| Status | Autorun name | Command | Description |
| X | Sam-sung | Sam-sung.exe | Added by a variant of the SDBOT WORM! |
| X | SaMail | [WORM FILE NAME].vbs | Added by the VBS.LIDO WORM! |
| U | SAMcal | SAMcal.exe | SamCal - calendar/reminder program |
| U | Sametime Connect | Connect.exe | IBM Lotus Sametime - instant messaging and Web conferencing software |
| X | sample | hchos.exe | Added by the BANKER-EZU TROJAN! |
| X | SamPs | svcvc.exe | Added by the RIKEN BACKDOOR! |
| X | Samsong | Samsong.exe | Added by the SDBOT.BNE WORM! |
| X | Samsung | Samsungs.exe | Added by a variant of the IRCBOT BACKDOOR! |
| U | Samsung MJC-900 Series Monitor | RUNDLL32.EXE SMMASHLL.DLL,AutoUpdatePnPValue | Samsung MJC-900 Series multi-function printer monitor - monitors ink levels, paper present and other parameters |
| U | Samsung PanelMgr | SSMMgr.exe | Monitors ink levels, paper present and other parameters for some Samsung printers |
| N | Samsung PC Studio | NPSAgent.exe | Installed with the SAMSUNG New PC Studio mobile device management utility. Detects when a supported mobile device is connection and optionally automatically loads the main program |
| N | Samsung PC Studio 7 | PCSuite.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| N | Samsung.PCSync | PCSync2.exe | System Tray access to SAMSUNG PC Sync - which allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a SAMSUNG mobile phone and your PC Personal Information Manager (PIM). Available via the main SAMSUNG PC Studio interface |
| N | SamsungPCSuiteTrayApplication | LaunchApplication.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| U | SamsungSM PanelMgr | SSMMgr.exe | Monitors ink levels, paper present and other parameters for some Samsung printers |
| U | SandboxieControl | Control.exe | SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it |
| U | SandboxieControl | SbieCtrl.exe | "SandBoxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer" |
| N | SandIcon | SandIcon.exe | SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources |
| X | SanitarDiska | GDC.exe | SanitarDiska Romanian rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| X | SANS Service | sansv.exe | Added by the VANEBOT-AH WORM! |
| U | SansaDispatch | SansaDispatch.exe | Sansa Updater - "The Sansa Updater is an application that checks for the latest firmware updates then downloads and installs the firmware to your Sansa device" |
| X | Santa Bastards Bitch | SANTAS.BITCH.txt | Added by the ATNAS.A WORM! |
| X | SAPISVR5SAPISVR5 | operatingsapi5.exe | Added by the TRITE-A WORM! |
| X | sapp | sapp.exe | NCase adware |
| U | SaskTel Accelerated Dial-up | sasktelgui.exe | "Experience faster surfing, downloading and e-mail by adding SaskTel Accelerated Dial-up Internet" |
| X | sasserfix | package.exe | Added by the DABBER.B WORM! |
| X | sassfix | packer.exe | Added by the DABBER.A WORM! |
| X | saSyncMgr | rundll32.exe sasync.dll, SyncWait | Browser hijacker - redirecting to Searchant.com. Note - the real Tweak UI entry for this is "rundll32.exe tweakui.cpl, tweakmeup". Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| U | SATARaid | SATARaid.exe | RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives |
| X | satmat | satmat.exe | VX2.Transponder parasite updater/installer related |
| X | sau | sau.exe | 180Search adware |
| U | SAUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| U | SAutoLaunchExe | SAutoLaunchExe.exe | Sharp Zaurus PDA related, needed to synchronize information with a Desktop or Notebook |
| Y | SAVAgent | SAVAgent.exe | Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users |
| X | Savasddwq | ffasd.exe | Added by the SDBOT-SI WORM! |
| X | Save | Save.exe | WhenU.Save adware |
| X | Save | lssas.exe | Added by an unidentified TROJAN! See here |
| X | SaveArmor | SaveArmor.exe | SaveArmor rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveDate | SaveStartDate.Exe | Unidentified adware |
| X | SaveDefender | SaveDefender.exe | SaveDefender rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveDefense | SaveDefense.exe | SaveDefense rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveKeep | SaveKeep.exe | SaveKeep rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | SaveKeeper | SaveKeeper.exe | SaveKeeper rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| U | SaveMyWork | SaveMyWork.exe | SaveMyWork keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | Savenow | SaveNow.exe | WhenU.Save adware |
| X | SaveSoldier | SaveSoldier.exe | SaveSoldier rogue security software - not recommended, removal instructions here. A member of the WiniGuard family |
| X | Savsvc | rundll32.exe savsvc.dll,start | Added by the AKBOT.BE WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "savsvc.dll" file is found in %System% |
| X | SAW | saw.exe | SmartAdware adware |
| U | Say The Time 5.0 | SAYTIME.EXE | This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly |
| U | SB | SB.exe | Acer Soft Button on Acer Tablet PCs |
| X | SB | SpywareBomber.exe | SpywareBomber rogue spyware remover - not recommended, removal instructions here |
| N | SB Audigy 2 Startup Menu | /l:eng | Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function |
| X | SB Watchdog | SBWatchdog.exe | Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank |
| X | SB13mini | RYZO32.EXE | Added by the SPYBOT-EJ WORM! |
| U | SBAutoUpdate | sbautoupdate.exe | SpywareBlaster auto-updater |
| U | SBC RoamingClient | SBCFL.exe | Part of AT&T FreedomLink Wi-Fi connection software |
| U | SBC Self Support Tool | matcli.exe | matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| N | SBC Yahoo! Connection Manager | ConnectionManager.exe | Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection |
| Y | SBCSTray | SBCSTray.exe | System Tray access to CounterSpy antispyware software |
| U | SBDrvDet | SBDrv.exe | Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one |
| N | sbdrvdet | sbdrvdet.exe | Checks to see if Creative sound card driver should be updated |
| X | SBHC | sbhc.exe | SuperBar parasite |
| X | SBI | install_sbd_**.exe | Installer for a number of rogue security products and error fixing tools - where ** represents a 2 letter language code, i.e., "en" for English, "de" for German, etc |
| X | SBMPOP | SBMPop.exe | SearchByMedia adware |
| N | SBMX | sbmx.exe | SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only) |
| X | SBR2009F | SystemBooster2009.exe | SystemBooster2009 rogue system suite - not recommended, removal instructions here |
| X | sbss Launcher | sbss.exe | SideBySide adware |
| N | SBSV 2010/02/19-11:02:07 | SwitchBoard.exe | Part of both stand-alone Adobe CS5 products (such as Photoshop) and suites. "SwitchBoard makes it possible for AIR stand-alone applications to work with Creative Suite applications. Whilst testing, it would appear that this entry can be safely disabled as it will be loaded when required but if you experience problems try re-enabling it. There is also a Switchboard service using the same file which forwards messages between AIR and CS applications |
| X | SBUSA | SBUSA.exe | Spam Blocker Utility adware by the people who provide the Hotbar adware |
| U | SbUsb AudCtrl | RunDll32 sbusbdll.dll, RCMonitor | Control for Soundblaster MP3 external (USB) sound card |
| N | sc | scrubxp.exe | ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc |
| U | sc | sc.exe | Watchdog 2.0 Software - monitoring program |
| U | sc | run.exe | All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file |
| X | SC2 | scprot4.exe | Added by the AGENT.APP TROJAN! |
| ? | sc23exec | sc23exec.exe | Possibly related to a digital camera |
| Y | SC3300CC | SC3300CC.exe | SiPix digital camera Twain device driver |
| X | scain | s030109.Stub.exe | Delfin Media Viewer adware related |
| X | ScamDisk | SVOHOST.exe | Added by the LEWOR.D WORM! |
| X | scan | mscman.exe | ClientMan parasite variant |
| ? | Scan Detector | Pmxdetect.exe | Associated with PrimaScan scanners. Is it required? |
| X | Scan Register | ssms.exe | Added by the RBOT-AT WORM! |
| ? | Scan Wizard | button.exe | Associated with Scan Wizard as supplied with Microtek scanners - see also the Scanner Detector and Sdetect entries. What does it do and is it required? |
| X | Scan&Repair2006.exe | Scan&Repair2006.exe | Scan&Repair Utilities 2006 rogue system utility - not recommended |
| X | Scan119 | Scan119.exe | Scan119 rogue security software - not recommended, removal instructions here |
| U | Scan2pc | Scan2pc.exe | Scan to PC application for the scanning function of multiple multifunction printers from Dell, Samsung, Xerox, Ricoh and others |
| X | ScanDisc | satan.exe | Added by the GREGSTAR TROJAN! |
| X | ScanDisk | ScanDisk.exe | Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker |
| X | scands32.exe | scands32.exe | Added by a variant of the ADCLICKER TROJAN! |
| X | Scandsk2 | scandsk2.exe | Added by the AGOBOT-PK WORM! |
| X | scandskx.exe | scandskx.exe | Added by the DLOADR-ARM TROJAN! |
| ? | ScanFile | ?? | ?? |
| Y | ScanInicio | Inicio.exe | Part of Panda Antivirus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active |
| U | SCANMSG | SCANMSG.EXE | Part of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Enables the "Quick Heal messenger service which provides important information about latest threats, updates and other information related to Quick Heal." Also included by vendors who use the Quick Heal engine such as Omniquad and iQon |
| N | Scanner Detector | SDetect.exe | ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button |
| Y | Scanner File Utility | NsCatCom.exe | Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation |
| ? | Scanner Reminder | remind.exe | Part of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Also included by vendors who use the Quick Heal engine such as Omniquad and iQon. What does it do and is it required? |
| ? | ScanPanel | ScanPanel.exe | Trust Easy Webscan scanner related - what does it do and is it required? |
| X | Scanreg | [filename] | Added by the QQPASS.E TROJAN! |
| X | ScanRegistry | nsrvnt.exe | Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe |
| X | ScanRegistry | scanregv.exe | Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe |