Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 13201 to 13300:

StatusAutorun nameCommandDescription
XNvCplDaemonToolrundll32.exe [path] adload4C.dll,_IWMPEventsAdded by the AGENT-QXD TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "adload4C.dll" file is located in %System%
XNvCplDaemonToolrundll32.exe [path] wtload08.dll,_IWMPEventsAdded by the SINOWA-GEN TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wtload08.dll" file is located in %System% and %UserProfile%
XNvCplDeamonnvdisp.exeAdded by the PEEPVIE-I TROJAN!
XNvCplDeamonservise.exeAdded by the AUTORUN-BNY WORM!
XNvCplDmnNAVSVC.EXEAdded by an unidentified VIRUS, WORM or TROJAN!
Xnvcpllnvcpll.exeAdded by the BANCBAN-PF TROJAN!
XNvCplScanmsc32.exeAdded by the FORBOT-DD WORM!
XNvCplScanwinasp.exeAdded by the FORBOT.BZ WORM!
XNvCplScannvsc32.exeAdded by the BROPIA.N WORM!
XNvCplScankav32.exeAdded by the FORBOT-EW WORM!
XNvCplScannetstat32.exeAdded by the SDBOT.BRL WORM!
XNvCplScandllmanager.exeAdded by the FORBOT.R WORM!
XNvCpTDaemonwuauqmr.exeAdded by the CULT-B WORM!
Xnvctrl.exenvctrl.exeAdded by the ZLOB.G TROJAN!
Xnvd32 lptt01nvd32.exeRapidBlaster variant (in a "NvidStar" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it
Xnvd32 ml097envd32.exeRapidBlaster variant (in a "NvidStar" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it
XNVDispDrvNVDispDRV.EXEAdded by the WINKO.AO WORM!
Xnvdisplaycsrss.exeAdded by the VB-FBO WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%
XNvGraphicsInterface[path to trojan]Added by the BCKDR-QKI BACKDOOR!
UNVHotkeyrundll32.exe nvHotkey.dllEnables the use of "hot keys" for changing setting on Nvidia graphics
XNvid[8 random charachters]Unidentified adware
XNvid32Nvid32.exeAdded by the GEMA TROJAN!
XNvidex32Nvidex32.exeAdded by the GEMA TROJAN!
YNVIDIA ActiveArmorntrayfw.exeSystem Tray access to the NVIDIA ActiveArmor hardware-optimized firewall built into some older nForce 3 and 4 series motherboard chipsets
XnVidia Application Driversnvidiav32.exeAdded by a variant of the IRCBOT BACKDOOR!
XnVidia Chip4NVCHIP4.EXEAdded by the LAMECADA-D BACKDOOR!
UNVIDIA Compatible Windows Vista Display driver, Version *RUNDLL32.EXE NvCpl.dll,NvStartupIf you use a utility (such as RivaTuner) to overclock any of the default display settings (system clock, memory clock, etc) for NVIDIA based graphics chipsets and want to apply these new settings at startup then this entry will maintain these. Leaving this entry enabled doesn't appear to have an impact on startup time. Not required if you use default settings and if you disable this entry you may also have to disable the associated "NVIDIA Display Driver Service" or "NVIDIA Driver Helper Service". Included with drivers since late 2002
UNVIDIA Compatible Windows7 Display driver, Version *RUNDLL32.EXE NvCpl.dll,NvStartupIf you use a utility (such as RivaTuner) to overclock any of the default display settings (system clock, memory clock, etc) for NVIDIA based graphics chipsets and want to apply these new settings at startup then this entry will maintain these. Leaving this entry enabled doesn't appear to have an impact on startup time. Not required if you use default settings and if you disable this entry you may also have to disable the associated "NVIDIA Display Driver Service" or "NVIDIA Driver Helper Service". Included with drivers since late 2002
XNvidia Control CenterNvTaskbarInit.exeAdded by the HILOTI-AY TROJAN!
XNvidia Control Daemonnksvc32.exeAdded by an unidentified WORM or TROJAN!
XNvidia Control Panelncsvc32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
XNVIDIA DisplayDisplayMonitor.exeAdded by the ABI.C WORM! Note - this is not a legitimate nVidia entry
XnVidia Display Drivernvsvc64.exeAdded by the IRCBOT-YK WORM! Note - this is not related to any nVidia based graphics card
XnVidia Display Drivers (x86)nvsys86.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XNVIDIA DriverMSPMSPSU.EXEAdded by the WOOTBOT.Y WORM!
UNVIDIA Driver Helper Service, Version *RUNDLL32.EXE nvsvc.dll,nvsvcStartInitially installed with Vista display drivers for NVIDIA based graphics cards. This entry replaced the "NVIDIA Display Driver Service" or "NVIDIA Driver Helper Service" in XP - which was used in part to maintain overclocked display settings. In a GeForce 8800GT test system this isn't the case. Disabling it caused no ill effects but it's exact purpose isn't known - hence the "U" recommendation
XNVIDIA driver monitornvsvc32.exeAdded by the AGENT-OZH TROJAN!
XnVidia DriversnVidiaDrvers.exeAdded by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card
XNVidia Drivers[path to trojan]Added by the RANCK-R TROJAN! Note - this is not related to any nVidia based motherboard or graphics card
UNVIDIA Media Center LibraryRunDLL32.exe NvMCTray.dll,NvTaskbarInitInstalled with display drivers for NVIDIA based graphics cards since late 2002, this entry allows the System Tray icon to be displayed - which gives access to (amongst others) the display settings (such as Antialiasing, Rotation and Colour) and the Desktop Manager (nView). If you don't change display settings very often then this is not required and settings can be changed manually via display properties. No tray icon option is available in Vista. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest"
XNVIDIA Media Center Librarywinlogon.exeAdded by the AUTORUN-AZK WORM! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
NNVIDIA nForce APU1 UtilitiesNVATray.exenVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time"
UNVIDIA nTunenTune.exeOlder version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures, voltages, clocks and fan speeds) of NVIDIA based motherboards and graphics cards from within Windows. Now part of NVIDIA System Tools
UNVIDIA nTunenTuneCmd.exeNow part of NVIDIA System Tools under the "Peformance" tag. NVIDIA nTune is utilty for monitoring and modifying the settings (such as temperatures, voltages, clocks and fan speeds) of NVIDIA based motherboards and graphics cards from within Windows. Until version 6.01 (when System Tools was released) graphics settings weren't retained in a profile but now they are. From version 6.05, nTuneCmd is no longer loaded via the registry "Run" keys but instead runs via the Performance Service (nTuneService.exe)
XNvidia Startup Managerksvc32.exeAdded by the AGENT-IWD TROJAN!
XnVidia System Driversnvsys32.exeAdded by an unidentified WORM or TROJAN! See here
UNVIDIA System MonitorNVMonitor.exeNVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures, voltages, clocks and fan speeds) of NVIDIA based motherboards and graphics cards
UNVidia System UtilityNVSystemUtility.exeNVidia System Utility - older version of the NVIDIA nTune utilty for monitoring and modifying the settings (such as temperatures, voltages, clocks and fan speeds) of NVIDIA based motherboards and graphics cards from within Windows. Now part of NVIDIA System Tools
XNVIDIA Video driversvideo_32D.exeAdded by the AGOBOT.KV WORM!
XNVIDIA Video driversvideo_32sD.exeAdded by the RBOT-BB WORM!
UNVIDIA┬« NVRAIDnvraidservice.exePart of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors
XNvidia32nvidia32.exeCoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!
XNVidiaDrvnvfsvm.comAdded by the DELF-A BACKDOOR!
XNviDiaGTlsass.exeAdded by the AUTORUN-DV WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder
NNvidiaQuickTweakrundll32.exe NvQtwk.dll, NvTaskbarInitSystem Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
Xnvidll32nvidll32.exeAdded by the RBOT-XK WORM!
XNvidMediaCenterwmsncs.exeAdded by the BBJC.A TROJAN!
UNVIEWrundll32.exe nview.dll,nViewLoadHookPart of NVIDIA's NVIEW Display Management Software - included in drivers for consumer and professional graphics products. In earlier drivers this entry enables the Desktop Manager and makes it's features such as multiple desktops and hot keys available to the user. Available via Control Panel → NVIDIA nView Desktop Manager
Xnviload32nviload32.exeAdded by the SDBOT-VT WORM!
NNvInitializerundll32.exe NvQtwk.dll, NvXTInitThought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
Xnvirundllnvirundll.exeAdded by the SPYBOT.NPS WORM!
Xnvjxuenvjxue.exeAdded by the EYEVEG-J WORM!
YNVmaxNVmax.exeNVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
UNVMCTRAYRunDLL32.exe NvMCTray.dll,NvTaskbarInitInstalled with display drivers for NVIDIA based graphics cards since late 2002, this entry allows the System Tray icon to be displayed - which gives access to (amongst others) the display settings (such as Antialiasing, Rotation and Colour) and the Desktop Manager (nView). If you don't change display settings very often then this is not required and settings can be changed manually via display properties. No tray icon option is available in Vista. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest"
UNvMediaCenterRunDLL32.exe NvMCTray.dll,NvTaskbarInitInstalled with display drivers for NVIDIA based graphics cards since late 2002, this entry allows the System Tray icon to be displayed - which gives access to (amongst others) the display settings (such as Antialiasing, Rotation and Colour) and the Desktop Manager (nView). If you don't change display settings very often then this is not required and settings can be changed manually via display properties. No tray icon option is available in Vista. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest"
NNVMixerTrayNVMixerTray.exeSystem Tray access to audio controls from nVidia's motherboard ForceWare software
UNVMonitorNVMonitor.exeNVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures, voltages, clocks and fan speeds) of NVIDIA based motherboards and graphics cards
XnvmsgdwnNVMSGDWN.EXEAdded by the GRABER-D TROJAN!
XNvMsnWIsass.exeAdded by the BROPIA.K WORM!
Xnvpatchnapatch.exeAdded by the SASSER-F WORM!
UNvPvrNetMonNvPvrNetMon.exeNetwork monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - "makes sure you don't miss your favorite show. If you won't be home to watch the show, just use the PVR to set future recordings"
NNVQuickTweakrundll32.exe NvQtwk.dll, NvTaskbarInitSystem Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
UNVRaidServicenvraidservice.exePart of NVIDIA® MediaShield™ Storage - NVIDIA's management utility for creating and monitoring hard disk RAID arrays for the controllers integrated on their motherboards. Includes a Disk Alert System for troubleshooting with notifications via the System Tray. Not required if you don't have a RAID array or if you created the array at the BIOS level. Some users complain that it can report false errors
YNvRegisterMCTrayRUNDLL32.EXE NVMCTRAY.DLL,NvMCRegisterApp NvCpl.dllRegisters the NVIDIA Control Panel (NvCpl.dll) via the NVIDIA Media Center Library (NVMCTRAY.DLL) on the first reboot only after the installation of NVIDIA graphics drivers on Win Me/XP. Added with nVidia graphics drivers since GeForce/ION Driver - Release 186. Both files are located in %System%
YNvRegisterMCTrayNviewRUNDLL32.EXE NVMCTRAY.DLL,NvMCRegisterApp nView.dllRegisters the NVIDIA Nview Desktop Manager (nView.dll) via the NVIDIA Media Center Library (NVMCTRAY.DLL) on the first reboot only after the installation of NVIDIA graphics drivers on Win Me/XP. Added with nVidia graphics drivers since GeForce/ION Driver - Release 186. Both files are located in %System%
?NVRotateSysTraynvsysrot.dllRelated to NVIDIA nView Control Panel. What does it do and is it required?
NNVRTnvrt.exeNVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
?NVRTClkNVRTClk.exeRelated to a Gigabyte video card. What does it do, and is it required?
Xnvsv32.exenvsv32.exeAdded by the FORBOT-DI WORM!
Xnvsv32.execstr.exeAdded by a variant of the SDBOT WORM!
Xnvsv32.exeasr_fnt.exeAdded by the WOOTBOT.GE WORM!
Xnvsv32.exenvsv33.exeAdded by the WOOTBOT.FP WORM!
NNvSvcnvsvc.exeNVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
Xnvsvcnvsvc.exeAdded by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%
XNVSVCnvsvc.exeAdded by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%
UNvSvcRUNDLL32.EXE nvsvc.dll,nvsvcStartInitially installed with Vista display drivers for NVIDIA based graphics cards. This entry replaced the "NVIDIA Display Driver Service" or "NVIDIA Driver Helper Service" in XP - which was used in part to maintain overclocked display settings. In a GeForce 8800GT test system this isn't the case. Disabling it caused no ill effects but it's exact purpose isn't known - hence the "U" recommendation
Unvsvc16nvsvc16.exeMySuperSPy surveillance software. Uninstall this software unless you put it there yourself
Xnvsvca32nvsvca32.exeAdded by the TACTSLAY.E TROJAN!
Xnvsvca32clfmon.exeAdded by the TACTSLAY.E TROJAN!
XNVSystem32nvscv32.exeAdded by the AGOBOT-NO WORM!
XNvt32complaint_7251.exeAdded by the ARTIEF.B TROJAN!
XNvUpdaternwiz32.exeAdded by a variant of the RBOT WORM!
Xnvviddrv32[random filename]Added by the RBOT-HT BACKDOOR!
XNvVideoCenterNvVid.exeAdded by the HAXDOOR-DO TROJAN!
XNvXplDeamonxstyles.exeAdded by the SMALL.AJ VIRUS!
?NWERebootdummy.exe??
Unwiznwiz.exePart of NVIDIA's NVIEW Display Management Software - included in drivers for consumer and professional graphics products. This entry runs the "NVIDIA Display Setup Wizard" if you connect (or already have connected) an additional display once the drivers have been installed. In later drivers it also loads the "nView Desktop Manager" (if you enable it via Control Panel → NVIDIA nView Desktop Manager) if you want to use features such as Hot Keys and Zoom. In both cases nwiz.exe doesn't remain in memory
XnwizKHATRA.exeAdded by the ORBINA-A WORM!
Unwiz.exenwiz.exePart of NVIDIA's NVIEW Display Management Software - included in drivers for consumer and professional graphics products. This entry runs the "NVIDIA Display Setup Wizard" if you connect (or already have connected) an additional display once the drivers have been installed. In later drivers it also loads the "nView Desktop Manager" (if you enable it via Control Panel → NVIDIA nView Desktop Manager) if you want to use features such as Hot Keys and Zoom. In both cases nwiz.exe doesn't remain in memory
Xnwiz32nwiz32.exeAdded by the SINBANK-A TROJAN!

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner