Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 6401 to 6500:

StatusAutorun nameCommandDescription
XGetTheMusicrundll32.exe MSA64CHK.dll,DllMostrarMatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System%
UGetting started with MacDriveMDGetStarted.exeMacDrive 7 from Mediafour Corporation - "enables anyone using Windows Vista, XP, and 2003 Server to seamlessly access Mac disks (HFS/HFS+) of all types, including CDs, DVDs, hard drives, floppy, Zip, Jaz, and more!"
XgetwinwinB_.exeAdded by the BANKER-HS TROJAN!
Xgf1.0.0.2ggf.exeAdded by the EDFON.A TROJAN!
Xgfxtrayrundll32 ctccw32.dll,findwndAdded by the AGENT.AOU BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted, The "ctccw32.dll" is located in %System%
XggePSKfpxtPggePSKfpxtP.exeAdded by the FAKEAV-DVV TROJAN!
XGhost AntivirusGhostAV.exeGhost Antivirus rogue security software - not recommended, removal instructions here
XGhost Relay[random filename]Added by the DNSCHANG.EK TROJAN!
UGhostSecuritySuitegss.exeGhost Security Suite - protect the registry from unauthorized reading and modification and other tools
YGhostStartServiceGhostStartService.exeInstalled with older versions of Symantec's Norton Ghost backup software (either as a standalone product or as part of Norton SystemWorks). This is the background process required for Ghost to work in Windows - when you use the Ghost Explorer (browse/extract files from archives) or start Ghost tasks such as backup and restore. Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP
NGhostStartTrayAppGhostStartTrayApp.exeSystem Tray access to older versions of Symantec's Norton Ghost backup software (either as a standalone product or as part of Norton SystemWorks)
YGhostSurfDelSatelliteDeleteSatellite.exePart of SpyCatcher spyware remover from Tenebril. Prevents rogue programs from sending personal information to a remote user via the Internet. If you use SpyCatcher with real time scanning, you'll want to leave this file in place
Xgigabit.exegigabit.exeAdded by the BEAGLE.U WORM!
XGigaByteCheatle.exeAdded by the SHODI.B VIRUS!
UGIGABYTE Gamer HUDHUD.exeGigabyte's Gamer HUD graphics card utility. Primarily used for overclocking to adjust the voltage and working frequency of the GPU, Shader, and video memory
UGIGABYTE Gamer HUD LiteHUD.exeLite version of Gigabyte's Gamer HUD graphics card utility. Primarily used for overclocking to adjust the voltage and working frequency of the GPU, Shader, and video memory
UGiganews AcceleratorGiganewsAccelerator.exeGiganews Accelerator from Giganews, Inc. - "a software-based news proxy which will allow you to compress headers and enable 256-bit SSL encryption, regardless of whether or not SSL is supported natively by your news client"
YGilat SOM Enumeratordllhost.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
YGilatFTCftc.exeFor Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Xgimmygames[path to trojan]Added by the DLOADR-LN TROJAN!
Xgimmysmileysgimmysmileys.exeGimmySmileys adware
XGinaDllntgina.dllAdded by the ANIG.A WORM!
?GisdnLoggisdnlog.exeBT Digital Access USB
UGlass2kGlass2k.exe"Glass2k is a small little program that allows Win2K/XP users to make any window transparent"
UGlassy Calculator IIGlassy Calculator II.exeGlassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits
UGlassy Calculator IIGLASSY~1.EXEGlassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Glassy Calculator II.exe" is shown as "GLASSY~1.EXE"
UGlassy CalendarGlassy Calendar.exeGlassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits
UGlassy CalendarGLASSY~2.EXEGlassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Glassy Calendar.exe" is shown as "GLASSY~2.EXE"
XGLF Network Lan MonitorNPFMNTOR.exeAdded by the RBOT-AGY WORM!
YGlideGlidew32.exeCirque touchpad driver
XGlobal StartupWinDash.EXEDetected by Kaspersky as the VB.Q WORM!
XGlobalFlagACERACER.exeAdded by the VB.BL WORM!
XGlobalFlagimglogimglog.exeAdded by the AGENT-GYK TROJAN!
XGlobalSCAPE[random filename]Added by the RBOT-AYM WORM!
UGlobeCom_Full_Client_McciTrayAppMcciTrayApp.exeSystem tray access to Motive's broadband configuration and repair utility - for GlobeCom\TELUS users
UGlobeTrotter Connectglobetrotter connect.exeGlobeTrotter Connect - easy-to-use software application that "simplifies the management of Windows-based broadband Internet connections to WWAN networks, worldwide, automatically configuring connection to the service provider according to the SIM card inserted"
XGlock Suite 1.1glock32.exeAdded by the TINY.GV TROJAN!
XGLSetIT32msiexec16.exeAdded by the OPTIX PRO TROJAN!
XGLSetIT32isass.exeAdded by a variant of the OPTIX PRO TROJAN!
XGLSetT32smsiexec.exeAdded by the OPTIX-D TROJAN!
?gluongluon.exeIn a gluon/bin sub-directory
Xglvglv.exeAdded by the DLOADER-NG TROJAN!
UGmail CheckerGmail Checker.exeGmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits
UGmail CheckerGMAILC~1.EXEGmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "Gmail Checker.exe" is shown as "GMAILC~1.EXE"
XGMedia2GSM2.exeMalware downloader - detected by Kaspersky as the VB.UX TROJAN!
XGMedia2GSMedia3.exeMalware downloader - detected by Kaspersky as the VB.UX TROJAN!
YGmouseGmouse.exeAmouse mouse driver - required if you use non-standard Windows driver features
XGmsvc32gmsvc32.exeAdded by the AGOBOT.ABN WORM!
UGnetmousgnetmous.exeGenius mouse driver - required if you use non-standard Windows driver features
UGNETMOUSEgnetmouse.exeGenius mouse driver - required if you use non-standard Windows driver features
XGNP Generic Host Processsvchost.exeAdded by the ZAPCHAS-F BACKDOOR! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!
?gnubgnub.exe??
Xgocvir.exeAdded by the SILOV-A WORM!
XGo And Startsvdll32.exeAdded by the RBOT.AI BACKDOOR!
XGo!Zillagozilla.exeDownload manager for resuming downloads and choosing multiple download locations. Advertising spyware
XGo!Zilla Monster DownloadsGo.exeDownload manager for resuming downloads and choosing multiple download locations. Advertising spyware
UGoBackGBMenu.exeSystem Tray access to Roxio's GoBack system restoration software (before it became Norton GoBack) - which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty, performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag and not required for WinMe/XP users - but recommended for Win9x/NT/2K users. Previously released by Adaptec and Wild File
UGoBackGBTray.exeSystem Tray access to Roxio's GoBack system restoration software (before it became Norton GoBack) - which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty, performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag and not required for WinMe/XP users - but recommended for Win9x/NT/2K users. Previously released by Adaptec and Wild File
YGoBack Polling ServiceGBPoll.exePart of Symantec's Norton GoBack system restoration software - which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty, performing the same functions with extra features as System Restore on WinMe/XP systems. Provides essential background support services for GoBack and loads via the registry "Run" or "RunServices" keys in 98/Me and as a service in XP. Disable before running Scandisk or Defrag and not required for WinMe/XP users - but recommended for Win9x/NT/2K users. Previously released by Roxio, Adaptec and Wild File
XGOGGOG.exeAdded by the PHILIS.B VIRUS!
Xgoidrgoidr.exeGoidr adware
Xgolbolawindows32.exeAdded by the BANKER.CIY TROJAN!
XGoldenAntiSpypgs.exeGoldenAntiSpy rogue security software - not recommended. A member of the AVSystemCare family
UGoldensoft_MndlSvrMndlSvr.exeGoldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
XGolumservices.exeAdded by the GOLUM.A TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
Xgolummservices.exeAdded by the DLOADER-ET TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "golumm" subfolder
Xgoodbadvir.exeAdded by the SILOV-B WORM!
Xgooglegoogle.exeAdded by the RBOT-AMW WORM!
UGoogle DesktopGoogleDesktop.exeGoogle Desktop - "a desktop search application that provides full text search over your email, files, music, photos, chats, Google Mail, web pages that you've viewed and more. By making your computer searchable, Google Desktop puts your information easily within your reach and frees you from having to manually organise your files, emails and bookmarks"
UGoogle Desktop SearchGoogleDesktop.exeGoogle Desktop - "a desktop search application that provides full text search over your email, files, music, photos, chats, Google Mail, web pages that you've viewed and more. By making your computer searchable, Google Desktop puts your information easily within your reach and frees you from having to manually organise your files, emails and bookmarks"
XGoogle Earth[random filename]Added by the RBOT-AXK TROJAN!
NGoogle Earth ViewerGOOGLEMAPS.EXEGoogle Earth "combines satellite imagery, maps and the power of Google Search to put the world's geographic information at your fingertips"
UGoogle IME AutoupdaterGooglePinyinDaemon.exeGoogle Pinyin Input Method Editor (IME) - allows a user to input Chinese characters by entering the pinyin of a Chinese character (with or without tone, depending on the system) and then presenting the user with a list of possible characters with that pronunciation
Xgoogle Intrenet Explorergoogle.pifAdded by the RBOT-ARA WORM!
UGoogle Pinyin 2 AutoupdaterGooglePinyinDaemon.exeGoogle Pinyin Input Method Editor (IME) - allows a user to input Chinese characters by entering the pinyin of a Chinese character (with or without tone, depending on the system) and then presenting the user with a list of possible characters with that pronunciation
UGoogle Quick Search BoxGoogleQuickSearchBox.exePart of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the "Start" button and Quick Launch toolbar and "lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"
XGoogle serviceGooglesetup.exeAdded by the IRCBOT-RJ WORM!
XGoogle Service FRGO0GLEFREE.EXEAdded by a variant of the SPYBOT WORM!
Xgoogle toolbarggtb32.exeAdded by the AGOBOT-RR WORM!
XGoogle ToolbarSPY_NET_RAT.exeAdded by the AGENT-LRO TROJAN!
NGoogle UpdateGoogleUpdate.exeUpdate manager for the range of tools available from Google - such as the Chrome web browser and Picasa photo manager. Located in %AppData%\Google\Update
XGoogle UpdateGoogleUpdate.exeAdded by the BUZUS.DBFM TROJAN! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in %System%
NGoogle UpdaterGOOGLE~1.EXEDownloads and installs updates for Google applications (Google Earth, Google Desktop, etc.)
NGoogle UpdaterGoogleUpdater.exeDownloads and installs updates for Google applications (Google Earth, Google Desktop, etc.)
XGoogle UpdatersysDriver.exeAdded by the IRCBOT-C MALWARE!
XGoogleBot.exeGoogleBot.exeAdded by the GB TROJAN!
NGoogleDCClientGoogleDCC.exeGoogle Compute Client - only present if you installed the Google Toolbar with "Google Compute" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click "Stop Computing". No longer supported
UGoogleDesktopGoogleDesktop.exeGoogle Desktop - "a desktop search application that provides full text search over your email, files, music, photos, chats, Google Mail, web pages that you've viewed and more. By making your computer searchable, Google Desktop puts your information easily within your reach and frees you from having to manually organise your files, emails and bookmarks"
UGoogleQuickSearchBoxGoogleQuickSearchBox.exePart of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the "Start" button and Quick Launch toolbar and "lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"
Ugoogletalkgoogletalk.exeGoogle Talk "enables you to call or send instant messages to your friends for free-anytime, anywhere in the world". Can be launched manually
UGoogleToolbarNotifierGoogleToolbarNotifier.exePart of Google Toolbar (from version 4 onwards) for IE. "Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved
XGoogleUpdategoogleupdate.exeAdded by the FYNLOSKI-A BACKDOOR! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in the main %AppData% directory
XGoogleUpdater3GoogleMapper.exeAdded by the ROUTROBOT WORM!
Xgotnewupdate000.exegotnewupdate000.exeAdded by the FAKEAV-BGA TROJAN!
UGoToAssist Express Customerg2ax_service.exeCitrix GotoAssist Express - "provides you with live-support capability. Easily view and control your customers' computers online to quickly resolve their technical issues." End customer's version
UGoToAssist Express Expertg2ax_start.exeCitrix GotoAssist Express - "provides you with live-support capability. Easily view and control your customers' computers online to quickly resolve their technical issues." Support expert's version
UGoToMeetingg2mstart.exeCitrix GotoMeeting - web conferencing and online meeting tool which "allows you to host an online meeting with up to 15 people - so you can do more and travel less"
UGoToMyPCg2svc.exeCitrix GoToMyPc - web-based remote-access solution that allows individuals and companies to register their computers online and then securely access those computers from any web browser
UGoTrustedGoTrusted Secure Tunnel.exe"GoTrusted is the fast, easy way to secure your PC's Internet data and protect your privacy"
XGotSmileyGotSmiley.exeGotSmiley - ad supported program that provides the user with smileys for use in emails. Not recommended. Please note that Claria Corporation no longer support GAIN-Supported software - see here

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner