Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 22001 to 22100:

StatusAutorun nameCommandDescription
XWindows Service Pack 2WindowsSP2.exeAdded by the SDBOT-TQ WORM!
XWindows Service Pack Auto Updatewinworks.exeAdware downloader - detected by eScan antivirus as the AGENT.BT TROJAN!
XWindows Service Pack Auto Updatefiggaz.exeDetected by Kaspersky as the AGENT.BT TROJAN!
XWindows Service Pack Auto Updateballin.exeAdded by an unidentified WORM or TROJAN!
XWindows Service Pack Auto Updatedel-me.exeAdware, also detected as the LOWZONES.BH TROJAN!
XWindows Service Pack2svchhost.exeAdded by a variant of the RBOT WORM!
XWindows Service Pack2WIN43.EXEAdded by the GAOBOT.G WORM!
XWindows Service Supplywinsupply.exeAdded by the SLENFBOT.CZ WORM!
XWindows Service Support CallSVSS32.EXEAdded by the RBOT-XQ WORM!
XWindows Service SVsv32.exeAdded by a variant of the IRCBOT TROJAN!
XWindows Service Threadssvcthreading.exeAdded by the SHEUR.AUM TROJAN!
XWindows Service Threadssvcthreads.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Service Updatelivecal.exeAdded by the SDBOT-DEY WORM!
XWindows Service Updatecrsss.exeAdded by the SDBOT.CWX WORM!
XWindows Service Updatemswsgs.exeAdded by the RBOT.FQB WORM!
XWindows Service Utititywinsrvc.exeAdded by the RBOT-ASI WORM!
XWindows Service XPXpFirewall.exeAdded by the MYTOB.AM WORM!
XWindows Servicerxqobypik.exeAdded by the SDBOT-DFB WORM!
XWindows Servicesservice.exeAdded by the RANDEX.R WORM!
XWindows Servicessvchosts.exeAdded by the AGOBOT-KL TROJAN!
XWindows ServicesExplorer.exeAdded by the SDBOT-WT WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
XWindows ServicesNetworkDriver32.exeAdded by the RBOT-ACR WORM!
XWindows Servicesscmsg.exeAdded by a variant of the SDBOT WORM!
XWindows Servicesscvhoste.exeAdded by the SPYBOT.OBZ WORM!
XWindows Serviceswinsvc32.exeAdded by the MYTOB-CB WORM!
XWindows ServicesNetworkDrivers.exeAdded by the SDBOT-YO WORM!
XWindows Servicessmsc.exeAdded by a variant of the SDBOT WORM!
XWindows Servicesspoolsvc.exeAdded by the SDBOT.CPZ WORM!
XWindows Servicesiexplore.exeAdded by the RBOT-WE WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
XWindows Servicesavsrv32.exeAdded by a variant of the IRCBOT BACKDOOR!
XWindows Servicesservicez.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Servicesw32edus.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Servicesw32service.exeAdded by the AUTORUN-FU WORM!
XWindows Servicesw32services.exeAdded by the AUTORUN-FT WORM!
XWindows Serviceswinlogon.exeAdded by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XWindows Serviceswinsysdll.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Serviceswinsyssrv.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Serviceswinudp.exeAdded by a variant of the IRCBOT BACKDOOR!
XWindows Servicesfilename.exeAdded by the SDBOT.FSK BACKDOOR!
XWindows Servicessvhost33.exeAdded by the RBOT.AFN WORM!
XWindows Servicesservices.exeAdded by the AGENT-MVC TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XWindows Serviceswupdate.exeAdded by the GAOBOT.ZT WORM!
XWindows Servicessvchost.exeAdded by the AUTORUN-BFU WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%
XWindows Servicessystems.exeAdded by the IRCBOT-AHW TROJAN!
XWindows Servicesupterd.exeAdded by the AUTORUN-BNL WORM!
XWindows Servicesscheb.exeAdded by the AGENT-QVV TROJAN!
XWindows Services Agantregs32.exeAdded by the SDBOT-DIK WORM!
XWindows Services Aganters[10 random letters].exeAdded by the RBOT.CUN WORM!
XWindows Services Agentmsngears.exeAdded by the VB-EMS TROJAN!
XWindows Services alges2[8 random letters].exeAdded by a variant of the RBOT WORM!
XWindows Services B-Runnersvcbrun.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Services B-Runnersvcbrunner.exeAdded by the IRCBOT.BYV BACKDOOR!
XWindows Services Certificationsvccert.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Services Guidesvcguide.exeAdded by the SLENFBOT.KQ WORM!
XWindows Services Guidesvcguides.exeAdded by the SHEUR.YS BACKDOOR!
XWindows Services Hostsvchost.exeAdded by the CONE or CONE.E WORMS! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
XWindows Services Hostssvhosts.exeAdded by the SDBOT-YH TROJAN!
XWindows Services Ink Platform Tablet Input Subsystemwsiptis.exeAdded by the RBOT.APC WORM!
XWindows Services Jogsvcjog.exeAdded by the AGENT.ALWZ WORM!
XWindows Services Jogsvcjogg.exeAdded by the AGENT.QAF WORM!
XWindows Services Jogersvcjoger.exeAdded by the RBOT.CAT WORM!
XWindows Services Joggingsvcjogging.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Services Jogingsvcjoging.exeAdded by the IRCBOT.AVI BACKDOOR!
XWindows Services Layerwinlogz2.exeAdded by the RBOT-FZE WORM!
XWindows Services Layerwinl0g0.exeAdded by the RBOT-FZQ WORM!
XWindows Services Layersslms.exeAdded by the RBOT-GAH WORM!
XWindows Services Layerconfigure.exeAdded by the RBOT-GAK WORM!
XWindows Services M7ctfmon32.exeAdded by the AGENT.WOH TROJAN!
XWindows Services Towersvctowers.exeAdded by the IRCBOT.AGJ BACKDOOR!
XWindows Services Towersvctowing.exeAdded by the SLENFBOT.LA WORM!
XWindows Services Tsnwdpqqoiwm.exeAdded by the RBOT-GRV WORM!
XWindows Services Updatesvch0st.exeAdded by a variant of the RBOT WORM! Note - the filename has the digit 0 rather then the uppercase "o"
XWindows Services32winsvc32.exeAdded by the MYTOB-GK WORM!
XWindows Serviece Agents[8 random letters].exeAdded by the AGENT.BHR TROJAN!
XWindows Servserserviser.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWindows Session Managersmss32.exeAdded by a variant of the RBOT WORM!
XWindows Session Manager Subsystemsmss.exeAdded by the KALEL-B WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
?Windows shellwin70.exe??
XWindows Shellshell.exeAdded by the MYTOB-CA WORM!
XWindows Shelltaskgmr.exeAdded by the MYTOB.BV WORM!
XWindows Shell Library Loaderload shell.dllCoolWebSearch parasite variant
Xwindows shellext.32mschost.exeAdded by the BLASTER.K WORM!
XWINDOWS SKYsky.exeAdded by the MYTOB.CH WORM!
XWindows Smart Managersmart.exeAdded by the RBOT-SL WORM!
XWindows SMB Managersmb32.exeAdded by the RBOT-BHZ WORM!
XWindows smss serviceservice.exeAdded by the AGENT-FPY TROJAN!
XWindows Socket ProcedureWinSock32.exeAdded by the RBOT-FMX WORM!
XWindows Softwarehbsppe.exeAdded by the RBOT-GLL WORM!
XWindows Soundsvdhost.exeAdded by the SDBOT.EFX BACKDOOR!
XWindows Sound DriverSndMon32.exeAdded by a variant of the SPYBOT WORM!
XWindows Sound Emulatorsnd32_win.exeAdded by the ATNAS.A WORM!
XWindows Sound ManagerSndMon32.exeAdded by the FORBOT-BU WORM!
XWindows Sound ManagerSndMon16.exeAdded by a variant of the FORBOT WORM!
XWindows Sound Managersound.exeAdded by the AGOBOT-CD WORM!
XWindows Sound Managergearsec.exeAdded by the PUSHBOT.DF WORM!
XWindows Sound VerifierWinIp32.exeAdded by the RBOT-FMO WORM!
XWindows SP2SPY_NET_RAT.exeAdded by a variant of the AGENT-LRO TROJAN! See here
XWindows SP2 Firewallwfirewall7.exeAdded by a variant of the RBOT WORM!
XWindows SP2 UpdateSp2update.exeAdded by the WOOTBOT.BS WORM!
XWindows SP2 Version Loadwuauclt32.exeAdded by the GAOBOT.CX WORM!

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner