Autorun Details: winhelp

Name: Winhelp
Command: winhe1p.exe
Status: Definitely not required. Usually Malware.
Description: Added by the QQPASS.E TROJAN!

Name: WinHelp
Command: WinHelp.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LOVGATE.F WORM! Note - this file is located in %System% whereas the valid one is located in %Windir%

Name: WinHelp
Command: realsched.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LOVGATE-F WORM! Note - this is not the legitimate RealPlayer (realsched.exe) application of the same name. This one is located in %System%

Name: Winhelp
Command: TkBellExe.exe...
Status: Definitely not required. Usually Malware.
Description: Added by the LOVGATE.Z WORM!

Name: winhelp
Command: dns32.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the RBOT WORM!

Name: winhelp
Command: Updadv.exe
Status: Definitely not required. Usually Malware.
Description: Added by the QQPASS-N TROJAN!

Name: Winhelp
Command: TkBellExe.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LOVGATE.E WORM!

Name: winhelp
Command: rundll32.exe [path] winhelp.dll,get
Status: Definitely not required. Usually Malware.
Description: Added by the MDROP-DCW TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "winhelp.dll" file is found in %System%

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner