| Status | Autorun name | Command | Description |
| X | ShieldSafeness | ShieldSafeness.exe | ShieldSafeness rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | Shine | Shine.exe | Added by the HAPPYLOW (or NISHE-A) VIRUS! |
| ? | SHINITV | shinitv.exe | ?? |
| X | Shmgrate.exe | ibot4.exe | Added by the GASTER TROJAN! |
| N | ShockmachineReminder | SmReminder.exe | "Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline". Could be a registration reminder for the trial version |
| X | Shockwave | csrss.exe | Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| N | Shockwave Init | SWINIT.EXE | Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs |
| X | Shockwave Support | FlashPlayer.exe | Added by the DELF-DRA WORM! |
| X | shoket | svchs0t.exe | Added by the WOWPWS-E TROJAN! |
| N | ShopSafe | ShopSafe.exe | Created by Orbiscom for MNBA (now Bank of America) - ShopSafe creates a temporary card number each time you make an online purchase |
| N | ShortKeys 99 | SHORTKEY.EXE | ShortKeys from Insight Software Solutions - allows you to program keys with text strings |
| U | ShortKeys Lite | shklite.exe | ShortKeys Lite from Insight Software Solutions, Inc. A macro utility to automate a task that you perform repeatedly or on a regular basis |
| Y | sHotKey | sHotKey.exe | Special function key manager for Chicony keyboards - see here |
| N | Shotty | Shotty.exe | Shotty by Thomas Baumann - "is an application to take pictures from your computers screen (called screenshots) or from one application only. Unlike other applications that does this Shotty provides various other features that are useful to modify the taken screenshot" |
| N | Shotty - Tiny but impressive screenshot utility | Shotty.exe | Shotty by Thomas Baumann - "is an application to take pictures from your computers screen (called screenshots) or from one application only. Unlike other applications that does this Shotty provides various other features that are useful to modify the taken screenshot" |
| X | Showbehind | SHOWBEHIND.EXE | Advertisement display which can be stopped here |
| X | ShowFF | ShowFF.exe | FFToolBar adware toolbar |
| ? | ShowIcon_Justrams_USB Product Driver v2.12r012 | shwicon.exe | Related to Just Rams USB product driver. Is it required? |
| U | ShowIcon_PNY_PNY Attaché | shwicon.exe | PNY Attaché USB flash memory stick System Tray icon - shows when the device is plugged in |
| ? | ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051 | shwicon.exe | Card reader for memory cards from digital cameras. Is it required? |
| U | ShowLOMControl | [strange symbol] | Note that there is a strange symbol in the command field and in logs it's shown as "O4 - HKLM\..\Run: [ShowLOMControl] [strange symbol]". Additional registry information for the entry is "Reg_DWORD 0x00000001 (1)". It means Show "LAN on Motherboard" Control. On systems where you can install an external LAN interface, it will warn you that you already have a built-in LAN interface. Appears to be a feature on certain Dell systems |
| X | Showme | Ruden.vbs | Added by the HANDLE-A VIRUS! |
| U | ShowWnd | ShowWnd.exe | Found on Gateway computers (and maybe others) - see here. "Showwnd is included with the Chicony keyboard software and is used by the software to stop the keyboard driver's taskbar entry from reappearing. It is not necessary to remove the keyboard software, however if you wish it can be removed through Add or Remove Programs" |
| U | SHPC32 | SHPC32.exe | Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled |
| U | SHS | SHS.exe | "Rogers Self Help Software is a free suite of tools and utilities for your computer that keeps your system running properly, and makes your Hi-Speed Internet experience smooth and trouble-free" |
| Y | ShStatEXE | SHSTAT.EXE | Part of McAfee's VirusScan Enterprise corporate anti-virus and anti-spyware security tool |
| U | Shutdownaware | shutdownaware.exe | Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system |
| U | ShutDownPro | ShutDownPro.exe | ShutDownPro - shutdown, reboot, logoff your System with one mouse click |
| X | ShutDownWindows | Rundll32.exe User,ExitWindows | Added by the VB-HE TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | ShutdownWithoutLjiasvt.exe | [path to trojan] | Added by the BIFROSE.F BACKDOOR! |
| X | shv | antit.exe | Added by the AGENT-JKU TROJAN! |
| N | Si Meter | SIMETER.EXE | Si Meter - keep track of things like CPU activity, network activity and speed, hard-drive activity, hard-drive space, system memory, running processes, or just date and time |
| X | si91e44b | rundll32.exe si91e44b.dll, EnableRunDLL32 | LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "si91e44b.dll" file is found in %System% |
| U | SIA2006 | SIA2006.exe | Part of Steganos Internet Anonym privacy software |
| U | SIAPRO6 | sia.exe | Steganos Internet Anonym privacy software |
| X | sibawerix | tomup.exe | Added by the SDBOT.AVB WORM! |
| X | SichererAntivirus | pgs.exe | SichererAntivirus, German rogue security software - not recommended. A member of the AVSystemCare family |
| X | SichererSchutz | pgs.exe | SichererSchutz, German rogue security software - not recommended. A member of the AVSystemCare family |
| X | SicherheitsTool | SysRep.exe | SicherheitsTool, Dutch rogue system error and cleaning utility - not recommended. A member of the ErrClean family |
| X | Sicom | Sicom.exe | Added by the NETLIP WORM! |
| U | SideACT! | SideACT.exe | To-Do list add-on for the Sage ACT! contact manager |
| U | Sidebar | Sidebar.exe | Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker |
| N | SIDEBAR | dsidebar.exe | "Desktop Sidebar provides you with instant access to the information you most desire by grabbing data from your PC and the internet. The result is a dynamic visual display you configure and control" |
| X | SideGreen | SideGreen.exe | SideGreen adware. File located in %Program Files%\SideGreen |
| X | SideTab | SideTab.exe | SideTab adware |
| N | SideWinderTrayV4 | SWTrayV4.exe | MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs |
| ? | SIECACST | siecacst.exe | Related to a Siemens card reader. Is it required? |
| U | SightSpeed | SightSpeed.exe | SightSpeed Video Chat - "lets you connect with all your friends and family easily. Make video calls, phone calls, and send video mails and text messages to everyone in your network, anywhere in the world" |
| N | SigmaTel Audio | setup.exe | Sigmatel audio driver |
| N | SigmaTel StacMon | stacmon.exe | Installed with the drivers for a SigmaTel C-Major Audio card (on a Dell Inspiron 600m PC for example). Appears as though it can be disabled with no ill effects |
| N | SigmatelSysTrayApp | stsystra.exe | System tray program for the Sigmatel Audio sound card. Often found on Dell computers |
| N | SigmatelSysTrayApp | sttray.exe | System tray program for the Sigmatel Audio sound card. Often found on Dell computers |
| U | SigX | sigx.exe | SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more" |
| U | SigXC | SigX.exe | SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more" |
| X | SilentSoftech | [worm filename] | Added by the SILLYFDC-BL WORM! |
| X | SilentSoftech | SilentSo.exe | Added by the AUTORUN-ANU WORM! |
| U | Silica Calculator | Silica Calculator.exe | Silica Calculator widget for the DesktopX desktop utility from Stardock Corporation. Once started, Silica Calculator.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Calender | Silica Calendar.exe | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Calender | SILICA~1.EXE | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Calendar.exe" is shown as "SILICA~1.EXE" |
| U | Silica Clock | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Clock | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Clock.exe" is shown as "SILICA~2.EXE" |
| U | Silica CPU Meter | Silica CPU meter.exe | Silica CPU Meter widget for the DesktopX desktop utility from Stardock Corporation. Displays a CPU usage meter on the desktop. Once started, Silica CPU meter.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Dictionary Search | Silica Dictionary Search.exe | Silica Dictionary Search widget for the DesktopX desktop utility from Stardock Corporation. Once started, Silica Dictionary Search.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Drive Meter | Silica Drive Meter.exe | Silica Drive Meter widget for the DesktopX desktop utility from Stardock Corporation. Displays a hard disk usage meter on the desktop. Once started, Silica Drive Meter.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Memory Meter | Silica Memory Meter.exe | Silica Memory Meter widget for the DesktopX desktop utility from Stardock Corporation. Displays a memory usage meter on the desktop. Once started, Silica Memory Meter.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Network Monitor | Silica Network Monitor.exe | Silica Network Monitor widget for the DesktopX desktop utility from Stardock Corporation. Once started, Silica Network Monitor.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Picture Frame | Silica Picture Frame.exe | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. Once started, Silica Picture Frame.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Picture Frame | SILICA~3.EXE | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. Once started, Silica Picture Frame.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Picture Frame.exe" is shown as "SILICA~3.EXE" |
| U | Silica Search | Silica Search.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. Once started, Silica Search.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Search | SILICA~4.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. Once started, Silica Search.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Search.exe" is shown as "SILICA~4.EXE" |
| U | Silica ToDo List | SI90AE~1.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica To-Do List.exe" is shown as "SI90AE~1.exe" |
| U | Silica ToDo List | Silica To-Do List.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Unit Converter | SIF08B~1.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Unit Converter.exe" is shown as "SIF08B~1.exe" |
| U | Silica Unit Converter | Silica Unit Converter.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Volume Control | SI2992~1.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Volume Control.exe" is shown as "SI2992~1.exe" |
| U | Silica Volume Control | Silica Volume Control.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Weather | SI39E3~1.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Weather.exe" is shown as "SI39E3~1.exe" |
| U | Silica Weather | Silica Weather.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits |
| U | Silica Word of the Day.exe | SI985F~1.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Silica Word of the Day.exe" is shown as "SI985F~1.exe" |
| U | Silica Word of the Day.exe | Silica Word of the Day.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits |
| N | Simcast | SimcastAlerts.exe | Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say |
| N | Simple Star PhotoShow Media Manager | mssysmgr.exe | Simple Star PhotoShow photo editing and organizing software, makes it easy to send and share digital photos. Bundled with software from Nero, ComCast, SnapFish, MacroMedia and others |
| N | Simplify Media | SimplifyMedia.exe | Simplify Media media manager - "enjoy songs from home while at work or from any WiFi location. Explore friends' music while they are online" |
| U | SimpLite-MSN | SimpLite-MSN.exe | Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service) |
| X | sInErA | .exe | Added by the SILLYFDC-AB WORM! |
| X | Singapore | singapore.exe | Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself |
| U | SingTel_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for SingTel users |
| U | singtelRV_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for SingTel users |
| U | singtelTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for SingTel users |
| U | Sinus 1054 data WLAN Manager | Wifiusb.exe | Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter |
| X | sioco | sioco.exe | Added by the AGENT-MOD TROJAN! |
| N | SipDiscount | SipDiscount.exe | SipDiscount - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| N | sipgate X-Lite | sipgateXLite.exe | "sipgate x-Lite makes telephone calling possible directly over your PC. You only need a microphone and a sound card and/or a headset" |
| U | SIPPS | SIPPS.exe | Web.de Internet phone utility |
| U | SiS (R) Compatible Super VGA SiSTray application | sistray.exe | System Tray access to display settings for Silicon Integrated Systems (SiS) based graphics chipsets. Located in %System% |
| X | SiS 6326 Accelerator | sis6326m.exe | Added by the MSIC BACKDOOR! |
| U | SiS Compatible Super VGA Keyboard Daemon | keyhook.exe | Hotkey manager for Silicon Integrated Systems (SiS) based graphics chipsets - disable unless you use hotkeys |
| X | SiS Dns | dnssvc.exe | Added by the DLOADER-UE TROJAN! |
| N | SiS KHooker | khooker.exe | SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required |
| X | SiS Mpc Service | mpcsvc.exe | Added by the CIADOOR-CJ TROJAN! |