| Status | Autorun name | Command | Description |
| X | Sygate Personal Firewall | sysgut.exe | Added by the SDBOT.WM WORM! |
| X | Sygate Personal Firewall | Sygate.exe | Added by the RBOT-PN WORM! |
| X | Sygate Personal Firewall | Mcafeeupdate.exe | Added by the RBOT.YN WORM! |
| X | Sygate Personal Firewall | Sygate32.exe | Added by the RBOT.ATW WORM! |
| X | Sygate Personal Firewall | MSNSRV32.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | service.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | t1ktik.exe | Added by the RBOT-VP WORM! |
| X | Sygate Personal Firewall | host32.exe | Added by the RBOT.ALD WORM! |
| X | Sygate Personal Firewall | sexy.exe | Added by the RBOT-XY WORM! |
| X | Sygate Personal Firewall | sys.exe | Added by the RBOT-ZC WORM! |
| X | Sygate Personal Firewall | syserror.exe | Added by the RBOT.UC WORM! |
| X | Sygate Personal Firewall | hostserv.exe | Added by the RBOT.BKO WORM! |
| X | Sygate Personal Firewall | msnmsgrs.exe | Added by the RBOT.XN WORM! |
| X | Sygate Personal Firewall | Sygat.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | wins.exe | Added by the RBOT.AOB WORM! |
| X | Sygate Personal Firewall | winxpstat.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | Syga.exe | Added by the RBOT-AQD WORM! |
| X | Sygate Personal Firewall | svchots.exe | Added by the RBOT.ABT WORM! |
| X | Sygate Personal Firewall | win31243.exe | Added by a variant of the IRCBOT TROJAN! |
| X | Sygate Personal Firewall | smc.exe | Added by the RBOT-AZY WORM! Note - this is not the valid (but now discontinued) Sygate Personal Firewall which has the same filename and is normally located in %ProgramFiles%\Sygate\SPF. This one is located in %System% |
| Y | Sygate Personal Firewall | smc.exe | Sygate Personal Firewall - now discontinued |
| X | Sygate Personal Firewall Start | services32.exe | Added by the RBOT-MB WORM! |
| X | Sygate Personal Firewall Start | servic.exe | Added by the RBOT-RY WORM! |
| X | Sygate Personal Firewall Startup | msdev.exe | Added by the RBOT-QY WORM! |
| X | Sygate Personal Port | crss.exe | Added by the RBOT-PX WORM! |
| X | Sygate Personal Port Blocker | volume.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Port Blocker | winupdate.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personals Firewalls | ccsrn.exe | Added by a variant of the RBOT WORM! |
| X | Sygates Personal Firewall | sygs.exe | Added by the RBOT.XB WORM! |
| U | SyGateService | sgserv95.exe | SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs |
| X | Symantec | ccapp.exe | Added by the REATLE WORM! Note - this is not a Symantec file |
| X | Symantec Active-Sync DB | symdbsv.exe | Added by the AUTORUN-YN WORM! |
| X | Symantec Anti Virus | symantec32.exe | Added by a variant of the WOOTBOT WORM! |
| X | Symantec Antivirus | SPY_NET_RAT.exe | Added by a variant of the AGENT-LRO TROJAN! See here |
| X | Symantec Antivirus professional | dfrgfrat.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | autoformat.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | dyndns.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | f0dns.exe | Added by the FORBOT-GT WORM! |
| X | Symantec Antivirus professional | flushdns.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | for.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | regedit.exe | Added by a variant of the FORBOT WORM! Note - this is not the valid Windows registry editor which resides in %Windir% and will not normally figure in Msconfig/Startup! This version resides in %System% |
| X | Symantec Antivirus professional | Symantex.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | windows .exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | Winhp32.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | winudp.exe | Added by a variant of the WOOTBOT WORM! See here |
| X | Symantec Antivirus professional | xplrer.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Autoscan | [random filename] | Added by the RBOT-AJO WORM! |
| Y | Symantec Backup Exec Desktop Agent | DLOClientu.exe | Part of Symantec's Backup Exec backup software |
| X | Symantec Client Security | symclient.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Symantec Configuration Loader | ccApp32.exe | Added by the AGOBOT-EE WORM! |
| Y | Symantec Core LC | symlcsvc.exe | Common process for older versions of Symantec's products including Norton Internet Security, Norton AntiVirus, Norton Ghost and the now discontinued Norton Personal Firewall and Norton SystemWorks suite. The exact purpose is unknown at present. Loads via a registry "Run" key in 98/Me and as a service in XP |
| X | Symantec Debug Client | symdebugs.exe | Added by the IRCBOT-ACM TROJAN! |
| N | Symantec Fax Starter Edition Port | OLFSNT40.EXE | Offers a virtual printer as a fax machine. Can be run via a desktop shortcut |
| Y | Symantec NetBackup Desktop Agent | DLOClientu.exe | Part of Symantec's NetBackup backup software |
| Y | Symantec NetDriver Monitor | SNDMon.exe | Part of Symantec's LiveUpate for older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Leave alone to ensure virus definitions are updated. Also, if SNDMon is disabled on one of the computers on a small office network then other computers disappear from the network for this computer, including shared devices like printers and scanners |
| U | Symantec NetDriver Warning | SNDWarn.exe | Part of Symantec Live Update - displays the warning when you need to update the firewall database |
| U | Symantec PIF AlertEng | PIFSvc.exe | Symantec LiveUpdate Notice Service |
| X | Symantec Secure Server | svrhost.exe | Added by the IRCBOT-UB TROJAN! |
| X | Symantec Security | symantec32.exe | Added by the RANDEX.PR or RANDEX.YR WORMS! |
| X | Symantec Security Addon | nvsvc.exe | Added by a variant of the AGOBOT/GAOBOT WORM! Note - do NOT confuse with the legitimate NVIDIA Driver Helper Service file of the same name as described here |
| X | Symantec Security Routine Addon | navpaw.exe | Added by the AGOBOT-ES BACKDOOR! |
| X | Symantec Security Routine Addon for Microsoft Windows | navpxaw32.exe | Added by the AGOBOT-GJ TROJAN! |
| Y | Symantec Security Technologies | ccApp.exe | Part of older versions of Symantec's security products including Norton 360, Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Effectively the "master" process which calls the different program features and makes sure they are running. Auto-protect and E-mail check will not function without this |
| X | Symantec Service | ccApp.exe | Added by the AKHER.D WORM! Note - this is also not the valid Norton AV file with the same filename |
| X | symanteccsysconf | bsyys.scr | Added by the VACILL-A WORM! |
| X | SymantecFilterCheck | svhost.exe | Added by the BANKER-EEO TROJAN! |
| X | SymantecFilterCheck | gmilogof.exe | Added by the BANKER-EKC TROJAN! |
| X | SymantecFilterCheck | [path to trojan] | Added by the BANKER-EIN TROJAN! |
| X | SymantecFilterCheck | bsyys.scr | Added by the BANLOAD.DZC TROJAN! |
| X | SymAV | SymAV.exe | Added by the NETSKY.U WORM! |
| U | SymKeepAlive | CKA.exe | Part of Symantec's now discontinued Norton SystemWorks security and utility suite. Keeps a dial-up modem connection alive |
| X | Symlcs | [path to file] | Added by the YASPY-A TROJAN! |
| X | Symmetrical Network | symmec.exe | Added by the DELBOT-N WORM! |
| U | SymmTime | GeTTime.exe | SymmTime from Symmetricon - freeware utility that "synchronizes your PC clock to Coordinated Universal Time (UTC), the high precision atomic time standard" |
| U | SymmTime | SymmTime.exe | Older version of SymmTime from Symmetricon - freeware utility that "synchronizes your PC clock to Coordinated Universal Time (UTC), the high precision atomic time standard" |
| U | SymmTime Application | GeTTime.exe | SymmTime from Symmetricon - freeware utility that "synchronizes your PC clock to Coordinated Universal Time (UTC), the high precision atomic time standard" |
| Y | Sympatico Security Manager | Rps.exe | Main program for the Sympatico Security Manager internet security suite for Bell Canada ISP customers - sourced by Radialpoint |
| X | SymRun | N/A | Added by the KANGAROO-A TROJAN! |
| X | SymRun | ccApps.exe | Added by the KAGEN-A TROJAN! |
| N | SymTray - Norton SystemWorks | SymTray.exe | Keeps all System Tray icons for older versions of Symantec's now discontinued Norton SystemWorks utility suite together to reduce clutter. SystemWorks includes Norton Anti-Virus, Norton Utilities, Norton CleanSweep and others - dependent upon the version |
| U | Synaptics Pointing Device Driver | SynTPEnh.exe | Synaptics TouchPad Enhancements - included with drivers for Synaptics based TouchPads, which are common on many laptops. Required to display the System Tray icon and support enhanced features such as Tap Zones, Virtual Scrolling and EdgeMotion. If you don't use these features this can safely be disabled. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll |
| U | Synaptics Pointing Device Driver | SynTPLpr.exe | Synaptics TouchPad driver helper - included with drivers for Synaptics based TouchPads, which are common on many laptops. Works in conjunction with SynTPEnh and is required if you use any of the enhanced features such as Tap Zones, Virtual Scrolling and EdgeMotion |
| Y | SynAsusAcpi | SynAsusAcpi.exe | Part of the Synaptics touchpad driver for the Asus Eee PC range |
| U | Sync Data | Hndsync.exe | Pocket Real Estate - mobile synchronization manager |
| X | Sync Server | drwatsoon.exe | Added by the WATSOON.A TROJAN! |
| U | Sync-It | Syncit.exe | Sync-It - synchronizes the system clock with time servers on the internet |
| U | SyncAgent | syncagent.exe | Ghost Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | Synchronization Agent | mobsynca.exe | Added by the RANDEX-E WORM! |
| U | Synchronization Manager | mobsync.exe | Microsoft Synchronization Manager for 2K/XP - used to update network copies of materials that were edited offline, such as documents, calendars, and e-mail messages. Available via Start → All Programs → Synchronize, this entry appears if you select Setup → "When I log on to my computer" |
| X | Synchronization Manager | rservers.exe | Added by the FORBOT-FM WORM! |
| X | Synchronization Messager | [trojan filename].exe | Added by the THROD.A TROJAN! The filename is a random combination the following: ms, svc, win, 16, 32, 64, mes, prn, reg - "ms16prn.exe", for example - and is located in %System% |
| X | syncman | winsync.exe | Added by the MANCSYN-A TROJAN! |
| X | syncman | wuaucldt.exe | Added by the NAMSYS-A TROJAN! |
| X | SyncMan | SyncMan.exe | Added by the AGENT-BNYL TROJAN! |
| X | SyncManager | msorunner.exe | Added by a variant of the TACTSLAY TROJAN! |
| X | SyncMon | adslcomdos.exe | Added by the CLUNKY-A TROJAN! |
| X | SyncMon | fixcomdos.exe | Added by the CLUNKY-B TROJAN! |
| X | syncpatch | syncpatch.exe | MyClean rogue security software - not recommended, removal instructions here |
| X | SynNglp | MsgrUpd.exe | Added by the BANKER-EZM TROJAN! |
| X | SynNglp | synnglp.exe | Added by the DELF.MP TROJAN! |
