| Status | Autorun name | Command | Description |
| X | Systryt | [path to worm] | Added by the AUTEX WORM! |
| X | SystUphes | algesetp.exe | Added by the QQPASS-AM TROJAN! |
| U | Systweak Ad and Popup Blocker | adblock.exe | Ad and popup blocker part of Advanced System Optimizer from Systweak |
| U | Systweak Memory Optimizer | memtuneup.exe | Part of SysTweak Advanced System Optimizer |
| X | systwtray | twitty**.exe [** = random digits] | Added by the KOOBFACE.C WORM! |
| X | sysu | sysu.exe | Dynamic Desktop Media adware - see here |
| X | sysug32.exe | sysug32.exe | Added by an unidentified TROJAN or WORM! |
| X | SysUpd | Sysupd.exe | VirtuMonde adware |
| X | sysupdate | cmman32.exe | Added by a variant of the SDBOT WORM! |
| X | SysUtils | smss.exe | Added by the AUTORUN-AWW WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile% |
| X | Sysvupex | Sysvupex.exe | Added by the MEDIAS TROJAN! |
| X | sysvx | sysvx_.exe | Added by the LOOSKY-BX TROJAN! |
| U | SysW8 | csta.exe | Clean Space internet evidence eliminator |
| U | SYSWB6 | SYSWB6.exe | Part of We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content. Works in conjunction with Winkb6 and both files are needed to run We-Blocker |
| X | SysWin | SysWin.exe | Added by the IRCCONTACT TROJAN! |
| X | syswin | v6.exe | Added by the AGENT-ECM TROJAN! |
| X | syswin.txt | [3 random letters].exe | Added by a variant of the SPYBOT WORM! See here |
| X | syswin32 | syswin32.exe | Added by a variant of the SPYBOT WORM! |
| X | Syswindow | Syswindow.exe | Added by the COW TROJAN! |
| X | SysWy | rundll32.exe | Added by the LINEAGE-JH TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP) |
| X | sysX3 | sys22.exe | Added by the RANTS.C WORM! |
| X | sysygm32 | syscxd32.exe | Added by the IRCBOT-PC TROJAN! |
| X | sysygm64 | winrxd64.exe | Added by the IRCBOT-RK TROJAN! |
| X | SyZ | f1.exe | Added by the MSNDIABLO.A WORM! |
| X | Syzmy3 | exp1orer.exe | Added by the LINEAG-AIO TROJAN! Note the number "1" in the filename |
| X | SyztMy | expiorer.exe | Added by the LINEAG-AIN TROJAN! |
| U | SZMsgSvc.exe | SZMsgSvc.exe | StopZilla! - pop-up killer |
