| Status | Autorun name | Command | Description |
| N | SonicFocus | SFIGUI.EXE | Sonic Focus - "enhances music, movie and game sound by analyzing compressed audio streams in realtime, then restoring and enriching audio back to its original performance qualities" |
| N | SoniqueQuickStart | sqstart.exe | Quickstart for the discontinued Sonique audio player. Available via Start -> Programs |
| N | SonnReg | SonnReg.exe | Registration for Colorific® and 3Deep® monitor calibration software from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™ |
| X | SonudMan | SonudMan.exe | Added by the STARTPAGE.Q TROJAN! |
| X | SonudMan | WNILOGON.exe | Added by the QQROB-DC TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| X | SonudMon | SonudMon.exe | Added by the LEWOR-J TROJAN! |
| N | Sony Auto Update Tray Application | CONNECTAUTrayApp.exe | System Tray access to change update settings for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP |
| N | Sony Ericsson PC Suite | Application Launcher.exe | System Tray access to Sony Ericsson PC Suite which "connects your phone to your computer and expands the capabilities of your phone". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone |
| N | Sony Ericsson PC Suite | SEPCSuite.exe | System Tray access to Sony Ericsson PC Suite which "connects your phone to your computer and expands the capabilities of your phone". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone |
| U | SonyPowerCfg | SPMgr.exe | Related to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices |
| ? | Soot | rcea.exe | ?? |
| ? | sophagnt | sophagnt.exe | Possibly related to Sophocles Screenwriting Software? |
| X | SOProc_RegSoAlertWxLiteNnAj | rundll32 shell32.dll, ShellExec_RunDLL [path] soproc.exe | SoftwareOnline Intelligent Downloader - "Bundle engine to enable download of end user approved third party applications and reporting of installs for billing purposes only". Said to monitor user's browsing habits and display pop-up ads |
| X | SOS | SOS.exe | Added by the PHILIS VIRUS! |
| ? | SoSyncMonitor | SoSyncMonitor.exe | SuperOffice related. What does it do and is it required? |
| X | Sound | [path to trojan] | Added by the DROPPER.EAT TROJAN! |
| X | Sound Loader | sndloader.exe | Added by the AGOBOT-BV WORM! |
| X | Sound services | SOUND32.EXE | Added by the AGOBOT.GG WORM! |
| X | Sound System | WinSound1.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Sound Volume | svchosI.exe | Added by a variant of the IRCBOT TROJAN! See here |
| X | Sound.exe Espanha | Sound.exe | Added by the AGENT-OUD TROJAN! |
| X | soundcontrl | soundcontrl.exe | Added by the GAOBOT.AFJ WORM! |
| X | sounddrv | sndbdrv3104.exe | CoolWebSearch parasite variant |
| ? | SoundFusion | rundll32 cwcprops.cpl | Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time? |
| ? | SoundFusion | rundll32 hercplgs.cpl, BootEntryPoint | Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time? |
| ? | SoundFusion | RunDll32 cwaprops.cpl, C25CrystalControlWnd | Control panel item for a Terratec soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time? |
| X | SoundMam | SVOHOST.exe | Added by the QQROB-AAL TROJAN! |
| U | SoundMan | SOUNDMAN.EXE | Realtek Sound Manager, installed with the drivers for on-board Realtek HD and AC97 audio codecs. On an AC97 based system it gives System Tray access to the audio control panel (which is also available via the system Control Panel). On an ALC885 HD based test system it doesn't run after the drivers have been installed and the startup entry is then removed - disabling it appears to have no ill effects but it's exact purpose is unknown |
| X | SoundMan | soundman.exe | Added by the AGOBOT.HM WORM! Note - this is not the legitimate SiS or Realtek file of the same name that is located in %Windir%, this one is located in %System% |
| X | SOUNDMAN Microsoft Help | soun.pif | Added by the RBOT-AIU WORM! |
| X | soundman.exe | soundman.exe | Added by the AGENT-HKD TROJAN! Note - this is not the legitimate SiS or Realtek file of the same name that is located in %Windir%, this one is located in %System% |
| N | SoundMAX | Smax4.exe | System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel |
| X | SoundMAX | SoundMAX.exe | Added by the RIZON-A WORM! Note - this file is placed in the Startup folder itself, and has NO relation to SoundMax sound cards! |
| N | SoundMAX | soundmax.exe | System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel. Located in %ProgramFiles%\Analog Devices\SoundMAX |
| X | SoundMax | Soundmax.exe | Added by the MALAS-A VIRUS! Note - this file is located in %ProgramFiles%\Sound Utility and has NO relation to SoundMax sound cards! |
| X | SoundMax | startup.exe | Added by the MALAS-C WORM! |
| X | SoundMax Audio Drivers | SndMAX.exe | Added by a variant of the SDBOT WORM! |
| N | SoundMAX Control Panel | Smax4.exe | System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel |
| N | SoundMAX Integrated Digital Audio | Smtray.exe | System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel |
| U | SoundMAXPnP | SMax4PNP.exe | Analog Devices SoundMax integrated soundcard utility. Brings up the SoundMAX Control Panel when it detects if new audio devices (such as microphones, headphones, speakers, etc.) are plugged in - giving the user the option to configure them. Also required if you have custom settings for your sound, such as effects and environments |
| X | soundmix | soundmix.exe | Added by the AGENT.PGV WORM! |
| X | SoundMixer | smvss.exe | Added by the DEDLER-G TROJAN! |
| X | SoundMnEx32 | [path to worm] | Added by the STRATION-FW WORM! |
| X | Soundmx | Soundmx.exe | CoolWebSearch Tapicfg parasite variant |
| X | soundtask | soundtask.exe | Added by the AGOBOT-MD WORM! |
| X | soundtasks | soundtasks.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | soundtctrls | soundtctrls.exe | Added by the AGOBOT-ZV WORM! |
| X | SoundView | msdview32.exe | Trojan downloader |
| X | sounofts | sounofts.exe | Added by the AGOBOT-ND WORM! |
| X | sountskmanager | sountaskmgr | Added by an unidentified WORM or TROJAN! |
| N | SourcePath | gwreg.exe | Used to update Gateway registry settings for System Restoration Kit and Web update programs |
| X | sp | sp.reg | IE search hijacker - changes the default search to http://www.gocybersearch.com/ |
| X | sp | regedit -s sp.dll | Malicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here for more and a fix. The "sp.dll" is located in %Windir% |
| X | sp | se.dll,DllInstall | STARTPAGE.M hijacker |
| X | sp | rundll32 (Path to Trojan DLL), DllInstall | Added by the ABLANK-W and ABLANK-Z TROJANS! |
| U | SP TimeSync | SP TimeSync.exe | SP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server) |
| X | SP00LSV | Sp00lsv.exe | Added by the GRAYBIRD.E TROJAN! |
| U | SP2 Connection Patcher | SP2ConnPatcher.exe | Changes the limit of concurrent TCP connections attempts imposed with Windows XP SP2 onwards. Typically installed with peer-to-peer (P2P) file-sharing clients such as Warez P2P, BearShare and LimeWire |
| X | SP2 data | [path] repcale.exe [path] apc.exe | Added by a variant of the RANDON.AN WORM! Both files are often located in %System%\winstat |
| X | SP2 Firewall/Internet Updater | crssrs.exe | Added by the RBOT.BJO WORM! |
| X | sp2chk.exe | sp2chk.exe | Added by an unidentified WORM or TROJAN! |
| U | SP2ConnPatcher | sp2connpatcher.exe | Changes the limit of concurrent TCP connections attempts imposed with Windows XP SP2 onwards. Typically installed with peer-to-peer (P2P) file-sharing clients such as Warez P2P, BearShare and LimeWire |
| X | sp2ctr | sp2ctr.exe | Added by the DLUCA-M TROJAN! |
| X | sp2fwxp | sp2fwxp.exe | Added by the SMALL.ABW TROJAN! |
| X | sp2svc | sp2svc.exe | Added by a variant of the RBOT WORM! |
| X | sp2update | sp2update.exe | SP2Update adware! Tracks URLs visited and search terms entered into Internet Explorer |
| X | sp2update | updatesp2.exe | Added by the SDBOT.CAS WORM! |
| X | spa_start | Rundll32.exe spads.dll | IconAds adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "spads.dll" file is located in the Winnt or Windows folder |
| X | spa_start | Rundll32.exe sprt_ads.dll | Superiorads adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sprt_ads.dll" file is located in %System% |
| X | Spam Blocker for Outlook Express | SBInst.exe | Spam Blocker Utility adware by the people who provide the Hotbar adware |
| X | SPAM FIREWALL | mfirewall.exe | Added by the SDBOT.AOU WORM! |
| U | Spam Monitor | SpamMonitor.Exe | System Tray access to Spam Monitor from PC Tools - which "is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users, not experts, Spam Monitor's step-by-step wizard configures your PC with the safest anti-spam settings automatically" |
| U | Spam Sleuth | SpamSleuth.exe | Spam Sleuth E-mail spam detection program |
| X | SpamBlocker | SbOEAddOn.exe | Spam Blocker Utility adware by the people who provide the Hotbar adware |
| X | SpamBlockerUtilityOE | OEAddOn.exe | Spam Blocker Utility adware by the people who provide the Hotbar adware |
| U | SPAMfighter Agent | SFAgent.exe | SPAMfighter anti email spam filter |
| U | spamihilator | spamihilator.exe | Spamihilator - spam filter |
| U | SpamMonitor | SpamMonitor.Exe | System Tray access to Spam Monitor from PC Tools - which "is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users, not experts, Spam Monitor's step-by-step wizard configures your PC with the safest anti-spam settings automatically" |
| U | SpamMonitor Application | SpamMonitor.Exe | System Tray access to Spam Monitor from PC Tools - which "is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users, not experts, Spam Monitor's step-by-step wizard configures your PC with the safest anti-spam settings automatically" |
| U | SpamPal | spampal.exe | SpamPal - anti-spam tool |
| U | SpamSubtract | SpamSubtract.exe | Intermute SpamSubtract - junk email detection and removal program |
| U | spamsubtract | SpamSub.exe | InterMute™ SpamSubtract - junk email detection and removal program. InterMute™ is now part of Trend Micro and their products are no longer supported |
| U | Spare Backup | SpareBackup.exe | Spare Backup - "Once Spare Backup is installed, backups are automatic. With Spare Backup it's easy, you don't even have to select files for backup, Spare Backup does it for you" |
| U | SpareMessaging | MessagingApp.exe | Messaging and reports application for Spare Backup |
| U | Spark | Spark.exe | Spark instant messaging client |
| N | SparVoip | SparVoip.exe | SparVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| N | spc_w | hcm.exe | NetZero Search Enhancement related |
| N | spc_w | blspc.exe | NetZero Search Enhancement related |
| N | spc_w | nzspc.exe | NetZero Search Enhancement related |
| ? | SPC610NC_Monitor | Monitor.exe | Related to the Philips SPC610NC webcam. What does it do and is it required? |
| X | SPD Driver | spdpool.exe | Added by the BCKDR-REA BACKDOOR! |
| N | Spdstart | Spdstart.exe | Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel." |
| U | Speaking Clock Deluxe | SpClDlx.exe | Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly |
| X | Special Firewall Service | avguard.exe | Added by the NETSKY.G WORM! Note - do not confuse with AntiVir® antivirus which uses the same filename. This one is located in %Windir% |
| X | SpecialOffers | SpecialOffers*.exe [* = digit] | SpecialOffers adware |
| X | SpecialOffers | SpecialOffers.exe | SpecialOffers adware |
| X | specific | specixic.exe | Added by a variant of the SDBOT WORM! |
| ? | SpeechExec Startup | PSP.SpeechExec.StartupApp.exe | Related to Philips SpeechExec dictation software. What does it do and is it required? |
| N | Speed racer | CTSRReg.exe | Part of the Creative PlayCenter for their range of soundcards - now replaced by Creative MediaSource |
| U | Speed Tec | speedtec.exe | Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled |
