Autorun Details: System32

Name: System32
Command: system.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BUSHTRO122 TROJAN!

Name: System32
Command: System32.exe
Status: Definitely not required. Usually Malware.
Description: Added by any number of WORMS or TROJANS!

Name: System32
Command: sysdiag.exe
Status: User's choice. Start if necessary.
Description: SpyAgent surveillance software. Uninstall this software unless you put it there yourself

Name: System32
Command: system32,1.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified VIRUS, WORM or TROJAN!

Name: system32
Command: NeT-BoT.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGOBOT-LJ WORM!

Name: System32
Command: lsasss.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT-XW WORM!

Name: System32
Command: crsvvc.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT.BLY WORM!

Name: system32
Command: QQGame.exe
Status: Definitely not required. Usually Malware.
Description: Added by the QQPASS-AC TROJAN!

Name: System32
Command: [worm filename]
Status: Definitely not required. Usually Malware.
Description: Added by the NAUTICAL-A WORM!

Name: System32
Command: winds32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DWNLDR-HFY TROJAN!

Name: System32
Command: csrss.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SILLYFDC WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: system32
Command: lowinplay.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VB.FVJ TROJAN!

Name: System32
Command: sb32mon.exe
Status: User's choice. Start if necessary.
Description: Part of the SpyBuddy keystroke logger/monitoring program - see here. Remove unless you installed it yourself!

Name: System32
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ZAPCHAS-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name: system32
Command: runescape.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-XB MALWARE!

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner