Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 3325 autoruns. Autorun 601 to 700:

StatusAutorun nameCommandDescription
Xwincmapwincmapp.exeCasClient adware variant - also detected as the CMAPP TROJAN!
UWinColorReminderWinColorReminder.exeThe Microsoft Color Control Panel Applet for Windows XP "helps you manage Windows color settings in one place." Part of the Pro Imaging Powertoys
Xwincomvbrun6win.exeAdded by the AGOBOT-AFK WORM!
Xwinconfigwscript winconfig.jsAdded by the CHAFPIN TROJAN! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "winconfig.js" file is found in %Temp%
Xwinconfigwscript.exe winconfig.jsAdded by the CHAFPIN TROJAN! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "winconfig.js" file is located in %Temp%
XWinConfig9324wincfgkop9.exeAdded by the RBOT.BVD WORM!
Xwinconnvbrun6nt.exeAdded by the AGOBOT-AEI BACKDOOR!
XWinCore32.exeWinCore32.exeAdded by the CLICKER-EN TROJAN!
Xwincrt.exe[path to worm]Added by the STRATIO-HA WORM!
XWinCRT32wincrt32.exeAdded by the DOGBOT-D WORM!
XWinCSRSSMSGRT32.EXEAdded by the REWINDO-A TROJAN!
Xwinctlwinctl.exeAdded by the IRCBOT-YI TROJAN!
XWINCXwincore332.exeAdded by the AGOBOT-MG WORM!
XWindWind.exeAdded by an unidentified VIRUS, WORM or TROJAN! See here - the file is located in %Windir%\Debug
XWind Logd Fileservicelogd.exeAdded by a variant of the RBOT WORM!
XWind OptimizerWindOptimizer.exeWind Optimizer rogue system optimization tool - not recommended, removal instructions here
XWind River Systemsvxworks.exeAdded by the ACKANTTA WORM! Note that this is not related to the VxWorks platform from Wind River
XWind Securitymswi32.pifAdded by the RBOT-ARH WORM!
Xwind.exewind.exeAdded by the MITGLIEDER.BD TROJAN!
XWIND0WSWIND0WS.exeAdded by the SPYBOT.DQ WORM!
XWIND0WSmella.batAdded by the ALLEM WORM!
XWind0wswordpad.exeAdded by the AGOBOT-TL WORM! Note - this is not the legitimate Windows application wordpad.exe (which is found in the %ProgramFiles%\Accessories folder) which should not normally be seen in Msconfig or as a Startup item. This one is Located in %System%
XWind0ws Ser7ice Agentcolwindos.exeAdded by the RBOT-GQO WORM!
XWind0ws Sharingssprotecter.exeAdded by the RBOT-AHW WORM!
XWind32Wind32.exeIdentified as a variant of the Backdoor.Win32.Poison.avs malware
Xwindatewindate.exeAdded by the AGOBOT-ZC WORM!
NWinDateswindates.exeWinDates is a calendar, date organizer and event reminder program from Rockin' Software
Xwindbswinxtc.exeAdded by the AGOBOT-WD WORM!
XWindewinde.exeAdded by the DLUCA TROJAN!
XwindefWin32sp.vbsAdded by the ANPES WORM!
Xwindefwindef.exeAdded by the WURMARK-O WORM!
XWinDefenderwicfte.exeAdded by the SCAR-AG TROJAN!
XWinDefender 2008WDefDemo.exeWinDefender 2008 rogue privacy program - not recommended, removal instructions here
Xwindefender.exewindefender.exeAdded by the AGENT.BYH TROJAN!
XWinDefender2009windef.exeWinDefender 2009 rogue security software - not recommended, removal instructions here
XWindeows NetStart Service2tesakrmger.exeAdded by the RBOT-AMY WORM!
XWinDevilsWinDevils.exeAdded by the BRONTOK-BS WORM!
Xwindhost.exeosrwin32.exeAdded by the BANKER-CB TROJAN!
Xwindhost.exewindhost.exeAdded by the BANKER-BV TROJAN!
Xwindhost.exewinos.exeAdded by the PWSAGENT-A WORM!
Xwindirwinrun.exeAdded by the WINBUR.B WORM!
XWindir Workingwuaumqr1.exeAdded by a variant of the IRCBOT TROJAN!
XWinDirectoriestdirs.exeAdded by the VB-EPB VIRUS!
XWinDirectoriesddcs.exeAdded by the VB-ETN WORM!
XWindllWindll.exeAdded by the TRYNOMA TROJAN!
UWINDLLWSYS.EXESTARR key logger. "It logs almost everything that goes through the box. It logs all key strokes, all passwords transacted even if they weren't keyed in, all web sites visited, every program launched including the path to that program, and more"
Xwindllwindll32.exeAdded by the ASTEF or RESPAN WORMS!
Xwindllwindotnetsrv.exeAdded by the AUTORUN-ANO WORM!
XWinDLL (algs.exe)rundll32.exe algs.exe,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "algs.exe" file is found in %System%
XWinDLL (aqls32.exe)aqls32.exeAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "aqls32.exe" file is found in %System%
XWinDLL (asdfsa.exe)rundll32.exe asdfsa.exe,startAdded by the SDBOT.GAV WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "asdfsa.exe" file is found in %System%
XWinDLL (bee.dll)rundll32.exe bee.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "bee.dll" file is found in %System%
XWinDLL (bix.exe)rundll32.exe bix.exe,startAdded by the KOLAB.OL WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "Bix.exe" file is found in %System%
XWinDLL (csmss.exe)rundll32.exe CSMSS.EXE,startAdded by the AKBOT.U WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "CSMSS.EXE" file is found in %System%
XWinDLL (ctfmonm.exe)rundll32.exe ctfmonm.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "ctfmonm.exe" file is found in %System%
XWinDLL (dasda.com)rundll32.exe dasda.com,startAdded by the SDBOT.GAV WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "dasda.com" file is found in %System%
XWinDLL (diem.exe)rundll32.exe diem.exe,startAdded by the AKBOT.E WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "diem.exe" file is found in %System%
XWinDLL (dlfksdld.exe)rundll32.exe dlfksdld.exe,startAdded by the IRCBOT.BPM BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "dlfksdld.exe" file is found in %System%
XWinDLL (jbi32.dll)rundll32.exe jbi32.dll,startAdded by the AKBOT.E WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "jbi32.dll" file is found in %System%
XWinDLL (lcass.exe)rundll32.exe lcass.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "lcass.exe" file is found in %System%
XWinDLL (mysnlive.exe)rundll32.exe mysnlive.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "mysnlive.exe" file is found in %System%
XWinDLL (ProsFix.exe)ProsFix.exeAdded by a variant of the IRCBOT BACKDOOR! The "ProsFix.exe" file is found in %System%
XWinDLL (qwex.dll)rundll32.exe qwex.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "qwex.dll" file is found in %System%
XWinDLL (redyLive.exe)rundll32.exe redyLive.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "redyLive.exe" file is found in %System%
XWinDLL (scvhost32.dll)rundll32.exe scvhost32.dll,startAdded by the AKBOT.M WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "scvhost32.dll" file is found in %System%
XWinDLL (service.exe)service.exeAdded by the AGENT.BX WORM! The "service.exe" file is found in %System%
XWinDLL (slmss.exe)rundll32.exe slmss.exe,startAdded by the AKBOT.AW WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "slmss.exe" file is found in %System%
XWinDLL (slsass.exe)rundll32.exe slsass.exe,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "slsass.exe" file is found in %System%
XWinDLL (smaprnter.exe)rundll32.exe smaprnter.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "smaprnter.exe" file is found in %System%
XWinDLL (smms.exe)rundll32.exe smms.exe,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "smms.exe" file is found in %System%
XWinDll (sslms.exe)rundll32.exe sslms.exe,startAdded by the AKBOT-AS WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sslms.exe" file is found in %System%
XWinDLL (start0s.exe)rundll32.exe start0s.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "start0s.exe" file is found in %System%
XWinDLL (steam.dll)rundll32.exe steam.dll,startAdded by the AKBOT.M WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "steam.dll" file is found in %System%
XWinDLL (svc.exe)rundll32.exe svc.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "svc.exe" file is found in %System%
XWinDLL (svchost.dll)rundll32.exe svchost.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "svchost.dll" file is found in %System%
XWinDLL (sysx32.dll)rundll32.exe sysx32.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sysx32.dll" file is found in %System%
XWinDLL (tepmlayer.exe)rundll32.exe tepmlayer.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tepmlayer.exe" file is found in %System%
XWinDLL (tmp.exe)rundll32.exe tmp.exe,startAdded by the KOLAB.L WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tmp.exe" file is found in %System%
XWinDLL (tock24.dll)rundll32.exe tock24.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tock24.dll" file is found in %System%
XWinDLL (tqurity.exe)rundll32.exe tqurity.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tqurity.exe" file is found in %System%
XWinDLL (v4mon.dll)rundll32.exe v4mon.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "v4mon.dll" file is found in %System%
XWinDLL (vdm32.dll)rundll32.exe vdm32.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "vdm32.dll" file is found in %System%
XWinDLL (vxd32.dll)rundll32.exe vxd32.dll,startAdded by the AKBOT.R WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "vxd32.dll" file is found in %System%
XWinDLL (wchshield.exe)rundll32.exe wchshield.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wchshield.exe" file is found in %System%
XWinDLL (wimimi.exe)rundll32.exe wimimi.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wimimi.exe" file is found in %System%
XWinDLL (windns32.dll)rundll32.exe windns32.dll,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "windns32.dll" file is found in %System%
XWinDLL (wingatey32.exe)rundll32.exe wingatey32.exe,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wingatey32.exe" file is found in %System%
XWinDLL (wintmp.exe)rundll32.exe wintmp.exe,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wintmp.exe" file is found in %System%
XWinDLL (Wseclayer.exe)rundll32.exe Wseclayer.exe,startAdded by the AKBOT.E BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "Wseclayer.exe" file is found in %System%
XWinDLL (wsync32.dll)rundll32.exe wsync32.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wsync32.dll" file is found in %System%
XWinDLL (xvd32.dll)rundll32.exe xvd32.dll,startAdded by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "xvd32.dll" file is found in %System%
XWindll.exeWindll.exeAdded by the STEALER TROJAN!
XWindll32Windll32.exeAdded by the MSNPWS TROJAN!
XWinDll32_WIN32.EXEAdded by the LEGMIR.AQ TROJAN!
Xwindllsys32.exewindllsys32.exeAdded by a variant of the MITGLIE-A TROJAN!
XWinDNSwindns32.exeAdded by the GAOBOT.WX WORM!
XWindo Servic Agenalirexe.exeAdded by a variant of the IRCBOT BACKDOOR!
XWindo Servic Agent 32xagw.exeAdded by a variant of the IRCBOT BACKDOOR!
XWindoes Kernelkernel32.exeAdded by the KICKIN.A (or CYDOG.C) WORM!
XWindoFixWindoFix.exeWindoFix rogue system error utility
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner