Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 181 autoruns. Autorun 101 to 181:

StatusAutorun nameCommandDescription
Xxp_systemservices.exeAdded by the KREPPER-N TROJAN and variants! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The one is located in a %Windir%\inet***** - where ***** varies dependent upon the variant, examples are 10066, 20001, 20088
Xxp32winxpupdater02.exeAdded by the MOSUCK-A TROJAN!
NXpadderXpadder.exe"Xpadder simulates the keyboard and mouse using your gamepad"
?XPAgentXPAgent.exePart of the IBM/XPoint Rapid Restore utility - normally located in %ProgramFiles%\XPOINT\AGENT folder. Appears as a service in XP/Vista and under the "RunServices" registry key in Win98. What does it do and is it required?
XXPAgentXPAgent.exeDetected by Panda as the CLICKER.LE TROJAN! Do not confuse this with the IBM/XPoint Rapid Restore file which is normally located in %ProgramFiles%\XPOINT\AGENT folder. This one is found in %System%
XXPAntivirusXPAntivirus.exeXPAntivirus rogue security software - not recommended, removal instructions here
XXpAspy[path to trojan]Added by the DELF-WH BACKDOOR!
?xpcfgxpcfg.exe??
?Xpclientxpclient.exePart of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
UXPCMonitorXPCMonitor.exeXPC Monitor Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!
XXPCPHOST Settingsxpcphost.exeAdded by a variant of the RBOT WORM!
XXPdefenderXPdefender.exeXPdefender rogue spyware remover - not recommended, removal instructions here
XXPGuardXP-Guard.exeXP-Guard rogue security software - not recommended, removal instructions here
Xxpiupdatexpiupdate.exeAdded by the RBOT-AAB WORM!
UxPlanetControlxPlanetControl.exeTool that displays a globe with current day/night zones and clouds on users desktop.
UXplayXPlay.exeXplay 3 from Mediafour Corporation - "expands what you can do with any iPod, including the iPhone and iTouch, and a Windows computer." If not used regularily start manually before connecting the iPod/iTouch
UXPlay.exeXPlay.exeXplay 3 from Mediafour Corporation - "expands what you can do with any iPod, including the iPhone and iTouch, and a Windows computer." If not used regularily start manually before connecting the iPod/iTouch
XXplorerXplorer.exeAdded by the AUTOIT-BP WORM!
XXplorerKHATRA.exeAdded by the AUTOIT.K TROJAN!
XXpnetNetXp.exeAdded by the BANCBAN-AT TROJAN!
Xxpprotectxpdeluxe.exeXP Protector Deluxe rogue security software - not recommended, removal instructions here
XXPShieldXP-Shield.exeXP-Shield rogue security software - not recommended, removal instructions here
XXPSoftCVDAsDW.exeAdded by the SDBOT-SY WORM!
XXPSP2 Firewallxpsp2fw.exeAdded by the SMALL-RN TROJAN!
Xxpsp2installxpsp2Update.exeAdded by the AGENT-DPK BACKDOOR!
Xxpsp2Updatexpsp2Update.exeAdded by the AGENT-DPK BACKDOOR!
Xxpstartwini.exeAdded by the PICRATE.A WORM!
Xxpstatwinlogins.exeAdded by the RBOT-AAR WORM!
XXPsysXPsys.exeAdded by the DELF-KQ TROJAN!
Xxpsystemy.exeCoolWebSearch parasite variant
XXpsystemSERVICES.EXEAdded by the DAEMOZ.A TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %System%\SERVICES
Xxpsystemservices.exeCoolWebSearch parasite variant. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
XxpsystemMSXMIDI.EXECoolWebSearch parasite variant, detected by Kaspersky as the SMALL.CW TROJAN!
Xxpupdateupdates.exeAdded by the BROPIA.L WORM!
XXpyBurnerXpyBurner.exeXpyBurner rogue spyware remover - not recommended, removal instructions here
Xxrt_Shellxrt_vijr.exeAdded by the GOZI-GEN TROJAN!
Xxrt_Shellxrt_brel.exeAdded by the AGENT.AJAT BACKDOOR!
XxSafexSafe.exeAdded by the SILLYFDC.BAY WORM!
UXSC SIP ClientX-Lite.exe"CounterPath's X-Lite 3.0 is the market's leading free SIP based softphone available for download". For VOIP and broadband users
NXSC SIP ClientX-PRO-Vonage.exeVonage SoftPhone X-PRO - allows you to use your computer as a phone by adding a fully functioning telephone interface to your PC
NXSC SIP ClientsipgateXLite.exe"sipgate x-Lite makes telephone calling possible directly over your PC. You only need a microphone and a sound card and/or a headset"
Xxserv[path to trojan]Added by the STUMPY-A TROJAN!
UXStop95XStop95.exeXStop - internet filter
Xxswdmse[8 random letters].exeAdded by a variant of the SPYBOT WORM! See here
Nxswinxswin.exeInstalled with a Xerox Work Centre Pro 555. Unchecking it removes an "out of system memory" error
?XTCsgloaderXTCsgloader.exeAnother Xupiter toolbar variant??
Xxtermvagqsqs.exeAdded by the SDBOT-TV WORM!
XXTN Service Driverswinxtn.exeAdded by the SDBOT-YK WORM!
UXTNDConnect PCXCPCMenu.exeXTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - 3CmPlmAutodet.exe3Com Palm PC specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - CasioOrgCasAgnt.exeCasio Pocket PC specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - ErPhn2ErTray.exeSony Ericsson IrMC (Infrared Mobile Connectivity) phones and smartphones specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - LtNts4NtsAgnt.exe(IBM) Lotus Notes 4 specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - MyPalmMPTray.exePalm OS specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - PocketPCAutoDetect.exeWindows Mobile Pocket PC specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXTNDConnect PC - ScheduleSyncSCHEDU~1.EXEScheduleSync specific translator for XTNDConnect PC - "award-winning desktop-sync application that enables you to easily synchronize your contacts, calendar, tasks, email and notes between your mobile devices and popular PC applications"
UXtra Help Assistantmatcli.exe"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". Xtra Help Assistant is required to run with the Help and Support program. If you uncheck Xtra Help Assistant and then run Help and Support it will add another Xtra Help Assistant in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide
XXtrayxtray_link.exeAdded by the VB.JL TROJAN!
UXtreamLok License Managerxl.exeLicense manager for xLok (XtreamLok) - prevents software being reverse engineered
UXtrem parental controlpcx.exeParentXtreme - surveillance software. Uninstall this software unless you put it there yourself
XXTServiceUpdateXTServiceUpdate.exehahame.net adware downloader
XXtTb.exeXtTb.exeTop-banners.com adware
?xuio.exexuio.exe??
XXupiter StartupXupiterStartup.exeXupiter - adware and homepage hijacker. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
XXupiterCfgLoaderXTCfgLoader.exeXupiter - adware and homepage hijacker. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
XXupiterCfgLoaderBWCfgLoader.exeXupiter - adware and homepage hijacker. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
Xxupiterstartup2003xupiterstartup2003.exeXupiter - adware and homepage hijacker. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
XXupiterToolbarLoaderXupiterToolbarLoader.exeXupiter - adware and homepage hijacker. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here
Xxuri49tkdandy143.exeAdded by the KOOBFACE WORM!
Uxv_ctrlv_ctrl.exe3dfx Underground Tools - "Gives direct hardware control to your video graphics adapter"
Xxwarexware.exeMalware downloader from xxsware.com, causes adult content popups
Xxwarecskware.exeMalware downloader from xxsware.com, produces adult content popups
?XWMSUSBAPIXWMSAPI.EXEPart of the installation of a Xerox WorkCentre printer/scanner. Is it required?
Xxxcmsys.exeAdded by the KRISWORM-A WORM!
XxXjsKiNbkvUxXjsKiNbkvU.exeAdded by the FAKEAV-DVL TROJAN!
XxxsrSrv32xxsrsrv.exeAdded by the BANCSDE-E TROJAN!
Xxxxcxcxcxxxxcxcxcx.exeAdded by the DWNLDR-IUR TROJAN!
XXXXmpegXXXmpeg.exeAdult content dialler
Xxxxvideoxxxvideo.exeAccessPlugin premium rate adult content dialler
Xxysvhost32.exeAdded by the LINEAG-ABB TROJAN!
Xxzkadsfk10afslkfasl10.exeAdded by the ONLINEG-R TROJAN!
Page: 1 2

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner