Autorun Details: WinHelp.exe

Name: (Default)
Command: winhelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BLACKMAL.C WORM! Note - this malware actually changes the value data of the "(Default)" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank

Name: svchost
Command: winhelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the GAOBOT.GEN!POLY WORM!

Name: system
Command: Winhelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IMAUT.CN WORM!

Name: Windows Helper
Command: winhelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANKER.APE TROJAN!

Name: WinHelp
Command: WinHelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LOVGATE.F WORM! Note - this file is located in %System% whereas the valid one is located in %Windir%

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner