| Status | Autorun name | Command | Description |
| X | S | svhost.exe | Added by the AGOBOT-LN WORM! |
| X | S0undMan | svch0st.exe | Added by the LOVGATE.AB WORM! Note - the filename has the digit 0 rather then the uppercase "o" |
| ? | S24EvMon | S24EvMon.exe | Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required? |
| X | S3 Chip3 | s3int.exe | Added by the AGOBOT.LM BACKDOOR! |
| X | S3 Internal | s3chip4.exe | Added by the AGOBOT-FQ BACKDOOR! |
| X | S3 Internal Chip | s3serv.exe | Added by the AGOBOT-DD WORM! |
| X | S3 Internal Chip | s3chip3.exe | Added by the AGOBOT-FW WORM! |
| N | S3apphk | S3apphk.exe | A tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems |
| U | S3Hotkey | s3hotkey.exe | Hotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card |
| ? | S3Mon | S3Mon.exe | S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required? |
| U | S3TRAY | S3Tray.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display |
| ? | s3tray2 | s3tray2.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards? |
| ? | S3TRAYHP | S3trayhp.exe | S3 Video driver related. What does it do and is it required? |
| U | S3Trayp | S3trayp.exe | S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display |
| U | S4F | S4F.exe | FilterPak from S4F, Inc - internet filtering software |
| X | s4helper | s4helper.exe | Searchcentrix hijacker |
| X | s9201 | av2008xp.exe | Antivirus 2008 XP rogue security software - not recommended, removal instructions here |
| X | s9201 | as2008xp.exe | AntiSpyware XP 2008 rogue spyware remover - not recommended, removal instructions here |
| X | s9201 | asproxp.exe | AntiSpyware Pro XP rogue spyware remover - not recommended, removal instructions here |
| ? | SA | Sa3.exe | Logitech QuickCam driver. Is it required? |
| ? | SA Service | SAservice.exe | Associated with Cyber Trio and Warner troubleshooting software fromG-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required? |
| N | Sa3dsrv | Sa3dsrv.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| X | saap | saap.exe | 180solutions adware |
| U | Sabre Printing Start | Sabstart.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabre Server | sabserv.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabre Task Tray Icon | Sabstart.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| U | Sabreserver | SABSERV.EXE | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing |
| X | sac | sac.exe | 180Search adware |
| X | SACC | sacc.exe | SurfAccuracy adware |
| N | SAClient | RegCon.exe | AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging |
| X | sacmemds | smcntlwio.exe | Added by the MAILBOT-BZ TROJAN! |
| X | sads | sdsa.exe | Added by the RBOT-PA WORM! |
| X | Safe | SafeWin.exe | Added by the FOCOSENHA TROJAN! |
| X | Safe | [path to trojan] | Added by the BANKER-DT TROJAN! |
| X | SafeFighter | SafeFighter.exe | SafeFighter rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | Safeguard 2009 | sf2009.exe | Safeguard 2009 rogue spyware remover - not recommended, removal instructions here |
| X | SafeGuard Popup Blocker Updater | regsvr32 sfgupd.dll | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Blocker Updater (required) | regsvr32 sfg****.dll [* = ramdom char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Updater (required) | regsvr32 sfg****.dll [* = random char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | SafeGuard Popup Updater (required) | regsvr32 PDF****.dll [* = random char] | SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in %System% |
| X | Safeguard.exe | Safeguard.exe | Super Spyware Killer rogue spyware remover - not recommended |
| X | SafeHardDrive | SysRep.exe | SafeHardDrive rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| U | SafeHouseSystemTray | SDWTRAY.EXE | SafeHouse "Personal Privacy" system tray icon - PP protects and hides your private and personal photos, videos, files and folders by making them "invisible" and encrypted |
| N | SafeInstall.exe | SAFEIN~1.EXE | Monitors a download and ensures an newer version of a file isn't replaced by an older one |
| N | SafeOFF | SafeOff.exe | Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation |
| X | SafePcAv | SafePcAv.exe | SafePcAv rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | SafePCTool | SysRep.exe | SafePCTool rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| X | SafeSearch | safesearch.exe | SafeSearch.A adware |
| Y | SafeSpace | SafeSpaceSysTray.exe | Part of SafeSpace (from Artificial Dynamics) which "protects computers from Internet malware infection without the need for signature updates or regular maintenance" |
| X | SafeStrip | SafeStrip.exe | SafeStrip rogue security software - not recommended, removal instructions here |
| X | SafeStripReminder | SafeStripReminder.exe | SafeStrip rogue security software - not recommended, removal instructions here |
| X | SafeSurfingUpdate | SSUpdate.exe | MoneyTree parasite - ActiveX control used to download premium-rate dialers |
| X | SafeSys | SafeSys.exe | Added by the AUTORUN.DMI WORM! |
| X | Safety Anti-Spyware 3 | Safety Anti-Spyware 3.exe | Safety Anti-Spyware rogue security software - not recommended, removal instructions here |
| X | SafetyCenter | protector.exe | Safety Center rogue security software - not recommended, removal instructions here |
| X | SafetyKeeper | SafetyKeeper.exe | SafetyKeeper rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| U | SafetyNet | ipcTray.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| U | SafetyNet_Notifier | ipcLn.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| U | Safeworld | Freedom.exe | SafeWorld Internet Security - now no longer available |
| X | Sagate Security Firewall | sagate.exe | Added by the GAOBOT.BOW WORM! |
| N | SAgent2ExePath | SAgent2.exe | Seiko Epson printer status agent. Disable if printer is not used often |
| U | SAGENTSERVICE | Sagent.exe | TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself |
| X | Saggwwgg | CVAvwwd.exe | Added by the LIOTEN.HT WORM! |
| X | sagnt | sagnt.exe | Adware web downloader |
| X | SAHagent | Sahagent.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | bundle.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | shop1003.exe | ShopAtHomeSelect parasite |
| X | saie | saie.exe | 180solutions adware |
| U | SaiMfd | SaiMfd.exe | Saitek MFD File System Driver - associated with the Saitek SST (Saitek Smart Technolgy) configuration software for their game controllers. Create a shortcut and run manually when required |
| U | SAIMON | SaiMon.exe | Saitek joystick driver |
| X | sain | sain.exe | 180Search adware |
| X | sais | sais.exe | 180solutions adware |
| U | SaiSmart | SaiSmart.exe | "Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature |
| U | SaitekAutoConfigure | saicnfig.exe | Configuration for Saitek game controllers |
| X | Sakemsneql | simenu.exe | Added by the SDBOT.BTO WORM! |
| X | Sakora | Sakora.exe | Added by the GOWELES.A TROJAN! |
| N | SalaatTime | SalaatTime.exe | "Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world" |
| X | Salestart | WAS7Mon.exe | Part of the WinAntiSpyware 2007 rogue spyware remover - not recommended |
| X | Salestart | bm.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | Salestart | dcpasmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | dcsm.exe | Part of the PrivacyProtector and DriveCleaner rogue security tools |
| X | Salestart | mc.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | stm.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | strpmon.exe | Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| X | Salestart | stmon.exe | Part of rogue software including members of the AVSystemCare security suite family (see here for examples) and the PcRaiser and SystemOptimizer2008 optimization utilities |
| X | Salestart | mav_startupmon.exe | Part of the WinAntiVirus Pro 2007 rogue security software - not recommended, removal instructions here |
| X | Salestart | PASmon.exe | Part of rogue security tools, including ErrorSafe and PcTurboPro |
| X | Salestart | dcmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | startmon.exe | ErrorProtector rogue system error and cleaning utility - not recommended |
| X | salm | salm.exe | 180Search adware |
| U | Salmosa | razerhid.exe | Razer Salmosa gaming mouse driver - required if you use the additional features and programmed keys/macros |
| X | saly | saly*****.exe | Added by a variant of the AW.AWK TROJAN! |
| X | Sam-sung | Sam-sung.exe | Added by a variant of the SDBOT WORM! |
| X | SaMail | [WORM FILE NAME].vbs | Added by the VBS.LIDO WORM! |
| U | SAMcal | SAMcal.exe | SamCal - calendar/reminder program |
| U | Sametime Connect | Connect.exe | IBM Lotus Sametime - instant messaging and Web conferencing software |
| X | sample | hchos.exe | Added by the BANKER-EZU TROJAN! |
| X | Samsong | Samsong.exe | Added by the SDBOT.BNE WORM! |
| X | Samsung | Samsungs.exe | Added by an IRC TROJAN variant! |
| U | Samsung MJC-900 Series Monitor | RUNDLL32.EXE SMMASHLL.DLL,AutoUpdatePnPValue | Samsung MJC-900 Series multi-function printer monitor - monitors ink levels, paper present and other parameters |
