Emsisoft HiJackFree Autorun List

Emsisoft HiJackFree

Support

About us

Awards

MajorGeeks Pick!

Autorun List

Keys:

Y	Normally harmless autorun.
N	Not required, but may be started.
U	User's choice. Start if necessary.
X	Definitely not required. Usually Malware.
?	Unknown

Filter:

Status:

Search:

View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 23501 to 23600:

Status	Autorun name	Command	Description
X	wms3	wms3.exe	Added by the LEGMIR-AQG TROJAN!
X	wmsdk64_32.exe	wmsdk64_32.exe	Antivirus rogue security software - not recommended, removal instructions here
X	WMSDOS-ServicePack2	cmd.exe /c C:\WMSDOS.sys	Detected by Bitdefender as the DELF.OFC TROJAN! See here. Note that cmd.exe is a legitimate Microsoft file normally located in %System% and shouldn't be deleted
X	Wmsncs Service	wmsncs.exe	Added by the BBJC.A TROJAN!
X	wmsrc.exe	wmsrc.exe	PrivacyRedeemer rogue privacy program - not recommended, removal instructions here
X	wmsys32	wmsys32.exe	Added by the BANPAES.B TROJAN!
X	wmts	wmts.exe	Added by the VB-EUF WORM!
U	WMUAgent.exe	WMUAgent.exe	"WakeMeUp! is an advanced alarm clock for computers with Windows 2000, XP or Server 2003"
X	wmupdate	wmupdate.exe	Added by the AGENT-GGJ TROJAN!
X	wmv	winmonv.exe	Added by the AGENT-DG TROJAN!
X	WN Services	wnsvc.exe	Added by the KBBOT-A TROJAN!
X	WNAD	WNAD.EXE	Spyware added as a result of running a program called "Yo Mama Osama" (osama.exe). See here for more and how to get rid of it. There are other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like
X	wnddrv	svchost.exe	Added by an unidentified TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
X	WNILOGON	WNILOGON.exe	Added by the LEWOR-M TROJAN!
X	WNSA	wnsts*.exe [ = random char]	PurityScan adware
X	WNSC	wnsin*.exe [ = random char]	PurityScan adware
X	Wnsck2 driver	wlogf.exe	Added by the SPYBOT-AF WORM!
X	WNSI	wnscp*.exe [ = random char]	PurityScan adware
X	WNSI	rwsa.exe	PurityScan adware
X	WNSO	WNSO.exe	Baidu.SoBar adware
X	WNST	wnsapi*.exe [ = random char]	PurityScan adware
X	wntlgns	wntlgns.exe	CoolWebSearch parasite variant
X	wnxpupdate	spvspool.exe	Added by the DABORA.B WORM!
X	wnxupdate	updatexp.exe	Added by the COMBRA-G WORM!
X	woeadot	woeadot.exe	Added by the MDROP-CYG TROJAN!
X	won update	WAPDATE.EXE	Added by the RBOT.N BACKDOOR!
U	WonderFrog	WonderFrog.exe	Wonder Frog typing monitor
N	WooCnxMon	CnxMon.exe	Wanadoo ISP software related - not required - here's how to bypass it
X	Woods Inc	wcmd.exe	Added by the KILLFIL-O TROJAN!
?	WOOKIT	GestMaj.exe EspaceWanadoo.exe	Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?
?	WOOKIT	Shell.exe appLaunchClientZone.shl	Related to the Wanadoo broadband ISP (now rebranded as Orange). What does it do and is it required?
?	WOOKIT	GestMaj.exe GestionnaireInternet.exe	Wanadoo broadband ISP (now rebranded as Orange) related. What does it do and is it required?
X	woopie	winamp.exe	Added by the AGOBOT.XV WORM! Note - this is NOT the popular Winamp media player which is located in %ProgramFiles%\Winamp. This one is located in %System%
N	WOOTASKBARICON	GestMaj.exe TaskbarIcon.exe	Wanadoo broadband ISP (now rebranded as Orange) taskbar icon - not required
N	Woowatch	Watch.exe	Wanadoo broadband ISP (now rebranded as Orange) related - not required
X	WOOZ	autodisc.exe	Added by the AGENT-CPS TROJAN!
X	word pair	bopotsvr.exe	Added by the SHED-A TROJAN!
N	WordPerfect Office 1215	Registration.exe	Corel WordPerfect Office 12 registration wizard
Y	WordQ carat flag	WordQcrs.exe	Related to WordQ Writing Aid Software
X	Words	Words.exe	Added by the AGENT.GIT TROJAN!
N	WordWeb	wweb32.exe	WordWeb - free theasaurus and dictionary. Start manually
N	WordWeb Pro	wweb32.exe	WordWeb Pro - theasaurus and dictionary. Start manually
X	WorkFile	WorkFile.exe	Added by the BANCOS-AWN TROJAN!
?	Workflo	workflow.exe	Related to BroadJump Client Foundation - broadband troubleshooting software installed by various companies. Is it required?
X	Working System Analyzer	syswork.exe	Added by the FORBOT-FZ WORM!
X	worknote1	[filename].exe	Added by the MEETOT WORM!
U	WorkPace 3.0	workpace.exe	WorkPace - stress injury prevention software
N	Works Calendar Reminder	wkcalrem.exe	If you schedule an event at any time in Microsoft Works Calendar and set a reminder then a shortcut will be added to Start → All Programs → Startup so this reminder service loads every time Windows starts
N	WorksFUD	wkfud.exe	A marketing program for MS Works
U	Workstation Scheduler	wm95.exe	Desktop Management Scheduler. Part of Novell's Netware Client. Schedueles NDS events. If events have been schedueled, it is required, otherwise, it is useless and a memory hog
X	Workstation Services	wrkstn.exe	Added by the RBOT-OJ WORM!
X	Workstation Ver 5.0	vmware.exe	Added by the RBOT-AHB WORM! Note - this is note the legitimate VMware Player/Workstation file with the same name which is located in a %ProgramFiles%\VMware directory. This one is located in %System%
X	WorldAntiSpy	worldantispy.exe	WorldAntiSpy rogue spyware remover - not recommended, see here
U	WorldTime.exe	WorldTime.exe	Part of AnyTime Organizer Deluxe from Individual Software Inc - "Check the time anywhere in the world and know when to communicate. Place up to twelve clocks on your desktop"
U	Worm Detector	wd.exe	Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam
X	wormexe	winstart.exe	Added by the EARLYBIRD WORM!
X	Worms	logon.bat	Added by the DELMP3-A WORM!
X	wovax	wovax.exe	Added by the DAQA.A TROJAN!
X	wow	bar.exe	PurityScan adware
X	wow	wwf.exe	Added by the LINEAGE-Y TROJAN!
X	wow	Launcher.exe	Added by the DELF-DOR TROJAN!
X	wow	gewow.exe	Added by the WOWPWS-KA TROJAN!
X	wow64main.exe	wow64main.exe	Added by the ALUREON.BT TROJAN!
X	WOWKtxsCPP.exe	WOWKtxsCPP.exe	Added by the FAKEAV-BZF TROJAN!
N	Wpctrl	wpctrlnt.exe	WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
N	Wpctrl	wpctrl95.exe	WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
N	wpctrl95	wpctrlnt.exe	WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
N	wpctrl95	wpctrl95.exe	WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
U	WPCUMI	WpcUmi.exe	Notifications from the Parental Controls feature in Windows Vista. Note - disabling this entry does not disable Parental Controls and prevent it monitoring a users activity. On the controller account it prevents the pop-up on from displaying messages such as "Reminder: View the Parental Controls activity report". On the user account it prevents the warning messages appearing such as access has been denied and the Parental Controls icon appearing on the System Tray
Y	WPCycle.exe	WpCycleWin.exe	Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end, preventing instability of your CPU (freezing)
X	wpds.exe	doriot.exe	Added by the SMALL-KY TROJAN!
X	wpds.exe	wwnrot.exe	Added by the BAGLEDI-B TROJAN!
X	WPlayer	WPlayer.exe	Identified as a variant of the LDPinch.A malware
X	wpqggej	dnierjk.exe	Added by the FANBOT-F WORM!
X	WPSVC Services	wpnsc.exe	Added by a variant of the IRCBOT BACKDOOR!
X	wpwmgrs	wpwmgrs.exe	Added by the MYTOB-DH WORM!
X	wpxmls	[random filename]	Added by a variant of the SLAPER TROJAN!
X	wqdfadads	sdqdad.exe	Added by the MULDROP.F TROJAN!
X	WQK	WQK.exe	Added by the KLEZ.H WORM!
?	wr	WR.EXE	??
?	WR Command	wr.exe	??
X	wrclib	rundll32.exe wrclib.dll,start	Added by the AKBOT-AH WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wrclib.dll" file is found in %System%
N	WrCtrl	WrCtrl.exe	Win-Route 4.27 NAT engine on Win2k Pro for connection sharing and security using Win-Route by Tiny Software. A connection sharing/Firewall Application. If service is disabled the program does not work, but you can manually start/stop the service with a shortcut the program installs at any time
X	WRDialer	WrDialer.exe	WinPoet DSL dialler
?	WRECK GUARD	??	??
?	WregBios	wregbios.exe	Desktop Management BIOS (DMI BIOS) related. Apparently invokes the DosBios.exe file. Is it required?
U	wrexec	wrexec.exe	Watch Right - monitoring program, part of the PowerTools add-on for AOL. Records instant messages, E-mail, chat. Watch Right appears to be, and functions as an online clock updater which connects with the U.S. National Institute of Standards and Technology. It was designed for parents who wish to keep an eye on what their children are doing online
?	wriste	wriste.exe	??
U	Write DVD-R!	saimon.exe	Saimon's WriteDVD! "gives total support for DVD-RAM drives. It provides many functions such as setting partitions on DVD-RAM disks and FixDVD! can diagnose and repair UDF formatted disks"
X	WRMVan	Windows.exe	Added by the AUTORUN-BGD WORM!
U	WrtMon.exe	WrtMon.exe	Related to Presto PageManager which is bundled with Canon Scanners
X	ws_d	ws32.exe	Added by the LEGMIR-RL TROJAN!
X	ws_ds	sws32.exe	Added by the DELF-GZ TROJAN!
X	ws2 32	svchst.exe	Added by the VOKEN-A TROJAN!
X	ws2_64.exe	ws2_64.exe	Added by the AGENT.AOXK TROJAN!
X	ws2help	ws2help.exe	Added by a variant of the SMALL.AN TROJAN!
X	WSAConfiguration	wmon32.exe	Added by the GAOBOT.BAJ WORM!
X	WSAConfiguration	svchostt.exe	Added by the AGOBOT.ZT WORM!
X	WSAConfiguration	rpcxmn32.exe	Added by the AGOBOT.ABG WORM!
X	WSAConfiguration	win32upd.exe	Added by a variant of the RBOT WORM!

Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009

Anti-Malware, Anti-Trojan, Anti-Worm, Anti-Dialer, Anti-Rootkit and Anti-Spyware all in one program! Emsisoft Anti-Malware - Malware scanner to remove and delete malicious software.