEMONI-E TROJAN!	svchostz.exe
	Socket Utility Added by the DAEMONI-E TROJAN!	socket.exe
	Socket Utility Added by the DAEMONI-E TROJAN!	svchostz.exe
	SoDA Startup Used by the IBM Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software	SodaStartup.exe
	soffice Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).	SOFFICE.EXE
	Soft Profile Inc Added by a variant of the LOVGATE WORM!	hxdef.exe...
	soft2 Added by the KARDPHISHER TROJAN!	*******.exe [ = random digit]
	softIce Update 32 Added by the RBOT-ANB WORM!	wininits.exe
	SoftickPPP Softick PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer	PPPGate.exe
	SOFTinst For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out	N/A
	SoftStuff Wallpaper Changer AzureBay wallpaper changer	softstrt.exe
	Software Added by the CRABTON-B TROJAN!	software.exe
	SoftwareStation eAcceleration Stop-Sign security software related. Previously not recommended, see here	station.exe
	Solo Sentry Solo Antivirus	Solosent.exe
	SoloSchedule Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis	Solocfg.exe
	SoloSysCheck Solo antivirus System Integrity Check - Monitors system registry, system.ini, win.ini and startup to protect you from new Internet Worms and Backdoors	Syscheck.exe
	somatic Searchcentrix hijacker	somatic.exe
	Sonic A3D Control Sound related options	vrtxctrl.exe
	Sonic RecordNow! Added by a variant of the SDBOT WORM!	smsc.exe
	SonicFocus Sonic Focus - "enhances music, movie and game sound by analyzing compressed audio streams in realtime, then restoring and enriching audio back to its original performance qualities"	SFIGUI.EXE
	SoniqueQuickStart Quickstart for the discontinued Sonique audio player. Available via Start -> Programs	sqstart.exe
	SonnReg Now superseeded by ColorWizzard - 3Deep corrected lighting, shading and color for all your 2D and 3D games. Possibly a registration reminder?	SonnReg.exe
	SonudMan Added by the STARTPAGE.Q TROJAN!	SonudMan.exe
	SonudMan Added by the QQROB-DC TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!	WNILOGON.exe
	SonudMon Added by the LEWOR-J TROJAN!	SonudMon.exe
	Sony Ericsson PC Suite Application launcher from the Sony Ericsson PC Suite for their mobile phones	Application Launcher.exe
	SonyPowerCfg Related to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems	SPMgr.exe
	Soot ??	rcea.exe
	sophagnt Possibly related to Sophocles Screenwriting Software?	sophagnt.exe
	SOProc_RegSoAlertWxLiteNnAj Advertising by SoftwareOnline - monitors your browsing habits and distributes the data back to the author's servers for analysis	rundll32 shell32.dll, ShellExec_RunDLL [path] soproc.exe
	SOS Added by the PHILIS VIRUS!	SOS.exe
	SoSyncMonitor SuperOffice related. What does it do and is it required?	SoSyncMonitor.exe
	Sound Loader Added by the AGOBOT-BV WORM!	sndloader.exe
	Sound services Added by the AGOBOT.GG WORM!	SOUND32.EXE
	Sound System Added by an unidentified VIRUS, WORM or TROJAN!	WinSound1.exe
	soundcontrl Added by the GAOBOT.AFJ WORM!	soundcontrl.exe
	sounddrv CoolWebSearch parasite variant	sndbdrv3104.exe
	SoundFusion Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?	rundll32 cwcprops.cpl
	SoundFusion Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?	rundll32 hercplgs.cpl, BootEntryPoint
	SoundFusion Control panel item for a Terratec soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?	RunDll32 cwaprops.cpl, C25CrystalControlWnd
	SoundMam Added by the QQROB-AAL TROJAN!	SVOHOST.exe
	soundman System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel	soundman.exe
	SOUNDMAN Microsoft Help Added by the RBOT-AIU WORM!	soun.pif
	SoundMAX System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel	SMax4.exe
	SoundMAX Added by the RIZON-A WORM! Note - this file is placed in the Startup folder itself, and has NO relation to SoundMax sound cards!	SoundMAX.exe
	SoundMax Audio Drivers Added by a variant of the SDBOT WORM!	SndMAX.exe
	SoundMAXPnP SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments	SMax4PNP.exe
	soundmix Added by the AGENT.PGV WORM!	soundmix.exe
	SoundMixer Added by the DEDLER-G TROJAN!	smvss.exe
	SoundMnEx32 Added by the STRATION-FW WORM!	[path to worm]
	Soundmx CoolWebSearch Tapicfg parasite variant	Soundmx.exe
	soundtask Added by the AGOBOT-MD WORM!	soundtask.exe
	soundtasks Added by a variant of the CRYPTER.C TROJAN!	soundtasks.exe
	soundtctrls Added by the AGOBOT-ZV WORM!	soundtctrls.exe
	SoundView Trojan downloader	msdview32.exe
	sounofts Added by the AGOBOT-ND WORM!	sounofts.exe
	sountskmanager Added by an unidentified WORM or TROJAN!	sountaskmgr
	SourcePath Used to update Gateway registry settings for System Restoration Kit and Web update programs	gwreg.exe
	sp IE search hijacker - changes the default search to http://www.gocybersearch.com/	sp.reg
	sp Malicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here for more and a fix	regedit-s .... sp.dll
	sp Added by the Startpage.M hijacker	se.dll, DllInstall
	sp Added by the ABLANK-W and ABLANK-Z TROJANS!	rundll32 (Path to Trojan DLL), DllInstall
	SP TimeSync SP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server)	SP TimeSync.exe
	SP00LSV Added by the GRAYBIRD.E TROJAN!	Sp00lsv.exe
	SP2 Connection Patcher Changes limit of concurrent TCP connections of Windows Service Pack 2	SP2ConnPatcher.exe
	SP2 data Added by a variant of the RANDON.AN WORM!	[path] repcale.exe [path] apc.exe
	SP2 Firewall/Internet Updater Added by the RBOT.BJO WORM!	crssrs.exe
	sp2chk.exe Added by the ALUROOT.A TROJAN!	sp2chk.exe
	sp2ctr Added by the DLUCA-M TROJAN!	sp2ctr.exe
	sp2fwxp Added by the SMALL.ABW TROJAN!	sp2fwxp.exe
	sp2update SP2Update adware! Tracks URLs visited and search terms entered into Internet Explorer	sp2update.exe
	Spam Blocker for Outlook Express HotBar related	SBInst.exe
	SPAM FIREWALL Added by the SDBOT.AOU WORM!	mfirewall.exe
	Spam Sleuth Spam Sleuth E-mail spam detection program	SpamSleuth.exe
	SpamBlocker Related to Hotbar's Weather Forecast tool for your desktop	SbOEAddOn.exe
	SPAMfighter Agent SPAMfighter anti email spam filter	SFAgent.exe
	spamihilator Spamihilator - spam filter	spamihilator.exe
	SpamPal SpamPal - anti-spam tool	spampal.exe
	SpamSubtract Intermute SpamSubtract - junk email detection and removal program	SpamSubtract.exe
	Spark Spark instant messaging server	Spark.exe
	spc_w NetZero Search Enhancement related	hcm.exe
	spc_w NetZero Search Enhancement related	blspc.exe
	spc_w NetZero Search Enhancement related	nzspc.exe
	Spdstart Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel."	Spdstart.exe
	Speaking Clock Deluxe Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly	SpClDlx.exe
	Special Firewall Service Added by the NETSKY.G WORM!	avguard.exe
	SpecialOffers SpecialOffers adware	*SpecialOffers.exe [* = digit]**
	SpecialOffers SpecialOffers adware	SpecialOffers.exe
	specific Added by a variant of the SDBOT WORM!	specixic.exe
	Speed racer Software for a Creative sound card	CTSRReg.exe
	Speed Tec Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled	speedtec.exe
	SpeedBoss Added by the OPASERV.AD WORM!	[worm filename]
	SpeedItUp Speed It Up - "all in one Speed Booster designed to significantly increase the speed of your computer and boost your PC available memory"	SPEEDITUP.EXE
	SpeedItUpEX Speed-It-Up Extreme is designed to speed of your computer up to 3 times faster and boost your PC available memory	SpeedItUpEx.exe
	Speedkey Additional keyboard shortcuts on MS programmable keyboard	SPEEDKEY.EXE
	SpeedMeter Application measuring upload and download speed	SpeedMeter.exe
	SpeedOptimizer SpeedOptimizer is designed to optimize and speed-up your Internet data transmission including browsing, streaming, downloading, uploading and e-mail communication	spo.exe
	SpeedswitchXP SpeedswitchXP is a CPU frequency control for notebooks running Windows XP	SpeedswitchXP.exe
	Speedtouch USB Diagnostics For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)	Dragdiag.exe
	SpeedUpMyPC SpeedUpMyPC "automatically fine-tunes all your resources including hardware, system settings and internet usage to operate at peak performance at all times"	SpeedUpMyPC.exe
	Spees1 Added by the OPASERV.Y WORM!	speedy.scr
	Spees2 Added by the OPASERV.AD WORM!	Speedy.bat
	Spees3 Added by the OPASERV.AD WORM!	SPEEDY.PIF
	Spellex Anywhere Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used	sa.exe
	SpIDerMail DrWeb antivirus Spider Mail e-mail scanner	spiderml.exe
	Spinner Plus Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness. Available via Start -> Programs	spinner.exe
	SPINX Added by the YENO.B and YENO.C WORMS!	Wscript.exe OXNEY.B.VBS
	SPIRun Related to Creative audio products. What does it do and is it required?	Rundll32 SPIRun.dll, RunDLLEntry
	SPnt Premium rate adult content dialler	SPnt.exe
	SpokeSysTray Spoke Software client application. Spoke "uses data in your e-mail and other enterprise information systems to discover the existing relationships of people in your enterprise. It then builds a private, secure relationship network for each user without any additional manual data entry"	SpokeSysTray.exe
	spolsvr2 Added by the EVILSOCK.10 TROJAN! Note - this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot. Name field may be empty	spolsvr2.exe
	spoo1sv Added by the SOULJET TROJAN!	spoo1sv.exe
	Spool Added by the RANKY.R TROJAN!	[path to trojan]
	Spool WhileUSurf adware	wys.exe
	SPOOL Configuration Added by the SDBOT-KD WORM!	spoolsvc.exe
	Spool Loader Added by a variant of the RBOT WORM!	spool.exe
	Spool LoadKIt Added by a variant of the RBOT WORM!	spoolv.exe
	Spool lptt01 RapidBlaster variant (in a "spool" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here	spool.exe
	Spool Manager Added by the BANKER-FR TROJAN!	spoolsrv.exe
	Spool ml097e RapidBlaster variant (in a "spool" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here	spool.exe
	Spool32 Added by the ASSASIN-F TROJAN!	pool32.exe
	spoolax Added by the PERDA-D TROJAN!	[path to trojan]
	Spooler Service Added by the JOINER.C1 TROJAN!	Spoolsrv.exe
	Spooler Sub System Process Added by the YAB.A TROJAN!	SPOOL32.EXE
	Spooler Subsystem Added by the SDBOT-ABG TROJAN!	spoolsub.exe
	Spooler SubSystem App Added by the POEBOT-J WORM!	spoolsvc.exe
	Spooler SubSystem App Added by the LINKBOT.M WORM!	spooIsv.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	localsvc.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	netsvc.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	spoolsvc.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	svcadmin.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	svcman.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	svcrun.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	tcpsvc.exe
	Spooler SubSystem Application Added by the DLOADER-NY TROJAN!	websvc.exe
	Spooler Subsytem App Added by the SDBOT-MM WORM!	spoolsvc.exe
	SpoolerSubSystemProcess Added by the EHKS.21 keylogger! Note - the "I" between "o" and "3" is a capital "i" not a lower case "L"	SpooI32.exe
	Spools Service Controller Added by the KASSBOT-C WORM!	spools.exe
	spoolserv Added by the SDBOT-PN WORM!	spoolserv.exe
	SpoolService