Autorun List


Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown


View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 3127 autoruns. Autorun 1701 to 1800:

StatusAutorun nameCommandDescription
XStart Uppingtaskmrg.exeAdded by the RBOT-MA WORM!
XStart UppingSVCHOSTES.EXEAdded by the RBOT-NB WORM!
XStart Uppingssvcchosts.exeAdded by the SDBOT.VY WORM!
XStart Uppingsmssupdate.exeAdded by a variant of the RBOT WORM!
NStart Wingman Profilerlwtest.exeLogitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer, it's best to leave it unchecked
NStart Wingman ProfilerLWEMon.exePart of Logitech Gaming Software (formerly Wingman Software) for their range of game controllers. Starts the profiler (button configuration) and loads the last used profile at start-up - including System Tray access. Unless you're a hard-core gamer it's best to leave it disabled and load when needed
XStart Xp Setupmsxp.exeAdded by the RBOT.AKK WORM!
UStartaccstartacc.exeLaunches Webroot's Accelerate 2000 software that "speeds up your Internet connection by up to 300%". Leave enabled if you find it improves internet connection
NStartCCCCLIStart.exePuts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs
Xstartdrvstartdrv.exeAdded by the DROPRK-A TROJAN!
UStartEAKStartEAK.exeEasy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys
UStartEaseStartEase.exeStartEase from PC Magazine - application launcher that managed programs in the Windows Start menu into an A-to-Z menu structure
Xstartemdoit[path to trojan]Added by the DLOADR-AVP TROJAN!
XStarterscvhosting.exeAdded by the SDBOT.RU WORM!
Xstarterscvhostingg.exeAdded by the FORBOT-FB WORM!
Xstarteriexplore.exeAdded by the FORBOT-DU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
UStartFoxieStartFoxie.exeFoxie Suite from Softonic International. "This suite of free tools comes in the form of an Internet Explorer add-on and includes a mix of powerful security enhancements"
XStarting upwvsvc.exeAdded by the RBOT-NF WORM!
Xstartkeysvcmgr.exeAdded by the HIPPER-B TROJAN!
Xstartkeyupdate.exeAdded by the BIFROSE-DG TROJAN!
Xstartkeyexplore32.exeAdded by the BDOOR-MT BACKDOOR!
XstartkeyCKOTS.exeAdded by the BIFROSE-HM TROJAN!
XStartKeypligde.exeAdded by the BIFROSE.E TROJAN!
XstartkeyRunWinRaR.exeAdded by a variant of the BIFROSE-LV TROJAN!
XstartkeyMysia.exeAdded by the CEP TROJAN!
Xstartkeyexplorer.exeAdded by the BCKDR-MLD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
Xstartkeyfurzi.exeAdded by the BIFROSE-OK TROJAN!
Xstartkeykrnl.exeAdded by the BIFROSE-S TROJAN!
Xstartkeyroyale.exeAdded by a variant of the SDBOT WORM!
Xstartkeyrtfmsv.exeAdded by the EDEPOL-C TROJAN!
Xstartkeyscvhost.exeAdded by the BIFROSE-PM TROJAN!
Xstartkeyserver.exeAdded by the BIFROSE-DB TROJAN!
Xstartkeywin32i.exeAdded by the BIFROSE-R TROJAN!
XstartkeywinampXP.exeAdded by the BIFROSE-OY TROJAN!
Xstartkeysvchost32.exeAdded by a variant of the SDBOT WORM!
Xstartkeywinlogin.exeAdded by the BIFROSE-PM TROJAN!
Xstartkeyantivir.exeAdded by the BIFROSE-TO TROJAN!
Xstartkeysvchost.exeAdded by the AGENT-FPL TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XStartKeymsnmsie.exeAdded by the BIFROSE.M BACKDOOR!
Nstartl.exestartl.exeLingocom LingoWare - translates any application into your language
?StartMen ApplicationMUIStartMenu.exePart of various video and audio utilities from CyberLink - including (but not limited to) LabelPrint, Power2Go, DVD Suite, PowerProducer and PowerDirector. The exact purpose of this entry is unknown at present but it unloads from memory once run. The command line varies depending upon the product
XStartMenudeamon.exeAdded by the TACTSLAY.C TROJAN!
XStartMenumsgaol.exeAdded by the TACTSLAY.C TROJAN!
XStartMenus_menu.exeAdded by the TACTSLAY.C TROJAN!
XStartMenubrowse.exeAdded by the DROWSY-C TROJAN!
Xstartpagestartpage.exeBrowser hijacker - redirecting to - prevents spyware from changing your startpage and other browser properties. The start1.exe file is located in a NOSPY.ORG folder
XStartReplySystemloadnewmessage.exeAdded by the HIDAGENT-B WORM!
UStartSecurDocSDPin.exeSecurDoc from WinMagic Inc - "Provides full disk encryption to protect sensitive information stored on laptops, desktops and PDAs"
UStartStopSTARTSTOP.EXEStartStop from TFI Technology - startup manager
UStartSurfingSTARTS.exeStart Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start -> Programs
NStartup??Related to an Iomega drive
XStartupWinlogonStartupUnidentified malware
XStartupmirc.exeAdded by the FLOOD-EU TROJAN! An uninstall option for mirc.exe can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as mIRC. This one puts 10 files in %Windir%
XStartupsvchost.exeAdded by the AGENT-QCK TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%\Microsoft
UStartup Agentstartupagent.exeStartup Agent by KillerSoftware - "provides constant monitoring of the startup areas during your Windows session. If Startup Agent has detected changes to your registry or startup files, you will be displayed with a Warning Message and asked if you want to remove those new changes"
XStartup Configuration[six character filename]Added by the RBOT-ARV WORM!
XStartup Configurationwztoid.exeAdded by the RBOT-ASD WORM!
?Startup Launcher GUIGUI.exeStartup manager?
UStartup Manager ScannerStartupMonitor.exeStartup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans, adult-dialers, and other scumware
YStartup Scansensor.exePart of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. Optionally scans the system boot area for programs trying to automatically execute before Windows loads and keeps a watch on some system files which are commonly patched (or replaced) by malware. Feature not supported on Windows 7/Vista systems. Also included by vendors who use the Quick Heal engine such as Omniquad and iQon
XStartup UpdateCvshost.exeAdded by the GAOBOT.AO WORM!
XStartupBiniwnujdss.exeAdded by the SDBOT-XZ WORM!
XStartUpDate[path to trojan]Added by the BIFROSE.F BACKDOOR!
UStartupMonitorStartupMonitor.exeMike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
XStartupOptionloadsysdisk.exeAdded by the HIDAGENT-B WORM!
XStartwdrundll32.exe wd081025.dll,HookAdded by the AGENT.DE TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wd081025.dll" file is found in %System%
Xstartwinstartwin.exeAdded by the ANTIMAN.A WORM!
Xstartwindowskeyuserrundle2.exeAdded by the JAVAKILLER TROJAN!
NStat 'n' PerfStatnPerf.exeStat 'n' Perf monitors your internet connection and displays information about sent and received bytes
XStatBarSTATBAR.exeStatBar (system status bar) allows you to quickly get an overview of your system's condition (memory, CPU, uptime, and much more). Due to the sheer number of resources (over 60%) consumed by this program, it is unsuitable for Windows 9x/Me
XState Servicecsrss.exeAdded by the DADOBRA-CP TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
UStationPlaylistStudioSPLStudio.exeStationPlaylist Studio - "simple to use on-air broadcast playback software for the studio and/or DJ" for small to medium sized radio broadcasters, and internet webcasters
XStatisticsstatslist.exeAdded by the OPANKI-S WORM!
Xstatloadspgjd83sa.exeAdded by the SDBOT-UM WORM!
NStatus MonitorBrMfcWnd.exeBrother scanner status monitor - can be started manually
UStatus Monitor CLJ1500HPPOUMUI.exeStatus monitor for the HP Color LaserJet 1500 printer from Hewlett-Packard - for monitoring printer status, checking ink levels, etc
NStatus Monitor XEENGSS.EXEThe Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start -> Programs
?StatusClientStatusClient.exePart of Hewlett Packard network printer drivers
?StatusClient 2.6StatusClient.exePart of Hewlett Packard network printer drivers
NStatusViewStatusView.exeStatus View intra-office messaging
NStay Connected!StayCon.exeMore than just a pinger, actually simulates online activity. Supports AOL, NetZero, MSN, ATT WorldNet, CompuServe and many other ISPs as well. Available via Start -> Programs
UStayAliveStayAlive.ExePart of RealSPEED - tweaking utility to speed-up your internet connection. Stay connected even after a period of inactivity on the net
UStayAlivesa.exeStayAlive from TFI Technology. "This top-notch tool intercepts crashes when they happen, keeping your programs running so you can save your work."
?STBVisionSTBVisn.exeRelated to the STB Velocity graphics card. What does it do and is it required?
NSTBWEBTVSTBWEBTV.EXEUsed to display TV on your PC
Xstcinstallerid53.exeAdded by the SCTHOUGHT.L TROJAN!
XSTCLOA~1STCLOA~1.EXESecondThought adware
Xstcloaderstcloader.exeSecondThought adware
YSTCPOSTCPO.exeSophos Sweep antivirus software
XStdAFXstdafx.exeAdded by the DELBOT-AF WORM!
Xstdlib[filename]Added by the PERDA-E TROJAN!
YSTDSBSTDSB.exeScrollbar driver for notebooks. If taken out of the Startup, it will not provide scrolling
UStealth Anonymizer 2.5stealth25.exeNow named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy
Xstealth.dcom.exestealth.dcom.exeAdded by the THEALS.A WORM!
Xstealth.ddos.exestealth.ddos.exeAdded by the THEALS.A WORM!
Xstealth.exestealth.exeAdded by the THEALS.A WORM!
Xstealth.injector.exestealth.injector.exeAdded by the THEALS.A WORM!
Xstealth.stat.exestealth.stat.exeAdded by the THEALS.A WORM!
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

The autorun list is presented in association with

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner