Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 795 autoruns. Autorun 201 to 300:

StatusAutorun nameCommandDescription
Xiexplorere loaderiexplorere.exeAdded by the SDBOT.SS WORM!
XIexplorerr.exeIexplorerr.exeAdded by the BANKER-EUT TROJAN! The file is located in %Windir%\Sun\Java\Deployment\logs
XIexplorerr.exeIexplorerr.exeAdded by the BANKER.AOVZ TROJAN! The file is located in %Windir%\msagent\gf
XIExplorerServiceWinSock.exeAdded by the AGENT.KIU TROJAN!
XIExplUpdIExplUpd.exeAdded by the MDROP-CXY TROJAN!
XiExpresseriexpresser.exeAdded by the SLENFBOT.AP WORM!
Xifpipf.exeAdded by the CLAGGER-AG TROJAN!
Xifperx[random filename]Added by a variant of the SLAPER TROJAN!
Xifperxxmliwvug.exeAdded by the SLAPER.U TROJAN!
UIFSplash.exeIFSplash.exeI-FORCE driver for force feedback steering wheel
UIFXSPMGTifxspmgt.exePart of the Infineon Security Platform Software - which supports the on-board TPM security device included with some laptops from suppliers such as Acer, ASUS, HP and Sony
Xigamatuekor.exeAdded by the SDBOT.AQ TROJAN!
Xigamatuatecaca.exeAdded by the IRCBOT.R WORM!
Uigfxhkcmdhkcmd.exeHot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable
Uigfxpersigfxpers.exeInstalled with the graphics drivers for Intel desktop and mobile motherboard chipsets with integrated graphics. It's purpose or function isn't known at present but testing with it disabled would appear to indicate it isn't required - hence the recommended "U" status
Xigfxtrassvchots.exeAdded by the AUTORUN-AIW WORM!
UIgfxTrayigfxtray.exeSystem Tray access to display settings for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and hot key settings via the icon on the System Tray. Different chipset versions may have different options available. These options are normally also available via the system Control Panel - under Display (XP) or Personalization and Appearance (Vista)
Xigfxtray Moduleigfxtray.exeAdded by the VB-RI MALWARE! Note - this is not the legitimate Intel graphics System Tray utility which has the same filename and is located in %System%. This one is located in %Windir%
?IglpbvIglpbv.exe??
Nigndlm.exeDLM.exeIGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be initialized through that browser
Xigsex2xigsex2x.exeNewDial premium rate adult content dialler
XIGuardPc.exeIGuardPc.exeIGuardPc rogue security software - not recommended, removal instructions here. A member of the AntiAID family
?iHP-100iHPDetect.exeDrive Letter Searcher, iRiver iHP-100 iHP and H Series player related - does it need to start with Windows every time?
XiilcIILC.EXEHomepage hijacker
XIinliptl.exePurityScan adware
XIISinet.exeMeplex adware
XIISADMINSsystems.exeAdded by the AGOBOT.U WORM!
Xiisversiisvers.exeAdded by an unidentified TROJAN or adware
Xiiuyvyuuzcx.exeAdded by the AGENT-EOF TROJAN!
NiIWiperSystemwiper.exeSystem Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
YIJ75P2PSERVERIJ75P2PS.EXEPrinter utility which is required in order to make the printer work correctly
UIJNetworkScanUtilityCNMNSUT.EXENetwork utility available for some Canon scanners and multifunction devices. Allows the device to see computers on a network and those computers running the utility to control scanning via the Control Panel on the scanner - which saves you having to run back and forth between the scanner and your computer
YIKE Service 95IKEService.exeAssociated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything
UiKeyWorksIKEYMAIN.EXEA4Tech wireless keyboard driver and utility
UIKLrundll32.exe [path] IKL.dllIKL surveillance software. Uninstall this software unless you put it there yourself
Xiktcdmiy.exeAdded by the AGENT-RDY TROJAN!
Xilassslsass.exeAdded by the INJECT-GZ TROJAN! Note - the legitimate lsass.exe process should not normally figure in Msconfig/Startup!
XiLeAAmvQHHaCiLeAAmvQHHaC.exeAdded by the FAKEAV-DIN TROJAN!
NiLikeilikesidebar.exeiLike Sidebar for iTunes and Windows Media Player
XiLLeGaLMplayer.exeAdded by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
XiLLeGaL.exeMplayer.exeAdded by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
?ILO_Office_ManagerIntEdReg.exe /OFFMANIntense Educational Ltd - Language Office Software. Is it required?
XilortgdgkeepSafe.exeAdded by the KILLAV.KAX TROJAN! Note - this is not the legitimate KeepSafe from Stardock Corporation which shares the same filename and is normally located in a %ProgramFiles%\Stardock subfolder. This one is found in %System%
UiLyriciLyric.exeiLyric plugin for the popular Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button. Not longer available
NiM Start CenteriM_Tray.exeInstalled with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
Xim_autornim_1.exeAdded by the IMAV.A WORM!
Xim_autornim_2.exeAdded by the BAGLEDL-BO TROJAN!
XImagerundll32 [path] [trojan filename],InstallAdded by the WINSHOW.Y TROJAN!
YImage & RestoreIMAGE32.exePart of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
XImage Remote Playerssysvn.exeAdded by a variant of the IRCBOT BACKDOOR!
NImage TransferSonyTray.exeSony Image Transfer software provides direct image transfer from your digital camera to a PC - can be started manually
UImageDrive-{hex numbers}ImageDrive.exeNero ImageDrive from Ahead - virtual CD/DVD drive software
UImagefoximagefox.exeImageFox 2.0 (formerly available from ACDSee) is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes
XImagemgt32Imagemgt32.exeAdded by the GEMA TROJAN!
XImagePathtaskbarmngr.exeAdded by the SDBOT-XB WORM!
UImageTunedthtml.exeImageTune from Hyundai ImageQuest. Rebranded version of Display Tune from Portrait Displays, Inc. - which "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface"
XIMAPIload.exeAdded by the DOWNDEL-A TROJAN!
NiMarkup ClientiUtil.exeEnables the iMarkup Client web page annotation utility to run in the background and be available in systray. Shortcut available via Start -> Programs
UImatioimation.exeImation Disk Manager - enables you to create a password protected area on your Imation USB flash drive
Ximchatimchat.exeAdded by a variant of the IRCBOT TROJAN!
XIMClassSvhosl.exeAdded by an unidentified WORM or TROJAN!
Ximcsslxmliwvug.exeAdded by the SLAPER.U TROJAN!
XIMEconime.exeAdded by the DLDR-G TROJAN! Note - this is not the legitimate Microsoft Console IME process of the same filename which is located in %System% and is used when a Asian language is used in Windows. This one is located in %Windir%
Nimekrmigimekrmig.exeMicrosoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails, documents, web forms and other files - should you need to. Found on PCs where East Asian languages have been installed through the Regional and Language options icon in the Control Panel
NIMEKRMIG6.1IMEKRMIG.EXEMicrosoft's Input Method Editor for the Korean language which is used to both display and enable the input of characters in e-mails, documents, web forms and other files - should you need to. Found on PCs where East Asian languages have been installed through the Regional and Language options icon in the Control Panel
NImesh??Imesh is a file sharing system
NImesh Auto Update??Update check for the Imesh file sharing system. Turn the update off under "options"
XIMEvtMgr.exeIMEvtMgr.exeAdded by the KEYLOG-AR TROJAN!
UImgIconImgIcon.exeDisplays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
Ximgit[path to file]Added by the BANKER-EM TROJAN!
NImgStartImgStart.exeUsed by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
NImgTaskImgtask.exeRelated to the WalletPix digital photo album. "On some computers, the Wallet Pix device will leave behind a memory-resident file called ImgTask.exe. This file will be located in the operating system directory on your computer (typically %Windir%). You can remove this file at any time and it will not impact your computer's performance or functionality. The file will be restored each time you plug in the Wallet Pix though"
UIMJPMIGIMJPMIG.EXEMicrosoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails, documents, web forms and other files - should you need to. Found on PCs where East Asian languages have been installed through the Regional and Language options icon in the Control Panel
XIMJPMIG6.1HelpCat.exeAdded by the BESVERIT WORM!
UIMJPMIG8.1IMJPMIG.EXEMicrosoft's Input Method Editor for the Japanese language which is used to both display and enable the input of characters in e-mails, documents, web forms and other files - should you need to. Found on PCs where East Asian languages have been installed through the Regional and Language options icon in the Control Panel
XIMJPMIG8.2msime82.exeAdded by the VB-CYG WORM!
XIMJPMIG8.2msime80.exeAdded by the VB-CYJ TROJAN!
?immcheck.exeimmcheck.exeRelated to I-FORCE driver for force feedback steering wheel?
XImMsntimed.exeAdded by the WEBDOR.AK BACKDOOR!
XImMsnmsncomm.exeAdded by the WEBDOR.AK BACKDOOR!
UIMOLIMOLApp.exeIncrediMail for Office Outlook Add-On
UImonitorPlguni.exePart of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal
Ximonitor[path to trojan]Added by the IMONI-A TROJAN!
UIMONTRAYimontray.exeSystem tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
XimPlayokimPlayok.exeAdded by the CUTWAIL TROJAN!
XIMprocessIM-svr.EXEIMNames adware
NImpulse DockImpulseDock.exeOlder version of the Impulse digital distribution platform from Stardock Corporation
NImpulse NowIMPULS~1.EXESystem Tray access to and notifications for the Impulse digital distribution platform from Stardock Corporation. This is the Vista/7 MSConfig entry
NImpulse NowImpulseNow.exeSystem Tray access to and notifications for the Impulse digital distribution platform from Stardock Corporation. This is the Windows Defender entry
NImpulseNowIMPULS~1.EXESystem Tray access to and notifications for the Impulse digital distribution platform from Stardock Corporation. This is the XP MSConfig entry
NImpulseNowImpulseNow.exeSystem Tray access to and notifications for the Impulse digital distribution platform from Stardock Corporation
UImScInstImScInst.exeMicrosoft's Input Method Editor which is used to both display and enable the input of characters from East Asian and Right-to-left (e.g. Arabic) languages in e-mails, documents and other files - should you need to. Found on PCs where these languages have been installed through the Regional and Language options icon in the Control Panel
UImScInst.exeImScInst.exeMicrosoft's Input Method Editor which is used to both display and enable the input of characters from East Asian and Right-to-left (e.g. Arabic) languages in e-mails, documents and other files - should you need to. Found on PCs where these languages have been installed through the Regional and Language options icon in the Control Panel
Ximscmigimscmig.exeAdded by the LURKA.B VIRUS! Note - do not confuse with the legitimate MS Input Method Editor entry which shares the same filename and is found in a sub-folder of %ProgramFiles%\Common Files%\Microsoft%\IME - this one is found in %Windir%
UIMSCMigIMSCMIG.EXEAssociated with Microsoft's Input Method Editor for Asian languages which is used to both display and enable the input of characters in e-mails, documents and other files - should you need to (e.g. Chinese, Hindi, Japanese, etc)
UIMStartIMStart.exeInterMute security software related
UIMVUIMVUClient.exeIMVU chat client that allows you to create "your own avatars who chat in animated 3D scenes"
Ximwinsrvcacpmonsrv.exeAdded by the SLAPER.E TROJAN!
XIMwireimwireup.exeSafeSurfing adware variant
Ximxecsvbrun70sp4.exeAdded by the AGOBOT.ALA WORM!
Page: 1 2 3 4 5 6 7 8

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner