Windows XP A to Z - http://www.softwaretipsandtricks.com/windowsxp
Start Up Applications N
http://www.softwaretipsandtricks.com/windowsxp/articles/607/1/Start-Up-Applications-N
Super Admin
 
By Super Admin
Published on 03/28/2005
 
Starting with letter N
Start Up Applications N Page 1

Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

U N2PTray Net2fone.exe An Internet telephony application. Needed only if you have an account at Net2Phone, Inc
N NADaemon NADAEMON.EXE Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
N Naggerrunkey nagger.exe Packard Bell Free Internet Signup screen
Y Naimagent_service EPOAgentnaimas32.exe Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
Y Naimagent_UI EPOAgentnaimag32.exe Workstation background program for Network Associates’ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Y Naimagent_UI naimag32.exe Workstation background program for Network Associates’ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
X Name Iexplorer0.exe Added by the THREADSYS TROJAN!
X NAP32 NAP32.exe Premium rate adult content dialler
X Narrator ******.exe [* = random char] Transponder/VX2 related adware
X Natal Natal.scr Added by the OPASERV.AE WORM!
X NAV RuxDLL32.exe Added by the MAPSON.D WORM!
Y NAV Agent navapw32.exe Norton Anti-Virus's background scanning process
X nAv AGENT N/A Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
X NAV Agent systems.exe Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name
X NAV Agent winsnav.vbs Added by the ANPES WORM!
X NAV Auto Protect msfwe1.exe Added by a variant of the RBOT WORM!
X NAV Auto Protect navprotect.exe Added by a variant of the RBOT WORM!
X NAV Auto Protect dnsserv.exe Added by a variant of the SDBOT WORM!
X NAV Auto Protect mcafee32.exe Added by a variant of the SPYBOT WORM!
X NAV Auto Update Navautoupdate.exe Added by a variant of the SPYBOT WORM!
X NAV Auto Updates csrssp.exe Added by a variant of the SDBOT WORM!
X NAV Auto Updates navwindows.exe Added by a variant of the SDBOT WORM!
N NAV CfgWiz cfgwiz.exe Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
N NAV Configuration Wizard cfgwiz.exe Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
U NAV DefAlert DefAlert.exe Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X NAV Live Update [path to worm] Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
X NAV Scan Service NAVSCAN32.EXE Added by the SDBOT.VG WORM!
X NavAgent32 lasvr32.exe Added by the FEMOT.D WORM!
X NavAgent32 SCardSvr32.Exe Added by the MOFEI.B WORM!
X navapp navapp.exe NavExcel adware variant
Y navapw32 navapw32.exe Norton Anti-Virus's background scanning process
U Naviscope naviscope.exe Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
X NaviSearch nls.exe NaviSearch, eXact Advertising variant
X navman_20 sysnav32.exe Hijacker, possibly a CoolWebSearch variant
X navp.exe navp.exe Added by the AGOBOT-OE WORM!
X NavPass NavPass.exe Free system for gaining access to and downloading from adult content web-sites
X NavScan [filename] Added by the OBSORB TROJAN!
X NAVSCANNER32 NAVSCANNER32.EXE Added by the RBOT.QC WORM!
X NAVUpd rundll32.exe navupd.dll, Startup Added by the NAVU TROJAN!
N NB Common Dialog Enhancements COMDLGEX.EXE Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
N NB Start Menu STARTM.EXE Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
N NB Windows Patterns WINDBKGND.EXE Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
U NBJ NBJ.exe Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups
U NbkCtrl NbkCtrl.exe Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
X NBT System alias [path] repcale.exe [path] beird.exe Added by a variant of the RANDON.AN WORM!
? NCClient N/A ??
N NCD ncd.exe Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
? NCLAUNCH NCLAUNCH.Exe Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required?
N NCS_SS Csinsm32.exe Same as CleanSweep Smart Sweep-Internet Sweep
X NDAv csnss.exe Added by the SERFLOG.C WORM!
X NDAv svhost.exe Added by the SERFLOG.C WORM!
? NDDEAGNT NDDEAGNT.EXE WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
X NDIS Adapter ndis.exe Added by the SDBOT.VF WORM!
X NDIS Adapter windows.exe Added by the FORBOT-BR WORM!
X NDIS Adapter lsass2.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X NDplDeamon nstask32.exe Added by the RANDEX.E WORM!
X NDplDeamon winlogin.exe Added by the RANDEX.E WORM!
U NDPS DPMW32.EXE Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature
X NDrv NDrv.exe PurityScan/Clickspring adware
U NDSTray NDSTray.exe ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have
N Necbar Necbar.exe Nec Assistant; Ark's Navigator, a graphical interface for NEC computers
Y NECMFK necmfk.exe NEC wireless keyboard driver
U Necutray Necutray.exe Driver for external USB storage devices (hard drives, flsh disks, etc)
? neqprvfy.exe neqprvfy.exe Appears to be related to the downloading of some application - possibly verifying updates?
X Nero.ma ***.exe [*** = 2 to 3 digits] Added by the JONBARR.D WORM!
X NeroAutoStartClient NeroASM.exe Added by the AGOBOT.VG WORM!
U NeroCheck nerocheck.exe Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
X NeroCheck regedit.exe Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD burning program. Also it is not the valid Windows registry editor which resides in C:Windows or C:Winnt wheras this version resides in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K) or C:WindowsSystem32 (WinXP)
U NeroFilterCheck NeroCheck.exe Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
N NeroNETTrayIcon NNServiceCtrl.exe System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network
X Net WINREG.EXE Added by the ASSASIN.D TROJAN!
U Net Accelerator NetAccelerator.exe Rizal NetAccelerator - "Optimizing Dial-Up, Lan, Cable, DSL, and Satellite connections do you want to speed up your Internet access up to 200% - 300% ???". Only required if you find it helps improve your performance
U Net Activity Diagram nad.exe Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs
N Net-It Launcher NILaunch.exe Net-It - web publishing software
U NetAccelerator NetAccel.exe NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance
X NetAdm7 NETADM7.EXE Added by the BANCOS.F TROJAN!
X Netapi Netapi.exe Added by the NETDEVIL.14 TROJAN!
X NetApp winserv.exe Added by the SHADOWTHIEF TROJAN!
X netconfig netconfig.exe Added by the NETCONF TROJAN!
U NetCruiser Dialer NCDialer.exe NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"
X netdaemon netdaemon /v Malware designed to "kill" a number of antispyware applications (SpyBot, Giant, SpyDoctor, SpySweeper, SpyHunter, Anvir, WinPatrol, and more)
X netdll32 netdll32.exe Added by the CRYPTER.A TROJAN!
X netdllex netdllex.Exe Added by the CRYPTER.A TROJAN!
X NetDy VisualGuard.exe Added by the NETSKY.N or NETSKY.W WORMS!
X NETFP32.EXE NETFP32.EXE Added by the AGENT.CD TROJAN!
? netfxupdate netfxupdate.exe Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan?
? NetFxUpdate_v1.0.3705 netfxupdate.exe Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan?
U NetGuard NetGuard.exe FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor
U Netlimiter Netlimiter.exe Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."
N Netline User netchk.exe Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example
X NetLink netlink32.exe Added by the GAOBOT.WO WORM!
X NetLogon userint.exe Added by the SDBOT-BC WORM!
X NetManagerService ntss.exe Added by the BESTPICS.A TROJAN!
X NetMeter NetMeter.exe NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
X NetMon netmon.exe Added by the MIMAIL.M WORM!
U netmsg netmsg.exe Net_Message is a small tool to send messages across the network, using the Windows Messenger Service, so there is no client install required to receive the messages. It has a number of other features as well
U NetPatrol winclient.exe NetPatrol network monitoring software
X netpc32.exe netpc32.exe Malware, probably CoolWebSearch parasite related
N NetPerSec NetPerSec.exe NetPerSec - measures the real-time speed of your Internet connection
N NetPumper NetPumperIEProxy.exe NetPumper download manager - bundles Cydoor and SaveNow adware, see here
X NetReach nrcheck.exe Added by an unidentified VIRUS, WORM or TROJAN!
X Netropa Internet Receiver Netropa.exe Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
U NetRun NetRun.exe NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost
N Netscape Messenger NETSCAPE.EXE In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed
N Netscp6 Netscp6.exe Netscape 6
X netservices recall.exe Added by a variant of the SDBOT WORM!
U NetShow Powerpoint Helper NSPPTHLP.EXE If disabled, user created fonts can no longer be seen by other programs
N NetStat Live Nsl.exe AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data
X netsv32 netsv32.exe Added by the SDBOT-PX WORM!
U NetTime NETTIME.EXE From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."
U NetTurbo netturbo.exe NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled
X Netunit32 wunit32.exe Added by an unidentified WORM or TROJAN!
X NetWatch32 netwatch.exe Added by the MIMAIL.C WORM!
N Netword Agent nwant33.exe An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs

Start Up Applications N Page 2
X NetWork csrs.exe Added by the AGOBOT.JJ WORM!
X Network Administration NAS.exe Added by the ANTILAM.20.Q TROJAN!
X Network Administration Service rsvc32.exe Added by the RBOT.ABH WORM!
U Network Associates Error Reporting Service TBMon.exe Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
U NetWork Device Switch NetDevSW.exe Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X Network Host Controller [path to trojan] Added by the WHISPER TROJAN!
X Network Protocol Service wuamgrd.exe Added by the RBOT.EA WORM!
X Network protocol service wintcp.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Network Security Guard **********.exe [* = random char] CoolWebSearch parasite related
X Network Service svchost.exe CoolWebSearch parasite related. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X Network Service Manager netsvc.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Network Service Manager netsvc.exe Added by a variant of the GAOBOT/AGOBOT WORM!
X NetworkAssociates Inc internet.exe Added by the LOVGATE WORM!
X NetworkClient NetworkClient.exe Added by the LEMUR WORM!
X Networks Configurator NetConfs.exe Added by the RBOT-OX WORM!
X Networks Controler Netsis.exe Added by the RBOT-NG WORM!
N NetworkSetup dlink.exe D-Link System Tray icon
X Netzip Smart Downloader npnzdad.exe Advertising spyware
N NetZIPFolders nzfprop.exe Netzip Classic zip file manager
X NeuroMedia(IESpeaker) NeuroMedia.exe Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available
N NeuroSpeech OESpeaker OEMonitor.exe Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not
X New.net rundll32.exe NewDotNetStartup Newdot~2.exe NewDotNet foistware
X New.net Startup rundll32 [path], NewDotNetStartup -s NewDotNet foistware
X NEWDOT~1 rundll32.exe NewDotNetStartup Newdot~2.exe NewDotNet foistware
? News Service ispnews.exe F-Secure antivirus related. However, is this particular item required?
N Newsalrt NEWSALRT.EXE MSNBC News system tray utility to alert you to new news
X Newsgroup lptt01 newsgroup.exe Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X Newsgroup ml097e newsgroup.exe Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N NewsUpd newsupd.exe For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.
X NewtonKnowsUpd NewtKnow.exe ...NewtnUpd.dll, runkey NewtonKnow hijacker
U NFM Service NPDOR9x.exe Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required
N nForce Tray Options sstray.exe nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
U NGClient ngctw32.exe Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually
N NGServer ngserver.exe Symantec/Norton Ghost Console service
X NiceDownloads rundll32.exe MSA64CHK.dll, DllMostrar MatrixDialer related
N Nielsen NetRatings insight.exe Nielsen NetRatings -  "Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site’s audience and your customers". Is it required?
X nikLaus nikLaus.exe Added by the NIKLAS WORM!
N NInit NInit.exe Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
Y nisserv NISSERV.EXE Norton Personal Firewall
Y Nisum NISUM.EXE Norton Personal Firewall
X NJG40 NJG40.EXE Added by the BANCOS.D TROJAN!
N NkvMon.exe NkvMon.exe Nikon View 5 - for transferring pictures from Nikon digital cameras
N NkVwMon.exe NkVwMon.exe Nikon View - for transferring pictures from Nikon digital cameras
X NLS Keyboard keyboard.exe Added by a variant of the SPYBOT WORM!
? NMSSvc NMSSVC.EXE NIC Management Service - diagnostics program for Intel Pro family network cards
Y NMSVC nmSvc.exe Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it
U NNSvc nnsvc.exe NetNanny internet filter
X No Credit Card plugin-[random].exe Adult content pop-up dialler
U No-IP DUC DUC20.exe Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available
U NoAds NoAds.exe Blocks advertisement banners in Internet Explorer
N NoAdware NoAdware.exe Adware/spyware remover - not particularly recommended, see here
X Nocana [path to worm] Added by the ANACON-B WORM!
U Nod32CC nod32cc.exe Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button
Y NOD32kernel Nod32krn.exe Nod32 Antivirus Version 2
Y nod32kui nod32kui.exe Nod32 Antivirus Version 2
Y NOD32POP3 Pop3scan.exe POP3 E-mail part of Eset's NOD32 virus-scanner
? NodeMnger Nodemngr.exe Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?
X nodriver AUEKXRZ.EXE Added by a variant of the SPYBOT WORM!
X Noha aasd.exe PurityScan/Clickspring adware
N Nokia Connection Monitor NclConf.exe Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
U Nokia Tray Application NclTray.exe Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on
U NOMAD Detector ctmnrun.exe Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
N NomdCheck nomdchek.exe Part of Intel's Native Audio
U nomtray nomtray.exe System Tray access to NetMotion Wireless options - including connectivity status (see here)
U Norman ZANDA ZLH.EXE System Tray icon for Norman Antivirus
X Norton Antivirus AV FVProtect.exe Added by the NETSKY.P WORM! Note - this is not the popular AV software!
X Norton AntiVirus Sys NAVsys32.exe Added by a variant of the WOOTBOT WORM!
X Norton Auto Protect nava.exe Added by an unidentified WORM or TROJAN!
Y Norton Auto-Protect navapw32.exe Norton Anti-Virus's background scanning process
X Norton Auto-Protect ccApp.exe Added by the AKHER.D WORM! Note - for the valid Norton AV entry the filename is "navapexe". This is also not the valid Norton AV file with the same filename
? Norton AV Preload Premend.exe Norton Antivirus related. What does it do and is it required
N Norton Crashguard Monitor cgmenu.exe Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
N Norton Disk Doctor Ndd32.exe Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
Y Norton eMail Protect POPROXY.EXE Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
N Norton Ghost 9.0 GhostTray.exe Norton Ghost tray icon - the application can be launched manually
X Norton Guard 32 ntguard32.exe Added by a variant of the RBOT WORM!
X Norton Live Update Server cpsdv.exe Added by the AGOBOT.EW TROJAN!
X Norton Live Updater Cavapsvc.exe Added by the GAOBOT.AO WORM!
X Norton Live Updater Sochost.exe Added by the GAOBOT.AO WORM!
N Norton Navigator Loader nnloader.exe An older Norton utility for file management under Windows 95. More information here
X Norton Personal Firewall jah.exe Added by a variant of the SDBOT WORM!
X Norton Personal Firewall npfw.exe Added by the RBOT-UI WORM!
U Norton Program Scheduler nsched32.exe Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
U Norton Program Scheduler NPSsvc.exe Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
? Norton Program Scheduler Event Checker npscheck.exe Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker
X Norton Service Process navapvc.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Norton SpySweeper AutoUpdate navsw.exe Added by the FORBOT-AS WORM!
N Norton System Doctor Sysdoc32.exe Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
N Norton SystemWorks cfgwiz.exe Norton System Works configuration wizard. Reportedly a resource hog. Many users find they can live without loading it
X Norton Update ccUpdate.exe Added by a variant of the AGOBOT/GAOBOT WORM!
X Norton Updater winset.exe Added by a variant of the SPYBOT WORM!
X Norton Wizzard nwiz.exe Added by the GAOBOT.ZX or GAOBOT.ADV WORMS! Note - this is not the valid nVidia application that shares the same name
X norton32 norton32.exe Added by an unidentified VIRUS, WORM or TROJAN!
X NortonAV norton_antivirus.exe Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program
X nortonsantivirus ccEvtMngr.exe Added by the HZDOOR-A TROJAN!
U Notebook Maximizer maximizer_startup.exe Toshiba Notebook Maximizer software - adjust settings to save battery power and increase efficiency
? NotebookManager nbm.exe Associated with Acer notebook PCs. What does it do and is it required?
X Notepad lptt01 notepad.exe Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name
X Notepad ml097e notepad.exe Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name
X notepad.exe upx.exe Added by a variant of the AGENT.AH TROJAN!
Start Up Applications N Page 3
X Notn Eber.exe PurityScan/Clickspring adware
U NovaBackup * Tray Control NbkCtrl.exe Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here. * represents the version number
? NovaPortal Single User Service NPSU.exe ??
U NovastorSchedulerd SCHENGD.EXE NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
? NPFMonitor NPFMntor.exe Norton AntiVirus Firewall Install Monitor. What does it do and is it required?
U NPROTECT nprotect.exe Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here
? NPS Event Checker npscheck.exe Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker
X NS ns.exe Added by the AGOBOT-HS WORM!
X NSCheck NSCHECK.EXE NetSetter/Marketscore foistware
X nscntrl nscntrl.exe Added by the DLOAD-DC TROJAN!
X nsdlua nsdlua.exe All-In-One Telcom - adult content dialler
X nsdriver nssys32.exe NetShagg adware
X nse nse.exe Added by the AGOBOT-ML WORM!
U Nsengine Nsengine.exe Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
U NSHelper aexnsinstallhelper.exe Altiris Express Notification Server Install helper - monitors integrity of the installation
X nssysconf [random filename] Added by the VIVIA.A TROJAN!
X nstat netstat.exe Adult content dialler
X NSupdate NSupdate.exe Adult content dialer
X Nsvdr nsvdr.exe Adult content dialler
N NSystemMonitor Symmon.exe Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging
N NT Kernel Patch ntkrnlpt.exe FaxServe network fax software
X NT Logging Service Syslog32.exe Added by the DONK.B or  DONK.C or DONK.L or DONK.M or DONK.O WORMS!
X NT Services ntsvc.exe Added by the AGOBOT.VJ WORM!
X ntdll ntdll.exe Added by the BIONET.404 TROJAN!
X NTDLM csrss.exe Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
X Ntech.patchs [trojan filename] Added by the LEMIR.G TROJAN!
X ntechin n20050308.exe Adware, probably VX2/Look2Me related
X NTFS16 ntfs16.exe Added by the RBOT-LY WORM!
Y NTFSCLUP NTFSCLUP.EXE Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting"
X ntldr ntldr.exe Browser hijacker to search-control.com (TrojanDropper.Win32.Small.ig). In addition to Registry changes found by HijackThis, also creates the following system files: C:WINDOWSSYSTEMntldr.exe, C:m.exe, C:WINDOWSSearch-For-You.url, C:n.bat, C:q.exe, C:r.bat
N ntlfreedom rundll32 [path] RyDial.dll, QuickStart NTL Freedom dial-up ISP software - not required
X NTP Server [path to trojan] Added by the RANKY.F TROJAN!
N NTrtc ntrtc.exe Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here
N ntsmod ntsmod.exe Adware, probably VX2/Look2Me related
X NTsocket NoeWinnt.exe Added by the ATAKA-E TROJAN!
X NTsrv.exe NTsrv.exe Added by a variant of the SERVU-O TROJAN!
U nTune nTune.exe nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards
X ntupdate dnsvc.exe Added by the SDBOT-TC WORM!
U NTVDM NTVDM.EXE Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
X ntvdscm ntvdscm.exe Added by the SCKEYLOG.O TROJAN!
Y NuTCSetupEnviron ncoeenv.exe Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone
X NvClipRsv svchost.exe Added by the DUMARU-AK WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X NvClipRsv swchost.exe Added by the DUMARU-AK WORM!
? NVCLOCK rundll32 nvclock.dll, fnNvclock Overclocking utility for nVidia based graphics cards?
? NvColorInit rundll32.exe NvQtwk.dll, NvColorInit Associated with Nvidia based graphics cards
U NvCpl rundll32.exe NvCpl.dll, NvStartup Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
X NvCpl NvCpl.EXE Added by the YANZ.B WORM!
U NvCpl NvCpl.EXE Added by the YANZ.B WORM!
X NvCplD m2gr32.exe "Switch" premium rate adult content dialler
X NvCplD ntcpl.exe Switch adult content dialler
N NvCplDaemon rundll32.exe NvQtwk.dll, NvCplDaemon System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here)
U NvCplDaemon rundll32.exe NvCpl.dll, NvStartup Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
X NvCplDmn NAVSVC.EXE Added by an unidentified VIRUS, WORM or TROJAN!
X NvCplScan nvsc32.exe Added by a variant of the IRC.BOT TROJAN!
X NvCplScan msc32.exe Added by the FORBOT-DD WORM!
X NvCplScan winasp.exe Added by a variant of the RBOT WORM!
X NvCplScan nvsc32.exe Added by the BROPIA.N WORM!
X nvd32 lptt01 nvd32.exe Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X nvd32 ml097e nvd32.exe Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X Nvid [8 random charachters] Unidentified adware
X Nvid32 Nvid32.exe Added by the GEMA TROJAN!
X Nvidex32 Nvidex32.exe Added by the GEMA TROJAN!
X Nvidia Control Panel ncsvc32.exe Added by an unidentified VIRUS, WORM or TROJAN!
X NVIDIA Driver MSPMSPSU.EXE Added by the WOOTBOT.Y WORM!
N NVIDIA nForce APU1 Utilities NVATray.exe nVidia's nForce Audio Processing Unit (APU)- "provides 3D positional audio and DirectX 8.0 compatibility, and encodes and decodes Dolby Digital 5.1 audio in real time"
U NVIDIA nTune nTune.exe nVidia nTune - motherboard monitoring and overclocking utility for nVidia nForce chipset based motherboards
X NVIDIA Video drivers video_32D.exe Added by the AGOBOT.KV WORM!
X Nvidia32 nvidia32.exe CoolWebSearch parasite variant
N NvidiaQuickTweak rundll32.exe NvQtwk.dll, NvTaskbarInit System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
U NVIEW rundll32.exe nview.dll, nViewLoadHook This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
N NvInitialize rundll32.exe NvQtwk.dll, NvXTInit Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
Y NVmax NVmax.exe NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
N NVMCTRAY RUNDLL32.EXE ...NVMCTRAY.DLL, NvTaskbarInit System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
U NvMediaCenter RunDLL32.exe NvMCTray.dll, NvTaskbarInit System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
N NVMixerTray NVMixerTray.exe System Tray access to audio controls from nVidia's motherboard ForceWare software
N NVQuickTweak rundll32.exe NvQtwk.dll, NvTaskbarInit System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
Y NVRaidService nvraidservice.exe nVidia NVRaid - hard disk striping/mirroring utility for increased performance and reliability. Required if you have a RAID setup
N NVRT nvrt.exe NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
? NVRTClk NVRTClk.exe Related to a Gigabyte video card. What does it do, and is it required?
X nvsv32.exe nvsv32.exe Added by the FORBOT-DI WORM!
N NvSvc nvsvc.exe NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
X nvsvca32 nvsvca32.exe Adware - recognized by Kaspersky antivirus as Trojan-Downloader.Agent.is
X NVSystem32 nvscv32.exe Added by the AGOBOT-NO WORM!
X NvXplDeamon xstyles.exe Added by the SMALL.AJ VIRUS!
? NWEReboot dummy.exe ??
N nwiz nwiz.exe Associated with the newer versions of nVidia graphics cards drivers.  Allows you to immensely improve desktop layouts by setting preferences and optimizations.  However, this isn't necessary for the operation of your system
Y Nwpopup Nwpopup.exe Broadcast message handler part of Novell Netware that displays server, printer and other messages
U nwrecmsg nwrecmsg.exe Broadcast message handler part of Novell Netware that displays server, printer and other messages - can cause crashes
Y NWTRAY nwtray.exe Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client