Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 23101 to 23200:

StatusAutorun nameCommandDescription
XWinSetBrowseBasicUpdate.dll.vbsAdded by the BISCUIT.A WORM!
Xwinsfcwinsfc.exeAdded by the WISFC VIRUS!
XWinshellremote.exeAdded by the MYTOB.LJ WORM!
Xwinshellwindll32lib.exeAdded by the BAGLE-DM WORM!
?Winshoewuadfdqr.exeProbably an unidentified VIRUS! Adds itself to 3 registry "Run" keys and prevents Task Manager being displayed. This is not the Winshoe IRC Client as the visitor did not have it installed
Xwinshost.exewinshost.exeAdded by the TOOSO WORM and variants!
Xwinshow[path to trojan]Added by the VB-DXP TROJAN!
XWinShowUpdatecopy [path] winshow.new [path] winshow.dllWinshow parasiate related - from the "RunOnce" keys it replaces "winshow.dll" with a new version
XWinSigNetXP.exeAdded by the BANKER-FN TROJAN!
XWinSistemTunggul.vbsAdded by the VBS.STEMCLOVER WORM!
XWinsk system Loaderwinsk.exeAdded by the AGOBOT-IZ WORM!
Xwinskypewinskype.exeAdded by the BROGGER-C TROJAN!
UWinSLWinSL.exeStarLogger keystroke logger/monitoring program - remove unless you installed it yourself!
Xwinsocksvch0st.exeAdded by the SAGE-A WORM! Note - the filename has the digit 0 rather then the uppercase "o"
XWinsock driverwinnt update.exeAdded by the SPYBOT-DM TROJAN!
XWinsock driverwinnt64.exeAdded by the SPYBOT-DR WORM!
XWinsock Drivernvscv32.exeAdded by the AGOBOT-FD WORM!
XWinsock Driverscvhost.exeAdded by the RBOT.AEU BACKDOOR!
XWinsock driverwin.exeAdded by a variant of the IRCBOT BACKDOOR! See here
XWinsock drivertcpmngr.exeAdded by the SPYBOT-CK WORM!
XWinsock driverwinupdate32.exeAdded by the SPYBOT-JZ TROJAN!
XWinsock StartupMain2.exeAdded by a variant of the SDBOT WORM!
Xwinsock.clientwinsock.exeAdded by the DIABLO-M TROJAN!
Xwinsock2netsvr.exeAdded by the AGOBOT.LY WORM!
XWinsock2 dllsW32DLL.EXEAdded by the SPYBOT-CS BACKDOOR!
XWinsock2 driverSVCHOSTS.EXEAdded by the SPYBOT-BW BACKDOOR!
XWinsock2 driverWin32.exeAdded by the SPYBOT-G WORM!
XWinsock2 driverWINDATE.EXEAdded by the SPYBOT WORM!
XWinsock2 driverSDJOIJE.EXEAdded by the SPYBOT.DR TROJAN!
XWinsock2 driverMIRC32.exeAdded by the SPYBUZZ TROJAN!
XWinsock2 driverkgzgjkpcw.exeAdded by the SDBOT.T TROJAN!
XWinsock2 driverZONEALARM.EXEAdded by the SDBOT.T TROJAN! Note - ZONEALARM.EXE is not the valid Zone Labs firewall program
XWinsock2 driverwincfg.scrAdded by the SPYBOT-E TROJAN!
XWinsock2 driverwinupdate.exeAdded by the SPYBOT-BX WORM!
XWinsock2 driverSPOLSV.EXEAdded by the SPYBOT-CM WORM!
XWinsock2 driver[random filename]Added by members of the SPYBOT family of WORMS! Note - the random filename is located in %System%
XWinsock2 driversysreq.exeAdded by the SPYBOT-CC WORM!
XWinsock2 driverWUAUMQR.EXEAdded by the SPYBOT-DP WORM!
XWinsock2 driverwincfg.exeAdded by the SPYBOT.CO WORM!
XWinsock2 driversvchorsst.exeAdded by the SPYBOT-EE WORM!
XWinsock2 driverSYSTEM32.EXEAdded by the SPYBOT-EG WORM!
XWinsock2 driverdllcfg32.exeAdded by the SPYBOT.AG WORM!
XWinsock2 driverCFTMON.EXEAdded by a variant of the IRCBOT BACKDOOR!
XWinsock2 driverntsys32.exeAdded by the SPYBOT-DD WORM!
XWinsock2 driverWINNT32.EXEAdded by the SPYBOT-CN WORM!
XWinsock2 driverPAC.EXEAdded by the SPYBOT-ET WORM!
XWinsock2 driverwinsock2.exeAdded by the SPYBOT-CT BACKDOOR!
XWinsock2 drivermmtask5.exeAdded by the SPYBOT-CD WORM!
XWinsock2 driverWWEUMQR.EXEAdded by the SPYBOT-BY WORM!
XWinsock2 driverIEXPLORE .EXEAdded by the SPYBOT-AU WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process as there is a space before the ".exe"
XWinsock2 driverWINSOUND.EXEAdded by the SPYBOT-H WORM!
XWinsock2 driverCSRSC.EXEAdded by the SPYBOT-CF WORM!
XWinsock2 LoaderWICONF.EXEAdded by the SDBOT-LA WORM!
XWinsock2 wqr1sWUAUMQR1.EXEAdded by the SPYBOT.KD WORM!
XWinsock2.dllWINLODR.SCRAdded by an unidentified VIRUS, WORM or TROJAN!
XWinsock32 driverTESTING.EXEAdded by the SPYBOT-B WORM!
XWinsock32 driversystem32.exeAdded by the IRCBOT-VT TROJAN!
XWinsock32driverwin32server.scrAdded by the HACARMY TROJAN!
XWinsock32driversp2XPupdate.exeAdded by the HACKARMY.S BACKDOOR!
XWinsock32driverwin32server.exeAdded by the BACKDOOR-AZV TROJAN!
XWinsock32driverZoneAlarmPr0.exeAdded by the HACKARMY-B TROJAN!
XWinsock32driverZoneLockup.exeAdded by the HACARMY.D TROJAN!
XWinsock32driverwin32server.exeAdded by the HACARMY.F TROJAN!
XWinsock32driverwinXPupdate.exeAdded by the HACKARMY.9728 TROJAN!
XWinsock32driversvchhost.exeAdded by the HACKARMY.I BACKDOOR!
XWinsock32driversvshost.exeAdded by the HACKARMY.I BACKDOOR!
XWinsock6 MIC driverieservicesupd.exeAdded by the SPYBOT.AFZ WORM!
Xwinsockdrivertskmg.exeAdded by the WARPIGS.C WORM!
Xwinsockdriverwinsock2.2.exeAdded by a variant of the SPYBOT WORM!
Xwinsockdriveriexplor.exeAdded by the BLATIC.A WORM!
Xwinsockdriverwinsock3.exeAdded by the SPYBOT-DO WORM!
Xwinsockdriverbot.exeAdded by the WARPIGS-D WORM!
Xwinsockdriverwinsock4.1.exeAdded by a variant of the IRCBOT TROJAN! See here
Xwinsockdriverwinsock2.exeAdded by the SPYBOT-AC WORM!
XWinSocketComponentnthost.exeAdded by an unidentified VIRUS, WORM or TROJAN!
Xwinsocksmsnmess.exeAdded by the PWS-ABU TROJAN!
XWinsocks2 drivermznmgr.exeAdded by a variant of the SDBOT WORM!
UWINSOS VERIFYWINSOS.EXEWinSOS - "deletes spyware, optimizes your computer - backs up selected data"
XWinSP[path] REGEDIT.EXE -s [path] sysreg.regAdded by the STARTPA-ME TROJAN!
XWINSP00LWINSP00L.EXEAdded by the AGENT.XAB TROJAN! Notice the digit "0" in both columns rather than the upper case "o"
Xwinsp1up.exewinsp1up.exeHDD Defragmenter rogue system utility - not recommended, removal instructions here
Xwinsp2up.exewinsp2up.exeSmart Defragmenter rogue system utility - not recommended, removal instructions here
Xwinspd32dllwinspd32.exeAdded by a variant of the AGOBOT/GAOBOT WORM!
XWinSPFwindrv32.exeAdded by the MYDOOM.T WORM!
XWinSPFwinspf32.exeAdded by the MYDOOM.S WORM!
XWinsplwinsplx.exeAdded by a variant of the TROLL-A TROJAN!
Xwinsplogwsmmlog.exeAdded by the MAILBOT-CA TROJAN!
XWinspoolspoolsvr.exeAdded by a variant of the SDBOT WORM!
XWinSpyControlpgs.exeWinSpyControl rogue security software - not recommended. A member of the AVSystemCare family
XWinSpyDemoWinSpyDemo.exeWinSpy rogue spyware remover - not recommended
XWinSpyKillerWinSpyKiller.exeWinSpyKiller rogue spyware remover - not recommended, removal instructions here
XWinSpywareProtectWinSpywareProtect.exeWinSpywareProtect rogue security software - not recommended, removal instructions here
XWinSpywareProtect (ver. 5.1)WinSpywareProtect.exeWinSpywareProtect rogue security software - not recommended, removal instructions here
XWinSrvkn0x.exeAdded by the HOBBIT.F WORM!
XWinSrvSHIZZLE.EXEAdded by the HOBBIT.C WORM!
XWinsrvwinsrv.exeAdded by the OPASERV.T WORM!
Xwinsrvwinsrv.exeAdded by the NETSNAK-B TROJAN!
Xwinsrv3services.exeAdded by the NAFBOT-A TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Ywinssnotifywinssnotify.exeSystem Tray access to and notifications from Windows Live OneCare - now superseded by Microsoft Security Essentials. "OneCare helps keep your PC safe and secure while making your life easier. From virus scanning and file backups, to automatic printer sharing of all the PCs in your household, OneCare helps manage all of this. Delivered to you in a smooth, hassle-free package"
XWinsSystem[path to backdoor]Added by the DELF.IG BACKDOOR! The most common filename seen is "syssmss.exe" located in %ProgramFiles%\Internet Explorer

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner