Windows XP A to Z - http://www.softwaretipsandtricks.com/windowsxp
Start Up Applications S
http://www.softwaretipsandtricks.com/windowsxp/articles/612/1/Start-Up-Applications-S
Super Admin
 
By Super Admin
Published on 03/28/2005
 
Starting with letter S
Start Up Applications S Page 1

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

X S0undMan svch0st.exe Added by the LOVGATE.AB WORM!
? S24EvMon S24EvMon.exe Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?
X S3 Internal Chip s3serv.exe Added by the AGOBOT-DD WORM!
? S3apphk S3apphk.exe S3 graphics related?
? S3Hotkey s3hotkey.exe S3 Video driver related. What does it do and is it required?
? S3Mon S3Mon.exe S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required?
N S3TRAY S3Tray.exe S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display
? s3tray2 s3tray2.exe Same as the s3tray entry in this table?
? S3TRAYHP S3trayhp.exe S3 Video driver related. What does it do and is it required?
U S4F S4F.exe S4F internet filtering software
X s4helper s4helper.exe Searchcentrix hijacker
? SA Sa3.exe Logitech QuickCam driver. Is it required?
? SA Service SAservice.exe Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?
N Sa3dsrv Sa3dsrv.exe 3D sound extension for Windows
X saap saap.exe 180Solutions/N-Case adware variant
N Sabreserver SABSERV.EXE Airline reservation software from Sabre. Available via Start -> Programs
N SAClient RegCon.exe AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging
X Safe SafeWin.exe Added by the FOCOSENHA TROJAN!
X SafeGuard Popup Blocker Updater regsvr32 [path] sfgupd.dll SafeguardProtect/Veevo hijacker
X SafeGuard Popup Blocker Updater (required) regsvr32 [path] sfg****.dll [* = ramdom char/digit] SafeGuard Protect/Veevo - hijacker
X SafeGuard Popup Updater (required) regsvr32 [path] sfg****.dll [* = ramdom char/digit] SafeguardProtect/Veevo hijacker
X SafeGuard Popup Updater (required) regsvr32 [path] PDF****.dll [* = random char/digit] SafeguardProtect/Veevo hijacker
N SafeInstall.exe SAFEIN~1.EXE Monitors a download and ensures an newer version of a file isn't replaced by an older one
N SafeOFF SafeOff.exe Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation
X SafeSearch safesearch.exe AutoSearch parasite variant
X SafeSurfingUpdate SSUpdate.exe DyFuCa/MoneyTree parasite variant
U Safeworld Freedom.exe SafeWorld Internet Security
X Sagate Security Firewall sagate.exe Added by the GAOBOT.BOW WORM!
N SAgent2ExePath SAgent2.exe Seiko Epson printer status agent. Disable if printer is not used often
U SAGENTSERVICE Sagent.exe Added by TinySpyAgent Note - this application must be manually installed
X sagnt sagnt.exe Adware web downloader
X SAHagent Sahagent.exe ShopAtHomeSelect parasite
X SAHBundle bundle.exe ShopAtHomeSelect parasite related
X saie saie.exe 180Solutions/N-Case adware variant
U SAIMON SaiMon.exe Saitek joystick driver
X sain sain.exe 180Solutions/N-Case adware variant
X sais sais.exe 180Solutions/N-Case adware variant
? SaiSmart SaiSmart.exe "Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button. What does it do and is it required?
U SaitekAutoConfigure saicnfig.exe Configuration for Saitek game controllers
X salm salm.exe 180Search adware
X salm salm.exe 180Solutions/N-Case adware variant
U SAMcal SAMcal.exe SamCal - calendar/reminder program
U Sametime Connect Connect.exe IBM Lotus Instant Messaging and Conferencing software
N SandIcon SandIcon.exe SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources
X sapp sapp.exe 180Solutions/N-Case adware variant
X saSyncMgr rundll32.exe sasync.dll, SyncWait Browser hijacker - redirecting to Searchant.com
U SATARaid SATARaid.exe RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives
X satmat satmat.exe Transponder parasite updater/installer
U SAUpdate SAUpdate.exe Big Brother from Quest Software. System and network monitor
Y SAVAgent SAVAgent.exe Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users
X Save Save.exe SaveNow adware
X SaveDate SaveStartDate.Exe Unidentified adware
X Savenow SaveNow.exe SaveNow adware
X Savenow savenow.exe Added by the SPREDA.B VIRUS!
U Say The Time 5.0 SAYTIME.EXE This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly
U SB SB.exe Acer Soft Button on Acer Tablet PCs
N SB Audigy 2 Startup Menu /l:eng Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function
X SB Watchdog SBWatchdog.exe Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here for more information
U SBAutoUpdate sbautoupdate.exe SpywareBlaster auto-updater
U SBC Self Support Tool matcli.exe matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide
U SBDrvDet SBDrv.exe Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one
X SBHC sbhc.exe SuperBar parasite - uninstall available here
N SBMX sbmx.exe SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
U SbUsb AudCtrl RunDll32 sbusbdll.dll, RCMonitor Control for Soundblaster MP3 external (USB) sound card
N sc scrubxp.exe ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc
U sc sc.exe Watchdog 2.0 Software - monitoring program
U sc run.exe All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file
? sc23exec sc23exec.exe Possibly related to a digital camera
Y SC3300CC SC3300CC.exe SiPix digital camera Twain device driver
X scan mscman.exe Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
? Scan Detector Pmxdetect.exe Associated with PrimaScan scanners. Is it required?
? Scan Wizard button.exe Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required?
X ScanDisk ScanDisk.exe Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker
X scands32.exe scands32.exe Added by a variant of the Adclicker TROJAN!
? ScanFile ?? ??
? ScanInicio Inicio.exe Part of Panda Anti-Virus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active
N Scanner Detector SDetect.exe ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
X Scanreg [filename] Added by the QQPASS.E TROJAN!
X ScanRegistry nsrvnt.exe Added by the NERTE TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe
X ScanRegistry scanregv.exe Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe
Y ScanRegistry Scanregw.exe Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:Windows or C:Winnt)
X ScanRegistry Scanregw.exe Added by the STATOR WORM! Not to be confused with the legitimate ScanRegistry entry - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%System (where %windir% is the Windows directory - C:Windows or C:Winnt). Runs from the registry RunServices key as opposed to the Run key
X ScanSpyware v * Scanner.exe Spyware remover (where * = the version number) of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites

Start Up Applications S Page 2
N SCardSvr scardsvr.exe Related to SmartCard readers and sometimes uses lots of system resources
X SCardSvr SCardSvr32.Exe Added by the MOFEI.B WORM!
N Scheduled Maintenance Scheduled_Maintenance.exe Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs
X Scheduling Agent Scheduler.exe Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect
X SchedulingAgant MMTASK.EXE Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename
U SchedulingAgent mstask.exe MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
U SchedulingAgent mstinit.exe MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
U Schmaili Schmaili.exe Schmaili - insert animated smilies into your e-mail
Y SCHWIZEX SCHWIZEX.EXE Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
X ScManager scman.exe Added by the FORBOT-CW WORM!
X scopedll scopedll.exe Added by a variant of the CRYPTER.C TROJAN!
N Scotia OnLine Recovery etdirrcv.exe Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
N Scotia OnLine Security v*.* Recovery etdirrcv.exe Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
X Scr scr.scr Added by the OPASERV.T WORM!
N ScrapPad Scrappad.exe ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper
U Screen Calendar scrcal.exe Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler
U Screen Guard launch.exe Part of Access Denied security and privacy software
U Screen Guard Message Scan sgms.exe Part of Access Denied security and privacy software
N Screen Saver Control FSScrCtl.exe Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon
N ScreenPrint32 ScreenPrint32.exe ScreenPrint32 screen capture software - can be launched manually
? screxe scruser2k.exe ??
? script script.bat Maybe associated with DOS on a Win9x machine
Y ScriptBlocking SBServ.exe Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information
Y ScriptSentry Scriptsentry.exe Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly
U Scroll-In-Mouse V2.0 SCROLL.EXE Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features
X ScrSvr ScrSvr.exe Added by the OPASERV WORM!
X ScrSvrOld [worm filename] Added by the OPASERV WORM!
Y Scsi Scsi.exe SCSI Miniport driver
X scvhost svzhost.exe Added by a variant of the SPYBOT WORM!
X scvhost loader ixplore.exe Added by the SDBOT-CY TROJAN!
X scvhost.exe scvhost.exe Added by the LOHAV-N TROJAN!
X sd32info sd32info.exe Added by the CRYPTER.A TROJAN!
U SDaemon sdaemon.exe PC Security from Tropical Software. 'PC Security™ 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'
X SDAv csnss.exe Added by the SERFLOG.C WORM!
X SDAv svhost.exe Added by the SERFLOG.C WORM!
X sdchosts32 vbdd.exe Added by the RANKY.AG TROJAN!
N SDetect SDetect.exe ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
X sdfsdfsdf sp2update.exe Added by a variant of the SPYBOT WORM!
X SDIN Adapter sdin.exe Added by the FORBOT-AP WORM!
? SDJobCheck triggusr.exe Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup?
X sdkupdate22 SDK0mCORE.exe Added by the FORBOT-DT WORM!
N SDPhotoBar.exe SDPhotoBar.exe SmartDraw Photo - "organize, enhance, print, and share your photos. It's also a powerful graphic editor for creating images and web graphics"
X sdrss sdrss.exe Added by the SDBOT-SQ WORM!
U sealmon sealmon.exe SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint and Email
? Search Hook srchhook.exe ??
X Search Page http://find.naupoint.com Naupoint browser hijacker
X Search-Exe SE.exe Search-Exe hijacker
X Search.vbs Hijacker
X SearchEnhancement scbar.exe IE search hijacker
X searchnav searchnav.exe SearchNav adware - IEFeatures/Popnav variant
X SearchNavVersion searchnavversion.exe SearchNav adware - IEFeatures/Popnav variant
X SearchSetter searchsetter[1].exe Browser hijacker - redirecting to FindWhateverNow.com
X SearchSquire33 SearchUpdate33.exe SearchSquire parasite
X SearchUpgrader SearchUpgrader.exe Hijacker
X Secboot w32tm.exe Added by the HAXDOOR.D TROJAN!
U SecondChance sctray.exe Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash
X Secret-Crush start.exe Hijacker that may reset your browser's home page and/or search settings to point to undesired sites
U Secsys Secsys.exe Key Interceptor - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
X secure secure.exe DealHelper adware
N SecureCleanIEClean SCIEClean.exe SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches
U SecureItPro Secureitpro470p.exe SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop
X SecureLogin Mslg32.exe Added by the REDZED WORM!
X Security Accounts Manager SM samsm.exe Added by the SPYBOT.JE WORM!
X Security Agent Manager mssams.exe Added by the RBOT-SV WORM!
N Security iGuard Security iGuard.exe Spyware remover of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites
U Security Manager SecurityManager.exe A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private
X Security Patches msnkn.exe Added by the RBOT.WW WORM!
X security service syss.exe Added by an unidentified WORM or TROJAN!
Y SECWIZ98 SECWIZ98.EXE Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here
? SelfHostUtil slefhost.exe ??
U SeMS SeMS.exe

PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone

U Sensiva Sensiva.exe Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly
X SENTRY SENTRY.exe From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it 
X Sepate Security Firewall sepate.exe Added by a variant of the RBOT WORM!
X Serials serials.exe Any one of a variety of worms and trojans
X serpe formatsys.exe Added by the SERFLOG.A WORM!
X serpe msmbw.exe Added by the SERFLOG.A WORM!
X serpe serbw.exe Added by the SERFLOG.A WORM!
Y serrdctl.exe serrdctl.exe "Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems
N Serv-U serv-u32.exe FTP server
X Serv-U wssdsu.exe Added by the MANIFEST TROJAN!
X server server.exe Added by the DELTAD.A WORM!
X SERVER.EXE SERVER.EXE Added by the BUSHTRO122 or SMOKODOOR TROJANS!
X serverex Server.txt.vbs Added by the DELTAD.A WORM!
U Service service.exe Added by the ALADINZ.H TROJAN!
X Service services.exe Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
X Service [trojan filename] Added by the KAITEX.E TROJAN!
X Service services.exe Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X Service SYSNT.exe Added by the CHA TROJAN!
N Service Connection sccenter.exe For Compaq PC's. Part of Backweb
N Service Connection bwtray.exe For Compaq PC's. Part of Backweb
X Service Controller Csrrs.exe Added by the GAOBOT.AO WORM!
X Service Host [filename].exe Added by the TORVEL.B WORM!
X Service Host spoolxx.exe Added by the TORVEL WORM!
X Service Host svchost.exe Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X Service Host Driver svchost.exe Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
N Service Manager sqlmangr.exe SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs
X Service Manager dxsound.exe Added by the PROXY-GRIC TROJAN!
X Service Process SVCHOST.EXE Added by the DARKER WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X Service Process winset.exe Added by a variant of the SPYBOT WORM!
X service updaer qualityz.exe Added by an unidentified VIRUS, WORM or TROJAN! - probably a SPYBOT variant
X Service.exe Service.exe "servedby.advertising" popup generator
U ServiceConfig ispbeg.exe Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation
Y ServiceLayer ServiceLayer.exe Nokia Connectivity Library support task that is needed by NCLTRAY and by the Nokia Connection Manager for either to work properly
X services start.bat Added by the ZCREW TROJAN!
X Services [path to trojan] Added by the METEORSHELL TROJAN!
X Services back32.exe ...service.exe Added by an unidentified VIRUS, WORM or TROJAN! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe
X Services services.exe Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
X Services winread.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Services windns.exe Added by a variant of the RBOT WORM!
X Services Controller lsassa.exe Added by the CIADOOR.122 VIRUS!
Start Up Applications S Page 3
X Services Host Scchost.exe Added by the DONK WORM!
X Services Logon services.exe Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X Services Process services.exe Added by unidentified spyware - recognized by Kaspersky antivirus as Small.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X Services Startup services.exe Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X Services Startup svhost33.exe Added by a variant of the RBOT WORM!
X Services.EXE services.exe Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
X services.exe Services.exe Added by the CIADOOR-F TROJAN! Note - this is NOT the legitimate services.exe process, which should NOT figure in Msconfig/Startup!
X Services004 [worm filename] Added by the BUGBROS WORM!
? ServUTrayIcon ServUTray.exe System Tray icon for Serv-U FTP server. Is it required?
X SESync sed.exe Downloadware/SED adware downloader
? SetDefaultMIDI MIDIDef.exe Related to a Soundblaster Audigy soundcards. What does it do and is it required?
? setdefprt setdefprt.exe Related to a Brother printer?
U SetecCertUtil Certutil.exe Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV
X setFTPBack createsw.exe Added by the FTP_BMAIL TROJAN!
N SetHook SetHook.exe Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
N SETI@home SETI@home.exe SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
N seticlient SETI@home.exe SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
N SetIcon SetIcon.exe Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog
N SetiQueue Setiqu~1.exe Provides work unit buffering for Seti@Home clients - see here for more details
N SetiSpy SetiSpy.exe From the site - 'SETI Spy is a little program I wrote to "spy" on the progress and performance of the SETI@home client. I call it a "spy" because I tried to make it as unobtrusive as possible'
? SetRefresh SetRefresh.exe Found on a Compaq PC. Video refresh rate utility? Is it required?
X Setting sysweb.exe Added by the SDBOT.GEN TROJAN!
N setup hphprld.exe ....setup.exe HP DeskJet Setup - printers function normally without it
X Setup experation svchost.exe Added by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process, which NOT appear in Msconfig/Startup!
N SetupICWDesktop icwconn1.exe Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
X setupuser regedit.exe setupuser.log Regfile in disguise - another CoolWebSearch parasite variant
? setuzp setuzp.exe ??
X SetVrc setvrc.exe Added by the HUNTOCX WORM!
X Sex Teris st01b.exe Added by the REPAD WORM!
X Sexy_sg Sexy_sg.exe Premium rate adult content dialler
N SFP vzSFPWin.EXE Verizon Online Support Center - prompts for online updates
X SFtrb Service cftrb32.exe Added by the SOBIG.D WORM!
U SfWinStartInfo sfWinStartupInfo.exe

SFIRM32 Online Banking software

U Sgecrypt Sgecrypt.exe SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
U Sgeecview Ecview.exe SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
N sginst sginst.exe eAcceleration Stop-Sign related - not recommended, see note
? SGTBox SGTBox.exe Canon scanner driver. Is it required?
U sgtray sgtray.exe StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
X shambl3r cnf.bat Added by the REMABL WORM!
X shambl3r* shambl3r.exe Added by the REMABL WORM! where * is 2 to 11
N Share-to-Web Namespace Daemon hpgs2wnd.exe "HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs
N Shareaza Shareaza.exe Shareaza P2P client
X sharedprem sharedprem.exe Added by the MAKECALL TROJAN!
Y Sharing and Mapping Software DShmap.exe Intel AnyPoint internet sharing software
N SharkEject AEJCT32.exe Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required
N Shcenter chcenter.exe IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"
X SheduIer svchst.exe Premium rate adult content dialler
X Shell Shell32.exe Added by the BADSECTOR TROJAN!
X Shell ray.exe Homepage hijacker re-directing browsers to adult content websites
X Shell Tray.exe Homepage hijacker re-directing browsers to adult content websites
X Shell wmedia16.exe Added by the GOLDUN TROJAN!
X Shell Open32.exe Horseserver.net browser hijacker
X Shell Extension spollsv.exe Added by a variant of the LOVGATE WORM!
X Shell32 Shell32.vbs Added by the SCAFENE WORM!
X ShellApi SHELLMSN.EXE Added by the NETDEV.B TROJAN!
X Shellapi32 Shellapi32.exe Added by the NETDEVIL (or NERTE) TROJAN!
X ShellCommand [path to file] Added by the REMCON-A TROJAN!
X ShellEx ShellEx.exe Added by the ANAKHA TROJAN!
X shellsystem shellsystem.exe Added by the UPCHAN TROJAN!
N shicoxp shicoxp.exe Installed with the drivers for multi card readers of various brands. To differentiate between the various card slots on multi slot readers the shicoxp.exe file assigns and loads unique drive icons for the various card slots that are displayed in Windows Explorer
X Shine Shine.exe Added by the HAPPYLOW (or NISHE-A) VIRUS!
? SHINITV shinitv.exe ??
X Shmgrate.exe ibot4.exe Added by the GASTER TROJAN!
N ShockmachineReminder SmReminder.exe Shockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version
X Shockwave csrss.exe Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
N Shockwave Init SWINIT.EXE Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
N ShortKeys 99 SHORTKEY.EXE ShortKeys from Insight Software Solutions - allows you to program keys with text strings
X Showbehind SHOWBEHIND.EXE Advertisement display which can be stopped here
? ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051 shwicon.exe Card reader for memory cards from digital cameras. Is it required?
U SHPC32 SHPC32.exe Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled
Y ShStatEXE SHSTAT.EXE From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs
U Shutdownaware shutdownaware.exe Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system
U ShutDownPro ShutDownPro.exe ShutDownPro - shutdown, reboot, logoff your System with one mouse click
? Si Meter SIMETER.EXE ??
X si91e44b rundll32.exe [path] si91e44b.dll, EnableRunDLL32 LZIO.com adware downloader
X Sicom Sicom.exe Added by the NETLIP WORM!
U SideACT SideACT.exe SideACT organizer software
X Sidebar Sidebar.exe Searchcentrix hijacker
N SideWinderTrayV4 SWTrayV4.exe MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
? SigX sigx.exe ??
X SigXC SigX.exe SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more"
N Simcast SimcastAlerts.exe Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say
U SimpLite-MSN SimpLite-MSN.exe Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)
X Singapore singapore.exe Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself
U SIPPS SIPPSSIPPS.exe Web.de Internet phone utility
N SiS KHooker khooker.exe SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U SiS Tray sistray.exe System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem
U SiS Windows KeyHook keyhook.exe SIS graphics cards related: "Super VGA Keyboard Daemon" - hooks into the keyboard processing chain in order to enable hotkey settings
? SISAM10M SISAM10M.exe ??
N SiSAudio MP_S3.exe WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems
U siscolor color.exe Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
U siService.exe siService.exe Spam Inspector - anti email spam software
Start Up Applications S Page 4
? SiSSetCDfmt SiSSetCDfmt.exe Related to a Silicon Integrated Systems Corp (SiS) product?
? SISSoundman Soundman.exe Related to a Silicon Integrated Systems Corp (SiS) product?
U SiSSWLED sisswled.exe System Tray utility for SiS 900 network cards
X sistrai.exe sistrai.exe Added by the PROVA TROJAN!
X sistray sistray.exe Added by the PROVA TROJAN!
U sistray sistray.exe System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem
X Sistray32 remotehost.pif Added by the HOLCAS.A WORM!
X Sistray32 win.bat Added by the JUMPRED.A WORM!
X sistry sistry.exe Added by the CEBE WORM!
N SiSUSBRG SiSUSBrg.exe SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP
X sixtysix sixtypopsix.exe Unidentified adware
U SK9910DM SK9910DM.EXE Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U SKDAEMON SKDAEMON.EXE Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys 
U skinkers skinkers.exe Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here. Leave enabled if you want to receive messages
Y SkyBlaster Scheduler SSFSch.exe For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
X skynetave.exe skynetave.exe Added by the SASSER.D WORM!
X SkynetRevenge winlogon.scr Added by the NETSKY.AA WORM!
N Skype Skype.exe "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Y SkySurfer Management Service SmaServ.exe For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
N SleepManager SleepMgr.exe This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode
U SlickRun sr.exe "SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:Program FilesOutlook Expressmsimn.exe becomes MAIL"
X slide Iexplore.exe Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
N slimp3 SliMP3 Server.exe Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"
N Slingshot SLINGS~1.EXE Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more"
X slmss slmss.exe SeekSeek search hijacker related - as seen here
X slvchost32 slvchost32.exe Added by an unidentified VIRUS, WORM or TROJAN!
? SM1BG SM1BG.EXE USB driver for downloading from within Napster to portable MP3 players. Is it required to run at startup or can it be run manually?
N Sm56acl sm56hlpr.exe Helper utility for Motorola based SM56 software modems - resides in the System Tray
N Smapp smtray.exe System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N Smart Card Service ScardSvr.exe For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly
U Smart Connect Monitor SCMon.exe Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U Smart Connect Setup SCSetup.exe Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
N Smart Label O Server ssloserv.exe Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N Smart Label RFViewer SSLFVIEW.EXE Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N Smart Type Assistant sta.exe Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer
U Smartalec pcaccel.exe Smartalec PC Accelerator - system optimization utility
N SmartBarXP SmartBarXP.exe SmartBarXP is a bar that runs down the side of your screen, and can be configured to display interactive panels known as 'panes'. These panes include media players, slideshow and image viewing panes, a virtual desktop manager, and live news, weather and stock feeds to mention but a few
N sMaRTcaPs SMARTC~1.EXE sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys
? Smarthruengine QS.exe Unknown but disabled without problems
U SmartPCXL pcaccel.exe Smartalec PC Accelerator - system optimization utility
N SMax4 SMax4.exe System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
U SMax4PNP SMax4PNP.exe SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
? smbdpmi smbdpmi.exe IBM Netfinity Director and Universal Management Services related. What does it do and is it required?
Y smc smc.exe Sygate Firewall
Y smc spfsmc.exe Sygate Firewall
Y SMC Service smc.exe Sygate Firewall
Y SMC Service spfsmc.exe Sygate Firewall
X smcserv winsrv.exe Added by the AGOBOT-OU WORM!
Y SmcService smc.exe Sygate Firewall
Y SmcServices smc.exe Sygate Firewall
Y SmcServices spfsmc.exe Sygate Firewall
? Smcsta.exe Smcsta.exe SMC Networks wireless PCI card driver. Is it required?
N Smith Micro try smiptray.exe Smith Micro shared files. Comes with D-Link web cam
U SMS Application Launcher LAUNCH32.EXE Microsoft Systems Management Server - used to manage computers on a network remotely
U SMS Client Service clisvc95.exe When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)
U SMS Win9x Message Agent ?? This program assigns a user to a Systems Management Server site
U SMS Win9x Message Agent SMSMsg.exe This program assigns a user to a Systems Management Server site
Y Smserial sm56hlpr.exe Motorola based modem driver
N SMSI Loader SMLoader.exe Smith Micro HotFax - fax software
X SMSS smss.exe Added by the FLOOD.F TROJAN! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup!
X smss [path to smss.exe] Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
X SMSSS smsss.exe Added by the SDBOT.ZD WORM!
X SMSSS Loader smsss.exe Added by the AGOBOT.MQ WORM!
X smsys Explorer.exe Added by the CLICKER-C TROJAN! Note - the valid "explorer.exe" is located in C:Windows or C:Winnt whereas this one is located in a C:WindowsTemplate or C:WinntTemplate subdirectory
X smsys vi.exe Adult content dialler
N SMToolbar SMToolbar.exe StartMake.com toolbar
? SmWizard SmWizard.exe SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?
X snapple snapple.exe Added by the FORBOT-EG WORM!
? snbr snbr.exe ??
X sncntr sncntr.exe Added by the DLUCA-I TROJAN!
X Sndcompat Sndcompat.exe Added by the GEMA TROJAN!
U SNDMon SNDMon.exe Part of Symantec's LiveUpate (eg, Norton). Not required if you run manual upadtes but probably require if you leave them to run automatically. Also, if one runs a small office network and SNDMon is disabled on one of the computers – then other computers disappear from the network for this computer, including shared devices like printers and scanners. Hence the "U" recommendation
X Sndsaver Sndsaver.exe Added by the GEMA TROJAN!
? sndsrvc SNDSRVC.EXE Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required?
N Snsicon Snsicon.exe Launches a screensaver program from Second Nature
? SO5 Integrator Pass One sointgr.exe StarOffice 5. See here for more details
? SO5 Integrator Pass Two sointgr.exe StarOffice 5. See here for more details
X Soar Rwon.exe PurityScan/Clickspring adware
X Social Security Agency rpcxsocsa.exe Added by a variant of the RBOT WORM!
X Sock32 sock32.exe Added by the SDBOT TROJAN!
Y SoDA Startup SodaStartup.exe Used by the Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software
N soffice SOFFICE.EXE Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).
X Soft Profile Inc hxdef.exe... Added by a variant of the LOVGATE WORM!
Y SOFTinst N/A For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X Software software.exe Added by the CRABTON-B TROJAN!
Y Solo Sentry Solosent.exe Solo Antivirus
U SoloSchedule Solocfg.exe Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis
U SoloSysCheck Syscheck.exe Solo antivirus System Integrity Check - Monitors system registry, system.ini, win.ini and startup to protect you from new Internet Worms and Backdoors
X somatic somatic.exe Searchcentrix hijacker
N Sonic A3D Control vrtxctrl.exe Sound related options
N SoniqueQuickStart sqstart.exe Quickstart for Sonique audio player. Available via Start -> Programs
? SonnReg SonnReg.exe Part of E-Color 3Deep for color calibration. Possibly a registration reminder?
? Soot rcea.exe ??
? sophagnt sophagnt.exe Possibly related to Sophocles Screenwriting Software?
X SOS SOS.exe Added by the PHILIS VIRUS!
? SoSyncMonitor SoSyncMonitor.exe SuperOffice related. What does it do and is it required?
X Sound Loader sndloader.exe Added by the AGOBOT-BV WORM!
X Sound services SOUND32.EXE Added by the AGOBOT.GG WORM!
X Sound System WinSound1.exe Added by an unidentified VIRUS, WORM or TROJAN!
X soundcontrl soundcontrl.exe Added by the GAOBOT.AFJ WORM!
X sounddrv sndbdrv3104.exe CoolWebSearch parasite variant
? SoundFusion rundll32 cwcprops.cpl Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?
? SoundFusion rundll32 hercplgs.cpl, BootEntryPoint Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?
N soundman soundman.exe System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel
N SoundMAX SMax4.exe System Tray icon for SoundMax integrated sound. Sou