Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 279 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
?oadaemonoadaemon.exeBackground process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually?
UOADP UtilityOadpUtil.exePart of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing. OADP is the Open Auxiliary Device Platform
Yoahstifroahstifr.exeComes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
UOAKSTARTOAKSTART.EXESets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
NOAKTASKOAKTASK.EXETaskbar utility for a "control panel" for a CD-RW
YOASClntoasclnt.exeOn-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access, create, copy or download them
Yoauioaui.exeSystem Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall, limited startup manager, tamper protection and keylogger detection whilst paid versions add features such as a mail/web shield, phishing filter and anti-malware
XOB Updaterob.exeAdded by the AGOBOT-IH WORM!
YObject Store Serverosserver.exeComes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
XObjectDockBrico.cmdAdded by the BOBANDY-A WORM!
?objtjprxobjtjprx.exe??
YOBRCheckcheck.exeNow part of Acer Empowering Technology. "Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer, and also acts as a versatile standalone backup and recovery manager". Whilst the exact purpose of this entry isn't known it runs and closes so leave it enabled in case it's required
?obsverobsver.exePart of LingoWare translating software - what does it do and is it required?
XOC SpywareExpertspywareexpert.exeOneClick Spyware Expert rogue security software - not recommended, removal instructions here
NOCAudioIniOCAudioIni.exeOne-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer
Nocrawareocraware.exeOptical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start -> Programs
UOctoshape Streaming ServicesOctoshapeClient.exeOctoshape Live Streaming - "is a revolutionary technology that will reduce your bandwidth cost and improve the quality in sound and picture"
Xocx32ocx32.exeAdded by the ASTEF or RESPAN WORMS!
XOCXUPDT32ocxupdt32.exeAdded by the AGOBOT-IF WORM!
XOczyszczaczKomputerzaGDC.exeOczyszczaczKomputerza Polish rogue privacy tool - not recommended. A member of the PCPrivacyTool family
XODSYSCNTR.EXEHotVideo dialler
Xod-matrxxod-matrxx.exeAdult dialler - xx can be any number
Xod-stndxxod-stndxx.exeAdult dialler - xx can be any number
Xod-teenxxod-teenxx.exeAdult dialler - xx can be any number
UODBC BackUpfdxxl.exeG Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself!
Xoddworldz.exeoddworldz.exeAdded by the MULTIDR-EG TROJAN!
NOdebit Multimedia V2Odebit.exeOdébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat
NOdebit Multimedia V3Odebit.exeOdébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat
NOdebit Multimedia V3 - ServicesOdebit.exeOdébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat
Xodnexodbns.exeAdded by the AGENT-MPM TROJAN!
Xodnexyodbnsy.exeAdded by the VESLORUKI.DWJ TROJAN!
NOdometerOdometer.EXEMouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
UODSPConfigODSPConfig.exeDsktopSurveil surveillance software. Uninstall this software if you did not install it yourself
Xoe_drop_spamoesrv.exeDropspam adware
YOE_OEMTMAS_OEMon.exeRelated to Trend Micro PC-cillin - Internet Security 12
XOeloaderOeloader.exeXupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
XOEM Tools 32tres32.exeAdded by the RBOT.QB WORM!
UOEM02Mon.exeOEM02Mon.exeCreative Live! Cam Console Auto Launcher
?OEM07Mon.exeOEM07Mon.exeRelated to Live Camera Console Auto Launcher by Creative Technology LTD. What does it do and is it required?
XOEM32 Toolssres32.exeAdded by the RBOT.AML BACKDOOR!
NOEMCLEANUPoemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
UOEMRESEToemreset.exeResets OEM installation settings at bootup. Not required unless you're new to PC's
UOEMRUNONCEoemrun.exeWindows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished
UoepluginbxOEPlugin.exenoHTML for Outlook Express is an add-on that protects Outlook Express from email viruses and email scripts by converting incoming email messages from HTML format to simple text
?OEPowerPlugswinoeinit.exe??
Yoeprsrvoeprsrv.exeOutlook Express Privacy - which "lets you control access to Outlook Express and its email message database. When you enable protection, the program disables access to the message database and address book files. As a result, when you open Outlook Express or Windows Address Book, a password will be asked for authentication." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
Yoeprsrv.exeoeprsrv.exeOutlook Express Privacy - which "lets you control access to Outlook Express and its email message database. When you enable protection, the program disables access to the message database and address book files. As a result, when you open Outlook Express or Windows Address Book, a password will be asked for authentication." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
Yoepsrvoepsrv.exeOutlook Express Protector from Ixis Research, Ltd - which is "designed for controlling access to Outlook Express and its e-mail and address data bases. Outlook Express Protector does not encrypt protected files and folders, however no programs can get access to them when the program is active." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
Yoepsrv.exeoepsrv.exeOutlook Express Protector from Ixis Research, Ltd - which is "designed for controlling access to Outlook Express and its e-mail and address data bases. Outlook Express Protector does not encrypt protected files and folders, however no programs can get access to them when the program is active." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
XOESETsetup60.exeAdded by the WAREZDL.28672 TROJAN!
XOesisrts.exePurityScan adware
UOESpamTestOESpamTest.ExEKaspersky Anti-Spam
Yoessrvoessrv.exeOutlook Express Security - which is used "to control access to Outlook Express and its databases. When it is active, Outlook Express becomes locked and no third-party programs can access its message base files and the address book. As a result, when you try to start Outlook Express, open the address book or access the files, a password will be asked to allow access." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
Yoessrv.exeoessrv.exeOutlook Express Security - which is used "to control access to Outlook Express and its databases. When it is active, Outlook Express becomes locked and no third-party programs can access its message base files and the address book. As a result, when you try to start Outlook Express, open the address book or access the files, a password will be asked to allow access." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run
NOEXCheckEA2Check.exeExpress Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others
XOffer Companionoffers.exeAdware
XOffersoffers.exeAdware
XOffica Monitor Secura Systemewinxp_sp3.exeAdded by a variant of the RBOT WORM!
XOfficeOffice.exeAdded by the KRAIMER.12 TROJAN!
XOffice Desktopsimag.exeAdded by the SPYBOT.AQR WORM!
UOffice Mailoff_mail.exeOffice Mail from Burrotech Ltd - "complete email solution for small/medium businesses, homes, schools and colleges. It is a small email server which forms the perfect gateway between your internal and external email"
UOffice Mail Alerterom_Alerter.exeOffice Mail Alerter - "alert Office Mail users when they receive new emails" via a System Tray icon
XOffice Monitoradv32.exeAdded by the SDBOT-CWO WORM!
XOffice Monitoralg32.exeAdded by the RBOT-GMM WORM!
XOffice Monitornvsvc86.exeAdded by the IRCBOT.BVO BACKDOOR!
XOffice Monitor Secure Systemaabsecure32.exeAdded by the RBOT.FPW WORM!
XOffice Monitor Word Exel Rsvch.exeAdded by the DWNLDR-GWW TROJAN!
XOffice Monitor Word Exel Ru.exeAdded by the SDBOT-DEE WORM!
XOffice Monitor Word Exel R[trojan filename]Added by the IRCBOT-VX TROJAN!
XOffice MonitorsGoogleUpdater.exeAdded by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools
XOffice Monitorse[path to worm]Added by the SDBOT-CZX WORM!
NOffice Startuposa.exeOn older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
XOffice StartupExploer.exeAdded by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries
NOffice StartupOsa9.exeOn older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs
XOffice SturtUposa9.exeAdded by the CLICKER-EC TROJAN! Note - this trojan is located in %Windir% and should not be confused with the Microsoft office program, located in %Program Files%\Microsoft Office\Office
XOffice_appmsnmrgs.exeAdded by a variant of the VBBANC-A TROJAN!
Xoffice_update[path to trojan]Added by the DLOADER-ZB TROJAN!
XOfficeAgentexpIorer.exeAdded by the TACTSLAY.A TROJAN!
XOfficeAgentoutIook.exeAdded by the TACTSLAY.A TROJAN!
XOfficeAgentsvcrhost.exeAdded by the TACTSLAY.A TROJAN!
XOfficeAgentsvcshost.exeAdded by the TACTSLAY.A TROJAN!
XOfficeDeamonmsorunner.exeAdded by a variant of the TACTSLAY TROJAN!
YOfficeGuard RegCheckerogrc.exeKaspersky Labs anti-virus
XOfficeGuardUIsvcss.exeAdded by the DEDLER-C TROJAN!
?officejet 6100hposol08.exeAssociated with a HP PSC2110 (and maybe others) all-in-one machine
UOFFICEKBkbdap32a.EXEKeyboard utility for a Micro Innovations brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard
XOfficeQuickAccessOfficeHost.vbsAdded by the PEXMOR WORM!
XOfficesmsnmgd32.exeAdded by the FORBOT-DV WORM!
XOffices Monitors[path to worm]Added by the RBOT-GKO WORM!
XOffices Monitorse[path to worm]Added by the RBOT-GKO WORM!
XOffices Monitorsealgose32.exeAdded by the RBOT-GDD WORM!
YOfficeScan95pccwin97.exeTrend Micro antivirus OfficeScan
YOfficeScanNT Monitorpccntmon.exeTrend Micro OfficeScan Antivirus real-time scan monitor
XOfficeWord Monitormsn32.exeAdded by the RBOT-GUE WORM!
XOfficeWord MonitorsOfflce.exeAdded by the IRCBOT.JZ TROJAN!
XOFFICEXPOFFICEXP.exeAdded by the WOOTBOT.HE WORM!
UOfflineFileSyncOfflineFileSyn.exeOffline synchronization part of ZANTAZ EAS (Enterprise Archive Solution) - which "is a secure, scalable set of tools for managing the the enormous amounts of 'unstructured information' held in corporate e-mails, files and SharePoint content"
NOfotoNow USB DetectionRundll32.exe OFUSBS.DLL, WatchForConnection OfotoNowAutodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs
Yogrcogrc.exeKaspersky Labs anti-virus
NOil ChangeOCTray32.exeFrom CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
Page: 1 2 3

The autorun list is presented in association with Sysinfo.org

Our Tip: a-squared Anti-Malware - Best In Test!

a-squared Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner