Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 124 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
Nj2 Tray MenuHotTray.exeeFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
Xj6GgCXwtFMcontrol.exe [path] j6ggcxwtfm.cplAdded by the SEFNIT.K TROJAN! The "j6ggcxwtfm.cpl" file is located in %ProgramFile%\anouicgfwkkv1v
XJA Cfg Util v2jacfg2.exeAdded by the RBOT-AL WORM!
XJA Config 32Awesome32.exeAdded by a variant of the SDBOT WORM!
UJammerjammer.exeJammer by Agnitum - "Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"
XJammer2ndJammer2nd.exeAdded by the NETSKY.Z WORM!
Xjavaremote.cmdAdded by the BANKER-EHG TROJAN!
Xjavasystem.exeAdded by a variant of the IRCBOT BACKDOOR!
XJava (VM) v6.9jav.batAdded by the AGENT-GZK TROJAN!
XJava appletjavaup.exeAdded by the SDBOT-ACF WORM!
XJava Applicationvssmf32.exeAdded by the SPIGOT BACKDOOR!
XJava Auto Updateujm.exeAdded by the SDBOT-ADH WORM!
XJava Configuration Loaderspoolsvfix.exeAdded by the SDBOT.CA WORM!
XJava developer Script Browsejusched.exeAdded by the VB-ESK TROJAN! Note that this is not the legitimate Oracle (was Sun Microsystems) file (of the same name) which is usually located in %Program Files%\Java\version number\bin. This one is located in %Windir%
XJava Expresssjehost.exeAdded by the SDBOT-DNJ WORM!
XJava Runtime Environmentjbuild.exeAdded by the DELBOT-J WORM!
XJava Runtime Valuerunjava.exeAdded by the RBOT-DDJ WORM!
XJava Runtimesiexplore.exeAdded by the KILLAV.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This file is located in a %Windir%\Java\Java folder
XJava SofteJava32.comAdded by the RBOT.ECN WORM!
XJava updatejavaqs.exeAdded by the SWARLEY.A WORM!
XJava Updatekeeper.exeAdded by the AGENT-DIS TROJAN!
XJava Updatesvchost.exe.exeAdded by the AGENT-LBS TROJAN!
XJava Updatehostwww.exe.exeAdded by the AGENT-MFH TROJAN!
XJava Update CheckerJavaUpdate.jarAdded by the INCRAT HACKTOOL!
XJava Update Managerjutched.exeAdded by the VB.AJYQ TROJAN!
XJava Update Managerjstchde.exeAdded by the SMALL.AWBM TROJAN!
XJava Update Managerjusched.exeAdded by the FKFLDR-C MALWARE! Note that this is not the legitimate Oracle (was Sun Microsystems) file (of the same name) which is usually located in %Program Files%\Java\version number\bin. This one is located in %AppData%\HEX-5823-6893-6818
XJava Virtual Machinejavaw.exeAdded by a variant of the RBOT WORM!
XJava VM v6.9.2jav.batAdded by the DWNLDR-HLM TROJAN!
XJava VM v6.91jav.batAdded by the DWNLDR-HLL TROJAN!
NJava(TM) Platform SE 6jusched.exeChecks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now
NJava(TM) Platform SE 6 U*jusched.exeChecks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now
NJava(TM) Platform SE Auto Updater 2 0jusched.exeChecks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now
XJava**.exe [* = random char]Java**.exe [* = random char]CoolWebSearch/HomeSearch adware - for examples, see this log
XJava**32.exe [* = random char]Java**32.exe [* = random char]CoolWebSearch/HomeSearch adware - for examples, see this log
Xjava-pluginjavasctp.exeAdded by the VB.AMX TROJAN!
XJava32 Configuration Loadermsnmesgr.exeAdded by a variant of the RBOT WORM!
XJavaCoreJavaCore.exeAdded by the MATCASH TROJAN!
Xjavadocjavadoc.exeAdded by the AGENT.CE BACKDOOR!
XJavascriptjscript.exeAdded by the DELBOT-AD WORM!
XJavaScript Debugging ServiceJsDbgMan.exeAdded by the DERDERO.E WORM!
XJavaScriptMsMwsx.exeAdded by the BANCOS.CNH TROJAN!
XJavaScriptMsxrsMsxrs.exeAdded by the VB.BL WORM!
XJavaTraytraymgr.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XJavaUpdate0.07[filename]Added by the JUPDATE TROJAN!
XJavaUpdateSchedjusched32.exeAdded by the BCKDR-CKB BACKDOOR!
XJavaVMjava.exeAdded by the MYDOOM.M WORM and variants! Note - not to be confused with the valid Windows "java.exe" which is located in %System% as this is located in %Windir%
Xjavawsa.exejavawsa.exeAdded by the BANK-Y TROJAN!
Xjawa32jawa32.exeAdded by the AGENT.BG WORM!
XJawa322jawa32.exeAdded by a variant of the AGENT.BG trojan
NJBJiffybar.exe"Get Paid As You surf" application
Xjcidls[random filename]Added by a variant of the SLAPER TROJAN!
XJDK55WFMZYcdx.exeAdded by the MONDER.RON TROJAN!
?Jessops Insert DetectInsDetect.exePart of Jessops Picture Suite. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted?
NJet DetectionADGJDet.exeAdded with SoundBlaster Live! or Audigy soundcards for headphone autodetection
YJetAdmin Discovery IndicatorHPJETDSC.EXEHP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator
Xjeteyujixit.exeAdded by the SDBOT.BRT WORM!
XJfwehnrtghgfjrs.exeAdded by the SDBOT-IJ WORM!
Xjfziemjfziem.exeAdded by the AGENT-NPL WORM!
XJgUJevQpNnePtDMJgUJevQpNnePtDM.exeWindows Recovery rogue security software - not recommended, removal instructions here
XJHWKF[path to trojan]Added by the SMALL.MLC TROJAN!
Xjiahussvchqs.exeAdded by the WOWPWS-AL TROJAN!
Xjidifedigxudexoli.exeAdded by the SDBOT-UW WORM!
Xjijblezlwy.batAdded by the REDDW WORM!
Xjkdfj94kgdftdfwinlogan.exeAdded by the ZLOB.BZ TROJAN!
UJMB36X ConfigureJMRaidTool.exeJMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers
YJMB36X ConfigureJMRaidSetup.exeJMB36x series RAID configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers
UJMB36X IDE SetupJMInsIDE.exeJMB36x series IDE (or Parallel ATA) configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers
UJMB36X IDE SetupxInsIDE.exeJMB36x series IDE (or Parallel ATA) configuration utility from JMicron Technology for their PCI Express to SATA II and PATA Host Controllers. This is normally located in %Windir%\RaidTool
UJmpRessvcwinra.exeSystem Surveillance Pro surveillance software. Uninstall this software unless you put it there yourself
XJmpyxPEOWqPOJmpyxPEOWqPO.exeAdded by the FAKEAV-DAQ TROJAN!
Xjmudkve.dllrundll32.exe jmudkve.dll,mzrwkwfAdded by the AGENT-DJD TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "jmudkve.dll" file is found in %System%
XJnskdfmf9eldfdcsrssc.exeAdded by the AGENT.EBC TROJAN!
UJob-oversigttaskmon.exeTask Monitor (on Danish language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase)
UJobHisInitJobHisInit.exeUsed by Ricoh network printers to enable network printing from the client
UJogServ2JogServ2.exe"Jog Dial" on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features
UJOGSERV2.EXEJogServ2.exe"Jog Dial" on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features
Xjohkjhsrvd.exeAdded by a variant of the SLAPER TROJAN!
Xjohn315srrvc.exeAdded by a variant of the MAILBOT-BI TROJAN!
Xjohnj315srvc.exeAdded by a variant of the MAILBOT-BI TROJAN!
Xjohnj3155srvcc.exeAdded by a variant of the MAILBOT-BI TROJAN!
Xjohnj3cdsrvdc.exeAdded by a variant of the SLAPER TROJAN!
UJomantharazerhid.exeBelkin n52te (powered by Razer) gaming keypad driver - required if you use the additional features and programmed keys/macros
Xjon315[path to trojan]Added by the MAILBOT-BI TROJAN!
?jotlmillenzje.exe??
UJOYTECH USB Neo S ControllerJoytechNeoSTrayIcon.exeSystem Tray access to Joytech Neo S PC gamepad controller software
Xjpgdiag[path to worm]Added by the STRATION-AN WORM!
Xjpupdjpupd.exeAdded by the DIALER.CM TROJAN!
XJregJreg2b.exeFlashEnhancer adware
Xjucheckjucheck.exeAdded by the SCRIMGE.O WORM!
XJufualtwinxp2.exeAdded by the SDBOT-AAB WORM!
XJufualtsvhost.exeAdded by the SDBOT-ADJ WORM!
XJufualtjava2.exeAdded by the SDBOT.AOE WORM!
XJufualtj2.exeAdded by the SDBOT-ALJ WORM!
NJuiceJuice.exeJuice - a free utility that "allows you to select and download audio files from anywhere on the Internet to your desktop". This entry is present if you choose the option to add it to the startup group during installation
XJuliaPerezTetek_Gede_Julia_Perez.exeAdded by the AUTORUN-BS WORM!
NJuno_uoltrayexec.exeJuno ISP software - not required
XJuPojupos.exeAdded by the SDBOT-CAG WORM!
Njuschedjusched.exeChecks with Oracle's (was Sun Micrsosystems) Java updates site to see if newer Java versions are available. Either visit the Java download page or click on Start → Control Panel → Java → Update → Update Now
Xjusched[path to trojan]Added by the BANKER-BWR TROJAN!
Page: 1 2

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner