| Status | Autorun name | Command | Description |
| N | SpeedBitVideoAccelerator | VideoAccelerator.exe | "SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups" |
| X | SpeedBoss | [worm filename] | Added by the OPASERV.AD WORM! |
| U | SpeedItUp | SPEEDITUP.EXE | Speed It Up - "all in one Speed Booster designed to significantly increase the speed of your computer and boost your PC available memory". Installs PC-Checkup and Search Defender (which is detected by DrWeb as the STARTPAGE.ORIGIN TROJAN) without permission |
| U | SpeedItUpEX | SpeedItUpEx.exe | "Speed-It-Up Extreme is designed to speed of your computer up to 3 times faster and boost your PC available memory" |
| U | Speedkey | SPEEDKEY.EXE | Additional keyboard shortcuts on MS programmable keyboard |
| U | SpeedMeter | SpeedMeter.exe | Application measuring upload and download speed |
| U | SpeedOptimizer | spo.exe | SpeedOptimizer is designed to optimize and speed-up your Internet data transmission including browsing, streaming, downloading, uploading and e-mail communication |
| U | Speedport W 100 Stick WLAN Manager | Wifiusb.exe | Wireless management utility for the Speedport W 100 Stick WLAN USB stick |
| X | SpeedRunner | SpeedRunner.exe | Identified as a variant of the TrojanDownloader.Matcash malware |
| U | SpeedswitchXP | SpeedswitchXP.exe | SpeedswitchXP is a CPU frequency control for notebooks running Windows XP |
| U | Speedtouch USB Diagnostics | Dragdiag.exe | For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line) |
| U | SpeedUpMyPC | speedupmypc.exe | Older version of SpeedUpMyPC from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" |
| U | SpeedUpMyPC | llauncher.exe | Launcher for the SpeedUpMyPC system optimization tool from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" |
| U | SpeedUpMyPC | SPEEDU~1.EXE | Older version of SpeedUpMyPC from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" |
| X | Spees1 | speedy.scr | Added by the OPASERV.Y WORM! |
| X | Spees2 | Speedy.bat | Added by the OPASERV.AD WORM! |
| X | Spees3 | SPEEDY.PIF | Added by the OPASERV.AD WORM! |
| N | Spellex Anywhere | sa.exe | Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used |
| X | SPHandler | wuauclt23.exe | Added by the SDBOT-DIL WORM! |
| U | Spiceworks | spicetray_silent.exe | System Tray access to Spiceworks - which "combines everything you need to manage IT in one easy-to-use application" |
| Y | SpIDerMail | spiderml.exe | DrWeb antivirus Spider Mail e-mail scanner |
| N | Spinner Plus | spinner.exe | "Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness". Available via Start → Programs |
| X | SPINX | Wscript.exe OXNEY.B.VBS | Added by the YENO.B and YENO.C WORMS! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "OXNEY.B.VBS" file is located in %System% |
| ? | SPIRun | Rundll32 SPIRun.dll, RunDLLEntry | Related to Creative audio products. What does it do and is it required? |
| Y | SpkrCnfg | DSndUp.exe | Utility that only runs once after installing the drivers for Analog Devices SoundMax integrated soundcards. It's exact purpose is unknown at the present time but from the filename it's probably used to configure the default or generic speaker arrangement for the system it's used on |
| X | splwow32 | splwow32.exe | Added by the DLDR-FC TROJAN! |
| X | SPnt | SPnt.exe | Premium rate adult content dialler |
| U | SpokeSysTray | SpokeSysTray.exe | Spoke Software client application. Spoke "uses data in your e-mail and other enterprise information systems to discover the existing relationships of people in your enterprise. It then builds a private, secure relationship network for each user without any additional manual data entry" |
| X | spoo1sv | spoo1sv.exe | Added by the SOULJET TROJAN! |
| X | Spool | [path to trojan] | Added by the RANKY.R TROJAN! |
| X | Spool | wys.exe | WhileUSurf adware |
| X | Spool | static.exe | Added by an unidentified WORM or TROJAN! Located in the Root folder (C:\), (D:\), etc |
| X | Spool | spoolsv.exe /waitservice | Added by the HORST.Q TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in either %Windir%, %Windir%\System, %Temp%, %AppData%, %AppData%\Microsoft or %System%\drivers |
| X | SPOOL Configuration | spoolsvc.exe | Added by the SDBOT-KD WORM! |
| X | Spool Driver Service | wmsncs.exe | Added by the BBJC.A TROJAN! |
| X | Spool Loader | spool.exe | Added by a variant of the RBOT WORM! |
| X | Spool LoadKIt | spoolv.exe | Added by a variant of the RBOT WORM! |
| X | Spool lptt01 | spool.exe | RapidBlaster variant (in a "spool" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| X | Spool Manager | spoolsrv.exe | Added by the BANKER-FR TROJAN! |
| X | Spool ml097e | spool.exe | RapidBlaster variant (in a "spool" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| X | Spool32 | pool32.exe | Added by the ASSASIN-F TROJAN! |
| X | spoolax | [path to trojan] | Added by the PERDA-D TROJAN! |
| X | Spooler de Impress | services.exe | Added by the AGENT-NEX TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %User% |
| X | Spooler Host | smhost.exe | Added by the IRCBOT.BSQ BACKDOOR! |
