Bleeping Computer

Welcome Guide    Blogs    Chat    Help    Search    RSS

Welcome Guest (Log In | Create Account) New Member? Join for free.

  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
  Do you have popups or other malware infecting your computer? If so, Start Here!
  Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> Filenames that start with N

A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other    HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23 Rootkit List  · Submit a Startup  · Top Submitters  Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key Startup Database Forum · Computer Help Forums · How to use the Startup Database Enter the filename or keyword you would like to search for: Advanced Search Name Filename Status Description <not used> n.vbe X Added by the W32/AutoRun-SH removable media worm. /l:eng N/A N Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appe ... Read More 17779Proj2002 N/A ? ?? ARCSolo Recovery N/A N Backup software by Computer Associates - no longer supported Batchreg1 N/A N Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during ... Read More DashIE N/A ? Could be related to "Dash Power Shopping" tool bar in IE? Datechecker N/A ? Could be related to this? DDT N/A ? ?? DLHelperEXE.exe N/A X Downloader for Microgaming/Casino software - stealth installed Host N/A X Added by the POPDIS or STARTPAGE.F TROJANS! hpoddt01.exe N/A N Installed by the "HP Photo and Imaging Director" software. If you ask for the imaging software, this program will be started ... Read More HWinst N/A Y For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More IPinst N/A Y For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More IZE N/A ? ?? LASTinst N/A Y For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More MSupdate.exe N/A X CoolWebSearch parasite related - resets home page to an adult content site MSupdater.exe N/A X CoolWebSearch parasite related. Installs the Winshow.dll browser plugin nAv AGENT N/A X Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it cl ... Read More NCClient N/A ? ?? piiserviceOE N/A U Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE ... Read More Recover N/A N Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appe ... Read More regtmlp N/A ? ?? RTStartMute N/A ? ?? rvde N/A X Related to li-speed**** SOFTinst N/A Y For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More TDockNUndock N/A ? Found on a Toshiba laptop - for use with a docking station? TheMainStart N/A ? ?? TWarmBay N/A ? Found on a Toshiba laptop. Related to hotswap bay management? TWBbtn N/A ? Found on a Toshiba laptop UTILsInst N/A Y For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue ... Read More WaveTop Receiver 1 N/A N WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More WaveTop Receiver 2 N/A N WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More WaveTop Upload Manager N/A N WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More Windows Update.exe N/A X Homepage hijacker, see here Winlogon.exe N/A X CoolWebSearch parasite related - resets home page to an adult material site WMBoot N/A N Associated with Logitech Wingman game controllers. Not required but what does it do? ... Read More Nod3d2 Free antivirus N0D32KRN.EXE X Added by the W32/Rbot-ABQ worm. Nod32 Service n0m.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. svtcin n20050308.a.Stub.EXE X Added by Trojan.N20050308.Process TROJAN! Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) ... Read More ntechin n20050308.exe X adware, probably VX2/Look2Me related nsvcin n20050308.exe X adware, probably VX2/Look2Me related tsvcin n20050308.EXE X adware, probably VX2/Look2Me related ... Read More SystemSv121 n2ewma1xxsv234.exe X Added by the Nuwar/Storm worm. MONPluginSrIvcs n3monap23.exe X Added by a variant of the WIN32.RBOT WORM! MSNPluginSrIvcs n3vasap23.exe X Added by a variant of the WIN32.RBOT WORM! [random name] n?lookup.exe X PurityScan/Clickspring adware anbv32 nabv32.exe X Added by the TITOG.C WORM! Net Activity Diagram nad.exe U Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs ... Read More NADaemon NADAEMON.EXE N Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". On ... Read More iCn NAG.EXE N iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist ... Read More Naggerrunkey nagger.exe N Packard Bell Free Internet Signup screen nah_Shell nah_cord.exe X Added by the Trojan.Hanambot Trojan. Trojan.Hanambot is a Trojan horse that steals financial information and opens a back door on the compromised comp ... Read More [not used] Nail.exe X This infection is a Abetterinternet adware variant. It is notoriously difficult to remove and is usually bundled with other malware that are hard to ... Read More Naimagent_UI naimag32.exe Y Workstation background program for Network Associates’ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of t ... Read More GoOutside nakedx.exe X Added by the W32/Sdbot-AGK worm and IRC backdoor. Nakido nakido.exe U Added by the Nakido file sharing software. This software allows you to share files with other people on the Nakido network. ... Read More Application Explorer Naldesk.exe U Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) ... Read More Novell Application Launcher nalntsrv.exe Y Part of the Novell client for Windows. Found in the C:\Program Files\Novell\ZENworks folder. ... Read More Application Window NALWIN32.EXE Y Part of Novell's Zenworks. Found in the C:\Program Files\Novell\ZENworks folder. ... Read More NamedSvc named.exe X Identified by Kaspersky Antivirus as Backdoor.Win32.IRCBot.anp. NAMEDPIPE SYSTEM namedpipe.exe X Added by the W32/Mytob-FH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Ya Salam NancyAjram.exe X Added by the W32.Jalabed@mm mass-mailing worm. {9B71D88C-C598-4935-C5D1-43AA4DB90836} nando.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More Nano Antivirus nanoav.exe X Added by the Nano Antivirus rogue anti-spyware program. rnaomflt naomf.exe U Naomi internet filtering software ... Read More NAP32 NAP32.exe X Premium rate adult content dialer nvpatch napatch.exe X Added by the W32/Sasser-F worm. Windows Logon Service napi32.exe X Added by the W32.Spybot.ANDM worm. W32.Spybot.ANDM is a worm that spreads through mIRC and to network shares protected by weak passwords. It also spre ... Read More naPrdMgr naPrdMgr.exe X Added by the W32/Tilebot-KX worm and IRC backdoor. NapsterShell napster.exe N Windows system tray icon for the music download service, Napster. narqwe narqwe.sys X Added by the Backdoor.Rustock backdoor rootkit. RunNarrator Narrator.exe U Microsoft's Narrator program which is an accessibility program that reads the text on your screen to you via your speakers. ... Read More Network Administration NAS.exe X Added by the ANTILAM.20.Q TROJAN! Nas nas.exe X Added by the Adware.ClearX adware program. Adware.ClearX is a program that attempts to modify settings in Internet Explorer. It redirects both the hom ... Read More 4wd!!! Natal!.pif X Added by the OPASERV.AI WORM! Natal Natal.scr X Added by the OPASERV.AE WORM! NaturalColorLoad NaturalColorLoad.exe U Natural Color help users synchronize the on screen colors with printed ones. Microsoft Update NAV.exe X Added by the RBOT-IV WORM! System nav32.exe X Added by the W32/Rbot-BHV worm and IRC backdoor. Norton Auto Protect nava.exe X Added by an unidentified WORM or TROJAN! Nortan Anti Virus nava32.exe X Added by Backdoor.FTP_Ana.C. This infections listens on TCP port 666. Windows Print Spooler NavAgent32.exe X Added by an unidentified VIRUS, WORM or TROJAN! navapp navapp.exe X NavExcel adware variant autoprotectu navapq32.exe X Added by an unidentified WORM or TROJAN! compaq service drivers navapqwa.exe X Added by a variant of the W32/SDBOT WORM! ... Read More Norton AntiVirus Auto Protect Service navapsvc.exe Y This service is used by Norton Antivirus to run in the background and detect when any files that are infected with malware are stopped from running. ... Read More Windows Server Management Services navapsvc.exe X Added by the Troj/Rbot-GGW worm and IRC backdoor. navapsvc navapsvc.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Norton Service Process navapvc.exe X Added by a variant of the AGOBOT/GAOBOT WORM! NAV Agent navapw32.exe Y Norton Anti-Virus's background scanning process navapw32 navapw32.exe Y Norton Anti-Virus's background scanning process Norton Auto-Protect navapw32.exe Y Norton Anti-Virus's background scanning process NAV Auto Update Navautoupdate.exe X Added by a variant of the SPYBOT WORM! Explorer navawp32.exe X Added by the Troj/Ronoper-B backdoor trojan. Corel Reminder NAVBROWSER.EXE N If you don't want to register Corel products and be reminded about it every 2 weeks disable it ... Read More QTSvc navchk.exe X Premium rate adult content dialler SystemService navchk.exe X Premium rate adult content dialler schedulermgr navchk.exe X Premium rate adult material dialer System Information Manager Navcpe.exe X Added by the SDBOT-QB WORM! NAVENG naveng.sys Y Driver used by Symantec Antivirus. NAVEX15 navex15.sys Y Driver related to the virus definitions of Symantec Antivirus. microsoft updating navguard.exe X Added by the RBOT.HW WORM! ... Read More Naviscope naviscope.exe U Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-cl ... Read More navregreminder NavLoad.ini N Corel, HP or ScanSoft registration reminder; not required NavLogon NavLogon.dll Y Part of the Norton Antivirus product. Microsoft Update navmgrd.exe X Added by the SDBOT.DP TROJAN! navp.exe navp.exe X Added by the AGOBOT-OE WORM! NavPass NavPass.exe X Free system for gaining access to and downloading from adult content web-sites cpntmgc navpmc.exe X MagicControl downloader trojan variant nav auto prot navprot1.exe X Added by the RBOT.ZAC WORM! ... Read More Norton AutoProtect navprot32.exe X Added by the W32/Rbot-UX worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. ... Read More NAV Auto Protect navprotect.exe X Added by a variant of the RBOT WORM! AVSTRT navpsrvc.exe X Added by the W32/Forbot-EF worm. When started this infection connects to a remote IRC server where it waits for commands to execute. These infection ... Read More Symantec Security Routine Addon for Microsoft Windows navpxaw32.exe X Added by the AGOBOT-GJ TROJAN! NAV Scan Service NAVSCAN32.EXE X Added by the SDBOT.VG WORM! NAVSCAN32.EXE NAVSCAN32.exe X Added by the W32/Sdbot-DO worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More NAVSCAN64.EXE /s NAVSCAN64.EXE X Added by the W32/Rbot-T worm. This infection connects to an IRC server where it waits for remote commands. ... Read More NAVSCANNER32 NAVSCANNER32.EXE X Added by the RBOT.QC WORM! Norton Antiviral Scanner navscnr.exe X Added by the W32/Delbot-K worm and IRC backdoor. NvCplDmn NAVSVC.EXE X Added by an unidentified VIRUS, WORM or TROJAN! Windows Server Management Services navsvc.exe X Added by the W32/Rbot-GCH worm and IRC backdoor. Norton SpySweeper AutoUpdate navsw.exe X Added by the FORBOT-AS WORM! startkey navsys.exe X Identified as a variant of the Backdoor.Bifrose malware. Norton AntiVirus Sys NAVsys32.exe X Added by a variant of the WOOTBOT WORM! NAVtask NAVtask.exe X Added by the W32/Rembot-A backdoor/worm. This infection connects to an IRC server and waits for commands to execute. ... Read More ms unix navupdate64.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More NAV Auto Updates navupdaters.exe X Added by the W32/RBOT-UN WORM! NAV Auto Updates navupdaterx.exe X Added by a variant of the WIN32.RBOT WORM! RunDll.exe navupdt2.exe X Added by the Troj/Banloa-BJN downloading Trojan. norton updater navupdtr.exe X Added by the SDBOT.AXV WORM! ... Read More [not used] Navw32.exe X Added by the Troj/Agent-CG backdoor. NAVWatch NAVWatcher.exe X Identified by Sunbelt Software as a variant of the VX2.Transponder Trojan. NAV_Update NAV_Update.exe X Unidentified WORM or TROJAN! nawadll32 nawadll32.exe X Added by the W32/Sdbot-ZI worm. When started, this infection will connect to a remote IRC server and wait for commands to execute. ... Read More nawdll32 nawdll32.exe X Added by the W32/Sdbot-Z worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More nax12 nax12.sys X Identified as a variant of the Backdoor:Win32/Rustock.gen rootkit. helloworld nb32ext3.exe X Added by the MYTOB.JT WORM! ... Read More {fa19bd7e-50bc-4203-80ac-c4edc81ca9a3} nbbrhbd.dll X A Trojan used by the rogue anti-spyware program AntiVermins. This Trojan, when installed, will display fake security alerts on your taskbar and instal ... Read More Microsoft Update nbdos.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NBJ NBJ.exe U Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups ... Read More NbkCtrl NbkCtrl.exe U Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here ... Read More NovaBackup * Tray Control NbkCtrl.exe U Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number ... Read More NBKeyScan NBKeyScan.exe U Part of the BackItUp backup software bundled with Nero 8 Suite. NotebookManager nbm.exe ? Associated with Acer notebook PCs. What does it do and is it required? Ehch nbme.exe X PurityScan delivers advertisements to your computer. NBService NBService.exe U Service used to run backups using Nero BackItUp. Windows NB Service nbsrv.exe X Added by the W32/Tilebot-KK worm and IRC backdoor. nbsession nbsystem.exe X Added by Backdoor.DTR. This infection listens on port 10001 awaiting remote commands. ... Read More Netbios Helper nbthelp.exe X Added by the W32/Codbot-D WORM! This infection is installed as a service which is started even in safe mode. The file is found in the Windows system ... Read More netbios helper nbthlp.exe X Added by the PWS-BANKER.Y password stealing TROJAN! ... Read More NetBIOS Helper nbthlp.exe X Added by the W32.Toxbot.AL worm and IRC backdoor. windows update 64 nbupd64.exe X Added by a variant of the W32/FORBOT WORM! ... Read More nbustrce1d nbustrce1D.exe ? Device driver, possibly CD-ROM/DVD-ROM related - what exactly is it and is it required in startup? ... Read More NCD ncd.exe N Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path ... Read More NetCruiser Dialer NCDialer.exe U NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detec ... Read More SoundTap Recorder nchssvad.sys Y Audio driver for audio chipset from Knowles. [Unknown] nclaby.sys X A variant of the Haxdoor rootkit. nclabydll nclabydll.dll X Added by a variant of the Haxdoor Trojan. This infection utilizes the nclaby.sys rootkit. ... Read More NCLAUNCH NCLAUNCH.Exe U Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. ... Read More Nokia Connection Monitor NclConf.exe N Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Conne ... Read More Srv RPCrom NClienti386.exe X Added by the WATSOON.A TROJAN! Nokia Tray Application NclTray.exe U Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example O ... Read More NuTCSetupEnviron ncoeenv.exe Y Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if ... Read More NcpBudget ncpbudgt.exe Y Related to the FEC Secure IPSec VPN client. caribi ncrjf.dll X Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your compute ... Read More Compuware Distributed Analyzer Service NCS.exe Y Added as part of the Compuware DevPartner Studio. nvscv32 ncscv32.exe X Added by the W32/Fujacks-L backdoor virus. Intelli Mouse Pro Version 2.0B ncsjapi32.exe X Added by the Troj/Buzus-O Trojan. *Intelli Mouse Pro Version 2.0B* ncsjapi32.exe X Added by the W32/Koobface.worm FaceBook and Myspace worm. Nvidia Control Panel ncsvc32.exe X Added by an unidentified VIRUS, WORM or TROJAN! securw Nctrup.exe X Added by the W32/Nopir-B WORM, which will delete all COM and MP3 files from the computer, and disable taskmanager, registry tools, and access to the ... Read More System Manager ncvs32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. benzaldoxime nczupfw.dll X Added by a Zlob Trojan which installs AntiVirgear 3.8 and display fake security alerts in your Windows taskbar. ... Read More nDaemon ndaemon.exe Y Unsupported and discontinued News server for windows by Alt-N. Norton Disk Doctor Ndd32.exe N Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually v ... Read More NDDEAGNT NDDEAGNT.EXE ? WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services ... Read More Microsoft PCHealth32 NDDENB.exe X Added by the Troj/PWSYahoo-A password-stealing Trojan for the Yahoo Messaging Service. ... Read More Mirabilis ICQ NDetect.exe N If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs ... Read More NDIS Adapter ndis.exe X Added by the SDBOT.VF WORM! ndisaluo ndisaluo.sys X Identified as a variant of the TR/Rootkit.Gen rootkit. NdisFilter ndisfilter.sys X Added by the Troj/NetAtk-F rootkit. ArcNet NDIS Protocol Driver Ndisprot.sys X Added by the Trojan.Flush.M Trojan. Trojan.Flush.M is a Trojan horse that impacts network traffic with Address Resolution Protocol (ARP) requests and ... Read More NDISRD ndisrd.sys X Added by the Trojan.Interrupdate Trojan. Trojan.Interrupdate is a Trojan horse that lowers security settings. ... Read More NdisWon NdisWon.sys X Identified as a variant of the Ascesso rootkit. Video Multimedia Driver ndrives32.exe X Added by the RBOT-DK WORM! NDrv NDrv.exe X PurityScan/Clickspring adware NDSTray NDSTray.exe U ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a ... Read More compaq services drivers ndt32.exe X Added by the RBOT.CQZ ... Read More (default) ne.exe X Added by the Troj/IRCBot-ZL worm and IRC backdoor. windows system nec.exe X Added by the W32/Mytob-L ... Read More Necbar Necbar.exe N Nec Assistant; Ark's Navigator, a graphical interface for NEC computers NECMFK necmfk.exe Y NEC wireless keyboard driver Kernel TCP Filtering protocol necsort.sys X A variant of the Troj/Haxdor-Gen rootkit. Necutray Necutray.exe U Driver for external USB storage devices (hard drives, flsh disks, etc) SystemUpdate Negdo.exe X Added by the W32/Culler-C worm that spreads via MSN Messenger. neksolda neksolda.dll X Identified as a variant of the VideoAccessCodec. Price Patrol neo.exe N Price Patrol by Half.com - internet shopping companion for finding the best on-line prices ... Read More Yahoo! Messengger neo32.exe X Added by the W32/Sohana-AK removable media worm. neobus neobus.dll X Added by a variant of the MyGeek/CPVFeed adware. mojnpluginsrivcs neomonap23.exe X Added by a variant of the W32/SDBOT WORM! ... Read More neos neos.exe X Added by the Troj/BdoorB-Fam backdoor. neos neos.exe X Added by the Troj/BdoorB-Fam backdoor Trojan. neqprvfy.exe neqprvfy.exe ? Appears to be related to the downloading of some application - possibly verifying updates? ... Read More Ner0 Check ner0check.exe X Added by a variant of the RBOT WORM! NeroAutoStartClient NeroASM.exe X Added by the AGOBOT.VG WORM! NeroCheck nerocheck.exe U Associated with "Nero Burning Rom" CD writing software. Checks for driver issues ... Read More NeroFilterCheck NeroCheck.exe U Associated with "Nero Burning Rom" CD writing software. Checks for driver issues ... Read More sheduler nerocheck.exe X Added by the WIN32.TACTSLAY.B TROJAN! ... Read More Nero Checker nerocheck.exe X Added by the Troj/Proxy-X Trojan. NeroFilterCheck NeroChek.exe X Added by the TSPY_AGENT.AAVG spyware Trojan. stubpath nerodll.exe X Added by the Troj/Bifrose-HY Trojan. NeroFil NeroFil.EXE X A variant of the IRCBot family of worms and IRC backdoor Trojans. NeroLoader NeroLoader.exe X Added by the Troj/Bancban-EJ password-stealing Trojan of banking websites. SERV PacK2 nerx.exe X Added by the W32/Sdbot-ACP backdoor and IRC worm. Microsoft Neser Experience nese.exe X Added by an Rbot WORM variant! msdn nese.exe X Added by the SDBOT.AHY WORM! nested nested.sys X Identified as a variant of the Backdoor:Win32/Rustock.gen rootkit. system32 NeT-BoT.exe X Added by the AGOBOT-LJ WORM! net net.net X Added by the Troj/Mdrop-CIF Trojan. N2PTray Net2fone.exe U An Internet telephony application. Needed only if you have an account at Net2Phone, Inc ... Read More Microsoft Windows Internet Connections Manager net32b.exe X Added by the W32/Cuebot-N worm and IRC backdoor. W32/Cuebot-N can spread to computers vulnerable to the Server Service exploit. ... Read More Microsft Update 32 neta.exe X Added by the W32/Rbot-AMI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More NetAccelerator NetAccel.exe U NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to downlo ... Read More Net Accelerator NetAccelerator.exe U Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ... Read More NetAdm7 NETADM7.EXE X Added by the BANCOS.F TROJAN! Network Bridge netadp.exe X Added by the W32/IRCBot-TO worm. Inetapi Netapi.exe X Added by the NETDEVIL.14 TROJAN! Netapi Netapi.exe X Added by the NETDEVIL.14 TROJAN! microsoft system checkup netapi32.exe X Added by the W32/DONK-E WORM! ... Read More netapi32 netapi32.exe X Added by an unidentified TROJAN! Netbeans netbeans.exe X Added by the W32/Delbot-R worm and IRC backdoor. W32/Delbot-R spreads to other network computers by scanning network shares for weak passwords and by ... Read More TCP/IP NetBIOS netbios.exe X Identified as a IRC Backdoor. NetBioy Client netbioy.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NetBTD(ntbtd) netbtd.exe X Added by the W32/Sdbot-BLW worm and IRC backdoor. Intelli2k netbug.vbs X Added by the VBS/VBuggy-A networm worm. boby netburn.scr X Added by the Troj/Bancban-OX banking Trojan. If you are infected with this Trojan it is advised that you immediately change all the passwords for you ... Read More Paradyne ADSL Network Driver V2.3 netcfgx32.exe X Added by the Troj/Delf-EYS Trojan. netchecker netcheck.exe X Added by the Troj/Daemoni-AP Trojan. Netline User netchk.exe N Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon ... Read More Network Client netclnt.exe X Added by the Trojan.Boxed.A Trojan. Windows Networks netcog.exe X Added by the W32.Mytob.IA@mm worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More netconf32 netconf32.exe X Added by the W32/Tilebot-BN worm and IRC backdoor. netconfig netconfig.exe X Added by the NETCONF TROJAN! Networks Configurator NetConfs.exe X Added by the RBOT-OX WORM! Microsoft Network Daemon for Win32 Netd32.exe X Added by the SDBOT.R TROJAN! MicrosoftNetwork Daemon for Win32 NETD32.EXE X Added by the RANDEX.F WORM! MS_NETD_WIN32 netd32.EXE X Added by the RANDEX.F WORM! load32 netda.exe X Added by the NIBU.E TROJAN! netdaemon netdaemon /v X Malware designed to "kill" a number of antispyware applications (SpyBot, Giant, SpyDoctor, SpySweeper, SpyHunter, Anvir, WinPatrol, and more) ... Read More xload32 netdd.exe X Added by the NETSPY TROJAN! Network DDE Client netddeclnt.exe X Added by the W32/Codbot-M worm and IRC backdoor trojan. NetDDE Server netddesrv.exe X Added by the W32/Codbot-Y worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More Server Network Debug NetDebug.exe X Added by the W32/VB-DOS worm. Iusage netdet.exe N Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up ... Read More NetWork Device Switch NetDevSW.exe U Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and ... Read More netdll32 netdll32.exe X Added by the CRYPTER.A TROJAN! 4684735485910 netdll32.exe X Added by the W32/Sdbot-DEV worm. netdllex netdllex.Exe X Added by the CRYPTER.A TROJAN! NetDriver netdriver.dll X Added by the Troj/Dloadr-CIB downloader Trojan. Network DRV netdrvr.exe X Added by the W32/Tilebot-CO worm and IRC backdoor. MSDRV NetFilter.exe X Added by the Trojan.Interrupdate Trojan. Trojan.Interrupdate is a Trojan horse that lowers security settings. ... Read More Microsoft netfix32.exe X A variant of the RBot family of worms and IRC backdoor Trojans. NETFP32.EXE NETFP32.EXE X Added by the AGENT.CD TROJAN! netfxupdate netfxupdate.exe ? Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? ... Read More NetFxUpdate_v1.0.3705 netfxupdate.exe ? Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan? ... Read More NetFxUpdate_v1.1.4322 netfxupdate.exe ? Part of the Microsoft .Net Framework. Unsure if its required to run. NetGuard NetGuard.exe U FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor Windows System Configuration nether.exe X Added by the W32/Opanki-AB worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More ASDPLUGIN Netherlands.exe X AsdPlug premium rate adult content dialer variant hdlpscom netilxgn.exe X Added by the W32/Rbot-FXD worm and IRC backdoor. W32/Rbot-FXD may spread using a variety of techniques including exploiting weak passwords on computer ... Read More NETINFO netinfo.exe X Added by the W32/Tilebot-J worm. SystemMap32 Netisp32.vbs X Added by the REDIST.C WORM! NetworkKey netkey.exe X Added by the Troj/IRCBot-AJ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Net Functions Library netlib.exe X Added by the Troj/Crater-A backdoor trojan. <not used> NETLIB32.DLL X Added by the Troj/Oscor-G backdoor Trojan. Windows Netlib Service netlib32.exe X Added by the W32/Tilebot-IG worm and IRC backdoor. Netlimiter Netlimiter.exe U Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o ... Read More NetLink netlink32.exe X Added by the GAOBOT.WO WORM! Network Performance Alerts netlog32.exe X Added by the W32/Mofei-T worm and backdoor. W32/Mofei-T may attempt to spread via network shares protected by weak passwords. ... Read More NetLogon netlogin.dll X Added by the Backdoor.Fuwudoor backdoor. Microsoft System Checkup netlogin32.exe X Added by the W32/SdBot-GN worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More WinIgon netlogon.exe X Added by the Backdoor.Armageddon backdoor. ComService Netlogon.vbs X Added by the VBS/Edibara@M virus. vtmesys netlprto.exe X Added by the W32/Rbot-GNA worm and IRC backdoor. 1CmailS NETMAIL.EXE ? ?? {29123221-3AF8-488c-85DE-6B3EC59E8074} netmedia.exe X Added by the Adware.NetMedia adware. Adware.NetMedia is a security risk that displays advertisements while a user browses the Internet. ... Read More Microsoft NetMeeting Associates, Inc. NetMeeting.exe X Added by a variant of the LOVGATE WORM! NetMeter NetMeter.exe X NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". ... Read More C:\Program Files\NetMeter\NetMeter.exe NetMeter.exe N Added by the NetMeter bandwidth meter. "NetMeter is a small, customizable network bandwidth monitoring program for Windows 95/98/98SE/M ... Read More NetMon netmon.exe X Added by the MIMAIL.M WORM! Network Monitoring Service NETMON.EXE X Added by the W32/Codbot-A backdoor. Net Functions Monitoring Netmon.exe X Added by the W32/Codbot-R worm and IRC backdoor. Network Monitor netmon.exe X Added by the Adware.Network_Monitor adware. NETMONW NETMONW.EXE X The Troj/Bdoor-FX TROJAN adds this, then automatically contacts a particular URL in order to download an additional file with further commands. ... Read More netmsg netmsg.exe U Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receiv ... Read More Network System Logon netmsvc.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Network ODBC NetODBC.exe X Added by the W32.Snaban worm. W32.Snaban is a worm that spreads by copying itself to removable drives and network drives on the compromised computer. ... Read More netpc32.exe netpc32.exe X Malware, probably CoolWebSearch parasite related NetPerSec NetPerSec.exe N NetPerSec - measures the real-time speed of your Internet connection NetBIOS Protection netpt.sys X Identified as not-a-virus:Monitor.Win32.NetMon.a by Kapersky. NetPumper NetPumperIEProxy.exe N NetPumper download manager - bundles Cydoor and SaveNow adware, see here Netropa Internet Receiver Netropa.exe X Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware ... Read More NetRun NetRun.exe U NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost ... Read More arsch nets.exe X Added by the W32/Forbot-EL, it's displayname is "Indexing Provider". Microsoft Synchronization Manager netscape.exe X Added by the RANDEX.AE WORM! Netscape Messenger NETSCAPE.EXE N In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, an ... Read More Mozilla Quick Launch Netscp6.exe N Netscape 6 and Mozilla browsers Netscp6 Netscp6.exe N Netscape 6 NetSendServer NetSend.exe X Added by the Troj/Hupigon-DQ backdoor Trojan. Messenger Protocol netsender.exe X Added by the W32/Sdbot-ACC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Netman Netserv.dll X Added by the Troj/Protux-E Trojan. SystemNetwork NETSERV.EXE X Added by the NETCONTROL VIRUS! .NET Runtime Optimization Service NETServ.exe X Added by the W32/Sdbot-CSA worm and IRC backdoor. W32/Sdbot-CSA spreads to other network computers by exploiting common buffer overflow ... Read More NetService NetService.exe X Added by the W32/Silly-F worm. DDMP netservice.exe X Added by the Troj/Delf-EXQ Trojan. test netservice.exe X Added by the Troj/Bckdr-QJQ backdoor Trojan. Logical_Disk netservice.exe X Identified by Trend Micro as the BKDR_HUPIGON.EVG backdoor Trojan. ctfmon netservice.exe X Identified by Trend Micro as the BKDR_HUPIGON.EVG backdoor Trojan. Microsoft netshield.exe X Identified as the Backdoor.Win32.Agent.aqb malware. Networks Controler Netsis.exe X Added by the RBOT-NG WORM! Win32 LanMgr netspool.exe X Added by the W32/Perin-A worm and IRC backdoor. Microsoft netsrv.exe X Added by the W32/Rbot-GOS worm and IRC backdoor. [not used] netsrv16.dll X Added by the Troj/Riler-O backdoor Trojan. SynUSB Manager netsrv16.dll X Added by the Troj/Riler-O backdoor Trojan. NET protection system netst.exe X Identified as the Backdoor.Rizo.A malware. nstat netstat.exe X Adult content dialler win32.trojan.downloader netstat2.exe X Added by the Trojan.RealSearch TROJAN! Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) ... Read More MSN netstats.exe X Added by the Worm.IRCBot.UXP worm and IRC backdoor. IPv6 STUN Service netstun.exe X Added by a variant of the SDBOT WORM! netsup netsup.dll X Identified as the Adware.Agent Trojan. Optimum Online Netsurf.exe X An Optimum Online application that is used to display advertisements. netsv32 netsv32.exe X Added by the SDBOT-PX WORM! Network Service Manager netsvc.exe X Added by a variant of the AGOBOT/GAOBOT WORM! Network Service Manager netsvc.exe X Added by a variant of the GAOBOT/AGOBOT WORM! Windows .Net Manager netsvc.exe X Added by the Troj/Dloader-NY trojan. Internet Services Netsvc.exe X Added by the WORM_MYTOB.NH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Server Management Service netsvc.exe X Added by the W32/Tilebot-IF worm and IRC backdoor. Net Service Monitor netsvc.exe X Added by the W32/Rbot-FZD worm. Microsoft Network Service netsvc.exe X A variant of the Backdoor.Win32.Rbot.eac family of worms and IRC backdoor Trojans. ... Read More Microsoft Net Driver NETSVC.exe X Added by the W32.Momib.A worm. Video Process netsvcs.exe X Added by the AGOBOT.LH WORM! NetSTrSvc netsvcs.sys X Added by the Troj/HacDef-AM rootkit. winsock2 netsvr.exe X Added by the AGOBOT.LY WORM! rsync netsync.exe X Pops-stop.com parasite, a IEPageHelper/SafeSurfing adware variant Network System NetSystem.exe X Added by the Troj/QQRob-ADE password-stealing Trojan. NettGain2000 Verifier NettGain2000 Verifier.exe Y Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed. ... Read More TCP/IP Network Throttle netthrot.exe X Added by the W32/Tilebot-JO worm and IRC backdoor. NetTime NETTIME.EXE U From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you t ... Read More NetTurbo netturbo.exe U NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled ... Read More netupdate32 netupdate32.exe X Added by the worm and IRC backdoor. Chckup Netverchk.exe X Identified by AntiVir as TR/Dldr.Age.66267.A. Microsoft Internel Corporat netvhost.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. netview netview.exe X Added by the Backdoor.Bifrose.L backdoor. FASTTRACKNETVISION NETVISION.exe X Added by the Dial/DialCar-Z premium rate dialer.. NetWatch32 netwatch.exe X Added by the MIMAIL.C WORM! Network netwin.exe X Added by the W32/SillyFDC-CG removable media worm. Win Net Wks32 netwks32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Update 32 network.exe X Added by the W32/Rbot-AQE worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft Update 32 network.exe X Added by the W32/Rbot-ARZ worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. ... Read More Network Location Awareness Network.exe X Added by the Troj/Dloadr-BBE Trojan. Network IPv6 network.exe X Added by the W32/VB-DYF worm. NetworkClient NetworkClient.exe X Added by the LEMUR WORM! windows services NetworkDriver32.exe X Added by an unidentified WORM! Windows Services NetworkDrivers.exe X Added by the W32/Sdbot-YO worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft Network Neighbourhood networknbh.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. microsoft network Networksystem.exe X Added by a variant of the W32/SDBOT WORM! ... Read More microsoft xpsp2 Networksystem.exe X Added by a variant of the W32/SDBOT WORM! ... Read More {C1A2FDA2-1A5B-2A8F-F3A2-B22DA1A3C41D} netwrap.dll X Added by a rogue antispyware program who's affiliates install files that replaces the Windows wallpaper with a fake virus alert message and issues fak ... Read More WinSig NetXP.exe X Added by the BANKER-FN TROJAN! Windows Media Upgrade NeUpgrade.exe X Identified as Backdoor.Win32.Rbot.bmf. This infection is a worm and IRC backdoor. ... Read More NeuroMedia(IESpeaker) NeuroMedia.exe X Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not i ... Read More Nevwoek conectin Nevwoek.exe X Added by the Troj/GrayBrd-V Trojan. Scan Fonts New Arial Kotim.exe X Added by the W32/VB-DZA worm. New Folder New Folder.exe X Added by the W32/VB-EAS worm. Microsoft Internet new.exe X Added by the Troj/Banker-DSL Trojan. {F3D0D422-CE6D-47B3-9CE6-C54DD63F1ADB} new123.sys X Added by the Troj/QQPass-AIT Trojan. [Various Names] new32.exe X Part of the Wareout infection as described here. [Various Names] newbreed.exe X Part of the Wareout infection as described here. Microsoft Windows DLL Services Configuration newdll.exe X Added by the W32/Sdbot-ZR worm. When started, this infection connects to a remote IRC server and waits for commands to execute. ... Read More Microsoft Windows DLL Services Configuration newdll2.exe X Added by the W32/Sdbot-ABD worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft Newss newhost.exe X Added by an unknown Trojan. {A6011F8F-A7F8-49AA-9ADA-49127D43138F} NewInfo.dll X Added by the Troj/QQPass-AOL Trojan. {DEC39E0E-F1F2-41E5-80B8-592A67AB0AA5} NewInfo.rxk X Added by the Troj/QQPass-AOQ Trojan. SystemSv12 newmaxxsv234.exe X Added by the Troj/Tibs-TS Trojan. Remote Protection File System NewName.BAT X Added by the W32/WinLose-A worm. newname newname2.exe X Added by the Troj/Drsmartl-V Trojan. newname newname2.exe X Added by the Troj/Drsmartl-V Trojan. newname newname4.exe X Added by the Troj/Drsmartl-V Trojan. popuppers newpop63.exe X Popuppers adware variant ... Read More Newsalrt NEWSALRT.EXE N MSNBC News system tray utility to alert you to new news supernews12 newsd32.exe X A TROJAN/downloader variant adds the file. MySoftware NewsFlash Newsflsh.exe N A program that runs in your task bar and receives alerts and release information on MySoftware products. ... Read More Newsgroup lptt01 newsgroup.exe X Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Ra ... Read More Newsgroup ml097e newsgroup.exe X Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Ra ... Read More NewsUpd newsupd.exe N For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here. ... Read More prodigy1 newsystem25.dll X Added by the W32/IRCBot-XL worm and IRC backdoor. {0EA66AD2-CF26-2E23-532B-B292E22F3266} NewTemp.dll X Added by the Troj/QQPass-AOU password-stealing Trojan. NewtonKnowsUpd NewtKnow.exe ...NewtnUpd.dll, runkey X NewtonKnow hijacker newupdate newupdate.sys X Added by the Troj/Hupigo-AW Trojan. !!!! new_drv.sys X Added by the Troj/NTRootK-BE rootkit Trojan. UPSI_1.exe New_Folder(1).exe X Added by the W32/SillyFD-C worm that spreads to removeable storage devices. Shell2 New_Folder(1).exe X Added by the W32/SillyFD-C worm that spreads to removeable storage devices. Nex nex.exe X Added by the Troj/Agent-FPQ Trojan. nexkaqf nexkaqf.sys X Added by the Backdoor.Rustock backdoor rootkit. {eb86b46a-d6db-4478-8f5f-06cb2ebc1b35} nexpegp.dll X Zlob Trojan that installs VirusProtectPro 3.6 and shows fake security alerts from your Windows taskbar. ... Read More Nfpt Microsoft Config nfdtrknm.exe X Added by Rbot variant. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More NGClient ngctw32.exe U Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually ... Read More Postfix patch ngfqes.exe X Added by the Troj/Sdbot-BX backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execu ... Read More Windows Global Init ngpsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. ngpw36 ngpw36.exe X AdBlaster adware variant Norton GProtect ngrfn.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. NGServer ngserver.exe N Symantec/Norton Ghost Console service NGTray ngtray.exe Y Added by the Symantec Ghost. If you are running the ghost console on a server on your network then this process will have been installed as part of th ... Read More ngwstxfd ngwstxfd.dll X Identified as a variant of the VideoAccessCodec adware. NotebookHardwareControl nhc.exe U Added by the Notebook Hardware Control hardware management software for various notebooks. ... Read More Netropa NHK Server Nhksrv.exe N This program is installed by certain Dell and Compaq computers. It is used to disable any configured hotkeys while the screensaver is running. ... Read More Windows System nibie.exe X Added by the W32.Mytob.FO@mm worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More netmeter NielsenOnline.exe X Appears to have possible Malware functions, for more information Click_Here CostAware niIPCApp.exe U NetInternals CostAware - download quota measuring tool nikLaus nikLaus.exe X Added by the NIKLAS WORM! Net-It Launcher NILaunch.exe N Net-It - web publishing software Netintelligence Home Edition Web Filter NINDFltr.exe Y Added by the Netintelligence parental controls product. WINDOWS SYSTEM ninfoie.exe X Added by the W32.Mytob.EE@mm mass-mailing worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More NInit NInit.exe N Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not ... Read More ninsvc ninsvc.exe X Added by the W32/Akbot-AL worm and backdoor. NiroFile Updated NiroFile.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NiroFilter Updated NiroFilter.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nisdisa nisdisa.exe X Added by the Email-Worm.Zhelatin worm. Email-Worm.Zhelatin normally received as an email attachment; may consist of a rootkit, a peer-to-peer client, ... Read More nisserv NISSERV.EXE Y Norton Personal Firewall Nisum NISUM.EXE Y Norton Personal Firewall nisvcloc niSvcLoc.exe U Related to National Instruments Corp. LabView ... Read More WinNite niteaim.exe X Added by the W32.Opanki.B backdoor/worm. NITE niteaim.exe X Added by the W32.Opanki.C AIM worm and IRC downloader. irfk NITEAIM.EXE X Added by the W32/Sdbot-AEJ worm and IRC backdoor. Wkyo86 Nitip.exe X Added by the W32/Pitin-A networm worm. niu niu.exe X Added by the W32.SillyFDC.BCS removable media worm. W32.SillyFDC.BCS is a worm that spreads by copying itself to removable drives. ... Read More NIW NIW.exe X Added by the Troj/Lewor-U Trojan. Access Protocol nixfver.exe X Added by the BKDR_PPDOOR.AS backdoor. Norman NJeeves Njeeves.exe Y Part of Norman Antivirus. NJG40 NJG40.EXE X Added by the BANCOS.D TROJAN! Boot Manager Njgal.exe X Added by the KILO TROJAN! NJIL njil.exe X Added by the Troj/Delf-ELF Trojan. Msn Messenger nkbf.exe X Added by the W32/Rbot-GMQ worm and IRC backdoor. NK45 file system driver nkcfg.sys X Added by the TSPY_HAXSPY.AD rootkit. MSN Service Utilities nkn.exe X Added by the W32/Kelvir-BC MSN Messenger worm. MagicSet.exe nkruls.exe X Added by the W32.Slurk.A worm. This infection will also configure itself as debuggers for many other security related programs. ... Read More nvidia control daemon nksvc32.exe X Added by the W32/AGOBOT-OV WORM! ... Read More nkunpack nkunpack.dll X Added by the TSPY_HAXSPY.AD Trojan. This infection utilizes the nkcfg.sys rootkit in order to hide its components. ... Read More USB2_04 nkv2.sys X Identified as a variant of the Rootkit.Win32.Agent.tj rootkit. NkvMon.exe NkvMon.exe N Nikon View 5 - for transferring pictures from Nikon digital cameras NkVwMon.exe NkVwMon.exe N Nikon View - for transferring pictures from Nikon digital cameras krn nl.exe X Added by the TSPY_BANKER.GBW information stealing Trojan for online banks. Microsoft (R) Windows Network Latency Controller nlc.exe X Added by the Backdoor.Ranky backdoor Trojan. This infection also installs a Windows service of the same name and filename. ... Read More Microsoft Update Machine nlczty.exe X Added by the W32/Rbot-GUR worm and IRC backdoor. NaviSearch nls.exe X NaviSearch, eXact Advertising variant NLS Monitor nlsmon.exe X Added by the W32/Rbot-AXJ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More ujm nm32.exe X Added by the Troj/Iyus-K password stealing trojan. This infection steals usernames and passwords and sends them to the creator. If you have this inf ... Read More nmapp nmapp.exe N This is the main executable for Network Magic. Network magic helps home network users quickly solve network related problems as well as configure netw ... Read More microsof value nmatt.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More bgmonitor_{79662e04-7c6c-4d9f-84c7-88d8a56b10aa} NMBgMonitor.exe U Related to Nero_Home NMBgMonitor.exe NMBgMonitor.exe X Added by the Troj/Bravo-G Trojan. netmanageimport nmcpdata.exe U NetManage business software related ... Read More nmctxth nmctxth.exe U Part of Network Magic. Network magic helps home network users quickly solve network related problems as well as configure network related services. ... Read More [Various Names] nmdllw.exe X Part of the Wareout infection as described here. NeroHomeFirstStart NMFirstStart.exe U A media indexing program installed with Nero products. More information about it can be found here. ... Read More NMIndexingService NMIndexingService.exe U Service used by Ahead Nero to index the media files on your computer into an internal database. This index can then be used to quickly find your med ... Read More IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} NMIndexStoreSvr.exe U Indexing service that catalogs all the media on your computer so that the files are available to all of the programs in the Nero suite of applications ... Read More IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] NMIndexStoreSvr.exe U Indexing service that catalogs all the media on your computer so that the files are available to all of the programs in the Nero suite of applications ... Read More _Cat1 nmmst.exe X Added by the TROJ_SMALL.SD trojan! Network Trafic Monitoring nmntrng.exe X Added by the W32/Nanpy-O worm. System Document Application nmod.exe X Added by the SDBOT-ABB WORM! Microsoft Software Update nmon.exe X Added by the RBOT.HZ WORM! Pure Networks Net2Go Service nmraapache.exe U Part of Network Magic's Net2Go service. "Net2Go service gives users remote access to the shared files on all PCs in their home from an ... Read More Windows driver update nmsmtp32.exe X Added by the W32/Sdbot-JT worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More Network Magic nmsrvc.exe U Part of Network Magic. Network magic helps home network users quickly solve network related problems as well as configure network related services. ... Read More Pure Networks Network Magic Service nmsrvc.exe U Part of Network Magic. Network magic helps home network users quickly solve network related problems as well as configure network related services. ... Read More NMSSvc NMSSVC.EXE ? NIC Management Service - diagnostics program for Intel Pro family network cards [not used] nmst.exe U Added by the Spyware.NetMama surveillance software. This program should be uninstalled if it was not installed by yourself. ... Read More _cat2 nmstt.exe X Added by the TROJ/SMALL-DT downloader TROJAN! ... Read More NMSVC nmSvc.exe Y Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call ... Read More nMTaskBarService nMtsk.exe ? Taskbar control for ISDN NetMod modem. Sorry, I dont know whether or not it is required. Unknown if this is a required item for startup. ... Read More nMtskBar Service nMtsk.exe ? Taskbar control for ISDN NetMod modem. Sorry, I dont know whether or not it is required. Unknown if this is a required item for startup. ... Read More Windows Zero Spooler nmvcs.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Remove me nmzbxdnzjsa.exe X Added by the Troj/Sdbot-SZ TROJAN/IRC backdoor to allow malicious access & control of the computer. ... Read More Windows Audio Components nncsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Audio System nndsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nnll nnll.exe U Net Nanny internet filter ... Read More Norton Navigator Loader nnloader.exe N An older Norton utility for file management under Windows 95. More information here ... Read More nnmgr nnmgr.exe X Added by the Adware.FFToolBar adware toolbar. nnqcouu nnqcouu.exe X The Abi Network adware NNServ nnrun.exe X Added by the New.net adware. NeroNETTrayIcon NNServiceCtrl.exe N System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared acros ... Read More NNSvc nnsvc.exe U NetNanny internet filter NoAds NoAds.exe U Blocks advertisement banners in Internet Explorer NoAdware NoAdware.exe U NoAdware Adware/Spyware remover - initially considerered a "rogue" program - see here . Has since apparently mended its ways: see note ... Read More noadware3 NoAdware3.exe U NoAdware Adware/Spyware remover - initially considerered a "rogue" program - see here. Has since apparently mended its ways: see note ... Read More noadware4 NoAdware4.exe U NoAdware Adware/Spyware remover - initially considerered a "rogue" program - see here . Has since apparently mended its ways: see note ... Read More nobicyt Service Nobicyt.exe X Identified as a variant of the Backdoor:Win32/Refpron.C malware. Java Update nod.exe X IRCBot variant. ActiveScript32 nod.exe X Added by the W32/Sohana-AJ worm. Nod23 Service nod23.exe X Added by the W32/Rbot-GMK worm and IRC backdoor. Nod32 Service nod32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Update Nod32Av.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Nod32CC nod32cc.exe U Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button ... Read More NOD32kernel Nod32krn.exe Y Nod32 Antivirus Version 2 Nod32 Free antivirus nod32krn.exe X Added by the W32/Rbot-AAO WORM/IRC backdoor trogan! nod32kui nod32kui.exe Y Nod32 Antivirus Version 2 Rsystem nod32kul.exe X Unknown malware. Nod32 Service nod6.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Nod32 Service nod64.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Nod3g2 Service nod6dr4.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NOD AV service nodantivir.sys X Added by a variant of the Troj/Haxdor-Gen rootkit. NodeMnger Nodemngr.exe ? Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon? ... Read More NoDNS NoDNS.exe X Identified as a variant of the Trojan.Agent.AHBF malware. {6825FAC3-D7D2-4045-97A2-87DF42CB6728} nods32.dll X Added by the W32/AutoRun-AFA removable media worm. Nod29 Service nodwr.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. NTsocket NoeWinnt.exe X Added by the ATAKA-E TROJAN! NOFIIN.EXE NOFIIN.EXE X Added by the Troj/Haxdoor-DP Trojan. Nokia Check nokiacheck.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NokKernel install Nok_install.exe U Added by the Spyware.NokKernel surveillance software. This software should be uninstalled if found on your computer without your knowledge. ... Read More NomdCheck nomdchek.exe N Part of Intel's Native Audio nomtray nomtray.exe U System Tray access to NetMotion Wireless options - including connectivity status (see here) ... Read More nldr32 NonYou.exe X Added by the W32/Saros-A P2P worm. nopctrl nopctrl.dll X Added by a variant of the MyGeek/CPVFeed adware. Speed Disk service NOPDB.EXE Y Disk defragmenter bundled with Norton System Works. Windows noper.exe X Unknown malware. [Various Names] NopeZ.exe X Part of the Wareout infection as described here. nopzet nopzet.dll X Added by a variant of the MyGeek/CPVFeed adware. Bron-Spizaetus norBtok.exe X Added by the W32.Rontokbro.B@mm mass-mailing worm. Nord NORDSYS.EXE X Added by the WORM_NUWAR.PO worm. NortE Antivirus norte.exe X Added by the W32/Rbot-AFE worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More NortE Antivirus norten.exe X Added by the W32/Rbot-AFFworm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More norten Software Intrenet norten.pif X Added by the W32/Rbot-AWA worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More protection Norton Internet Security.exe X Added by the W32.ELITPER.E WORM! ... Read More Wxp4 Norton Update.exe X Added by the ERKEZ.D WORM! norton norton.exe X Added by the W32/Ahker-D mass-mailing worm. Microsoft Norton Antivirus norton.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. ms unix binary Norton2005Update.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More ms unix binary Norton2005Update.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More norton32 norton32.exe X Added by an unidentified VIRUS, WORM or TROJAN! Norton Antivirus nortonav.exe X Added by the W32/Rbot-AYE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Norton Antivirus Updater nortonav.exe X Added by the W32/Delbot-T worm and IRC backdoor. W32/Delbot-T spreads to other network computers by scanning network shares for weak passwords and by ... Read More Windows Xp nortonguard.exe X Added by the W32/Mytob-DZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More nortonp nortonp.exe X Added by the Troj/JD-A password-stealing Trojan. Mcafee Anti Scan NortonScn.exe X Added by a variant of the RBOT WORM! Norton Swap Cleaner nortonswap.exe X Added by the W32/Rbot-MH trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Norton Updater NortonUpdate.exe X Added by an unidentified WORM or TROJAN! NortonAV norton_antivirus.exe X Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program ... Read More IE Processes nosc32.exe X Added by the W32/SdBot-CN backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More noskrnl noskrnl.exe X Added by the Trojan.Peacomm.D Trojan. Trojan.Peacomm.D is a Trojan horse that gathers system information and email addresses from the compromised comp ... Read More noskrnl noskrnl.sys X Added by the Trojan.Peacomm.D rootkit. Trojan.Peacomm.D is a Trojan horse that gathers system information and email addresses from the compromised com ... Read More Loadout Manager nost_LM.exe U Manager for the Belkin Nostromo n50 SpeedPad game controller - see here Media Sariel Number Services notaped.exe X Added by the Troj/DwnLdr-FYA Trojan. KSD2Service notaped.exe X Added by the Troj/DownLd-ABB Trojan. notes notepaad.exe X Added by the RBOT.BME WORM! ... Read More (Default) NOTEPAD.exe X Added by the RUSTY WORM! Note - not to be confused with the valid Windows "NOTEPAD" text editor ... Read More Notepad lptt01 notepad.exe X Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidB ... Read More Notepad ml097e notepad.exe X Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidB ... Read More microsoft notepad notepad.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More NOTEPAD NOTEPAD.exe X Added by the W32/Sdbot-DHU worm and IRC backdoor. Microsoft Notepad Manager notepad.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. EYORE Notepad.scr X Added by the W32/Gimlet-A worm. windows autostart loader notepad32.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Win32 Notepad Services notepad32.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Configuration Loader NOTEPADE.EXE X Added by the W32/SdBot-GD worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More notes notes.exe X Added by a variant of the Rbot worm. This worm, when started, connects to IRC servers where it sits in a desginated channel waiting for commands from ... Read More modems notice.dll X A variant of the IRCBot family of worms and IRC backdoor Trojans. printers notiffy.dll X Added by the W32.Mubla.B worm. [not used] Notify.exe X Added by Backdoor.Armageddon.B Notification Utility notify.exe X Added by the Trojan.Muvipaz Trojan. tpfnf2 notifyf2.dll ? Installed with IBM Thinkpad and Lenovo laptops. Notmad Manager notmgr.exe U Notmad Manager is used to integrate your Creative Labs Nomad MP3 player into Windows Explorer and other applications. ... Read More system23 notPad.exe X Added by the ESTEEMS.D TROJAN! gabougool nounina.exe X Added by the Troj/Agent-JVX Trojan. Disable EHCI nousb20.exe ? ?? Renova Nova.exe X Added by the W32/Levona-A worm. W32/Levona-A spreads to network shares and removable drives. ... Read More operations typhoon rising registration NOVG.EXE N Joint_Operations registration reminder ... Read More Microsoft Internet novo.exe X Identified by Panda Antivirus as Trj/Banker.HYW. If you are infected with this file then you should immediately change your online banking passwords a ... Read More novsvida.exe novsvida.exe X Identified by Panda antivirus as the Trj/Agent.FOB Trojan. Disk Panel Setup npcsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Hti npdor.exe U Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not re ... Read More NFM Service NPDOR9x.exe U Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not re ... Read More Windows Network Logon npesvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NetGroup Packet Filter Driver npf.sys Y Part of the WinPcap packet capture library. This file can be installed by malware but is not considered harmful to your computer. ... Read More NPFMonitor NPFMntor.exe ? Norton AntiVirus Firewall Install Monitor. What does it do and is it required? GLF Network Lan Monitor NPFMNTOR.exe X Added by the W32/Rbot-AGY worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More npf value NPFMONTR.exe X Added by a variant of the W32.SPYBOT WORM! ... Read More ScanReg NPFMONTR.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NPFValue NPFMONTR.exe X Added by the W32/Rbot-GWZ worm and IRC backdoor. NPF Value NPFMONTR32.exe X Added by the W32/Rbot-BBC worm and IRC backdoor. Norton Personal Firewall npfw.exe X Added by the W32/Rbot-UI worm. This infection also has backdoor capabilities via IRC servers, keystroke logging, and cd key harvesting. ... Read More Norton Personal Firewall npfw32.exe X Added by the W32/RBOT-UQ WORM! Network Password Manager npmsvc.exe U Added by the Network Password Manager password management system. Norton Personal Firewall npmsys.exe X Added by the W32/Rbot-ALO trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Thi ... Read More Norton Personal Firewall npmsysnt.exe X Added by the W32/Rbot-TY WORM! File is found in the Windows system folder. Netzip Smart Downloader npnzdad.exe X Advertising spyware RealDownload Express npnzdad.exe X Advertising spyware Norton Protect npprotect.exe X The WORM/backdoor W32/Rbot-WW will add this to the Windows system folder. Windows Audio Panel nppsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NPROTECT nprotect.exe U Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed ... Read More NPROTECT NPROTECT.exe X Added by the Trojan.Syginre Trojan. Trojan.Syginre is a Trojan horse that disables the Windows Firewall and may delete some files from the compromised ... Read More Norton Unerase Protection NPROTECT.EXE Y Related to Symantec's file protection program. This program allows you to restore deleted files at a later date. ... Read More Norton Program Scheduler Event Checker npscheck.exe ? Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker ... Read More NPS Event Checker npscheck.exe ? Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Schedu ... Read More Norton Program Scheduler NPSsvc.exe U Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks su ... Read More Windows Protected Storage npssvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NovaPortal Single User Service NPSU.exe ? ?? nqaplwj nqaplwj.sys X Added by the Backdoor.Rustock backdoor rootkit. TA_Start nqdsregp.exe X Added by a variant of the Zenosearch adware. Adware.ZenoSearch is an adware that displays pop-up ads based on searches the user performs on popular we ... Read More iluqcwr nqyltsy.exe X Added by the W32/SillyFDC-BX removable media worm. NetReach nrcheck.exe X Added by an unidentified VIRUS, WORM or TROJAN! nero nrchk.exe X Premium rate adult content dialer qtime nrchk.exe X Premium rate adult content dialer scheduie nrchk.exe X Premium rate adult content dialer Microsoft (R) Windows Vista/NT Runtime Compatibility Service nrcs.exe X Added by the Backdoor.Ranky.X backdoor Trojan. This infection also creates a Windows service using the same name and filename. ... Read More Premeter nrpr.exe X NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". ... Read More NS ns.exe X Added by the AGOBOT-HS WORM! Win32load nscagent.exe X Identified by Avast as a variant of the Win32:Vupa malware. scanner file utility NsCatCom.exe Y Kycocera_Mita network copier/printer/scanner process to dump scanned documents onto a workstation. Note: located in C:\Program Files\Kyocera Mita\Fil ... Read More Microsoft Agent nsch0st.exe X Identified as a variant of the Win32/Duiskbot.AG malware. NSCheck NSCHECK.EXE X NetSetter/Marketscore foistware Norton Program Scheduler nsched32.exe U Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks su ... Read More nscntrl nscntrl.exe X Adult content dialler [Various Names] NsCplTray.exe X Part of the Wareout infection as described here. nsdcmd services nsdcmdav.exe X Added by a variant of the AGOBOT/GAOBOT WORM! ... Read More nsdcmd vid process nsdcmdwin.exe X Added by a variant of the AGOBOT/GAOBOT WORM! ... Read More nsdlua nsdlua.exe X All-In-One Telcom - adult content dialler nse nse.exe X Added by the AGOBOT-ML WORM! Network Security NSecurity.exe X Added by the Troj/IRCBot-WN IRC backdoor Trojan. Network Source Engine nsecvc.exe X Identified by Bitdefender as Trojan.Peed.Gen. Nsengine Nsengine.exe U Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here ... Read More nservice nservice.exe X Added by the W32/Agobot-AHR worm and IRC backdoor. Norman Scanner Engine Service NSESVC.EXE Y Part of real-time scanning engine for Norman Antivirus. NetStat Live Nsl.exe N AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data ... Read More Network Security Monitor nsmon.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft (R) Windows Network Security Management Service nsms.exe X Added by the Backdoor.Ranky backdoor Trojan. Microsoft CSRSS Service nsmscrs.exe X Added by the W32/Rbot-BPT worm and IRC backdoor. Driver nso12k.sys X Added by the Troj/Knockit-A backdoor Trojan. NSpackk nSpackk.exe X Added by the Troj/Bancos-AVO Trojan. This Trojan attempts to steal banking information. ... Read More NetShow Powerpoint Helper NSPPTHLP.EXE U If disabled, user created fonts can no longer be seen by other programs Windows Media Powerpoint Helper NSPPTHLP.EXE N German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start -> Progra ... Read More OS Boot Configuration nspsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Network Session nspsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. ScanRegistry nsrvnt.exe X Added by the NERTE TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.e ... Read More systemservice nsserver.exe U NiceSpy keystroke logger/monitoring program - remove unless you installed it yourself! ... Read More TSService NSSERVICE.EXE ? ?? Microsoft Name Server nssrv.exe X Added by the W32/Tilebot-EK worm and IRC backdoor. This infection utilizes the rootkit rofl.sys. ... Read More nsdriver nssys32.exe X Added by an unidentified VIRUS, WORM or TROJAN! NDplDeamon nstask32.exe X Added by the RANDEX.E WORM! Pofatch nstrue.exe X Added by the RANDEX.Z WORM! NSupdate NSupdate.exe X Added by the Dial/Laet-B premium rate dialer. NSUService NSUService.exe Y A network utility for Sony laptops. www.ppandora.com nsvc.exe X Added by the Troj/DDos-P flooding Trojan. www.ppandora.com nsvc32.exe X Added by the Trojan.Panddos Trojan. Trojan.Panddos is a Trojan horse that performs Denial of Service attacks. ... Read More ForceWare Intelligent Application Manager nSvcAppFlt.exe Y Related to the NVIDIA firewall used on certain motherboards that have the NVIDIA forceware chipset. ... Read More Forceware Web Interface nSvcAppFlt.exe U Web interface for configuring and managing the NVIDIA firewall used on certain motherboards. Not needed if you do not use this Firewall. ... Read More ForceWare IP service nSvcIp.exe U Related to the NVIDIA Firewall used on certain motherboards with nForce chipsets. Not needed if you do not use this Firewall. ... Read More ForceWare user log service nSvcLog.exe U Related to the NVIDIA Firewall used on certain motherboards with nForce chipsets. Not needed if you do not use this Firewall. ... Read More Microsoft Corporation nsvdec.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Nsvdr nsvdr.exe X Adult content dialler Nsv nsvsvc.exe X Unidentified adware nsys nsys.exe U NetSpy keystroke logger/monitoring program - remove unless you installed it yourself! ... Read More nsys32 nsys32.exe X Added by the W32/Agobot-SU worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More [Various Names] NSYSCPLSTR.exe X Part of the Wareout infection as described here. Windows Automatic Updater ntapi.exe X Added by the W32/Rbot-GTT worm and IRC backdoor. NT Video API32 NTAPI32.exe X Added by the W32/Rbot-FW trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This i ... Read More NET Bios Stats ntbstats.exe X Added by the W32/Sdbot-ZX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft Update Machine ntce.exe X Added by the RBOT-FA WORM! Microsoft Update Machine ntce.exe X Added by the W32/Rbot-FA trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More directx NTCmd.exe X Added by the SDBOT.D TROJAN! ntcommlib3 NTCommLib3.exe X Admess adware variant ... Read More NvCplD ntcpl.exe X Switch adult content dialler Microsoft Network Daemon for Win32 ntd32.exe X Added by the W32/Randex-G worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More Compaq Service Drivers ntdat32.exe X Added by the W32/Sdbot-CNW worm. When started, this infection connects to a remote IRC server where it waits for commands to execute ... Read More ntddetect ntddetect.exe X Added by the Troj/Agent-CU TROJAN/backdoor! NTdhcp NTdhcp.exe X Added by the Troj/QQRob-A. It will kill processes and disable services. ntdll ntdll.exe X Added by the BIONET.404 TROJAN! <not used> NTDLL32.dll X Unidentified malware. Windows Internet Server ntdlr.exe X Added by the Troj/Feutel-CH Trojan. This infection also creates the files C:\Windows\ntdlr.dll and C:\Windows\ntdlr_Hook.DLL. ... Read More Microsoft NT Drivers ntdrv.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. {30EBEA2E-8618-979F-0807-050701070107} ntdvll.exe X Added by the Troj/Poison-J keylogging Trojan. Internet nteusodp.exe X Added by the W32/Rbot-GFJ worm and IRC backdoor. W32/Rbot-GFJ spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More Windows File System Frame ntframe.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. systemStart Ntfs.exe X Added by the W32/Autorun-JM removable media worm. NTFS16 ntfs16.exe X Added by the RBOT-LY WORM! ntfsmonitorpro ntfs64.exe X W32/Forbot-EB is a network worm with backdoor Trojan functionality. Located in the Windows system directory. ... Read More NTFSCLUP NTFSCLUP.EXE Y Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it wi ... Read More NTFS Crypto Technology ntfscrypt.exe X Added by the W32/Spybot-NC worm and IRC backdoor. NTFS File Location Service ntfsloc.exe X Added by the W32/Sdbot-CSG worm and IRC backdoor. W32/Sdbot-CSG spreads to other network computers by exploiting common buffer overflow vulnerabilitie ... Read More ntfyapp ntfyapp.exe X Added by the Storm worm. The Storm worm is a network-aware worm that attempts to replicate across the existing network(s) ... Read More GinaDll ntgina.dll X Added by the ANIG.A WORM! Norton Guard 32 ntguard32.exe X Added by a variant of the RBOT WORM! WinSocketComponent nthost.exe X Added by an unidentified VIRUS, WORM or TROJAN! ntiMUI ntiMUI.exe ? Related to NTI CD & DVD Maker 7. Input and output operations ntio256.sys X Added by the Troj/Bckdr-QHO Trojan. ntio922 ntio922.sys X Identified as a variant of the RKIT/Agent.EZ rootkit. AdobeReaderPro ntkernell32.exe X Added by the W32/Rbot-ATY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More microsoft update 23 NtKernelSystem.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Kernel Loader ntkrnl.exe X Added by the CERVIVEC.A WORM! NT Kernel Patch ntkrnlpt.exe N FaxServe network fax software ntldr ntldr.exe X Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following ... Read More Win Patch ntldr.exe X Added by the SDBOT-GS WORM! ntldr.sys ntldr.sys X Added by the Troj/SpamToo-AQ Trojan. shell32 ntldrt.exe X Added by the W32/Jlok-A Microsoft Word document virus. sysclx ntldrt.exe X Added by the W32/Jlok-A ... Read More ntload v0.1 ntload.sys X Identified as a variant of the Trojan.Ntrootkit.AL rootkit. Windows NT 32 ntlogin32.exe X Added by the RANDEX.BRD WORM! Windows NT Login ntlogin32.exe X Added by the SDBOT.WG WORM! Distributed Link Tracking ntlsrv.exe X Added by the W32/Tilebot-KP worm and IRC backdoor. MSN ntmngr.exe X Added by the Troj/Delbot-AR Trojan. {5738E8A8-69D9-4DA9-166B-7ADD24D1B74B} ntmon.exe X Identified as a variant of the Backdoor.Bifrose backdoor. ntmssvc ntms.dll X Added by the Backdoor.Fuwudoor backdoor. ntmsevt ntmsevt.exe X Added by the Troj/Stoped-B downloading Trojan. COM Message Transfer Ntmssvcs.dll X Added by the Troj/Dbit-A trojan. Multi-user Cleanup Service ntmulti.exe Y Related to IBM Lotus Notes. [not used] ntndis.exe X Added by the W32/Rbot-DPG worm and IRC backdoor. ntndis ntndis.sys X Added by the Troj/RKProc-F rootkit. FastStart ntnut32.exe X Added by the StartPage.L TROJAN! Notepad ntoepad.exe X Added by the W32/Delbot-AK worm and IRC backdoor. NT Service NTOKSRNL.EXE X Added by the W32/Rbot-AAG WORM/IRC backdoor Trojan. nton.exe nton.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. userinit ntos.exe X Added by the Troj/Dloadr-AWJ downloader Trojan. Osa32 NTOSA32.exe X Added by the ANIG WORM! sittachasnahalbasya ntoskernel.exe X Added by the W32/Hansah-A worm. ntoskrnl ntoskrnl.exe X Added by the W32/Zaap-A worm. Oddysee ntoskrnl.exe:kernel X Added by the W32.Focelto.A rootkit. This rootkit is a Alternate Data Stream file which requires certain tools to remove it. The ntoskrnl.exe it is at ... Read More ntosnh.sys ntosnh.sys X Added by the Troj/Dload-Z Trojan. kernal fault check ntosrkl.exe X Added by a variant of the W32/SDBOT WORM! ... Read More ntoss.sys ntoss.sys X Added by the Troj/Dload-Z Trojan. Microsoft Net API ntps.exe X Added by the W32/Tilebot-HA worm and IRC backdoor. ntq ntq.exe X Added by the W32/Stration-AC worm. nTrayFw nTrayFw.exe ? System tray icon for the Nvidia Firewall. Is this necessary to run at startup? NTrtc ntrtc.exe N Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here ... Read More OfficeScanNT RealTime Scan ntrtscan.exe Y Part of the Trend Micro OfficeScan product. Should not be disabled. OfficeScanNT RealTime Scan ntrtscan.exe Y Real time scanner for Trend Micro's OfficeScan security suite. MS taskbar nts.exe X Added by the W32/Rbot-AGB worm. When started, this infection connects to a remote IRC server and waits for commands to execute. ... Read More Network Translation Service nts.exe X Added by the TROJ_XPACK.TZ Trojan. XTNDConnect PC - LtNts4 NtsAgnt.exe U Component of EasySync Pro Security Accounts ntsasvc.exe X Added by the Troj/Bckdr-QNP backdoor Trojan. Microsoft Update ntservice.exe X Added by the Troj/Agent-DIS Trojan. Intec Service Drivers ntservice.exe X A variant of the Win32/Rbot.IKK family of worms and IRC backdoor Trojans. NTSF MICROSOFT SYSTEM ntsf.exe X An Rbot variant. This infection connects to an IRC server where it will await commands from a remote user. ... Read More Microsoft Update ntsf.exe X Added by the W32/Rbot-BBP worm and IRC backdoor. NTSF MICROSOFT SYSTEM ntsfd.exe X Added by the W32/Rbot-BAP worm and IRC backdoor. ntsmod ntsmod.exe X Unknown Adware! Remote Help Session Manager ntsokele.exe X Added by the W32/Fujacks-AP worm. Generic Host Process for Win32 Services ntspcv.exe X Added by the SDBOT.S TROJAN! NTSpool NTSpool.exe X Identified as a variant of the Backdoor.Bifrose backdoor. NTsrv.exe NTsrv.exe X Added by a variant of the SERVU-O TROJAN! System Server Manager Ntsrvc.exe X Added by Backdoor.DarkSky.B. This infection listens on ports 5418 and 5419 awaiting commands. ... Read More [unknown] NTSRVCS.EXE X Added by the W32/SdBot-GJ worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More NetManagerService ntss.exe X Added by the BESTPICS.A TROJAN! Network Translation System Service ntss.exe X Added by the Backdoor.Unpdoor backdoor Trojan. Backdoor.Unpdoor is a Trojan horse that opens a random port and connects to a remote Web site. ... Read More ntsf microsoft system ntssf.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Messenger ntsubsys.exe X Added by the WORM_SDBOT.BGE trojan. NT Services ntsvc.exe X Added by the AGOBOT.VJ WORM! NetService ntsvc.exe X Added by the Troj/QQPass-DU password-stealing Trojan. Windows NT Net Service Monitor ntsvc.exe X Added by the W32/SdBot-DKY worm and IRC backdoor. NTAuth ntsvc.ocx X Added by the Troj/Taladra-F backdoor Trojan. <not used> ntsvc32.dll X Identified as the Trojan-Notifier.Win32.Small.i malware. Microsoft ntsvr.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. VxD Driver Initialization ntsvxd.exe X Added by the W32/Sdbot-LW worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Configuration ntsys32.exe X Added by the W32/Sdbot-LH worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Threaded ntsys32.exe X Added by the W32/Sdbot-MR worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft System Checkup ntsysman.exe X Added by the SDBOT-QW WORM! Microsoft System Checkup ntsysmgr.exe X Added by the DONK.S WORM! Microsoft System Checkup NTSYSMGR.EXE X Added by the W32/Sdbot-OC worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Configuration ntsyst32.exe X Added by the W32/Sdbot-LT worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Nt System Protocol ntsystem.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Ntsysv ntsysv.exe X Added by the Troj/Mifeng-E Trojan. nTune nTune.exe U nVidia nTune - mot herboard monitoring and overclocking utility for nVidia nForce chipset based motherboards ... Read More nvidia ntune nTune.exe U nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards ... Read More NVIDIA nTune nTuneCmd.exe U nTune allows a user to tweak the settings of Nvidia based motherboards from within Windows and save these settings as individual profiles that can loa ... Read More ntupd32 ntupd32.exe X See_Here ... Read More calc ntuser.dll X Added by the Opachki.a Trojan. Please note that rundll32.exe is a legitimate program and should not be deleted. ... Read More ntuser ntuser.exe X Identified as a variant of the Trojan-Downloader.Win32.Small.hpb malware. Fast start Ntut.exe X Added by unidentified adware - recognized by Kaspersky antivirus as Trojan.Win32.Favadd.i ... Read More Kernel Fault Check ntvbm.exe X Added by the W32/Rbot-CKP worm and IRC backdoor. ntvbn ntvbn.exe X Trojan related to rogue software. NTVDM NTVDM.EXE U Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with the ... Read More NTVDM ntvdm.exe X Added by the W32/Sdbot-DFQ worm and IRC backdoor. This infection should not be confused with the legitimate C:\Windows\System32\ntvdm.exe file. ... Read More graphic loader ntvdm32.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More ntvdmd ntvdmd.exe X Adware downloader - also detected as the TROJ/DLOADER-YP TROJAN! ... Read More NT-Virtual Device Manager ntvdmn.exe X Added by the W32/Sdbot-AAA worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More ntvdscm ntvdscm.exe X Added by the SCKEYLOG.O TROJAN! nt microsoft svcd ntvsvcd.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More dxdll32 ntxdll.exe X Added by the GAOBOT.CPX worm which has keylogging, DOS, and backdoor capabilities. ... Read More XPnet NTXp.exe X Added by the Troj/Banker-AS TROJAN! ntxp2 ntxp2.exe X Added by the Troj/VB-API Trojan. <Unknown> nuclab.sys X Added by a variant of the Goldun.Fam rootkit. nuclabdll nuclabdll.dll X Identified as Trojan.PWS.Egold. nuclabdll nuclabdll.dll X Added by a variant of the Goldun.Fam Trojan. This infection utilizes the nuclab.sys rootkit. ... Read More gdwxp3 nuclabdll.dll X Added by a variant of the Goldun.Fam Trojan. uptolate nucle.exe X Identified as a variant of the Backdoor.Win32.Nucleroot.a malware. [Various Names] NukeSpan.exe X Part of the Wareout infection as described here. RPCall_REPCLIENT numlock.exe X Added by the Troj/Hasik-A Trojan. numlock.vbs numlock.vbs U Code example from Microsoft that allows you set the state of the Number Lock key on your keyboard when Windows starts. This startup uses no resources ... Read More Microsoft Installshield nundll32.exe X Added by the W32/Agobot-AHZ worm and IRC backdoor. {94524218-9af3-4643-9687-cbc2880e54da} nuqjici.dll X Zlob Trojan that installs VirusProtectPro 3.3 and shows fake security alerts from your Windows taskbar. ... Read More {Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666} nusrmgr.exe X Added by the Trojan-Downloader.CashDeluxe adware. NUAgentInstallPath NU_Install.exe U Added by the Spyware.ChilyEMon surveillance software. This software should be removed if found on your computer without your knowledge. ... Read More <not used> nv4_icm3.dll X Added by the W32/Stration@MM mass-mailing worm. NvagNT nvagNT.exe X Added by the W32/Agobot-RV trojan. When started this infection connects to a remote IRC server where it waits for commands to execute. This infecti ... Read More nvidia remote control panel Nvarem.exe ? NVIDIA graphics card related - what does it do and is it required? ... Read More NVIDIA nForce APU1 Utilities NVATray.exe N nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 au ... Read More NvCCCpl NvCCCpl.exe X Added by the Troj/Nogata-A backdoor Trojan. NvCCpl NvCCpl.exe X Added by the W32/Chilin-A worm. Norman Virus Control on-access component nvcoas.exe Y Part of real-time scanning engine for Norman Antivirus. nvcoi nvcoi.exe X Identified as a variant of the Trojan.Downloader.Matcash malware. NVCOM NVCOM.exe X Added by the W32/Agobot-SB worm. NvCpl NvCpl.EXE X Added by the YANZ.B WORM! NvCpl NvCpl.EXE U Added by the YANZ.B WORM! nvcpll nvcpll.exe X Added by the Troj/Bancban-PF password-stealing Trojan for online banks. If you are infected with this Trojan you should immediately change all your o ... Read More Microsoft Vista Updater System nvcsc23.exe X A variant of the IRCBot family of worms and IRC backdoor Trojan Norman Virus Control Scheduler Nvcsched.exe Y Scheduling service for for Norman Antivirus. firewire services nvcsv32.exe X Added by a variant of the W32.SPYBOT WORM! ... Read More nvctrl.exe nvctrl.exe X Added by the Troj/Zlob-BC downloader Trojan. This infection installs the following files: mscornet.exe (detected as Troj/Zlob-BC) ... Read More Win32 nvc nvcva.exe X Added by the W32/Rbot-ABF. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. These infections are ... Read More nvc Win32 nvcvc.exe X Added by the W32/Rbot-ADD worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More nvd32 lptt01 nvd32.exe X Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidB ... Read More nvd32 ml097e nvd32.exe X Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidB ... Read More NvCplDeamon nvdisp.exe X Added by the Troj/PeepVie-I trojan. NvidiaDisplayService nvdsc.exe X Added by the W32/Rbot-GWX worm and IRC backdoor. {076200C7-8302-FDAA-0404-070602000300} nvfw96.exe X Added by the Troj/Agent-FWO Trojan. Messenger Service nvhost.exe X Added by the W32.Mytob.HM@mm worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More Novell WebClient Service nvicli.exe X Added by the Troj/Bckdr-LEM backdoor Trojan. Nvid32 Nvid32.exe X Added by the GEMA TROJAN! PixelModule nvidcgui.exe X Added by the W32/Tilebot-GS worm and IRC backdoor. This infection also installs the rootkit file remon.sys. ... Read More Nvidia Graphic Displacement nvideogui.exe X Added by the W32/Sdbot.worm.gen.w!64512 worm and IRC backdoor. This infection will also create a new service in order to load the rootkit file c:\wind ... Read More Nvidex32 Nvidex32.exe X Added by the GEMA TROJAN! nvidGUIv2 nvidGUIv.exe X Added by the W32/Tilebot-DK worm and IRC backdoor. This infection will also create a new service in order to load the rootkit file c:\windows\REMON.SY ... Read More nvidia: nvidia.exe X Added by the W32.Kueight worm. W32.Kueight is a worm that spreads by copying itself to removable drives and downloads other malicious files on to the ... Read More Microsoft Nvidia Video nvidia.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Nvidia32 nvidia32.exe X CoolWebSearch parasite variant nVidia Drivers nVidiaDrvers.exe X Added by the W32/Sdbot-AFX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More nVidia Application Drivers nvidiav32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nvidll32 nvidll32.exe X W32/Rbot-XK uses this file to run automatically at logon, providing a backdoor for exploitation by a remote attacker using an IRC channel. ... Read More nviload32 nviload32.exe X Added by W32/Sdbot-VT, a WORM/backdoor. The IRC network is used for unauthorized remote access. ... Read More nvirundll nvirundll.exe X Added by the W32.SPYBOT.NPS WORM! ... Read More nvjxue nvjxue.exe X Added by the W32/Eyeveg-J worm. NVidia TLayer gateway A2 nvmapi.sys X Added by a variant of the Goldun.Fam rootkit. NVmax NVmax.exe Y NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card ... Read More NVIDIA Compatible Windows Miniport Driver nvmini.sys X Added by the PE_CORELINK.C-O rootkit. NVMixerTray NVMixerTray.exe N System Tray access to audio controls from nVidia's motherboard ForceWare software ... Read More nvmsgdwn NVMSGDWN.EXE X Added by the Troj/Graber-D downloader Trojan. NVidia XTLayer gateway nvnati.sys X Added by a variant of the Goldun.Fam rootkit. Nvdia Native Rendering nvnatv.sys X Added by a variant of the Goldun.Fam rootkit. Norman's Very Own supplY of resources nvoy.exe Y Part of Norman Antivirus. pcmcia resource monitor nvp2pmon.exe ? NVIDIA nForce P2P Driver - what does it do and is it required? ... Read More Microsoft Nvpss.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NVRaidService nvraidservice.exe Y Vidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Required if you have a RAID setup ... Read More XmLdrLocation nvrcr32.dll X Added by the Spyware.Eblaster spyware. It also installs a file into %System%rmashlex.dll. ... Read More NVRT nvrt.exe N NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports ... Read More NVRTClk NVRTClk.exe ? Related to a Gigabyte video card. What does it do, and is it required? NvCplScan nvsc32.exe X Added by a variant of the IRC.BOT TROJAN! win-xp nvsc32.exe X Added by the W32.Bropia.N WORM! NVSystem32 nvscv32.exe X Added by the AGOBOT-NO WORM! FireWire Service nvscv32.exe X Added by a variant of the W32/SDBOT WORM! svcshare nvscv32.exe X Added by the W32/Fujacks-J prepending virus. W32/Fujacks-J searches for files with HTML and ASP extensions and append code to them. These files are de ... Read More 32.exe nvscv32.exe X Added by the Troj/Agent-LOL Trojan. Net Command Senter nvscvse.exe X Identified as a variant of the Backdoor.Win32.Agent.aox backdoor. bpk nvsr32.exe U Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't ... Read More nvcpldaemon NvStartup U Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card ... Read More nvsv32.exe nvsv32.exe X Added by the FORBOT-DI WORM! MsCplScan nvsv32.exe X A new service added by the W32/Forbot-DI WORM/IRC backdoor Trojan, with a displayname of nvsv32.exe. ... Read More nvsv32.exe nvsv33.exe X Added by the W32/Forbot-DS network worm. When this infection starts it connects to a remote IRC server where it waits for remote commands to execute. ... Read More NvSvc nvsvc.exe N NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can ... Read More Symantec Security Addon nvsvc.exe X Added by a variant of the AGOBOT/GAOBOT WORM! nvsvc nvsvc.exe X Added by the Troj/Banker-HQ Trojan. nvsvc16 nvsvc16.exe U Added by the Spyware.MySuperSpy surveillance software. If this software is installed without your knowledge, it should be removed. ... Read More NVIDIA driver Helper Service nvsvc32.exe Y Part of the display driver for Nvidia cards. NVIDIA Display Driver Service nvsvc32.exe Y Part of the display driver for Nvidia cards. Nvidia Driver Help nvsvc32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nVidia Display Driver nvsvc64.exe X Added by the W32/IRCBot-YK worm and IRC backdoor. Network Security XP nvsvc86.exe X Added by the W32/Rbot-GUI worm and IRC backdoor. Office Monitor nvsvc86.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nvsvca32 nvsvca32.exe X Adware - recognized by Kaspersky antivirus as Trojan-Downloader.Win32.Agent.is ... Read More Windows Log nvsvcd.exe X Added by the Troj/Polbot-D backdoor Trojan. nVidia System Drivers nvsys32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. nVidia Display Drivers (x86) nvsys86.exe X Unknown malware. If infected it will create a lmhosts file on your computer that blocks you from reaching a variety of antimalware and computer help ... Read More nvidia system utility NVSystemUtility.exe U The NVidia_System_Utility lets you adjust bus speeds, hardware voltages, memory controller timings, and fan speed as well as additional settings to i ... Read More nvsystl0 nvsystl0.dll X Added by a variant of the Goldun.Fam Trojan. This infection utilizes the nvsystl3.sys rootkit to hide itself. ... Read More PPA Virtial rendering nvsystl3.sys X Added by a variant of the Goldun.Fam rootkit. System File Drivers nvsysvc32.exe X Added by the AGOBOT.WJ WORM! Windows ARP Detectionc nvudlsp.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. 9UmxQPSiTJMbA NVUKZ.exe X Added by the Troj/Agent-LMN Trojan. NvVideoCenter NvVid.exe X Added by the W32.Ovagur virus. W32.Ovagur is a virus that infects .exe files in removable disks and network mapped drives. ... Read More NvVideoCenter NvVid.sys X Added by the W32.Ovagur virus. This file acts a rootkit to hide the rest of the infection's files. ... Read More Netword Agent nwant33.exe N An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into you ... Read More myNetWatchman nwclient.exe U Sends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. O ... Read More Norman Worl System Ability nwcss32.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Windows Services Ts nwdpqqoiwm.exe X Added by the W32/Rbot-GRV worm and IRC backdoor. nwisse nwisse.exe X Added by the Troj/Fusion-B keylogging backdoor Trojan. Norton Wizzard nwiz.exe X Added by the GAOBOT.ZX or GAOBOT.ADV WORMS! Note - this is not the valid nVidia application that shares the same name ... Read More nwiz nwiz.exe N Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optim ... Read More nvupdater nwiz32.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More nwiz32 nwiz32.exe X Added by the Troj/Sinbank-A Troja. {5FF01121-F04D-30cf-64CD-74FF5FE1CF1C} nwizdh.exe X Added by the Troj/OnLineG-A Trojan. Microsoft Autorun1 nwizdh.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun20 nwizfy.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun3 nwizhx2.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun7 nwiztlbu.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun13 nwizwlwzs.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun10 nwizwmgjs.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Microsoft Autorun12 nwizzhuxians.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Nwpopup Nwpopup.exe Y Broadcast message handler part of Novell Netware that displays server, printer and other messages ... Read More nwprovau nwprovau.dll Y Client Service for NetWare nwrecmsg nwrecmsg.exe U Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes ... Read More NetMeeting Remote Desktop Agent Nwsapagent.dll X Added by the Trojan.Linkmediac Trojan. Trojan.Linkmediac is a Trojan horse that displays popup advertisements and sends information abo ... Read More NWTRAY nwtray.exe Y Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client ... Read More Microsoft Office Nxcao.exe X Added by the W32/Rbot-ZE WORM/IRC backdoor Trojan! Dll Injection NXCM.EXE X Added by the W32/Sdbot-IT worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More Microsoft Office Nxcxtpr.exe X This is a SDBot variant infection. When run this infection connects to an IRC server, hoeee.routing.vu, and join channel #kloni with password 1q2wxc ... Read More Nod32 Service NZ.exe X Added by the Troj/Rbot-GUK worm and IRC backdoor. Windows NZDB Service nzbd.exe X Added by the W32/Sdbot-DGJ worm and IRC backdoor. NetZIPFolders nzfprop.exe N Netzip Classic zip file manager WindowsUpdate Nzil.exe X Added by the W32/Culler-C worm that spreads via MSN Messenger. SystemX nzm.exe X A variant of the RBot family of worms and IRC backdoor Trojans. Microsoft Svchost local services nzm23.exe X Added by the W32/Rbot-GMC worm and IRC backdoor. nzqtegh nzqtegh.sys X Added by the Backdoor.Rustock backdoor rootkit. spc_w nzspc.exe N NetZero Search Enhancement related ... Read More NavProtect32 Random Filename X Troj/Bancos-BA is a password-stealing Trojan that targets banking websites. Status Key Each entry in the database will have a Status assigned to it. The key to this status is the following: Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program. N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary. U - This status flag means it is up to you whether or not you feel this program needs to run automatically. X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware but could also be programs that are not desirable to run on your computer. ? - This status flag means the status of this entry is unknown at this time and more research is necessary. If you require assistance in removing one of these files you can ask us in the Startup Database Forum. Disclaimer It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure. This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List

Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

Portions of this database © Paul Collins
© 2003-2009 All Rights Reserved Bleeping Computer LLC.
PGT: 0.29856 Queries: 5