Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 1303 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
Xcc:\archiv~1\win.comAdded by the CUYDOC TROJAN!
UC-Media Echo ControlEchoCtrl.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer
NC-Media MixerMixer.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
XC:\lanmao.exeBDQX.EXEAdded by the BIGDIPPER.A BACKDOOR!
UC:\Program Files\dfjdkjfdkjfldjf\dfjdkjfdkjfldjf\winlogin.exeCritProc.exeKeyProwler keystroke logger/monitoring program - remove unless you installed it yourself!
UC:\Program Files\NetMeter\NetMeter.exeNetMeter.exe"Net Meter is a small, customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP, but it should work just as well on all other Win32 operating systems"
XC:\WINDOWS\asam.exeasam.exeAdded by the PEACOMM.E TROJAN!
XC:\WINDOWS\IEXPLOR.EXEIEXPLOR.EXE"Pop Marketing" adware
XC:\WINDOWS\system32\SetupCmd.exeSetupCmd.exeDetected by Kaspersky as the AGENT.AAW TROJAN!
XC:\WINDOWS\VCMnet11.exeVCMnet11.exeWindows AFA Internet Enhancement - browser hijacker redirecting to adsourcecorp.com. Removal instructions here
XC:\WINDOWS\WinTask.exeWinTask.exe"Pop Marketing" adware
UC2KCYB2K.EXECYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
Uc32cs2c32cs2.exeCyber Sentinel - internet filtering software
XC7[path to worm]Added by the MEDIAKILL.A WORM!
YCA Anti-SpywareCAPPActiveProtection.exePart of CA Anti-Spyware until 2009 (either as a stand-alone product or as part of a suite). Works in conjunction with the CA Pest Patrol Realtime Protection Service (ITMRTSVC) service to monitor software installations for potentially malicious behaviour, warn the user if any is detected and request user input on how to handle them
YCA Anti-VirusCAVRID.exeReal-time scanning engine for versions of CA Anti-Virus products until 2009 (both stand-alone and as part of security suites) - including eTrust EZ Antivirus, eTrust Vet Antivirus and a version available from Yahoo! Scans files for viruses and other malware when you access, create or download them
UCA Personal Firewallcafw.exeInstalled with older versions of CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The file opens the main firewall configuration Window but does not appear to run on startup - hence the "U" recommendation
YCA Personal Firewallcapfasem.exeRuns the core program for older versions of CA Personal Firewall (installed as either as a stand-alone product or as part of CA Internet Security Suite)
?CA Personal Firewallcapfupgrade.exeInstalled with CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The exact purpose is unknown at present and it does not normally appear to run
UCA Security Suitecasc.exeInstalled with both stand-alone security tools and suites from CA. Provides System Tray access to the Control Center - which indicates the current tool status and can be used to launch scans, updates or access product information. The icon changes appearance if a warning or issue is detected
UCA Security Suitecctray.exeInstalled with older versions of both stand-alone security tools and suites from CA. Provides System Tray access to the Control Center - which indicates the current tool status and can be used to launch scans, updates or access product information. The icon changes appearance if a warning or issue is detected and double-clicking on it gives details about the warning or the alert state
UCA-AMAgentamagent.exeUnicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery, hardware inventory, network inventory, software inventory, configuration management, software usage monitoring, license management and extensive cross-platform reporting
Xca84c702-c758-4421-974e-b02662e76d7c_6rundll32.exeAntimalware Defender rogue security software - not recommended, removal instructions here! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Xca84c702-c758-4421-974e-b02662e76d7c_6rundll32.exe ca84c702-c758-4421-974e-b02662e76d7c_6.aviAntimalware Defender rogue security software - not recommended, removal instructions here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "ca84c702-c758-4421-974e-b02662e76d7c_6.avi" file is located in %System% and %AppData%
YcaaspydelayedscanCAAntiSpyware.exePart of CA Anti-Spyware until 2009 (either as a stand-alone product or as part of a suite). Runs a delayed scan on the first boot after installation before exiting
YCaAvTrayCAVTray.exeSystem Tray access to earlier versions of the CA antivirus products - including EZ Antivirus, eTrust Vet Antivirus and a version available from Yahoo!
XCabchkCabchk.exeAdded by the GEMA TROJAN!
XCabchk32Cabchk32.exeAdded by the GEMA TROJAN!
XCABCInstallCABCInstall.exeIgnite Technologies (was CABC) content delivery software
XCable Modem AdapterWindowsSec.exeAdded by the WOOTBOT.A WORM!
UCacheBoosttrayicon.exeCacheBoost "optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers, resulting in a performance boost"
XCacheLoader[path to trojan]Added by the DLOADER-NZ TROJAN!
NCachemanCacheman.exeFreeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
YCacheMgrCacheMgr.exeSophos Antivirus Remote Update
UCacheSentry ProCacheSentry Pro.exe"CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache"
NCACStartercacstart.exeCash A Check - check writing software
UCaddais BackupOnDemandBODMon.exeCaddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"
UCadenzaCdzSvc.exeCadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices
UCADScads.exeCyber Sentinel - internet filtering software
UCafeStationCafeStation.exe"CafeSuite is the solution for your internet cafe. Our software provides you with ameans to control the workstations, manage customer database, sell products and generate detailed reports and statistics"
Ucafwcafw.exeInstalled with older versions of CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The file opens the main firewall configuration Window but does not appear to run on startup - hence the "U" recommendation
Ucafwccafw.exeInstalled with older versions of CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The file opens the main firewall configuration Window but does not appear to run on startup - hence the "U" recommendation
NCAgentCAgent.exeAbbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
XcAgOu[filename].htaAdded by the KAKWORM WORM!
NCahootWebcardCahootWebcard.exe"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed
Xcaidiysetupdiynetsetupuni.exeDIYNet adware
YCAISafeisafe.exeE-mail scanning part of EZ Antivirus - part of the eTrust range of security products formerly available from CA but now discontinued. Available as a stand-alone product or as part of the EZ Armor suite. Runs as the CAISafe service in later product versions
UCaISSDTcaissdt.exeInstalled with older versions of both stand-alone security tools and suites from CA. Provides System Tray access to the dashboard - which indicates the current tool status and can be used to launch scans, updates or access product information
NCal Reminder Shortcutcalrem.exeProduces a pop-up reminder of events scheduled using the MS Office Calendar
Xcalcrundll32.exe [path] ntuser.dll,_IWMPEvents@0Added by the OPACHKI.A TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "ntuser.dll" file is located in %UserProfile%
Xcalcrundll32.exe calc.dll,_IWMPEvents@0Added by the OPACHKI.A TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "calc.dll" file is located in %System%
XCalc Microsoft Windowswincalc.exeAdded by an unidentified WORM or TROJAN!
XCALC32CALC32.EXEAdded by the SPYBOT-EC WORM!
XCalcSciencecscientist.exeAdded by the SDBOT.ACQ WORM!
UCalendarCalendar.exeThis entry can be added by PlainSight Desktop Calendar and older versions of Desktop iCalendar from Desksware and the older Calendar 200X - which is no longer supported by or available from the author
?Calendar 200X Monitorcalmonitor.exeBackground task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one
NCalendar 200X Remindercalendar.exePart of Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. Displays reminders for holidays, anniversaries, tasks, etc. Disabling this entry via the program also disables the Calendar 200X Monitor entry
?Calendar MonitorcalmonitorBackground task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present
UCalendarscopecs.exeCalendarscope calendar software
Xcalkcalk.exeAdded by the STARTPA-FH TROJAN!
XCall Function System32sddriver.exeAdded by a variant of the SDBOT TROJAN!
XCall32Call32.exeAdded by the SPAMMIT-H TROJAN!
YCallBumpingcbpopw.exeRelated to the Gazel 128 PCI ISDN adapter. Required if you use it
UCallCenter Main ApplicationV3calmcp.exe"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Main application
UCallCenter Printer InterfaceV3faxecp.exe"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Fax printer
NCallControlftctrl32.exeFaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
?calmonitorcalmonitor.exeBackground task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one
?calmonitorcalmonitorBackground task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present
UCamaro CalendarCamaro Calendar.exeCalendar gadget included with the Camaro theme for MyColors from Stardock Corporation
UCamaro ClockCamaro Clock.exeClock gadget included with the Camaro theme for MyColors from Stardock Corporation
UCamaro WeatherCamaro Weather.exeWeather gadget included with the Camaro theme for MyColors from Stardock Corporation
NCamCheckCamCheck.exeNuCam camera software related
UCamenoCameno.exeCameno is a program which brings tabbed windows to MSN Messenger 6.0 and above
UCamera Assistant Softwaretraybar.exeCamera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam
UCamera DetectorCAMDET~*.EXEACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
UCamera DetectorCamdetect.exeACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
UCamera DetectorDEVDET~*.EXEACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
?CameraApplicationLauncherCameraApplicationLaunchpadLauncher.exeSupports the integrated webcam on IBM/Lenovo Thinkpad notebooks. What does it do and is it required?
UCameraAssistantCameraAssistant.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to configure and tweak your webcam settings. Includes support for the Quick Assistant - which launches when a video application (such as video conferencing in an instant messaging client) accesses to camera so you can quickly fine tune face tracking and zoom, for example. If you don't use the camera on a daily basis create your own shortcut and run it manually when required
NCamfrogCamfrogNet.exe Camfrog Video Chat.exeCamfrog video chat software by Camshare Inc
NCamio ViewerIXApplet.exePart of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them
NCamio Viewer 1.8.7IXApplet.exePart of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them
NCamio Viewer 2.0IXApplet.exePart of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them
NCamio Viewer 3.2IXApplet.exePart of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them
?CamMonitorhpqcmon.exeFrom HP and related to digital imaging
YCamWizardCamWizrd.exeLaunches the Logitech Camera Wizard on the first reboot after installing versions of Logitech QuickCam webcam software
NCanadaCanada.exeKnown to be a dialler - but is it maliscous or clean?
UCanarycanary-std.exeCanary keystroke logger/monitoring program - remove unless you installed it yourself!
Xcandycommand32.exeAdded by the RBOT-LV WORM!
XcandynetTaskmsg.exeAdded by the RBOT-NA WORM!
UCANoeCANoe32.exeCANoe from Vector Informatik. Development and test tool for Engine Control Units (ECU) based upon the CAN, LIN, MOST, FlexRay, Ethernet and J1708 bus systems
UCanon MultiPASS Status Monitormonitr32.exeCannon Multi-Pass status monitor
?Canon PC1200 iC D600 iR1200G Status WindowCAPM1LAK.EXECannon printer related - is it required in startup?
UCanonMyPrinterBJMyPrt.exePrinter software for Canon Bubblejet printers
UCanonSolutionMenuCNSLMAIN.exeCanon's Solution Menu dialog box leads you quickly toward documentation, utilities, and help files
?CAP3ONCAP3ONN.EXECanon driver, purpose unknown. Is it required in startup?
Ycapfasemcapfasem.exeRuns the core program for older versions of CA Personal Firewall (installed as either as a stand-alone product or as part of CA Internet Security Suite)
NCapfaxcapfax.exePhoneTools fax software
?capfupgradecapfupgrade.exeInstalled with older versions of CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The exact purpose is unknown at present and it does not normally appear to run
UCAPingCAPing.exeCitibank Citianywhere software
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner