| Status | Autorun name | Command | Description |
| X | stealth.wm.exe | stealth.wm.exe | Added by the THEALS.A WORM! |
| X | stealth.worm.exe | stealth.worm.exe | Added by the THEALS.A WORM! |
| N | Steam | steam.exe | Valve Corporation's STEAM broadband game client. Steam is Valve's new way of getting games into your hands ASAP. Games like Half-Life, Counter-Strike, and Counter-Strike: Condition Zero are all being made available through Steam. Steam games are automatically kept up-to-date with the latest content and revisions. Steam also includes an instant-message client which even works while you're in-game |
| X | steam | steam.exe | Added by the RBOT-AJT WORM! Note - the file steam.exe will be found in %System% and is not associated with Valve Software's game client |
| X | Steam | PACsteam.exe | Added by the AGENT-SF MALWARE! |
| X | Steam.exe | [path to file] | Added by the DRACMETES.A password stealer! |
| X | SteFanie | SteFanie.vbs | Added by the STEFAN WORM! Note - make sure you check the hyperlink as this one copies it's self to numerous dirves and folders |
| ? | stgclean | w32main2.exe | Related to IBM Standard Software Installer. What does it do and is it required? |
| N | Stickies | Stickies.exe | Stickies - "lets you put yellow sticky notes on your Windows desktop, much like the popular Mac OS application. It is very simple, very customizable, and completely free!". Available via Start → Programs |
| U | Stickies | Sticky Notes.exe | Stickies virtual post-it widget for the DesktopX desktop utility from Stardock Corporation. Once started, Sticky Notes.exe loads a file called "DXWidget.exe" and exits |
| N | Sticky Notes | stikynot.exe | Microsoft Sticky Notes - virtual sticky notes tool from Windows Vista. This implementation of the popular yellow "Post-It" tool is part of the Tablet PC features and allows you to enter either handwriting (via a pen or mouse) or record a voice note. AVailable via Start → All Programs |
| U | Sticky Pad | StickyPad.exe | Sticky Pad from Green Eclipse. Place sticky notes on your desktop |
| Y | Sticky Password | stpass.exe | Sticky Password from Lamantine Software - "stores and protects all your personal data (e.g. passwords, user names, contacts, phone numbers, etc.). Sticky Password links passwords and accounts to applications and websites for which they are used. All information is stored in encrypted form in the Database, access to which is protected by a Master Password" |
| Y | Sticky Password Manager | stpass.exe | Sticky Password from Lamantine Software - "stores and protects all your personal data (e.g. passwords, user names, contacts, phone numbers, etc.). Sticky Password links passwords and accounts to applications and websites for which they are used. All information is stored in encrypted form in the Database, access to which is protected by a Master Password" |
| N | StickyNote | StickyNote.exe | Utility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start -> Programs |
| Y | StickyPassword | stpass.exe | Sticky Password from Lamantine Software - "stores and protects all your personal data (e.g. passwords, user names, contacts, phone numbers, etc.). Sticky Password links passwords and accounts to applications and websites for which they are used. All information is stored in encrypted form in the Database, access to which is protected by a Master Password" |
| U | StillImageMonitor | Stimon.exe | Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners and some of their SCSI scanners |
| X | stisrv | stisrv.exe | Added by the RBOT.BQF WORM! |
| X | stlbdist | rundll32exe stlbdist.DLL, DllRunMain | Hijacker pointing to www.searchandclick.com |
| X | stlbupdt | rundll32.exe stlbupdt.DLL,DllRunMain | BrowserAid adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "stlbupdt.dll" file is found in %System% |
| N | STManager | drst.exe | Dr. SpeedTouch is some sort of diagnostics software which sends out information to a server which then relays the information back to the program to test the network to see if the SpeedTouch ADSL modem connection is working properly. Not required if connected via Ethernet (and probably USB). Can cause a slow down in Win2K - see here |
| X | stmha | wkfxi.js | Added by the SPETH WORM! |
| X | stonedrv | stonedrv.exe | Added by the COSIMA-K TROJAN! |
| X | StopingSpy | StopingSpy.exe | StopingSpy rogue security software - not recommended, removal instructions here |
| U | StopSignPopupBlocker | sspopupblockerctrl.exe | Pop-up blocker function of eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | StopSignSsFwMon | Rundll32.exe [path] ssfwmon.dll,VerifyStatus | eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | StopSignSsSsMon | Rundll32.exe [path] ssssmon.dll,VerifyStatus | eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | StopSignSsTsMon | Rundll32.exe [path] sstsmon.dll,VerifyStatus | eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | StopSignStatus | Rundll32.exe [path] stopsinfo.dll,VerifyStatus | Installer for eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | STOPzilla | Stopzilla.exe | StopZilla! - pop-up killer |
| U | STOPzilla Service | SZNTSVC.EXE | StopZilla! - pop-up killer |
| U | StorageGuard | sgtray.exe | StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups |
| U | StorageManager | StorageManager.exe | Storage Manager software for the Belkin F5D8235 & F5D8635 N+ Wireless (Modem) Routers - which include a single USB port for attaching a storage device (flash drive or external hard drive). This provides network-attached storage capabilities without having to purchase an expensive NAS |
| X | StorageProtector | SysRep.exe | StorageProtector rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| U | StormCodec_Helper | StormSet.exe | Storm Codec is a codec pack for Windows |
| Y | stpass | stpass.exe | Sticky Password (from Lamantine Software), Kaspersky Password Manager and My Password Manager in an earlier version of Kaspersky PURE (both by Kaspersky Lab and based upon Sticky Password). Password management utilities which automate the process of entering passwords and other data into websites and saves the user from going to the trouble of creating and remembering multiple passwords |
| ? | STPMGR | STPMGR.EXE | Part of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs |
| X | stratas | xmconfig.exe | Added by the RBOT-AHR WORM! |
| X | stratas | lockx.exe | Added by the SDBOT-ADD WORM! |
| X | Stratas | ggfig.exe | Added by the OPANKI.W WORM! |
| X | StreamAppliance | wuauclt14.exe | Added by the RBOT-GMB WORM! |
| X | StreamAppliance | wuauclt16.exe | Added by the RBOT-GME WORM! |
| N | Streamload Downloader | SlDB.exe | Downloader for MediaMax (was Streamload) - "gives you a private and secure place to upload, store, access, and share your personal videos, photos, movies, music, and files" |
| N | Streamload Uploader | StreamMgr.exe | Uploader for MediaMax (was Streamload) - "gives you a private and secure place to upload, store, access, and share your personal videos, photos, movies, music, and files" |
| X | Streams Drivers | [trojan filename] | Added by the RESTARTER.E TROJAN! |
| U | StreamZap Remote | zremote.exe | StreamZap PC Remote - control Windows Media Player, iTunes, RealPlayer, Winamp, PowerPoint, MusicMatch Jukebox, and many other multimedia applications |
| U | StrgSync.exe | StrgSync.exe | SimpleTech Inc's StorageSync backup software - backs up an entire PC, or selected files and folders |
| X | strkjhk | sdflkj3.exe | Added by an unidentified WORM or TROJAN - see here |
| X | strmsnmgrs | msnxmsgrsc.exe | Added by the SDBOT.JDR WORM! |
| X | strmsnmsgr | msnmsgrs.exe | Added by the RBOT-ACQ WORM! |
| X | strmsnmsgrs | msnmsgrsc.exe | Added by a variant of the RBOT WORM! |
| X | strmsnnms | msnmegrs.exe | Added by the SDBOT-YU TROJAN! |
| X | strmsnnrs | msnmcgrs.exe | Added by the RBOT-ACT TROJAN! |
| X | strmsoums | msnmegrse.exe | Added by the SDBOT-ZK TROJAN! |
| X | Strng32 | strngbox.exe | Added by the STRANO WORM! |
| U | StrokeIt | strokeit.exe | StrokeIt is an "advanced mouse gesture recognition engine and command processor" |
| X | strpmon | strpmon.exe | Part of BugsDestroyer, ProtectingTool and other members of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| X | strtas | lock1.exe | Added by the SDBOT-ADQ WORM! |
| X | strtas | lockx.exe | Added by the SDBOT-AEB WORM! |
| X | strtas | l074.exe | Added by the AGENT-II TROJAN! |
| X | strtas | loc1.exe | Added by the RBOT-AZU TROJAN! |
| X | strtas | lo71.exe | Added by the SDBOT-AGT WORM! |
| X | strto | strto.exe | Added by the KILLPROC-F TROJAN! |
| X | strto | [path to trojan] | Added by the KILLAV-AP TROJAN! |
| Y | strtupap | strtupap.exe | Launcher for the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Replaces the individual startup entries from older versions - such as Email Protection (EMLPROUI.EXE), Update Scheduler (UPSCHD.EXE), On-Line Protection (CATEYE.EXE) and Messenger (SCANMSG.EXE) |
| X | Sts | iwnujdss2.exe | Added by the SDBOT-YI WORM! |
| X | Stubbish | Stubbish.exe | Added by the STUBBOT-A WORM! |
| X | StubPath | Sservice.exe | Added by the PRORAT TROJAN! |
| X | stup | 138762763.exe | Added by the FIRESPY-A TROJAN! It will attempt to register the dropped component as a Firefox plugin and begin monitoring the user's browsing habits, stealing information including monitoring and logging information from Web forms |
| X | stup | [path to trojan] | Added by the AGENT-CIL TROJAN! |
| X | stup.exe | stup.exe | Added by the QQROB.LE TROJAN! |
| X | stup1db0t | _win.exe | Added by a variant of the IRCBOT BACKDOOR! |
| N | StupAssist | StupAssist.exe | Associated with Nikon digital cameras |
| X | STV | winscrne.exe | Added by a variant of the SDBOT WORM! |
| U | StxMenuMgr | StxMenuMgr.exe | Status manager for the Seagate range of external hard drives. It monitors your PC to see if you have connected any supported drives to launch the backup utility |
| X | stxrmsgms | mstats.exe | Added by the IRCBOT-AE TROJAN! |
| U | StxTrayMenu | StxMenuMgr.exe | Status manager for the Seagate range of external hard drives. It monitors your PC to see if you have connected any supported drives to launch the backup utility |
| U | StyleXP | StyleXP.exe | StyleXP allows you customize the way WinXP looks. If disabled via msconfig it re-instates itself at reboot, therefore uninstall it if you don't want it |
| X | suapafjj | kgejbaytssd.exe | Added by the AGENT-MXH TROJAN! |
| X | SubAH | SubAH.exe | Added by the SUBAH TROJAN! |
| U | Subliminal Power | Subliminal.exe | Subliminal Power - displays subliminal messages of your choice on your computer screen |
| N | Subtract the Ads | AdSub.exe | Removes adverts from web pages. Although useful - not required |
| X | suck | l0ad.exe | PurityScan adware |
| X | suicide | tempfile2.bat | Personal Protector rogue security software - not recommended, removal instructions here |
| U | Suitcase Startup | Suitcase.exe | Suitcase - system font manager start up utility. Used for dynamic managment of fonts on your system |
| X | Suite | SuiteOffices.exe | Added by the LAZAR TROJAN! |
| X | SULFNBJ.EXE | SULFNBJ.EXE | Added by the PE_MAGISTR.DAM VIRUS! |
| X | Sun Java Console for Windows NT & XP | jconsole.exe | Added by the VANEBOT-C WORM! |
| X | Sun Java Updater | stacsv.exe | Added by the BUZUS.DBFM TROJAN! |
| X | Sun Java Updater v5 | javajre.exe | Added by the AUTORUN-XI WORM! |
| X | Sun Java Updater v7.11 | jucshed.exe | Added by the AUTORUN-ABH WORM! |
| X | Sun Java Updater v7.4 | javawx.exe | Added by the ACKANTTA.B WORM! |
| U | sunasDTServ | sunasDtServ.exe | CounterSpy by GFI Software (formerly Sunbelt Software) - adware/spyware protection |
| U | sunasServ | sunasServ.exe | CounterSpy by GFI Software (formerly Sunbelt Software) - adware/spyware protection |
| X | Sunjava | javasmart.exe | Added by the AGENT.AHV TROJAN! |
| X | SunJava Updater v7 | javale.exe | Added by the ACKANTTA.B WORM! |
| X | SunJavaMdb | svchosf.exe | Added by the BANBRA.GQU TROJAN! The file is typically located in %UserProfile%\InstallShield Installation Information\{A5BA14E0-7384-5991B8648CBE70A4} |
| X | SunJavaSched | ccEvtMngr.exe | Added by the SDBOT-YP WORM! |
| X | SunJavaSched Updater | avamx.exe | Added by the RBOT-ABJ WORM! |
| X | SunJavaUpdate | smvss.exe | Added by the DEDLER-G TROJAN! |
