Computer Tutorials Computer Help and Spyware Removal File DatabaseUninstall Database Windows Startup Programs Database Computer Resources Computer Glossary Forums Computer Help and Spyware Removal
 

  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
  Do you have popups or other malware infecting your computer? If so, Start Here!
  Are you having trouble using this site? Then you should visit the New User Orientation Center!




A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other   
HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23
Rootkit List · Submit a Startup · Top Submitters
 Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:
Advanced Search

Name Filename Status Description
/l:eng N/A
N
Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appe ... Read More
17779Proj2002 N/A
?
??
ARCSolo Recovery N/A
N
Backup software by Computer Associates - no longer supported
Batchreg1 N/A
N
Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during ... Read More
DashIE N/A
?
Could be related to "Dash Power Shopping" tool bar in IE?
Datechecker N/A
?
Could be related to this?
DDT N/A
?
??
DLHelperEXE.exe N/A
X
Downloader for Microgaming/Casino software - stealth installed
Host N/A
X
Added by the POPDIS or STARTPAGE.F TROJANS!
hpoddt01.exe N/A
N
Installed by the "HP Photo and Imaging Director" software. If you ask for the imaging software, this program will be started ... Read More
HWinst N/A
Y
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More
IPinst N/A
Y
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More
IZE N/A
?
??
LASTinst N/A
Y
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More
MSupdate.exe N/A
X
CoolWebSearch parasite related - resets home page to an adult content site
MSupdater.exe N/A
X
CoolWebSearch parasite related. Installs the Winshow.dll browser plugin
nAv AGENT N/A
X
Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it cl ... Read More
NCClient N/A
?
??
piiserviceOE N/A
U
Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE ... Read More
Recover N/A
N
Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appe ... Read More
regtmlp N/A
?
??
RTStartMute N/A
?
??
rvde N/A
X
Related to li-speed****
SOFTinst N/A
Y
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More
TDockNUndock N/A
?
Found on a Toshiba laptop - for use with a docking station?
TheMainStart N/A
?
??
TWarmBay N/A
?
Found on a Toshiba laptop. Related to hotswap bay management?
TWBbtn N/A
?
Found on a Toshiba laptop
UTILsInst N/A
Y
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More
WaveTop Receiver 1 N/A
N
WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More
WaveTop Receiver 2 N/A
N
WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More
WaveTop Upload Manager N/A
N
WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More
Windows Update.exe N/A
X
Homepage hijacker, see here
Winlogon.exe N/A
X
CoolWebSearch parasite related - resets home page to an adult material site
WMBoot N/A
N
Associated with Logitech Wingman game controllers. Not required but what does it do? ... Read More
Nod3d2 Free antivirus N0D32KRN.EXE
X
Added by the W32/Rbot-ABQ worm.
Nod32 Service n0m.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
svtcin n20050308.a.Stub.EXE
X
Added by Trojan.N20050308.Process TROJAN! Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) ... Read More
ntechin n20050308.exe
X
adware, probably VX2/Look2Me related
nsvcin n20050308.exe
X
adware, probably VX2/Look2Me related
tsvcin n20050308.EXE
X
adware, probably VX2/Look2Me related ... Read More
SystemSv121 n2ewma1xxsv234.exe
X
Added by the Nuwar/Storm worm.
MONPluginSrIvcs n3monap23.exe
X
Added by a variant of the WIN32.RBOT WORM!
MSNPluginSrIvcs n3vasap23.exe
X
Added by a variant of the WIN32.RBOT WORM!
[random name] n?lookup.exe
X
PurityScan/Clickspring adware
anbv32 nabv32.exe
X
Added by the TITOG.C WORM!
Net Activity Diagram nad.exe
U
Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs ... Read More
NADaemon NADAEMON.EXE
N
Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". On ... Read More
iCn NAG.EXE
N
iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist ... Read More
Naggerrunkey nagger.exe
N
Packard Bell Free Internet Signup screen
[not used] Nail.exe
X
This infection is a Abetterinternet adware variant. It is notoriously difficult to remove and is usually bundled with other malware that are hard to ... Read More
Naimagent_UI naimag32.exe
Y
Workstation background program for Network Associates’ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of t ... Read More
GoOutside nakedx.exe
X
Added by the W32/Sdbot-AGK worm and IRC backdoor.
Nakido nakido.exe
U
Added by the Nakido file sharing software. This software allows you to share files with other people on the Nakido network. ... Read More
Application Explorer Naldesk.exe
U
Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) ... Read More
Novell Application Launcher nalntsrv.exe
Y
Part of the Novell client for Windows. Found in the C:\Program Files\Novell\ZENworks folder. ... Read More
Application Window NALWIN32.EXE
Y
Part of Novell's Zenworks. Found in the C:\Program Files\Novell\ZENworks folder. ... Read More
NamedSvc named.exe
X
Identified by Kaspersky Antivirus as Backdoor.Win32.IRCBot.anp.
NAMEDPIPE SYSTEM namedpipe.exe
X
Added by the W32/Mytob-FH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Ya Salam NancyAjram.exe
X
Added by the W32.Jalabed@mm mass-mailing worm.
rnaomflt naomf.exe
U
Naomi internet filtering software ... Read More
NAP32 NAP32.exe
X
Premium rate adult content dialer
nvpatch napatch.exe
X
Added by the W32/Sasser-F worm.
Windows Logon Service napi32.exe
X
Added by the W32.Spybot.ANDM worm. W32.Spybot.ANDM is a worm that spreads through mIRC and to network shares protected by weak passwords. It also spre ... Read More
naPrdMgr naPrdMgr.exe
X
Added by the W32/Tilebot-KX worm and IRC backdoor.
NapsterShell napster.exe
N
Windows system tray icon for the music download service, Napster.
narqwe narqwe.sys
X
Added by the Backdoor.Rustock backdoor rootkit.
RunNarrator Narrator.exe
U
Microsoft's Narrator program which is an accessibility program that reads the text on your screen to you via your speakers. ... Read More
Network Administration NAS.exe
X
Added by the ANTILAM.20.Q TROJAN!
Nas nas.exe
X
Added by the Adware.ClearX adware program. Adware.ClearX is a program that attempts to modify settings in Internet Explorer. It redirects both the hom ... Read More
4wd!!! Natal!.pif
X
Added by the OPASERV.AI WORM!
Natal Natal.scr
X
Added by the OPASERV.AE WORM!
NaturalColorLoad NaturalColorLoad.exe
U
Natural Color help users synchronize the on screen colors with printed ones.
Microsoft Update NAV.exe
X
Added by the RBOT-IV WORM!
System nav32.exe
X
Added by the W32/Rbot-BHV worm and IRC backdoor.
Norton Auto Protect nava.exe
X
Added by an unidentified WORM or TROJAN!
Nortan Anti Virus nava32.exe
X
Added by Backdoor.FTP_Ana.C. This infections listens on TCP port 666.
Windows Print Spooler NavAgent32.exe
X
Added by an unidentified VIRUS, WORM or TROJAN!
navapp navapp.exe
X
NavExcel adware variant
autoprotectu navapq32.exe
X
Added by an unidentified WORM or TROJAN!
compaq service drivers navapqwa.exe
X
Added by a variant of the W32/SDBOT WORM! ... Read More
Norton AntiVirus Auto Protect Service navapsvc.exe
Y
This service is used by Norton Antivirus to run in the background and detect when any files that are infected with malware are stopped from running. ... Read More
Windows Server Management Services navapsvc.exe
X
Added by the Troj/Rbot-GGW worm and IRC backdoor.
navapsvc navapsvc.exe
X
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Norton Service Process navapvc.exe
X
Added by a variant of the AGOBOT/GAOBOT WORM!
NAV Agent navapw32.exe
Y
Norton Anti-Virus's background scanning process
navapw32 navapw32.exe
Y
Norton Anti-Virus's background scanning process
Norton Auto-Protect navapw32.exe
Y
Norton Anti-Virus's background scanning process
NAV Auto Update Navautoupdate.exe
X
Added by a variant of the SPYBOT WORM!
Explorer navawp32.exe
X
Added by the Troj/Ronoper-B backdoor trojan.
Corel Reminder NAVBROWSER.EXE
N
If you don't want to register Corel products and be reminded about it every 2 weeks disable it ... Read More
QTSvc navchk.exe
X
Premium rate adult content dialler
SystemService navchk.exe
X
Premium rate adult content dialler
schedulermgr navchk.exe
X
Premium rate adult material dialer
System Information Manager Navcpe.exe
X
Added by the SDBOT-QB WORM!
NAVENG naveng.sys
Y
Driver used by Symantec Antivirus.
NAVEX15 navex15.sys
Y
Driver related to the virus definitions of Symantec Antivirus.
microsoft updating navguard.exe
X
Added by the RBOT.HW WORM! ... Read More
Naviscope naviscope.exe
U
Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-cl ... Read More
navregreminder NavLoad.ini
N
Corel, HP or ScanSoft registration reminder; not required
NavLogon NavLogon.dll
Y
Part of the Norton Antivirus product.
Microsoft Update navmgrd.exe
X
Added by the SDBOT.DP TROJAN!
navp.exe navp.exe
X
Added by the AGOBOT-OE WORM!
NavPass NavPass.exe
X
Free system for gaining access to and downloading from adult content web-sites
cpntmgc navpmc.exe
X
MagicControl downloader trojan variant
nav auto prot navprot1.exe
X
Added by the RBOT.ZAC WORM! ... Read More
Norton AutoProtect navprot32.exe
X
Added by the W32/Rbot-UX worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. ... Read More
NAV Auto Protect navprotect.exe
X
Added by a variant of the RBOT WORM!
AVSTRT navpsrvc.exe
X
Added by the W32/Forbot-EF worm. When started this infection connects to a remote IRC server where it waits for commands to execute. These infection ... Read More
Symantec Security Routine Addon for Microsoft Windows navpxaw32.exe
X
Added by the AGOBOT-GJ TROJAN!
NAV Scan Service NAVSCAN32.EXE
X
Added by the SDBOT.VG WORM!
NAVSCAN32.EXE NAVSCAN32.exe
X
Added by the W32/Sdbot-DO worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More
NAVSCAN64.EXE /s NAVSCAN64.EXE
X
Added by the W32/Rbot-T worm. This infection connects to an IRC server where it waits for remote commands. ... Read More
NAVSCANNER32 NAVSCANNER32.EXE
X
Added by the RBOT.QC WORM!
Norton Antiviral Scanner navscnr.exe
X
Added by the W32/Delbot-K worm and IRC backdoor.
NvCplDmn NAVSVC.EXE
X
Added by an unidentified VIRUS, WORM or TROJAN!
Windows Server Management Services navsvc.exe
X
Added by the W32/Rbot-GCH worm and IRC backdoor.
Norton SpySweeper AutoUpdate navsw.exe
X
Added by the FORBOT-AS WORM!
startkey navsys.exe
X
Identified as a variant of the Backdoor.Bifrose malware.
Norton AntiVirus Sys NAVsys32.exe
X
Added by a variant of the WOOTBOT WORM!
NAVtask NAVtask.exe
X
Added by the W32/Rembot-A backdoor/worm. This infection connects to an IRC server and waits for commands to execute. ... Read More
ms unix navupdate64.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
NAV Auto Updates navupdaters.exe
X
Added by the W32/RBOT-UN WORM!
NAV Auto Updates navupdaterx.exe
X
Added by a variant of the WIN32.RBOT WORM!
RunDll.exe navupdt2.exe
X
Added by the Troj/Banloa-BJN downloading Trojan.
norton updater navupdtr.exe
X
Added by the SDBOT.AXV WORM! ... Read More
[not used] Navw32.exe
X
Added by the Troj/Agent-CG backdoor.
NAVWatch NAVWatcher.exe
X
Identified by Sunbelt Software as a variant of the VX2.Transponder Trojan.
NAV_Update NAV_Update.exe
X
Unidentified WORM or TROJAN!
nawadll32 nawadll32.exe
X
Added by the W32/Sdbot-ZI worm. When started, this infection will connect to a remote IRC server and wait for commands to execute. ... Read More
nawdll32 nawdll32.exe
X
Added by the W32/Sdbot-Z worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
nax12 nax12.sys
X
Identified as a variant of the Backdoor:Win32/Rustock.gen rootkit.
helloworld nb32ext3.exe
X
Added by the MYTOB.JT WORM! ... Read More
{fa19bd7e-50bc-4203-80ac-c4edc81ca9a3} nbbrhbd.dll
X
A Trojan used by the rogue anti-spyware program AntiVermins. This Trojan, when installed, will display fake security alerts on your taskbar and instal ... Read More
Microsoft Update nbdos.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
NBJ NBJ.exe
U
Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups ... Read More
NbkCtrl NbkCtrl.exe
U
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here ... Read More
NovaBackup * Tray Control NbkCtrl.exe
U
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number ... Read More
NotebookManager nbm.exe
?
Associated with Acer notebook PCs. What does it do and is it required?
Ehch nbme.exe
X
PurityScan delivers advertisements to your computer.
NBService NBService.exe
U
Service used to run backups using Nero BackItUp.
Windows NB Service nbsrv.exe
X
Added by the W32/Tilebot-KK worm and IRC backdoor.
nbsession nbsystem.exe
X
Added by Backdoor.DTR. This infection listens on port 10001 awaiting remote commands. ... Read More
Netbios Helper nbthelp.exe
X
Added by the W32/Codbot-D WORM! This infection is installed as a service which is started even in safe mode. The file is found in the Windows system ... Read More
netbios helper nbthlp.exe
X
Added by the PWS-BANKER.Y password stealing TROJAN! ... Read More
NetBIOS Helper nbthlp.exe
X
Added by the W32.Toxbot.AL worm and IRC backdoor.
windows update 64 nbupd64.exe
X
Added by a variant of the W32/FORBOT WORM! ... Read More
nbustrce1d nbustrce1D.exe
?
Device driver, possibly CD-ROM/DVD-ROM related - what exactly is it and is it required in startup? ... Read More
NCD ncd.exe
N
Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path ... Read More
NetCruiser Dialer NCDialer.exe
U
NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detec ... Read More
SoundTap Recorder nchssvad.sys
Y
Audio driver for audio chipset from Knowles.
[Unknown] nclaby.sys
X
A variant of the Haxdoor rootkit.
nclabydll nclabydll.dll
X
Added by a variant of the Haxdoor Trojan. This infection utilizes the nclaby.sys rootkit. ... Read More
NCLAUNCH NCLAUNCH.Exe
U
Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. ... Read More
Nokia Connection Monitor NclConf.exe
N
Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Conne ... Read More
Srv RPCrom NClienti386.exe
X
Added by the WATSOON.A TROJAN!
Nokia Tray Application NclTray.exe
U
Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example O ... Read More
NuTCSetupEnviron ncoeenv.exe
Y
Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if ... Read More
NcpBudget ncpbudgt.exe
Y
Related to the FEC Secure IPSec VPN client.
caribi ncrjf.dll
X
Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your compute ... Read More
Compuware Distributed Analyzer Service NCS.exe
Y
Added as part of the Compuware DevPartner Studio.
nvscv32 ncscv32.exe
X
Added by the W32/Fujacks-L backdoor virus.
Nvidia Control Panel ncsvc32.exe
X
Added by an unidentified VIRUS, WORM or TROJAN!
securw Nctrup.exe
X
Added by the W32/Nopir-B WORM, which will delete all COM and MP3 files from the computer, and disable taskmanager, registry tools, and access to the ... Read More
System Manager ncvs32.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
benzaldoxime nczupfw.dll
X
Added by a Zlob Trojan which installs AntiVirgear 3.8 and display fake security alerts in your Windows taskbar. ... Read More
nDaemon ndaemon.exe
Y
Unsupported and discontinued News server for windows by Alt-N.
Norton Disk Doctor Ndd32.exe
N
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually v ... Read More
NDDEAGNT NDDEAGNT.EXE
?
WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services ... Read More
Microsoft PCHealth32 NDDENB.exe
X
Added by the Troj/PWSYahoo-A password-stealing Trojan for the Yahoo Messaging Service. ... Read More
Mirabilis ICQ NDetect.exe
N
If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs ... Read More
NDIS Adapter ndis.exe
X
Added by the SDBOT.VF WORM!
ndisaluo ndisaluo.sys
X
Identified as a variant of the TR/Rootkit.Gen rootkit.
NdisFilter ndisfilter.sys
X
Added by the Troj/NetAtk-F rootkit.
NdisWon NdisWon.sys
X
Identified as a variant of the Ascesso rootkit.
Video Multimedia Driver ndrives32.exe
X
Added by the RBOT-DK WORM!
NDrv NDrv.exe
X
PurityScan/Clickspring adware
NDSTray NDSTray.exe
U
ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a ... Read More
compaq services drivers ndt32.exe
X
Added by the RBOT.CQZ ... Read More
(default) ne.exe
X
Added by the Troj/IRCBot-ZL worm and IRC backdoor.
windows system nec.exe
X
Added by the W32/Mytob-L ... Read More
Necbar Necbar.exe
N
Nec Assistant; Ark's Navigator, a graphical interface for NEC computers
NECMFK necmfk.exe
Y
NEC wireless keyboard driver
Kernel TCP Filtering protocol necsort.sys
X
A variant of the Troj/Haxdor-Gen rootkit.
Necutray Necutray.exe
U
Driver for external USB storage devices (hard drives, flsh disks, etc)
SystemUpdate Negdo.exe
X
Added by the W32/Culler