Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 483 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
UH/PC Connection AgentWCESCOMM.EXEConnection manager for Microsoft ActiveSync - mobile device synchronization software for Windows XP (and earlier), supporting mobile devices based upon the Windows CE OS (such as Pocket PC, Handheld PC and Windows Mobile). Automatically launches ActiveSync (if enabled) when the mobile device is connected. If disabled it will re-instate the next time ActiveSync runs - hence the reluctant "U" recommendation
YH2Ocledx.exeRelated to copyright protection products by SyncroSoft
UH2OWIBUCXWibu.exeRelated to CodeMeter from WIBU-SYSTEMS AG. Software protection hardware
Xh4te Service Driversh4te.exeAdded by a variant of the RBOT WORM!
UHaburazerhid.exeMicrosoft Habu (by Razer) gaming mouse driver - required if you use the additional features and programmed keys/macros
Xhachimitsu-lemonhachimitsu-lemon.exeAdded by the HACHILEM TROJAN!
XHackMuFptHackMuFpt.exeAdded by the SCLOG-AG TROJAN!
Xhadespeterfirefx_.exeAdded by the AGENT-QVT TROJAN!
Xhagentavp.exeAdded by the "Herman Agent" remote access TROJAN!
XHalflifehalflife2.exeAdded by the AGOBOT-OC BACKDOOR! Note - this file is not associated with Valve Corporation's Half-Life 2 game
UHalifaxHowardClusterskinkers.exe"Howard the Weatherman" desktop client from Halifax by Skinkers - marketing/messaging tool. Leave enabled if you want to receive messages
UHalloweenDesktopHalloweenDesktop.exeAnimated desktop gadget included with the Halloween theme for MyColors from Stardock Corporation
YHamachihamachi.exeLogMeIn Hamachi remote control and VPN software
UHaMFrontPanelhampanel.exeDisplays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless
UHandy Backup 3.9hbagent.exeHandy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers
XHanUpdatehanz.exeAdded by the RBOT-GLJ WORM!
NHard Disk SentinelHDSentinel.exeHard Disk Sentinel - a multi-OS hard disk drive monitoring application. Its goal is to find, test, diagnose and repair hard disk drive problems, display hard disk health, performance degradations and failures
XHard drive Controllerhdcontroller.exeAdded by the KIMAN.B WORM!
XHardDriveGuardSysRep.exeHardDriveGuard rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family
UHardware DoctorHwdoctor.exeWinbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds, voltages, temperatures. Only required if you're concerned about your system temperature - typically for "overclocked" systems
XHardware Monitor Servicemshms.exeAdded by the WOLLF-A TROJAN!
XHardware Profilehxdef.exeAdded by the LOVGATE.AB WORM!
XHardware Profilehxdef.exe...Added by the LOVGATE.Z WORM!
UHardware Sensors Monitorhmonitor.exeHardware Sensors Monitor by AB Software - "utilizes sensor chips on smart motherboards to track system and CPU core temperatures, voltages and cooling fans." Only required if you overclock your system or live in a hot environment and want to monitor the status or execute tasks such as sounding audio alarms are shutting down the computer
XHardware Shell DetectionWinHSD.exeAdded by a variant of the RBOT WORM!
XHardware VirtualizationSPY_NET_RAT.exeAdded by a variant of the AGENT-LRO TROJAN! See here
UHarehare.exeHare - improve and optimize performance of desktop/laptop PCs
UHarmony 98 - CasioOrgCasAgnt.exeEnterprise Harmony 98 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000
XHataDuzelticisiSysRep.exeHataDuzelticisi, Turkish rogue system error and cleaning utility - not recommended. A member of the ErrClean family
XHATAPE[path to trojan]Added by the BANKER-QF TROJAN!
UHawkEyeHAWK_95.EXEControl Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
UHawkEye IV Control PanelHAWK_32.EXEControl Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
UHawking HWU54G UtilityHWU54G.exeWireless management utility for the HWU54G Mini Wireless-G USB Adapter from Hawking Technologies, Inc
UHawking Wireless UtilityHWU8DD.exeWireless management utility for the HWU8DD Hi-Gain™ USB Wireless-G Dish Adapter from Hawking Technologies, Inc
XHbinstHbinst.exeHotbar adware
XHbToolsHbtOEAddOn.exeHotbar adware
NHC Reminderhc.exeFor Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed
NHCDetectHCDetect.exeMS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem
UHCEmployeeHce.exeHiddenCamera surveillance software. Uninstall this software unless you put it there yourself
Xhcenhcen.exeAdded by the SMALL.LR TROJAN!
Uhcentertgcmd.exePart of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the TgAddServer entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation"
Uhcenterhcenter.exeBellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the TgAddServer entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation"
Xhchoshchos.exeAdded by the SCAR.BVBM TROJAN!
Xhclean32.exehclean32.exeWareout - malware masquerading as a spyware and dialer remover
UHcontrolhcontrol.exeHotkeys on an ASUS Notebook. Only required if you use the additional keys
Xhcontrol32.exehcontrol32.exeAdded by the VB-EUF WORM!
UHControlUserHControlUser.exeHotkeys on an ASUS Notebook. Only required if you use the additional keys
Nhcsystrayhc_tray.exeKuma Notifier for the Shootout! game from the History Channel. "It lets you know whenever there's a new episode that's been released or an announcement from the Kuma team. Just click it to get up-to-the-minute game and event information"
NHD Audio Control PanelRtHDVCpl.exeRealtek HD Audio Manager, installed with the Vista/7 drivers for on-board Realtek HD audio codecs. Unless you have the default (but optional) System Tray icon enabled, the only purpose this entry serves is to detect and allow you to configure any devices plugged into the jacks - such as headphones and a microphone. With the System Tray icon enabled it will also inform you when devices are removed and give you access to the Sound Manager and other multimedia functions. The Sound Manager is also available via the Control Panel and this entry is therefore only required if you regularly change sound schemes
NHD Audio Control PanelRAVCpl64.exeRealtek HD Audio Manager, installed with the 64-bit Vista/7 drivers for on-board Realtek HD audio codecs. Unless you have the default (but optional) System Tray icon enabled, the only purpose this entry serves is to detect and allow you to configure any devices plugged into the jacks - such as headphones and a microphone. With the System Tray icon enabled it will also inform you when devices are removed and give you access to the Sound Manager and other multimedia functions. The Sound Manager is also available via the Control Panel and this entry is therefore only required if you regularly change sound schemes
XHD Audio Controller Helperaudiohdr.exeAdded by the BLAHAVI.A BACKDOOR!
NHDAShCutHDAShCut.exeHigh definition audio page shortcut for Realtek audio devices - not required
UHDAudDeckHDAudioCPL.exeVista control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B
UHDAudDeckHDeck.exeXP control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B
UHDAudDeckVDeck.exeVia HD Audio Deck - audio control panel for motherboards with supported on-board VIA HD audio chipsets
XHDAudiohda.exeAdded by the TACTSLAY.U TROJAN!
XHDAudio Driver 1.0[random filename].exeAdded by the TEADOOR-D TROJAN!
XHDAudio Driver 2.0[random filename].exeAdded by the TEADOOR-E TROJAN!
UHDDControlGuardHDDControlGuard.exePart of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access
UHDDControlGuard.exeHDDControlGuard.exePart of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access
UHDDHealthhddhealth.exeHDD Health is a "full-featured failure-prediction agent for machines using Windows 95, 98, NT, Me, 2000 and XP. Sitting in the system tray, it monitors hard disks and alerts you to impending failure"
UHDDlifeHDDlife.exeHDDlife checks the health of your hard drives at regular intervals and informs you about the results of these checks
?HDhelptbhdhelp.exeAssociated with Philips Edge series soundcards. Is it required?
Xhdlfoe df98ndfsvchots.exeAdded by a variant of the RBOT WORM!
Xhdlpscom[8 random letters].exeAdded by the RBOT-FUL WORM!
Xhdlpscomnetilxgn.exeAdded by the RBOT-FXD WORM!
?HDMICtrlManHDMICtrlMan.exeRelated to HD video support on some Toshiba laptops. What does it do and is it required?
XHDriveSweeperHDriveSweeper.exeHDriveSweeper rogue privacy program - not recommended, removal instructions here
NHDtrayHDtray.exePhilips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel
Xhe3bbcffrundll32.exe he3bbcff.dll,EnableRunDLL32LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "he3bbcff.dll" file is found in %System%
Xhe3e3fc4rundll32.exe he3e3fc4.dll, EnableRunDLL32LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "he3e3fc4.dll" file is found in %System%
XHekio StartupsHnksvc32.exeAdded by the AGOBOT-QE WORM!
XHELLBOT TEST1hellbot.exeAdded by the MYDOOM.BO WORM!
XHELLBOT3coolbot.exeAdded by the MYTOB.AB WORM!
Xhellfiresvchost.exeAdded by the LEOX.D TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Xhellodollyshost.exeAdded by the YODO WORM!
XHelloInthello3.exeAdded by the CASAL.A TROJAN!
Xhelloservhelloserv.exeAdded by the ZHELATI.BHA WORM!
Xhelloworldnb32ext2.exeAdded by the MYDOOM.BV WORM!
Xhelloworldnb32ext3.exeAdded by the MYTOB.JT WORM!
Xhelloworld3nb32ext4.exeAdded by the RITDOOR.A WORM!
?Helphelpext.exe??
Xhelphelp.scrAdded by the BANCOS-BBU TROJAN!
XHelpWizardnil.exeAdded by the BANCOS-BCZ TROJAN!
XHelplshost.exeIdentified as a variant of the Trojan-Clicker.Win32.Delf.aro malware
XHelp Temp Filesnetreg.exeAdded by the FORBOT-EM WORM!
XHelp Temp Filesemp32.exeAdded by the FORBOT-EC WORM!
UHelpCentersprtcmd.exe /P HelpCenterSelf-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft, Inc). Identifies and automatically fixes typical problems that may occur with your high-speed internet service
UHelpCenter4.1sprtcmd.exe /P HelpCenter4.1Self-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft, Inc). Identifies and automatically fixes typical problems that may occur with your high-speed internet service
Xhelpctl.exehelpctl.exeAdded by the GASLIDE TROJAN!
XHelpDeskHelpDesk.exeAdded by the BANKER.CIY TROJAN!
XHelpereschlp.exeAdded by the BLASTER.T WORM!
XHELPERgreece_nm.exeAsdPlug premium rate adult content dialer variant
XHELPERNetherlands.exeAsdPlug premium rate adult content dialer variant
XHELPERnew_zealand.exeAsdPlug premium rate adult content dialer variant
XHELPERsweden.exeAsdPlug premium rate adult content dialer variant
XHELPERcanada.exeAsdPlug premium rate adult content dialer variant
XHELPERfrance.exeAsdPlug premium rate adult content dialer variant
XHELPERtemp532.exeAsdPlug premium rate adult content dialer variant
Xhelper.dllrundll32.exe [path] helper.dllCnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Page: 1 2 3 4 5

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner