| Status | Autorun name | Command | Description |
| U | SiS Tray | sistray.exe | System Tray icon for SiS based graphics. Located in %System% |
| U | SiS Windows KeyHook | keyhook.exe | Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys |
| X | sis32 | winsos.exe | Added by the QQPASS.IA WORM! |
| Y | SiS7012Utility | SiSAudUt.exe | SiS Corporation sound card driver |
| ? | SISAM10M | SISAM10M.exe | ?? |
| N | SiSAudio | MP_S3.exe | WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems |
| U | siscolor | color.exe | Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board |
| U | siService.exe | siService.exe | Spam Inspector - anti email spam software |
| Y | SiSPower | Rundll32.exe SiSPower.dll,ModeAgent | Power scheme manager for Silicon Integrated Systems (SiS) based mobile chipsets |
| U | SiSRaid | SRaid.exe | Related to the SIS Raid system from Silicon Integrated Systems |
| ? | SiSSetCDfmt | SiSSetCDfmt.exe | Related to a Silicon Integrated Systems Corp (SiS) product? |
| ? | SISSoundman | Soundman.exe | Related to a Silicon Integrated Systems Corp (SiS) product? |
| U | SiSSWLED | sisswled.exe | System Tray utility for SiS 900 network cards |
| X | Sistem Services | syspool.exe | Added by the AGOBOT-GF WORM! |
| X | Sistema | wab32.exe | Added by an unidentified VIRUS, WORM or TROJAN! See here |
| X | Sistema de Comm | conmsyrtl.exe | Added by the AGENT-LMV TROJAN! |
| X | Sistema de Comm | coxdsyrtl.exe | Added by the AGENT-NDQ TROJAN! |
| X | Sistema Operacional | cmd.exe [path] aaa.bat | Added by the BANKER.I TROJAN! Note - do not delete the legitimate cmd.exe process which is always located in %System%. The "aaa.bat" file is located in %Temp% |
| X | sistrai.exe | sistrai.exe | Added by the PROVA TROJAN! |
| X | sistray | sistray.exe | Added by the PROVA TROJAN! Located in %Windir%\command |
| U | sistray | sistray.exe | System Tray icon for SiS based graphics. Located in %System% |
| U | SiSTray | SiSTray.exe | System Tray icon for SiS based graphics. Located in %ProgramFiles%\SiS VGA Utilities |
| X | Sistray32 | remotehost.pif | Added by the HOLCAS.A WORM! |
| X | Sistray32 | win.bat | Added by the JUMPRED.A WORM! |
| X | Sistray32 | virus.exe | Added by the TOMETA-C TROJAN! |
| X | sistry | sistry.exe | Added by the CEBE WORM! |
| N | SiSUSBRG | SiSUSBrg.exe | SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP |
| U | SiteAdv | SiteAdv.exe | Preloads the McAfee SiteAdvisor browser plug-in for Internet Explorer and Firefox. "With SiteAdvisor software installed, your browser will look a little different than before. We add small site rating icons to your search results as well as a browser button and optional search box. Together, these alert you to potentially risky sites and help you find safer alternatives". Not required as it will load with your browser |
| U | SiteAdvisor | SiteAdv.exe | Preloads the McAfee SiteAdvisor browser plug-in for Internet Explorer and Firefox. "With SiteAdvisor software installed, your browser will look a little different than before. We add small site rating icons to your search results as well as a browser button and optional search box. Together, these alert you to potentially risky sites and help you find safer alternatives". Not required as it will load with your browser |
| U | SiteAdvisor | SiteAv.exe | Refer to the SiteAdv.exe entry. This entry only appears to originate from version 2.0.0.75 (Build 4295) of SiteAdvisor and the registry entry incorrectly points to the invalid filename "SiteAv.exe" - when it should be "SiteAdv.exe" |
| X | SiteAdware.exe | SiteAdware.exe | SiteAdware rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| U | SiteAv | SiteAv.exe | Refer to the SiteAdv.exe entry. This entry only appears to originate from version 2.0.0.75 (Build 4295) of SiteAdvisor and the registry entry incorrectly points to the invalid filename "SiteAv.exe" - when it should be "SiteAdv.exe" |
| U | Sitecom Wireless LAN Utility | WLANUTL.exe | Sitecom wireless LAN configuration utility |
| U | Sitecom Wireless Utility | WLANUTL.exe | Sitecom wireless LAN configuration utility |
| U | Sitecom WL-112 Utility | WLANUTL.exe | Sitecom WL-112 wireless LAN configuration utility |
| U | Sitecom WL-115 Utility | WLANUTL.exe | Sitecom WL-115 wireless LAN configuration utility |
| U | SiteRanker | SiteRankTray.exe | "SiteRanker brings you ratings and reviews of websites while you browse and allows you to post your own ratings and reviews. By posting your ratings and reviews youll help other users stay away from websites you found to be dangerous, recommend an eshop whose services you were satisfied with, etc." Not available for download, it's usually distributed together with other products |
| X | SiteVillain | SiteVillain.exe | SiteVillain rogue security software - not recommended. A member of the AntiAID family |
| X | sittachasnahalbasya | ntoskernel.exe | Added by the HANSAH-A WORM! |
| U | Six Engine | SixEngine.exe | Power management utility included with some ASUS motherboards. "The new ASUS EPU (Energy Processing Unit) - the world's first power saving engine, has been upgraded to a new 6 engine version, which provides total system power savings by detecting current PC loadings and intelligently moderating power in real-time" |
| X | sixer566 | sscc.exe | Added by an unidentified WORM or TROJAN! |
| X | sixtysix | sixtypopsix.exe | Medload adware |
| X | sjduwiwx | rnxntup.exe | Added by a variant of the ORCU.B TROJAN! |
| U | SK51 | SK51.EXE | SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself! |
| U | SK60 | SK60.EXE | SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself! |
| U | SK9910DM | SK9910DM.EXE | Multi-function keyboard driver. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys |
| U | SKDAEMON | SKDAEMON.EXE | Multi-function keyboard driver. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys |
| U | SkinClock | AtomicAlarmClock.exe | Atomic Alarm Clock - "Alert yourself about important events with different alarms and replace your computer tray clock using different skins. Computer Alarm clock that will play any MP3 file. It can also run a program, log off, wake up, reboot, shut down, turn off etc..." |
| U | skinkers | skinkers.exe | Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here. Leave enabled if you want to receive messages |
| U | Skrót do strony właściwości High Definition Audio | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Polish version |
| X | Skra | Skra.exe | Identified as a variant of the TrojanDownloader.Matcash malware |
| U | SKRSpyWarn | Warn.exe | SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
| U | sks-32 | SKS32P~1.EXE | SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself |
| U | sks-32 | sks32proc.exe | SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself |
| X | Skunk | Skunk.exe | Added by the SUNK-A WORM! Note - this file is found in the root folder (i.e., C:\) |
| Y | SkyBlaster Scheduler | SSFSch.exe | For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system |
| X | skynetave.exe | skynetave.exe | Added by the SASSER.D WORM! |
| X | SkynetRevenge | winlogon.scr | Added by the NETSKY.AA WORM! |
| N | Skype | Skype.exe | Skype is "free calls, video calls and instant messaging over the internet. Plus great value calls to phones anywhere in the world" |
| X | Skype Startup | skyp.exe | Added by the VANBOT-C WORM! |
| N | SkypeMate | SkypeMate.exe | SkypeMate acts as a bridge between networks of VoIP and PSTN |
| X | SkypeStartup | Skype.exe | Added by the PYKSE-A WORM! |
| Y | SkySurfer Management Service | SmaServ.exe | For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system |
| U | Skytel | Skytel.exe | Realtek Voice Manager, installed with the drivers for on-board Realtek HD audio codecs. On an ALC885 based test system it doesn't run after the drivers have been installed and the startup entry is then removed. Disabling it appears to have no ill effects but it's exact purpose is unknown - hence the "U" recommendation |
| X | sl4 rules | rbot32.exe | Added by the SDBOT-QC WORM! |
| X | slack12 | mfcee.exe | Added by a variant of the SDBOT WORM! |
| X | Slayhacker734 | slay7383.exe | Added by the SIKBOT-A TROJAN! |
| X | SLDT | rundll32.exe [path] systemdrea.dll | Added by the LATAA-B TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "049ead.cpl" file is located in %Temp% |
| N | SleepManager | SleepMgr.exe | This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode |
| U | Slibe.com | Sliber.EXE | Sliber - freeware screen capturing & online sharing tool |
| U | SlickRun | sr.exe | "SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:\Program Files\Outlook Express\msimn.exe becomes MAIL" |
| X | slide | Iexplore.exe | Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! |
| N | slimp3 | SliMP3 Server.exe | Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC" |
| N | Slingshot | SLINGS~1.EXE | Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more". Now superseed by 1-Click Answers |
| Y | slipcore | slipcore.exe | Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server |
| Y | slipgui | slipgui.exe | User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server |
| Y | SlipStream | slipcore.exe | Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server |
| X | slmss | slmss.exe | SecondThought adware |
| X | sload | sload.exe | Win SynchroAd adware, also detected as DLOADER-QG TROJAN! |
| X | sload | sload32.exe | Added by the SDBOT-OY WORM! |
| X | slvchost32 | slvchost32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | sm | sa_exe.exe | Added by the OLFEB.A TROJAN! |
| X | sm | sf_exe.exe | Added by the OLFEB.A TROJAN! |
| X | sm | sm_exe.exe | Added by the OLFEB.A TROJAN! |
| X | sm | sr_exe.exe | Added by the LUKUSPAM TROJAN! |
| X | SM | iro.bat | Added by the IROFFER.CT BACKDOOR! |
| X | SM[random] | [random].exe | Malware Protector 2008 rogue security software - not recommended, removal instructions here |
| X | SM_IAN | ian_monitor.exe | AdvancedCleaner rogue security software - not recommended, see here. Removal instructions here |
| N | SM1BG | SM1BG.EXE | USB driver for downloading from within Napster and iTunes to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required |
| N | SM1NINT | SM1NINT.exe | Cypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98 |
| N | SM56 Helper Win32 Utility | sm56hlpr.exe | Helper utility for Motorola based SM56 software modems - resides in the System Tray |
| N | Sm56acl | sm56hlpr.exe | Helper utility for Motorola based SM56 software modems - resides in the System Tray |
| U | sma | sma.exe | SmartKeylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | SmallAndSecure | mssecure.exe | Added by the RBOT.CU WORM! |
| X | sman | app***.tmp [* = digit] | Unidentified adware |
| X | SManager | smanager.6.exe | Added by the AGENT.BJO TROJAN! |
| X | SManager | smanager.7.exe | Added by the DWNLDR-GVG TROJAN! |
| X | SmansaApp | winlogon.exe | Added by the ROMARIO-A WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| N | Smapp | Smtray.exe | System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel |
| X | Smart Antivirus-2009.exe | Smart Antivirus-2009.exe | Smart Antivirus 2009 rogue security software - not recommended, removal instructions here |
