Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.
To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.
Alternatively use your browsers search facility - Ctrl+F for IE users.
Key:
"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
Use your browsers search facility - Ctrl+F for IE users.
| X | S0undMan | svch0st.exe | Added by the LOVGATE.AB WORM! |
| ? | S24EvMon | S24EvMon.exe | Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required? |
| X | S3 Internal Chip | s3serv.exe | Added by the AGOBOT-DD WORM! |
| ? | S3apphk | S3apphk.exe | S3 graphics related? |
| ? | S3Hotkey | s3hotkey.exe | S3 Video driver related. What does it do and is it required? |
| ? | S3Mon | S3Mon.exe | S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required? |
| N | S3TRAY | S3Tray.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display |
| ? | s3tray2 | s3tray2.exe | Same as the s3tray entry in this table? |
| ? | S3TRAYHP | S3trayhp.exe | S3 Video driver related. What does it do and is it required? |
| U | S4F | S4F.exe | S4F internet filtering software |
| X | s4helper | s4helper.exe | Searchcentrix hijacker |
| ? | SA | Sa3.exe | Logitech QuickCam driver. Is it required? |
| ? | SA Service | SAservice.exe | Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required? |
| N | Sa3dsrv | Sa3dsrv.exe | 3D sound extension for Windows |
| X | saap | saap.exe | 180Solutions/N-Case adware variant |
| N | Sabreserver | SABSERV.EXE | Airline reservation software from Sabre. Available via Start -> Programs |
| N | SAClient | RegCon.exe | AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging |
| X | Safe | SafeWin.exe | Added by the FOCOSENHA TROJAN! |
| X | SafeGuard Popup Blocker Updater | regsvr32 [path] sfgupd.dll | SafeguardProtect/Veevo hijacker |
| X | SafeGuard Popup Blocker Updater (required) | regsvr32 [path] sfg****.dll [* = ramdom char/digit] | SafeGuard Protect/Veevo - hijacker |
| X | SafeGuard Popup Updater (required) | regsvr32 [path] sfg****.dll [* = ramdom char/digit] | SafeguardProtect/Veevo hijacker |
| X | SafeGuard Popup Updater (required) | regsvr32 [path] PDF****.dll [* = random char/digit] | SafeguardProtect/Veevo hijacker |
| N | SafeInstall.exe | SAFEIN~1.EXE | Monitors a download and ensures an newer version of a file isn't replaced by an older one |
| N | SafeOFF | SafeOff.exe | Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation |
| X | SafeSearch | safesearch.exe | AutoSearch parasite variant |
| X | SafeSurfingUpdate | SSUpdate.exe | DyFuCa/MoneyTree parasite variant |
| U | Safeworld | Freedom.exe | SafeWorld Internet Security |
| X | Sagate Security Firewall | sagate.exe | Added by the GAOBOT.BOW WORM! |
| N | SAgent2ExePath | SAgent2.exe | Seiko Epson printer status agent. Disable if printer is not used often |
| U | SAGENTSERVICE | Sagent.exe | Added by TinySpyAgent Note - this application must be manually installed |
| X | sagnt | sagnt.exe | Adware web downloader |
| X | SAHagent | Sahagent.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | bundle.exe | ShopAtHomeSelect parasite related |
| X | saie | saie.exe | 180Solutions/N-Case adware variant |
| U | SAIMON | SaiMon.exe | Saitek joystick driver |
| X | sain | sain.exe | 180Solutions/N-Case adware variant |
| X | sais | sais.exe | 180Solutions/N-Case adware variant |
| ? | SaiSmart | SaiSmart.exe | "Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button. What does it do and is it required? |
| U | SaitekAutoConfigure | saicnfig.exe | Configuration for Saitek game controllers |
| X | salm | salm.exe | 180Search adware |
| X | salm | salm.exe | 180Solutions/N-Case adware variant |
| U | SAMcal | SAMcal.exe | SamCal - calendar/reminder program |
| U | Sametime Connect | Connect.exe | IBM Lotus Instant Messaging and Conferencing software |
| N | SandIcon | SandIcon.exe | SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources |
| X | sapp | sapp.exe | 180Solutions/N-Case adware variant |
| X | saSyncMgr | rundll32.exe sasync.dll, SyncWait | Browser hijacker - redirecting to Searchant.com |
| U | SATARaid | SATARaid.exe | RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives |
| X | satmat | satmat.exe | Transponder parasite updater/installer |
| U | SAUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| Y | SAVAgent | SAVAgent.exe | Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users |
| X | Save | Save.exe | SaveNow adware |
| X | SaveDate | SaveStartDate.Exe | Unidentified adware |
| X | Savenow | SaveNow.exe | SaveNow adware |
| X | Savenow | savenow.exe | Added by the SPREDA.B VIRUS! |
| U | Say The Time 5.0 | SAYTIME.EXE | This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly |
| U | SB | SB.exe | Acer Soft Button on Acer Tablet PCs |
| N | SB Audigy 2 Startup Menu | /l:eng | Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function |
| X | SB Watchdog | SBWatchdog.exe | Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here for more information |
| U | SBAutoUpdate | sbautoupdate.exe | SpywareBlaster auto-updater |
| U | SBC Self Support Tool | matcli.exe | matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| U | SBDrvDet | SBDrv.exe | Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one |
| X | SBHC | sbhc.exe | SuperBar parasite - uninstall available here |
| N | SBMX | sbmx.exe | SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only) |
| U | SbUsb AudCtrl | RunDll32 sbusbdll.dll, RCMonitor | Control for Soundblaster MP3 external (USB) sound card |
| N | sc | scrubxp.exe | ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc |
| U | sc | sc.exe | Watchdog 2.0 Software - monitoring program |
| U | sc | run.exe | All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file |
| ? | sc23exec | sc23exec.exe | Possibly related to a digital camera |
| Y | SC3300CC | SC3300CC.exe | SiPix digital camera Twain device driver |
| X | scan | mscman.exe | Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!" |
| ? | Scan Detector | Pmxdetect.exe | Associated with PrimaScan scanners. Is it required? |
| ? | Scan Wizard | button.exe | Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required? |
| X | ScanDisk | ScanDisk.exe | Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker |
| X | scands32.exe | scands32.exe | Added by a variant of the Adclicker TROJAN! |
| ? | ScanFile | ?? | ?? |
| ? | ScanInicio | Inicio.exe | Part of Panda Anti-Virus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active |
| N | Scanner Detector | SDetect.exe | ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button |
| X | Scanreg | [filename] | Added by the QQPASS.E TROJAN! |
| X | ScanRegistry | nsrvnt.exe | Added by the NERTE TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe |
| X | ScanRegistry | scanregv.exe | Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe |
| Y | ScanRegistry | Scanregw.exe | Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:Windows or C:Winnt) |
| X | ScanRegistry | Scanregw.exe | Added by the STATOR WORM! Not to be confused with the legitimate ScanRegistry entry - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%System (where %windir% is the Windows directory - C:Windows or C:Winnt). Runs from the registry RunServices key as opposed to the Run key |
| X | ScanSpyware v * | Scanner.exe | Spyware remover (where * = the version number) of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites |
| N | SCardSvr | scardsvr.exe | Related to SmartCard readers and sometimes uses lots of system resources |
| X | SCardSvr | SCardSvr32.Exe | Added by the MOFEI.B WORM! |
| N | Scheduled Maintenance | Scheduled_Maintenance.exe | Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs |
| X | Scheduling Agent | Scheduler.exe | Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect |
| X | SchedulingAgant | MMTASK.EXE | Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename |
| U | SchedulingAgent | mstask.exe | MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans |
| U | SchedulingAgent | mstinit.exe | MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans |
| U | Schmaili | Schmaili.exe | Schmaili - insert animated smilies into your e-mail |
| Y | SCHWIZEX | SCHWIZEX.EXE | Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot |
| X | ScManager | scman.exe | Added by the FORBOT-CW WORM! |
| X | scopedll | scopedll.exe | Added by a variant of the CRYPTER.C TROJAN! |
| N | Scotia OnLine Recovery | etdirrcv.exe | Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process |
| N | Scotia OnLine Security v*.* Recovery | etdirrcv.exe | Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process |
| X | Scr | scr.scr | Added by the OPASERV.T WORM! |
| N | ScrapPad | Scrappad.exe | ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper |
| U | Screen Calendar | scrcal.exe | Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler |
| U | Screen Guard | launch.exe | Part of Access Denied security and privacy software |
| U | Screen Guard Message Scan | sgms.exe | Part of Access Denied security and privacy software |
| N | Screen Saver Control | FSScrCtl.exe | Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon |
| N | ScreenPrint32 | ScreenPrint32.exe | ScreenPrint32 screen capture software - can be launched manually |
| ? | screxe | scruser2k.exe | ?? |
| ? | script | script.bat | Maybe associated with DOS on a Win9x machine |
| Y | ScriptBlocking | SBServ.exe | Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information |
| Y | ScriptSentry | Scriptsentry.exe | Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly |
| U | Scroll-In-Mouse V2.0 | SCROLL.EXE | Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features |
| X | ScrSvr | ScrSvr.exe | Added by the OPASERV WORM! |
| X | ScrSvrOld | [worm filename] | Added by the OPASERV WORM! |
| Y | Scsi | Scsi.exe | SCSI Miniport driver |
| X | scvhost | svzhost.exe | Added by a variant of the SPYBOT WORM! |
| X | scvhost loader | ixplore.exe | Added by the SDBOT-CY TROJAN! |
| X | scvhost.exe | scvhost.exe | Added by the LOHAV-N TROJAN! |
| X | sd32info | sd32info.exe | Added by the CRYPTER.A TROJAN! |
| U | SDaemon | sdaemon.exe | PC Security from Tropical Software. 'PC Security™ 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features' |
| X | SDAv | csnss.exe | Added by the SERFLOG.C WORM! |
| X | SDAv | svhost.exe | Added by the SERFLOG.C WORM! |
| X | sdchosts32 | vbdd.exe | Added by the RANKY.AG TROJAN! |
| N | SDetect | SDetect.exe | ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button |
| X | sdfsdfsdf | sp2update.exe | Added by a variant of the SPYBOT WORM! |
| X | SDIN Adapter | sdin.exe | Added by the FORBOT-AP WORM! |
| ? | SDJobCheck | triggusr.exe | Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup? |
| X | sdkupdate22 | SDK0mCORE.exe | Added by the FORBOT-DT WORM! |
| N | SDPhotoBar.exe | SDPhotoBar.exe | SmartDraw Photo - "organize, enhance, print, and share your photos. It's also a powerful graphic editor for creating images and web graphics" |
| X | sdrss | sdrss.exe | Added by the SDBOT-SQ WORM! |
| U | sealmon | sealmon.exe | SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint and Email |
| ? | Search Hook | srchhook.exe | ?? |
| X | Search Page | http://find.naupoint.com | Naupoint browser hijacker |
| X | Search-Exe | SE.exe | Search-Exe hijacker |
| X | Search.vbs | Hijacker | |
| X | SearchEnhancement | scbar.exe | IE search hijacker |
| X | searchnav | searchnav.exe | SearchNav adware - IEFeatures/Popnav variant |
| X | SearchNavVersion | searchnavversion.exe | SearchNav adware - IEFeatures/Popnav variant |
| X | SearchSetter | searchsetter[1].exe | Browser hijacker - redirecting to FindWhateverNow.com |
| X | SearchSquire33 | SearchUpdate33.exe | SearchSquire parasite |
| X | SearchUpgrader | SearchUpgrader.exe | Hijacker |
| X | Secboot | w32tm.exe | Added by the HAXDOOR.D TROJAN! |
| U | SecondChance | sctray.exe | Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash |
| X | Secret-Crush | start.exe | Hijacker that may reset your browser's home page and/or search settings to point to undesired sites |
| U | Secsys | Secsys.exe | Key Interceptor - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| X | secure | secure.exe | DealHelper adware |
| N | SecureCleanIEClean | SCIEClean.exe | SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches |
| U | SecureItPro | Secureitpro470p.exe | SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop |
| X | SecureLogin | Mslg32.exe | Added by the REDZED WORM! |
| X | Security Accounts Manager SM | samsm.exe | Added by the SPYBOT.JE WORM! |
| X | Security Agent Manager | mssams.exe | Added by the RBOT-SV WORM! |
| N | Security iGuard | Security iGuard.exe | Spyware remover of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites |
| U | Security Manager | SecurityManager.exe | A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private |
| X | Security Patches | msnkn.exe | Added by the RBOT.WW WORM! |
| X | security service | syss.exe | Added by an unidentified WORM or TROJAN! |
| Y | SECWIZ98 | SECWIZ98.EXE | Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here |
| ? | SelfHostUtil | slefhost.exe | ?? |
| U | SeMS | SeMS.exe | PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone |
| U | Sensiva | Sensiva.exe | Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly |
| X | SENTRY | SENTRY.exe | From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it |
| X | Sepate Security Firewall | sepate.exe | Added by a variant of the RBOT WORM! |
| X | Serials | serials.exe | Any one of a variety of worms and trojans |
| X | serpe | formatsys.exe | Added by the SERFLOG.A WORM! |
| X | serpe | msmbw.exe | Added by the SERFLOG.A WORM! |
| X | serpe | serbw.exe | Added by the SERFLOG.A WORM! |
| Y | serrdctl.exe | serrdctl.exe | "Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems |
| N | Serv-U | serv-u32.exe | FTP server |
| X | Serv-U | wssdsu.exe | Added by the MANIFEST TROJAN! |
| X | server | server.exe | Added by the DELTAD.A WORM! |
| X | SERVER.EXE | SERVER.EXE | Added by the BUSHTRO122 or SMOKODOOR TROJANS! |
| X | serverex | Server.txt.vbs | Added by the DELTAD.A WORM! |
| U | Service | service.exe | Added by the ALADINZ.H TROJAN! |
| X | Service | services.exe | Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup! |
| X | Service | [trojan filename] | Added by the KAITEX.E TROJAN! |
| X | Service | services.exe | Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | Service | SYSNT.exe | Added by the CHA TROJAN! |
| N | Service Connection | sccenter.exe | For Compaq PC's. Part of Backweb |
| N | Service Connection | bwtray.exe | For Compaq PC's. Part of Backweb |
| X | Service Controller | Csrrs.exe | Added by the GAOBOT.AO WORM! |
| X | Service Host | [filename].exe | Added by the TORVEL.B WORM! |
| X | Service Host | spoolxx.exe | Added by the TORVEL WORM! |
| X | Service Host | svchost.exe | Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| X | Service Host Driver | svchost.exe | Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| N | Service Manager | sqlmangr.exe | SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs |
| X | Service Manager | dxsound.exe | Added by the PROXY-GRIC TROJAN! |
| X | Service Process | SVCHOST.EXE | Added by the DARKER WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| X | Service Process | winset.exe | Added by a variant of the SPYBOT WORM! |
| X | service updaer | qualityz.exe | Added by an unidentified VIRUS, WORM or TROJAN! - probably a SPYBOT variant |
| X | Service.exe | Service.exe | "servedby.advertising" popup generator |
| U | ServiceConfig | ispbeg.exe | Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation |
| Y | ServiceLayer | ServiceLayer.exe | Nokia Connectivity Library support task that is needed by NCLTRAY and by the Nokia Connection Manager for either to work properly |
| X | services | start.bat | Added by the ZCREW TROJAN! |
| X | Services | [path to trojan] | Added by the METEORSHELL TROJAN! |
| X | Services | back32.exe ...service.exe | Added by an unidentified VIRUS, WORM or TROJAN! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe |
| X | Services | services.exe | Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup! |
| X | Services | winread.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Services | windns.exe | Added by a variant of the RBOT WORM! |
| X | Services Controller | lsassa.exe | Added by the CIADOOR.122 VIRUS! |
| X | Services Host | Scchost.exe | Added by the DONK WORM! |
| X | Services Logon | services.exe | Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | Services Process | services.exe | Added by unidentified spyware - recognized by Kaspersky antivirus as Small.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | Services Startup | services.exe | Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | Services Startup | svhost33.exe | Added by a variant of the RBOT WORM! |
| X | Services.EXE | services.exe | Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup! |
| X | services.exe | Services.exe | Added by the CIADOOR-F TROJAN! Note - this is NOT the legitimate services.exe process, which should NOT figure in Msconfig/Startup! |
| X | Services004 | [worm filename] | Added by the BUGBROS WORM! |
| ? | ServUTrayIcon | ServUTray.exe | System Tray icon for Serv-U FTP server. Is it required? |
| X | SESync | sed.exe | Downloadware/SED adware downloader |
| ? | SetDefaultMIDI | MIDIDef.exe | Related to a Soundblaster Audigy soundcards. What does it do and is it required? |
| ? | setdefprt | setdefprt.exe | Related to a Brother printer? |
| U | SetecCertUtil | Certutil.exe | Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV |
| X | setFTPBack | createsw.exe | Added by the FTP_BMAIL TROJAN! |
| N | SetHook | SetHook.exe | Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar" |
| N | SETI@home | SETI@home.exe | SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data |
| N | seticlient | SETI@home.exe | SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data |
| N | SetIcon | SetIcon.exe | Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog |
| N | SetiQueue | Setiqu~1.exe | Provides work unit buffering for Seti@Home clients - see here for more details |
| N | SetiSpy | SetiSpy.exe | From the site - 'SETI Spy is a little program I wrote to "spy" on the progress and performance of the SETI@home client. I call it a "spy" because I tried to make it as unobtrusive as possible' |
| ? | SetRefresh | SetRefresh.exe | Found on a Compaq PC. Video refresh rate utility? Is it required? |
| X | Setting | sysweb.exe | Added by the SDBOT.GEN TROJAN! |
| N | setup | hphprld.exe ....setup.exe | HP DeskJet Setup - printers function normally without it |
| X | Setup experation | svchost.exe | Added by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process, which NOT appear in Msconfig/Startup! |
| N | SetupICWDesktop | icwconn1.exe | Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway |
| X | setupuser | regedit.exe setupuser.log | Regfile in disguise - another CoolWebSearch parasite variant |
| ? | setuzp | setuzp.exe | ?? |
| X | SetVrc | setvrc.exe | Added by the HUNTOCX WORM! |
| X | Sex Teris | st01b.exe | Added by the REPAD WORM! |
| X | Sexy_sg | Sexy_sg.exe | Premium rate adult content dialler |
| N | SFP | vzSFPWin.EXE | Verizon Online Support Center - prompts for online updates |
| X | SFtrb Service | cftrb32.exe | Added by the SOBIG.D WORM! |
| U | SfWinStartInfo | sfWinStartupInfo.exe | SFIRM32 Online Banking software |
| U | Sgecrypt | Sgecrypt.exe | SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks" |
| U | Sgeecview | Ecview.exe | SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks" |
| N | sginst | sginst.exe | eAcceleration Stop-Sign related - not recommended, see note |
| ? | SGTBox | SGTBox.exe | Canon scanner driver. Is it required? |
| U | sgtray | sgtray.exe | StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups |
| X | shambl3r | cnf.bat | Added by the REMABL WORM! |
| X | shambl3r* | shambl3r.exe | Added by the REMABL WORM! where * is 2 to 11 |
| N | Share-to-Web Namespace Daemon | hpgs2wnd.exe | "HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs |
| N | Shareaza | Shareaza.exe | Shareaza P2P client |
| X | sharedprem | sharedprem.exe | Added by the MAKECALL TROJAN! |
| Y | Sharing and Mapping Software | DShmap.exe | Intel AnyPoint internet sharing software |
| N | SharkEject | AEJCT32.exe | Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required |
| N | Shcenter | chcenter.exe | IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files" |
| X | SheduIer | svchst.exe | Premium rate adult content dialler |
| X | Shell | Shell32.exe | Added by the BADSECTOR TROJAN! |
| X | Shell | ray.exe | Homepage hijacker re-directing browsers to adult content websites |
| X | Shell | Tray.exe | Homepage hijacker re-directing browsers to adult content websites |
| X | Shell | wmedia16.exe | Added by the GOLDUN TROJAN! |
| X | Shell | Open32.exe | Horseserver.net browser hijacker |
| X | Shell Extension | spollsv.exe | Added by a variant of the LOVGATE WORM! |
| X | Shell32 | Shell32.vbs | Added by the SCAFENE WORM! |
| X | ShellApi | SHELLMSN.EXE | Added by the NETDEV.B TROJAN! |
| X | Shellapi32 | Shellapi32.exe | Added by the NETDEVIL (or NERTE) TROJAN! |
| X | ShellCommand | [path to file] | Added by the REMCON-A TROJAN! |
| X | ShellEx | ShellEx.exe | Added by the ANAKHA TROJAN! |
| X | shellsystem | shellsystem.exe | Added by the UPCHAN TROJAN! |
| N | shicoxp | shicoxp.exe | Installed with the drivers for multi card readers of various brands. To differentiate between the various card slots on multi slot readers the shicoxp.exe file assigns and loads unique drive icons for the various card slots that are displayed in Windows Explorer |
| X | Shine | Shine.exe | Added by the HAPPYLOW (or NISHE-A) VIRUS! |
| ? | SHINITV | shinitv.exe | ?? |
| X | Shmgrate.exe | ibot4.exe | Added by the GASTER TROJAN! |
| N | ShockmachineReminder | SmReminder.exe | Shockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version |
| X | Shockwave | csrss.exe | Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| N | Shockwave Init | SWINIT.EXE | Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs |
| N | ShortKeys 99 | SHORTKEY.EXE | ShortKeys from Insight Software Solutions - allows you to program keys with text strings |
| X | Showbehind | SHOWBEHIND.EXE | Advertisement display which can be stopped here |
| ? | ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051 | shwicon.exe | Card reader for memory cards from digital cameras. Is it required? |
| U | SHPC32 | SHPC32.exe | Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled |
| Y | ShStatEXE | SHSTAT.EXE | From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs |
| U | Shutdownaware | shutdownaware.exe | Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system |
| U | ShutDownPro | ShutDownPro.exe | ShutDownPro - shutdown, reboot, logoff your System with one mouse click |
| ? | Si Meter | SIMETER.EXE | ?? |
| X | si91e44b | rundll32.exe [path] si91e44b.dll, EnableRunDLL32 | LZIO.com adware downloader |
| X | Sicom | Sicom.exe | Added by the NETLIP WORM! |
| U | SideACT | SideACT.exe | SideACT organizer software |
| X | Sidebar | Sidebar.exe | Searchcentrix hijacker |
| N | SideWinderTrayV4 | SWTrayV4.exe | MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs |
| ? | SigX | sigx.exe | ?? |
| X | SigXC | SigX.exe | SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more" |
| N | Simcast | SimcastAlerts.exe | Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say |
| U | SimpLite-MSN | SimpLite-MSN.exe | Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service) |
| X | Singapore | singapore.exe | Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself |
| U | SIPPS | SIPPSSIPPS.exe | Web.de Internet phone utility |
| N | SiS KHooker | khooker.exe | SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required |
| U | SiS Tray | sistray.exe | System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem |
| U | SiS Windows KeyHook | keyhook.exe | SIS graphics cards related: "Super VGA Keyboard Daemon" - hooks into the keyboard processing chain in order to enable hotkey settings |
| ? | SISAM10M | SISAM10M.exe | ?? |
| N | SiSAudio | MP_S3.exe | WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems |
| U | siscolor | color.exe | Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board |
| U | siService.exe | siService.exe | Spam Inspector - anti email spam software |
| ? | SiSSetCDfmt | SiSSetCDfmt.exe | Related to a Silicon Integrated Systems Corp (SiS) product? |
| ? | SISSoundman | Soundman.exe | Related to a Silicon Integrated Systems Corp (SiS) product? |
| U | SiSSWLED | sisswled.exe | System Tray utility for SiS 900 network cards |
| X | sistrai.exe | sistrai.exe | Added by the PROVA TROJAN! |
| X | sistray | sistray.exe | Added by the PROVA TROJAN! |
| U | sistray | sistray.exe | System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem |
| X | Sistray32 | remotehost.pif | Added by the HOLCAS.A WORM! |
| X | Sistray32 | win.bat | Added by the JUMPRED.A WORM! |
| X | sistry | sistry.exe | Added by the CEBE WORM! |
| N | SiSUSBRG | SiSUSBrg.exe | SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP |
| X | sixtysix | sixtypopsix.exe | Unidentified adware |
| U | SK9910DM | SK9910DM.EXE | Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys |
| U | SKDAEMON | SKDAEMON.EXE | Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys |
| U | skinkers | skinkers.exe | Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here. Leave enabled if you want to receive messages |
| Y | SkyBlaster Scheduler | SSFSch.exe | For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system |
| X | skynetave.exe | skynetave.exe | Added by the SASSER.D WORM! |
| X | SkynetRevenge | winlogon.scr | Added by the NETSKY.AA WORM! |
| N | Skype | Skype.exe | "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes" |
| Y | SkySurfer Management Service | SmaServ.exe | For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system |
| N | SleepManager | SleepMgr.exe | This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode |
| U | SlickRun | sr.exe | "SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:Program FilesOutlook Expressmsimn.exe becomes MAIL" |
| X | slide | Iexplore.exe | Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| N | slimp3 | SliMP3 Server.exe | Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC" |
| N | Slingshot | SLINGS~1.EXE | Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more" |
| X | slmss | slmss.exe | SeekSeek search hijacker related - as seen here |
| X | slvchost32 | slvchost32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| ? | SM1BG | SM1BG.EXE | USB driver for downloading from within Napster to portable MP3 players. Is it required to run at startup or can it be run manually? |
| N | Sm56acl | sm56hlpr.exe | Helper utility for Motorola based SM56 software modems - resides in the System Tray |
| N | Smapp | smtray.exe | System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller |
| N | Smart Card Service | ScardSvr.exe | For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly |
| U | Smart Connect Monitor | SCMon.exe | Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio |
| U | Smart Connect Setup | SCSetup.exe | Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio |
| N | Smart Label O Server | ssloserv.exe | Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely |
| N | Smart Label RFViewer | SSLFVIEW.EXE | Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely |
| N | Smart Type Assistant | sta.exe | Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer |
| U | Smartalec | pcaccel.exe | Smartalec PC Accelerator - system optimization utility |
| N | SmartBarXP | SmartBarXP.exe | SmartBarXP is a bar that runs down the side of your screen, and can be configured to display interactive panels known as 'panes'. These panes include media players, slideshow and image viewing panes, a virtual desktop manager, and live news, weather and stock feeds to mention but a few |
| N | sMaRTcaPs | SMARTC~1.EXE | sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys |
| ? | Smarthruengine | QS.exe | Unknown but disabled without problems |
| U | SmartPCXL | pcaccel.exe | Smartalec PC Accelerator - system optimization utility |
| N | SMax4 | SMax4.exe | System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel |
| U | SMax4PNP | SMax4PNP.exe | SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments |
| ? | smbdpmi | smbdpmi.exe | IBM Netfinity Director and Universal Management Services related. What does it do and is it required? |
| Y | smc | smc.exe | Sygate Firewall |
| Y | smc | spfsmc.exe | Sygate Firewall |
| Y | SMC Service | smc.exe | Sygate Firewall |
| Y | SMC Service | spfsmc.exe | Sygate Firewall |
| X | smcserv | winsrv.exe | Added by the AGOBOT-OU WORM! |
| Y | SmcService | smc.exe | Sygate Firewall |
| Y | SmcServices | smc.exe | Sygate Firewall |
| Y | SmcServices | spfsmc.exe | Sygate Firewall |
| ? | Smcsta.exe | Smcsta.exe | SMC Networks wireless PCI card driver. Is it required? |
| N | Smith Micro try | smiptray.exe | Smith Micro shared files. Comes with D-Link web cam |
| U | SMS Application Launcher | LAUNCH32.EXE | Microsoft Systems Management Server - used to manage computers on a network remotely |
| U | SMS Client Service | clisvc95.exe | When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server) |
| U | SMS Win9x Message Agent | ?? | This program assigns a user to a Systems Management Server site |
| U | SMS Win9x Message Agent | SMSMsg.exe | This program assigns a user to a Systems Management Server site |
| Y | Smserial | sm56hlpr.exe | Motorola based modem driver |
| N | SMSI Loader | SMLoader.exe | Smith Micro HotFax - fax software |
| X | SMSS | smss.exe | Added by the FLOOD.F TROJAN! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup! |
| X | smss | [path to smss.exe] | Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup! |
| X | SMSSS | smsss.exe | Added by the SDBOT.ZD WORM! |
| X | SMSSS Loader | smsss.exe | Added by the AGOBOT.MQ WORM! |
| X | smsys | Explorer.exe | Added by the CLICKER-C TROJAN! Note - the valid "explorer.exe" is located in C:Windows or C:Winnt whereas this one is located in a C:WindowsTemplate or C:WinntTemplate subdirectory |
| X | smsys | vi.exe | Adult content dialler |
| N | SMToolbar | SMToolbar.exe | StartMake.com toolbar |
| ? | SmWizard | SmWizard.exe | SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required? |
| X | snapple | snapple.exe | Added by the FORBOT-EG WORM! |
| ? | snbr | snbr.exe | ?? |
| X | sncntr | sncntr.exe | Added by the DLUCA-I TROJAN! |
| X | Sndcompat | Sndcompat.exe | Added by the GEMA TROJAN! |
| U | SNDMon | SNDMon.exe | Part of Symantec's LiveUpate (eg, Norton). Not required if you run manual upadtes but probably require if you leave them to run automatically. Also, if one runs a small office network and SNDMon is disabled on one of the computers – then other computers disappear from the network for this computer, including shared devices like printers and scanners. Hence the "U" recommendation |
| X | Sndsaver | Sndsaver.exe | Added by the GEMA TROJAN! |
| ? | sndsrvc | SNDSRVC.EXE | Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required? |
| N | Snsicon | Snsicon.exe | Launches a screensaver program from Second Nature |
| ? | SO5 Integrator Pass One | sointgr.exe | StarOffice 5. See here for more details |
| ? | SO5 Integrator Pass Two | sointgr.exe | StarOffice 5. See here for more details |
| X | Soar | Rwon.exe | PurityScan/Clickspring adware |
| X | Social Security Agency | rpcxsocsa.exe | Added by a variant of the RBOT WORM! |
| X | Sock32 | sock32.exe | Added by the SDBOT TROJAN! |
| Y | SoDA Startup | SodaStartup.exe | Used by the Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software |
| N | soffice | SOFFICE.EXE | Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory). |
| X | Soft Profile Inc | hxdef.exe... | Added by a variant of the LOVGATE WORM! |
| Y | SOFTinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| X | Software | software.exe | Added by the CRABTON-B TROJAN! |
| Y | Solo Sentry | Solosent.exe | Solo Antivirus |
| U | SoloSchedule | Solocfg.exe | Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis |
| U | SoloSysCheck | Syscheck.exe | Solo antivirus System Integrity Check - Monitors system registry, system.ini, win.ini and startup to protect you from new Internet Worms and Backdoors |
| X | somatic | somatic.exe | Searchcentrix hijacker |
| N | Sonic A3D Control | vrtxctrl.exe | Sound related options |
| N | SoniqueQuickStart | sqstart.exe | Quickstart for Sonique audio player. Available via Start -> Programs |
| ? | SonnReg | SonnReg.exe | Part of E-Color 3Deep for color calibration. Possibly a registration reminder? |
| ? | Soot | rcea.exe | ?? |
| ? | sophagnt | sophagnt.exe | Possibly related to Sophocles Screenwriting Software? |
| X | SOS | SOS.exe | Added by the PHILIS VIRUS! |
| ? | SoSyncMonitor | SoSyncMonitor.exe | SuperOffice related. What does it do and is it required? |
| X | Sound Loader | sndloader.exe | Added by the AGOBOT-BV WORM! |
| X | Sound services | SOUND32.EXE | Added by the AGOBOT.GG WORM! |
| X | Sound System | WinSound1.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | soundcontrl | soundcontrl.exe | Added by the GAOBOT.AFJ WORM! |
| X | sounddrv | sndbdrv3104.exe | CoolWebSearch parasite variant |
| ? | SoundFusion | rundll32 cwcprops.cpl | Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time? |
| ? | SoundFusion | rundll32 hercplgs.cpl, BootEntryPoint | Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time? |
| N | soundman | soundman.exe | System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel |
| N | SoundMAX | SMax4.exe | System Tray icon for SoundMax integrated sound. Sou |