| Status | Autorun name | Command | Description |
| X | SafeSurfingUpdate | SSUpdate.exe | MoneyTree parasite - ActiveX control used to download premium-rate dialers |
| X | SafeSys | SafeSys.exe | Added by the AUTORUN.DMI WORM! |
| X | Safety Anti-Spyware 3 | Safety Anti-Spyware 3.exe | Safety Anti-Spyware rogue security software - not recommended, removal instructions here |
| X | SafetyCenter | protector.exe | Safety Center rogue security software - not recommended, removal instructions here |
| X | SafetyKeeper | SafetyKeeper.exe | SafetyKeeper rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| U | SafetyNet | ipcTray.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| U | SafetyNet_Notifier | ipcLn.exe | Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network" |
| Y | Safeworld | Freedom.exe | Safeworld - sourced by Freedom from Zero Knowledge, Inc (now Radialpoint). Provides anti-virus, personal firewall, parental controls and a pop-up blocker. Also safeguards your personal information, encrypts your passwords and much more. No longer available |
| X | Sagate Security Firewall | sagate.exe | Added by the GAOBOT.BOW WORM! |
| U | Sagem - 802.11g Wi-Fi USB Dongle LAN Utility | WLANUTL.exe | SAGEM wireless LAN configuration utility |
| U | Sagem - Utilitaire réseau pour Clé USB Wi-Fi 802.11g | WLANUTL.exe | SAGEM wireless LAN configuration utility |
| N | SAgent2ExePath | SAgent2.exe | Seiko Epson printer status agent. Disable if printer is not used often |
| U | SAGENTSERVICE | Sagent.exe | TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself |
| X | Saggwwgg | CVAvwwd.exe | Added by the LIOTEN.HT WORM! |
| X | sagnt | sagnt.exe | Adware web downloader |
| X | SAHagent | Sahagent.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | bundle.exe | ShopAtHomeSelect parasite |
| X | SAHBundle | shop1003.exe | ShopAtHomeSelect parasite |
| X | saie | saie.exe | 180solutions adware |
| X | saihoi | saihoi.exe | Added by the MDROP-CUT TROJAN! |
| N | SaiMfd | SaiMfd.exe | Saitek MFD File System Driver - associated with the Saitek SST (Saitek Smart Technology) configuration software for their game controllers. Create a shortcut and run manually when required |
| U | SAIMON | SaiMon.exe | Saitek joystick driver |
| X | sain | sain.exe | 180Search adware |
| X | sais | sais.exe | 180solutions adware |
| U | SaiSmart | SaiSmart.exe | "Smart Button Special Sauce" - included with support software for some of the Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature |
| N | Saitek SD6 Software | ProfilerU.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profiler" and "Control Panel" for their range of game controllers. Run manually via Start → Programs → Saitek SD6 Programming Software → Profiler |
| U | SaitekAutoConfigure | saicnfig.exe | Configuration for Saitek game controllers |
| X | Sakemsneql | simenu.exe | Added by the SDBOT.BTO WORM! |
| X | Sakora | Sakora.exe | Added by the GOWELES.A TROJAN! |
| N | SalaatTime | SalaatTime.exe | "Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world" |
| X | Salestart | WAS7Mon.exe | Part of the WinAntiSpyware 2007 rogue spyware remover - not recommended |
| X | Salestart | bm.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | Salestart | dcpasmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | dcsm.exe | Part of the PrivacyProtector and DriveCleaner rogue security tools |
| X | Salestart | mc.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | stm.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Salestart | strpmon.exe | Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| X | Salestart | stmon.exe | Part of rogue software including members of the AVSystemCare security suite family (see here for examples) and the PcRaiser and SystemOptimizer2008 optimization utilities |
| X | Salestart | mav_startupmon.exe | Part of the WinAntiVirus Pro 2007 rogue security software - not recommended, removal instructions here |
| X | Salestart | PASmon.exe | Part of rogue security tools, including ErrorSafe and PcTurboPro |
| X | Salestart | dcmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | Salestart | startmon.exe | ErrorProtector rogue system error and cleaning utility - not recommended |
| X | salm | salm.exe | 180Search adware |
| U | Salmosa | razerhid.exe | Razer Salmosa gaming mouse driver - required if you use the additional features and programmed keys/macros |
| X | saly | saly*****.exe | Added by a variant of the AW.AWK TROJAN! |
| X | Sam-sung | Sam-sung.exe | Added by a variant of the SDBOT WORM! |
| X | SaMail | [WORM FILE NAME].vbs | Added by the VBS.LIDO WORM! |
| U | SAMcal | SAMcal.exe | SamCal - calendar/reminder program |
| U | Sametime Connect | Connect.exe | IBM Lotus Sametime - instant messaging and Web conferencing software |
| X | sample | hchos.exe | Added by the BANKER-EZU TROJAN! |
| X | SamPs | svcvc.exe | Added by the RIKEN BACKDOOR! |
