Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 795 autoruns. Autorun 401 to 500:

StatusAutorun nameCommandDescription
XInstant Accessrundll32.exe EGDACCESS_****.dll,InstantAccessInstantAccess premium rate adult content dialler variant - where **** represents for digits. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The DLL file is located in %System%
XInstant Buzz DaemonIBDaemon.exeInstant Buzz adware
XInstant Messenger Serviceimservice.exeDetected by Kaspersky as the HEUR TROJAN!
Xinstant messengersinstantmsgtr.exeAdded by the AGOBOT-PC BACKDOOR!
NInstant Update Centerreminder.exeEvent reminder for calendar dates, etc from Broderbund PrintMaster. Disable using the program's own option (if available) or a startup manager as it will re-instate if disabled via MSConfig
UInstant Wireless Configuration UtilityWUSB11cfg.exeUtility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
UInstant Wireless Configuration UtilityWPC11Cfg.exeUtility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
NInstantAccessINSTAN~1.EXEFrom TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
UInstantDriveInstantDrive.exePinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software
XInstantPleasureinstantpleasure.exeAdult content dialler
XInstantPleasureXXXinstantpleasurexxx.exeAdult content dialler
XInstantSpywareRemoval.exeInstantSpywareRemoval.exeInstant Spyware Removal rogue security software - not recommended, removal instructions here
NInstantTrayPCLETray.exePinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually
Xinstitinstit.batAdded by the OPASERV.H WORM!
XinstitINSTIT.BATAdded by the OPASERV.K WORM!
?InstUtlR.exeInstUtlR.exe??
XInSysSecureInSysSecure.exeInSysSecure rogue security software - not recommended, removal instructions here. A member of the AntiAID family
Xintdctrridctup20.exeSafeSurfing adware variant
XIntec Service Driversmsmsgrs.exeAdded by the SDBOT-ADN WORM!
XIntec Service Drivers[path to worm]Added by the RBOT-GLU WORM!
XIntec Service Driverswing32.exeAdded by the RBOT.HAZ WORM!
XIntec Service Driversmsmsgredss.exeAdded by the SDBOT-AGL WORM!
XIntec Services Driverrswinrvc.exeAdded by a variant of the SDBOT WORM!
XIntec Services Driversmsupdate22e.exeAdded by the RBOT-CGC WORM!
UIntegardTrayIntegardTray.exeSystem Tray access to Integardparental control software from Race River Corp
UIntel Active Monitorimontray.exeSystem tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
XIntel Audio Studio V2.0fmideploy.exeDetected by VBA32 as the BIFROSE.ADR TROJAN!
XIntel Drivercsrs.exeAdded by a variant of the SDBOT WORM!
UIntel File Transferxfr.exePart of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
XIntel Management Services v32mstime32.exeAdded by the AUTORUN-AYG WORM!
UIntel PDSpds.exeIntel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
XIntel Physical Routine 1.2Astnetlib.exeAdded by the BACKDR-AS BACKDOOR!
UIntel Product Number UtilityIntelProcNumUtility.exeIntel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
NIntel PROSet Tray Iconpromon.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
XIntel Service Driversmsconfig16.exeAdded by the MSCONFIG16 TROJAN!
XIntel system toolhookdump.exeAdded by the SPYRE-H TROJAN!
XIntel system toolwinnook.exeAdded by the SPYRE-C TROJAN!
XIntel system toolsvehost.exeAdded by the AGENT-EBT TROJAN!
XIntel system worksiis.exeAdded by the RBOT.QGA WORM!
UIntel(R) Common User Interfaceigfxtray.exeSystem Tray access to display settings for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and hot key settings via the icon on the System Tray. Different chipset versions may have different options available. These options are normally also available via the system Control Panel - under Display (XP) or Personalization and Appearance (Vista)
UIntel(R) Common User Interfacehkcmd.exeHot Key handler for Intel desktop and mobile motherboard chipsets with integrated graphics. With this enabled, you can access settings like graphics properties and screen rotation via pre-programmed key combinations - such as CTRL+ALT+F12 which displays the graphics properties (otherwise available via a right-click on the desktop or the Control Panel). Different chipset versions may have different pre-programmed settings and in some cases these may be programmable
UIntel(R) Common User Interfaceigfxpers.exeInstalled with the graphics drivers for Intel desktop and mobile motherboard chipsets with integrated graphics. It's purpose or function isn't known at present but testing with it disabled would appear to indicate it isn't required - hence the recommended "U" status
Xintel32.exeintel32.exeAdded by the SmitFraud alias SPYJACK-B TROJAN!
UIntelAPMClientamclient.exeLANDesk® Management Suite software component
NIntelAudioStudioIntelAudioStudio.exe"Intel Audio Studio combines Intel® High Definition audio hardware features with Sonic Focus* Audio Refinement and Dolby* technologies to provide you with a comprehensive tool that puts you in control of your audio experience". Audio utility supplied with some Intel motherboards
XInteliSyssmss.exeAdvertisingvision adware. Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Xintell32.exeintell32.exeAdded by the SmitFraud alias Desktophijack.C TROJAN!
Xintell321.exeintell321.exeAdded by the SPYJACK-B TROJAN!
XIntelli Mouse Pro Version 2.0Bncsjapi32.exeAdded by the BUZUS-O WORM!
XIntelliflag_be.exeIntelliflag_be.exeIntelliflag spyware
UIntelliPointpoint32.exeMicrosoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported
UIntelliPointipoint.exeMicrosoft IntelliPoint utility (from version 5.5) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported
UIntellitypetype32.exeMicrosoft IntelliType Pro utility (up to version 5.4) - required to support the multimedia keys, programmed keys and key macros on Microsoft's range of keyboards. If this entry is disabled, any programmed keys or actions will not be supported and keys will not function as expected in applications with advanced text services enabled
UIntelMEMIntelMEM.exeRelated to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line
XIntelprcAas3lovu.exeAdded by the SILLYFDC-CG WORM!
UIntelProcNumUtilitycpunumber.exeIntel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
YIntelWirelessifrmewrk.exeAssociated with the Intel PRO/Set Wireless software
UIntelZeroConfigZCfgSvc.exeZero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled
?Intense Registry ServiceIntEdReg.exe /CHECKIntense Educational Ltd - Language Office Software. Is it required?
XInterceptedSystem[path to worm]Added by the ANACON-B WORM!
YInterCheck MonitorICMON.EXEPart of an older version of Sophos anti-virus software
YInterCheckMonitorICMON.EXEPart of an older version of Sophos anti-virus software
XInterdllInterdll.exeAdded by the DELF family of TROJANS!
XInternal[trojan filename]Added by the SMOTHER and TRANSLAT TROJANS!
XInternalregedit.exe /s c[month number]Added by the FORTNIGHT.D TROJAN! Note that the Windows registry editor (regedit.exe) is a legitimate Microsoft file located in %Windir% and shouldn't be deleted. The file "c[month number]" is located in %Windir%, ie, C:\Windows\c10
XInternal Memory Filesysintmemory.exeAdded by the RBOT-GKT WORM!
XInternalSystrayKazza.exeAdded by the OPTIXPRO.12.C BACKDOOR! Note - unlike the valid KaZaA executable, this is located in %System%
Xinternatinternat.exeAdded by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%
XInternatsystray.exeAdded by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process. If you right-click on the real systray.exe the "Properties" reveal it to be a Microsoft file
XInternatmsgsrv32.exeAdded by the NYRUBOT-A BACKDOOR! Note - this is not the legitimate msgsvr32.exe process on a Win9x/Me system which should not appear in MSConfig/startup!
XInternat[trojan filename]Added by the CMJSPY-Y TROJAN!
XInternat Confbootconf.exeHomepage hijacker, redirecting to coolwwwsearch.com; see for example here
Ninternat.exeinternat.exeMicrosoft language selection icon in system tray, located in the System (Win98/Me) or System32 (WinNT/2K/XP) folder
XInternat.exeinternat.exeAdded by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (Win98/Me) or %windir%System32 (WinNT/2K/XP) (where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon
Xinternat.exesvchost.exeAdded by the DELF.AFJ BACKDOOR! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!
XinternctWinSocks5.exeAdded by the GRAYBIRD.F TROJAN!
Xinternetsmss.exeAdded by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
XInternetInternet.exeAdded by the PWS-CS TROJAN!
XInternetrecruit.exeAdded by the RBOT-AJG WORM!
Xinternet[trojan filename].exeAdded by the MIFENG-D TROJAN!
XInternetwinlogom.exeAdded by a variant of the SDBOT WORM!
XInternetnteusodp.exeAdded by the RBOT-GFJ WORM!
Xinternetwinsas32.exeAdded by a variant of the SDBOT WORM!
Xinternetlsass.exeAdded by the DSPY-A TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!
XInternetalm7tas.exeAdded by a variant of the RBOT WORM!
XInternetwins.exeAdded by the RBOT.AAYF WORM!
UInternet Answering MachineIAMNET~1.EXEFrom Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
UInternet Answering MachineIAM.exeFrom Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
XInternet AntivirusIAvir.exeInternet Antivirus rogue security software - not recommended, removal instructions here
XInternet Antivirus ProIAPro.exeInternet Antivirus Pro rogue security software - not recommended, removal instructions here
XInternet Application DriverexpIorer.exeAdded by the IRCBOT-WK TROJAN!
UInternet Call DirectorICD.EXETELUS Internet Call Director (ICD) provides Internet users with real-time call notification while connected to the Internet
UInternet Call ManagerICM.EXEStarts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail
XInternet Configsvchosts.exeAdded by the SDBOT TROJAN!
XInternet Connection Wizardstisvsq.exeEasySearch adware
XInternet Connection Wizard[path to trojan]Added by the SMUTSRCH-A TROJAN!
XInternet Connection Wizardstisvsq1.exeAdded by the DLOADR-AWD TROJAN!
XInternet Connection Wizard Setup Toolicwsetup.exeAdded by the PINCAV.HJK TROJAN!
XInternet Content PublisherICP.EXEAdded by the RBOT-UD WORM!
UInternet Disk CleanerCLEARH~1.EXE"Internet Disk Cleaner from Elongsoft "protects your privacy by cleaning up all Internet tracks and past computer activities"
Page: 1 2 3 4 5 6 7 8

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner