Files beginning with n

Added by the RUSTY WORM! Note - not to be confused with the valid Windows "NOTEPAD" text editor! Note - this malware actually changes the value data of the "(Default)" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank

Smitfraud variant

Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function

??

??

Added by the SDBOT-DEV WORM!

Added by the OPASERV.AI WORM!

Added by the SOHANA-AJ WORM!

Added by the RBOT-ATY WORM!

Added by the TITOG.C WORM!

Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."

Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications

Backup software by Computer Associates - no longer supported

AsdPlug premium rate adult content dialer variant

Added by an unidentified WORM or TROJAN!

Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here

Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here

Added by the KILO TROJAN!

Added by the RONTOKBRO.B WORM!

"Net Meter is a small, customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP, but it should work just as well on all other Win32 operating systems"

Added by the KANGAROO-A TROJAN!

Covert Sys Exec malware variant

Added by the TACTSLAY.E TROJAN!

Added by the SDBOT.BBQ WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT.CIW WORM!

Added by the RBOT.CQZ WORM!

Added by the SDBOT-LN WORM!

Added by the AGOBOT.RV WORM!

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

Registration reminder for CorelDRAW 10

NetInternals CostAware - download quota measuring tool

Added by the SIMCSS TROJAN!

Added by the CHODE-J WORM!

Could be related to "Dash Power Shopping" tool bar in IE?

Could be related to this?

??

Identified as a variant of the AdWare.Win32.ZenoSearch.am malware

Added by the SDBOT.D TROJAN!

??

Added by a variant of the IRCBOT TROJAN!

Downloader for Microgaming/Casino software - stealth installed

Added by the GAOBOT.CPX WORM!

Added by an unidentified WORM or TROJAN!

Added by the GIMLET-A WORM!

Adware - deteced by Kaspersky as the FAVADD.I TROJAN!

Added by the STARTPAGE.L TROJAN!

DialCar-Z premium rate dialer

Added by a variant of the SDBOT WORM!

Added by a variant of the SPYBOT WORM!

Added by the SDBOT.S TROJAN!

Added by the AGOBOT.BY WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the ANIG.A WORM!

Added by the RBOT-AGY WORM!

Added by a variant of the RBOT WORM!

Added by the NITWIZ.A TROJAN!

Added by the MYDOOM.BV WORM!

Added by the MYTOB.JT WORM!

Added by the RITDOOR.A WORM!

Added by the FORBOT-EM WORM!

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

Added by the POPDIS or STARTPAGE.F TROJANS!

Installed by the "HP Photo and Imaging Director" software. If you ask for the imaging software, this program will be started

Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist. Not related to the Mac icon program of the same name

Added by the NETDEVIL.14 TROJAN!

WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended, see here

Added by the RBOT-GFJ WORM!

Added by the MYTOB.MN WORM!

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

Related to Novell iPrint - "a printing solution that enables you to send documents to printers located throughout the Net." Is it required?

Added by a variant of the SDBOT WORM!

Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up

??

Added by a variant of the SDBOT WORM!

Added by the CERVIVEC.A WORM!

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

Added by the NIBU.E TROJAN!

Manager for the Belkin Nostromo n50 SpeedPad game controller - see here

Added by the SIMCSS TROJAN!

Added by a variant of the RBOT WORM!

Detected by Trend Micro as the IRCBOT.XV TROJAN! See here

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT.BGE WORM!

Added by the SDBOT-ACC WORM!

Added by the JLOK-A WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-GOS WORM!

Added by a variant of the RBOT WORM!

Added by a generic password stealer TROJAN - see here

Added by the RANKY.LC TROJAN!

Added by the RANKY.X TROJAN!

Added by the RBOT-BPT WORM!

Added by the RANDEX.AA WORM!

Added by the AGOBOT-AHZ WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by the RBOT-YH WORM!

Added by the LOVGATE.AB WORM!

Added by the SDBOT-AAI WORM!

Added by the SDBOT.R TROJAN!

Added by the RBOT.DMN WORM!

Added by the RBOT.EJP WORM!

Added by a variant of the IRCBOT TROJAN!

Added by a variant of the RBOT WORM!

Added by the SDBOT.AJN TROJAN!

Added by a variant of the SDBOT WORM!

Added by the RBOT-ZE WORM!

Added by the RBOT-YG WORM!

Added by the PWSYAHOO-A TROJAN!

Added by the RBOT.HZ WORM!

Added by the RBOT-GMC WORM!

Added by the RANDEX.AE WORM!

Added by the DONK.S WORM!

Added by the SDBOT-QW WORM!

Added by the DONK-E WORM!

Added by the SDBOT.DP TROJAN!

Added by the RBOT-IV WORM!

Detected by Kaspersky as the RBOT.RHK BACKDOOR! See here

Added by the AGENT-DIS TROJAN!

Added by a variant of the RBOT WORM!

Added by the RBOT-ARZ WORM!

Added by the RBOT-AMI WORM!

Added by the RBOT-FA WORM!

Added by the RBOT.GF WORM!

Added by the RBOT.HW WORM!

Added by the SDBOT-ZR WORM!

Added by the SDBOT-ABD WORM!

Added by a variant of the SDBOT WORM!

Added by the RANDEX.F WORM!

If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs

NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information

Added by a variant of the RBOT WORM!

Added by the IRCBOT.MC TROJAN!

Netscape 6 and Mozilla browsers

Added by the RBOT-AGB WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by the SDBOT.AHY WORM!

Detected by PCTools as the IRCBOT.UXP WORM! See here

Added by the RBOT-GMQ WORM!

Added by the RBOT.UJ WORM!

Added by the KELVIR-BC WORM!

Added by a variant of the RBOT WORM!

Premium rate adult content dialer

CoolWebSearch parasite variant - resets home page to an adult content site

CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin

Added by the RANDEX.F WORM!

Sends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running

Runs in your task bar and receives alerts and release information on MySoftware products from Avenquest

An Internet telephony application. Needed only if you have an account at Net2Phone, Inc

Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required

Packard Bell Free Internet Signup screen

Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan

Added by the MYTOB-FH TROJAN!

Premium rate adult content dialler

Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech

Added by the OPASERV.AE WORM!

Norton Anti-Virus's background scanning process

Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes

Added by the RBOT.ZAC WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the SPYBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT-UN WORM!

Added by a variant of the RBOT WORM!

Added by the SDBOT.VG WORM!

NavExcel adware variant

Norton Anti-Virus's background scanning process

Premium rate adult content dialer

Related to Naver_Anti-virus Realtime Monitor From NHNCorp

Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more

NaviSearch, eXact Advertising variant

Registration reminder for CorelDRAW 10

Added by the WINKO.AO WORM!

Added by the AGOBOT-OE WORM!

Free system for gaining access to and downloading from adult content web-sites

Added by the SDBOT-DO WORM!

Added by the RBOT.QC WORM!

VX2.Transponder parasite updater/installer related

Unidentified WORM or TROJAN!

Added by the SDBOT-ZI WORM!

Added by the SDBOT-ZM WORM!

Ahead Nero BackItUp - backup program. Only required for if you have scheduled back-ups

Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here

This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup

Device driver, possibly CD/DVD - what exactly is it and is it required in startup?

??

Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path

Part of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP

LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety

WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services

Added by the SDBOT.VF WORM!

Added by the RANDEX.E WORM!

PurityScan/Clickspring adware

ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have

ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have

Added by a variant of the BANLOAD family of TROJANS!

Nec Assistant; Ark's Navigator, a graphical interface for NEC computers

NEC wireless keyboard driver

Driver for external USB storage devices (hard drives, flsh disks, etc)

Added by the BDOORB-FAM TROJAN!

Appears to be related to the downloading of some application - possibly verifying updates?

Added by the PROXY-X TROJAN! Note - this is not related to "Nero Burning Rom" CD writing software

Added by the AGOBOT.VG WORM!

Associated with "Nero Burning Rom" CD writing software. Checks for driver issues

Added by the RBOT.EAM TROJAN!

Associated with "Nero Burning Rom" CD writing software. Checks for driver issues

Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here

Added by the BANCBAN-EJ TROJAN!

System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network

Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ???". Only required if you find it helps improve your performance

Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs

Added by the SDBOT-ZX WORM!

Added by the IRCBOT!DF6280E5 VIRUS!

Added by the AGOBOT-LA WORM!

Added by the RIZO.A TROJAN!

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Net-It - web publishing software

NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance

Added by the BANCOS.F TROJAN!

Added by the NETDEVIL.14 TROJAN!

Added by an unidentified TROJAN!

NetAppel - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

Added by the DELBOT-R WORM!

Added by the BANKER.Y TROJAN!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the NETWARE TROJAN!

NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"

Malware designed to "kill" a number of antispyware applications (SpyBot, Giant, SpyDoctor, SpySweeper, SpyHunter, Anvir, WinPatrol, and more)

Added by the CRYPTER.A TROJAN!

Added by the CRYPTER.A TROJAN!

Added by the AGENT.CD TROJAN!

Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan

Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan

FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor

Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."

Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example

Added by the GAOBOT.WO WORM!

NetManage business software related

Added by the BESTPICS.A TROJAN!

"Net Meter is a small, customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP, but it should work just as well on all other Win32 operating systems"

NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!

Added by the MIMAIL.M WORM!

Added by the BDOOR-FX TROJAN!

Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receive the messages. It has a number of other features as well

Malware, probably a CoolWebSearch parasite variant

NetPerSec - measures the real-time speed of your Internet connection

NetPumper download manager - bundles Cydoor and SaveNow adware, see here

Added by an unidentified VIRUS, WORM or TROJAN!

Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware

NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost

In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed

Netscape 6

Added by the QQPASS-DU TROJAN!

If disabled, user created fonts can no longer be seen by other programs

AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data

Added by the SDBOT-PX WORM!

Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed

From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."

NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled

Added by the RBOT-GQZ WORM!

Added by the MIMAIL.C WORM!

An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs

Added by the ANTILAM.20.Q TROJAN!

Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary

Added by the IRCBOT.AAV WORM!

Added by the RBOT-GUI WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by a variant of the GAOBOT/AGOBOT WORM!

Added by the UNPDOOR TROJAN!

Added by the LEMUR WORM!

Added by the IRCBOT-AJ TROJAN!

Added by the RBOT-OX WORM!

Added by the RBOT-NG WORM!

Advertising spyware

Netzip Classic zip file manager

Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available

MSNBC News system tray utility to alert you to new news

RapidBlaster variant (in a "newsgroup" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "newsgroup" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.

NewtonKnows hijacker

Added by the AGENT-FPQ TROJAN!

Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required

Delfin Media Viewer adware related

Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually

AdBlaster adware variant

Symantec/Norton Ghost Console service

Added by the NIKLAS WORM!

Monitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC

Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required

Added by a variant of the IRCBOT TROJAN!

Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example

Norton Personal Firewall

Norton Personal Firewall

Related to National Instruments Corp. LabView

Printer monitor for Nitro PDF Professional from Nitro PDF, Inc. - "complete, affordable and easy-to-use set of tools to work with PDF documents"

Added by the BANCOS.D TROJAN!

Part of Nikon PictureProject - image management for Nikon digital cameras

Nikon View 5 - for transferring pictures from Nikon digital cameras

Nikon View - for transferring pictures from Nikon digital cameras

Netpia NLIA System - "In the existing Internet address system, the Domain Name System (DNS) layer runs on the IP address layer. In the NLIA system, however, the upper layer is implemented on DNS"

Added by the SPYBOT.T TROJAN!

Added by the RBOT-AXJ WORM!

Pure Networks "Network Magic eliminates common frustrations and saves time by simplifying and automating set up, management and repair of home networks, and makes printer and file sharing effortless"

Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here

Related to Pure Networks comprehensive home and small business networking software that simplifies network configuration

Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here

FFToolBar adware toolbar

NIC Management Service - diagnostics program for Intel Pro family network cards

Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it

Taskbar control for ISDN NetMod modem. What does it do and is it required?

Net Nanny internet filter

The Abi Network adware

Net Nanny internet filter

Blocks advertisement banners in Internet Explorer

NoAdware - spyware remover. This version is not recommended - see here

NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here

NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here

Added by the RBOT-GMK WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-AAO WORM! Note - not the popular free NOD32 antivirus software, which shares the same filename

Added by the RBOT.ESJ WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button

NOD32 antivirus

NOD32 antivirus

Added by the RBOT-ABQ WORM!

Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?

Detected by Kaspersky as the AGENT.KHA TROJAN! See here

Added by the HAXDOOR-DP TROJAN!

Added by the WORM_RBOT.CDC WORM!

Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required

Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on

Part of Intel's Native Audio

System Tray access to NetMotion Wireless options - including connectivity status (see here)

Nonoh - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

Added by the DREF-S WORM!

Detected by Trend Micro as the DELF.IO TROJAN! See here

Added by the RBOT.BQQ WORM!

Added by the RBOT-AFF WORM!

Added by the RBOT-AWA WORM!

Added by the DELBOT-K WORM!

Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV!

Added by a variant of the WOOTBOT WORM!

Added by the DELBOT-T WORM! Note - this is not the real Norton AV!

Added by an unidentified WORM or TROJAN!

Norton Anti-Virus's background scanning process

Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

An older Norton utility for file management under Windows 95. More information here

Added by the RBOT-UI WORM!

Added by the RBOT-UQ WORM!

Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans

Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans

Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker

Added by the RBOT-WW WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the FORBOT-AS WORM!

Added by the SDBOT.ABH WORM!

Added by an unidentified WORM or TROJAN!

Added by the SDBOT.AXV WORM!

Added by the GAOBOT.ADV WORM! Note - this is not the valid nVidia application that shares the same name

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program

Added by the JD-A TROJAN!

Added by the PEACOMM.D TROJAN!

"With Notebook Hardware Control you can easily control the hardware components of your Notebook"

Associated with Acer notebook PCs. What does it do and is it required?

Added by the DELBOT-AK WORM!

RapidBlaster variant (in a "Notepad" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not Windows Notepad which has the same executable name

RapidBlaster variant (in a "Notepad" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not Windows Notepad which has the same executable name

Added by the RBOT.BME WORM!

Part of iSync which allows "you to transfer songs from any music downloading software to your iTunes? library". The trial version displays advertisements which disappear if you purchase the software

Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number

??

GlobalAccess dialer

Added by the RBOT-AWD WORM!

Norton AntiVirus Firewall Install Monitor. What does it do and is it required?

WebVia adware

Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid

Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker

Added by the AGOBOT-HS WORM!

MarketScore parasite - ActiveX control used to download premium-rate dialers

Added by the DLOAD-DC TROJAN!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

All-In-One Telcom - adult content dialler

NetShagg adware

Added by the AGOBOT-ML WORM!

Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here

Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!

System Tray access to Norton Save & Restore backup utility

Adult content dialler

Added by the Dial/Laet-B premium rate dialer!

Delfin Promulgate adware

Delfin Media Viewer adware related

Adult content dialler

NetSpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the AGOBOT-SU WORM!

FaxServe network fax software

Added by a variant of the RBOT WORM!

Added by the RBOT-AAG WORM!

Added by the AGOBOT.VJ WORM!

Added by the RBOT.DSB TROJAN!

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the SDBOT-AAA WORM!

Admess adware variant

Added by the AGENT-CU TROJAN!

Added by the QQROB-C TROJAN!

Added by the BIONET.404 TROJAN!

Delfin Media Viewer adware related

Added by the RBOT-LY WORM!

Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting"

Added by the FORBOT-EB WORM!

Detected by PCTools as the ZHELATIN WORM! See here

Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following system files: C:WINDOWSSYSTEM tldr.exe, C:m.exe, C:WINDOWSSearch-For-You.url, C: .bat, C:q.exe, C: .bat

Added by the STOPED-B TROJAN

Software interface for NVIDIA ActiveArmor - hardware firewall built into nVidia nForce motherboard chipsets

Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support

Added by a variant of the RBOT WORM!

Adware downloader/installer, probably VX2/Look2Me related - also detected as the WIN32.VB.RL TROJAN!

Added by the ATAKA-E TROJAN!

Added by the AGENT-GPY TROJAN!

Added by a variant of the SERVU-O TROJAN!

Added by the MIFENG-E TROJAN!

nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards

nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards

Unidentified adware/spyware

Added by the SMALL!SD5 TROJAN!

Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here

Adware downloader - also detected as the DLOADER-YP TROJAN!

Added by the SCKEYLOG-I TROJAN!

Added by an unidentified WORM or TROJAN!

Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone

NuvaTime - reminder for women using NuvaRing

Added by the AGOBOT-RV WORM!

Added by the RBOT-ADD WORM!

Added by the NOGATA-A TROJAN!

Added by the DLOADER.TYO TROJAN!

Added by the AGOBOT-SB WORM!

Added by the YANZ.B WORM!

Added by the AGOBOT.DAA WORM!

Added by the SPYBOT.S WORM!

"Switch" premium rate adult content dialler variant

Added by the PEEPVIE-I TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the BROPIA.N WORM!

Added by the SDBOT.BRL WORM!

Added by the ZLOB.G TROJAN!

RapidBlaster variant (in a "nvd32" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "nvd32" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the WINKO.AO WORM!

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Software interface for NVIDIA ActiveArmor - hardware firewall built into nVidia nForce motherboard chipsets

Added by a variant of the IRCBOT BACKDOOR!

Added by an unidentified WORM or TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card

nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time"

nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards

Added by an unidentified WORM or TROJAN! See here

NVidia System Utility (now nTune) lets you adjust bus speeds, hardware voltages, memory controller timings, and fan speed as well as additional settings to increase performance aggressiveness and hardware voltages. Will also display a dynamic graph of CPU and system temperatures, hardware voltages, and memory bus speeds

CoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!

Added by the RBOT-XK WORM!

Added by the SDBOT-VT WORM!

Added by the SPYBOT.NPS WORM!

Added by the EYEVEG-J WORM!

NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card

System Tray access to audio controls from nVidia's motherboard ForceWare software

Added by the GRABER-D TROJAN!

Added by the SASSER-F WORM!

Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - "makes sure you don?t miss your favorite show. If you won?t be home to watch the show, just use the PVR to set future recordings"

nVidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Doesn't seem to be required if you have a RAID setup as there is no performance difference without it

Related to NVIDIA nView Control Panel. What does it do and is it required?

NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports

Related to a Gigabyte video card. What does it do, and is it required?

Added by the FORBOT-DI WORM!

Added by the WOOTBOT.FP WORM!

NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that

Added by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%

Added by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the TACTSLAY.E TROJAN!

Added by the AGOBOT-NO WORM!

Added by a variant of the RBOT WORM!

Added by the HAXDOOR-DO TROJAN!

Nvidia nView Wizard - present with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. If you use any of the special nView features available in the control panel leave this alone - otherwise you can disable it

Added by the SINBANK-A TROJAN!

Broadcast message handler part of Novell Netware that displays server, printer and other messages

Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes

Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client

Detected by Trend Micro as the IRCBOT.BVO BACKDOOR! See here

Joint Operations registration reminder

OptimumOnline ISP software related spyware - displays advertising popups and collects information about user activity

Added by the ANIG WORM!

NVIDIA nForce P2P Driver. What does it do and is it required?

Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE

Added by the RANDEX.Z WORM!

Medload adware

NetRatings Premeter spyware

Price Patrol by Half.com - internet shopping companion for finding the best on-line prices

Added by the ELITPER.E WORM!

Premium rate adult content dialler

Premium rate adult content dialler

Advertising spyware

Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete

Added by the AGOBOT.G TROJAN!

??

Naomi internet filtering software

Added by the BOBAX.AD WORM!

SafeSurfing adware

??

Related to Wi-Fi USB Connector from Nintendo

Added by the DLOADER-NY TROJAN!

Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech

Related to li-speed****

Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation

Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe

Added by the DINOXI or DINOXI.B WORMS!

Premium rate adult content dialler

Premium rate adult content dialer

Added by the DINOXI or DINOXI.B WORMS!

Part of the Nero multimedia suite backup function - "Recover your data quickly and easily and create discs that are password protected. SecurDisc technology gives you peace of mind"

Added by the NOPIR.A WORM!

Added by the SDBOT-ACP WORM!

Added by the DLOADER-NY TROJAN!

Added by the TACTSLAY.B TROJAN!

Added by the JLOK-A WORM!

Added by the HANSAH-A WORM!

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

NetZero Search Enhancement related

Added by the DLOADER-NY TROJAN!

Added by the WATSOON.A TROJAN!

Adware, also detected as the DLOADER-JN TROJAN!

Added by the FUJACKS-Z WORM!

Added by the N20050308 TROJAN!

Added by a variant of the AGOBOT/GAOBOT WORM! Note - do NOT confuse with the legitimate NVIDIA Driver Helper Service file of the same name as described here

Added by the AGOBOT-GJ TROJAN!

Added by the KANGAROO-A TROJAN!

Added by the JLOK-A WORM!

Added by the SDBOT-ABB WORM!

Added by the AGOBOT.WJ WORM!

Added by the SDBOT-QB WORM!

Added by the SPYBOT.NO WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by the ESTEEMS.D TROJAN!

Added by the AGOBOT-LJ WORM!

Added by the REDIST.C WORM!

Added by the NETCONTROL VIRUS!

Premium rate adult content dialler

NiceSpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the TIBS-TS TROJAN!

Detected by PCTools as the TIBS.JT TROJAN! See here

Added by the CULLER-C WORM!

Added by a variant of the RBOT WORM!

Added by the DLOADER-NY TROJAN!

Found on a Toshiba laptop - for use with a docking station?

??

??

Delfin Media Viewer adware related

Found on a Toshiba laptop. Related to hotswap bay management?

Found on a Toshiba laptop

Stranget keystroke logger/monitoring program - remove unless you installed it yourself! Found in an "fyt" subfolder of the Windows or Winnt folder

Added by a variant of the BIFROSE TROJAN!

Added by the AGENT-ECU TROJAN!

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

Added by the RBOT-DK WORM!

Added by the AGOBOT.LH WORM!

Added by a variant of the RBOT-GNA WORM!

Added by the RBOT-GNA WORM!

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

Added by the MYTOB-BY WORM!

Added by the RBOT.AA WORM!

Added by the SDBOT-GS WORM!

Added by the BROPIA.N WORM!

Added by the RBOT.AMG WORM!

Added by the WOOTBOT.EU WORM!

Added by the RBOT-ABF WORM!

Added by the PAINTER TROJAN!

Added by the DLOADER-NY TROJAN!

Detected by Kaspersky as the AGENT.LMW BACKDOOR! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the IRCBOT.AFT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the IRCBOT-AAE TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the RBOT WORM!

Added by an unidentified WORM or TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by an unidentified WORM or TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the SPYBOT.ANDM WORM!

German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start -> Programs

Added by the RBOT.BMF TROJAN!

Added by the RBOT.BEI WORM!

Detected by Trend Micro as the AGENT.ERZ TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the MYTOB.FH WORM!

Added by the RANDEX.BRD WORM!

Added by the SDBOT.WG WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Detected by Trend Micro as the IRCBOT.AUL TROJAN! See here

Added by the DLOADER-NY TROJAN!

Added by the RBOT-ACR WORM!

Added by the SDBOT-YO WORM!

Added by the MYTOB-L WORM and variants!

Added by the MYTOB-BY WORM!

Added by the MYTOB-EP WORM!

Added by the OPANKI-AB WORM!

Added by a variant of the FORBOT WORM!

Homepage hijacker

Added by the DLOADER-NY TROJAN!

Added by the MYTOB-DZ WORM!

Detected by Kaspersky as the IRCBOT.ALO TROJAN! See here

Added by the CULLER-C WORM!

Added by an unidentified WORM or TROJAN!

CoolWebSearch parasite variant - resets home page to an adult content site

Added by the OPANKI.B WORM!

Added by the BANKER-FN TROJAN!

Added by the AGOBOT.LY WORM!

Added by the SPYBOT-DD WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Associated with Logitech Wingman game controllers. Not required but what does it do?

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the ERKEZ.D WORM!

Added by the NETSPY TROJAN!

Component of EasySync Pro

Added by the JALABED WORM!

Added by the QEXREZ family of TROJANS!

PurityScan/Clickspring adware. Not to be confused with the legitimate nslookup.exe which is found in the System32 folder

PurityScan/Clickspring adware

PurityScan/Clickspring adware

PurityScan/Clickspring adware

PurityScan/Clickspring adware

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Wareout - malware masquerading as a spyware and dialer remover

Added by the SMALL.SD TROJAN!

Added by the SMALL-DT TROJAN!

NetMedia adware