| X | Samsong | Samsong.exe | Added by the SDBOT.BNE WORM! |
| X | Samsung | Samsungs.exe | Added by a variant of the IRCBOT BACKDOOR! |
| U | Samsung MJC-900 Series Monitor | RUNDLL32.EXE SMMASHLL.DLL,AutoUpdatePnPValue | Samsung MJC-900 Series multi-function printer monitor - monitors ink levels, paper present and other parameters |
| U | Samsung PanelMgr | SSMMgr.exe | Monitors ink levels, paper present and other parameters for some Samsung printers |
| N | Samsung PC Studio | NPSAgent.exe | Installed with the SAMSUNG New PC Studio mobile device management utility. Detects when a supported mobile device is connection and optionally automatically loads the main program |
| N | Samsung PC Studio 7 | PCSuite.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| N | Samsung.PCSync | PCSync2.exe | System Tray access to SAMSUNG PC Sync - which allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a SAMSUNG mobile phone and your PC Personal Information Manager (PIM). Available via the main SAMSUNG PC Studio interface |
| N | SamsungPCSuiteTrayApplication | LaunchApplication.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| U | SamsungSM PanelMgr | SSMMgr.exe | Monitors ink levels, paper present and other parameters for some Samsung printers |
| U | SandboxieControl | Control.exe | SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it |
| U | SandboxieControl | SbieCtrl.exe | "SandBoxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer" |
| N | SandIcon | SandIcon.exe | SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources |
| X | SanitarDiska | GDC.exe | SanitarDiska Romanian rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| X | SANS Service | sansv.exe | Added by the VANEBOT-AH WORM! |
| U | SansaDispatch | SansaDispatch.exe | Sansa Updater - "The Sansa Updater is an application that checks for the latest firmware updates then downloads and installs the firmware to your Sansa device" |
| X | Santa Bastards Bitch | SANTAS.BITCH.txt | Added by the ATNAS.A WORM! |
| X | SAPISVR5SAPISVR5 | operatingsapi5.exe | Added by the TRITE-A WORM! |
| X | sapp | sapp.exe | NCase adware |
| U | SaskTel Accelerated Dial-up | sasktelgui.exe | "Experience faster surfing, downloading and e-mail by adding SaskTel Accelerated Dial-up Internet" |
| X | sasserfix | package.exe | Added by the DABBER.B WORM! |
| X | sassfix | packer.exe | Added by the DABBER.A WORM! |
| X | saSyncMgr | rundll32.exe sasync.dll, SyncWait | Browser hijacker - redirecting to Searchant.com. Note - the real Tweak UI entry for this is "rundll32.exe tweakui.cpl, tweakmeup". Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| U | SATARaid | SATARaid.exe | RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives |
| X | satmat | satmat.exe | VX2.Transponder parasite updater/installer related |
| X | sau | sau.exe | 180Search adware |
| U | SAUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| U | SAutoLaunchExe | SAutoLaunchExe.exe | Sharp Zaurus PDA related, needed to synchronize information with a Desktop or Notebook |
| Y | SAVAgent | SAVAgent.exe | Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users |
| X | Savasddwq | ffasd.exe | Added by the SDBOT-SI WORM! |
| X | Save | Save.exe | WhenU.Save adware |
| X | Save | lssas.exe | Added by an unidentified TROJAN! See here |
| X | SaveArmor | SaveArmor.exe | SaveArmor rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveDate | SaveStartDate.Exe | Unidentified adware |
| X | SaveDefender | SaveDefender.exe | SaveDefender rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveDefense | SaveDefense.exe | SaveDefense rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveKeep | SaveKeep.exe | SaveKeep rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveKeeper | SaveKeeper.exe | SaveKeeper rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| U | SaveMyWork | SaveMyWork.exe | SaveMyWork keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | Savenow | SaveNow.exe | WhenU.Save adware |
| X | SaveSoldier | SaveSoldier.exe | SaveSoldier rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | Savsvc | rundll32.exe savsvc.dll,start | Added by the AKBOT.BE WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "savsvc.dll" file is found in %System% |
| X | SAW | saw.exe | SmartAdware adware |
| U | Say The Time 5.0 | SAYTIME.EXE | This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly |
| U | SB | SB.exe | Acer Soft Button on Acer Tablet PCs |
| X | SB | SpywareBomber.exe | SpywareBomber rogue spyware remover - not recommended, removal instructions here |
| N | SB Audigy 2 Startup Menu | /l:eng | Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function |
| X | SB Watchdog | SBWatchdog.exe | Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank |
| X | SB13mini | RYZO32.EXE | Added by the SPYBOT-EJ WORM! |
| U | SBAutoUpdate | sbautoupdate.exe | SpywareBlaster auto-updater |
