Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 3127 autoruns. Autorun 2701 to 2800:

StatusAutorun nameCommandDescription
XSystem Loaderapsyst19b.exeAdded by the AGOBOT-AT BACKDOOR!
XSystem Log Eventcsrss32.exeAdded by the AGOBOT-JI WORM!
XSystem Management Servicesmsc.exeAdded by the RBOT-ANN WORM!
XSystem Managersvchost.exeAdded by the BANKER-AE TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Xsystem managerSystem.exeAdded by the FORBOT-BO WORM!
XSystem Managerwinsrv32.exeAdded by an unidentified WORM or TROJAN!
XSystem Managersysmng.exeAdded by the TAME-C WORM!
XSystem Managersysmgr.exeAdded by the IRCBOT.AGW BACKDOOR!
XSystem ManagerUser Documents.exeAdded by the VB.GF VIRUS!
XSystem Managersysmngr.exeAdded by the IRCBOT.BAQ BACKDOOR!
XSystem Managerncvs32.exeAdded by a variant of the IRCBOT BACKDOOR!
XSystem Manager Updateswinsvc.exeAdded by the AGOBOT.AEM WORM!
USystem Mechanic Popup BlockerPopupBlocker.exePopup blocker part of Iolo System Mechanic utility suite
USystem Mechanic Popup StopperPopupstopper.exePopup stopper part of Iolo System Mechanic utility suite
NSystem Mechanic Professional Update [Incinerator.dll]SysMech4.exe /REREG: [path] Incinerator.dllIolo System Mechanic "Incinerator" feature securely deletes files and folders from your PC so they can never be recovered again
USystem Mechanic Startup GuardStartupGuard.exeSystem Mechanic Startup Guard protects the Window's startup locations from being modified by viruses, spyware, malware and other annoying programs
XSYSTEM MESSAGERwmisg.exeAdded by the MYTOB.ES WORM!
XSystem Messaging QueueSMCSS.EXEAdded by a variant of the RBOT WORM!
XSystem MessengerSYSMSG32.EXEAdded by the SPYBOT-DK WORM!
XSystem Messenger32systgmgr32.exeAdded by the SDBOT.DF WORM!
XSystem Microsoft Coresmc.exeAdded by the RIZO.A TROJAN!
USystem MonitorSYSMON.EXEComes with some Aopen motherboards. Monitors CPU temp, voltage and fan speed. Warns if any become abnormal
XSystem MonitorSysmon16.exeAdded by the SDBOT TROJAN!
XSystem Monitoringcute.exeAdded by the RAHIWI.A WORM!
XSystem MonitoringMooks.EXEAdded by the BHARAT.A WORM!
XSystem Monitoringlsass.exeAdded by the BRONTOK-BS WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS
XSystem MScvbmscvb32.exeAdded by the SOBIG.C WORM!
XSystem Netsys32.exeAdded by the FORBOT-FX WORM!
XSystem Net Databasesysnd.exeAdded by the RBOT-AAW WORM!
XSystem Networkingsysnet.exeAdded by the RBOT.API WORM!
XSystem Power Managmentsvcnost.exeAdded by the DREF-I WORM!
XSystem Presets[temp name].exeAdded by the HOSTINF-A WORM!
XSystem Processcsrss.exeAdded by the ADCLICK-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XSystem Processlsass.exeAdded by the ADCLICK-AG TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XSystem Processsvchost.exeAdded by the ADCLICK-AG TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XSystem ProcessCSRSR.exeAdded by the AGOBOT-SQ WORM!
XSystem Process Analizationsysproc.exeAdded by a variant of the RBOT WORM!
XSystem Process Analization Threadsystem.exeAdded by a variant of the RBOT WORM!
XSystem Process Uninstallccapp.exeSystemProcess adware. Note - this is not the legitimate Symantec/Norton file normally located in %ProgramFiles%\Common Files\Symantec Shared. This one is located in %System%
XSystem ProfileRegsrv.exeAdded by a variant of the OPTIX TROJAN!
XSystem Protectorlsascs.exeSystem Protector rogue security software - not recommended, removal instructions here
XSystem RAID Managerraid64.exeAdded by the AGENT-NNZ TROJAN!
XSystem Rebootrebootsys.exeAdded by the RBOT-WU WORM!
XSystem Redirectsysbho.exeDownloader trojan, "Melkosoft" adware related
XSystem Registry Managersysrgmgr.exeAdded by an unidentified WORM or TROJAN! See here
XSystem Restoresvcnet.exeAdded by the TIBICK WORM!
XSystem Restorewscript.exe SysRes.vbsAdded by the AUTORUN-FM WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "SysRes.vbs" file is located in %Windir%
XSystem Restore Data[path] repcale.exe [path] beird.exeAdded by the RANDON.AN WORM! Both files are located in %System%\frbyjed
XSystem Scannersystem.exeAdded by the AGOBOT-DI BACKDOOR!
XSystem Security Checkerssc.exeAdded by the IRCBOT-WI TROJAN!
XSystem Security Updatersvsmons.exeAdded by the RBOT-OW WORM!
XSystem Serviceservicent.exeAdded by the RBOT-AJI WORM!
XSystem servicesystem.exeAdded by the BANCOS.AA TROJAN!
XSystem Servicemsnwindows.exeAdded by the SPYBOT.YCL WORM!
XSystem Serviceservicez.exeAdded by the RBOT-AOY WORM!
XSystem Servicemsnxpexe.exeAdded by the RBOT-AUA WORM!
XSystem Serviceteskmangr.exeAdded by the RBOT-AUV WORM!
XSystem Servicebackup.exeAdded by the PACKBOT.AA WORM!
XSystem Serviceserious.exeAdded by the RBOT-FMV WORM! Note - deactivates the Microsoft Internet Connection Firewall (ICF)
XSystem Serviceb4db0yz.exeAdded by the RBOT-CLO WORM!
XSystem ServiceMSREXE.EXEAdded by the AML TROJAN!
Xsystem servicespoolcrv.cplAdded by the INSPIR.11 TROJAN!
XSystem Servicesystems.exeAdded by the AGOBOT.VZ WORM!
XSystem Servicecoderxt.exeAdded by the RBOT-ALD WORM!
XSystem Serviceexp0lrer.exeAdded by a variant of the RBOT WORM!
XSystem Service Control[trojan filename].exeAdded by the THROD.A TROJAN! The filename is a random combination the following: ms, svc, win, 16, 32, 64, mes, prn, reg - "ms16prn.exe", for example - and is located in %System%
XSYSTEM service helpersvchelper.exeAdded by the MONKBD-A WORM!
XSYSTEM service helpersyshelp.exeAdded by a variant of the MONKBD-A WORM!
XSystem Service Managerlsmas.exeAdded by the AGOBOT-IK BACKDOOR!
XSystem Service Managernorton.exeAdded by the GAOBOT.AJE WORM!
XSystem Service Manager Devicesvho.exeAdded by the RBOT.GCG BACKDOOR!
XSystem service**pokapoka**.exeEliteBar adware - where ** represents the numbers 61 to 79
XSystem service78[path to file]Added by the ELITEBAR-T and ELITEBAR-U TROJANS!
XSystem service79[path to file]Added by the ELITEBAR-V TROJAN!
XSystem Services[random file name]Added by a variant of the RBOT WORM!
XSystem Servicesconnection.exeAdded by an unidentified WORM or TROJAN!
XSystem Servicessvcsenes.exeAdded by a variant of the RBOT WORM!
XSystem Servicessvcsenes32a.exeAdded by the RBOT-AFG WORM!
XSystem Servicesssms.exeAdded by a variant of the RBOT WORM!
XSystem Services Monitorserver.exeBifrost malware
XSystem Servlcelive.exeAdded by the IRCBOT-GX WORM!
XSystem Session Managersmss.exeAdded by the KALEL-E WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
XSystem settingsburndl32.exeAdded by the SDBOT-ZO WORM!
XSystem Setuprpcxcmod.exeAdded by an unidentified WORM or TROJAN!
XSystem Soap Prosoap.exeSystem Soap Pro internet cleaning software. Bundles foistware like Httper and Zipclix - best avoided
Xsystem spoolsyspools.exeAdded by the DREF-T WORM/VIRUS!
XSystem Spooler Subsystemlssas.exeAdded by a variant of the IRCBOT BACKDOOR! See here
USystem startupcharmapx.exeOnly required if using an oriental language
XSystem StartupVoltio.exeAdded by the RBOT.NJ WORM!
XSystem Startupkimochi.exeAdded by a variant of the RBOT WORM!
XSystem Startupsys.exeAdded by a variant of the IRCBOT TROJAN!
XSystem Startup Managersmcss.exeAdded by the RBOT.AMD WORM!
XSystem StatsSystemStats.exeAdded by a variant of the WOOTBOT WORM!
XSystem Supportsyscfg.exeAdded by the RBOT-AGQ WORM!
XSystem Supportsystem32.exeAdded by the RBOT-AHA WORM!
XSystem Supportsyssql.exeAdded by the RBOT-AUH WORM!
XSystem Supporttorrent.exeAdded by a variant of the RBOT WORM!
XSystem Task Managertaskmrg.exeAdded by a variant of the SPYBOT WORM! See here
XSystem TerminalSYSTEM2.EXEAdded by the SPYBOT-BZ TROJAN!
XSystem time updatorCSysTime.exeAdded by the RANDEX.S WORM!
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner