| Name | Status | Filename | Description |
|---|
| svhost windows services | X | svhost8.exe | Added by the W32/RBOT-WQ WORM! |
| sysmod | X | sysmod.exe | Added by the W32/Spybot-DU
WORM!
|
| srv32win | U | win16dll.exe | Screenspy captures screenshots silently. If you didn't install this yourself, remove it. |
| System Mechanic Popup Blocker | U | PopupBlocker.exe | Related to System_Mechanic Utility Suite from iolo Technologies. |
| shellsystem | X | shellsystem.exe | Added by the UPCHAN TROJAN! |
| Services | X | svchost.exe | Identified as a variant of the VirTool:Win32/DelfInject.gen!AM malware. Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| System Information Manager | X | Msbb.exe | Added by a variant of the BACKDOOR.IRC.BOT TROJAN!
|
| SystemSettingf | X | TRUG.vbs | Added by the TRUG.B VIRUS! |
| Security Center Distribution | X | securesec.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| SYSTRAY | X | UNMT.EXE | Added by a W32/Sdbot worm infection
|
| System DLL Resources | U | sysdll.exe | Added by the SnapKey SPYWARE! **Note if you did not intentionally install this remove it. |
| sysinfo.exe | X | sysinfo.exe | Added by the BEAGLE.V WORM! |
| Setting | X | sysweb.exe | Added by the SDBOT.GEN WORM! |
| Services Process | X | services.exe | Added by unidentified spyware - recognized by Kaspersky antivirus as TrojanSpy.Win32.Small.x |
| Sistray32 | X | win.bat | Added by the W32/Jupir-C
WORM!
Note: This worm file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| sysconfig | X | iexplorer.exe | Added by the CULT.C VIRUS!. Note - iexplorer.exe is not to be confused with Interrnet Explorer (iexplore.exe) |
| Services Manager! | X | svmanager.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| Sygaete Personal Firewall | X | SyGate.exe | Added by the W32/Rbot-GLX WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\ (XP/WinNT/2K) Read the link, allows remote access[/b] |
| shockmachinereminder | N | SmReminder.exe | Shockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version |
| System Process | X | csrss.exe | Added by the TROJ/ADCLICK-AG TROJAN! - Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, shutdown, and hard-error handling, located in the Winnt/System32 or Windows\System32 folder, and which should NOT figure in Msconfig/Startup!
|
| SecurePCSolutionsBootCheck | U | BootCheck.exe | Related to 1_Click_Boost from Secure PC Solutions. Optimizes your PC memory cache which makes your computer run faster and more efficiently both on and off the Internet and more... Note: Located in \%Program Files%\Secure PC Solutions\1 Click Fixer PLUS\ |
| SpywareStrike | X | SpywareStrike.exe | Rogue Spyware product |
| systemr | X | d11host.exe | Added by the Troj/VB-GX
Trojan! |
| Smarthruengine | U | QS.exe | Samsung smarthru software,used with Lexmark Z82 or Samsung multifunction printers |
| Sysr | X | sysmd.exe | Ulubione adult content dialer |
| sysPersonalFirewall | X | msnmssgr.exe | Added by a variant of the WIN32.RBOT WORM!
|
| Service Controller | X | service.exe | Added by the PREVERT TROJAN! |
| Security Service Process | X | svhost.exe | Added by the AGOBOT-LC WORM!
|
| SymRun | X | ccApps.exe | Added by the TROJ/KAGEN-B TROJAN! |
| supernews12 | X | newsd32.exe | Adware, also detected as the TROJ/DLOADER-JN TROJAN! |
| Sygate Personal Firewall | X | host32.exe | Added by the W32/RBOT.ALD WORM! |
| Service Monitor | X | msnserve.exe | Added by the W32.SPYBOT.YQW WORM! |
| SigXC | X | SigX.exe | SigX is a "dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3, current OS, Free Ram, your current time and more." |
| Smserial | N | sm56hlpr.exe | Helper utility for Motorola based SM56 software modems - resides in the System Tray
|
| System | X | run322.exe | Added by the LANFILT VIRUS! |
| SystemManager | X | Sysman32.exe | Added by the DOWNLOADER-BW.B VIRUS! |
| System Update2 | X | svchost.exe | Added by the Autotroj-C TROJAN! |
| ShellEx | X | ShellEx.exe | Added by the ANAKHA VIRUS! |
| SYSTEM MESSAGER | X | wmisg.exe | Added by the W32.Mytob.ES
WORM!
|
| ShellRun | X | lexplore_.exe | Added by the Troj/MSNOpt-A
TROJAN!
Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. |
| sws.exe | X | gd-dial.exe | Component of the "GlobalDialer" adult content premium rate dialer |
| SBC Yahoo! Connection Manager | N | ConnectionManager.exe | The cmanager.exe process is used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection. |
| system | X | lsass.exe | Added by the Satiloler.E
TROJAN!
Read the link, rootkit type stealth involved.
|
| Screen Saver Control | N | FSScrCtl.exe | Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon |
| SSL Manager | X | amsnmsgs.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| SheduIer | X | winagent.exe | Added by the TROJ/BDOOR-EB TROJAN! |
| System Database administration | X | systemDA.exe | Added by the W32.Derdero.B WORM! |
| SDR6_Check | X | udcsdr.exe | Added by the DriveCleaner ROGUE PROGRAM! security assesment tool which gives exaggerated reports of security and privacy risks on a computer. Note: Located in C:\Program Files\Common Files\DriveCleaner 2006 Free\ |
| System Monitoring | X | cute.exe | Added by the W32.Rahiwi.A WORM! |
| systemscroot | X | systembin.exe | Added by an unidentified TROJAN! of the Rbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| spa_start | X | spads.dll | Added by an unidentified Trojan/Backdoor Note: Located in \%WINDIR%\System32\ |
| SysStart | X | 1.exe | Added by ZenoSearch adware |
| STDSB | Y | STDSB.exe | Scrollbar driver for notebooks. If taken out of the Startup, it will not provide scrolling. |
| SYSWB6 | U | SYSWB6.exe | We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content |
| svchostdll.scr | X | svchostdll.scr | Added by the Troj/Bancban-FM
TROJAN!
Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
