| Name | Status | Filename | Description |
|---|
| SAPDB: WEB (SAP DBTech-WEB) | L | kernel.exe | Related to SAP_MaxDB The SAP Database System. Note: Located in \%Program Files%\SAPDB\DEPEND\pgm\ |
| SAVRoam (SavRoam) | L | SavRoam.exe | Related to Norton/Symantec AntiVirus |
| SAVScan | L | SAVScan.exe | Related to Norton AntiVirus Note: Located in \%Program Files%\Norton Internet Security\Norton AntiVirus\SAVScan.exe |
| sbchosy.bat | X | sbchosy.bat | Added by the Troj/GrayBir-AA
TROJAN!
Note: This trojan file is found in the Windows\Program Files or Winnt\Program Files folder. |
| SBHookSvc | L | SBHookSvc.exe | Related to Motive_Communications Broadband service. Note: Located in C:\PROGRAM FILES\NETASSISTANT\SMARTBRIDGE\ |
| SbPF.Launcher | L | SbPFLnch.exe | Related to Sunbelt Personal Firewall. Note: Located in \%Program Files%\Sunbelt Software\Personal Firewall\ |
| SBRLLA For FM Advisor (SBRLLA) | L | SBRSVC.EXE | Related to SBRLLA_For_FM_Advisor FUJITSU computer. Note: Located in \%Program Files%\Fujitsu\sa\api\ |
| SBSD Security Center Service (SBSDWSCService) | L | SDWinSec.exe | Related to SpyBot_and_Destroy Security Center Service integration with Vista Windows Security Center. Microsoft ships Windows Defender with Vista, however, Spybot-S&D can now easily integrate into the Vista Security Center; which will then monitor if Spybot-S&D is up-to-date and whether the permanent protection (TeaTimer) is running or not.
This update will only show on Vista systems, since previous Windows versions do not offer anti malware integration into WSC. Note: Located in \%Program Files%\Spybot - Search & Destroy\ |
| SCA (Service Control Application) | X | SYSTEM.EXE | Unknown virus |
| ScanRouterDriverV2 | L | srscandr.exe | Related to Ricoh Document System Server Information Service. Note: Located in \%Program Files%\RDS\ |
| scheduler (schedul3.exe) | X | schedul3.exe | Added by the W32/Rbot-AVX
TROJAN! Note: This worm\trojan file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved. |
| Scheduling Agent (Mstinit) | X | mstinit.exe | Added by the W32/Tilebot-IO WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| schscnt | L | schscnt.exe | Related to Command AntiVirus for Windows Component, made by Command Software Systems, Inc. Which merged with Authentium
in 2002.
|
| SCNDmem (winlow) | X | winlow.sys | Added by the Troj/Haxdoor-AF TROJAN! |
| Scorer Service (ScorerService) | L | stscor.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
| screen shots (epep) | X | screenshot.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| Scribe AdminServer | L | AdminServer.exe | Related to Scribe Admin. Server. Data integration between Salesforce and Microsoft Dynamics GP. Note: Located in \%Program Files%\Scribe\ |
| ScriptBlocking Service (SBService) | L | SBServ.exe | Related to Norton/Symantec AntiVirus. |
| ScriptLogic Service (SLClient) | L | slClient.exe | Related to ScriptLogic Remote management and control for I.T. personnel. Note: Located in \%WINDIR%\System32\ |
| ScsiAccess | L | ScsiAccess.EXE | Alcohol Software's CD/DVD writing application |
| SCSMS32 (SCSMS) | X | scmsm32.exe | Added by the SDBOT.CCN
or SDBOT.CEZ
WORM!
Read the link, rootkit type stealth involved.
|
| SCWatch 4.0 | L | scwatch4.exe | Related to White Canyon - protect against identity theft software. - http://www.whitecanyon.com/index.php |
| SDCAgent | L | ESRVANY.EXE | Related to Service_Deliver_Center from IBM Global Services, SRM (Server Resource Management). Note: Located in \%Program Files%\SDC\ |
| SDJB Manager | L | sdjbmgr.exe | Panasonic\SD-JukeboxV3 |
| sdk | X | lsass.exe | W32/Sdbot-DEF Read the link, allows remote access |
| sdktemp | X | Microsoft.exe | Added by the SDBOT.CGM
WORM!
Read the link, rootkit type stealth involved.
|
| sdktemp (sdktemp) | X | SDKTEMP.EXE | Added by the W32/Tilebot-A
WORM!
Read the link, rootkit type stealth involved.
|
| sdktemp (sdktemp) | X | axdcfasb.exe | Added by the W32/Sdbot-AGI
WORM!
Read the link, rootkit type stealth involved.
|
| SDPAUMS server service | L | sdpasvc.exe | Matsushita Electric Industrial Co.,Ltd. |
| SDService | L | SDService.exe | Related to Spyware_Detector from Max Secure. Note: Located in C:\Program Files\SpywareDetector\ |
| Seagate Communication | X | seagatecom.exe | Added by the W32/Spybot-NF WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| Seagate Page Server (pageserver) | L | pageserver.exe | Related to Seagate Page Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\ |
| Seagate Web Component Server (WebCompServer) | L | WebCompServer.exe | Related to Seagate Web Component Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\ |
| Search Engine Commando Schedule Service | L | ScheduleService.exe | Related to Search Engine Commando |
| Secdrv | X | secdrv.sys | Troj/Pushu-Gen
Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) May also have an additional services installed. Read link |
| Secondary .NET Framework (SVSNET) | X | svsnet.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Secure (Secure Windows NT) | X | secure.exe | Identified as the Backdoor.Win32.Iroffer malware. Note: Located in \%WINDIR%\System32 |
| Secure Port Server (Server Administrator) | L | omaws32.exe | Related to Dell Open Management system.
http://www.what-process.com/process-info.aspx?p=omaws32.exe |
| Secure Socket Layer | X | ssls.exe | Added by the W32/Spybot-NE WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| Secure SSL System (Secure) | X | securessl.exe | Added by the Haxdoor.Fam HAXDOOR!
Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Secured Process (secureprocess) | X | secureprocs32.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| SecureLockWare ? | L | ENCRDLG.exe | Related to SecureLockWare from BUFFALO INC. Secure Lock Ware’s 256-bit capable AES encryption provides powerful protection for data on your portable USB devices. Note: Located in \%Program Files%\BUFFALO\Encrdisk\ |
| Securemaker Disk Defragmenter Service (smdefrag) | L | smdefrag.exe | Related to Securemaker Tool to clean your computer of unwanted files and much more. Note: Located in \%Program Files%\SECUREMAKER\ |
| Security Accounts Center (Security Accounts Center) | X | windowo.exe | Added by the Troj/Bckdr-AWQ
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder. |
| Security Accounts Manager (SamSs) | L | lsass.exe | Related to Security_Accounts_Manager for servers. Note: Located in \%WINDIR%\system32\ |
| Security Accounts Manages | X | TIMPlatform.exe | Troj/Delf-EWW |
| Security Agent (scagent) | X | scagent.exe | Added by the Troj/Dload-LV TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Security Logs Service (SLSVS) | X | SM1OGSVC.EXE | Added by the Troj/Tenant-A
TROJAN!
Note: This trojan file is found in the System32 folder. |
| Security Platform Management Service (IFXSpMgtSrv) | L | IFXSPMGT.exe | Related to Security_Platform_Management Service from Infineon Technologies. Note: Located in C:\WINDOWS\system32\ |
| Security Service (JVWC) | X | svchost.exe | Added by a variant of the TrojanProxy:Win32/Chumpoke.gen!A malware Note: This worm\trojan is located in \%WINDIR%\System32\svcd\ |
