| Name | Status | Filename | Description |
|---|
| SpyDetectSVC | L | SpywareDetectorSVC.exe | Spyware Detector, Adware/Spyware remover - initially considerered a "rogue" program. The latest version has since apparently mended its ways: see note |
| Spyware Doctor Auxiliary Service (sdAuxService) | L | svcntaux.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Doctor Enterprise Client | L | EntClient.exe | Related to Spyware_Doctor Enterprise Client from PC Tools. Note: located in \%WINDIR%\EMClient\ |
| Spyware Doctor Service (sdCoreService) | L | swdsvc.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| Spyware Terminator Clam Service (sp_clamsrv) | L | sp_clamsrv.exe | Part of Spyware Terminator, located in %program files%\WinClamAVShield |
| Spyware Terminator Realtime Shield Service (sp_rssrv) | L | sp_rsser.exe | Related to SpywareTerminator Spyware Remover. Note: Located in C:\Program Files\Spyware Terminator\ |
| SpywareCleanerService | O | SCService.exe | Owner:Secure Computer, LLC. May show as Unknown owner. Related to Spyware Cleaner Note: Not recommended. |
| SQL Server (MSSMLBIZ) (MSSQL$MSSMLBIZ) | L | sqlservr.exe | Microsoft SQL Server 2005 Express that is installed with Accounting Professional and with Accounting Express from Microsoft. |
| SQL Server (MSSQLSERVER) (MSSQLSERVER) | L | sqlservr.exe | Related to Microsoft_SQL_server
suite. |
| SQL Server (SQL2005) (MSSQL$SQL2005) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) | L | sqlservr.exe | Related to Microsoft_SQL_server suite. |
| SQL Server Agent (MSSQLSERVER) (SQLSERVERAGENT) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Agent (SQL2005) (SQLAgent$SQL2005) | L | SQLAGENT90.EXE | Related to Microsoft_SQL_Server_Agent |
| SQL Server Analysis Services (SQL2005) (MSOLAP$SQL2005) | L | msmdsrv.exe | Related to Microsoft_SQL_server suite. |
| SQL Server FullText Search (SQL2005) (msftesql$SQL2005) | L | msftesql.exe | Related to Microsoft_SQL_server suite. |
| sql-smss | X | sql-smss.exe | Added by the W32/Tilebot-GI WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqldps | X | sqldps.exe | Added by the W32/Tilebot-GV WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlmanagement | X | sqlmanagement.exe | Added by the W32/Tilebot-GB WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| sqlserver (sqlserver) | X | sqlserv.exe | Added by the SDBOT.BZO
WORM!
Read the link, rootkit type stealth involved.
|
| SQLSERVERAGENT | L | sqlagent.EXE | Related to Microsoft SQL Server |
| sqlsrvd (sqlsrvdaemon) | X | _sqlexec.exe | Possible new variant of W32.Spybot.NLX. Location: C:\Windows (9X\XP) or C:\Winnt (NT\2000). See Symatec |
| SRS Labs License Service | L | srslabslicenseservice.exe | Related to SRS_Labs Audio Service. Note: Located in C:\Program Files\Common Files\SRS Labs Shared\ |
| srvcm | X | srvcm.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| ssdfghjkl | X | NETDDF.EXE | Added by the SDBOT.BXN
WORM!
Read the link, rootkit type stealth involved. |
| SSH Client for Windows | X | winshp.exe | Win32/Duiskbot.BE
Note: Located in %System%\dllcache\ |
| SSL VPN-Plus Service | L | NeoSrv.exe | Related to SSL_VPN-Plus Service from NeoAccel Inc. Note: located in \%WINDIR%\ |
| SSMFramework (MSMFramework) | L | VivaldiFramework.exe | Related to Dell SAS RAID Storage Manager, Note: Located in \%Program Files%\\Dell SAS RAID Storage Manager\Framework\ |
| SSMGS Service (SSMGService) | L | ssmgs.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
| ssms | X | SMSS.EXE | Added by the SPYBOT.ADJ
WORM!
Note: This is not the legitimate Windows process SMSS.EXE (Which is always found in the System32 folder.) This worm file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| SSO Plus | L | pgpwdmon.exe | http://www.passgo.com/products/sso/index.shtml |
| SSODL: eplrr | X | eplrr3.dll | hijacker/trojan |
| SSODL: Sysctl Desktop Handler | X | ntosv.dll | seems to replace the users desktop with an error message regarding spyware |
| SSODL: SystemCheck2 | X | vbsys2 | can also be vbsys/vbsys2 with or without .exe extension.
trojan related |
| ssrvc | L | ssrvc.exe | Program from Advanced Systems International SAC regarding usb removable storage devices, For more info See_Here
|
| Standalone.exe (Standalone) | X | standalone.exe | Added by the W32/AGOBOT-ADS WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Read the Topic here |
| Stardock WindowBlinds (WindowBlinds) | L | VistaSrv.exe | Related to WindowBlinds Note: Located in \%Program Files%\Stardock\OBJECT~1\windowblinds\ |
| Start BT in service | L | StartSkysolSvc.exe | Related to Start_BT Bluetooth service from IVT Corporation. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\ |
| starter (Protector) | X | scvhostingg.exe | Added by the W32/Forbot-FB
WORM!
|
| StarWind AE Service (StarWindServiceAE) | L | StarWindServiceAE.exe | Related to StarWind from Rocket Division Software. Note: Located in \%Program Files%\Alcohol Soft\Alcohol 120\StarWind\ |
| StarWind iSCSI Service (StarWindService) | L | StarWindService.exe | StarWindService.exe
is a process which belongs to Alcohol 120% DVD/CD emulation and burning software and provides network drive sharing capabilities to this product. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems. |
| Stateless Packet Filtering (PktFilter) | L | pktfltsrv.exe | Part of PktFilter |
| stchost.exe (moto) | X | stchost.exe | Added by the Troj/Vixup-L
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder.
|
| Steam Client Service | L | SteamService.exe | Related to Valve Software's STEAM broadband game client. Note: Located in \%Program Files%\Common Files\Steam\ |
| Steganos AntiTheft (SatSrv) | L | SatSrv.exe | Related to Steganos Security Suite. Note: Located in \%WINDIR%\System32\ |
Steganos Live Encryption Engine (Version 503) [Service]
(SLEE_503_SERVICE) | L | SLEE503.exe | Related to Steganos live Encryption Engine. |
Steganos Live Encryption Engine 8.1 [Service]
(SLEE_81_SERVICE) | L | SLEE81.exe | Part of Steganos security suite |
| STI Simulator | L | PAStiSvc.exe | Related to STI_Simulator From SystemsTech. Note: Located in C:\WINDOWS\System32\ |
| Still image service | X | stisvc.exe | Added by an unknown variant of a backdoor TROJAN! Note: This \trojan is located in \%WINDIR%\ Not to be confused with Microsoft's stisvc.exe for Still image camera service found in \%WINDIR%\System32\ folder. |
| stllssvr | L | stllssvr.exe | Related to SureThing_CD_Labeler from MicroVision Development, Inc. designed for MP3 and DVD buffs Note: Located in C:\Program Files\Common Files\SureThing Shared\ |
| STOPzilla Local Service | L | szntsvc.exe | Stopzilla Popup Blocker |
