Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 21701 to 21800:

StatusAutorun nameCommandDescription
XWindows MSNMSN.msnAdded by the TRIXCU.A WORM!
XWindows Msn Live Messangermsnmsgsman.exeAdded by a variant of the SDBOT WORM!
XWindows MSN Live Messangerwmsnlive.exeAdded by the RBOT.BMV BACKDOOR!
XWindows MSN Live Messangerlivemsngs.exeAdded by a variant of the SPYBOT WORM! See here
XWindows MSN Live Messengerwinlivemsn.exeAdded by an unidentified WORM or TROJAN! See here
XWindows MSN Live Messengerwinmessengerlive.exeAdded by the IRCBOT.EAD BACKDOOR!
XWindows MSN Updateswnd32.exeAdded by the IRCBOT-ABA TROJAN!
XWindows MSN2 XPswchost.exeAdded by the KOLAB.AA WORM!
XWindows MSX driverswinmsx.exeAdded by the RBOT-AYG TROJAN!
XWindows Net Cfgservice.exeAdded by a variant of the RBOT WORM!
XWindows NetDDewrmana32.exeAdded by the MYTOB.IM WORM!
XWindows NetsWinNET.exeAdded by the RBOT-MO WORM!
XWindows NetStart ServicewinsN2S.exeAdded by the RBOT-ZX WORM!
XWindows NetStart Service2winsN2S.exeAdded by the RBOT-ABN WORM!
XWindows NetStart Service2winsN2SD.exeAdded by a variant of the RBOT WORM!
XWindows Netsystem LayerNetsystem.exeAdded by the RBOT.BEI WORM!
XWindows Network ControllerMqguard.exeAdded by the FORBOT-CL WORM!
XWindows Network ControllerWinxPupd.exeAdded by the FORBOT-DK WORM!
XWindows Network Controllerwinmms32.exeAdded by the FORBOT-ED WORM!
XWindows Network Controllerwingmt.exeAdded by a variant of the SDBOT WORM!
XWindows Network ControllerWin9x.exeAdded by the WOOTBOT.I WORM!
XWindows Network Controllerwinmms32.exe.exeAdded by the FORBOT-ED WORM!
XWindows Network Firewallfirewall.exeAdded by the POEBOT-J WORM! Located in %System%
XWindows Network Logonnpesvc.exeAdded by the AGENT.ERZ TROJAN!
XWindows Network Servicewinvc32.exeAdded by the RBOT.RY WORM!
XWindows Network ServiceMsconf32.exeAdded by a variant of the RBOT WORM!
XWindows Network ServiceRealteks.exeAdded by the RBOT-GTG WORM!
XWindows Network Serviceswinnetwork.exeAdded by a variant of the IRCBOT TROJAN! See here
XWindows Network Serviceswinnetwork128.exeAdded by the SLENFBOT.J WORM!
XWindows Network Serviceswinnetwork32.exeAdded by a variant of the IRCBOT TROJAN! See here
XWindows Network Serviceswinnetwork64.exeAdded by a variant of the IRCBOT TROJAN! See here
XWindows Network Sessionnspsvc.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Networkingwinsys32.exeAdded by the GAOBOT.FL WORM!
XWindows Networking Monitormdm.exeAdded by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)
XWindows Networking Monitorinxmdmx.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Networking Monitoringmdm.exeAdded by the IRCBOT.AKZ WORM! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)
XWindows Networksnetcog.exeAdded by the MYTOB.FH WORM!
XWindows Nivedia DriversysMGT.exeAdded by a variant of the RBOT WORM!
XWindows NNT[path to trojan]Added by the RANKY.E TROJAN!
XWindows NTtwain.exeAdded by the AGENT.BEA TROJAN!
XWindows NT 32ntlogin32.exeAdded by the RANDEX.BRD WORM!
XWindows NT Loginntlogin32.exeAdded by the SDBOT.WG WORM!
XWindows NT Login Session ManagerWNSM.EXEAdded by the RBOT.BIV WORM!
XWindows NT Logon Applicationwinlogon.scrAdded by the RBOT-ALP WORM!
XWindows NT Service Namewinshock.exeAdded by the RBOT-PK WORM!
XWindows NT Service Namesvchcst.exeAdded by the RBOT-NV WORM!
XWindows NT Session Managersess.exeAdded by a variant of the RBOT WORM!
XWindows NT Update ManagerWINL0G0N.exeAdded by the AGOBOT-NU WORM! Note that those are zeroes in the filename and not capital "o"
XWindows NTFS Volume Manage[6 random letters].exeAdded by the RBOT.EDL BACKDOOR!
XWindows OEM Toolswinres32.exeAdded by the SPYBOT.FD WORM!
XWindows Offical Netvvorksmywriter32.exeAdded by a variant of the SDBOT WORM! See here
XWindows Office Monitoremdm.exeAdded by the RBOT.AFV BACKDOOR!
XWindows OLE Automation Serverole32aut.vbeCoolWebSearch parasite variant
XWindows Online Updaterdllman.exeAdded by the RBOT-TE WORM!
XWindows pack Control Centertaskmam.exeAdded by the TOMETA-J TROJAN!
XWindows Pcwinmgr.exeAdded by the BIBOT-A WORM!
XWindows PC DefenderWP[random characters].exeWindows PC Defender rogue security software - not recommended, removal instructions here
XWindows Pc DriverRealhost.exeAdded by the ESION BACKDOOR!
XWindows PDGwinpdg.exeAdded by the RBOT-ADW WORM!
XWindows Performance Monitorwmscupd.exeAdded by the IRCBOT_GEN WORM!
XWindows Playercsrcs.exeAdded by the SCAR-AR WORM!
XWindows PNPwinpnp.exeAdded by the RBOT-AKN WORM!
XWindows PNP Serverpnpsrv.exeAdded by the RBOT-AKM WORM!
XWindows Pool Managerpoolsc.exeAdded by the OBOT.CH WORM!
XWindows Pool Setuppoolmc.exeAdded by the IRCBOT.RU BACKDOOR!
XWindows Population Loggerwinpo32.exeAdded by the AGENT.YKR WORM!
XWindows Portable Device DriversMSKSVRVS.EXEAdded by a TROJAN - see here
XWindows Portable DevicesMSKSVRTSS.EXEAdded by the SPYBOT.APEO WORM!
XWindows Print Monitor Daemon[random filename].exeAdded by a variant of the SDBOT WORM!
?Windows Print SpoolerSCVHOSTS.EXESuspicious due to the similarity to the valid "svchost.exe" file
XWindows Print SpoolerNavAgent32.exeAdded by an unidentified VIRUS, WORM or TROJAN!
XWindows Print SpoolerSVEHOST.EXEAdded by the SPYBOT.H WORM!
XWindows Printing DriverWinPrint.exeAdded by a variant of the RBOT WORM!
XWindows Printing DriverWinSpooler.exeAdded by the ARCHIVARIUS series of WORMS!
XWindows Printing Driverciadvs.exeAdded by the BUZUS-M TROJAN!
XWindows Printing Driverciadvss.exeAdded by the ARCHIVARIUS series of WORMS!
XWindows Printing Drivergpedits.exeAdded by the DCKEYG.A WORM!
XWindows Processwin_update.exeAdded by the LASTWORD WORM!
XWindows Process Managerwinproc.exeAdded by an unidentified WORM or TROJAN!
XWindows Processe Managermspn32.exeAdded by the RBOT.AXO WORM!
XWindows Proffesional SecurityWinSecure32.exeAdded by the AGOBOT.VA WORM
XWindows Protected Storagenpssvc.exeAdded by the IRCBOT.AUL BACKDOOR!
XWindows Protection SuiteWI[random characters].exeWindows Protection Suite rogue security software - not recommended, removal instructions here
XWindows Protectotboxide.exeAdded by a variant of the WOOTBOT WORM!
XWindows Recavery Adwarelsass.exeAdded by an unidentified TROJAN - see here. Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup! This one is located in %Temp%
XWindows Recovery Consolerecovery.exeAdded by the RANSOM.FD WORM!
XWindows Recycler[random name]Added by the RBOT-EMH WORM!
XWindows Recylinder Checkzwdomsgemw.exeAdded by the RBOT-EGJ WORM!
XWindows Reg Servicesffservice.exeAdded by the DLOADER-PL or DLOADER-XM TROJANS!
XWindows Reg Servicesdservice.exeAdded by the PRORAT-D TROJAN!
XWindows Reg Servicesfservice.exeAdded by the PRORAT-D TROJAN!
XWindows Reg Servicesssservice.exeAdded by the PRORAT-D TROJAN!
XWindows Reg Serviceslncom.exeAdded by the PRORAT-O TROJAN!
XWindows Reg Serviceslservice.exeAdded by the PRORAT-O TROJAN!
XWindows Reg Serviceswservice.exeAdded by the PRORAT-O TROJAN!
XWINDOWS REGISTER EDITregistr32.exeAdded by an unidentified WORM or TROJAN!
XWindows Register Settingssvmhost.exeAdded by a variant of the FORBOT WORM!
XWindows Registerswinservicess.exeAdded by the SDBOT.NI WORM!
XWindows RegistersSvchosts.exeAdded by the RBOT-HV WORM!
XWindows Registery Centersvhchosts.exeAdded by a variant of the IRCBOT BACKDOOR! See here

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner