| Status | Autorun name | Command | Description |
| X | S | svhost.exe | Added by the AGOBOT-LN WORM! |
| X | S0undMan | svch0st.exe | Added by the LOVGATE.AB WORM! Note - the filename has the digit 0 rather then the uppercase "o" |
| ? | S24EvMon | S24EvMon.exe | Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required? |
| X | S3 Chip3 | s3int.exe | Added by the AGOBOT.LM BACKDOOR! |
| X | S3 Internal | s3chip4.exe | Added by the AGOBOT-FQ BACKDOOR! |
| X | S3 Internal Chip | s3serv.exe | Added by the AGOBOT-DD WORM! |
| X | S3 Internal Chip | s3chip3.exe | Added by the AGOBOT-FW WORM! |
| N | S3apphk | S3apphk.exe | A tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems |
| U | S3Hotkey | s3hotkey.exe | Hotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card |
| ? | S3Mon | S3Mon.exe | S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required? |
| U | S3TRAY | S3Tray.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display |
| ? | s3tray2 | s3tray2.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards? |
| ? | S3TRAYHP | S3trayhp.exe | S3 Video driver related. What does it do and is it required? |
| U | S3Trayp | S3trayp.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display |
| U | S4F | S4F.exe | FilterPak from S4F, Inc - internet filtering software |
| X | s4helper | s4helper.exe | Searchcentrix hijacker |
| N | S60 PC Suite Tray | PCSuite.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| X | s9201 | av2008xp.exe | Antivirus 2008 XP rogue security software - not recommended, removal instructions here |
| X | s9201 | as2008xp.exe | AntiSpyware XP 2008 rogue spyware remover - not recommended, removal instructions here |
| X | s9201 | asproxp.exe | AntiSpyware Pro XP rogue spyware remover - not recommended, removal instructions here |
| X | s9201 | wspwprtct.exe | WinSpywareProtect rogue security software - not recommended, removal instructions here |
| ? | SA | Sa3.exe | Logitech QuickCam driver. Is it required? |
| ? | SA Service | SAservice.exe | Associated with Cyber Trio and Warner troubleshooting software fromG-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required? |
| N | Sa3dsrv | Sa3dsrv.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| X | saap | saap.exe | 180solutions adware |
| U | Sabre Printing Start | Sabstart.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabre Server | sabserv.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabre Task Tray Icon | Sabstart.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabreserver | SABSERV.EXE | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| X | sac | sac.exe | 180Search adware |
| X | SACC | sacc.exe | SurfAccuracy adware |
| N | SAClient | RegCon.exe | AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging |
| X | sacmemds | smcntlwio.exe | Added by the MAILBOT-BZ TROJAN! |
| X | sads | sdsa.exe | Added by the RBOT-PA WORM! |
| X | Safe | SafeWin.exe | Added by the FOCOSENHA TROJAN! |
| X | Safe | [path to trojan] | Added by the BANKER-DT TROJAN! |
| X | SafeFighter | SafeFighter.exe | SafeFighter rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | Safeguard 2009 | sf2009.exe | Safeguard 2009 rogue spyware remover - not recommended, removal instructions here |
| X | SafeGuard Popup Blocker Updater | regsvr32 sfgupd.dll | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Blocker Updater (required) | regsvr32 sfg****.dll [* = ramdom char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Updater (required) | regsvr32 sfg****.dll [* = random char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Updater (required) | regsvr32 PDF****.dll [* = random char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | Safeguard.exe | Safeguard.exe | Super Spyware Killer rogue spyware remover - not recommended |
| X | SafeHardDrive | SysRep.exe | SafeHardDrive rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| U | SafeHouseSystemTray | SDWTRAY.EXE | SafeHouse "Personal Privacy" system tray icon - PP protects and hides your private and personal photos, videos, files and folders by making them "invisible" and encrypted |
| N | SafeInstall.exe | SAFEIN~1.EXE | Monitors a download and ensures an newer version of a file isn't replaced by an older one |
| N | SafeOFF | SafeOff.exe | Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation |
| X | SafePcAv | SafePcAv.exe | SafePcAv rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | SafePCTool | SysRep.exe | SafePCTool rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| X | SafePrivate | SafePrivate.exe | SafePrivate rogue security software - not recommended, removal instructions here |
| X | SaferScan | SaferScan.exe | SaferScan rogue security software - not recommended |
| X | SafeSearch | safesearch.exe | SafeSearch.A adware |
| Y | SafeSpace | SafeSpaceSysTray.exe | Part of SafeSpace (from Artificial Dynamics) which "protects computers from Internet malware infection without the need for signature updates or regular maintenance" |
| X | SafeStrip | SafeStrip.exe | SafeStrip rogue security software - not recommended, removal instructions here |
| X | SafeStripReminder | SafeStripReminder.exe | SafeStrip rogue security software - not recommended, removal instructions here |
| X | SafeSurfingUpdate | SSUpdate.exe | MoneyTree parasite - ActiveX control used to download premium-rate dialers |
| X | SafeSys | SafeSys.exe | Added by the AUTORUN.DMI WORM! |
| X | Safety Anti-Spyware 3 | Safety Anti-Spyware 3.exe | Safety Anti-Spyware rogue security software - not recommended, removal instructions here |
| X | SafetyCenter | protector.exe | Safety Center rogue security software - not recommended, removal instructions here |
| X | SafetyKeeper | SafetyKeeper.exe | SafetyKeeper rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| U | SafetyNet | ipcTray.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| U | SafetyNet_Notifier | ipcLn.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| Y | Safeworld | Freedom.exe | Safeworld - sourced by Freedom from Zero Knowledge, Inc (now Radialpoint). Provides anti-virus, personal firewall, parental controls and a pop-up blocker. Also safeguards your personal information, encrypts your passwords and much more. No longer available |
| X | Sagate Security Firewall | sagate.exe | Added by the GAOBOT.BOW WORM! |
| U | Sagem - 802.11g Wi-Fi USB Dongle LAN Utility | WLANUTL.exe | SAGEM wireless LAN configuration utility |
| U | Sagem - Utilitaire réseau pour Clé USB Wi-Fi 802.11g | WLANUTL.exe | SAGEM wireless LAN configuration utility |
| N | SAgent2ExePath | SAgent2.exe | Seiko Epson printer status agent. Disable if printer is not used often |
| U | SAGENTSERVICE | Sagent.exe | TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself |
| X | Saggwwgg | CVAvwwd.exe | Added by the LIOTEN.HT WORM! |
| X | sagnt | sagnt.exe | Adware web downloader |
| X | SAHagent | Sahagent.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | bundle.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | shop1003.exe | ShopAtHomeSelect parasite |
| X | saie | saie.exe | 180solutions adware |
| X | saihoi | saihoi.exe | Added by the MDROP-CUT TROJAN! |
| N | SaiMfd | SaiMfd.exe | Saitek MFD File System Driver - associated with the Saitek SST (Saitek Smart Technology) configuration software for their game controllers. Create a shortcut and run manually when required |
| U | SAIMON | SaiMon.exe | Saitek joystick driver |
| X | sain | sain.exe | 180Search adware |
| X | sais | sais.exe | 180solutions adware |
| U | SaiSmart | SaiSmart.exe | "Smart Button Special Sauce" - included with support software for some of the Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature |
| N | Saitek SD6 Software | ProfilerU.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profiler" and "Control Panel" for their range of game controllers. Run manually via Start → Programs → Saitek SD6 Programming Software → Profiler |
| U | SaitekAutoConfigure | saicnfig.exe | Configuration for Saitek game controllers |
| X | Sakemsneql | simenu.exe | Added by the SDBOT.BTO WORM! |
| X | Sakora | Sakora.exe | Added by the GOWELES.A TROJAN! |
| N | SalaatTime | SalaatTime.exe | "Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world" |
| X | Salestart | WAS7Mon.exe | Part of the WinAntiSpyware 2007 rogue spyware remover - not recommended |
| X | Salestart | bm.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | Salestart | dcpasmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | dcsm.exe | Part of the PrivacyProtector and DriveCleaner rogue security tools |
| X | Salestart | mc.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | stm.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | strpmon.exe | Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| X | Salestart | stmon.exe | Part of rogue software including members of the AVSystemCare security suite family (see here for examples) and the PcRaiser and SystemOptimizer2008 optimization utilities |
| X | Salestart | mav_startupmon.exe | Part of the WinAntiVirus Pro 2007 rogue security software - not recommended, removal instructions here |
| X | Salestart | PASmon.exe | Part of rogue security tools, including ErrorSafe and PcTurboPro |
| X | Salestart | dcmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | startmon.exe | ErrorProtector rogue system error and cleaning utility - not recommended |
| X | salm | salm.exe | 180Search adware |
| U | Salmosa | razerhid.exe | Razer Salmosa gaming mouse driver - required if you use the additional features and programmed keys/macros |
| X | saly | saly*****.exe | Added by a variant of the AW.AWK TROJAN! |
