Emsisoft HiJackFree Autorun List

Emsisoft HiJackFree

Support

About us

Awards

MajorGeeks Pick!

Autorun List

Keys:

Y	Normally harmless autorun.
N	Not required, but may be started.
U	User's choice. Start if necessary.
X	Definitely not required. Usually Malware.
?	Unknown

Filter:

Status:

Search:

View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 24133 autoruns. Autorun 301 to 400:

Status	Autorun name	Command	Description
X	[random number]	rundll32.exe shell32.dll,Control_RunDLL [random number].cpl	Added by the KITRO.C (or DANDI.A) WORM! Note that rundll32.exe and shell32.dll are legitimate Microsoft files and shouldn't be deleted. The "[random number].cpl" file is found in %Windir%
X	[random number]	explorer.exe	Added by the KEYLOG-AN TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\service
X	[random]	lsass.scr	Added by the BANCBAN-CW TROJAN!
X	[random]	svchost.scr	Added by the BANCBAN-CY TROJAN!
X	[random]	[random].exe reg_run	Added by the QOOLAID-AL TROJAN!
X	[random]	[random]wagnz.exe	Antivirus Action rogue security software - not recommended, removal instructions here
X	[random]	[random]tssd.exe	AV Security Suite, Antivirus Suite and AntiSpyware Soft rogue security software - not recommended, removal instructions here, here and here
X	[random]	[random]sysguard.exe	Antivirus Soft, Antivirus Live and Antivirus System PRO rogue security software - not recommended, removal instructions here and here and here
X	[random]	[random]sftav.exe	Antivirus Soft rogue security software - not recommended, removal instructions here
X	[random]	[random]lanw.exe	Antivirus IS rogue security software - not recommended, removal instructions here
X	[random]	[random]shdw.exe	Security Suite rogue security software - not recommended, removal instructions here
X	[Randomly chosen existing folder name]	_autorun.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_cfg.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_config.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_env.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_loader.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_login.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_setup.exe	Added by the ANTINNY-L WORM!
X	[Randomly chosen existing folder name]	_start.exe	Added by the ANTINNY-L WORM!
X	[trojan filename]	svhchost.exe	Added by the TECTO-A TROJAN!
X	[trojan filename]	Install.exe	Added by the BANCBAN-FS TROJAN!
X	[trojan name]	svchost.exe	Added by the BANCBAN-CI TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
X	[unknown name]	WINBASICS32.EXE	Added by the SDBOT-JH WORM!
X	[unknown]	WIN32OP.EXE	Added by the SDBOT-U WORM!
X	[unknown]	ADVAP.EXE	Added by the SDBOT-W WORM!
X	[username] config	[path to trojan]	Added by the MOSUCK-H TROJAN!
X	[various filenames]	qtsks.exe	Added by the WEBDOR.Y TROJAN
X	[various names]	typeconf.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	Uint32.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	uio.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	UserSp1.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	utsgmon.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	vxdman.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	WhatsNewBot.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	WinInitDll.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	wormexe.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	WTFCTF.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	XTermInit.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	xwiz.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	xxtoolbar.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	zantu.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	zxc.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ABCXYZ.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	dePloy.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	JAguAr.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	80d0.exe	MediaMotor adware
X	[various names]	exe81.exe	MediaMotor adware
X	[various names]	exe82.exe	MediaMotor adware
X	[various names]	MSTCPDLL.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	seli.exe	MediaMotor adware
X	[various names]	___.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	browsebar.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	lpt.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	porka_.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	systemdll.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	xsetup.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	diskserv.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	driver64.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	DTOURS.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ERTYDF.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ExchangeMaster.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	EXE32EXE.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	expoler.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	FLKPT.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	forces_elite.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ftbar.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	gabber.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	hyandex.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	iehelper.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	iesetupdll.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	init32.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	InpriseMon.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	install2.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	jopplerg.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	Kargo.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	keybdll.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	KeywordFinder.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	killall.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	LOPTCON.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	media64.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	MNTP.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	MON76234.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	moniter.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	mozilla-text.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	msag.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ms-its.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	MsNetHelper.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	new32.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	newbreed.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	nmdllw.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	NopeZ.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	NsCplTray.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	NSYSCPLSTR.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	NukeSpan.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	openstre.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	panel_its.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	ParisM.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	pizda.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	powerdll.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page
X	[various names]	PrcIdle.exe	Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page

Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009

Anti-Malware, Anti-Trojan, Anti-Worm, Anti-Dialer, Anti-Rootkit and Anti-Spyware all in one program! Emsisoft Anti-Malware - Malware scanner to remove and delete malicious software.