Autorun Details: Msn

Name: MSN
Command: msmgr.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-BHH WORM!

Name: msn
Command: system32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the KITRO.A WORM!

Name: msn
Command: msnmsg.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT-GO WORM!

Name: MSN
Command: msnmsgs.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application!

Name: MSN
Command: ctfmoons.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SPYBOT.HI WORM!

Name: MSN
Command: msnmesengers.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT-ME WORM!

Name: MSN
Command: MSN.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MINIT WORM!

Name: MSN
Command: msnmsgr.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%

Name: msn
Command: msnsvc.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the SDBOT WORM!

Name: MSN
Command: msn16.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SDBOT-VN WORM!

Name: MSN
Command: msnsgr.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified WORM or TROJAN!

Name: MSN
Command: install.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-GDO TROJAN!

Name: MSN
Command: netstats.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT.UXP WORM!

Name: MSN
Command: scvhost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-ZW WORM!

Name: MSN
Command: wdlrss.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the SDBOT TROJAN!

Name: MSN
Command: wkssvr.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PUSHBOT.S WORM!

Name: MSN
Command: Fixdriver.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SILLYFDC.BBY WORM!

Name: MSN
Command: iTuneshelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR! See here

Name: MSN
Command: lsass32.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR! See here

Name: MSN
Command: msscomd.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the SPYBOT WORM! See here

Name: MSN
Command: systems.exe
Status: Definitely not required. Usually Malware.
Description: Identified as a variant of the Backdoor.PosionIvy keylogging malware

Name: MSN
Command: taskngr.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR! See here

Name: MSN
Command: wkssvrs.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR! See here

Name: MSN
Command: wksvr.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-XU WORM!

Name: MSN
Command: wmev.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the SPYBOT WORM! See here

Name: MSN
Command: kys7r.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN-AR WORM!

Name: MSN
Command: services51651.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-AAL TROJAN!

Name: Msn
Command: rundll32.exe ilss32.dll,network
Status: Definitely not required. Usually Malware.
Description: Added by the BANLO-E TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Name: msn
Command: winlogon.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PROSTI.AA BACKDOOR! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Media

Name: MSN
Command: msnmsgx.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT-PZ WORM!

Name: MSN
Command: msservice.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-ABZ TROJAN!

Name: MSN
Command: smsss.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BUZUS-D WORM!

Name: MSN
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the PUSHBOT.FA WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner