| Name | Status | Filename | Description |
|---|
| S3 Graphics Co., Ltd. | X | VTTrayp.exe | W32/Sdbot-DHA Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (Vista/XP/WinNT/2K) |
| s3contrl (32-bit) | X | VTTray.exe | Added by a variant of the Backdoor.Win32.SdBot.cep family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\ |
SafeBoot Configuration Manager (SafeBootConfigurationManager) | L | SBMGRNT.EXE | Related to SafeBoot_Configuration Manager. Encryption software. Note: Located in \%Program Files%\SafeBoot\ |
| SafeBootAgent | O | srvany.exe | Microsoft Windows application which allows an executable to be run as a service. If you have installed this service, fine, otherwise investigage. Can be used to load Malware. |
| SafeGuard Easy Client (SgeClient) | L | SgeClient.exe | Related to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\Program Files\Utimaco\SafeGuard Easy\ |
| SafeGuard Easy Workstation Server (WksCfgSrv) | L | WksCfgSrv.exe | Related to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\Program Files\Utimaco\SafeGuard Easy\ |
| SafeGuard SGLOG Player (SgLogPlayer) | L | SgLogPlayer.exe | Related to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\WINDOWS\system32\ |
| SafeNet IKE Service (IREIKE) | L | IreIKE.exe | Related to Microsoft Virtual Private Network Client. |
| SafeNet Monitor Service (IPSECMON) | L | IPSecMon.exe | Related to Microsoft Corp. Feature of the Layer Two Tunneling Protocol (L2TP). |
| Samsung Update Plus | L | SLUBackgroundService.exe | Related to Samsung_AV_Station instant Playback of music photos, videos. |
| SAMSvc (Security Account Manager) | X | SAMSvc.exe | Added by the W32/Tilebot-DL, WORM! |
| Sandboxie Service (SandboxU) | L | SandboxieServer.exe | Related to SandBoxie Sand box application. Data may flow from the hard disk into the sandbox. But data never flows back from the sandbox into the hard disk. Note: Located in C:\Program Files\Sandboxie\ |
| Sandboxie Service (SbieSvc) | L | SbieSvc.exe | Related to Sandboxie Service. Intercepts changes to both your files and registry settings, making it virtually impossible for any software to reach outside the sandbox. Note: Located in \%Program Files%\Sandboxie\ |
| Sandra Data Service (SandraDataSrv) | L | RpcDataSrv.exe | SiSoftware Sandra Lite 2005 |
| Sandra Service (SandraTheSrv) | L | RpcSandraSrv.exe | SiSoftware Sandra Lite 2005 |
| Sansa Updater Service (SansaService) | L | SansaSvr.exe | Related to Sansa_Updater Service from Sandisk. Note: Located in C:\Program Files\SanDisk\Sansa Updater\ |
| SAP Business One BackUp Service (SBOBackUp) | L | B1backUp.exe | L
Related to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\BackUp\ |
| SAP Business One DI Server (SBODI_Server) | L | B1DI_Server.exe | Related to SAP_Business_One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\DI_Server\ |
| SAP Business One Early Watch Alert (B1EwaService) | L | EwaService.exe | Related to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\EWA\EwaService.exe |
| SAP Business One License Manager 2005 (B1Lic2005) | L | B1License.exe | L
Related to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\License\ |
| SAP DB WWW (SAPDBWWW) | L | wahttp.exe | Related to SAP_MaxDB The SAP Database System. Note: Located in \%Program Files%\SAPDB\indep_prog\web\pgm\ |
| SAPDB: WEB (SAP DBTech-WEB) | L | kernel.exe | Related to SAP_MaxDB The SAP Database System. Note: Located in \%Program Files%\SAPDB\DEPEND\pgm\ |
| SAVRoam (SavRoam) | L | SavRoam.exe | Related to Norton/Symantec AntiVirus |
| SAVScan | L | SAVScan.exe | Related to Norton AntiVirus Note: Located in \%Program Files%\Norton Internet Security\Norton AntiVirus\SAVScan.exe |
| sbchosy.bat | X | sbchosy.bat | Added by the Troj/GrayBir-AA
TROJAN!
Note: This trojan file is found in the Windows\Program Files or Winnt\Program Files folder. |
| SBHookSvc | L | SBHookSvc.exe | Related to Motive_Communications Broadband service. Note: Located in C:\PROGRAM FILES\NETASSISTANT\SMARTBRIDGE\ |
| SBRLLA For FM Advisor (SBRLLA) | L | SBRSVC.EXE | Related to SBRLLA_For_FM_Advisor FUJITSU computer. Note: Located in \%Program Files%\Fujitsu\sa\api\ |
| SBSD Security Center Service (SBSDWSCService) | L | SDWinSec.exe | Related to SpyBot_and_Destroy Security Center Service integration with Vista Windows Security Center. Microsoft ships Windows Defender with Vista, however, Spybot-S&D can now easily integrate into the Vista Security Center; which will then monitor if Spybot-S&D is up-to-date and whether the permanent protection (TeaTimer) is running or not.
This update will only show on Vista systems, since previous Windows versions do not offer anti malware integration into WSC. Note: Located in \%Program Files%\Spybot - Search & Destroy\ |
| SCA (Service Control Application) | X | SYSTEM.EXE | Unknown virus |
| scheduler (schedul3.exe) | X | schedul3.exe | Added by the W32/Rbot-AVX
TROJAN! Note: This worm\trojan file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved. |
| Scheduling Agent (Mstinit) | X | mstinit.exe | Added by the W32/Tilebot-IO WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| schscnt | L | schscnt.exe | Related to Command AntiVirus for Windows Component, made by Command Software Systems, Inc. Which merged with Authentium
in 2002.
|
| SCNDmem (winlow) | X | winlow.sys | Added by the Troj/Haxdoor-AF TROJAN! |
| Scorer Service (ScorerService) | L | stscor.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
| Scribe AdminServer | L | AdminServer.exe | Related to Scribe Admin. Server. Data integration between Salesforce and Microsoft Dynamics GP. Note: Located in \%Program Files%\Scribe\ |
| ScriptBlocking Service (SBService) | L | SBServ.exe | Related to Norton/Symantec AntiVirus. |
| ScriptLogic Service (SLClient) | L | slClient.exe | Related to ScriptLogic Remote management and control for I.T. personnel. Note: Located in \%WINDIR%\System32\ |
| ScsiAccess | L | ScsiAccess.EXE | Alcohol Software's CD/DVD writing application |
| SCSMS32 (SCSMS) | X | scmsm32.exe | Added by the SDBOT.CCN
or SDBOT.CEZ
WORM!
Read the link, rootkit type stealth involved.
|
| SCWatch 4.0 | L | scwatch4.exe | Related to White Canyon - protect against identity theft software. - http://www.whitecanyon.com/index.php |
| SDCAgent | L | ESRVANY.EXE | Related to Service_Deliver_Center from IBM Global Services, SRM (Server Resource Management). Note: Located in \%Program Files%\SDC\ |
| SDJB Manager | L | sdjbmgr.exe | Panasonic\SD-JukeboxV3 |
| sdk | X | lsass.exe | W32/Sdbot-DEF Read the link, allows remote access |
| sdktemp | X | Microsoft.exe | Added by the SDBOT.CGM
WORM!
Read the link, rootkit type stealth involved.
|
| sdktemp (sdktemp) | X | SDKTEMP.EXE | Added by the W32/Tilebot-A
WORM!
Read the link, rootkit type stealth involved.
|
| sdktemp (sdktemp) | X | axdcfasb.exe | Added by the W32/Sdbot-AGI
WORM!
Read the link, rootkit type stealth involved.
|
| SDPAUMS server service | L | sdpasvc.exe | Matsushita Electric Industrial Co.,Ltd. |
| SDService | L | SDService.exe | Related to Spyware_Detector from Max Secure. Note: Located in C:\Program Files\SpywareDetector\ |
| Seagate Communication | X | seagatecom.exe | Added by the W32/Spybot-NF WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| Seagate Page Server (pageserver) | L | pageserver.exe | Related to Seagate Page Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\ |
| Seagate Web Component Server (WebCompServer) | L | WebCompServer.exe | Related to Seagate Web Component Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\ |
| Search Engine Commando Schedule Service | L | ScheduleService.exe | Related to Search Engine Commando |
| Secdrv | X | secdrv.sys | Troj/Pushu-Gen
Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) May also have an additional services installed. Read link |
| Secondary .NET Framework (SVSNET) | X | svsnet.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Secure (Secure Windows NT) | X | secure.exe | Identified as the Backdoor.Win32.Iroffer malware. Note: Located in \%WINDIR%\System32 |
| Secure Port Server (Server Administrator) | L | omaws32.exe | Related to Dell Open Management system.
http://www.what-process.com/process-info.aspx?p=omaws32.exe |
| Secure Socket Layer | X | ssls.exe | Added by the W32/Spybot-NE WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| Secure SSL System (Secure) | X | securessl.exe | Added by the Haxdoor.Fam HAXDOOR!
Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Securemaker Disk Defragmenter Service (smdefrag) | L | smdefrag.exe | Related to Securemaker Tool to clean your computer of unwanted files and much more. Note: Located in \%Program Files%\SECUREMAKER\ |
| Security Accounts Center (Security Accounts Center) | X | windowo.exe | Added by the Troj/Bckdr-AWQ
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder. |
| Security Accounts Manager (SamSs) | L | lsass.exe | Related to Security_Accounts_Manager for servers. Note: Located in \%WINDIR%\system32\ |
| Security Accounts Manages | X | TIMPlatform.exe | Troj/Delf-EWW |
| Security Agent (scagent) | X | scagent.exe | Added by the Troj/Dload-LV TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Security Logs Service (SLSVS) | X | SM1OGSVC.EXE | Added by the Troj/Tenant-A
TROJAN!
Note: This trojan file is found in the System32 folder. |
| Security Platform Management Service (IFXSpMgtSrv) | L | IFXSPMGT.exe | Related to Security_Platform_Management Service from Infineon Technologies. Note: Located in C:\WINDOWS\system32\ |
| Security Service (JVWC) | X | svchost.exe | Added by a variant of the TrojanProxy:Win32/Chumpoke.gen!A malware Note: This worm\trojan is located in \%WINDIR%\System32\svcd\ |
| Security System Manager | X | spoolvc.exe | W32/Sdbot-DCW Read the link, allows remote access |
| Security Task Manager | X | spoolvc.exe | Added by the W32/Tilebot-IX WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Security Windows services (WinSecurServ05) | X | svchost.exe | Unknown malware Note: Located in \%WINDIR%\System32\\Microsoft\ This infection should not be confused with the legitimate \%WINDIR%\System32\svchost.exe file. Note: Use SDFix under supervision. |
| Security_Service | L | TmrService.exe | Related to Child Control 2007
Lets you set time limits for the PC and the Internet, and block or filter unwanted Internet content.
Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
Securom User Access for Windows 2000 and Windows XP a technology by Sony DADC (UserAccess) | L | useraccess.exe | Related to Sony DADC Blu-ray Disc is the next generation optical disc format. |
| SecuROM User Access Service (V7) (UserAccess7) | L | UAService7.exe | Used by virtual CD programs like Alcohol to access CD images protected by SecureROM. |
| Senao Network Controller | X | winsno.exe | W32/Vanebot-AU Read the link, steals information |
| Sentinel Keys Server (SentinelKeysServer) | L | sntlkeyssrvr.exe | Related to Sentinel_Keys_Server from SafeNet Inc. Disks and Files encryption. Note: Located in \%Program Files%\Common Files\SafeNet Sentinel\Sentinel Keys Server\ |
| Sentinel Protection Server (SentinelProtectionServer) | L | spnsrvnt.exe | Related to one of the SafeNet_Inc
programs or services. |
| Sentry 2020 | L | SentryService.exe | www.softwinter.com |
| SerDgeonServer (SerDry_igeon_Server) | X | IExplore.exe | Added by the Troj/Feutel-AC
TROJAN!
Note: This is not the legitimate Windows process IExplore.exe (Which should be found in the Program Files\Internet Explorer folder.) This worm\trojan file (IExplore.exe) is found in the Windows or Winnt folder.
|
| Serv-U FTP Server (Serv-U) | O | ServUDaemon.exe | Related to Serv-U an FTP server from RhinoSoft.com NoteIf you did not install this server you should remove it. |
| Server 2.0 (Server 2.0) | X | Server.exe | Added by the Troj/GrayBrd-AN
TROJAN!
Note: This worm\trojan file is found in the Windows or Winnt folder. |
| Server Advance (ServerAC) | X | Security.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Server Management Service | X | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder.
Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) |
| Server Network Debug (SerND) | X | NetDebug.exe | W32/VB-DOS Note: Located in %windir%\system32 |
| Server VSS System | X | sysvrs32.exe | W32/Sdbot-DES Read the link, allows remote access |
| Servers Alive (salive) | L | serversalive.exe | Related to Servers_Alive a network monitoring tool |
| Service | X | Service.exe | Added by the Troj/SrchSpy-A
TROJAN!
Note: This is not the legitimate Windows process services.exe (Notice the difference in the spelling.) This trojan file (Service.exe) is also found in the System32 folder. Do not confuse the two!
|
| Service | X | Service.exe | Added by the Haxdoor.Fam HAXDOOR!
Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| SERVICE (WINDOWS) | X | spoolsvc.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service 8 (Service Filter) | X | smncs.exe | Added by the W32/Tilebot-CK WORM! which attempts to spread to remote network shares and messaging applications |
| Service Cache Terminal (SVCTERM) | X | svscache.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service Configurator (Service_v1) | X | service.exe | Added by the Backdoor.Win32.SdBot.aad TROJAN! Note: This trojan is located in \%WINDIR%\Config\ |
| Service Controller (Services) | X | services.exe | W32/Sdbot-DDT Read the link, allows remote access |
| Service Cvasvr (Service Cvas) | X | csvas.exe | Spyware Worm reported as Backdoor.Win32.SdBot.aad by Kaspersky Anti-Virus |
| Service de l'iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod |
| Service de lancement de WlanCfg (Wlancfg) | L | wlancfg.exe | Driver for wireless router. Owner: Inventel-Found in C:\Program Files\Inventel\Gateway\ |
| Service Hosts (ServiceHost) | X | shost.exe | Added by the W32/Rbot-AXG
WORM!
Note: This worm file is found in the Windows or Winnt folder.
|
| Service Ithea (itheaService) | L | itheaSvc.EXE | Related to ITHEA a french protection software. Note: Located in \%WINDIR%\System32\ |
| Service Logon Protocol (SVSLOG) | X | svslogon.exe | Added by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ |
| Service Manager | X | testing.exe | Added by a of the IRCBot family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\ |
| Service name: Messenger | X | system32.exe | See Symantec
Trojan.Esteems.B Location:
C\Windows\system\system32.exe (9X\ME) or C\Windows or Winnt\system32\system32.exe (NT\2000\XP) |
| Service name: Messenger | X | zone-h.ddo.jp.exe -k netsvcs | Trojan.Esteems.C See Symantec
Location: C:\Winnt\System32 ( NT/2000), or C:\Windows\System32 (XP). |
| Service name: Messenger | X | 514.exe | Trojan.Esteems.D See Symantec
Location C:\Windows\System32 (XP) C:\Winnt\System32 (NT\2000) |
| Service Norton AntiVirus Auto-Protect (navapsvc) | L | navapsvc.exe | Related to Norton/Symantec AntiVirus. |
| Service Request Monitor | L | RxMon.exe | Related to Roxio EasyCD Creator application. |
| Service Scheduler | X | scheduler.exe | W32/Agobot-PH See Sophos
Unknown owner: Location: C:\WINDOWS\System32\scheduler.exe -service |
| Service Security Manager (scekrnl) | X | scekrnl.exe | Added by the Backdoor.Win32.Agent.alx TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service Updater (servfjhf) | X | servfjhf.exe | Identified as Downloader.Agent.dxm by AVG Anti-Spyware Note: located in \%WINDIR%\ |
| Service1 | L | windowsserviceexample.exe | Related to Microsoft .Net Application. VB.NET_Forums |
| Service32 (Service Sequence) | X | services32.exe | Added by the W32/Tilebot-C
WORM!
Read the link, rootkit type stealth involved.
|
| Service: Access Remote PC Service 4.3 (RpcSvr4x) | O | rpcsetup.exe | Access_Remote_PC remote access software. Legitimate, but remote access could be considered dangerous unless monitored carefully. |
| Service: LicenseManagerReminder | L | LicenseManagerReminder.exe | Related to UIC License Manager a propriatiry Sofstware. Used to activate a software on customer computers for a specified length of time. Note: Located in C:\Program Files\Universal Instruments\License Manager\ |
| Service: Microsoft Net API (NETAPI) | X | ntps.exe | Added by the Backdoor.Win32.SdBot.aad as identified by Kaspersky. TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service: Network Client (nwclnta) | X | netclna.exe | Troj/Boxed-I. Owner:Unknown. Location: C:\WINDOWS\system32\netclna.exe |
| ServiceHost32 | X | ServiceHost32.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32 Note: Use SDFix under supervision. |
| ServiceLayer | L | ServiceLayer.exe | Related to Nokia Connectivity Library software. Note: located in C:\Program Files\Common Files\PCSuite\Services\ |
| serviceMangr (tcphost.exe) | X | TCPHOST.EXE | Added by the SDBOT.CSG
WORM!
Read the link, rootkit type stealth involved.
|
| services | X | services.exe | W32/Sdbot-CXP Note: Located in %windir% Read the link, allows remote access |
| Services (Ini Service Ku) | X | services.com | Troj/Winlock-C |
| Services an controller-settings | X | services.exe | Added by the W32/Tilebot-HY WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| Services Manager (svcmngr) | X | config.exe | Troj/DllLoad-C Read the link, steals information |
| services32 (Content List Management Sub System) | X | services32.exe | Added by the W32/Esbot-B
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| Servicess_Server | X | Servicess.exe | A variant of the Feutel/Hupigon infection.
Note: rootkit type stealth involved. |
| Servicio Auto-Protect de Norton AntiVirus (navapsvc) | L | navapsvc.exe | Related to Norton/Symantec AntiVirus. |
| Servicio Bonjour (Bonjour Service) | L | mDNSResponder.exe | Create's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder. |
| Servicio COM de grabacióe CD de IMAPI | L | imapi.exe | Related to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\ |
| Servicio COM de grabación de CD de IMAPI (ImapiService) | L | imapi.exe | Related to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\ |
| Servicio de alerta | L | services.exe | Spanish Windows 2000 alert service. |
| Servicio de ayuda TCP/IP NetBIOS | L | services.exe | Spanish Windows 2000 Help service TPC/IP NetBIOS |
| Servicio de fax | L | faxsvc.exe | Spanish Windows 2000 fax service |
Servicio de uso compartido de red del Reproductor de Windows Media (WMPNetworkSvc) | L | wmpnetwk.exe | Related to Windows_Media_Player Network Sharing Service.Note: Located in %ProgramFiles%\Windows Media Player\ |
| Servicio del administrador de discos lóos | L | dmadmin.exe | Spanish Windows 2000 logical disk manager administrative service |
| Servicio del administrador de discos lógicos (dmadmin) | L | dmadmin.exe | Related to Veritas logical disk manager |
| Servicio del iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servicio RunAs | L | services.exe | Spanish Windows 2000 RunAs service |
| Serviço iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servidor | L | services.exe | Spanish Windows 2000 "server" |
| Servidor de RPC de eTrust Antivirus (InoRPC) | L | InoRpc.exe | Associated with eTrust Antivirus/InoculateIT |
| Servidor de tareas de eTrust Antivirus (InoTask) | L | InoTask.exe | Associated with eTrust Antivirus/InoculateIT |
| Servidor de tiempo real de eTrust Antivirus (InoRT) | L | InoRT.exe | Related to eTrust's AntiVirus Internet Security solution. |
| Servies Unknow Srv | X | 001.exe | Win-Trojan/Downloader.6656.DW |
| Servizio iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servizio Norton AntiVirus Auto-Protect | L | navapsvc.exe | Related to Norton Antivirus |
| sessionsim | X | sssnsml.exe | Troj/Dloadr-BBB
Also creates an additional service "typemgr2" |
| settings | X | SETTINGS.EXE | Added by the SDBOT.CHY
WORM!
Read the link, rootkit type stealth involved.
|
| SF FrontLine Drivers Auto Removal (v1) (sfrem01) | L | sfrem01.exe | Related to SF_FrontLine Drivers Auto Removal from Star-Force. Note: Located in C:\WINDOWS\system32\ |
| SFTRANSFER (SFTRANSFER) | X | (Unknown at this time.) | Added by the Backdoor.Brakkeshell
TROJAN!
Note: In the Description field under Services it wil show as: Secure file transfer protocol |
| SFUSVC | L | SFUSVC.exe | KYOCERA_MITA Scanner File Utility used with Kyocera Mita scanners/faxes. Note: located in C:\Program Files\Kyocera Mita\FileUtility\ |
| SgeCtl | L | SGECTL.EXE | Utimaco Safewares SAFEGUARD |
| Sharing Messenger Folders Windows XP (SMFWX) | X | bhagent.exe | W32/Sdbot-CZS Note: Located in %windir% Read the link, allows remote access |
| Sharp Device Manager Service | L | sdmservice.exe | Related to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\sharp device manager\ |
| SharpAccountant2 | L | SharpAccountant2Service.exe | Related to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\SharpAccountant2\ |
| Shavlik HFNetChkPro Service | L | HFNetChkProService.exe | HFNetChkPro distributes Microsoft patches to client machines |
| SHDSERV | L | shdserv.exe | Horizon DataSys Rollback Rx |
| Shiva VPN Client | L | icsrv.exe | Related to Eicon Networks Corporation |
| SHOVE | X | SHOVE.exe | Troj/Agent-EOM |
| SigmaTel Audio Service (STacSV) | L | stacsv.exe | Related to SigmaTel_Audio_Service Part of the C-Major Audio driver. Note: Located in C:\Program Files\SigmaTel\C-Major Audio\WDM\ |
| Sigmatel PassThru (PassThru) | L | passthru.exe | Related to Sigmatel |
| SiS WirelessLan Service (SiSWLSvc) | L | SiSWLSvc.exe | Related to Sis_Wireless_Lan LAN controller |
| SiSoftware Database Agent Service (SandraDataSrv) | L | RpcDataSrv.exe | Related to Sandra_Lite from SiSoftware Ltd. System benchmarking software. Note: Located in \%Program Files%\SiSoftware\Win32\SiSoftware Sandra Lite XI.SP2\ |
| SiSoftware Sandra Agent Service (SandraTheSrv) | L | RpcSandraSrv.exe | Related to Sandra_Lite from SiSoftware Ltd. System benchmarking software. Note: Located in \%Program Files%\SiSoftware\SiSoftware Sandra Lite XI.SP2\
|
| Sistema de ayuda de tarjeta inteligente | L | SCardSvr.exe | The application belonging to the Microsoft Windows Operating System, which provides the authentication facilities for smart security cards on your local system. |
| SiteAdvisor Service | L | SAService.exe | Related to SiteAdvisor Service from McAfee. Note: Located in C:\Program Files\SiteAdvisor\[4 digits number\ |
| SiteMinder Authentication Service (SmServAuth) | L | Service_AuthSrvr.exe | Related to Cold_Fusion from Macromedia, inc. |
| SiteMinder Authorization Service (SmServAz) | L | Service_AzSrvr.exe | Related to Cold_Fusion from Macromedia, inc. |
| Skype Messenger (Skype) | X | skype32.exe | Added by the W32.Mytob.ML
WORM!
Note: This worm file is found in the System32 folder.
Read the link, rootkit type stealth involved. |
| Sleepy | L | service.exe | Related to Sashazur LLC A utililty to prevents computer use at night. For schools, libraries, businesses etc. |
| SlimServer (slimsvc) | L | slim.exe | Related to SlimServer Note: Located in C:\Program Files\SlimServer\server\ |
| SlimServerMySQL | L | mysqld.exe | Related to Slimserver |
| SLMDriver (SLMDriver) | X | slm32.sys | Added by the Troj/Rootkit-AA
TROJAN!
Note: This trojan file is found in the System32 folder.
Read the link, rootkit type stealth involved. |
| SLPMONX | L | slpservice.exe | Related to Seiko Printers. Provides additional configuration options for these devices. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| SMART Board Service | L | SMARTBoardService.exe | Related to SMART Technologies inc. |
| Smart Card Client (SCardClnt) | X | SCardClnt.exe | Added by the W32/Codbot-K WORM! Note: located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (XP/WinNT/2K) |
| Smart Card Helper | X | scardsvr32.exe | Added by the W32.Femot_worm! . NOTE: do not confuse this with the legitimate Smart Card Helper service, which uses the filename SCardSvr.exe! |
| Smart Card Reader Helper (scrhcust) | X | svchost.exe | Troj/Zapchas-DO
Note: Located in %Root%\RECYCLED\S-1-5-21-3252328098-71414409-2463015037-500\
Allows others to access the computer |
| Smart Card Supervisor (mmc) | X | mmc.exe | W32/Dzan-A Read the link, allows remote access |
| SMART Web Server | L | WebServer.exe | Related to SMART_Web_Server from SMART Tech. Inc. Transform your classroom with SMART education solutions. Note: Located in \%Program Files%\SMART Technologies Inc\SMART Board Software\ |
| SmartGenie (LxrSGe10s) | L | LxrSge10s.exe | Related to SmartGenie_toolbar customizable toolbar, offers many helpful research tools making it possible for you to navigate the Web as well as carry out powerful research. |
| SmartLinkService | L | slmdmsr.exe | slmdmsr.exe installed alongside Smartlink communication products and offers additional support to the modem service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems. |
| SmartLinkService (SLService) | L | slserv.exe | slserv.exe is installed alongside Smartlink communication products and offers additional support to the modem service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems. |
| SmartTrust Smart Card Server (Smartscaps) | L | Smartscaps.exe | Platform for integrating security functions with mobile services. For more information Click_Here
|
| SmartWiService | L | SmartWiService.exe | Related to Sony_SmartWi SmartWi technology is the seamless integration of three wireless technologies: Wide Area Network (WAN)132, 802.11bg wireless LAN1, and Bluetooth®4 technologies. |
SMBus Upgrade Service for Windows 2000 and above (ibmsmbus) | L | ibmsmbus.exe | Related to SMBus on IBM computers. SMBus is the System Management Bus defined by Intel® Corporation in 1995. It is used in personal computers and servers for low-speed system management communications. Note: located in C:\WINDOWS\System32\ibmsmbus.exe |
| SMONITOR | X | SMONITOR.SYS | Added by the TROJ_ROOTKIT.V
TROJAN!
Read the link, rootkit type stealth involved.
|
| SMS Agent Host (CcmExec) | L | CcmExec.exe | Related to SMS_Agent (CCM) = change and configuration management. Note: Located in \%WINDIR%\System32\CCM\ |
| SMS Help Center (SMS32) | X | smss32.exe | Added by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ |
| smsc | X | smsc.exe | Added by the W32/Tilebot-GW WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| smscc | X | smscc.exe | Added by the W32/Sdbot-CPG WORM! Note: This worm\trojan is located in C:\%WINDIR% |
| smsmanger | X | smsmanger.exe | Added by the Backdoor.SdBot.xd as identified by ewido. Note: This worm\trojan is located in C:\%WINDIR%\ More: here |
| SMSS (SMSS) | X | smss.exe | Added by the W32/Tilebot-V
WORM!
Note: This worm file is found in the Windows or Winnt folder.
|
| SMTP Capture | L | smtpcap.exe | Related to NSi's AutoStore from Notable Solutions, Inc. Capture documents and securely saving the content in your business applications. |
| Snake SockProxy Service (SkServer) | X | wuauserv.exe | Variant of Troj/VB-ZD See Sophos
|
| SNARE | L | SnareCore.EXE | Related to InterSect_Alliance Open Source agents to provide a log collection, analysis, reporting and archival resource. |
| SnareIIS | L | SnareIIS.EXE | Related to InterSect_Alliance Open Source agents to provide a log collection, analysis, reporting and archival resource. |
| SndDRV (MS Sound Driver) (SndDRV) | X | snddrv.exe | Added by the W32/Rbot-BSC
WORM!
Note: This worm file is found in the System32 folder.
|
| SNM WLAN Service | L | SNMWLANService.exe | Related to Network_Manager from Samsung. Note: Located in \%Program Files%\samsung\Samsung Network Manager\ |
| SNMPTrapd Service (SNMPTrapdService) | L | snmptrapd.exe | Related to MKS_Toolkit |
| Snoop Free Service (SnoopFreeSvc) | L | SnoopFreeSvc.exe | Anti-keylogging software made by SnoopFree_Software._
|
| Socks-Cap (Sc32Inch) | X | Sc32Inch.exe | Added by WORM_SDBOT.DIN WORM! Rookit infection Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Softex OmniPass Service (omniserv) | L | Omniserv.exe | Related to Softex OmniPass security solution which handles passwords on your computer. |
| SoftGrid Client (sftlist) | L | sftlist.exe | Related to SoftGrid from Microsoft. A core component of the Desktop Optimization Pack for IT professionals. Note: Located in \%Program Files%\Softricity\SoftGrid for Windows Desktops\ |
| SoftGrid Virtual Service Agent (sftvsa) | L | sftvsa.exe | Related to SoftGrid from Microsoft. A core component of the Desktop Optimization Pack for IT professionals. Note: Located in \%Program Files%\Softricity\SoftGrid for Windows Desktops\ |
| Software Jukebox v2.0 Service | L | Software Jukebox v2.0 Service File.exe | Related to BlueLabelle Jukebox v2.0 from MPEGX.com |
| Software Secure Service (SSISvr32) | L | ssisvr32.exe | Related to Software_Secure service. Enables students to take an exam in a secure environment using Microsoft® Word and Excel. Note: Located in C:\WINDOWS\system32\ |
| SolidPDFConverterReadSpool (ScReadSpool) | L | SolidPdfService.exe | Related to Solid_Converter_PDF from VoyagerSoft - Turn your PDFs into documents you can edit. |
| SolidWorks Licensing Service (audieqaai) | X | lmguh.exe | Added by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename. |
Sonica Theater Installer (SonicaTheaterInstallerService) | L | STinst.exe | Related to Sonica_Theater from M-Audio. Turn your computer into a fully functional multiformat surround-sound monitoring environment. Note: Located in C:\Program Files\C:\Program Files\M-Audio Sonica Theater\Install\ |
| SonicStage Back-End Service | L | SsBeSvc.exe | Related to Sonic Stage Back-End service from SONY. Note: Located in \%Program Files%\Common Files\Sony Shared\AVLib\ |
| SonicStage SCSI Service (SSScsiSV) | L | SSScsiSV.exe | Related to Sony Corp. |
| SonicStageMonitoring | L | SonicStageMonitoring.exe | Related to Sony GigaPocket multimedia entertainment center. |
| SonicWALL Agent Service | L | swAgent.exe | Related to Network Associates, Inc. |
| SonicWALL NetExtender Service (SONICWALL_NetExtender) | L | NEService.exe | Related to SonicWALL_NetExtender Service from SonicWall Inc. Note: Located in \%Program Files%\SonicWALL\SSL-VPN\NetExtender\ |
| SonicWall VPN Client Service (RampartSvc) | L | RampartSvc.exe | SonicWall client for VPN access. |
| Sony Network Analysis Tool | X | winsony.exe | W32/Spybot-NS Read the link, allows remote access |
| Sony SCSI Helper Service | L | SonySCSIHelperService.exe | Related to Related to Sony Corporation. |
| Sony SPTI Service (SPTISRV) | L | Sptisrv.exe | Related to Sony Corporation |
| Sony SPTI Service for DVE (ICDSPTSV) | L | IcdSptSv.exe | Related to Sony SPTI Service Note: Sony Inc. Located in C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Sony TV Tuner Controller | L | halsv.exe | Sony computers
|
| Sony TV Tuner Manager | L | RM_SV.exe | Sony computers |
| Sony TVTA Manager | L | SMceMan.exe | Related to Sony Corporation. |
| Sophos Agent | L | ManagementAgentNT.exe | Related to Sophos AntiVirus protection software. |
| Sophos Anti-Virus | L | SWEEPSRV.SYS | By Sophos Plc |
| Sophos Anti-Virus (SAVService) | L | SavService.exe | Related to Sophos AntiVirus protection software. |
| Sophos Anti-Virus (SWEEPSRV.SYS) | L | SWEEPSRV.SYS | Sophos Virus protection program.
http://www.sophos.com/support/knowledgebase/article/378.html |
| Sophos Anti-Virus Network | L | SWNETSUP.EXE | By Sophos Plc |
| Sophos Anti-Virus status reporter (SAVAdminService) | L | SAVAdminService.exe | Related to Sophos AntiVirus protection software. |
| Sophos Anti-Virus Update | L | SWUPDATE.EXE | By Sophos Plc |
| Sophos AutoUpdate Agent | L | AutoUpdateAgentNT.exe | Related to Sophos AntiVirus protection software. |
| Sophos AutoUpdate Service | L | ALsvc.exe | Related to Sophos AntiVirus protection software. Auto Update service. |
| Sophos Cache Manager (CacheMgr) | L | cachemgr.exe | Related to Sophos AntiVirus protection software. Remove Update service. |
| Sophos Database Notification Service (sdbnsrvc) | L | Sdbnsrvc.exe | Related to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\ |
| Sophos EMLibUpdate Agent | L | EMLibUpdateAgentNT.exe | Related to Sophos_Remote_Management_System from Sophos. Note: Located in \%Program Files%\Sophos\SCC\Remote Management System\ |
| Sophos Management Service | L | MgntSvc.exe | Related to Sophos_Remote_Management_System from Sophos. Note: Located in \%Program Files%\Sophos\SCC\ |
| Sophos Message Router | L | RouterNT.exe | Related to Sophos AntiVirus protection software. |
| Sophos SBE Certification Manager | L | CertificationManagerServiceNT.exe | Related to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\ |
| Sophos SBE ManagementService | L | SbeMss.exe | Related to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\ |
| Sound Sservice Driver (Sound Service) | X | cfmon.exe | See Here
|
SoundMAX Agent Service (SoundMAX Agent Service (default)) | L | SMAgent.exe | SoundMAX Sound Device |
| SP Software Installer | L | sp_SWIns.exe | SmartPipes SecureSite is a scalable, reliable, and secure software platform for the creation and management of advanced IP services. - http://www.smartpipes.com/SecureSite.htm |
| SPAMfighter Update Service | L | sfus.exe | Related to SPAMfighter from Spamfighter for Microsoft Outlook, Outlook Express and Windows Mail. Note: Located in \%Program Files%\SPAMfighter\ |
| SPBBCSvc | L | SPBBCSvc.exe | Related to Symantec Internet security suite and assists in keeping your computer up to date from Internet bound viruses. |
| SPCSUtilityService | L | SPCSUtilityService.exe | Related to Sprint_Sierra_Wireless service. Note: Located in C:\Program Files\Sprint\Sierra Wireless\Sprint PCS Connection Manager\ |
| spdcheck | X | SPDCHECK.EXE | Added by the SDBOT.BZE
WORM!
Read the link, rootkit type stealth involved.
|
| Spectrum24 Event Monitor (S24EventMonitor) | L | S24EvMon.exe | Intel Corporation |
| Speed Disk service | L | nopdb.exe | Norton Speed Disk |
| SpeedTouch 330 Manager (st330service) | L | st330service.exe | Related to SpeedTouch_330_Manager from THOMSON Telecom. Note: Located in \%Program Files%\Thomson SpeedTouch/ST330/service/ |
| spkrmon | L | spkrmon.exe | SoundMAX SpeakerMonitor service |
| SPM License Server (spmd) | L | spmd.exe | Related to SPM_License from mental images GmbH. RealityServer® is the unique server-based, scalable infrastructure software platform for creating and deploying 3D Web Services and other applications and application
Note: Located in C:\WINDOWS\System32\spm\ |
| SPM License Server (spmd) | L | spmdib.exe | Related to Software_Protection_Manager from SoftImage. Note: Located in C:\WINDOWS\system32\spm\ |
| spmgr | L | spmgr.exe | Related to Sony VAIO/ASUS laptops and provides additional configuration options for these devices. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems. |
| spool | X | spoollv.exe | Added by the W32/Sdbot-AES
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| spool | X | SPOOLLV.EXE | Added by the SDBOT.CTI
WORM!
Note: This worm file is found in the System32 folder. (NT/2000/XP)
Read the link, rootkit type stealth involved.
|
| Spool SubSystem App | X | lsass.exe | Added by the W32/Tilebot-HD WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) |
| SpoolService | X | spolsv.exe -service | Possibly added by a W32/Agobot variant. |
| Spoolsv | X | spoolsv.exe | Added by the Troj/IRCBot-VA TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ |
| spoolv | X | spoolv.sys | Added by the TROJ_ROOTKIT.S
TROJAN!
Read the link, rootkit type stealth involved.
|
| Sprint PCS v3 Utility Service | L | CMSPCSUtilSvc.exe | Related to Sprint_PCS_Connection_Manager Service Utility. Note: Located in \%Program Files%\Sprint\Sprint PCS Connection Manager\ |
| Spss License Manager (SpssLM) | L | spss_lmd.exe | http://www.spss.com/spss/licensing.htm |
| Spy Emergency Shield Service (SpyEmrgSrv) | L | SpyEmergencySrv.exe | Related to Spy_Emergency from NETGATE Technologies. Security software. Note: Located in C:\Program Files\NETGATE\Spy Emergency 2006\ |
| Spy-Keylogger (SpyKeyloggerService) | X | skls.exe | Identified as Spyware.SpyKeylogger SPYWARE! Spyware.SpyKeylogger is a security risk that records keystrokes. Must be manually uninstalled via Start\settings\control panel\Add_Remove programs. |
| SpyDetectSVC | L | SpywareDetectorSVC.exe | Spyware Detector, Adware/Spyware remover - initially considerered a "rogue" program. The latest version has since apparently mended its ways: see note |
| Spyware Doctor Auxiliary Service (sdAuxService) | L | svcntaux.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Doctor Enterprise Client | L | EntClient.exe | Related to Spyware_Doctor Enterprise Client from PC Tools. Note: located in \%WINDIR%\EMClient\ |
| Spyware Doctor Service (sdCoreService) | L | swdsvc.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Terminator Clam Service (sp_clamsrv) | L | sp_clamsrv.exe | Part of Spyware Terminator, located in %program files%\WinClamAVShield |
| Spyware Terminator Realtime Shield Service (sp_rssrv) | L | sp_rsser.exe | Related to SpywareTerminator Spyware Remover. Note: Located in C:\Program Files\Spyware Terminator\ |
| SpywareCleanerService | O | SCService.exe | Owner:Secure Computer, LLC. May show as Unknown owner. Related to Spyware Cleaner Note: Not recommended. |
| SQL Server (MSSMLBIZ) (MSSQL$MSSMLBIZ) | L | sqlservr.exe | Microsoft SQL Server 2005 Express that is installed with Accounting Professional and with Accounting Express from Microsoft. |
| SQL Server (MSSQLSERVER) (MSSQLSERVER) | L | sqlservr.exe | Related to Microsoft_SQL_server
suite. |
| SQL Server (SQL2005) (MSSQL$SQL2005) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server Agent (MSSQLSERVER) (SQLSERVERAGENT) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Agent (SQL2005) (SQLAgent$SQL2005) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Analysis Services (SQL2005) (MSOLAP$SQL2005) | L | msmdsrv.exe | Related to Microsoft_SQL_server suite. |
| SQL Server FullText Search (SQL2005) (msftesql$SQL2005) | L | msftesql.exe | Related to Microsoft_SQL_server suite. |
| sql-smss | X | sql-smss.exe | Added by the W32/Tilebot-GI WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqldps | X | sqldps.exe | Added by the W32/Tilebot-GV WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlmanagement | X | sqlmanagement.exe | Added by the W32/Tilebot-GB WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlserver (sqlserver) | X | sqlserv.exe | Added by the SDBOT.BZO
WORM!
Read the link, rootkit type stealth involved.
|
| SQLSERVERAGENT | L | sqlagent.EXE | Related to Microsoft SQL Server |
| sqlsrvd (sqlsrvdaemon) | X | _sqlexec.exe | Possible new variant of W32.Spybot.NLX. Location: C:\Windows (9X\XP) or C:\Winnt (NT\2000). See Symatec |
| SRS Labs License Service | L | srslabslicenseservice.exe | Related to SRS_Labs Audio Service. Note: Located in C:\Program Files\Common Files\SRS Labs Shared\ |
| ssdfghjkl | X | NETDDF.EXE | Added by the SDBOT.BXN
WORM!
Read the link, rootkit type stealth involved. |
| SSH Client for Windows | X | winshp.exe | Win32/Duiskbot.BE
Note: Located in %System%\dllcache\ |
| SSMFramework (MSMFramework) | L | VivaldiFramework.exe | Related to Dell SAS RAID Storage Manager, Note: Located in \%Program Files%\\Dell SAS RAID Storage Manager\Framework\ |
| SSMGS Service (SSMGService) | L | ssmgs.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
| ssms | X | SMSS.EXE | Added by the SPYBOT.ADJ
WORM!
Note: This is not the legitimate Windows process SMSS.EXE (Which is always found in the System32 folder.) This worm file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| SSO Plus | L | pgpwdmon.exe | http://www.passgo.com/products/sso/index.shtml |
| SSODL: eplrr | X | eplrr3.dll | hijacker/trojan |
| SSODL: Sysctl Desktop Handler | X | ntosv.dll | seems to replace the users desktop with an error message regarding spyware |
| SSODL: SystemCheck2 | X | vbsys2 | can also be vbsys/vbsys2 with or without .exe extension.
trojan related |
| ssrvc | L | ssrvc.exe | Program from Advanced Systems International SAC regarding usb removable storage devices, For more info See_Here
|
| Standalone.exe (Standalone) | X | standalone.exe | Added by the W32/AGOBOT-ADS WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Read the Topic here |
| Stardock WindowBlinds (WindowBlinds) | L | VistaSrv.exe | Related to WindowBlinds Note: Located in \%Program Files%\Stardock\OBJECT~1\windowblinds\ |
| Start BT in service | L | StartSkysolSvc.exe | Related to Start_BT Bluetooth service from IVT Corporation. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\ |
| starter (Protector) | X | scvhostingg.exe | Added by the W32/Forbot-FB
WORM!
|
| StarWind AE Service (StarWindServiceAE) | L | StarWindServiceAE.exe | Related to StarWind from Rocket Division Software. Note: Located in \%Program Files%\Alcohol Soft\Alcohol 120\StarWind\ |
| StarWind iSCSI Service (StarWindService) | L | StarWindService.exe | StarWindService.exe
is a process which belongs to Alcohol 120% DVD/CD emulation and burning software and provides network drive sharing capabilities to this product. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems. |
| Stateless Packet Filtering (PktFilter) | L | pktfltsrv.exe | Part of PktFilter |
| stchost.exe (moto) | X | stchost.exe | Added by the Troj/Vixup-L
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder.
|
| Steam Client Service | L | SteamService.exe | Related to Valve Software's STEAM broadband game client. Note: Located in \%Program Files%\Common Files\St |