| Status | Autorun name | Command | Description |
| U | SWClient | swclient.exe | Stealth Watcher surveillance software. Uninstall this software unless you put it there yourself |
| X | swcroot | swcroot.exe | Added by the SOLENO-A TROJAN! |
| U | SWd | winwd.exe | PC Security™ from Tropical Software - "is the ultimate in computer security, offering multiple locking systems for the windows environment and internet. Lock files, monitor programs activities, even detect intruders!" |
| Y | Sweep95 | ICLOAD95.EXE | Part of an older version of Sophos anti-virus software |
| Y | Sweep95 | SETUP.EXE | Part of an older version of Sophos anti-virus software |
| N | SweetIM | SweetIM.exe | vSweetIM - send fancier smiley-faces and IM graphics to friends who are using MSN Messenger. They are only able to see these advanced smiley-faces if they also have SweetIM installed |
| X | Swf32 | AVupdate.exe | Added by the MERKUR.E WORM! |
| X | Swf32 | _backup.exe | Added by the SYMTEN WORM! |
| U | swg | GoogleToolbarNotifier.exe | Part of Google Toolbar (from version 4 onwards) for IE. "Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved |
| X | SwiftCleaner | SwiftCleanerScanner.exe | SwiftCleaner rogue cleaning utility - not recommended, removal instructions here |
| X | SwimSuitNetwork | SwimSuitNetwork.exe | Advertising spyware |
| X | swingsys | SWINGSYS.EXE | Added by the BANCOS-CX TROJAN! |
| U | Switch Off | swoff.exe | Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer, disconnect your current dialup connection, lock workstation, etc |
| N | SwitchBoard | SwitchBoard.exe | Part of both stand-alone Adobe CS5 products (such as Photoshop) and suites. "SwitchBoard makes it possible for AIR stand-alone applications to work with Creative Suite applications. Whilst testing, it would appear that this entry can be safely disabled as it will be loaded when required but if you experience problems try re-enabling it. There is also a Switchboard service using the same file which forwards messages between AIR and CS applications |
| N | Switchboard.com Toolbar | AtHoc.exe | Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com |
| U | SwitchDesk | SwitchDesk.exe | PowerUp SwitchDesk - virtual desktop manager which allows "you have the possibility to launch games, working and development applications, office and entertainment software on multiple desktops to bring order to your system". Part of Ashampoo® PowerUp XP Platinum 2 from Ashampoo GmbH & Co. KG |
| U | Switcher | Switcher.exe | "On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN, Bluetooth, both) when turning the wireless switch on if disabled)" |
| X | switp | switpa.exe | OfferAgent adware |
| U | SWL | rundll32.exe [path] SWL.dll rdl | StealthWeblog surveillance software. Uninstall this software unless you put it there yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| U | SWN2 | swnxt.exe | Spyware remover by TrekBlue. Previously not recommended but the latest version was delisted here |
| X | sws.exe | [random filename] | Haldex type adult content dialler |
| X | sws.exe | gd-dial.exe | Globaldialer adult content premium rate dialer |
| N | SwTray | SWTRAY.EXE | MS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it |
| N | SWTrayV4 | SWTrayV4.exe | MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs |
| U | SwyxIt! | SwyxIt!.exe | PC Based soft phone from Swyx - see here for more details |
| U | SX Virtual Link | Connect.exe | SX Virtual Link from Silex Technology America, Inc. Utility to connect USB devices |
| N | sXe Injected | sXe Injected.exe | sXe Injected anti-cheat system client/server for Half-Life server based games that prevents cheat programs being loaded |
| U | sXe Injected | sXe Injected.exe | Anti-cheat system for servers and clients running the Half Life series of games (such as Counter Strike and Day of Defeat) which prevents any cheat programs being loaded |
| ? | SXGDSENU | sxgdsenu.exe | Yamaha SXG soundcard driver |
| N | SxgTkBar | sxgtkbar.exe | Yamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration |
| ? | Sxplog | sxpstub.exe | Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup? |
| X | sxrrv | sxrrv.pif | Added by the VAX-A TROJAN! |
| X | sy | s2.exe | Added by a variant of the RBOT WORM! |
| U | SybaseCentral43 | scjview.exe | Related to SQL Anywhere from Sybase. A comprehensive package providing data management and data exchange technologies |
| X | SyBot v2.1 By Sky-Dancer | HPSV.exe | Added by the ZOTOB.I WORM! |
| X | SYDNEY | [file path] | Added by the SYNEY WORM! |
| X | syelimS-esreveR-troppuS | [filename] | Added by the LITBOT.C BACKDOOR! |
| X | Syesm | Syesm.exe | Added by the BUZUS WORM! |
| X | Syga432te Pe432rsonal Firewall | MrNo4236.exe | Added by the RBOT-AQY WORM! |
| X | Sygaete Personal Firewall | SyGate.exe | Added by the RBOT-GLX WORM! |
| X | Sygate Peral Firewall | Syga.exe | Added by the RBOT-AQK WORM! |
| X | Sygate Personal 3 | svrv.exe | Added by the RBOT-XD WORM! |
| X | Sygate Personal Block | Studio.exe | Added by the RBOT-TW WORM! |
| X | Sygate Personal Firewall | Win32x.exe | Added by the RBOT-KZ WORM! |
| X | Sygate Personal Firewall | system32.exe | Added by the RBOT.VI WORM! |
| X | Sygate Personal Firewall | sysgut.exe | Added by the SDBOT.WM WORM! |
| X | Sygate Personal Firewall | Sygate.exe | Added by the RBOT-PN WORM! |
| X | Sygate Personal Firewall | Mcafeeupdate.exe | Added by the RBOT.YN WORM! |
| X | Sygate Personal Firewall | Sygate32.exe | Added by the RBOT.ATW WORM! |
| X | Sygate Personal Firewall | MSNSRV32.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | service.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | t1ktik.exe | Added by the RBOT-VP WORM! |
| X | Sygate Personal Firewall | host32.exe | Added by the RBOT.ALD WORM! |
| X | Sygate Personal Firewall | sexy.exe | Added by the RBOT-XY WORM! |
| X | Sygate Personal Firewall | sys.exe | Added by the RBOT-ZC WORM! |
| X | Sygate Personal Firewall | syserror.exe | Added by the RBOT.UC WORM! |
| X | Sygate Personal Firewall | hostserv.exe | Added by the RBOT.BKO WORM! |
| X | Sygate Personal Firewall | msnmsgrs.exe | Added by the RBOT.XN WORM! |
| X | Sygate Personal Firewall | Sygat.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | wins.exe | Added by the RBOT.AOB WORM! |
| X | Sygate Personal Firewall | winxpstat.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Firewall | Syga.exe | Added by the RBOT-AQD WORM! |
| X | Sygate Personal Firewall | svchots.exe | Added by the RBOT.ABT WORM! |
| X | Sygate Personal Firewall | win31243.exe | Added by a variant of the IRCBOT TROJAN! |
| X | Sygate Personal Firewall | smc.exe | Added by the RBOT-AZY WORM! Note - this is not the valid (but now discontinued) Sygate Personal Firewall which has the same filename and is normally located in %ProgramFiles%\Sygate\SPF. This one is located in %System% |
| Y | Sygate Personal Firewall | smc.exe | Sygate Personal Firewall - now discontinued |
| X | Sygate Personal Firewall Start | services32.exe | Added by the RBOT-MB WORM! |
| X | Sygate Personal Firewall Start | servic.exe | Added by the RBOT-RY WORM! |
| X | Sygate Personal Firewall Startup | msdev.exe | Added by the RBOT-QY WORM! |
| X | Sygate Personal Port | crss.exe | Added by the RBOT-PX WORM! |
| X | Sygate Personal Port Blocker | volume.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personal Port Blocker | winupdate.exe | Added by a variant of the RBOT WORM! |
| X | Sygate Personals Firewalls | ccsrn.exe | Added by a variant of the RBOT WORM! |
| X | Sygates Personal Firewall | sygs.exe | Added by the RBOT.XB WORM! |
| U | SyGateService | sgserv95.exe | SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs |
| X | Symantec | ccapp.exe | Added by the REATLE WORM! Note - this is not a Symantec file |
| X | Symantec Active-Sync DB | symdbsv.exe | Added by the AUTORUN-YN WORM! |
| X | Symantec Anti Virus | symantec32.exe | Added by a variant of the WOOTBOT WORM! |
| X | Symantec Antivirus | SPY_NET_RAT.exe | Added by a variant of the AGENT-LRO TROJAN! See here |
| X | Symantec Antivirus professional | dfrgfrat.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | autoformat.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | dyndns.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | f0dns.exe | Added by the FORBOT-GT WORM! |
| X | Symantec Antivirus professional | flushdns.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | for.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | regedit.exe | Added by a variant of the FORBOT WORM! Note - this is not the valid Windows registry editor which resides in %Windir% and will not normally figure in Msconfig/Startup! This version resides in %System% |
| X | Symantec Antivirus professional | Symantex.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | windows .exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | Winhp32.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Antivirus professional | winudp.exe | Added by a variant of the WOOTBOT WORM! See here |
| X | Symantec Antivirus professional | xplrer.exe | Added by a variant of the FORBOT WORM! |
| X | Symantec Autoscan | [random filename] | Added by the RBOT-AJO WORM! |
| Y | Symantec Backup Exec Desktop Agent | DLOClientu.exe | Part of Symantec's Backup Exec backup software |
| X | Symantec Client Security | symclient.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Symantec Configuration Loader | ccApp32.exe | Added by the AGOBOT-EE WORM! |
| Y | Symantec Core LC | symlcsvc.exe | Common process for older versions of Symantec's products including Norton Internet Security, Norton AntiVirus, Norton Ghost and the now discontinued Norton Personal Firewall and Norton SystemWorks suite. The exact purpose is unknown at present. Loads via a registry "Run" key in 98/Me and as a service in XP |
| X | Symantec Debug Client | symdebugs.exe | Added by the IRCBOT-ACM TROJAN! |
| N | Symantec Fax Starter Edition Port | OLFSNT40.EXE | Offers a virtual printer as a fax machine. Can be run via a desktop shortcut |
| Y | Symantec NetBackup Desktop Agent | DLOClientu.exe | Part of Symantec's NetBackup backup software |
| Y | Symantec NetDriver Monitor | SNDMon.exe | Part of Symantec's LiveUpate for older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Leave alone to ensure virus definitions are updated. Also, if SNDMon is disabled on one of the computers on a small office network then other computers disappear from the network for this computer, including shared devices like printers and scanners |