Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 112 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
UY!TunnelBasicYTBasic.exeY!TunnelBasic software provides additional features to Yahoo! Messenger
UY!TunnelProYTunnelPro.exeSpam, bot and ad blocker for Yahoo! Messenger from Digital Asphyxia
UY!TunnelProYTPro.exeSpam, bot and ad blocker for Yahoo! Messenger from Digital Asphyxia
UY'z ShadowYzShadow.exeY'z Shadow 'adds a shadow effect to the windows in pursuit of the "beauty of a shadow". It also allows the user the option of making menus transparent'
UY'z ToolbarYzToolBar.exeY'z Toolbar "allows the user to change the toolbar icons in Explorer and Internet Explorer. The user can also create and add their own themes"
Xy1959sarsv711224030r.exeAdded by the BRONTOK-AK WORM and variants!
Xy1959saryesbron.comAdded by the BRONTOK-AK WORM and variants!
XYa SalamNancyAjram.exeAdded by the JALABED WORM!
?YaAutoRepairyrepair.dllAppears to be related to software from Yahoo China. What does it do and is it required?
Xyaemu.exeyaemu.exeAdded by the WIN32.DNSCHANGER.S TROJAN!
Xyahoo groupsupgrdmgr.exeAdded by a variant of the RBOT WORM!
?Yahoo HP Reminder 1.1yr.exe??
Xyahoo inc.ypages.exeAdded by a variant of the SDBOT.62235D21 WORM!
XYahoo Instant MessengarYahooMsgr.exeAdded by the SDBOT BACKDOOR!
XYahoo MessengerYahoomsg.exeAdded by an unidentified WORM or TROJAN!
XYahoo MessengerYPager.exeAdded by the RBOT-QO BACKDOOR! Note - this is not the older version of Yahoo! Messenger which shares the same filename and is located on %ProgramFiles%\Yahoo!\Messenger. This one is found in %System%
XYahoo Messengersvchost32.exeAdded by the SOHANA-P WORM!
XYahoo MessenggerSVICHHOST.exeAdded by the TIOTUA-C TROJAN!
XYahoo MessenggerRVHOST.exeAdded by the SILLYFDC-G WORM!
XYahoo MessenggerSSVICHOSST.exeAdded by the SOHANA-R WORM!
XYahoo MessenggerSCVHOST.exeAdded by the SOHANA-V WORM!
XYahoo MessenggerSCVHSOT.exeAdded by the HAKAG-A WORM!
XYahoo MessenggerSCVVHSOT.exeAdded by the SILLYFDC-AE WORM!
XYahoo MessenggerSSCVIHOST.exeAdded by the SOHANA-W WORM!
XYahoo MessenggerSSCVIIHOST.exeAdded by the SOHANA-Y WORM!
XYahoo Messenggerregsvr.exeAdded by the IMAUT.CN WORM!
XYahoo Messenggerchrome.exeAdded by the AUTORUN-NG WORM!
XYahoo Messenggergphone.exeAdded by the TIOTUA-W WORM!
XYahoo MessenggerIEXPLORERS.exeAdded by the AUTOIT.DH TROJAN!
XYahoo MessenggerRVHIOST.exeAdded by the SOHANNA-AC WORM!
XYahoo Messenggerscvhosts.exeAdded by the SOHANNA-AH WORM!
XYahoo Messenggerscvshosts.exeAdded by the TRAX-A WORM!
XYahoo MessenggerSSVICSSHOST.exeAdded by the IMAUT.AA WORM!
XYahoo MessenggerSVICHOOST.exeAdded by the SOHANNA-AE WORM!
XYahoo Messenggersystem3_.exeAdded by the AUTORUN-AOA WORM!
XYahoo Messenggerwinfiles.exeAdded by the AUTORUN-BCY WORM!
XYahoo MessenggerIEXPLORER.exeAdded by the AUTORUN-BDN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)
XYahoo Messenggermacfee_.exeAdded by the YAHLOV-G WORM!
XYahoo UpdateYahoo.exeAdded by the YAHOO! TROJAN!
XYahoo UpdaterMessenger.exeAdded by the FORBOT-FE WORM!
Xyahoo!rundll32.exe [random]don.dll,SetAdded by the AGENT.HOZZ TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "[random]don.dll" file is found in %UserTemp%
XYahoo!ethernet.exeAdded by the PROSTI.AA BACKDOOR!
NYahoo! FriendYahooFriend.exeYahoo!_Friend - plug-in for Yahoo! Messenger that add lots of emoticons and windows effects
UYahoo! MailYMailAdvisor.exeYahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e., if your default mail client changes). Bundled with some Yahoo! programs, Toolbar or Messenger
XYahoo! Messangerymsngr32.exeAdded by the WOOTBOT.HY WORM! Note - this should not be confused with Yahoo! Messenger
NYahoo! Messengerypager.exeSystem tray access to an older version of the Yahoo! Messenger instant messenger
NYahoo! MessengerYahooMessenger.exeSystem Tray access to the Yahoo! Messenger instant messenger
NYahoo! Pagerypager.exeSystem tray access to an older version of the Yahoo! Messenger instant messenger
NYahoo! PagerYAHOOM~1.EXESystem tray access to an older version of the Yahoo! Messenger instant messenger
NYahoo! PagerYahooMessenger.exeSystem tray access to an older version of the Yahoo! Messenger instant messenger
UYahoo! Widget EngineYahooWidgetEngine.exeYahoo! Widget Engine lets you run little files called Widgets that can do pretty much whatever you want them to
UYahoo! WidgetsYahooWidgets.exeYahoo! Widgets lets you run little files called Widgets that can do pretty much whatever you want them to
Xyahoo_toolbar lptt01yahoo_toolbar.exeRapidBlaster variant (in a "yahoo_toolbar" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it
Xyahoo_toolbar ml097eyahoo_toolbar.exeRapidBlaster variant (in a "yahoo_toolbar" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it
XYahoo2000Anti.exeAdded by the RBOT.ATK WORM!
NYahooMessengerYahooMessenger.exeSystem Tray access to the Yahoo! Messenger instant messenger
UYahooMonitorYahooMonitor.exeYahoo Messenger Monitor Sniffer surveillance software for the Yahoo! instant messenger. Uninstall this software unless you put it there yourself
XyahoomsgrYahoomsngr.exeAdded by the AGOBOT.AKZ WORM!
XYahooStock[path to file]Adtomi adware
?YAMAHA AC-XG Power Utilityyacpower.exeYAMAHA AC-XG Power Utility. What does it do and is it required?
NYAMAHA DS-XG Launcherdslaunch.exeSystem Tray access for the features of the Yamaha DS-XG soundcard unless you regularly change set-ups
NYankee Clipper IIIYankClip.exeYankee Clipper III - 'A super powerful Windows clipboard extender/memory - now in its third generation. Handles Pictures, Richtext, URLS, etc - any size. Features printing, drag and drop, optional permanent storage of clippings. Familiar "Outlook" interface'. Freeware
UYapta TrackerYaptaClient.exeYapta "make it easy for you to secure the best airfare deals available on the Web. We do this by giving you a tool to "tag" the trips you like while shopping online, then we track prices on these trips and alert you when prices drop"
Xyay.exeasass.exeAdded by the AGOBOT-M WORM!
NYBrowserybrwicon.exeSBC Yahoo! Browser system tray icon
UYCentralYahooCentral.exeYahoo! Central - "alerts you if your default home page, search, or email is changed or if updates are available for your Yahoo! software. You can manage your default Internet settings and get updates to your software from Yahoo!"
UYCMMirag ApplicationYCMMirage.exePart of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs"
UYCMMirageYCMMirage.exePart of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs"
XYDTMain.exeYDTMain.exe180solutions adware
Xyeahdude.exehallowelt.exeAdded by the GAOBOT.RS or GAOBOT.SA WORMS!
Xyemarvdsysmon.exeAdded by the AGENT-CH TROJAN!
NYeppStudioAgentSamsungMediaStudioAgent.exeSamsung Media Studio MP3 player file management software - see here for an example
XYhooUapdatesymssmsgs.exeAdded by a variant of the SMALL_K TROJAN!
XYhooUpdatesymsmsgs.exeAdded by the SMALL_K TROJAN!
Xyingying.exeConstructor VC2000 malware
Xyjocojwwssahorjuerb.exeAdded by the FAKEAV-CJN TROJAN!
Xykemkfeljsuyaxatssd.exeAdded by the AGENT-ODY TROJAN!
Xylbroohtygtowvqtssd.exeAdded by the AGENT-NFX TROJAN!
NYLive.exeYlive.exeYahoo! Assistant (formerly 3721 Internet Assistant) - not recommended
UYMailAdvisorYMailAdvisor.exeYahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e., if your default mail client changes). Bundled with some Yahoo! programs, Toolbar or Messenger
Nymetrayymetray.exeYahoo! Music system tray icon
XYmEwGJXgpidLPIYmEwGJXgpidLPI.exeAdded by the FAKEAV-CYN TROJAN!
Xynavmrcd.exeynavmrcd.exeAdded by the DLOADR-AVC TROJAN!
UYo Mamma Osama Installerosama.exeWnad adware
NYOPyop.exeDashboard Module for SBC Yahoo! Online Protection
UYou've Got Pictures Screensaverygpsstra.exeAOL You've Got Pictures Screensaver
NYouCamYouCam.exeSystem Tray access to YouCam from CyberLink - effects software for webcams
UYouCam MirageYCMMirage.exePart of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs"
NYouCam Mirror Tray iconYouCamTray.exeSystem Tray access to YouCam from CyberLink - effects software for webcams
NYouCam TrayYouCam.exeSystem Tray access to YouCam from CyberLink - effects software for webcams
NYouCamTrayYouCamTray.exeSystem Tray access to YouCam from CyberLink - effects software for webcams
XYour Protectionurpprot.exeYour Protection rogue security software - not recommended, removal instructions here
XYourMP3rundll32.exe MSA64CHK.dll,DllMostrarMatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System%
XYourPrivacyGuardGDC.exeYourPrivacyGuard rogue privacy tool - not recommended, removal instructions here. A member of the PCPrivacyTool family
?YOW tunerWatchPNM.exe??
Nypagerypager.exeSystem tray access to an older version of the Yahoo! Messenger instant messenger
NYpager.exeypager.exeSystem tray access to an older version of the Yahoo! Messenger instant messenger
UYPCypc.exeYahoo Parental controls - "Let you decide what type of sites and Yahoo! services your kids can access"
UYPOPsYPOPs.exeYPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook, Netscape, Eudora, Mozilla, etc., to download email from Yahoo! account
UYPOPsYPOPsYPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook, Netscape, Eudora, Mozilla, etc., to download email from Yahoo! account
Page: 1 2

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner