| Status | Autorun name | Command | Description |
| X | Security 2009 | Security2009.exe | Security 2009 rogue security suite - not recommended, removal instructions here |
| X | Security Accounts Manager SM | samsm.exe | Added by the WOOTBOT.BC WORM! |
| X | Security Agent | securag.exe | Added by the BANCBAN-F TROJAN! |
| X | Security Agent Manager | mssams.exe | Added by the RBOT-SV WORM! |
| X | Security Antivirus | SA[random characters].exe | Security Antivirus rogue security software - not recommended, removal instructions here |
| X | Security Antivirus Xp 1 | inetfor.exe | Added by the SDBOT.BAV WORM! |
| X | Security Center | AppControl.exe | Added by the SDBOT.CFT WORM! |
| X | Security Center | scvhost.exe | Added by the RBOT-TG WORM! |
| X | Security Center Distribution | securesec.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Security Central | Security Central.exe | Security Central rogue security software - not recommended, removal instructions here |
| X | Security essentials 2010 | SE2010.exe | Security Essentials 2010 rogue security software - not recommended, removal instructions here |
| X | Security Guard | SG[random characters].exe | Security Guard rogue security software - not recommended, removal instructions here |
| X | Security iGuard | Security iGuard.exe | Security iGuard rogue spyware remover - not recommended, removal instructions here |
| X | Security Inspector 2010 | Security_Inspector_2010.exe | Security Inspector 2010 rogue security software - not recommended, removal instructions here |
| U | Security Manager | SecurityManager.exe | A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private |
| X | Security Manager | securitymanager.exe | AntiVirus System 2011 rogue security software - not recommended, removal instructions here. Note - this is not the valid Comcast security program typically located in %ProgramFiles%\Comcast\Security Manager\app. This one is located in %AppData%\AntiVirus System 2011 |
| Y | Security Manager | Rps.exe | Main program for the Bell Security Manager internet security suite for Bell ISP customers - sourced by Radialpoint |
| X | Security Master AV | SM[random characters].exe | Security Master AV rogue security software - not recommended, removal instructions here |
| X | Security Mechanic | lsascs.exe | Security Mechanic rogue security software - not recommended, removal instructions here |
| X | Security Monitor | securemon.exe | Added by the SLENFBOT.ABH WORM! |
| X | Security Patch | scmss.exe | Added by the RBOT-ZW WORM! |
| X | Security Patch | WinUpdate32.exe | Added by the SDBOT-BM WORM! |
| X | Security Patches | msnkn.exe | Added by the RBOT.WW WORM! |
| X | Security Patches | WinLab32.exe | Added by the SDBOT-KB WORM! |
| X | Security Patches | wuamgrdn.exe | Added by the RBOT-JI WORM! |
| X | Security Server DB | secserver.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | security service | syss.exe | Added by an unidentified WORM or TROJAN! |
| X | Security Service | secsvc.exe | Added by the RBOT-GGF WORM! |
| X | Security Service DB | secservice.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Security Service Process | svhost.exe | Added by the AGOBOT-LC WORM! |
| X | Security Solution 2011 | Security Solution.exe | Security Solution 2011 rogue security software - not recommended, removal instructions here |
| X | Security Solution 2011 Security | securitymanager.exe | Security Solution 2011 rogue security software - not recommended, removal instructions here |
| X | Security System | securesys.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Security Update Service | wmiprvce.exe | Added by the AGOBOT.ZW WORM! |
| X | Security Update Service Process | svrhost23.exe | Added by the AGOBOT-GN WORM! |
| X | SecurityBoan | SecurityBoan.exe | SecurityBoan rogue security software - not recommended, removal instructions here |
| X | SecurityCenter | securitycenter.exe | Desktop Security 2010 and Antivirus Studio 2010 rogue security software - not recommended, removal instructions here and here |
| X | SecurityFighter | SecurityFighter.exe | SecurityFighter rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SecurityScanner | ss2008.exe | Security Scanner 2008 rogue security software - not recommended, removal instructions here |
| X | SecuritySoldier | SecuritySoldier.exe | SecuritySoldier rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | securw | Nctrup.exe | Added by the NOPIR.A WORM! |
| Y | SECWIZ98 | SECWIZ98.EXE | Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here |
| X | seekmo | seekmo.exe | Seekmo Search Assistant adware |
| X | SeekmoOE | OEAddOn.exe | Seekmo Search Assistant adware |
| X | SeekmoSA | SeekmoSA.exe | Seekmo Search Assistant adware |
| X | SeekmoToolbar | ${HOOKOE_FILE} | Seekmo Search Assistant adware |
| X | seeve | seeve.exe | Medload adware |
| X | Select server | slcsvr.exe | Added by the DLOADER-WD TROJAN! |
| X | SelectRebates | SelectRebates.exe | SelectRebates adware |
| X | SelfdelNT | exe.exe | Fake Microsoft Security Essentials Alert - removal instructions here |
| ? | SelfHostUtil | slefhost.exe | ?? |
| X | seli | [path to file] | Added by the LOWZONE-AS TROJAN! |
| X | SemanticInsight | SemanticInsight.exe | RXToolbar adware. Software that displays pop-up/pop-under advertisements when the primary user interface is not visible |
| U | SeMS | SeMS.exe | PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone |
| X | Sen | tlii.exe | Detected by Kaspersky as PurityScan.ah |
| U | SendMail | SendMail.exe | Part of the MySuperSPy surveillance software. Uninstall this software unless you put it there yourself. Located in %ProgramFiles%\Myss |
| U | SENS Keyboard V4 Launcher | SENSKBD.EXE | Hot-key manager for some Samsung notebooks - required if you use the keys |
| U | SENS Keyboard V6 Launcher | SENSKBD.EXE | Hot-key manager for some Samsung notebooks - required if you use the keys |
| U | Sensiva | Sensiva.exe | Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly |
| Y | Sensor | sensor.exe | Part of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Optionally scans the system boot area for programs trying to automatically execute before Windows loads and keeps a watch on some system files which are commonly patched (or replaced) by malware. Feature not supported on Windows 7/Vista systems. Also included by vendors who use the Quick Heal engine such as Omniquad and iQon |
| U | sentinelmon | sentinelmon.exe | PCSentinel's Smoking Gun! surveillance software. Uninstall this software unless you put it there yourself |
| X | SENTRY | SENTRY.exe | From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it |
| X | Sepate Security Firewall | sepate.exe | Added by the RBOT.BLC BACKDOOR! |
| N | SEPCSuite | SEPCSuite.exe | System Tray access to Sony Ericsson PC Suite which "connects your phone to your computer and expands the capabilities of your phone". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone |
| X | septpop06apsept | septpop06apsept.exe | MediaMotor.Popupwithcast adware |
| X | Serials | serials.exe | Any one of a variety of worms and trojans |
| X | Serices Hostin | servicez.exe | Added by the SLENFBOT.MF WORM! |
| X | SErmYcVkqxT | SErmYcVkqxT.exe | Added by the CEEINJEC-K TROJAN! |
| X | SernellApp.pcx | csrss.exe | Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder |
| X | serpe | formatsys.exe | Added by the SERFLOG.A WORM! |
| X | serpe | msmbw.exe | Added by the SERFLOG.A WORM! |
| X | serpe | serbw.exe | Added by the SERFLOG.A WORM! |
| Y | serrdctl.exe | serrdctl.exe | "Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems |
| X | serrv | serrv.exe | Added by the WAREZOV.DC WORM! |
| X | Serv | SYS.VBS | Added by the AUTORUN-BNQ WORM! |
| X | SERV PacK2 | nerx.exe | Added by the SDBOT-ACP WORM! |
| N | Serv-U | serv-u32.exe | FTP server |
| X | Serv-U | wssdsu.exe | Added by the MANIFEST TROJAN! |
| U | Serv-U-Tray | Serv-U-Tray.exe | System Tray access for the Serv-U FTP server which allows the user to (amongst others) start the Management Console, stop the server and display notifications |
| U | Serv-U® File Server | Serv-U-Tray.exe | System Tray access for the Serv-U FTP server which allows the user to (amongst others) start the Management Console, stop the server and display notifications |
| X | server | server.exe | Added by the DELTAD.A WORM! |
| X | server | system.exe | Added by the METHS-A TROJAN! |
| X | server | server.exe | Added by the SINGU-Q TROJAN! |
| Y | Server Application for MFP Server | ServoApp.exe | Multi Function Printer (MFP) server agent for products such as Belkin's Wireless G All-in-One Print Server and ZyXEL's NPS-520 which allow multiple computers to use networked all-in-one printers. Required for the MFP Server Agent (MFPAgent.exe) to run properly - whether it's set to start manually or automatically |
| X | Server Backbone | server05.exe | Added by the RBOT-ZM WORM! |
| X | Server Daemon Host Manager | sdhost.exe | Added by the RBOT-GWC WORM! |
| X | Server Registry | regsrv32.exe | Added by the VB-EJD TROJAN! |
| X | Server Registry | regscr32.exe | Added by the BIFROSE-ZB TROJAN! |
| X | Server Runtime Error | unsec.exe | Added by the SDBOT-DFA WORM! |
| X | Server Runtime Process | wbemstest.exe | Added by the SDBOT-DDB WORM! |
| X | SERVER.EXE | SERVER.EXE | Added by the BUSHTRO122 or SMOKODOOR TROJANS! |
| X | serverex | Server.txt.vbs | Added by the DELTAD.A WORM! |
| X | Serverx | Serverx.exe | Added by the MADANGEL VIRUS! |
| X | Service | service.exe | Added by the ALADINZ.H TROJAN! |
| X | Service | [trojan filename] | Added by the KAITEX.E TROJAN! |
| X | Service | services.exe -serv | Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Service | SYSNT.exe | Added by the CHA TROJAN! |
| X | Service | Service.pif | Added by the ASSIRAL-C WORM! |
| X | service | wN2S.exe | Added by a variant of the RBOT WORM! |
| U | service | msview32.exe | BestIdol adware |
