| Name | Status | Filename | Description |
|---|
| spoolv | X | spoolv.sys | Added by the TROJ_ROOTKIT.S
TROJAN!
Read the link, rootkit type stealth involved.
|
| Sprint PCS v3 Utility Service | L | CMSPCSUtilSvc.exe | Related to Sprint_PCS_Connection_Manager Service Utility. Note: Located in \%Program Files%\Sprint\Sprint PCS Connection Manager\ |
| Spss License Manager (SpssLM) | L | spss_lmd.exe | http://www.spss.com/spss/licensing.htm |
| Spy Emergency Shield Service (SpyEmrgSrv) | L | SpyEmergencySrv.exe | Related to Spy_Emergency from NETGATE Technologies. Security software. Note: Located in C:\Program Files\NETGATE\Spy Emergency 2006\ |
| Spy-Keylogger (SpyKeyloggerService) | X | skls.exe | Identified as Spyware.SpyKeylogger SPYWARE! Spyware.SpyKeylogger is a security risk that records keystrokes. Must be manually uninstalled via Start\settings\control panel\Add_Remove programs. |
| SpyDetectSVC | L | SpywareDetectorSVC.exe | Spyware Detector, Adware/Spyware remover - initially considerered a "rogue" program. The latest version has since apparently mended its ways: see note |
| Spyware Doctor Auxiliary Service (sdAuxService) | L | svcntaux.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Doctor Enterprise Client | L | EntClient.exe | Related to Spyware_Doctor Enterprise Client from PC Tools. Note: located in \%WINDIR%\EMClient\ |
| Spyware Doctor Service (sdCoreService) | L | swdsvc.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Terminator Clam Service (sp_clamsrv) | L | sp_clamsrv.exe | Part of Spyware Terminator, located in %program files%\WinClamAVShield |
| Spyware Terminator Realtime Shield Service (sp_rssrv) | L | sp_rsser.exe | Related to SpywareTerminator Spyware Remover. Note: Located in C:\Program Files\Spyware Terminator\ |
| SpywareCleanerService | O | SCService.exe | Owner:Secure Computer, LLC. May show as Unknown owner. Related to Spyware Cleaner Note: Not recommended. |
| SQL Server (MSSMLBIZ) (MSSQL$MSSMLBIZ) | L | sqlservr.exe | Microsoft SQL Server 2005 Express that is installed with Accounting Professional and with Accounting Express from Microsoft. |
| SQL Server (MSSQLSERVER) (MSSQLSERVER) | L | sqlservr.exe | Related to Microsoft_SQL_server
suite. |
| SQL Server (SQL2005) (MSSQL$SQL2005) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server Agent (MSSQLSERVER) (SQLSERVERAGENT) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Agent (SQL2005) (SQLAgent$SQL2005) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Analysis Services (SQL2005) (MSOLAP$SQL2005) | L | msmdsrv.exe | Related to Microsoft_SQL_server suite. |
| SQL Server FullText Search (SQL2005) (msftesql$SQL2005) | L | msftesql.exe | Related to Microsoft_SQL_server suite. |
| sql-smss | X | sql-smss.exe | Added by the W32/Tilebot-GI WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqldps | X | sqldps.exe | Added by the W32/Tilebot-GV WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlmanagement | X | sqlmanagement.exe | Added by the W32/Tilebot-GB WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlserver (sqlserver) | X | sqlserv.exe | Added by the SDBOT.BZO
WORM!
Read the link, rootkit type stealth involved.
|
| SQLSERVERAGENT | L | sqlagent.EXE | Related to Microsoft SQL Server |
| sqlsrvd (sqlsrvdaemon) | X | _sqlexec.exe | Possible new variant of W32.Spybot.NLX. Location: C:\Windows (9X\XP) or C:\Winnt (NT\2000). See Symatec |
| SRS Labs License Service | L | srslabslicenseservice.exe | Related to SRS_Labs Audio Service. Note: Located in C:\Program Files\Common Files\SRS Labs Shared\ |
| ssdfghjkl | X | NETDDF.EXE | Added by the SDBOT.BXN
WORM!
Read the link, rootkit type stealth involved. |
| SSH Client for Windows | X | winshp.exe | Win32/Duiskbot.BE
Note: Located in %System%\dllcache\ |
| SSMFramework (MSMFramework) | L | VivaldiFramework.exe | Related to Dell SAS RAID Storage Manager, Note: Located in \%Program Files%\\Dell SAS RAID Storage Manager\Framework\ |
| SSMGS Service (SSMGService) | L | ssmgs.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
| ssms | X | SMSS.EXE | Added by the SPYBOT.ADJ
WORM!
Note: This is not the legitimate Windows process SMSS.EXE (Which is always found in the System32 folder.) This worm file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| SSO Plus | L | pgpwdmon.exe | http://www.passgo.com/products/sso/index.shtml |
| SSODL: eplrr | X | eplrr3.dll | hijacker/trojan |
| SSODL: Sysctl Desktop Handler | X | ntosv.dll | seems to replace the users desktop with an error message regarding spyware |
| SSODL: SystemCheck2 | X | vbsys2 | can also be vbsys/vbsys2 with or without .exe extension.
trojan related |
| ssrvc | L | ssrvc.exe | Program from Advanced Systems International SAC regarding usb removable storage devices, For more info See_Here
|
| Standalone.exe (Standalone) | X | standalone.exe | Added by the W32/AGOBOT-ADS WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Read the Topic here |
| Stardock WindowBlinds (WindowBlinds) | L | VistaSrv.exe | Related to WindowBlinds Note: Located in \%Program Files%\Stardock\OBJECT~1\windowblinds\ |
| Start BT in service | L | StartSkysolSvc.exe | Related to Start_BT Bluetooth service from IVT Corporation. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\ |
| starter (Protector) | X | scvhostingg.exe | Added by the W32/Forbot-FB
WORM!
|
| StarWind AE Service (StarWindServiceAE) | L | StarWindServiceAE.exe | Related to StarWind from Rocket Division Software. Note: Located in \%Program Files%\Alcohol Soft\Alcohol 120\StarWind\ |
| StarWind iSCSI Service (StarWindService) | L | StarWindService.exe | StarWindService.exe
is a process which belongs to Alcohol 120% DVD/CD emulation and burning software and provides network drive sharing capabilities to this product. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems. |
| Stateless Packet Filtering (PktFilter) | L | pktfltsrv.exe | Part of PktFilter |
| stchost.exe (moto) | X | stchost.exe | Added by the Troj/Vixup-L
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder.
|
| Steam Client Service | L | SteamService.exe | Related to Valve Software's STEAM broadband game client. Note: Located in \%Program Files%\Common Files\Steam\ |
| Steganos AntiTheft (SatSrv) | L | SatSrv.exe | Related to Steganos Security Suite. Note: Located in \%WINDIR%\System32\ |
Steganos Live Encryption Engine (Version 503) [Service]
(SLEE_503_SERVICE) | L | SLEE503.exe | Related to Steganos live Encryption Engine. |
Steganos Live Encryption Engine 8.1 [Service]
(SLEE_81_SERVICE) | L | SLEE81.exe | Part of Steganos security suite |
| STI Simulator | L | PAStiSvc.exe | Related to STI_Simulator From SystemsTech. Note: Located in C:\WINDOWS\System32\ |
