Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 795 autoruns. Autorun 701 to 795:

StatusAutorun nameCommandDescription
Xirwftpftpmon.exeAdded by the BANCBAN-BO TROJAN!
UIrXferIrXfer.exeMicrosoft Infrared Transfer application
UIS CfgWizcfgwiz.exeConfiguration wizard for older versions of Symantec's Norton Internet Security (and the now discontinued Norton Personal Firewall). On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton Internet Security is launched via the Start Menu
UIS360trayIS360tray.exeSystem Tray access to and notifications for Security 360 anti-malware from Iobit - which has now been discontinued. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up
XiSafeAViSafeAV.exeiSafe AntiVirus rogue security software - not recommended, removal instructions here
Xisamini.exeisamonitor.exeAdded by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details. The most popular for this example appears to be "Video ActiveX Object"
Xisamonitor.exeisamonitor.exeAdded by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details
XIsassIsass.exeAdded by the FUTRO TROJAN!
Xisass.exeisass.exeAdded by the SPY-VL TROJAN!
XIsassRenascimentoIssas.exeAdded by the BANKER.GAX TROJAN!
UISBMgr.exeISBMgr.exeSony ISB Utility - supports the battery management on some Sony laptops
Xiscchiscch.exeAdded by the LCPRANK-A WORM!
Nisdbdcisdbdc.exeFor Compaq PC's. May install properties in dial-up networking when you register with an ISP
UisDeleteMeisDel.batUsed by Norton Internet Security to remove certain files and directories on reboot when uninstalling their product
NISDN MonitorLinksts.exeTray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
UISDNwatchIWatch.exeFRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"
XiSecurity appletrundll32.exe iSecurity.cpl,SecurityMonitorAdded by the DLOADER.UZO TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Xish-b.exeish-b.exeAdded by the IRCBOT-ACZ TROJAN!
UISHelphelp.exeISpy is a security risk that logs keystrokes and captures screenshots. If you didn't install this yourself uninstall it
UiShieldiShield.exe"GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"
Xishost.exeishost.exeAdded by the DLOADR-XJ TROJAN!
YISLP2STAISLP2STA.EXEA process from Cisco Systems Inc associated with Windows Update for wireless NIC drivers
XISMModuleISMModule.exeInternet Speed Monitor C adware related - see example here
XISMModule2ISMModule2.exeInternet Speed Monitor C adware related - see example here
XISMModule3ISMModule3.exeInternet Speed Monitor C adware
XISMModule4ISMModule4.exeInternet Speed Monitor A adware related
XISMModule6ISMModule6.exeInternet Speed Monitor C adware related - see example here
XISMModule7ISMModule7.exeInternet Speed Monitor C adware related - see example here
XISMModule8ISMModule8.exeInternet Speed Monitor C adware related
XISMPack5ISMPack5.exeInternet Speed Monitor C adware related - see example here
XISMPack6ISMPack6.exeInternet Speed Monitor C adware related - see example here
XISMPack7ISMPack7.exeInternet Speed Monitor C adware
XISMPack8ISMPack8.exeInternet Speed Monitor C adware related - see example here
YISP.COM High Speedslipgui.exeUser interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server
XISPSERVICEpsycho.exeAdded by the IRCFLOOD-O TROJAN!
XISPSERVICEwintmp.exeAdded by the IRCBOT.GP BACKDOOR!
UiSpyNOWispynow.exeiSpyNOW - remote monitoring and surveillance software
XIsrafelIsrafel.vbsAdded by the GAGGLE.D or GAGGLE.E WORMS!
NIsReminderISPopup.exeRelated to GuardWare iShield - this is the registration reminder for the trial version, so not required in startup
XISRHelper.exeISRHelper.exeInstant Spyware Removal rogue security software - not recommended, removal instructions here
YISS_Certtoolcerttool.exePart of Client Security Software for IBM\Lenovo notebooks. If you have configured the software via the associated wizard this will need to be running if you want to mount password protected areas of the disk (created with SafeGuard PrivateDisk), use the password manager or file/folder encryption options
Nisschissch.exeInstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis
Xissearch.exeissearch.exeAdded by the ZLOB-QF TROJAN!
XissEnc32SvrissEnc32.exeAdded by a variant of the RBOT WORM!
NISSI EZUpdate Serviceissimsvc.exePart of IBM Global Services - used internally by IBM for automatic updating of software and Microsoft patching
UISStartISStart.exeInstalled with Logitech's QuickSmart, ImageStudio and QuickCam (older versions) webcam software. The exact purpose of this startup entry is unknown at present, with opinions varying from: (i) adding a tray icon when a camera is connected - apparently no longer the case, (ii) repairing a problem with the image gallery and (iii) being required with some versions to take pictures and capture videos
YISSVCISSVC.exeCommon process for older versions of Symantec's Norton Internet Security and the now discontinued Norton Personal Firewall security products. The exact purpose is unknown at present but neither program can function properly if this process is disabled. Loads via a registry "RunServices" key in 98/Me and as a service in XP
XIST Serviceistsvc.exeISTBar adware
Xist service uninstall[random filename]ISTBar adware related
Xistinstall zazzer.exeistinstall zazzer.exeUnidentified adware downloader/installer
YISTraypctsTray.exeSystem Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools
NISUSPMISUSPM.exeInstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis
NISUSPM StartupISUSPM.exeInstallShield is used by a number of software producers to install their programs and manage software updates. This entry searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis
NISUSSchedulerissch.exeInstallShield is used by a number of software producers to install their programs and manage software updates. This entry runs scheduled searches for and performs any updates to supported installed software so you're always working with the most current version. Manually check for software updates for installed programs on a regular basis
YISW.exeISW.exeAT&T Internet Security Wizard tool installed when you choose to install their internet security suite - sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled
Xisxaisxa.exeAdded by the SMALL-EIV TROJAN!
?ISXAgentISXAgent.exeRelated to Imprivata IT security products. What does it do and is it required?
NiSysCleaneriSysCleaner.exeiSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user
Xisystemisystem.exeAdded by the CHORUS-A TROJAN! Searchforfree browser hijacker
XItalUitalfds.exeAdded by a TROJAN - see here
XiTbaMgqSlSQqGiTbaMgqSlSQqG.exeAdded by the FAKEAV-DVN TROJAN!
UItkItk.exeIn The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
Uitk.exeitk.exeInsert ToggleKey by Mike Lin. ITK sounds a tone whenever you press Insert
UiTouchiTouch.exeLoads the iTouch configuration settings for supported Logitech keyboards. It's required if your keyboard has shortcut buttons and you use them or have reconfigured them for different functions. It's also required if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen display indications for these
NItsDeductiblePopUpItsDeductible.exeItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
?ITSecMngItSecMng.exeRelated to Bluetooth wireless support on Toshiba notebooks. What does it do and is it required?
XITUNESitune.exeAdded by the RBOT-ZU WORM!
XITUNESitunes.exeAdded by a variant of the RBOT WORM! Note - do not confuse with the legitimate Apple iTunes process with the same filename which is always located in %ProgramFiles%\iTunes. This one is located in %System%
XItunesdials.exeDetected by Kaspersky as the AGENT.MM TROJAN!
XItunesitunes.exeAdded by the OSCABOT-L WORM! Note - do not confuse with the legitimate Apple iTunes process with the same filename which is always located in %ProgramFiles%\iTunes. This one is located in %Windir%
UiTunesiTunesHelper.exeInstalled with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times
UiTunes HelperiTunesHelper.exeInstalled with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times
XiTunes MusiciTunesHelper32.exeAdded by the SDBOT.CHK WORM!
XiTunesAgentita.exeAdded by the TACTSLAY.U TROJAN!
Xitunesffitunesff.exeAdded by the EB adult premium dialer
UiTunesHelperiTunesHelper.exeInstalled with Apple's iTunes media management software. Tested without an iPod or iPhone, and on a system with more than 1GB of memory, disabling it does not adversely affect iTunes loading times - but it may help on systems with less memory. iPod and iPhone users report this is required to autostart iTunes when they are connected (can anyone confirm this?). In older versions, if it was disabled in it would re-instate itself after running iTunes a few times
Uitypeitype.exeMicrosoft IntelliType Pro utility (from version 5.5) - required to support the multimedia keys, programmed keys and key macros on Microsoft's range of keyboards. If this entry is disabled, any keys or key combinations that are changed by the user to perform functions other than default settings, defer back to their default settings and supported keys will not function in applications with advanced text services enabled
Xiudymosjmrgviurtssd.exeAdded by the AGENT-OEM TROJAN!
NIusagenetdet.exeInternet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
Xiut75uzcx.exeAdded by the DLOADER-AXV TROJAN!
Xiviv.exePart of the Internet Antivirus and Internet Antivirus Pro rogue security software - not recommended, removal instructions here
XivHosttaskManager.exeAdded by a variant of the SPYBOT WORM! See here
XivHost[6 random letters].exeAdded by a variant of the SPYBOT WORM! See examples here and here
NIVPServiceMgrivpsvmgr.exeToshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as, whenever you are connected to the Internet, it will check for Windows updates and Toshiba updates
Xivy.exeivy.exeAdded by the AGENT-ENZ TROJAN!
NIW ControlCenteriwctrl.exePinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
UIW_Drop_Iconiwctrl.exePinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
Uiwctrliwctrl.exePinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
UIWLrundll32.exe [path] IWL.dllIKL surveillance software. Uninstall this software unless you put it there yourself
Xixploreixplore.exeAdded by the SDBOT-CY TROJAN!
Xixploresixplores.exeAdded by the SDBOT-CE WORM!
Xixproxy[path to trojan]Added by the XORPIX-A TROJAN!
Xixssoixsso.exeAdded by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark"
Xiyelejivyujixit.exeAdded by the SDBOT.BJK WORM!
?IZEN/A??
Page: 1 2 3 4 5 6 7 8

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner