| Status Code | Name | Command | Description |
| Y | NWTRAY | nwtray.exe | Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client |
| U | nwrecmsg | nwrecmsg.exe | Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes |
| Y | Nwpopup | Nwpopup.exe | Broadcast message handler part of Novell Netware that displays server, printer and other messages |
| ? | NWEReboot | dummy.exe | ?? |
| N | nwiz | nwiz.exe | Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system |
| X | NvXplDeamon | xstyles.exe | Added by the SMALL.AJ VIRUS! |
| X | NVSystem32 | nvscv32.exe | Added by the AGOBOT-NO WORM!
|
| ? | NVRTClk | NVRTClk.exe | Related to a Gigabyte video card. What does it do, and is it required? |
| N | NvSvc | nvsvc.exe | NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that |
| N | NVRT | nvrt.exe | NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports |
| N | NVQuickTweak | rundll32.exe NvQtwk.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| N | NVMixerTray | NVMixerTray.exe | System Tray access to audio controls from nVidia's motherboard ForceWare software |
| U | NvMediaCenter | RunDLL32.exe NvMCTray.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| N | NVMCTRAY | RUNDLL32.EXE ...NVMCTRAY.DLL, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| Y | NVmax | NVmax.exe | NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card |
| U | NVIEW | rundll32.exe nview.dll, nViewLoadHook | This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers |
| N | NvInitialize | rundll32.exe NvQtwk.dll, NvXTInit | Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled |
| N | NvidiaQuickTweak | rundll32.exe NvQtwk.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| X | Nvidia32 | nvidia32.exe | CoolWebSearch parasite variant |
| X | NVIDIA Video drivers | video_32D.exe | Added by the AGOBOT.KV WORM! |
| N | NVIDIA nForce APU1 Utilities | NVATray.exe | nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time" |
| X | NVIDIA Driver | MSPMSPSU.EXE | Added by the WOOTBOT.Y WORM! |
| X | Nvidia Control Panel | ncsvc32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Nvidex32 | Nvidex32.exe | Added by the GEMA TROJAN! |
| X | Nvid | [8 random charachters] | Unidentified adware |
| X | Nvid32 | Nvid32.exe | Added by the GEMA TROJAN! |
| X | nvd32 ml097e | nvd32.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | nvd32 lptt01 | nvd32.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | NvCplDmn | NAVSVC.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| U | NvCplDaemon | rundll32.exe NvCpl.dll, NvStartup | Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card |
| N | NvCplDaemon | rundll32.exe NvQtwk.dll, NvCplDaemon | System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here) |
| X | NvCplD | m2gr32.exe | "Switch" premium rate adult content dialler |
| X | NvCpl | NvCpl.EXE | Added by the YANZ.B WORM! |
| U | NvCpl | NvCpl.EXE | Added by the YANZ.B WORM! |
| ? | NvColorInit | rundll32.exe NvQtwk.dll, NvColorInit | Associated with Nvidia based graphics cards |
| U | NvCpl | rundll32.exe NvCpl.dll, NvStartup | Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card |
| ? | NVCLOCK | rundll32 nvclock.dll, fnNvclock | Overclocking utility for nVidia based graphics cards? |
| Y | NuTCSetupEnviron | ncoeenv.exe | Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone |
| X | ntvdscm | ntvdscm.exe | Added by the SCKEYLOG.O TROJAN! |
| U | NTVDM | NTVDM.EXE | Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here |
| X | NTsocket | NoeWinnt.exe | Added by the ATAKA-E TROJAN! |
| N | NTrtc | ntrtc.exe | Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here |
| X | NTP Server | [path to trojan] | Added by the RANKY.F TROJAN! |
| N | ntlfreedom | RyDial.dll, QuickStart | NTL Freedom ISP software - reportedly not required |
| X | ntldr | ntldr.exe | Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following system files: C:WINDOWSSYSTEMntldr.exe, C:m.exe, C:WINDOWSSearch-For-You.url, C:n.bat, C:q.exe, C:r.bat |
| Y | NTFSCLUP | NTFSCLUP.EXE | Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting" |
| X | NTFS16 | ntfs16.exe | Added by the RBOT-LY WORM! |
| X | Ntech.patchs | [trojan filename] | Added by the LEMIR.G TROJAN! |
| X | NTDLM | csrss.exe | Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | ntdll | ntdll.exe | Added by the BIONET.404 TROJAN! |
| X | NT Services | ntsvc.exe | Added by the AGOBOT.VJ WORM! |
| X | NT Logging Service | Syslog32.exe | Added by the DONK.B or DONK.C or DONK.L or DONK.M or DONK.O WORMS! |
| N | NT Kernel Patch | ntkrnlpt.exe | FaxServe network fax software |
| X | Nsvdr | nsvdr.exe | Adult content dialler |
| N | NSystemMonitor | Symmon.exe | Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging |
| X | nstat | netstat.exe | Adult content dialler |
| X | NSupdate | NSupdate.exe | Adult content dialer |
| X | nssysconf | [random filename] | Added by the VIVIA.A TROJAN! |
| U | NSHelper | aexnsinstallhelper.exe | Altiris Express Notification Server Install helper - monitors integrity of the installation |
| X | nse | nse.exe | Added by the AGOBOT-ML WORM! |
| U | Nsengine | Nsengine.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| X | nsdriver | nssys32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | nsdlua | nsdlua.exe | All-In-One Telcom - adult content dialler |
| X | NSCheck | NSCHECK.EXE | NetSetter/MarketScore foistware |
| X | nscntrl | nscntrl.exe | Adult content dialler |
| ? | NPS Event Checker | npscheck.exe | Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker |
| U | NPROTECT | nprotect.exe | Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here |
| ? | NPFMonitor | NPFMntor.exe | Norton AntiVirus Firewall Install Monitor. What does it do and is it required? |
| U | NovastorSchedulerd | SCHENGD.EXE | NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it |
| ? | NovaPortal Single User Service | NPSU.exe | ?? |
| U | NovaBackup * Tray Control | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number |
| X | Notn | Eber.exe | PurityScan/Clickspring adware |
| X | Notepad ml097e | notepad.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name |
| X | Notepad lptt01 | notepad.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name |
| ? | NotebookManager | nbm.exe | Associated with Acer notebook PCs. What does it do and is it required? |
| U | Notebook Maximizer | maximizer_startup.exe | Toshiba Notebook Maximizer software - adjust settings to save battery power and increase efficiency |
| X | NortonAV | norton_antivirus.exe | Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program |
| X | norton32 | norton32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Norton Wizzard | nwiz.exe | Added by the GAOBOT.ZX or GAOBOT.ADV WORMS! Note - this is not the valid nVidia application that shares the same name |
| X | Norton Updater | winset.exe | Added by a variant of the SPYBOT WORM! |
| X | Norton Update | ccUpdate.exe | Added by a variant of the AGOBOT/GAOBOT WORM!
|
| N | Norton System Doctor | Sysdoc32.exe | Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well |
| X | Norton SpySweeper AutoUpdate | navsw.exe | Added by the FORBOT-AS WORM! |
| ? | Norton Program Scheduler Event Checker | npscheck.exe | Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker |
| U | Norton Program Scheduler | NPSsvc.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| U | Norton Program Scheduler | nsched32.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| N | Norton Navigator Loader | nnloader.exe | An older Norton utility for file management under Windows 95. More information here |
| X | Norton Live Updater | Sochost.exe | Added by the GAOBOT.AO WORM! |
| X | Norton Live Update Server | cpsdv.exe | Added by the AGOBOT.EW TROJAN! |
| X | Norton Live Updater | Cavapsvc.exe | Added by the GAOBOT.AO WORM! |
| X | Norton Guard 32 | ntguard32.exe | Added by a variant of the RBOT WORM! |
| Y | Norton eMail Protect | POPROXY.EXE | Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it |
| N | Norton Disk Doctor | Ndd32.exe | Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well |
| N | Norton Crashguard Monitor | cgmenu.exe | Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001 |
| ? | Norton AV Preload | Premend.exe | Norton Antivirus related. What does it do and is it required |
| Y | Norton Auto-Protect | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | Norton Antivirus AV | FVProtect.exe | Added by the NETSKY.P WORM! Note - this is not the popular AV software! |
| U | Norman ZANDA | ZLH.EXE | System Tray icon for Norman Antivirus |
| N | NomdCheck | nomdchek.exe | Part of Intel's Native Audio |
| U | NOMAD Detector | ctmnrun.exe | Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected |
| U | Nokia Tray Application | NclTray.exe | Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
| N | Nokia Connection Monitor | NclConf.exe | Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required |
| X | Noha | aasd.exe | PurityScan/Clickspring adware
|
| X | nodriver | AUEKXRZ.EXE | Added by a variant of the SPYBOT WORM! |
| ? | NodeMnger | Nodemngr.exe | Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon? |
| Y | NOD32POP3 | Pop3scan.exe | POP3 E-mail part of Eset's NOD32 virus-scanner |
| Y | nod32kui | nod32kui.exe | Nod32 Antivirus Version 2 |
| Y | NOD32kernel | Nod32krn.exe | Nod32 Antivirus Version 2 |
| U | Nod32CC | nod32cc.exe | Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button |
| N | NoAdware | NoAdware.exe | Adware/spyware remover - not particularly recommended, see here |
| U | NoAds | NoAds.exe | Blocks advertisement banners in Internet Explorer |
| U | No-IP DUC | DUC20.exe | Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available |
| X | No Credit Card | plugin-[random].exe | Adult content pop-up dialler |
| U | NNSvc | nnsvc.exe | NetNanny internet filter |
| Y | NMSVC | nmSvc.exe | Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it |
| ? | NMSSvc | NMSSVC.EXE | NIC Management Service - diagnostics program for Intel Pro family network cards |
| N | NkVwMon.exe | NkVwMon.exe | Nikon View - for transferring pictures from Nikon digital cameras |
| N | NkvMon.exe | NkvMon.exe | Nikon View 5 - for transferring pictures from Nikon digital cameras |
| X | NJG40 | NJG40.EXE | Added by the BANCOS.D TROJAN! |
| Y | nisserv | NISSERV.EXE | Norton Personal Firewall |
| Y | Nisum | NISUM.EXE | Norton Personal Firewall |
| N | NInit | NInit.exe | Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required |
| X | nikLaus | nikLaus.exe | Added by the NIKLAS WORM! |
| N | Nielsen NetRatings | insight.exe | Nielsen NetRatings - "Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site?s audience and your customers". Is it required? |
| N | NGServer | ngserver.exe | Symantec/Norton Ghost Console service |
| X | NiceDownloads | rundll32.exe MSA64CHK.dll, DllMostrar | MatrixDialer related |
| U | NGClient | ngctw32.exe | Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually |
| N | nForce Tray Options | sstray.exe | nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys |
| U | NFM Service | NPDOR9x.exe | Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required |
| X | NewtonKnowsUpd | NewtKnow.exe ...NewtnUpd.dll, runkey | NewtonKnow hijacker |
| N | NewsUpd | newsupd.exe | For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here. |
| X | Newsgroup ml097e | newsgroup.exe | Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | Newsalrt | NEWSALRT.EXE | MSNBC News system tray utility to alert you to new news |
| X | Newsgroup lptt01 | newsgroup.exe | Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| ? | News Service | ispnews.exe | F-Secure antivirus related. However, is this particular item required? |
| X | NEWDOT~1 | rundll32.exe NewDotNetStartup Newdot~2.exe | Adware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example |
| X | New.net Startup | rundll32 [path], NewDotNetStartup -s | New.Net foistware |
| X | New.net | rundll32.exe NewDotNetStartup Newdot~2.exe | Adware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example |
| N | NeuroSpeech OESpeaker | OEMonitor.exe | Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not |
| X | NeuroMedia(IESpeaker) | NeuroMedia.exe | Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available |
| X | Netzip Smart Downloader | npnzdad.exe | Advertising spyware |
| N | NetZIPFolders | nzfprop.exe | Netzip Classic zip file manager |
| N | NetworkSetup | dlink.exe | D-Link System Tray icon |
| X | Networks Controler | Netsis.exe | Added by the RBOT-NG WORM!
|
| X | Networks Configurator | NetConfs.exe | Added by the RBOT-OX WORM!
|
| X | NetworkClient | NetworkClient.exe | Added by the LEMUR WORM! |
| X | Network Service Manager | netsvc.exe | Added by a variant of the GAOBOT/AGOBOT WORM! |
| X | NetworkAssociates Inc | internet.exe | Added by the LOVGATE WORM! |
| X | Network Service Manager | netsvc.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Network Service | svchost.exe | CoolWebSearch parasite related. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| X | Network Security Guard | **********.exe [* = random char] | CoolWebSearch parasite related |
| X | Network protocol service | wintcp.exe | Added by a variant of the AGOBOT/GAOBOT WORM!
|
| X | Network Host Controller | [path to trojan] | Added by the WHISPER TROJAN! |
| X | Network Protocol Service | wuamgrd.exe | Added by the RBOT.EA WORM! |
| U | NetWork Device Switch | NetDevSW.exe | Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary |
| U | Network Associates Error Reporting Service | TBMon.exe | Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software |
| X | Network Administration | NAS.exe | Added by the ANTILAM.20.Q TROJAN! |
| X | NetWork | csrs.exe | Added by the AGOBOT.JJ WORM! |
| N | Netword Agent | nwant33.exe | An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs |
| X | NetWatch32 | netwatch.exe | Added by the MIMAIL.C WORM! |
| X | Netunit32 | wunit32.exe | Added by an unidentified WORM or TROJAN! |
| U | NetTurbo | netturbo.exe | NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled |
| U | NetTime | NETTIME.EXE | From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP." |
| X | netsv32 | netsv32.exe | Added by the SDBOT-PX WORM! |
| N | NetStat Live | Nsl.exe | AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data |
| U | NetShow Powerpoint Helper | NSPPTHLP.EXE | If disabled, user created fonts can no longer be seen by other programs |
| N | Netscp6 | Netscp6.exe | Netscape 6 |
| N | Netscape Messenger | NETSCAPE.EXE | In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed |
| U | NetRun | NetRun.exe | NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost |
| X | Netropa Internet Receiver | Netropa.exe | Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware |
| X | NetReach | nrcheck.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| N | NetPumper | NetPumperIEProxy.exe | NetPumper download manager - bundles Cydoor and SaveNow adware, see here |
| N | NetPerSec | NetPerSec.exe | NetPerSec - measures the real-time speed of your Internet connection |
| X | netpc32.exe | netpc32.exe | Malware, probably CoolWebSearch parasite related |
| U | NetPatrol | winclient.exe | NetPatrol network monitoring software |
| U | netmsg | netmsg.exe | Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receive the messages. It has a number of other features as well
|
| X | NetMon | netmon.exe | Added by the MIMAIL.M WORM! |
| X | NetMeter | NetMeter.exe | NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided! |
| X | NetManagerService | ntss.exe | Added by the BESTPICS.A TROJAN! |
| X | NetLink | netlink32.exe | Added by the GAOBOT.WO WORM! |
| N | Netline User | netchk.exe | Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example |
| U | NetGuard | NetGuard.exe | FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor |
| U | Netlimiter | Netlimiter.exe | Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC." |
| ? | NetFxUpdate_v1.0.3705 | netfxupdate.exe | Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? |
| ? | netfxupdate | netfxupdate.exe | Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? |
| X | NETFP32.EXE | NETFP32.EXE | Added by the AGENT.CD TROJAN! |
| X | NetDy | VisualGuard.exe | Added by the NETSKY.N or NETSKY.W WORMS! |
| X | netdllex | netdllex.Exe | Added by the CRYPTER.A TROJAN! |
| X | netdll32 | netdll32.exe | Added by the CRYPTER.A TROJAN! |
| U | NetCruiser Dialer | NCDialer.exe | NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections" |
| X | netconfig | netconfig.exe | Added by the NETCONF TROJAN! |
| X | NetApp | winserv.exe | Added by the SHADOWTHIEF TROJAN! |
| X | Netapi | Netapi.exe | Added by the NETDEVIL.14 TROJAN! |
| X | NetAdm7 | NETADM7.EXE | Added by the BANCOS.F TROJAN! |
| U | NetAccelerator | NetAccel.exe | NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance |
| N | Net-It Launcher | NILaunch.exe | Net-It - web publishing software |
| U | Net Activity Diagram | nad.exe | Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs |
| U | Net Accelerator | NetAccelerator.exe | Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ???". Only required if you find it helps improve your performance |
| X | Net | WINREG.EXE | Added by the ASSASIN.D TROJAN! |
| N | NeroNETTrayIcon | NNServiceCtrl.exe | System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network |
| U | NeroFilterCheck | NeroCheck.exe | Associated with "Nero Burning Rom" CD writing software. Checks for driver issues |
| X | NeroCheck | regedit.exe | Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD burning program. Also it is not the valid Windows registry editor which resides in C:Windows or C:Winnt wheras this version resides in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K) or C:WindowsSystem32 (WinXP) |
| U | NeroCheck | nerocheck.exe | Associated with "Nero Burning Rom" CD writing software. Checks for driver issues |
| X | Nero.ma | ***.exe [*** = 2 to 3 digits] | Added by the JONBARR.D WORM! |
| ? | neqprvfy.exe | neqprvfy.exe | Appears to be related to the downloading of some application - possibly verifying updates? |
| U | Necutray | Necutray.exe | Driver for external USB storage devices (hard drives, flsh disks, etc) |
| Y | NECMFK | necmfk.exe | NEC wireless keyboard driver |
| N | Necbar | Necbar.exe | Nec Assistant; Ark's Navigator, a graphical interface for NEC computers |
| U | NDSTray | NDSTray.exe | ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have |
| X | NDrv | NDrv.exe | PurityScan/Clickspring adware |
| U | NDPS | DPMW32.EXE | Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature |
| X | NDplDeamon | winlogin.exe | Added by the RANDEX.E WORM! |
| X | NDplDeamon | nstask32.exe | Added by the RANDEX.E WORM! |
| X | NDIS Adapter | lsass2.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | NDIS Adapter | windows.exe | Added by the FORBOT-BR WORM!
|
| X | NDIS Adapter | ndis.exe | Added by the SDBOT.VF WORM! |
| ? | NDDEAGNT | NDDEAGNT.EXE | WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services |
| N | NCS_SS | Csinsm32.exe | Same as CleanSweep Smart Sweep-Internet Sweep |
| ? | NCLAUNCH | NCLAUNCH.Exe | Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required? |
| N | NCD | ncd.exe | Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path |
| ? | NCClient | N/A | ?? |
| X | NBT System alias | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| U | NbkCtrl | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| U | NBJ | NBJ.exe | Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups |
| N | NB Start Menu | STARTM.EXE | Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B |
| N | NB Windows Patterns | WINDBKGND.EXE | Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows |
| N | NB Common Dialog Enhancements | COMDLGEX.EXE | Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs |
| X | NAVSCANNER32 | NAVSCANNER32.EXE | Added by the RBOT.QC WORM! |
| X | NAVUpd | rundll32.exe navupd.dll, Startup | Added by the NAVU TROJAN! |
| X | NavScan | [filename] | Added by the OBSORB TROJAN! |
| X | navp.exe | navp.exe | Added by the AGOBOT-OE WORM! |
| X | NavPass | NavPass.exe | Free system for gaining access to and downloading from adult content web-sites |
| X | navman_20 | sysnav32.exe | Hijacker, possibly a CoolWebSearch variant |
| X | NaviSearch | nls.exe | NaviSearch, eXact Advertising variant |
| U | Naviscope | naviscope.exe | Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more |
| Y | navapw32 | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | NavAgent32 | SCardSvr32.Exe | Added by the MOFEI.B WORM! |
| X | NavAgent32 | lasvr32.exe | Added by the FEMOT.D WORM! |
| X | NAV Scan Service | NAVSCAN32.EXE | Added by the SDBOT.VG WORM! |
| X | NAV Live Update | [path to worm] | Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec |
| U | NAV DefAlert | DefAlert.exe | Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis |
| N | NAV Configuration Wizard | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| N | NAV CfgWiz | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| X | NAV Auto Update | Navautoupdate.exe | Added by a variant of the SPYBOT WORM! |
| X | NAV Agent | winsnav.vbs | Added by the ANPES WORM!
|
| X | NAV Agent | systems.exe | Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name |
| X | nAv AGENT | N/A | Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes |
| Y | NAV Agent | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | NAV | RuxDLL32.exe | Added by the MAPSON.D WORM! |
| X | Natal | Natal.scr | Added by the OPASERV.AE WORM! |
| X | Narrator | ******.exe [* = random char] | Transponder/VX2 related adware |
| X | Name | Iexplorer0.exe | Added by the THREADSYS TROJAN! |
| Y | Naimagent_UI | naimag32.exe | Workstation background program for Network Associates? McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| Y | Naimagent_UI | EPOAgentnaimag32.exe | Workstation background program for Network Associates? McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| N | Naggerrunkey | nagger.exe | Packard Bell Free Internet Signup screen |
| Y | Naimagent_service | EPOAgentnaimas32.exe | Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages |
| N | NADaemon | NADAEMON.EXE | Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required |
| U | N2PTray | Net2fone.exe | An Internet telephony application. Needed only if you have an account at Net2Phone, Inc |
| U | N2PTray | Net2fone.exe | An Internet telephony application. Needed only if you have an account at Net2Phone, Inc |
| N | NADaemon | NADAEMON.EXE | Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required |
| N | Naggerrunkey | nagger.exe | Packard Bell Free Internet Signup screen |
| Y | Naimagent_service | EPOAgentnaimas32.exe | Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages |
| Y | Naimagent_UI | EPOAgentnaimag32.exe | Workstation background program for Network Associates? McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| Y | Naimagent_UI | naimag32.exe | Workstation background program for Network Associates? McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| X | Name | Iexplorer0.exe | Added by the THREADSYS TROJAN! |
| X | Narrator | ******.exe [* = random char] | Transponder/VX2 related adware |
| X | Natal | Natal.scr | Added by the OPASERV.AE WORM! |
| X | NAV | RuxDLL32.exe | Added by the MAPSON.D WORM! |
| Y | NAV Agent | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | nAv AGENT | N/A | Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes |
| X | NAV Agent | systems.exe | Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name |
| X | NAV Agent | winsnav.vbs | Added by the ANPES WORM!
|
| X | NAV Auto Update | Navautoupdate.exe | Added by a variant of the SPYBOT WORM! |
| N | NAV CfgWiz | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| N | NAV Configuration Wizard | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| U | NAV DefAlert | DefAlert.exe | Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis |
| X | NAV Live Update | [path to worm] | Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec |
| X | NAV Scan Service | NAVSCAN32.EXE | Added by the SDBOT.VG WORM! |
| X | NavAgent32 | lasvr32.exe | Added by the FEMOT.D WORM! |
| X | NavAgent32 | SCardSvr32.Exe | Added by the MOFEI.B WORM! |
| Y | navapw32 | navapw32.exe | Norton Anti-Virus's background scanning process |
| U | Naviscope | naviscope.exe | Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more |
| X | NaviSearch | nls.exe | NaviSearch, eXact Advertising variant |
| X | navman_20 | sysnav32.exe | Hijacker, possibly a CoolWebSearch variant |
| X | navp.exe | navp.exe | Added by the AGOBOT-OE WORM! |
| X | NavPass | NavPass.exe | Free system for gaining access to and downloading from adult content web-sites |
| X | NavScan | [filename] | Added by the OBSORB TROJAN! |
| X | NAVSCANNER32 | NAVSCANNER32.EXE | Added by the RBOT.QC WORM! |
| X | NAVUpd | rundll32.exe navupd.dll, Startup | Added by the NAVU TROJAN! |
| N | NB Common Dialog Enhancements | COMDLGEX.EXE | Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs |
| N | NB Start Menu | STARTM.EXE | Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B |
| N | NB Windows Patterns | WINDBKGND.EXE | Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows |
| U | NBJ | NBJ.exe | Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups |
| U | NbkCtrl | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| X | NBT System alias | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| ? | NCClient | N/A | ?? |
| N | NCD | ncd.exe | Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path |
| ? | NCLAUNCH | NCLAUNCH.Exe | Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required? |
| N | NCS_SS | Csinsm32.exe | Same as CleanSweep Smart Sweep-Internet Sweep |
| ? | NDDEAGNT | NDDEAGNT.EXE | WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services |
| X | NDIS Adapter | ndis.exe | Added by the SDBOT.VF WORM! |
| X | NDIS Adapter | windows.exe | Added by the FORBOT-BR WORM!
|
| X | NDIS Adapter | lsass2.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | NDplDeamon | nstask32.exe | Added by the RANDEX.E WORM! |
| X | NDplDeamon | winlogin.exe | Added by the RANDEX.E WORM! |
| U | NDPS | DPMW32.EXE | Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature |
| X | NDrv | NDrv.exe | PurityScan/Clickspring adware |
| U | NDSTray | NDSTray.exe | ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have |
| N | Necbar | Necbar.exe | Nec Assistant; Ark's Navigator, a graphical interface for NEC computers |
| Y | NECMFK | necmfk.exe | NEC wireless keyboard driver |
| U | Necutray | Necutray.exe | Driver for external USB storage devices (hard drives, flsh disks, etc) |
| ? | neqprvfy.exe | neqprvfy.exe | Appears to be related to the downloading of some application - possibly verifying updates? |
| X | Nero.ma | ***.exe [*** = 2 to 3 digits] | Added by the JONBARR.D WORM! |
| U | NeroCheck | nerocheck.exe | Associated with "Nero Burning Rom" CD writing software. Checks for driver issues |
| X | NeroCheck | regedit.exe | Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD burning program. Also it is not the valid Windows registry editor which resides in C:Windows or C:Winnt wheras this version resides in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K) or C:WindowsSystem32 (WinXP) |
| U | NeroFilterCheck | NeroCheck.exe | Associated with "Nero Burning Rom" CD writing software. Checks for driver issues |
| N | NeroNETTrayIcon | NNServiceCtrl.exe | System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network |
| X | Net | WINREG.EXE | Added by the ASSASIN.D TROJAN! |
| U | Net Accelerator | NetAccelerator.exe | Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ???". Only required if you find it helps improve your performance |
| U | Net Activity Diagram | nad.exe | Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs |
| N | Net-It Launcher | NILaunch.exe | Net-It - web publishing software |
| U | NetAccelerator | NetAccel.exe | NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance |
| X | NetAdm7 | NETADM7.EXE | Added by the BANCOS.F TROJAN! |
| X | Netapi | Netapi.exe | Added by the NETDEVIL.14 TROJAN! |
| X | NetApp | winserv.exe | Added by the SHADOWTHIEF TROJAN! |
| X | netconfig | netconfig.exe | Added by the NETCONF TROJAN! |
| U | NetCruiser Dialer | NCDialer.exe | NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections" |
| X | netdll32 | netdll32.exe | Added by the CRYPTER.A TROJAN! |
| X | netdllex | netdllex.Exe | Added by the CRYPTER.A TROJAN! |
| X | NetDy | VisualGuard.exe | Added by the NETSKY.N or NETSKY.W WORMS! |
| X | NETFP32.EXE | NETFP32.EXE | Added by the AGENT.CD TROJAN! |
| ? | netfxupdate | netfxupdate.exe | Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? |
| ? | NetFxUpdate_v1.0.3705 | netfxupdate.exe | Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? |
| U | NetGuard | NetGuard.exe | FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor |
| U | Netlimiter | Netlimiter.exe | Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC." |
| N | Netline User | netchk.exe | Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example |
| X | NetLink | netlink32.exe | Added by the GAOBOT.WO WORM! |
| X | NetManagerService | ntss.exe | Added by the BESTPICS.A TROJAN! |
| X | NetMeter | NetMeter.exe | NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided! |
| X | NetMon | netmon.exe | Added by the MIMAIL.M WORM! |
| U | netmsg | netmsg.exe | Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receive the messages. It has a number of other features as well
|
| U | NetPatrol | winclient.exe | NetPatrol network monitoring software |
| X | netpc32.exe | netpc32.exe | Malware, probably CoolWebSearch parasite related |
| N | NetPerSec | NetPerSec.exe | NetPerSec - measures the real-time speed of your Internet connection |
| N | NetPumper | NetPumperIEProxy.exe | NetPumper download manager - bundles Cydoor and SaveNow adware, see here |
| X | NetReach | nrcheck.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Netropa Internet Receiver | Netropa.exe | Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware |
| U | NetRun | NetRun.exe | NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost |
| N | Netscape Messenger | NETSCAPE.EXE | In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed |
| N | Netscp6 | Netscp6.exe | Netscape 6 |
| U | NetShow Powerpoint Helper | NSPPTHLP.EXE | If disabled, user created fonts can no longer be seen by other programs |
| N | NetStat Live | Nsl.exe | AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data |
| X | netsv32 | netsv32.exe | Added by the SDBOT-PX WORM! |
| U | NetTime | NETTIME.EXE | From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP." |
| U | NetTurbo | netturbo.exe | NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled |
| X | Netunit32 | wunit32.exe | Added by an unidentified WORM or TROJAN! |
| X | NetWatch32 | netwatch.exe | Added by the MIMAIL.C WORM! |
| N | Netword Agent | nwant33.exe | An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs |
| X | NetWork | csrs.exe | Added by the AGOBOT.JJ WORM! |
| X | Network Administration | NAS.exe | Added by the ANTILAM.20.Q TROJAN! |
| U | Network Associates Error Reporting Service | TBMon.exe | Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software |
| U | NetWork Device Switch | NetDevSW.exe | Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary |
| X | Network Host Controller | [path to trojan] | Added by the WHISPER TROJAN! |
| X | Network Protocol Service | wuamgrd.exe | Added by the RBOT.EA WORM! |
| X | Network protocol service | wintcp.exe | Added by a variant of the AGOBOT/GAOBOT WORM!
|
| X | Network Security Guard | **********.exe [* = random char] | CoolWebSearch parasite related |
| X | Network Service | svchost.exe | CoolWebSearch parasite related. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| X | Network Service Manager | netsvc.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Network Service Manager | netsvc.exe | Added by a variant of the GAOBOT/AGOBOT WORM! |
| X | NetworkAssociates Inc | internet.exe | Added by the LOVGATE WORM! |
| X | NetworkClient | NetworkClient.exe | Added by the LEMUR WORM! |
| X | Networks Configurator | NetConfs.exe | Added by the RBOT-OX WORM!
|
| X | Networks Controler | Netsis.exe | Added by the RBOT-NG WORM!
|
| N | NetworkSetup | dlink.exe | D-Link System Tray icon |
| X | Netzip Smart Downloader | npnzdad.exe | Advertising spyware |
| N | NetZIPFolders | nzfprop.exe | Netzip Classic zip file manager |
| X | NeuroMedia(IESpeaker) | NeuroMedia.exe | Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available |
| N | NeuroSpeech OESpeaker | OEMonitor.exe | Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not |
| X | New.net | rundll32.exe NewDotNetStartup Newdot~2.exe | Adware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example |
| X | New.net Startup | rundll32 [path], NewDotNetStartup -s | New.Net foistware |
| X | NEWDOT~1 | rundll32.exe NewDotNetStartup Newdot~2.exe | Adware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example |
| ? | News Service | ispnews.exe | F-Secure antivirus related. However, is this particular item required? |
| N | Newsalrt | NEWSALRT.EXE | MSNBC News system tray utility to alert you to new news |
| X | Newsgroup lptt01 | newsgroup.exe | Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Newsgroup ml097e | newsgroup.exe | Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | NewsUpd | newsupd.exe | For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here. |
| X | NewtonKnowsUpd | NewtKnow.exe ...NewtnUpd.dll, runkey | NewtonKnow hijacker |
| U | NFM Service | NPDOR9x.exe | Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required |
| N | nForce Tray Options | sstray.exe | nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys |
| U | NGClient | ngctw32.exe | Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually |
| N | NGServer | ngserver.exe | Symantec/Norton Ghost Console service |
| X | NiceDownloads | rundll32.exe MSA64CHK.dll, DllMostrar | MatrixDialer related |
| N | Nielsen NetRatings | insight.exe | Nielsen NetRatings - "Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site?s audience and your customers". Is it required? |
| X | nikLaus | nikLaus.exe | Added by the NIKLAS WORM! |
| N | NInit | NInit.exe | Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required |
| Y | nisserv | NISSERV.EXE | Norton Personal Firewall |
| Y | Nisum | NISUM.EXE | Norton Personal Firewall |
| X | NJG40 | NJG40.EXE | Added by the BANCOS.D TROJAN! |
| N | NkvMon.exe | NkvMon.exe | Nikon View 5 - for transferring pictures from Nikon digital cameras |
| N | NkVwMon.exe | NkVwMon.exe | Nikon View - for transferring pictures from Nikon digital cameras |
| ? | NMSSvc | NMSSVC.EXE | NIC Management Service - diagnostics program for Intel Pro family network cards |
| Y | NMSVC | nmSvc.exe | Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it |
| U | NNSvc | nnsvc.exe | NetNanny internet filter |
| X | No Credit Card | plugin-[random].exe | Adult content pop-up dialler |
| U | No-IP DUC | DUC20.exe | Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available |
| U | NoAds | NoAds.exe | Blocks advertisement banners in Internet Explorer |
| N | NoAdware | NoAdware.exe | Adware/spyware remover - not particularly recommended, see here |
| U | Nod32CC | nod32cc.exe | Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button |
| Y | NOD32kernel | Nod32krn.exe | Nod32 Antivirus Version 2 |
| Y | nod32kui | nod32kui.exe | Nod32 Antivirus Version 2 |
| Y | NOD32POP3 | Pop3scan.exe | POP3 E-mail part of Eset's NOD32 virus-scanner |
| ? | NodeMnger | Nodemngr.exe | Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon? |
| X | nodriver | AUEKXRZ.EXE | Added by a variant of the SPYBOT WORM! |
| X | Noha | aasd.exe | PurityScan/Clickspring adware
|
| N | Nokia Connection Monitor | NclConf.exe | Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required |
| U | Nokia Tray Application | NclTray.exe | Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
| U | NOMAD Detector | ctmnrun.exe | Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected |
| N | NomdCheck | nomdchek.exe | Part of Intel's Native Audio |
| U | Norman ZANDA | ZLH.EXE | System Tray icon for Norman Antivirus |
| X | Norton Antivirus AV | FVProtect.exe | Added by the NETSKY.P WORM! Note - this is not the popular AV software! |
| Y | Norton Auto-Protect | navapw32.exe | Norton Anti-Virus's background scanning process |
| ? | Norton AV Preload | Premend.exe | Norton Antivirus related. What does it do and is it required |
| N | Norton Crashguard Monitor | cgmenu.exe | Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001 |
| N | Norton Disk Doctor | Ndd32.exe | Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well |
| Y | Norton eMail Protect | POPROXY.EXE | Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it |
| X | Norton Guard 32 | ntguard32.exe | Added by a variant of the RBOT WORM! |
| X | Norton Live Update Server | cpsdv.exe | Added by the AGOBOT.EW TROJAN! |
| X | Norton Live Updater | Cavapsvc.exe | Added by the GAOBOT.AO WORM! |
| X | Norton Live Updater | Sochost.exe | Added by the GAOBOT.AO WORM! |
| N | Norton Navigator Loader | nnloader.exe | An older Norton utility for file management under Windows 95. More information here |
| U | Norton Program Scheduler | nsched32.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| U | Norton Program Scheduler | NPSsvc.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| ? | Norton Program Scheduler Event Checker | npscheck.exe | Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker |
| X | Norton SpySweeper AutoUpdate | navsw.exe | Added by the FORBOT-AS WORM! |
| N | Norton System Doctor | Sysdoc32.exe | Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well |
| X | Norton Update | ccUpdate.exe | Added by a variant of the AGOBOT/GAOBOT WORM!
|
| X | Norton Updater | winset.exe | Added by a variant of the SPYBOT WORM! |
| X | Norton Wizzard | nwiz.exe | Added by the GAOBOT.ZX or GAOBOT.ADV WORMS! Note - this is not the valid nVidia application that shares the same name |
| X | norton32 | norton32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | NortonAV | norton_antivirus.exe | Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program |
| U | Notebook Maximizer | maximizer_startup.exe | Toshiba Notebook Maximizer software - adjust settings to save battery power and increase efficiency |
| ? | NotebookManager | nbm.exe | Associated with Acer notebook PCs. What does it do and is it required? |
| X | Notepad lptt01 | notepad.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name |
| X | Notepad ml097e | notepad.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name |
| X | Notn | Eber.exe | PurityScan/Clickspring adware |
| U | NovaBackup * Tray Control | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number |
| ? | NovaPortal Single User Service | NPSU.exe | ?? |
| U | NovastorSchedulerd | SCHENGD.EXE | NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it |
| ? | NPFMonitor | NPFMntor.exe | Norton AntiVirus Firewall Install Monitor. What does it do and is it required? |
| U | NPROTECT | nprotect.exe | Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here |
| ? | NPS Event Checker | npscheck.exe | Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker |
| X | NSCheck | NSCHECK.EXE | NetSetter/MarketScore foistware |
| X | nscntrl | nscntrl.exe | Adult content dialler |
| X | nsdlua | nsdlua.exe | All-In-One Telcom - adult content dialler |
| X | nsdriver | nssys32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | nse | nse.exe | Added by the AGOBOT-ML WORM! |
| U | Nsengine | Nsengine.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| U | NSHelper | aexnsinstallhelper.exe | Altiris Express Notification Server Install helper - monitors integrity of the installation |
| X | nssysconf | [random filename] | Added by the VIVIA.A TROJAN! |
| X | nstat | netstat.exe | Adult content dialler |
| X | NSupdate | NSupdate.exe | Adult content dialer |
| X | Nsvdr | nsvdr.exe | Adult content dialler |
| N | NSystemMonitor | Symmon.exe | Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging |
| N | NT Kernel Patch | ntkrnlpt.exe | FaxServe network fax software |
| X | NT Logging Service | Syslog32.exe | Added by the DONK.B or DONK.C or DONK.L or DONK.M or DONK.O WORMS! |
| X | NT Services | ntsvc.exe | Added by the AGOBOT.VJ WORM! |
| X | ntdll | ntdll.exe | Added by the BIONET.404 TROJAN! |
| X | NTDLM | csrss.exe | Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | Ntech.patchs | [trojan filename] | Added by the LEMIR.G TROJAN! |
| X | NTFS16 | ntfs16.exe | Added by the RBOT-LY WORM! |
| Y | NTFSCLUP | NTFSCLUP.EXE | Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting" |
| X | ntldr | ntldr.exe | Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following system files: C:WINDOWSSYSTEMntldr.exe, C:m.exe, C:WINDOWSSearch-For-You.url, C:n.bat, C:q.exe, C:r.bat |
| N | ntlfreedom | RyDial.dll, QuickStart | NTL Freedom ISP software - reportedly not required |
| X | NTP Server | [path to trojan] | Added by the RANKY.F TROJAN! |
| N | NTrtc | ntrtc.exe | Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here |
| X | NTsocket | NoeWinnt.exe | Added by the ATAKA-E TROJAN! |
| U | NTVDM | NTVDM.EXE | Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here |
| X | ntvdscm | ntvdscm.exe | Added by the SCKEYLOG.O TROJAN! |
| Y | NuTCSetupEnviron | ncoeenv.exe | Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone |
| ? | NVCLOCK | rundll32 nvclock.dll, fnNvclock | Overclocking utility for nVidia based graphics cards? |
| ? | NvColorInit | rundll32.exe NvQtwk.dll, NvColorInit | Associated with Nvidia based graphics cards |
| U | NvCpl | rundll32.exe NvCpl.dll, NvStartup | Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card |
| X | NvCpl | NvCpl.EXE | Added by the YANZ.B WORM! |
| U | NvCpl | NvCpl.EXE | Added by the YANZ.B WORM! |
| X | NvCplD | m2gr32.exe | "Switch" premium rate adult content dialler |
| N | NvCplDaemon | rundll32.exe NvQtwk.dll, NvCplDaemon | System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here) |
| U | NvCplDaemon | rundll32.exe NvCpl.dll, NvStartup | Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card |
| X | NvCplDmn | NAVSVC.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | nvd32 lptt01 | nvd32.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | nvd32 ml097e | nvd32.exe | Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Nvid | [8 random charachters] | Unidentified adware |
| X | Nvid32 | Nvid32.exe | Added by the GEMA TROJAN! |
| X | Nvidex32 | Nvidex32.exe | Added by the GEMA TROJAN! |
| X | Nvidia Control Panel | ncsvc32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | NVIDIA Driver | MSPMSPSU.EXE | Added by the WOOTBOT.Y WORM! |
| N | NVIDIA nForce APU1 Utilities | NVATray.exe | nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time" |
| X | NVIDIA Video drivers | video_32D.exe | Added by the AGOBOT.KV WORM! |
| X | Nvidia32 | nvidia32.exe | CoolWebSearch parasite variant |
| N | NvidiaQuickTweak | rundll32.exe NvQtwk.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| U | NVIEW | rundll32.exe nview.dll, nViewLoadHook | This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers |
| N | NvInitialize | rundll32.exe NvQtwk.dll, NvXTInit | Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled |
| Y | NVmax | NVmax.exe | NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card |
| N | NVMCTRAY | RUNDLL32.EXE ...NVMCTRAY.DLL, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| U | NvMediaCenter | RunDLL32.exe NvMCTray.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| N | NVMixerTray | NVMixerTray.exe | System Tray access to audio controls from nVidia's motherboard ForceWare software |
| N | NVQuickTweak | rundll32.exe NvQtwk.dll, NvTaskbarInit | System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties |
| N | NVRT | nvrt.exe | NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports |
| ? | NVRTClk | NVRTClk.exe | Related to a Gigabyte video card. What does it do, and is it required? |
| N | NvSvc | nvsvc.exe | NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that |
| X | NVSystem32 | nvscv32.exe | Added by the AGOBOT-NO WORM!
|
| X | NvXplDeamon | xstyles.exe | Added by the SMALL.AJ VIRUS! |
| ? | NWEReboot | dummy.exe | ?? |
| N | nwiz | nwiz.exe | Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system |
| Y | Nwpopup | Nwpopup.exe | Broadcast message handler part of Novell Netware that displays server, printer and other messages |
| U | nwrecmsg | nwrecmsg.exe | Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes |
| Y | NWTRAY | nwtray.exe | Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client |
