Processes beginning with s

Added by the AGOBOT-LN WORM!

Added by the LOVGATE.AB WORM! Note - the filename has the digit 0 rather then the uppercase "o"

Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?

Added by the AGOBOT-DD WORM!

A tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems

Hotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card

S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required?

S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display

Same as the s3tray entry in this table?

S3 Video driver related. What does it do and is it required?

S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display

FilterPak from S4F, Inc - internet filtering software

Searchcentrix hijacker

Antivirus 2008 XP rogue security software - not recommended, see here

Logitech QuickCam driver. Is it required?

Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?

3D sound extension for Windows

NCase adware

Airline reservation software from Sabre. Available via Start -> Programs

NCase adware

SurfAccuracy adware

AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging

Added by the MAILBOT-BZ TROJAN!

Added by the FOCOSENHA TROJAN!

Added by the BANKER-DT TROJAN!

SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The "sfgupd.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

SafeguardProtect/Veevo hijacker. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The random DLL file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

SafeHouse "Personal Privacy" system tray icon - PP protects and hides your private and personal photos, videos, files and folders by making them "invisible" and encrypted

Monitors a download and ensures an newer version of a file isn't replaced by an older one

Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation

SafeSearch.A adware

Part of SafeSpace (from Artificial Dynamics) which "protects computers from Internet malware infection without the need for signature updates or regular maintenance"

SafeStrip spyware remover - not recommended, see here

SafeStrip spyware remover - not recommended, see here

MoneyTree parasite - ActiveX control used to download premium-rate dialers

Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"

Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"

SafeWorld Internet Security - now no longer available

Added by the GAOBOT.BOW WORM!

Seiko Epson printer status agent. Disable if printer is not used often

TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself

Adware web downloader

ShopAtHomeSelect parasite

ShopAtHomeSelect parasite

ShopAtHomeSelect parasite

NCase adware

Saitek MFD File System Driver - associated with the Saitek SST (Saitek Smart Technolgy) configuration software for their game controllers. Create a shortcut and run manually when required

Saitek joystick driver

NCase adware

NCase adware

"Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature

Configuration for Saitek game controllers

Added by the SDBOT.BTO WORM!

Detected by Microsoft as the GOWELES.A TROJAN! See here

"Salaat Time is a FREE multi-function Islamic application that calculates the prescribed five daily Muslim prayer times as well as Qiblah direction for anywhere in the world"

WinAntiSpyware spyware remover - not recommended, see here

Misleading security software such as AntiSpywareSuite, AntivirusPCSuite, SpyGuardPro, WinAntiVirus Pro 2006, WinSecureAv and WinSpyControl - not recommended, see here

SystemDoctor misleading security software - not recommended, see here

PrivacyProtector misleading security software - not recommended, see here

OnlineHelpmate and ConfidentUser misleading security software - not recommended

WinAnonymous spyware remover - not recommended, see here

Misleading security software such as WinPCDoctor, StorageProtector, ErrClean and SystemErrorFixer - not recommended

NCase adware

Added by a variant of the AW.AWK TROJAN!

Added by a variant of the SDBOT WORM!

Added by the VBS.LIDO WORM!

SamCal - calendar/reminder program

IBM Lotus Sametime - instant messaging and Web conferencing software

Added by the SDBOT.BNE WORM!

Added by an IRC TROJAN variant!

SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it

"SandBoxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer"

SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources

Added by the VANEBOT-AH WORM!

Sansa Updater - "The Sansa Updater is an application that checks for the latest firmware updates then downloads and installs the firmware to your Sansa device"

Added by the ATNAS.A WORM!

NCase adware

"Experience faster surfing, downloading and e-mail by adding SaskTel Accelerated Dial-up Internet"

Added by the DABBER.B WORM!

Browser hijacker - redirecting to Searchant.com. Note - the real Tweak UI entry for this is "rundll32.exe tweakui.cpl, tweakmeup". Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives

VX2.Transponder parasite updater/installer related

180Solutions adware related

Big Brother from Quest Software. System and network monitor

Sharp Zaurus PDA related, needed to synchronize information with a Desktop or Notebook

Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users

WhenU.Save adware

Unidentified adware

WhenU.Save adware

Added by the SPREDA.B VIRUS!

Added by the AKBOT.BE WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "savsvc.dll" file is found in %System%

SmartAdware adware

This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly

Acer Soft Button on Acer Tablet PCs

SpywareBomber spyware remover - not recommended, see here

Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function

Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank

Added by the SPYBOT-EJ WORM!

SpywareBlaster auto-updater

Part of AT&T FreedomLink Wi-Fi connection software

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide

Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection

System Tray access to CounterSpy anti-spyware from Sunbelt Software

Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one

Checks to see if Creative sound card driver should be updated

SuperBar parasite - uninstall available here

Downloader for a variety of rogue anti-spyware programs

SearchByMedia adware

SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)

SideBySide adware

Control for Soundblaster MP3 external (USB) sound card

ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc

Watchdog 2.0 Software - monitoring program

All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file

Added by the AGENT.APP TROJAN!

Possibly related to a digital camera

SiPix digital camera Twain device driver

Delfin Media Viewer adware related

Added by the LEWOR.D WORM!

ClientMan parasite variant

Associated with PrimaScan scanners. Is it required?

Added by the RBOT-AT WORM!

Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required?

Added by the GREGSTAR TROJAN!

Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker

Added by a variant of the ADCLICKER TROJAN!

Added by the AGOBOT-PK WORM!

Added by the DLOADR-ARM TROJAN!

??

Part of Panda Antivirus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active

ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button

Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation

Trust Easy Webscan scanner related - what does it do and is it required?

Added by the QQPASS.E TROJAN!

Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe

Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe

Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:Windows or C:Winnt)

Added by the STATOR WORM! Note - this is not legitimate ScanRegistry entry - which is a vital Windows file. The executable "Scanregw.exe" is located in %System%. Runs from the registry RunServices key as opposed to the Run key

Added by the DINOXI or DINOXI.B WORMS!

Added by the NYXEM-D WORM! Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines. This worm file is found in the System (9x/ME) or System32 (NT/2K/XP) folder

Added by the DWNLDR-FZY TROJAN!

ScanSpyware spyware remover (where * = the version number) - not recommended, see here

Added by the STANDO-E WORM!

Added by the ACNATT.A WORM!

Related to SmartCard readers and sometimes uses lots of system resources

Added by the MOFEI.B WORM!

Related to PowerISO - CD/DVD image file processing tool

Related to unknown malware - hidden installer associated with it

Added by the VB-DVW WORM!

Part of Antivir PersonalEdition Classic anti-virus

Premium rate adult content dialler

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Scheduler for Mercury Ez View TV Tuner Card

Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs

Added by the TACTSLAY.A TROJAN!

Added by the HOSTBANK-A TROJAN! Note - this particular msmsgs.exe file is located in the WindowsSystem32Config or WinntSystem32Config folder, and should not be mistaken for the MSN Messenger file of the same name!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.B TROJAN!

Tenebril GhostSurf or SpyCatcher related scheduler - you can schedule daily, weekly, monthly or one-time only cleanings

Added by the TACTSLAY.B TROJAN!

Added by the TACTSLAY.B TROJAN!

Added by the TACTSLAY.B TROJAN!

Added by the LIOTEN.KX WORM!

Premium rate adult content dialer

Scheduler for ReaConverter advanced image converter

Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect

Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename

MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans

MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans

Added by the DINOXI or DINOXI.B WORMS!

Schmaili - insert animated smilies into your e-mail

Added by the TJSERV.D TROJAN!

WinScheduler is installed with Home Theater or WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs

Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot

Added by a variant of the MAILBOT TROJAN!

Added by the FAKEALERT TROJAN!

Added by the FORBOT-CW WORM!

Added by a variant of the CRYPTER.C TROJAN!

Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process

Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process

Added by the OPASERV.T WORM!

ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper

Added by the DLOADER-VP TROJAN!

Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler

Part of Access Denied security and privacy software

Part of Access Denied security and privacy software

Added by the RBOT-AGP WORM!

Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon

"ScreenHunter 4.0 Free is a completely free screen capture software for you to easily take screenshots"

ScreenPrint32 screen capture software - can be launched manually

MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder

??

Maybe associated with DOS on a Win9x machine

Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information

Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly

Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features

CoolWebSearch parasite variant

Added by the HACDEF-R TROJAN!

Added by the AGENT-DS TROJAN!

Added by the OPASERV WORM!

Added by the OPASERV WORM!

SCSI Miniport driver

Added by a variant of the DWNLDR-GAH TROJAN!

Added by a variant of the SPYBOT WORM!

Wiretap surveillance software. Uninstall this software unless you put it there yourself

Added by the SDBOT-CY TROJAN!

Added by the LOHAV-N TROJAN!

Added by the CRYPTER.A TROJAN!

PC Security from Tropical Software. 'PC Security? 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security? offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'

Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here

Added by the SERFLOG.C WORM!

Added by the SERFLOG.C WORM!

Added by the RANKY.AG TROJAN!

Related to LANDesk Management Suite from LANDesk Software Ltd. What does it do and is it required?

ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button

Added by a variant of the SPYBOT WORM!

Added by the FORBOT-AP WORM!

Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup?

Added by the SDBOT-YJ WORM!

Added by the SDBOT-WC WORM!

Added by the RBOT.BHL WORM!

Added by the SPYBOT.OGX WORM!

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the RBOT-ABA WORM!

Added by the FORBOT-DT WORM!

SmartDraw Photo (now FotoFinsh) - "organize, enhance, print, and share your photos. It's also a powerful graphic editor for creating images and web graphics"

DriveCleaner rogue security software - not recommended, see here

Added by the SDBOT-SQ WORM!

InlookExpress logs keystrokes and captures screenshots. If you didn't install this yourself remove it. Note - this should not be confused with the svchost.exe system process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder! This file is located in a "sds20" folder

RSA Keon Web PassPort - software that allows organizations to use digital certificates in a Web-based environment to help ensure that their transactions are authentic, confidential and digitally signed

Spyware Doctor spyware remover - system tray access

Added by the BROGGER-A TROJAN!

SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint and Email

Added by the OPANKI-F WORM!

Installed by SpeedItUp without permission, along with PC-Checker. Detected by DrWeb as the STARTPAGE.ORIGIN TROJAN!

??

Naupoint browser hijacker

Search-Exe hijacker

Hijacker

Search And Destroy rogue security software - not recommended, see here

Search And Destroy rogue security software - not recommended, see here

Search And Destroy rogue security software - not recommended, see here

SearchBarCash adware variant

SCBar foistware

SearchNav adware - IEFeatures/Popnav variant

SearchNav adware - IEFeatures/Popnav variant

SearchNet adware

Browser hijacker - redirecting to FindWhateverNow.com

Vendio "Search Settings" foistware - reportedly installed without notice, see here and here

SearchSpy spyware remover - not recommended, see here

SearchSquire adware

Hijacker

Added by the HAXDOOR.D TROJAN!

Added by a variant of the HAXDOOR.BC TROJAN!

Added by the HAXDOOR-AE TROJAN!

Added by a variant of the SPYBOT WORM! See here

Related to Second Copy? - a files/folders backup utility

Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash

Added by the DELF-LW TROJAN!

Hijacker that may reset your browser's home page and/or search settings to point to undesired sites

Secretmaker is a combination of eight privacy-defending programs, including Spam Fighter Pro, Worm Hunter, Pop-Up Killer, Banner Blocker, Cookie Eraser, Privacy Protector, History Cleaner, and Garbage Cleaner

"Secret Smileys is an add-on for AIM that provides users access to 1000's of new Smileys that can be viewed by anyone using a current version of AIM. Secret Smileys also adds other features such as logging of IM conversations, and it gets rid of that annoying advertisement on your buddy list window"

Reported by Panda as an EasySearch Adware variant. Note - EasySearch modifies the Internet Explorer settings and may download programs onto the infected computer

Added by the GLOBAL PATROL TROJAN!

UltraSoft Key Interceptor surveillance software - uninstall this unless you put it there yourself!

Part of the Nero multimedia suite backup function - "Recover your data quickly and easily and create discs that are password protected. SecurDisc technology gives you peace of mind"

DealHelper adware

Added by the RBOT-AFO WORM!

Added by an IRCBOT TROJAN!

Added by the VANEBOT-AN WORM!

Added by the AGOBOT.ACI WORM!

Detected by Symantec as the SILLYFDC WORM! See here

Detected by Symantec as the SILLYFDC WORM! See here

WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually

WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually

SecureCleaner spyware remover - not recommended, see here

SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches

SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop

Added by the REDZED WORM!

Related to Secure Online Account Numbers by Discover(R) Card from Orbiscom Ltd. Secure and innovative payment solutions

SecurePCCleaner spyware remover - not recommended, see here

1 Click Fixer PLUS from Secure PC Solutions "takes the guesswork out of locating and solving problems in the Windows registry"

Added by a variant of the SDBOT WORM!

Added by the SPYBOT.JE WORM!

Added by the BANCBAN-F TROJAN!

Added by the RBOT-SV WORM!

Added by the SDBOT.BAV WORM!

Added by the SDBOT.CFT WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Security iGuard spyware remover - not recommended, see here

A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private

Detected by Kaspersky as the AUTORUN.LPF WORM! See here

Added by the RBOT-ZW WORM!

Added by the SDBOT-BM WORM!

Added by the RBOT.WW WORM!

Added by the SDBOT-KB WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by an unidentified WORM or TROJAN!

Added by the RBOT-GGF WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the AGOBOT-LC WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the AGOBOT.ZW WORM!

Added by the NOPIR.A WORM!

Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here

Seekmo Search, a 180Solutions adware variant - also see here

180Solutions.Zango adware

180solutions/Seekmo adware

Medload adware

Added by the DLOADER-WD TROJAN!

??

Added by the LOWZONE-AS TROJAN!

RXToolbar adware. Software that displays pop-up/pop-under advertisements when the primary user interface is not visible

PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone

Detected by Kaspersky as PurityScan.ah

Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly

From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it

Added by a variant of the RBOT WORM!

MediaMotor.Popupwithcast adware

Any one of a variety of worms and trojans

Detected by Trend Micro as the IRCBOT.AUA BACKDOOR! See here

Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

"Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems

Added by the WAREZOV.DC WORM!

Added by the SDBOT-ACP WORM!

FTP server

Added by the MANIFEST TROJAN!

Added by the DELTAD.A WORM!

Added by the METHS-A TROJAN!

Added by the SINGU-Q TROJAN!

Multi Function Printer (MFP) Server Agent for Belkin's Wirless G All-in-One Print Server and ZyXEL's NPS-520

Added by the RBOT-ZM WORM!

Added by the RBOT-GWC WORM!

Added by the SDBOT-DFA WORM!

Added by the SDBOT-DDB WORM!

Added by the BUSHTRO122 or SMOKODOOR TROJANS!

Added by the DELTAD.A WORM!

Added by the MADANGEL VIRUS!

Added by the ALADINZ.H TROJAN!

Added by the KAITEX.E TROJAN!

Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the CHA TROJAN!

Added by the ASSIRAL-C WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.BRH WORM!

Added by an unidentified WORM or TROJAN! See here

For Compaq PC's. Part of Backweb

For Compaq PC's. Part of Backweb

Added by the GAOBOT.AO WORM!

Added by the PREVERT TROJAN!

Added by a variant of the ZLOB TROJAN! See here

Added by the RBOT.BMD WORM!

Added by the SDBOT-WK WORM!

Added by the RBOT-ZJ WORM!

Added by the SDBOT-YX WORM!

Added by a variant of the RBOT WORM!

Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the TORVEL.B WORM!

Added by the TORVEL WORM!

Added by the DAOSER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services{C922CCC4-CF61-4589-A0D1-828160704853} subfolder

Added by the DAOSER-C TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services[random] subfolder

Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the GAOBOT.GEN!POLY WORM!

SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start → Programs

Added by the PASSMAIL-D VIRUS!

Added by the PROXY-GRIC TROJAN!

Added by the DONBOMB.A TROJAN!

Added by the RBOT-ALE WORM!

Added by the DELF-NK TROJAN!

Added by the SDBOT-AFO WORM!

Added by the SPYBOT.YQW WORM!

Added by the RBOT-AQJ WORM!

Added by the RBOT.EEH WORM!

Added by a variant of the RBOT WORM!

Added by the LERPA-A WORM! Note - the file name will be one of the following common.exe, common.pif, common.scr, Sexo.exe, Sexo.jpg.pif, ini_file__.pif, load_me__.tmp, msfile.pif, system_load_.pif or zipped.rar.pif

Added by the VXGAME.Z TROJAN! Note - the filename is random - see the link. Typical examples are vexg6ame4.exe, vexga3me2.exe, vexga4m1et4.exe, etc

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM! The filename is 4 random characters

Added by the DARKER WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by a variant of the SPYBOT WORM!

Added by the DCMBOT-C TROJAN!

Added by the DCMBOT-E TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder

Added by the DCMBOT-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder

Added by the BANCOS-CG TROJAN!

Added by the BANCOS-BY TROJAN!

Added by the BANCOS-BM TROJAN!

Added by the AGOBOT-PH WORM!

Added by the BANCOS-DA TROJAN!

Added by the BANCOS-EL TROJAN!

Added by the BANCOS-FS TROJAN!

Added by the BANCOS-FJ TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN! - probably a SPYBOT variant

Added by an unidentified WORM or TROJAN! See here

"servedby.advertising" popup generator

Identified as a variant of the Win32.Iroffer malware. Located in %Windir%\Drivers\Intel

Added by the AGOBOT-ST WORM!

Added by the DLOADR-AYX TROJAN!

Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation

Added by the AGOBOT.AIR WORM!

Detected by Trend Micro as the AGENT.DEI TROJAN! See here. Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Nokia Connectivity Library support task that is needed by NCLTRAY and by the Nokia Connection Manager for either to work properly

Added by the TAME-C WORM!

Added by the SDBOT.BAH TROJAN!

Added by the ZCREW TROJAN!

Added by the METEORSHELL TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe

Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by a variant of the RBOT WORM!

Added by the LANFILT-J TROJAN!

Added by the SDBOT.N WORM!

Added by a variant of the RANKY.U TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Added by a Proxy Trojan variant

Added by the RANKY.L TROJAN!

Added by a Proxy Trojan variant

Added by the FLYVB-C WORM!

Added by the WIN32.SMALL.N TROJAN!

Added by the ZINCITE.A TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the RANCK-DB TROJAN!

Added by the MOGI WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%

Added by the REPER-B WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by a variant of the SDBOT WORM!

Added by an unidentified WORM or TROJAN!

Added by an unidentified WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)

Added by the RANCK-LT TROJAN!

Added by the RANCK.LU TROJAN!

Added by a variant of the RANKY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the CIADOOR.122 VIRUS!

Added by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Detected by Trend Micro as the IRCBOT.AYN BACKDOOR! See here

Added by the DONK WORM!

Added by the AGOBOT-TG WORM!

Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! By default this file is located in Documents and Settings[user name]Templates

Added by the RIZO.A TROJAN!

Added by the RBOT-GUC WORM!

Added by an unidentified TROJAN! See here

Detected by Trend Micro as the IRCBOT.ATZ TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Spyware - detected by Kaspersky as the SMALL.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Added by the SMALL-EK TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "config" subfolder

Added by the PYSKE-D WORM!

Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! By default this file is located in Documents and Settings[user name]Templates

Added by a variant of the RBOT WORM!

Added by the SOBER-L WORM! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a msagentsystem subfolder of the Winnt or Windows folder

Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the MSNSPY-B TROJAN!

Added by the BUGBROS WORM!

Added by the TrojanDownloader.Agent.rv TROJAN!

"Shorty" adware - also detected as the AGENT.FD TROJAN!

"Shorty" adware - also detected as the AGENT.FD TROJAN!

Added by the SDBOT-XO WORM!

Added by the PUNYA-B WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Added by the DEARIS-A TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the RBOT-AMX WORM!

Defender Pro Antispy

Detected by Trend Micro as the RBOT.CN TROJAN! See here

Added by the MSNVB-D WORM!

Added by the SDBOT.BUI WORM!

Added by the SPYBOT.BGX WORM!

Added by the BANKER-EHR TROJAN!

Added by the BANCOS-BCM TROJAN!

Added by the SINGU-J TROJAN!

Added by the AGOBOT-UB WORM!

System Tray icon for Serv-U FTP server. Is it required?

Added by the SDBOT-CZU WORM!

SurfSpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the RBOT-AGS WORM!

DownloadWare adware

Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller

Related to a Soundblaster Audigy soundcards. What does it do and is it required?

Used by HP and Compaq computers to hide the windows of programs passed as arguments to it

Used to set a Brother MFC printer/copier/scanner as the default printer after installation

Used to set a Brother MFC printer/copier/scanner as the default printer after installation

Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV

Added by the FTP_BMAIL TROJAN!

Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"

SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data

SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data

Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog

Provides work unit buffering for Seti@Home clients - see here for more details

SETI Spy is a little program to "spy" on the progress and performance of the SETI@home client. Called a "spy" because it is unobtrusive as possible

Added by the RBOT-BWI WORM! Note - this is not the valid Logitech Setpoint mouse and keyboard entry that uses the same filename and is located in the LogitechSetpoint sub-folder of Program Files. This file is located in the System (9x/Me) or System32 (NT/2K/XP/Vista) folder

Logitech SetPoint Event Manager for their range of mice and keyboards. Required if you want to use the advanced features of these devices and is located in the LogitechSetpoint sub-folder of Program Files

Added by the RBOT-AAX WORM!

Video refresh rate utility found on some HP and Compaq PCs. Recommended for CRTs but not LCDs

Added by the SDBOT.GEN TROJAN!

HP DeskJet Setup - printers function normally without it

Added by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the QQPASS-K TROJAN!

Added by the QQPASS-AC TROJAN!

Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway

Regfile in disguise - another CoolWebSearch parasite variant

??

Added by the HUNTOCX WORM!

Added by the REPAD WORM!

Added by the SENOW-B premium rate adult content dialler

Added by the Sexy DIALER! Related also to Hot Tarts DIALER!

Premium rate adult content dialler

SurfEnhance adware component

Sonic Focus - "enhances music, movie and game sound by analyzing compressed audio streams in realtime, then restoring and enriching audio back to its original performance qualities"

Added by the FAVADD-H TROJAN! Also known as SurfEnhance adware

Added by the AGENT.BUO WORM!

Identified as a variant of the TrojanDownloader.Matcash malware

Identified as a variant of the TrojanDownloader.Matcash malware

Verizon Online Support Center - prompts for online updates

Spy4PC surveillance software. Uninstall this software unless you put it there yourself

Added by the SOBIG.D WORM!

SFIRM32 Online Banking software

SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"

SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"

eAcceleration Stop-Sign security software related. Previously not recommended, see here

Canon scanner driver. Is it required?

StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups

"NTI Shadow 3 is an award-winning easy-to-use backup application that automatically protects your photo, music, video, and various data files. It makes data restoration as easy as dragging and dropping files from one place to another"

"StorageCraft? ShadowUser? provides easy to use desktop security and protection for Windows operating systems. ShadowUser is the best way to prevent unwanted changes to PCs and laptops"

Added by the REMABL WORM!

Added by the REMABL WORM! where * is 2 to 11

Added by the WINKO.AO WORM!

HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites. In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs

Shareaza P2P client

Shareaza P2P client related

Added by the MAKECALL TROJAN!

Added by the AGENT-FPE TROJAN!

Added by the ENCLAG-A TROJAN!

Intel AnyPoint internet sharing software. Now discontinued

Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required

Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents"

IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"

Added by the VB-DVS TROJAN!

Premium rate adult content dialler

Added by the EB TROJAN!

Added by the EB TROJAN!

Added by the PPDOOR-R WORM!

Added by the TACTSLAY.B TROJAN!

Added by the GOLDSPY-B TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the TORPIG-Q TROJAN!

Added by the AGENT-BR TROJAN!

Added by the BADSECTOR TROJAN!

Homepage hijacker re-directing browsers to adult content websites

Homepage hijacker re-directing browsers to adult content websites

Added by the GOLDUN TROJAN!

Added by the SMALL-DL TROJAN!

Added by the GP TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System subfolder

Added by the ZLOB TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the DOYORG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the KAKKEYS TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%

Added by the KIPIS-U WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\Microsoft

Added by the TORPIG-C and TORPIG-J TROJANS! Filenames spotted include ibm00001.exe, ibm00002.exe, ibm00005.exe and so on

Added by the BANCBAN-FT TROJAN!

Added by the AGENT-FD TROJAN!

Added by the ANSERIN TROJAN!

Added by the TIBICK.C WORM!

Added by the LOVGATE.Z WORM!

Added by the STULTDOR-A TROJAN!

Added by the AGOBOT-TH WORM!

Added by the EMERLEOX.S WORM!

Added by the SCAFENE WORM!

Added by the JLOK-A WORM!

Added by the IRCBOT-AY BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%

Added by the NETDEV.B TROJAN!

Added by the NETDEVIL (or NERTE) TROJAN!

Added by an unidentified WORM! Note - do not confuse with the McAfee SecurityCenter file of the same name

SoftStop misleading security software - not recommended, see here

Added by the REMCON-A TROJAN!

Added by a variant of the AGENT.ALN TROJAN!

Added by the ANAKHA TROJAN!

Added by the IBILL.Z TROJAN!

Added by the AV TROJAN!

Added by the MSNOPT-A TROJAN!

Added by the IRCBOT-AY BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%

Added by the YALER-A TROJAN!

Added by the PROXAGE-A TROJAN!

Added by the UPCHAN TROJAN!

Added by the AGENT.CE TROJAN!

Installed with the drivers for multi card readers of various brands. To differentiate between the various card slots on multi slot readers the shicoxp.exe file assigns and loads unique drive icons for the various card slots that are displayed in Windows Explorer

Added by the RIZO.A TROJAN!

Added by the RIZO.A TROJAN!

Added by the HAPPYLOW (or NISHE-A) VIRUS!

??

Added by the GASTER TROJAN!

"Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline". Could be a registration reminder for the trial version

Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs

Added by the DELF-DRA WORM!

Created by Orbiscom for MNBA (now Bank of America) - ShopSafe creates a temporary card number each time you make an online purchase

ShortKeys from Insight Software Solutions - allows you to program keys with text strings

ShortKeys Lite from Insight Software Solutions, Inc. A macro utility to automate a task that you perform repeatedly or on a regular basis

Special function key manager for Chicony keyboards - see here

Advertisement display which can be stopped here

FFToolBar adware toolbar

Related to Just Rams USB product driver. Is it required?

PNY Attach? USB flash memory stick System Tray icon - shows when the device is plugged in

Card reader for memory cards from digital cameras. Is it required?

Note that there is a strange symbol in the command field. HKLMSoftwareMicrosoftWindowsCurrent VersionRunShowLOMControl Reg_DWORD 0x00000001 (1) LOM = LAN on Motherboard.It mean Show "LAN on Motherboard" Control.On systems where you can install an external LAN interface, it will warn you that you already have a built-in LAN interface. Appears to be a feature on certain Dell systems

Added by the HANDLE-A VIRUS!

Found on Gateway computers (and maybe others) - see here. "Showwnd is included with the Chicony keyboard software and is used by the software to stop the keyboard driver's taskbar entry from reappearing. It is not necessary to remove the keyboard software, however if you wish it can be removed through Add or Remove Programs"

Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled

From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs

Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system

ShutDownPro - shutdown, reboot, logoff your System with one mouse click

Si Meter - keep track of things like CPU activity, network activity and speed, hard-drive activity, hard-drive space, system memory, running processes, or just date and time

LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "si91e44b.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Part of Steganos Internet Anonym privacy software

Steganos Internet Anonym privacy software

Added by the NETLIP WORM!

SideACT organizer software

Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. But on other versions of Windows it can be a part of the Searchcentrix hijacker

"Desktop Sidebar provides you with instant access to the information you most desire by grabbing data from your PC and the internet. The result is a dynamic visual display you configure and control"

MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs

SightSpeed Video Chat - "lets you connect with all your friends and family easily. Make video calls, phone calls, and send video mails and text messages to everyone in your network, anywhere in the world"

Sigmatel audio driver

System tray program for the Sigmatel Audio sound card. Often found on Dell computers

System tray program for the Sigmatel Audio sound card. Often found on Dell computers

??

SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more"

Simcast is a free service that allows you to subscribe to information on a large variety of topics. Alerts will appear on your desktop when a channel that you have subscribed to has something to say

Simple Star PhotoShow photo editing and organizing software, makes it easy to send and share digital photos. Bundled with software from Nero, ComCast, SnapFish, MacroMedia and others

Simplify Media media manager - "enjoy songs from home while at work or from any WiFi location. Explore friends' music while they are online"

Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)

Added by the SILLYFDC-AB WORM!

Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself

Wireless management utility for the T-Com Sinus 1054 Data WLAN adapter

FreeCall - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

Web.de Internet phone utility

Added by the DLOADER-UE TROJAN!

SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required

Added by the CIADOOR-CJ TROJAN!

System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem

SIS graphics cards related: "Super VGA Keyboard Daemon" - hooks into the keyboard processing chain in order to enable hotkey settings

Added by the QQPASS.IA WORM!

SiS Corporation sound card driver

??

WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems

Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board

Spam Inspector - anti email spam software

Responsible for power management for SIS chipsets - is it required?

Related to the SIS Raid system from Silicon Integrated Systems

Related to a Silicon Integrated Systems Corp (SiS) product?

Related to a Silicon Integrated Systems Corp (SiS) product?

System Tray utility for SiS 900 network cards

Added by the PROVA TROJAN!

Added by the PROVA TROJAN!

System Tray icon for SiS based graphics. Note - this resides in C:WindowsSystem

Added by the HOLCAS.A WORM!

Added by the JUMPRED.A WORM!

Added by the TOMETA-C TROJAN!

Added by the CEBE WORM!

SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP

SiteAdvisor from McAfee warns you before you interact with a dangerous Web site

Added by the HANSAH-A WORM!

Added by an unidentified WORM or TROJAN!

Medload adware

Added by a variant of the ORCU.B TROJAN!

SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!

SaveKeys keystroke logger/monitoring program - remove unless you installed it yourself!

Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys

Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys

Atomic Alarm Clock - "Alert yourself about important events with different alarms and replace your computer tray clock using different skins. Computer Alarm clock that will play any MP3 file. It can also run a program, log off, wake up, reboot, shut down, turn off etc..."

Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here. Leave enabled if you want to receive messages

Identified as a variant of the TrojanDownloader.Matcash malware

SpyKeySpy logs keystrokes and sends the stolen information to a configurable email address

Added by the SUNK-A WORM! Note - this file is found in the root folder (C:), (D:), etc

For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system

Added by the SASSER.D WORM!

Added by the NETSKY.AA WORM!

"Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"

Added by the VANBOT-C WORM!

SkypeMate acts as a bridge between networks of VoIP and PSTN

Added by the PYKSE-A WORM!

For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system

Process associated with Realtek Voice Manager for some of their audio chipsets

Added by the SDBOT-QC WORM!

Added by a variant of the SDBOT WORM!

Added by the SIKBOT-A TROJAN!

This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode

Sliber - freeware screen capturing & online sharing tool

"SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:Program FilesOutlook Expressmsimn.exe becomes MAIL"

Added by the GASLIDE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup!

Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"

Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more". Now superseed by 1-Click Answers

Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server

User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server

Core module for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server

SeekSeek search hijacker related - see here

Win SynchroAd adware, also detected as DLOADER-QG TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the OLFEB.A TROJAN!

Added by the OLFEB.A TROJAN!

Added by the OLFEB.A TROJAN!

Added by the LUKUSPAM TROJAN!

Added by the IROFFER.CT TROJAN!

USB driver for downloading from within Napster and iTunes to portable MP3 players. Only required at startup if you use it all the time - otherwise start it manually when required

Cypress USB Mass Storage Driver Notification Icon Application - tray notification for Cypress base memory sticks and external storage devices for Win98

Helper utility for Motorola based SM56 software modems - resides in the System Tray

Helper utility for Motorola based SM56 software modems - resides in the System Tray

Unidentified adware

Added by the AGENT.BJO TROJAN!

Added by the DWNLDR-GVG TROJAN!

Added by the ROMARIO-A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder

System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller

For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly

Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio

Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio

Netropa Smart Keyboard driver

Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely

Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely

Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos"

Related to Plustek OpticSlim scanner

Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer

Smartalec PC Accelerator - system optimization utility

Conexant SmartAudio PC audio chipset software - typically available on HP notebooks with built-in microphones

SmartBarXP is a bar that runs down the side of your screen, and can be configured to display interactive panels known as 'panes'. These panes include media players, slideshow and image viewing panes, a virtual desktop manager, and live news, weather and stock feeds to mention but a few

sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys

"IObit SmartDefrag helps defragment your hard drive more efficiently than any other product on the market - free or not"

Samsung smarthru software, used with Lexmark Z82 or Samsung multifunction printers

Smartalec PC Accelerator - system optimization utility

Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional

Related to CompanionLink Software Inc. Synchronization solutions for ACT!, GoldMine, Lotus Notes and Microsoft Outlook

System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel

SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments

IBM Netfinity Director and Universal Management Services related. What does it do and is it required?

Sygate Firewall

Sygate Firewall

Sygate Firewall

Sygate Firewall

Added by the AGOBOT-OU WORM!

Sygate Firewall

Sygate Firewall

Sygate Firewall

Added by the SCLOG-AJ TROJAN!

SMC Networks wireless PCI card driver. Is it required?

Added by the LEGMIR.JU TROJAN!

Covert Sys Exec malware variant

Added by an unidentified WORM or TROJAN!

System Tray access to Smilebox photo sharing/printing service

Smiley District adware

Smith Micro shared files. Comes with D-Link web cam

UserMonitor from Neuber. Teachers can broadcast screen to other screens, see students screens in a network and detect unauthorized software

TOSHIBA Zooming Utility - allows "automatic" zoom feature in some appications, like IE, MS-Office, WMPlayer, Adobe Reader and also desktop icons

Smart Phone Recorder demo from KenGolf.com. Answering Machine, Caller ID, Call Recording

"Set Up My PC" utility supplied with some Packard Bell computers

Added by the AGOBOT-UA WORM!

Added by the AGOBOT.MT WORM!

Added by the IROFFER.CT TROJAN!

Microsoft Systems Management Server - used to manage computers on a network remotely

When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)

Unidentified malware

This program assigns a user to a Systems Management Server site

SmsDiscount - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

Helper utility for Motorola based SM56 software modems - resides in the System Tray

Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended, see here

Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended, see here

Added by an unidentified WORM or TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended, see here

Detected by McAfee as the FAKEALERT-AH TROJAN! See here. Installed with the SpyBurner spyware remover - which is not recommended, see here

Added by a variant of the SDBOT WORM!

Smith Micro HotFax - fax software

Added by the BANKER-CO TROJAN!

Added by the AGOBOT-SX WORM!

Added by the FLOOD.F TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "Catroot" subfolder

Added by the ALADINZ.F TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!

Added by the AGENT-TR TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the BOROBOT-J TROJAN and variants! Note - this is not the legitimate smss.exe process which should not normally figure in Msconfig/Startup!

Added by the RBOT.OP WORM!

Added by the IRCBOT-ACC TROJAN!

Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Unidentified malware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in Program FilesWindows Media PlayerSkinsWindowsMediaSkinDataLevel4 folder

Added by the SDBOT.ZD WORM!

Added by the AGOBOT.MQ WORM!

Hijacker, detected by Norton antivirus as Trojan.StartPage.O

Added by the CLICKER-C BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a "Template" subfolder

Adult content dialler

Part of the Iolo System Mechanic optimization tool

Added by an unknown WORM or TROJAN!

Added by an unknown WORM or TROJAN infection

Win-Spy keyboard logger/monitoring software - remove unless you installed it yourself

StartMake.com toolbar

Added by a variant of the RBOT WORM!

SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?

AdvancedCleaner misleading security software - not recommended, see here

Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility

"SnagIt lets you capture, edit, and share exactly what you see on your screen - fast"

Snapfish Media Detector - "Upload your photos to Snapfish, where you can store and share your photos for free on line"

Snapfish Media Detector - "Upload your photos to Snapfish, where you can store and share your photos for free on line"

Added by the FORBOT-EG WORM!

??

UpSpiralBar adware

Added by the DLUCA-I TROJAN!

Unidentified "Snapshot Viewer"- what does it do and is it required?

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the B1LD0 AIM WORM!

Added by the GEMA TROJAN!

Driver for DualCam cameras - that combine the best features of a digital still camera and a webcam

Part of Symantec's LiveUpate (eg, Norton). Not required if you run manual updates but probably require if you leave them to run automatically. Also, if one runs a small office network and SNDMon is disabled on one of the computers ? then other computers disappear from the network for this computer, including shared devices like printers and scanners. Hence the "U" recommendation

Added by the GEMA TROJAN!

Part of Norton Personal Firewall and Norton Internet Security - what does it do and is it required?

Spy Sheriff/SpywareNO malware, also detected as the SPYHOAX-A TROJAN, pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE, NS6281400.so, CVXH8JKDQ2.EXE, down3.exe, sefe.exe, winstall.exe, and tool2.exe

The Snipping Tool (part of the Experience Pack for Tablet PC) allows you to easily "cut out" anything on screen and share it with other people. The whole screen becomes an "inkable" surface that you can add comments to and mark up however you like. You can then save that annotated image to use later, or send it to someone else in an E-mail message

SpyNoMore anti-spyware

Anti-keylogging software made by SnoopFree Software

Added by the ZAPCHAS-O TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Digital camera related

Sonix PC Camera Monitor MFC Application. What does it do and is it required?

CameraMonitor MFC Application. Appears to be related to a USB connection to a digital camera -is it required?

Sonix Inc. Camera Monitor MFC Application

Launches a screensaver program from Second Nature

Added by the Nunci premium rate dialer

Added by an unidentified WORM or TROJAN!

StarOffice 5. See here for more details

StarOffice 5. See here for more details

PurityScan/Clickspring adware

Added by a variant of the RBOT WORM!

Added by the SDBOT TROJAN!

Added by the DAEMONI-E TROJAN!

Added by the DAEMONI-E TROJAN!

Used by the IBM Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software

Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).

Added by the LOVGATE.AO WORM!

Added by the LOVGATE.E WORM!

Added by the KARDPHISHER TROJAN!

Softany Monitor Control - "control your computer's monitor and screensaver"

System Tray access to SoftGrid from Microsoft - "the only virtualization solution that delivers applications that are never installed and dynamically delivered, on demand"

Added by the RBOT-ANB WORM!

Softick PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

AzureBay wallpaper changer

Added by the CRABTON-B TROJAN!

SoftStop misleading security software - not recommended, see here

eAcceleration Stop-Sign security software related. Previously not recommended, see here

Task scheduler for SolidWorks 3D CAD software

Solo Antivirus

Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis

Solo antivirus System Integrity Check - Monitors system registry, system.ini, win.ini and startup to protect you from new Internet Worms and Backdoors

Searchcentrix hijacker

Online Video Add-on - masquerades as a helper application for watching videos. In reality, though, it installs a rogue anti-spyware, or SmitFraud, application on your computer

Netproject malware

Sound related options

Added by a variant of the SDBOT WORM!

Sonic Focus - "enhances music, movie and game sound by analyzing compressed audio streams in realtime, then restoring and enriching audio back to its original performance qualities"

Quickstart for the discontinued Sonique audio player. Available via Start -> Programs

Now superseeded by ColorWizzard - 3Deep corrected lighting, shading and color for all your 2D and 3D games. Possibly a registration reminder?

Added by the STARTPAGE.Q TROJAN!

Added by the QQROB-DC TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the LEWOR-J TROJAN!

Application launcher from the Sony Ericsson PC Suite for their mobile phones

Related to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems

??

Possibly related to Sophocles Screenwriting Software?

SoftwareOnline Intelligent Downloader - "Bundle engine to enable download of end user approved third party applications and reporting of installs for billing purposes only". Said to monitor user's browsing habits and display pop-up ads

Added by the PHILIS VIRUS!

SuperOffice related. What does it do and is it required?

Added by the AGOBOT-BV WORM!

Added by the AGOBOT.GG WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by the GAOBOT.AFJ WORM!

CoolWebSearch parasite variant

Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?

Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?

Control panel item for a Terratec soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?

Added by the QQROB-AAL TROJAN!

System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel

Added by the AGOBOT.HM WORM! Note - this is not the legitimate SiS or Realtek file of the same name that is located in the Windows or WINNT directory

Added by the RBOT-AIU WORM!

System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel

Added by the RIZON-A WORM! Note - this file is placed in the Startup folder itself, and has NO relation to SoundMax sound cards!

Added by a variant of the SDBOT WORM!

SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments

Added by the AGENT.PGV WORM!

Added by the DEDLER-G TROJAN!

Added by the STRATION-FW WORM!

CoolWebSearch Tapicfg parasite variant

Added by the AGOBOT-MD WORM!

Added by a variant of the CRYPTER.C TROJAN!

Added by the AGOBOT-ZV WORM!

Trojan downloader

Added by the AGOBOT-ND WORM!

Added by an unidentified WORM or TROJAN!

Used to update Gateway registry settings for System Restoration Kit and Web update programs

IE search hijacker - changes the default search to http://www.gocybersearch.com/

Malicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here for more and a fix

Added by the Startpage.M hijacker

Added by the ABLANK-W and ABLANK-Z TROJANS!

SP TimeSync lets you synchronize your computer's clock with any Internet atomic clock (time server)

Added by the GRAYBIRD.E TROJAN!

Changes limit of concurrent TCP connections of Windows Service Pack 2

Added by a variant of the RANDON.AN WORM!

Added by the RBOT.BJO WORM!

Added by the ALUROOT.A TROJAN!

Added by the DLUCA-M TROJAN!

Added by the SMALL.ABW TROJAN!

Added by a variant of the RBOT WORM!

SP2Update adware! Tracks URLs visited and search terms entered into Internet Explorer

Hotbar adware

Added by the SDBOT.AOU WORM!

Spam Sleuth E-mail spam detection program

Hotbar adware

SPAMfighter anti email spam filter

Spamihilator - spam filter

SpamPal - anti-spam tool

Intermute SpamSubtract - junk email detection and removal program

InterMute™ SpamSubtract - junk email detection and removal program. InterMute™ is now part of Trend Micro and their products are no longer supported

Spare Backup - "Once Spare Backup is installed, backups are automatic. With Spare Backup it's easy, you don't even have to select files for backup, Spare Backup does it for you"

Spark instant messaging client

SparVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

IconAds adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "spads.dll" file is located in the Winnt or Windows folder

AdRotator adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sprt_ads.dll" file is located in the Winnt or Windows folder

NetZero Search Enhancement related

NetZero Search Enhancement related

NetZero Search Enhancement related

Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel."

Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly

Added by the NETSKY.G WORM!

SpecialOffers adware

SpecialOffers adware

Added by a variant of the SDBOT WORM!

Software for a Creative sound card

Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled

Added by the OPASERV.AD WORM!

Speed It Up - "all in one Speed Booster designed to significantly increase the speed of your computer and boost your PC available memory"

Installs PC-Checkup and Search Defender (which is detected by DrWeb as the STARTPAGE.ORIGIN TROJAN) without permission

"Speed-It-Up Extreme is designed to speed of your computer up to 3 times faster and boost your PC available memory"

Additional keyboard shortcuts on MS programmable keyboard

Application measuring upload and download speed

SpeedOptimizer is designed to optimize and speed-up your Internet data transmission including browsing, streaming, downloading, uploading and e-mail communication

Wireless management utility for the Speedport W 100 Stick WLAN USB stick

Identified as a variant of the TrojanDownloader.Matcash malware

SpeedswitchXP is a CPU frequency control for notebooks running Windows XP

For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)

Older version of SpeedUpMyPC from Uniblue - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance"

Added by the OPASERV.Y WORM!

Added by the OPASERV.AD WORM!

Added by the OPASERV.AD WORM!

Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used

System Tray access to Spiceworks - which "combines everything you need to manage IT in one easy-to-use application"

DrWeb antivirus Spider Mail e-mail scanner

"Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness". Available via Start -> Programs

Added by the YENO.B and YENO.C WORMS! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "OXNEY.B.VBS" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Related to Creative audio products. What does it do and is it required?

Premium rate adult content dialler

Spoke Software client application. Spoke "uses data in your e-mail and other enterprise information systems to discover the existing relationships of people in your enterprise. It then builds a private, secure relationship network for each user without any additional manual data entry"

Added by the SOULJET TROJAN!

Added by the RANKY.R TROJAN!

WhileUSurf adware

Added by the SDBOT-KD WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

RapidBlaster variant (in a "spool" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the BANKER-FR TROJAN!

RapidBlaster variant (in a "spool" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the ASSASIN-F TROJAN!

Added by the PERDA-D TROJAN!

Detected by PCTools as the IRCBOT.BSQ TROJAN! See here

Added by the JOINER.C1 TROJAN!

Added by the SDBOT-ABG TROJAN!

Added by the POEBOT-J WORM!

Added by the LINKBOT.M WORM!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the SDBOT-MM WORM!

Added by the EHKS.21 keylogger! Note - the "I" between "o" and "3" is a capital "i" not a lower case "L"

Added by the LEGMIR-ARO TROJAN!

Added by the KASSBOT-C WORM!

Added by the SDBOT-PN WORM!

Added by the AGOBOT-CS WORM!

Added by an unidentified WORM or TROJAN! Located in %System%

Added by the CIADOOR.121 VIRUS! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%

Added by the SMALL-AW TROJAN!

Added by the DLOADER-FI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "HELP" subfolder of the Winnt or Windows folder

Added by the FUJACKS-M WORM!

Added by the ZAPCHAS-EE TROJAN! Note - this is not the legitimate spoolsv.exe which is always located in %System%. This one is located in %Windir%\Temp\spoolsv

Identified by Kaspersky antivirus as a variant of the QHOST.AES TROJAN!

Added by the ASSIRAL WORM!

Added by the RBOT-AHP WORM!

Added by the CWS-I or HAZIF-B TROJANS!

Added by the DROPPER-AT TROJAN!

Added by the AGENT-AU TROJAN!

Added by a variant of the AGENT-AU TROJAN!

Added by the SDBOT.EGQ WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by the DLOADER-RK TROJAN!

Added by the STARTPAGE.K hijacker

Searchcentrix hijacker

Added by the SDBOT.AUS WORM!

Added by the SPORE.A WORM!

Added by the SPORE.B WORM!

??

IE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/

Associated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example. Is it required or can it be started manually?

Novatel wireless modem related. What does it do and is it required?

Sprite Backup is a backup application for Windows Mobile Pocket PC or Smartphone

Added by the SPROCIT TROJAN!

Detected by Kaspersky as the FRAUDLOAD.VATF TROJAN! See here

Self-help support tool for a number of high-speed internet providers and computer suppliers such as Comcast, Qwest and Dell. Identifies and automatically fixes typical problems that may occur with your high-speed internet service. Provided by SupportSoft, Inc

Rabio "Search Enhancer" adware variant

Smart Protector Pro - internet privacy tool that erases tracks, MRU lists, etc

Softprobe - program designed to provide managers with an analysis of an individuals computer use who are under their supervision. This program is NOT related to Winpup

SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all

Included in the full version of Security Task Manager, Spy Protector prevents keyboard and mouse monitoring, warns when the registry is changed and eliminates internet activity and work traces

Spy-Control spyware remover - not recommended, see here

SpyKeylogger keystroke logger/monitoring program - remove unless you installed it yourself!

SpyAway spyware remover - not recommended, see here

SpyAxe spyware remover - not recommended, see here. For removal instructions see here

SpyBan spyware remover - not recommended, see here

Spyware killer that is in effect autoinstalled foistware, targeted by SpyBot, among others

SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all

SpyBlocs spyware remover - not recommended, see here

SpyBlocs spyware remover - not recommended, see herea>

TeaTimer is a permanent process and registry monitor of the Spybot S&D system protector which perpetually monitors the processes called/initiated. Detects processes wanting to start and gives you options on how to deal with this process in the future

Spybot - Search & Destroy - free multi-spyware removal tool from Safer Networking Ltd.

RapidBlaster variant (in a "Spybott" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "Spybott" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

SpyBurner spyware remover - not recommended, see here

1 Click Spy Clean uses a database that was stolen from SpybotS&D. Not recommended, see here

SpyClean spyware remover - not recommended, see here

SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan

SpyEmergency security software from Netgate

Added by the PRSKEY-A WORM!

SpyFighter spyware remover - not recommended, see here

SpyFighter spyware remover - not recommended, see here

SpyGuarder spyware remover - not recommended, see here

Spyware remover - not recommended, see here

Smitfraud variant

Enigma SpyHunter - not recommended, see note

Spyware remover - older versions are not recommended, see here

SpyLax spyware remover - not recommended, see here

SpyLocked spyware remover - not recommended, see here

SpyLocked spyware remover - not recommended, see here

SpyMaxx spyware remover - not recommended, see here

SpyMedic spyware remover - not recommended, see here

A "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers 'TrekData' and 'Blue Haven Media', who distribute spyware through ActiveX drive-by-download on web pages

SpyOnThis Monitor spyware remover - not recommended, see here

Spyware Process Detector misleading security software - not recommended

SpyPry spyware remover - not recommended, see here

SpyQuake2 spyware remover - not recommended, see here

SpyRid spyware remover - not recommended, see here

SpySheriff malware

SpyShredder spyware remover - not recommended, see here

SpySpotter spyware remover - not recommended, see here

SpySpotter spyware remover - not recommended, see here

SpyStopper - blocks intrusive spyware, Web bugs, worms, scripts, advertisements, and cookies. Protects you from being profiled and tracked

SpySubtract - multi spyware removal tool

Spy Sweeper - detects and removes spyware

Spy Sweeper - detects and removes spyware

User interface for Spy Sweeper Enterprise edition - "a centrally managed, scalable enterprise solution that provides best of breed protection against all types of malicious spyware, adware, and other harmful intruders"

SpyTrooper - malware posing as a spyware remover, see here

BPS spyware remover - not recommended, see here

Spyware BeGone - spyware removal utility. Previously not recommended, see here

Spyware BeGone - spyware removal utility. Previously not recommended, see here

Spyware Doctor spyware remover

Spyware Doctor spyware remover

"SpywareGuard provides a real-time protection solution against spyware"

Spyware removal program by TrekBlue. Previously not recommended but the latest version was delisted here

Spyware removal program by TrekBlue. Previously not recommended but the latest version was delisted here

Unidentified, but not known to belong to any known spyware remover, and strongly suspected to be adware related!

Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here

Acronis Privacy Expert Spyware Shield prevents spyware and other suspicious programs from being installed on PCs

Spyware Slayer spyware remover - not recommended, see here

SoftStop misleading security software - not recommended, see here

Spyware Stormer spyware remover - not recommended, see here

Ascentive Spyware Striker Pro rogue spyware remover - not recommended, see here

SpywareSweeper spyware remover - not recommended, see here

Spyware Vanisher - spyware removal utility. Previously not recommended, see here

Spyware X-terminator - spyware remover

Spyware-Cop spyware remover - not recommended, see here

SpywareBomb spyware remover - not recommended, see here

SpywareBot spyware remover - not recommended, see here

Spyware Fighter - anti spyware program

"SpywareGuard provides a real-time protection solution against spyware"

Startpage adware Trojan

Added by a variant of the Win32.Small TROJAN! - Do NOT confuse with the legitimate SpywareGuard application

RapidBlaster variant (in a "Spyguard" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "Spyguard" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

StartPage.ht homepage hijacker

SpywareIsolator spyware remover - not recommended, see here

SpywareKilla spyware remover - not recommended, see here

SpywareLocked spyware remover - not recommended, see here

SpywareLocked spyware remover - not recommended, see here

SpywareNo spyware remover - not recommended, see here

SpywareQuake spyware remover - not recommended, see here

SpywareRemover spyware remover - not recommended, see here

SpywareStrike spyware remover - not recommended, see here

SpywareSweeper spyware remover - not recommended, see here

Spyware Terminator - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here

BPS spyware remover - not recommended, see here

SpyWatchE spyware remover - not recommended, see here

Xupiter SQWire toolbar related. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here

Xupiter SQWire toolbar related. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here

Added by the PUNYA-B WORM!

SQL Server Service Control Manager. Available via Start -> Programs

Added by the RBOT-ADF

Added by the PROGENT-B TROJAN!

Xupiter SQWire toolbar related. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here

Free_Scratch_Cards foistware

Related to Secure Resolutions - desktop virus protection

Related to Secure Resolutions - desktop virus protection

Found on a Dell computer, in a Documents and SettingsAll UsersApplication DataDellAlert2 subfolder

Added by the AGENT.X TROJAN!

SearchFast adware downloader

CoolWebSearch parasite variant - also detected by Kaspersky as the AGENT.FC TROJAN!