Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 5801 to 5900:

StatusAutorun nameCommandDescription
YF-Secure 2006fspex.exeF-Secure Anti-Virus automatic updater
YF-Secure Automatic UpdateF-Secure Automatic Update.exeAutomatically checks for updates for internet security software from F-Secure Corporation
XF-Secure Gatekeeper[malware name].exeAdded by the NUWAR.AXQ WORM!
UF-Secure Management AgentFSMA32.EXEF-Secure antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products
YF-Secure ManagerFSM32.EXEF-Secure antivirus - carry out scheduled virus scans automatically
YF-Secure Startup WizardFSSW.EXEF-Secure antivirus
YF-Secure TNBTNBUtil.exeF-Secure antivirus
YF-StopWF-StopW.exeF-Prot anti-virus background scanner by F-Risk Software
Xf~ara32.exeAdded by the CAY TROJAN!
XF0E84.exeF0E84.exeTrustDefender, IronDefender and IronProtector rogue security software - not recommended, removal instructions here, here and here
Uf1Tray.exeF1TRAY.EXESystem Tray icon for FusionOne's MightyPhone software. "MightyPhone is a concept for wirelessly synchronizing the data on your mobile phone with your web-based or PC based organizer"
?f23mxinsf23mxinsRelated to the now discontinued ATI Fire GL3 graphics card. What does it do and is it required?
Xf2install.exef2install.exeAdded by the IEFEAT-I TROJAN!
UF5D7050v3Belkinwcui.exeWireless configuration utility for the Belkin F5D7050 Wireless G USB Adapter
UF5D8001Belkinwcui.exeWireless configuration utility for the Belkin F5D8001 N1 Wireless Desktop Card
UF5D8011Belkinwcui.exeWireless configuration utility for the Belkin F5D8011 N1 Wireless Notebook Card
UF5D8055v1Belkinwcui.exeWireless configuration utility for the Belkin F5D8055 Wireless N+ USB Adapter
UF5D8071Belkinwcui.exeWireless configuration utility for the Belkin F5D8071 N1 Wireless ExpressCard
UF5D9010Belkinwcui.exeWireless configuration utility for the Belkin F5D9010 Wireless G+ MIMO USB Network Adapter
UF5D9050Belkinwcui.exeWireless configuration utility for the Belkin F5D9050 Wireless G+ MIMO USB Network Adapter
Xf607f607.exeAdded by the URAT.B TROJAN!
Xf73cdc8ee94ebtsendto.exeAssociated with mysearchnow.com/searchbar.html
Xf94mggfhfghodftdf[path to trojan]Added by the SMALL.JHZ TROJAN!
UFabrik Ultimate Backup Statusfabrikhomestat.exeStatus monitor for Fabrik Ultimate Backup from Fabrik Inc. "No matter what happens to the drive on your desk - a spilled drink, a curious toddler, a theft or a natural disaster - you know your files are still safe and secure on Fabrik Ultimate Backup's off-site servers"
XFacebookSystemsFacebookSystems.vbsAdded by the AGENT-QLE TROJAN!
XFacegame[path to trojan]Added by the AGENT-ICM TROJAN! The most common filename is "Facegame.exe" located in %AppData%\Facegame
Ufacemoodsfacemoodssrv.exeSupports the free Facemoods add-on for Facebook Chat that "gives you a huge collection of smileys, winks, text effects and more!" and once loaded it exits. Note - if you install using the default options it will make facemoods.com the default home page, search provider and "new tab" page for your browser
Ufacemoodssrvfacemoodssrv.exeSupports the free Facemoods add-on for Facebook Chat that "gives you a huge collection of smileys, winks, text effects and more!" and once loaded it exits. Note - if you install using the default options it will make facemoods.com the default home page, search provider and "new tab" page for your browser
YFairPointServicepoint.exeFairPointServicepoint.exeFairPoint Servicepoint Agent tool installed when you choose to install their internet security suite - sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled
XFaltCheckallps.exeAdded by the AGENT.RAP TROJAN!
UFamilyKeyLoggercisvc.exeFamily Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Located in %ProgramFiles%\FamilyKeyLogger
XFantasia injectorwincfg.exeAdded by the AGOBOT.US WORM!
?fapmonfapmon.exeFair Access Policy monitor for DirecPC/DirecWay internet access
Xfarkrishfarkrish.exeAdded by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example
Xfarmmextfarmmext.exeVX2.Transponder parasite updater/installer related
XFashFash.exeIBIS Toolbar hijacker
Xfaslkakj11kjgagklj11.exeAdded by the LEGMIE-ARE TROJAN!
Nfastfast.exeOptional install from an early release of the Windows XP PowerToys to provide an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system)
XfastA-fast.exeA-fast Antivirus rogue security software - not recommended, removal instructions here
XFast Antivirus 2009FastAV.exeFast Antivirus rogue security software - not recommended, removal instructions here
NFAST DefragFAST2.EXEFastDefrag defragmenting software
XFast Homesvcnvt.exeDetected by Kaspersky as the DELF.KS TROJAN! This file may be found in the System folder on 9x machines, however as of this writing it has only been seen in the System32 folder
XFast Searchsvcnv.exeHomepage, Startpage hijacker. Possible variant of Trojan-Downloader.Win32.Delf
XFast startNtut.exeAdware - deteced by Kaspersky as the FAVADD.I TROJAN!
XFast startsvcnt.exeAdware - detected by Kaspersky as a variant of the FAVADD TROJAN!
UFastCachefc.exeFastCache from AnalogX - speeds up browsing by resolving DNS requests locally
XFastDownloadsrundll32.exe MSA64CHK.dll,DllMostrarMatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System%
Xfastsmellfastsmell.exeAdded by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example
XFastStartntnut32.exeAdded by the STARTPAGE.L TROJAN!
XFastStartsvcnut.exeBrowser hijacker - a variant of the STARTPAGE.L TROJAN!
XFastStartsvcnut32.exeBrowser hijacker - a variant of the STARTPAGE.L TROJAN!
NFastTrack AcceleratorSPEED UP.EXEFastTrack Accelerator - "speedup" utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus
XFASTTRACKNETVISIONNETVISION.exeDialCar-Z premium rate dialer
UFastTVSyncFastTVSync.exePart of InterVideo (now Corel) DVD Copy - "fast DVD copying and file conversion software. In just three steps, you can copy videos to most DVD formats, or convert them for smooth, flawless viewing on your PSP® or iPod®. With broad format support and unique CopyLater™ technology, DVD Copy saves you time and ensures high-quality output like no other copying software"
NFastUserfast.exeOptional install from an early release of the Windows XP PowerToys to provide an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system)
NFastUsrfast.exeOptional install from an early release of the Windows XP PowerToys to provide an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system)
XfaTfaT.exeAdded by the BANKER-DFP TROJAN!
Xfat.exefat.exePart of the WinAntiVirus Pro 2006 and WinAntiVirus Pro 2007 rogue security programs - not recommended, removal instructions here and here
XFat32 Microsoftfat32.exeAdded by the RBOT-EL WORM!
UFatPipeDHCPSoftware enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
UFatpipe Dialerfpdialer.exeDailler for Fatpipe - software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
Ufatrecovfatrecov.exeSCKeyLog.j keystroke logger/monitoring program - remove unless you installed it yourself!
UFavoriteSyncFavoriteSync.exeFavoriteSync keeps the same set of Internet Explorer Favorites on several computers in sync
UFaxCenterServerfm3032.exeFaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Incorporated into software by Lexmark, MCI, Lotus, My Software, Broderbund, Traffic Software and many others
UFaxCenterServer4_in_1fm3032.exeFaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Incorporated into software by Lexmark, MCI, Lotus, My Software, Broderbund, Traffic Software and many others
UFaxCtrl.exeASMediaProxyServer.exePart of Avaya's Contact Center Express - "a multi-channel, high-volume software solution from Avaya designed specifically for the intelligent routing and computer telephony integration (CTI) needs of medium-sized contact centers"
NFaxTalk CallControl 6.0FTClCtrl.EXEThis allows the software to handle incoming and outgoing communications without requiring the FaxTalk Communicator application to be loaded into memory. Can be started manually
UFBDirectFBDirect.exeSoftware that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!
?FBIFBISM.exeCompaq related but what does it do?
XFBSearchFastBrowserSearchProtection.exeFast Browser Search/Search Guard Plus parasite - installed with "Make the Web Better" applications such as My Web Tattoo, My Face LOL and Google Easy Money Kit. See here and here for more information
XFBSearchSearchGuardPlus.exeFast Browser Search/Search Guard Plus parasite - installed with "Make the Web Better" applications such as My Web Tattoo, My Face LOL and Google Easy Money Kit. See here and here for more information
XFBSSAie3sh.exeFast Browser Search/Search Guard Plus parasite - installed with "Make the Web Better" applications such as My Web Tattoo, My Face LOL and Google Easy Money Kit. See here and here for more information
Xfcrunfc.exeAdded by the CAMPURF WORM!
UFCACheckFCACheck.exeFamily Cyber Alert surveillance software. Uninstall this software unless you put it there yourself
XFCEngineFCEngine.exeCASClient adware
XFCHelpFCHelp.exeAdded by either FCHelp adware or a variant of it
UFCleanerFCleaner.exeFCleaner by FTweak Inc - "is a freeware all-in-one Windows disk and registry cleaning and optimization tool. It removes unused files and invalid registry entries that are eating up your disk space and slowing your system down, tweaks your system and allows your Windows to run faster." Features include removing unused files, cleaning internet history, managing startup programs and a fully featured registry cleaner
XFCManFCMan.exeFCHelp adware
UFD_SAPFD.exeReported to be the autopassword program from the Sony Microvault thumb drive
XFdaemon securityfsecur.exeAdded by the SDBOT.KXO WORM!
XFDD SYSTEMFdd.exeAdded by the MYTOB-FO WORM!
XfddddHOMEdxxatp.exeAdded by the RANKY.AA TROJAN!
XFdr Command Modulesp2.exeAdded by the SDBOT.WP WORM!
XFDriverwindrv.exeAdded by the DELF.WG TROJAN!
XFeCPYfecpy.exeFlashEnhancer adware
Yfeedbackfeedback.exePart of the error reporting mechanism for the Outpost range of security products from Agnitum Ltd - including Outpost Firewall Pro, Outpost Antivirus Pro and Outpost Security Suite Pro. Dumps the system information to a log at startup in case it's needed and exits. Also used by Lavasoft Personal Firewall and located in either "Agnitum" or "Lavasoft" sub-directories of %ProgramFiles%
Ufeedreader.exefeedreader.exe"Feedreader is a freeware Windows application that reads and displays Internet newsfeeds aka ATOM and RSS feeds based on XML"
Xfeelalrightmirc.exeAdded by the IRCFLOOD-M WORM!
UFEELitDeviceManagerfeelitdm.exeAssociated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
XfegozeSVCH0ST.EXEAdded by the GRAYBIRD.D VIRUS! Note - the filename has the digit 0 rather then the uppercase "o"
UFellowes ProxyR3proxy.exeInstalled with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
XFen Startupsfensvc32.exeAdded by the RANDEX.CCF WORM!
XFenio Startupsfnesvc32.exeAdded by the AGOBOT-OS BACKDOOR!
UFerrariWallPaperFerrariWP.exeCalendar that replaces the default desktop background image. It comes with every Acer Ferrari 3000 laptop. Also downloadable for members of www.ferrari.com
XFestPlattenCleanerSysRep.exeFestPlattenCleaner, German rogue system error and cleaning utility - not recommended. A member of the ErrClean family
XFestplattenReinigerGDC.exeFestplattenReiniger, German rogue privacy tool - not recommended. A member of the PCPrivacyTool family
Xff[path to worm]Added by the RBOT-XL WORM!
Xffsvhost32.exeAdded by the LINEAG-AFF TROJAN!
Xffeqfqsdqddss.exeAdded by the SDBOT-SG WORM!
XffeqOMEvcvsav.exeAdded by the RANKY.AB TROJAN!

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner