Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 3127 autoruns. Autorun 601 to 700:

StatusAutorun nameCommandDescription
XServicesiexplorer.exeAdded by an unidentified WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
XServicesiexploler.exeAdded by the RANCK-LT TROJAN!
XServicesiexpolere.exeAdded by the RANCK.LU TROJAN!
Xservicessample.exeAdded by a variant of the RANKY TROJAN!
XServicescsrss32.exeAdded by the ANACON-D VIRUS!
XServicesanacon32.exeAdded by the ANACON-C WORM!
XServicesWinuoa.exeAdded by the PROXY-FBSR MALWARE!
XServices Administratorlocalsvc.exeAdded by the DLOADER-NY TROJAN!
XServices Administratornetsvc.exeAdded by the DLOADER-NY TROJAN!
XServices Administratorspoolsvc.exeAdded by the DLOADER-NY TROJAN!
XServices Administratorsvcadmin.exeAdded by the DLOADER-NY TROJAN!
XServices Administratorsvcman.exeAdded by the DLOADER-NY TROJAN!
XServices Administratorsvcrun.exeAdded by the DLOADER-NY TROJAN!
XServices Administratortcpsvc.exeAdded by the DLOADER-NY TROJAN!
XServices Administratorwebsvc.exeAdded by the DLOADER-NY TROJAN!
XServices Control Managerservices.exeAdded by the DELF-CGI TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
XServices Controllerlsassa.exeAdded by the CIADOOR.122 VIRUS!
XServices Controllerservices.exeAdded by the CIADOOR-F TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
YServices de sécurité VidéotronRps.exeMain program for the Vidéotron Security Services internet security suite for Vidéotron ISP customers - sourced by Radialpoint
XServices DLL Loadersrvdll.exeAdded by the SLENFBOT.ZS WORM!
XServices HostScchost.exeAdded by the DONK WORM!
XServices Hostsvchost32.exeAdded by the AGOBOT-TG WORM!
XServices hostsvchost.comAdded by the RBOT-EU WORM!
XServices Logonservices.exeAdded by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Templates
XServices Management Clientsservc.exeAdded by the RIZO.A TROJAN!
XServices Managementsservcs.exeAdded by the RBOT-GUC WORM!
XServices Managersvsmanager.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XServices Manager!svmanager.exeAdded by the IRCBOT.ATZ BACKDOOR!
XServices Managerssvcmanager.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XServices NetworkServices.exeAdded by the SWISYN-E WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
XServices Processservices.exeSpyware - detected by Kaspersky as the SMALL.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
XServices Processsmss.exeAdded by the SMALL-EK TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "config" subfolder
XServices Start2odcwinst.exeAdded by the PYSKE-D WORM!
XServices Startupservices.exeAdded by the CROWT.A WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files
XServices Startupsvhost33.exeAdded by a variant of the RBOT WORM!
XServices++services.exeAdded by the SILLYFDC.BDM WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\RECYCLER
XServices.EXEservices.exeAdded by the KAZPING WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Xservices.exeservicess.exeAdded by the MSNSPY-B TROJAN!
Xservices.exeservice.batAdded by the MDROP-BSW TROJAN!
XServices004[worm filename]Added by the BUGBROS WORM!
Xservices32mc-110-12-0000079.exeAdded by the TrojanDownloader.Agent.rv TROJAN!
Xservices32mc-58-12-0000120.exe"Shorty" adware - also detected as the AGENT.FD TROJAN!
Xservices32mc-58-12-0000140.exe"Shorty" adware - also detected as the AGENT.FD TROJAN!
Uservices32[random filename]Director adware
XServices32 Startupwin32dll.exeAdded by the SDBOT-XO WORM!
XServicesActivecssrs.exeAdded by the AGOBOT-GB BACKDOOR!
XServicesAdministratorSERVICES.EXEAdded by the PUNYA-B WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS
XServicesaraservices.exeAdded by the BRONTOK-BS WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS
XServicesLoadlsass.exeAdded by the DEARIS-A TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XServicesLogccapp32.exeAdded by the RBOT-AMX WORM!
UServicesNotifyServicesNotify.exeDefender Pro Antispy
Xservicestub.exeservicestub.exeAdded by the RBOT.CN BACKDOOR!
XServicewinHide32.exeAdded by the MSNVB-D WORM!
XServicinghostd.exeAdded by the SDBOT.BUI WORM!
XServicio Localsvhost.exeAdded by the SPYBOT.BGX WORM!
Xservicoservico.exeAdded by the BANKER-DKE TROJAN!
XServicosAdobeLanc.exeAdded by the BANKER-EHR TROJAN!
XServicosSystem.exeAdded by the BANCOS-BCM TROJAN!
Xservicsservics.exeAdded by the SINGU-J TROJAN!
Xservisesservises.exeAdded by the AGENT-JUJ WORM!
XSERVlCESERVlCE.EXEAdded by the AGOBOT-UB WORM!
YServoAppServoApp.exeMulti Function Printer (MFP) server agent for products such as Belkin's Wireless G All-in-One Print Server and ZyXEL's NPS-520 which allow multiple computers to use networked all-in-one printers. Required for the MFP Server Agent (MFPAgent.exe) to run properly - whether it's set to start manually or automatically
XServRunsrss32.exeAdded by the AGOBOT.ABS WORM!
NServUTrayIconServUTray.exeSystem Tray access for the Serv-U FTP server which allows the user to (amongst others) start the Management Console, stop the server and display notifications
UServUTrayIconServ-U-Tray.exeSystem Tray access for the Serv-U FTP server which allows the user to (amongst others) start the Management Console, stop the server and display notifications
XSES Servicesesvc.exeAdded by the SDBOT-CZU WORM!
USession Clientsescli.exeSurfSpy keystroke logger/monitoring program - remove unless you installed it yourself!
XSession Manager Subsystemsmssa.exeAdded by the RBOT-AGS WORM!
XSessionInitinit.exeAdded by the FAKEAV-BRZ TROJAN!
XSessionMngrdirlock.exeAdded by the DAPROSY WORM!
XSessMgrsessmgr.exe /waitserviceAdded by the HORST.Q TROJAN! Note - this is not the legitimate sessmgr.exe which is always located in %System%. This one is located in either %Windir%, %Windir%\System, %Temp%, %AppData%, %AppData%\Microsoft or %System%\drivers
XSESyncsed.exeDownloadWare adware
?SetCacheModerundll32.exe ptipbmf.dll, SetWriteCacheModeInstalled with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller
?SetDefaultMIDIMIDIDef.exeRelated to a Soundblaster Audigy soundcards. What does it do and is it required?
YSetDefaultPrintercloaker.exeUsed by HP and Compaq computers to hide the windows of programs passed as arguments to it
Nsetdefprtsetdefprt.exeUsed to set a Brother MFC printer/copier/scanner as the default printer after installation
NSetDefPrtBrStDvPt.exeUsed to set a Brother MFC printer/copier/scanner as the default printer after installation
USetecCertUtilCertutil.exeSetec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV
XsetFTPBackcreatesw.exeAdded by the FTP_BMAIL TROJAN!
NSetHookSethook.exeFellowes Neato® cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
NSETI@homeSETI@home.exeSETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
NseticlientSETI@home.exeSETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
NSetIconSetIcon.exeInstalled by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog
NSetiQueueSetiqu~1.exeProvides work unit buffering for Seti@Home clients - see here for more details
NSetiSpySetiSpy.exeSETI Spy is a little program to "spy" on the progress and performance of the SETI@home client. Called a "spy" because it is unobtrusive as possible
?SetPanelAPanel.cmdDisplay configuration utility for some Acer laptops. Is it required?
XSetPointSetPoint.exeAdded by the RBOT-BWI WORM! Note - this is not the valid Logitech Setpoint mouse and keyboard entry that uses the same filename and is located in %ProgramFiles%\Logitech\Setpoint. This one is located in %System%
USetPointSetpoint.exeLogitech SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice, trackballs, etc). Required if you want to use the advanced features or modify the default settings of these devices and located in %ProgramFiles%\Logitech\Setpoint
XSETPOINT Logitech IncKHALMNP.exeAdded by the RBOT-AAX WORM!
USetRefreshSetRefresh.exeFound on some Compaq & HP PCs. SetRefresh is a utility which attempts to optimize the monitor's refresh rate, and in some cases the resolution, for the best user experience. See "here for more info
Xsettdebugx.exesettdebugx.exeAdded by the FAKEAV.SMSS TROJAN!
XSettingsysweb.exeAdded by the SDBOT.W BACKDOOR!
XSettingWebprint.exeAdded by the SDBOT.W BACKDOOR!
Nsetuphphprld.exe ....setup.exeHP DeskJet Setup - printers function normally without it
XSetup[path to trojan]Added by the DROPPER.EAT TROJAN!
XSetup experationsvchost.exeAdded by the TOFGER-AW TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Xsetup.exesetup.exeAdded by the GOLDUN-GB TROJAN!
Xsetuparunt32.exeAdded by the QQPASS-K TROJAN!
Xsetupdatarnll32.exeAdded by the QQPASS-AC TROJAN!
Xsetupuserregedit.exe setupuser.logRegfile in disguise - another CoolWebSearch parasite variant
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner