Windows Vista Tips


Processes beginning with n

The table below includes any process titles beginning with n, from which further information can be found by clicking on the process title. The icon beside the information can be used to quickly determine if this is a safe file in combination with the key below:



This file is normally safe to leave running. In most cases, this file is not required to run on startup and can be run manually. Warning, this file may be a virus, spyware, resource hog and running it is not recommended. This file may or may not be necessary to load on startup, depending on your circumstances. No information is available for this item.

[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]

Processes beginning with n:

File Type Process Name and Information
N2PTray
An Internet telephony application. Needed only if you have an account at Net2Phone, Inc
NADaemon
Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
Naggerrunkey
Packard Bell Free Internet Signup screen
Naimagent_service
Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
Naimagent_UI
Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Naimagent_UI
Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Name
Added by the THREADSYS TROJAN!
Name Server
Added by a variant of the SDBOT WORM!
NAMEDPIPE SYSTEM
Added by the MYTOB-FH TROJAN!
nano
Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
NAP32
Premium rate adult content dialler
Narrator
Added by the QOOLOGIC TROJAN!
Narrator
Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
Natal
Added by the OPASERV.AE WORM!
NAV
Added by the MAPSON.D WORM!
NAV Agent
Norton Anti-Virus's background scanning process
nAv AGENT
Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
NAV Agent
Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name
NAV Agent
Added by the ANPES WORM!
NAV Agent
Added by the VB-XU TROJAN!
NAV Auto Prot
Added by the RBOT.ZAC WORM!
NAV Auto Protect
Added by a variant of the RBOT WORM!
NAV Auto Protect
Added by a variant of the RBOT WORM!
NAV Auto Protect
Added by a variant of the SDBOT WORM!
NAV Auto Protect
Added by a variant of the SPYBOT WORM!
NAV Auto Update
Added by a variant of the SPYBOT WORM!
NAV Auto Updates
Added by a variant of the SDBOT WORM!
NAV Auto Updates
Added by a variant of the SDBOT WORM!
NAV Auto Updates
Added by a variant of the SDBOT WORM!
NAV Auto Updates
Added by the RBOT-UN WORM!
NAV Auto Updates
Added by a variant of the RBOT WORM!
NAV CfgWiz
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
NAV Configuration Wizard
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
NAV DefAlert
Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
NAV Live Update
Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
NAV Scan Service
Added by the SDBOT.VG WORM!
NavAgent32
Added by the FEMOT.D WORM!
NavAgent32
Added by the MOFEI.B WORM!
navapp
NavExcel adware variant
navapw32
Norton Anti-Virus's background scanning process
NAVCheck
Premium rate adult content dialer
NAVCheck
Premium rate adult content dialer
NaverPCGreen
Related to Naver_Anti-virus Realtime Monitor From NHNCorp
Naviscope
Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
NaviSearch
NaviSearch, eXact Advertising variant
NavLoad
Registration reminder for CorelDRAW 10
navman_20
Hijacker, possibly a CoolWebSearch parasite variant
NAVMD25
Added by Symantec for updating the MicroDefs for their AV products - is it required?
NAVMon32
Added by the WINKO.AO WORM!
NAVNet
Unidentified adware
navp.exe
Added by the AGOBOT-OE WORM!
NavPass
Free system for gaining access to and downloading from adult content web-sites
NavScan
Added by the OBSORB TROJAN!
NAVSCAN32.EXE
Added by the SDBOT-DO WORM!
NAVSCANNER32
Added by the RBOT.QC WORM!
NAVUpd
Added by the NAVU TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
NAVWatch
VX2.Transponder parasite updater/installer related
NAV_Update
Unidentified WORM or TROJAN!
nawadll32
Added by the SDBOT-ZI WORM!
nawdll32
Added by the SDBOT-ZM WORM!
NB Common Dialog Enhancements
Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
NB Start Menu
Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
NB Windows Patterns
Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
NBInstall
Added by the MIRAR_D TROJAN!
NBJ
Ahead Nero BackItUp - backup program. Only required for if you have scheduled back-ups
NbkCtrl
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
NBKeyScan
This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup
NBT System alias
Added by a variant of the RANDON.AN WORM!
nbustrce1D
Device driver, possibly CD/DVD - what exactly is it and is it required in startup?
NC1565
Added by the NEWLEY-A WORM!
Ncao
PurityScan/Clickspring adware
Ncao
PurityScan/Clickspring adware
NCClient
??
NCD
Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
NCLAUNCH
Part of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP
nClient
Added by the DELBOT-AL WORM!
NCSW Server
LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety
NCS_SS
Same as CleanSweep Smart Sweep-Internet Sweep
NDAv
Added by the SERFLOG.C WORM!
NDAv
Added by the SERFLOG.C WORM!
NDDEAGNT
WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
NDIS Adapter
Added by the SDBOT.VF WORM!
NDIS Adapter
Added by the FORBOT-BR WORM!
NDIS Adapter
Added by the WOOTBOT.CW WORM!
NDIS Adapter
Added by the FORBOT-GP WORM!
NDIS Adapter
Added by the SPYBOT.LY WORM!
NDIS Adapter
Added by the WOOTBOT.AN WORM!
NDIS Adapter
Added by the WOOTBOT.AG WORM!
ndlhosta
Added by a variant of the SDBOT WORM!
Ndpldaemon
Added by the RPCSDBOT-A TROJAN!
NDplDeamon
Added by the RANDEX.E WORM!
NDplDeamon
Added by the RANDEX.E WORM!
NDPS
Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature
NDrv
PurityScan/Clickspring adware
NDSTray
ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have
NDSTray.exe
ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have
Ndtstat
Added by a variant of the BANLOAD family of TROJANS!
Necbar
Nec Assistant; Ark's Navigator, a graphical interface for NEC computers
NECMFK
NEC wireless keyboard driver
Necutray
Driver for external USB storage devices (hard drives, flsh disks, etc)
neos
Added by the BDOORB-FAM TROJAN!
neqprvfy.exe
Appears to be related to the downloading of some application - possibly verifying updates?
Nero
Added by a variant of the EB TROJAN!
Nero Checker
Added by the PROXY-X TROJAN! Note - this is not related to "Nero Burning Rom" CD writing software
Nero DriveSpeed
Ahead Nero DriveSpeed - set the CD reading speed of a CD/DVD drive on-the-fly to reduce the noise on high-speed drives
Nero PhotoShow Media Manager
Nero rebranded version of Simple Star's PhotoShow photo editing and organizing software, makes it easy to send and share digital photos
Nero Updater.6.12
Added by the AGOBOT-AAG WORM!
Nero.ma
Added by the JONBARR.D WORM!
NeroAutoStartClient
Added by the AGOBOT.VG WORM!
NeroCheck
Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
NeroCheck
Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD/DVD burning program. Also, it is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in the System (9x/Me) or System32 (NT/2K/XP) folder
NeroFil
Added by the RBOT.EAM TROJAN!
NeroFileCheck
Added by the AGOBOT.AKM WORM!
NeroFilterCheck
Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
NeroHomeFirstStart
Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here
NeroLoader
Added by the BANCBAN-EJ TROJAN!
NeroNETTrayIcon
System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network
NeroUpdate Check
Added by the AGOBOT.AMH WORM!
NeroUpdater6.8
Added by the AGOBOT.AMK WORM!
Net
Added by the ASSASIN.D TROJAN!
Net Accelerator
Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ???". Only required if you find it helps improve your performance
Net Activity Diagram
Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs
NET Bios Stats
Added by the SDBOT-ZX WORM!
Net Command Senter
Added by the IRCBOT!DF6280E5 VIRUS!
Net CoNN
Added by the AGOBOT.ALK WORM!
NET DEMON
Added by the AGOBOT-LA WORM!
Net iD
"With the Net_iD program, you can easily and securely logon with a smart card into a domain, a virtual private network (VPN) or in Citrix and Terminal Server environments"
NET protection system
Added by the RIZO.A TROJAN!
Net**.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
Net**32.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
Net-It Launcher
Net-It - web publishing software
net32
Added by a variant of the Trojan.Clicker family
net64
Detected by PCTools as the AGENT.JVF TROJAN! See here
NetAccelerator
NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance
NetAdm7
Added by the BANCOS.F TROJAN!
Netapi
Added by the NETDEVIL.14 TROJAN!
netapi32
Added by an unidentified TROJAN!
NetApp
Added by the SHADOWTHIEF TROJAN!
NetAppel
NetAppel - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype
NetAssistant
"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". NetAssistant Help is required to run with the Help and Support program. If you uncheck NetAssistant Help and and then run Help and Support it will add another NetAssistant Help in the startup menu. If you remove the NetAssistant Help in the add/remove program some help menus in help and support will not be available. You decide
Netbeans
Added by the DELBOT-R WORM!
Netbios Helper
Added by the BANKER.Y TROJAN!
NetBiosSrvc
Added by the SDBOT-COL WORM!
NetBioy Client
Added by a variant of the IRCBOT BACKDOOR! See here
netc
Detected by Bitdefender as DROPPER.LDPINCH.Q malware
netconfig
Added by the NETWARE TROJAN!
NetCruiser Dialer
NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"
netdaemon
Malware designed to "kill" a number of antispyware applications (SpyBot, Giant, SpyDoctor, SpySweeper, SpyHunter, Anvir, WinPatrol, and more)
netdll32
Added by the CRYPTER.A TROJAN!
netdllex
Added by the CRYPTER.A TROJAN!
NetDy
Added by the NETSKY.N or NETSKY.W WORMS!
NETFP32.EXE
Added by the AGENT.CD TROJAN!
netfxupdate
Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan
NetFxUpdate_v1.0.3705
Would appear to be a valid Microsoft .NET file (see here) but other sources suggest it could be a trojan
NETGEAR WG111T Smart Wizard
Configuration utility for the Netgear WG111T multi-rate Wireless USB 2.0 Adapter that "provides wireless access to your desktop or notebook PC through the computer's USB port"
NetGuard
FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor
nethost.exe
Added by the PERDA-J TROJAN!
Netlimiter
Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."
Netline User
Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example
NetLink
Added by the GAOBOT.WO WORM!
NetLogon
Added by the SDBOT-BC WORM!
NetManageImport
NetManage business software related
NetManagerService
Added by the BESTPICS.A TROJAN!
NetMeter
"Net Meter is a small, customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP, but it should work just as well on all other Win32 operating systems"
NetMeter
NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
NetMeter
"Net Meter is a powerful and easy-to-use bandwidth meter. It monitors traffic of all network connections and displays real-time graphical and numerical data transfer rates. Net Meter can display details of multiple network connections at the same time. It records all network traffic and includes extensive logging (daily, weekly and monthly) and traffic events. Net Meter works with virtually all types of network connections including phone modems, DSL, cable modem, LAN, satellite and more."
NetMon
Added by the MIMAIL.M WORM!
Netmonw
Added by the BDOOR-FX TROJAN!
netmsg
Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receive the messages. It has a number of other features as well
NetOnHold
"FaxTalk NetOnHold 1.5 works with the Modem-On-Hold capabilities found in V.92 modems to provide the ability to place an Internet connection "on hold" and receive incoming calls or place outgoing calls"
NetPanel
Gemius surveillance software. Uninstall this software unless you put it there yourself
NetPatrol
NetPatrol network monitoring software
netpc32.exe
Malware, probably a CoolWebSearch parasite variant
NetPerSec
NetPerSec - measures the real-time speed of your Internet connection
NetPumper
NetPumper download manager - bundles Cydoor and SaveNow adware, see here
NetReach
Added by an unidentified VIRUS, WORM or TROJAN!
Netropa Internet Receiver
Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
NetRun
NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost
Netscape
Related to Netscape installation
Netscape Messenger
In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed
Netscp6
Netscape 6
NetScreen-Remote
NetScreen Remote VPN client software
NetService
Added by the QQPASS-DU TROJAN!
netservices
Added by the WOOTBOT.D WORM!
netservices
Added by the SDBOT.GI WORM!
NETServices
Added by a variant of the SDBOT WORM!
NetShow Powerpoint Helper
If disabled, user created fonts can no longer be seen by other programs
NetStart
Added by the MKAR-A VIRUS! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "NETSTART" subfolder
NetStat Live
AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data
netsv32
Added by the SDBOT-PX WORM!
netsv32
Detected by PCTools as the DELF.CCD TROJAN! See here
NettGain2000
Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so
NettGain2000 Verifier
Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed
NetTime
From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."
NetTurbo
NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled
Netunit32
Added by an unidentified WORM or TROJAN!
netupdate32
Added by the RBOT-GQZ WORM!
NETVISIONAdulti
Trafficadvance dialer
NETVISIONPasse-partout
Added by the DIALCAR-M DIALER!
netw
Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware
NetWatch32
Added by the MIMAIL.C WORM!
Netword Agent
An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
NetWork
Added by the AGOBOT.JJ WORM!
Network Access
Added by a variant of the SDBOT WORM!
Network Administration
Added by the ANTILAM.20.Q TROJAN!
Network Administration Service
Added by the RBOT.ABH WORM!
Network Associates Error Reporting Service
Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
Network Connections
Added by the ZD TROJAN!
network device driver
Added by the DELF-LB TROJAN!
NetWork Device Switch
Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
Network Host Controller
Added by the WHISPER TROJAN!
Network Host Service
Added by the RBOT-CJV WORM!
Network Host Service
Added by the RBOT-BAB WORM!
Network maneger
Detected by Trend Micro as the AGENT.BX BACKDOOR! See here. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
Network Protocol Service
Added by the RBOT.EA WORM!
Network protocol service
Added by a variant of the AGOBOT/GAOBOT WORM!
Network Provisioning Service
Added by an unidentified WORM/TROJAN!
Network Security
Added by the RBOT-ALX WORM!
Network Security
Added by the IRCBOT.AAV WORM!
Network Security Guard
CoolWebSearch parasite variant
Network Security Guard
Added by the COLEM-A TROJAN!
Network Security XP
Added by the RBOT-GUI WORM!
Network Service
Added by the STARTPA-CC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
Network Service
Added by the HACDEF-K TROJAN!
Network Service
Added by an unidentified WORM or TROJAN!
Network Service Manager
Added by a variant of the AGOBOT/GAOBOT WORM!
Network Service Manager
Added by a variant of the GAOBOT/AGOBOT WORM!
Network Translation System Service
Added by the UNPDOOR TROJAN!
NetworkAssociates Inc
Added by the LOVGATE.AB WORM!
NetworkClient
Added by the LEMUR WORM!
NetworkKey
Added by the IRCBOT-AJ TROJAN!
Networks Configurator
Added by the RBOT-OX WORM!
Networks Controler
Added by the RBOT-NG WORM!
NetworkSetup
D-Link System Tray icon
netx
Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware
netzip
Detected by PCTools as the DELF.ZWL TROJAN! See here
Netzip Smart Downloader
Advertising spyware
NetZIPFolders
Netzip Classic zip file manager
NeuroMedia(IESpeaker)
Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available
NeuroSpeech OESpeaker
Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not
New Csnm Manager
Added by the SDBOT.BZS WORM!
New.net Startup
NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
New.net Startup
NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
New.net Startup
NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
New.net Startup
NewDotNet foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Newman
Added by the LINEAGE-AT TROJAN!
newname
Added by the DRSMARTL-S TROJAN!
News Service
F-Secure antivirus related. However, is this particular item required?
Newsalrt
MSNBC News system tray utility to alert you to new news
Newsgroup lptt01
RapidBlaster variant (in a "newsgroup" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
Newsgroup ml097e
RapidBlaster variant (in a "newsgroup" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
NewsUpd
For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.
NewtonKnowsUpd
NewtonKnows hijacker
Nex
Added by the AGENT-FPQ TROJAN!
NexusServer
Related to ProCoder 2.0 from Canopus. "ProCoder 2.0 software combines speed and flexibility into a streamlined video conversion tool for professionals. Featuring, extensive input/output options, advanced filtering, batch processing and an easy-to-use interface, ProCoder 2.0 is the ideal solution for high-quality multi-format video creation"
NFM Service
Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required
Nfo
Delfin Media Viewer adware related
nForce Tray Options
nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
NGClient
Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually
ngpw36
AdBlaster adware variant
NGServer
Symantec/Norton Ghost Console service
NI.UERSM_0001_N68M1602
ErrorSafe misleading security software - not recommended, see here
NI.UGDC_0002_N108M1007
MyContentAssistant security program, not recommend - see here
NI.UGES_0001_N108M2006
MyContentAssistant security program, not recommend - see here
NI.UGES_0001_N122M2111
Added by an unidentified misleading security program - not recommended
NI.UWA6P_0001_N56M1001
WinAntiVirus Pro 2006 misleading virus software - not recommended, see here
NI.UWA6P_0001_N69M0303
WinAntiVirus Pro 2006 misleading virus software - not recommended, see here
NI.UWA6P_0001_N73M1004
WinAntiVirus Pro 2006 misleading virus software - not recommended, see here
NI.UWA6P_0001_N91M1807
WinAntiVirus Pro 2006 misleading virus software - not recommended, see here
NI.UWA7P_0001_N91M0809
WinAntiVirus Pro 2007 misleading virus software - not recommended, see here
NI.UWAS5LP_0001_0811
WinFixer web installer. Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here
NI.UWAS6_0001_N68M2301
WinFixer web installer. Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here
NI.UWFX5
WinFixer web installer. Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here
NI.UWFX5T
Added by the DOWNLDR-BO TROJAN!
NI.UWFX5[various]
WinFixer web installer. Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here. Example filenames are UWFX5LP_0001_0802NetInstaller.exe, UWFX5V_0001_0802NetInstaller.exe, UWFX5_0001_N66M1101NETINSTALLER.EXE, 1D7C.tmp, WinFixerScannerInstall[1].exe
NI.UWFX6_0001_N68M2301
WinFixer web installer. Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here
NiceDownloads
MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder
NiceMP3
MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder
Nielsen NetRatings
NetRatings Premeter spyware
NIEUW
"Switch-F" premium rate adult content dialler
NIHomeAM
A managed web based internet security service that provides comprehensive & total protection for laptops/desktops - regardless of how, when or where they connect to the Internet. Made by Netintelligence Ltd
nikLaus
Added by the NIKLAS WORM!
Nikon Monitor
Monitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC
NInit
Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
NiroFile Updated
Added by a variant of the IRCBOT TROJAN!
nisdisa
Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example
nisserv
Norton Personal Firewall
Nisum
Norton Personal Firewall
niSvcLoc
Related to National Instruments Corp. LabView
Nitro PDF Printer Monitor
Printer monitor for Nitro PDF Professional from Nitro PDF, Inc. - "complete, affordable and easy-to-use set of tools to work with PDF documents"
NJG40
Added by the BANCOS.D TROJAN!
NkbMonitor
Part of Nikon PictureProject - image management for Nikon digital cameras
NkvMon.exe
Nikon View 5 - for transferring pictures from Nikon digital cameras
NkVwMon.exe
Nikon View - for transferring pictures from Nikon digital cameras
NliaClient
Netpia NLIA System - "In the existing Internet address system, the Domain Name System (DNS) layer runs on the IP address layer. In the NLIA system, however, the upper layer is implemented on DNS"
NLS Keyboard
Added by a variant of the SPYBOT WORM!
NLS MonBoard
Added by the SPYBOT.T TROJAN!
NLS Monitor
Added by the RBOT-AXJ WORM!
nmapp
Pure Networks "Network Magic eliminates common frustrations and saves time by simplifying and automating set up, management and repair of home networks, and makes printer and file sharing effortless"
NMBgMonitor
Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here
nmctxth
Related to Pure Networks comprehensive home and small business networking software that simplifies network configuration
NMFirstStart
Associated with Nero Scout, added by version 7 of the Nero digital media suite (CD & DVD burning, authoring, etc). Thanks to Help2Go.com, if you feel this is draining more resources that necessary you can disable it by clicking here
nmgr
FFToolBar adware toolbar
NMSSupport
Network monitor for Intel? Hub Connect Technology
NMSSvc
NIC Management Service - diagnostics program for Intel Pro family network cards
NMSVC
Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it
nMTaskBarService
Taskbar control for ISDN NetMod modem. What does it do and is it required?
NNLL
Net Nanny internet filter
nnqcouu
The Abi Network adware
NNSvc
Net Nanny internet filter
No Credit Card
Adult content pop-up dialler
No-IP DUC
Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available
NoAds
Blocks advertisement banners in Internet Explorer
NoAdware
NoAdware - spyware remover. This version is not recommended - see here
NoAdware3
NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here
NoAdware4
NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here
Nocana
Added by the ANACON-B WORM!
Nod23 Service
Added by the RBOT-GMK WORM!
Nod29 Service
Added by a variant of the RBOT WORM!
NOD32 FiX
NodFix is a is a potentially unwanted application. This application is given an (X) status because we does not and will not support Cracks or Warez. Do not delete the regedt32.exe as it is the legitimate Windows application. NodFix interferes with the default settings of the NOD32 AV application allowing to bypass its free using period as well as changes the default update server to that eval signatures thus allowing to update NOD32 without password. Note - to avoid interfering with the NOD32 application original settings no full cleanup can be provided
Nod32 Free antivirus
Added by the RBOT-AAO WORM! Note - not the popular free NOD32 antivirus software, which shares the same filename
Nod32 Runtime
Added by a variant of the IRCBOT BACKDOOR! See here
Nod32 Service
Added by the RBOT.ESJ WORM!
Nod32 Service
Added by the RBOT.DHN WORM!
Nod32 Service
Added by the SDBOT-DJG WORM!
Nod32 Service
Added by a variant of the IRCBOT BACKDOOR! See here
Nod32CC
Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button
NOD32kernel
NOD32 antivirus
nod32kui
NOD32 antivirus
NOD32POP3
POP3 E-mail part of Eset's NOD32 virus-scanner
Nod3d2 Free antivirus
Added by the RBOT-ABQ WORM!
NodeMnger
Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?
NoDNS
Detected by Kaspersky as the AGENT.KHA TROJAN! See here
nodriver
Added by a variant of the SPYBOT WORM!
NOFIIN.EXE
Added by the HAXDOOR-DP TROJAN!
Noha
PurityScan/Clickspring adware
Nokia Check
Added by the WORM_RBOT.CDC WORM!
Nokia Connection Monitor
Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
Nokia Tray Application
Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on
NOMAD Detector
Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
NomdCheck
Part of Intel's Native Audio
nomtray
System Tray access to NetMotion Wireless options - including connectivity status (see here)
Nonoh
Nonoh - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype
NoooH
Added by the ALNUH WORM!
Nord
Added by the DREF-S WORM!
Norman Worl System Ability
Detected by Trend Micro as the DELF.IO TROJAN! See here
Norman ZANDA
System Tray icon for Norman Antivirus
NortE Antivirus
Added by the RBOT.BQQ WORM!
NortE Antivirus
Added by the RBOT-AFF WORM!
norten Software Intrenet
Added by the RBOT-AWA WORM!
Norton Antiviral Scanner
Added by the DELBOT-K WORM!
Norton Antivirus
Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV!
Norton Antivirus 2004
Added by the SPYBOT-DY WORM! Note - this is not the real Norton AV!
Norton Antivirus 7.0a
Added by the PERDA-B or RANCK-CT TROJANS!
Norton Antivirus AV
Added by the NETSKY.P WORM! Note - this is not the popular AV software!
Norton AntiVirus Sys
Added by a variant of the WOOTBOT WORM!
Norton Antivirus Updater
Added by the DELBOT-T WORM! Note - this is not the real Norton AV!
Norton Auto Protect
Added by an unidentified WORM or TROJAN!
Norton Auto Protect
Added by the SDBOT.ATF WORM!
Norton Auto-Protect
Norton Anti-Virus's background scanning process
Norton Auto-Protect
Added by the AKHER.D WORM! Note - for the valid Norton AV entry the filename is "navapexe". This is also not the valid Norton AV file with the same filename
Norton Auto-Protect
Added by the Ahker.B WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder. Also, this is not part of Norton AV
Norton AV Preload
Norton Antivirus related. What does it do and is it required
Norton AV Protection Startup
Added by a variant of the RBOT WORM!
Norton Crashguard Monitor
Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
Norton Disk Doctor
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
Norton Drive Protection
Added by the FORBOT-GB WORM! Note - this not a valid Norton program!
Norton eMail Protect
Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
Norton Firewall
Added by the BANKER-ET TROJAN!
Norton Ghost 10.0
Norton Ghost tray icon - the application can be launched manually
Norton Ghost 9.0
Norton Ghost tray icon - the application can be launched manually
Norton GProtect
Added by a variant of the RBOT WORM!
Norton Guard 32
Added by a variant of the RBOT WORM!
Norton Live Update Server
Added by the AGOBOT.EW TROJAN!
Norton Live Updater
Added by the GAOBOT.AO WORM!
Norton Live Updater
Added by the GAOBOT.AO WORM!
Norton Navigator Loader
An older Norton utility for file management under Windows 95. More information here
Norton Personal Firewall
Added by a variant of the SDBOT WORM!
Norton Personal Firewall
Added by the RBOT-UI WORM!
Norton Personal Firewall
Added by a variant of the RBOT WORM!
Norton Personal Firewall
Added by the RBOT-UQ WORM!
Norton Personal Firewall
Part of Norton Personal Firewall or Norton Internet Security
Norton Program Scheduler
Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
Norton Program Scheduler
Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
Norton Program Scheduler Event Checker
Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker
Norton Protect
Added by the RBOT-WW WORM!
Norton protect
Added by a variant of the RBOT WORM!
Norton Protect Activies
Added by the BANKER-CZ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder
Norton Service Driver
Added by the RBOT-ABI WORM!
Norton Service Process
Added by a variant of the AGOBOT/GAOBOT WORM!
Norton SpySweeper AutoUpdate
Added by the FORBOT-AS WORM!
Norton System
Added by the BANLOA-AFM TROJAN!
Norton System Doctor
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
Norton SystemWorks
Norton System Works configuration wizard. Reportedly a resource hog. Many users find they can live without loading it
Norton Update
Added by a variant of the AGOBOT/GAOBOT WORM!
Norton Update
Added by the AGOBOT.ALP WORM!
Norton Update
Added by the AGOBOT.APP WORM!
Norton updated
Added by the SDBOT.ABH WORM!
Norton Updater
Added by a variant of the SPYBOT WORM!
Norton Updater
Added by a variant of the RBOT WORM!
Norton Updater
Added by an unidentified WORM or TROJAN!
Norton Updater
Added by a variant of the AGOBOT/GAOBOT WORM!
Norton Updater
Added by the SDBOT.AXV WORM!
Norton Wizzard
Added by the GAOBOT.ADV WORM! Note - this is not the valid nVidia application that shares the same name
norton32
Added by an unidentified VIRUS, WORM or TROJAN!
NortonAntivirus
Added by the PEXMOR WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "Temp" subfolder of the Winnt or Windows folder. It also has nothing to do with Norton AV
NortonAV
Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program
nortonav
Added by an unidentified WORM or TROJAN!
nortonp
Added by the JD-A TROJAN!
Nortons AV SYSTEM
Added by a variant of the RBOT WORM!
Nortons AVS Systems
Added by the RBOT.AWY WORM!
nortonsantivirus
Added by the HZDOOR-A TROJAN!
NortonVPlus
Added by the ROAMER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
noskrnl
Added by the PEACOMM.D TROJAN!
Notebook Maximizer
Toshiba Notebook Maximizer software - adjust settings to save battery power and increase efficiency
NotebookHardwareControl
"With Notebook Hardware Control you can easily control the hardware components of your Notebook"
NotebookManager
Associated with Acer notebook PCs. What does it do and is it required?
NoteBurner
NoteBurner from NoteBurner Inc. - "a versatile music converter that can be used as MP3 music converter, AAC audio converter, WAV to MP3 converter, M4A to MP3 converter, and RM to MP3 converter"
NotePad
Added by the SILLYFDC-G WORM!
Notepad
Added by the DELBOT-AK WORM!
Notepad lptt01
RapidBlaster variant (in a "Notepad" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not Windows Notepad which has the same executable name
Notepad ml097e
RapidBlaster variant (in a "Notepad" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not Windows Notepad which has the same executable name
notepad.exe
Added by a variant of the AGENT.AH TROJAN!
notepad.exe
Added by a variant of the FAKESPY-B TROJAN! Note - this particular msmsgs.exe file is located in %System% and should not be mistaken for the MSN Messenger file of the same name!
notepad.exe
Added by the ZLOB-I TROJAN! Note - not be mistaken for the MSN Messenger file of the same name!
notepad.exe
Added by the ZLOB-I and ZLOB-H TROJANS! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application!
notepad2.exe
Added by the PUPER-E TROJAN!
notes
Added by the RBOT.BME WORM!
NoticeP.exe
Part of iSync which allows "you to transfer songs from any music downloading software to your iTunes? library". The trial version displays advertisements which disappear if you purchase the software
Notification Utility
Reported by Ewido Security Suite as WeirWeb adware
Notn
PurityScan/Clickspring adware
Notn
PurityScan/Clickspring adware
NovaBackup * Tray Control
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number
NovaPortal Single User Service
??
NovastorSchedulerd
NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
novsvida.exe
GlobalAccess dialer
NoWayVirus
NoWayVirus misleading security software - not recommended, see here
NOYPI_KANG_ASTIG
Added by the FILUKIN.A WORM!
np
Added by the YABE.AE TROJAN!
NPF Value
Added by the RBOT-AWD WORM!
NPFMonitor
Norton AntiVirus Firewall Install Monitor. What does it do and is it required?
npkmnc
WebVia adware
NPROTECT
Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid
NPS Event Checker
Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker
NS
Added by the AGOBOT-HS WORM!
NSCheck
MarketScore parasite - ActiveX control used to download premium-rate dialers
nscntrl
Added by the DLOAD-DC TROJAN!
nsdcmd services
Added by a variant of the AGOBOT/GAOBOT WORM!
nsdcmd vid process
Added by a variant of the AGOBOT/GAOBOT WORM!
nsdlua
All-In-One Telcom - adult content dialler
nsdriver
NetShagg adware
nse
Added by the AGOBOT-ML WORM!
Nsengine
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
NSHelper
Altiris Express Notification Server Install helper - monitors integrity of the installation
NSK
Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!
NSRKey
System Tray access to Norton Save & Restore backup utility
nssysconf
Added by the VIVIA.A TROJAN!
nstat
Adult content dialler
NSupdate
Added by the Dial/Laet-B premium rate dialer!
Nsv
Delfin Promulgate adware
nsvcin
Delfin Media Viewer adware related
Nsvdr
Adult content dialler
nsys
NetSpy keystroke logger/monitoring program - remove unless you installed it yourself!
nsys32
Added by the AGOBOT-SU WORM!
NSystemMonitor
Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging
NT Kernel Patch
FaxServe network fax software
NT LM Security Support Provider
Added by a variant of the SDBOT WORM!
NT Logging Service
Added by the DONK.B WORM and variants!
NT MICROSOFT SVCD
Added by a variant of the RBOT WORM!
NT security
Added by the RBOT-AJC WORM!
NT Service
Added by the RBOT-AAG WORM!
NT Services
Added by the AGOBOT.VJ WORM!
Nt System Protocol
Added by the RBOT.DSB TROJAN!
NT Virtual Machine
Added by the SCAERBOT-A WORM!
NT Windows System Manager Loader
Added by the AGOBOT.OX WORM!
Nt**.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
Nt**32.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
NT-Virtual Device Manager
Added by the SDBOT-AAA WORM!
Ntcheck
Added by the TOMPAI-B WORM!
NTCommLib3
Admess adware variant
ntddetect
Added by the AGENT-CU TROJAN!
NTdhcp
Added by the QQROB-C TROJAN!
NTdhcp
Added by the QQROB-N TROJAN!
ntdll
Added by the BIONET.404 TROJAN!
ntdll.dll
Smitfraud variant
NTDLM
Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Qossrv" subfolder
Ntech.patchs
Added by the LEMIR.G TROJAN!
ntechin
Delfin Media Viewer adware related
nternet Explorer
Added by the FORBOT-CT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
NTFS16
Added by the RBOT-LY WORM!
NTFSCLUP
Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting"
ntfsmonitorpro
Added by the FORBOT-EB WORM!
NTFSS Microsoft System
Added by the RBOT.GAB WORM!
NTFSS MICROSOFT SYSTEM
Added by the RBOT.AXZ WORM!
ntfyapp
Detected by PCTools as the ZHELATIN WORM! See here
ntl Netguard
ntl Netguard - anti-virus a package of services, specifically designed to keep you safe and secure with their ntlworld online services
ntldr
Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following system files: C:WINDOWSSYSTEM tldr.exe, C:m.exe, C:WINDOWSSearch-For-You.url, C: .bat, C:q.exe, C: .bat
ntlfreedom
NTL Freedom dial-up ISP software - not required
ntmsevt
Added by the STOPED-B TROJAN
NTP Server
Added by the RANKY.F TROJAN!
nTrayFw
Software interface for NVIDIA ActiveArmor - hardware firewall built into nVidia nForce motherboard chipsets
NTrtc
Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support
NTSet32
Added by the WINSPY-C TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\dll32
NTSF Microsoft System
Added by a variant of the RBOT WORM!
NTSF MICROSOFT SYSTEM
Added by the RBOT.ATC WORM!
NTSF MICROSOFT SYSTEM
Added by the RBOT-AEL WORM!
NTSF MICROSOFT SYSTEM
Added by a variant of the RBOT WORM!
NTSF MICROSOFT SYSTEM
Added by a variant of the RBOT WORM!
NTSF MICROSOFT SYSTEM
Added by a variant of the RBOT WORM!
NTSF MICROSOFT SYSTEM
Added by the RBOT-AXY WORM!
NTSF MICROSOFT SYSTEM
Added by the RBOT.EDP WORM!
ntsmod
Adware downloader/installer, probably VX2/Look2Me related - also detected as the WIN32.VB.RL TROJAN!
NTsocket
Added by the ATAKA-E TROJAN!
NTSpool
Added by the AGENT-GPY TROJAN!
NTsrv.exe
Added by a variant of the SERVU-O TROJAN!
Ntsysv
Added by the MIFENG-E TROJAN!
nTune
nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards
nTuneCmd
nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards
ntupd32
Unidentified adware/spyware
ntupdate
Added by the SDBOT-TC WORM!
NTupdater
Added by the DIGARIX-D TROJAN!
ntuser
Detected by Symantec as the SILLYFDC WORM! See here
ntuser
Added by the SMALL!SD5 TROJAN!
ntuser
Detected by Symantec as the SILLYFDC WORM! See here
ntuser
Detected by Symantec as the SILLYFDC WORM! See here
ntuser
Added by a variant of the WORM_SOCKS.D WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "driver" sub-folder
NTVDM
Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
ntvdmd
Adware downloader - also detected as the DLOADER-YP TROJAN!
ntvdscm
Added by the SCKEYLOG-I TROJAN!
ntx32
Added by an unidentified WORM or TROJAN!
Numerical Xterm Agent
Added by the RBOT-FWP WORM!
Numerical Xterm Agents
Added by the RBOT-FWY WORM!
Numerical Xtermz Agent
Added by the RBOT-FWX WORM!
NuTCSetupEnviron
Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone
NuvaTime
NuvaTime - reminder for women using NuvaRing
NvagNT
Added by the AGOBOT-RV WORM!
nvc Win32
Added by the RBOT-ADD WORM!
NvCCCpl
Added by the NOGATA-A TROJAN!
nvchost
Added by the KLONE-J TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
NvClipRsv
Added by the DUMARU-K WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
NvClipRsv
Added by the DUMARU-AK WORM!
NVCLOCK
Overclocking utility for nVidia based graphics cards?
nvcoi
Added by the DLOADER.TYO TROJAN!
NvColorInit
Associated with Nvidia based graphics cards
NVCOM
Added by the AGOBOT-SB WORM!
NvCpl
Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
NvCpl
Added by the YANZ.B WORM!
NvCpl
Added by the AGOBOT-APJ WORM!
NvCpl
Added by a variant of the SDBOT WORM!
NvCpl
Added by the AGOBOT-TO WORM! Note - the valid version of this entry has the command line as "rundll32.exe NvCpl.dll,NvStartup"
NvCPL32
Added by the AGOBOT.DAA WORM!
NvCpl32Deamon
Added by the SPYBOT.S WORM!
NvCplD
"Switch" premium rate adult content dialler variant
NvCplD
"Switch" premium rate adult content dialler variant
NvCplDaemon
System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here)
NvCplDaemon
Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
NvCplDaemon
Added by the DLOADER-YI TROJAN!
NvCplDaemon32
Added by the XU TROJAN!
NvCplDeamon
Added by the PEEPVIE-I TROJAN!
NvCplDmn
Added by an unidentified VIRUS, WORM or TROJAN!
NvCplScan
Added by the FORBOT-DD WORM!
NvCplScan
Added by the FORBOT.BZ WORM!
NvCplScan
Added by the BROPIA.N WORM!
NvCplScan
Added by the FORBOT-EW WORM!
NvCplScan
Added by the SDBOT.BRL WORM!
NvCpTDaemon
Added by the CULT-B WORM!
nvctrl.exe
Added by the ZLOB.G TROJAN!
nvd32 lptt01
RapidBlaster variant (in a "nvd32" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
nvd32 ml097e
RapidBlaster variant (in a "nvd32" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
NVDispDrv
Added by the WINKO.AO WORM!
NvGraphicsInterface
Added by the BCKDR-QKI BACKDOOR!
NVHotkey
Enables the use of "hot keys" for changing setting on Nvidia graphics
Nvid
Unidentified adware
Nvid32
Added by the GEMA TROJAN!
Nvidex32
Added by the GEMA TROJAN!
NVIDIA ActiveArmor
Software interface for NVIDIA ActiveArmor - hardware firewall built into nVidia nForce motherboard chipsets
nVidia Application Drivers
Added by a variant of the IRCBOT BACKDOOR!
Nvidia Control Daemon
Added by an unidentified WORM or TROJAN!
Nvidia Control Panel
Added by an unidentified VIRUS, WORM or TROJAN!
nVidia Display Drivers (x86)
Added by a variant of the IRCBOT BACKDOOR! See here
NVIDIA Driver
Added by the WOOTBOT.Y WORM!
nVidia Drivers
Added by the SDBOT-AFX WORM! Note - this is not related to any nVidia based motherboard or graphics card
NVIDIA nForce APU1 Utilities
nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time"
NVIDIA nTune
nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards
nVidia System Drivers
Added by an unidentified WORM or TROJAN! See here
NVidia System Utility
NVidia System Utility (now nTune) lets you adjust bus speeds, hardware voltages, memory controller timings, and fan speed as well as additional settings to increase performance aggressiveness and hardware voltages. Will also display a dynamic graph of CPU and system temperatures, hardware voltages, and memory bus speeds
NVIDIA Video drivers
Added by the AGOBOT.KV WORM!
NVIDIA Video drivers
Added by the RBOT-BB WORM!
Nvidia32
CoolWebSearch parasite variant - also detected as the HOSTS-B TROJAN!
NvidiaQuickTweak
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
nvidll32
Added by the RBOT-XK WORM!
NVIEW
This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
nviload32
Added by the SDBOT-VT WORM!
NvInitialize
Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
nvirundll
Added by the SPYBOT.NPS WORM!
nvjxue
Added by the EYEVEG-J WORM!
NVmax
NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
NVMCTRAY
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
NvMediaCenter
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
NVMixerTray
System Tray access to audio controls from nVidia's motherboard ForceWare software
nvmsgdwn
Added by the GRABER-D TROJAN!
NvMsnW
Added by the BROPIA.K WORM!
nvpatch
Added by the SASSER-F WORM!
NvPvrNetMon
Network monitor for the Personal Video Recorder function of the NVIDIA ForceWare Multimedia application - "makes sure you don?t miss your favorite show. If you won?t be home to watch the show, just use the PVR to set future recordings"
NVQuickTweak
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
NVRaidService
nVidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Doesn't seem to be required if you have a RAID setup as there is no performance difference without it
NVRotateSysTray
Related to NVIDIA nView Control Panel. What does it do and is it required?
NVRT
NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
NVRTClk
Related to a Gigabyte video card. What does it do, and is it required?
nvsv32.exe
Added by the FORBOT-DI WORM!
nvsv32.exe
Added by a variant of the SDBOT WORM!
nvsv32.exe
Added by the WOOTBOT.GE WORM!
nvsv32.exe
Added by the WOOTBOT.FP WORM!
NvSvc
NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
nvsvc
Added by the BANKER-HQ TROJAN! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System%
NVSVC
Added by the AGOBOT.ALX WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in the System (9x/Me) or System32 (NT/2K/XP) folder
NvSvc
Related to NVIDIA graphics cards
nvsvca32
Added by the TACTSLAY.E TROJAN!
nvsvca32
Added by the TACTSLAY.E TROJAN!
NVSystem32
Added by the AGOBOT-NO WORM!
Nvt32
Added by the ARTIEF.B TROJAN!
NvUpdater
Added by a variant of the RBOT WORM!
NvVideoCenter
Added by the HAXDOOR-DO TROJAN!
NvXplDeamon
Added by the SMALL.AJ VIRUS!
NWEReboot
??
nwiz
Nvidia nView Wizard - present with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. If you use any of the special nView features available in the control panel leave this alone - otherwise you can disable it
nwiz32
Added by the SINBANK-A TROJAN!
Nwpopup
Broadcast message handler part of Novell Netware that displays server, printer and other messages
nwrecmsg
Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes
nwss
SpyOutside surveillance software. Uninstall this software unless you put it there yourself
NWTRAY
Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client
nxgsvc
Added by the AKBOT.BA WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "nxgsvc.dll" file is found in %System%
nxosys
Added by the AKBOT.BD WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "nxosys.dll" file is found in %System%
nxpclient
NetExpert - "India's first ever automated Broadband care technology." Identifies and automatically fixes typical problems that may occur with your high-speed internet service