| X | Spooler Service | Spoolsrv.exe | Added by the JOINER.C1 TROJAN! |
| X | Spooler Subsystem | spoolsub.exe | Added by the SDBOT-ABG WORM! |
| X | Spooler SubSystem App | spoolsvc.exe | Added by the POEBOT-J WORM! |
| X | Spooler SubSystem App | spooIsv.exe | Added by the LINKBOT.M WORM! |
| X | Spooler SubSystem App | spoolv.exe | Added by the SDBOT-BN WORM! |
| X | Spooler SubSystem Application | localsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | netsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | spoolsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | svcadmin.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | svcman.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | svcrun.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | tcpsvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler SubSystem Application | websvc.exe | Added by the DLOADER-NY TROJAN! |
| X | Spooler Subsystem Application | smss.exe | Added by the IRCBOT-ZO TROJAN! Note - the legitimate smss.exe process should not normally figure in Msconfig/Startup! |
| X | Spooler Subsytem App | spoolsvc.exe | Added by the SDBOT-MM WORM! |
| X | SpoolerSubSystemProcess | SpooI32.exe | Added by the EHKS.21 keylogger! Note - the "I" between "o" and "3" is a capital "i" not a lower case "L" |
| X | spoolms | spoolms.exe | Added by the LEGMIR-ARO TROJAN! |
| X | Spools Service Controller | spools.exe | Added by the KASSBOT-C WORM! |
| X | spoolserv | spoolserv.exe | Added by the SDBOT-PN WORM! |
| X | SpoolService | spolsv.exe | Added by the AGOBOT-CS WORM! |
| X | spoolsrv.exe | spoolsrv.exe | Added by an unidentified WORM or TROJAN! Located in %System% |
| X | Spoolsv | spoolsv.exe | Added by the ANTINNY.F WORM! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Program Files%\Lotus |
| X | Spoolsv | Spoolsv.exe | Added by the CIADOOR.121 VIRUS! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir% |
| X | spoolsv | scvhosts.exe | Added by the SMALL-AW TROJAN! |
| X | spoolsv | svchost.exe | Added by the DLOADER-FI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\HELP |
| X | spoolsv | spoclsv.exe | Added by the FUJACKS-M WORM! |
| X | spoolsv | spoolsv.exe | Added by the ZAPCHAS-EE TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%\Temp\spoolsv |
| X | spoolsv | spoolvs.exe | Added by the AGENT-HNV TROJAN! |
| X | spoolsv | spoolsv.exe | Added by the ANTINNY-BH WORM! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %ProgramFiles%\Messenger |
| X | spoolsv | spoolsv.exe | Added by the OURXIN.C TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in a "spoolsv" subfolder |
| X | spoolsv manager | SpoolMgr.exe | Added by the ASSIRAL WORM! |
| X | spoolsv service | spoolsv32.exe | Added by the RBOT-AHP WORM! |
| X | spoolsv.exe | [random filename] | Added by the RBOT-JB WORM! |
| X | SPOOLSV32 | SPOOLSV32.EXE | Added by the CWS-I or HAZIF-B TROJANS! |
| X | SPOOLSV32.exe | SPOOLSV32.exe | Added by the STARTPAGE.O TROJAN! |
| X | spoolsvc | spoolsvc.exe | Added by the DROPPER-AT TROJAN! |
| X | spoolsvr | SPOOLSVR.EXE | Added by the RAYROB.A TROJAN! |
| X | spoolsvr32 | csmss.exe | Added by the AGENT-AU TROJAN! |
| X | spoolsvr32 | csmss32.exe | Added by the AGENT-AU TROJAN! |
| X | spoolsvs | wintre.exe | Added by the SDBOT.EGQ WORM! |
| X | spoolsvs | wincfy.exe | Added by a variant of the IRCBOT BACKDOOR! |
| X | spoolsvs.exe | spoolsvs.exe | Added by the DLOADER-RK TROJAN! |
| X | SPOOLSVU | SPOOLSVU.EXE | Added by the STARTPAGE.K hijacker |
| X | spoolsvv | spoolsvv.exe | Searchcentrix hijacker |
| X | Spoolvs | spoolvs.exe | Added by the SDBOT.AUS WORM! |
| X | Spore | MsNews.vbs | Added by the SORPE.A WORM! |
| X | Spore.b | Scmhlpr.vbs | Added by the SORPE.B WORM! |
| ? | SPP | run.exe | ?? |
| X | spp | regedit -s spp.reg | IE search hijacker - changes the default search to h**p://www.hotsearchbox.com/ie/. Note that the Windows registry editor (regedit.exe) is a legitimate Microsoft file located in %Windir% and shouldn't be deleted. The file "spp.reg" is located in the root folder (ie, C:\) |
| ? | sppbridge | sppbridge.exe | Associated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example. Is it required or can it be started manually? |
| U | Sprint DSL virtual assistant | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". Sprint DSL Virtual Assistant is required to run with the Help and Support program. If you uncheck Sprint DSL Airtual Assistant and then run Help and Support it will add another Sprint DSL Virtual Assistant in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| U | Sprint SmartView | SprintSV.exe | Sprint SmartView wireless connectivity manager which supports cards from multiple manufacturers including Intel, Netgear, D-Link and others |
| ? | SprintPort | SprintPortA.exe | Novatel wireless modem related. What does it do and is it required? |
| U | SpriteService | SpriteService.exe | Sprite Backup is a backup application for Windows Mobile Pocket PC or Smartphone |
| X | Sproc32 | sproc32.exe | Added by the RIGHTU-A TROJAN! |
| X | sprof | sprof.exe | Added by the RENOS.G TROJAN! |
