| Status | Autorun name | Aufruf | Beschreibung |
| Y | n/a TpShocks | TpShocks.exe | Part of the Active Protection System found on some IBM/Lenovo Thinkpad models - including the T, W, X and Z series. This provides airbag-like protection for your hard drive as the system has "an integrated motion sensor that continuously monitors the movement of the notebook, and, if a sudden change in motion is detected, it temporarily stops the hard drive to protect it from a potential crash". The user can also temporarily suspend APS via the Start Menu or (optional) System Tray icon and view the real-time status |
| U | N2PTray | Net2fone.exe | An Internet telephony application. Needed only if you have an account at Net2Phone, Inc |
| N | NADaemon | NADAEMON.EXE | Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required |
| N | Naggerrunkey | nagger.exe | Packard Bell Free Internet Signup screen |
| X | nah_Shell | nah_cord.exe | Added by the HANAMBOT TROJAN! |
| Y | Naimagent_service | EPOAgentnaimas32.exe | Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages |
| Y | Naimagent_UI | EPOAgentnaimag32.exe | Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| Y | Naimagent_UI | naimag32.exe | Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| X | Name | Iexplorer0.exe | Added by the THREADSYS TROJAN! |
| X | Name Server | mswins.exe | Added by a variant of the SDBOT WORM! |
| X | NAMEDPIPE SYSTEM | namedpipe.exe | Added by the MYTOB-FH TROJAN! |
| X | nana2009 | nana2009.exe | Added by the POISON.PG BACKDOOR! |
| X | nano | svchost.exe | Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Nano Antivirus | nanoav.exe | Nano Antivirus rogue security software - not recommended, removal instructions here |
| X | NAP32 | NAP32.exe | Premium rate adult content dialler |
| X | napv.exe | wupdate.exe | Added by the AGOBOT-JX BACKDOOR! |
| X | NarmonVirusAnti | smss.exe | Added by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder |
| X | Narrator | ******.exe [* = random char] | Added by the QOOLOGIC TROJAN! |
| U | Narrator | Narrator.exe | Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech |
| X | Natal | Natal.scr | Added by the OPASERV.AE WORM! |
| X | NAV | RuxDLL32.exe | Added by the MAPSON.D WORM! |
| Y | NAV Agent | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | nAv AGENT | N/A | Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes |
| X | NAV Agent | systems.exe | Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name |
| X | NAV Agent | winsnav.vbs | Added by the ANPES WORM! |
| X | NAV Agent | wmilib32.exe | Added by the VB-XU TROJAN! |
| X | NAV Auto Prot | navprot1.exe | Added by the RBOT.ZAC WORM! |
| X | NAV Auto Protect | msfwe1.exe | Added by a variant of the RBOT WORM! |
| X | NAV Auto Protect | navprotect.exe | Added by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec |
| X | NAV Auto Protect | dnsserv.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Protect | mcafee32.exe | Added by a variant of the SPYBOT WORM! |
| X | NAV Auto Update | [random filename] | Added by the SPYBOT-E WORM! |
| X | NAV Auto Update | iamsad.exe | Added by the SPYBOT-CE BACKDOOR! |
| X | NAV Auto Update | Sadness.exe | Added by the SPYBOT-E WORM! |
| X | NAV Auto Updates | csrssp.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Updates | navwindows.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Updates | slserves.exe | Added by the RBOT.COI BACKDOOR! |
| X | NAV Auto Updates | navupdaterx.exe | Added by a variant of the RBOT WORM! |
| N | NAV CfgWiz | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| N | NAV Configuration Wizard | cfgwiz.exe | Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it |
| U | NAV DefAlert | DefAlert.exe | Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis |
| X | NAV Live Update | [path to worm] | Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec |
| X | NAV Scan Service | NAVSCAN32.EXE | Added by the SDBOT.VG WORM! |
| X | NAV_Update | NAV_Update.exe | Unidentified WORM or TROJAN! |
| X | NavAgent32 | lasvr32.exe | Added by the FEMOT.D WORM! |
| X | NavAgent32 | SCardSvr32.Exe | Added by the MOFEI.B WORM! |
| X | navapp | navapp.exe | NavExcel adware variant |
| Y | navapw32 | navapw32.exe | Norton Anti-Virus's background scanning process |
| X | NAVCheck | navchk.exe | Premium rate adult content dialer |
| X | NAVCheck | shman.exe | Premium rate adult content dialer |
| X | Navegate | iiexplorer.exe | Added by the BANCBAN-OP TROJAN! |
| X | Navegate | wisterd.exe | Added by the BANKER-BOS TROJAN! |
| U | NaverPCGreen | NPCGreenUpgrader.exe | Related to Naver_Anti-virus Realtime Monitor From NHNCorp |
| U | Naviscope | naviscope.exe | Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more |
| X | NaviSearch | nls.exe | NaviSearch, eXact Advertising variant |
| N | NavLoad | NAVBrowser.exe | Registration reminder for CorelDRAW 10 |
| X | navman_20 | sysnav32.exe | Hijacker, possibly a CoolWebSearch parasite variant |
| ? | NAVMD25 | UpdtNv28.exe | Added by Symantec for updating the MicroDefs for their AV products - is it required? |
| X | NAVMon32 | NAVMon32.exE | Added by the WINKO.AO WORM! |
| X | NAVNet | ***.tmp [* = random digit] | Unidentified adware |
| X | navp.exe | navp.exe | Added by the AGOBOT-OE WORM! |
| X | NavPass | NavPass.exe | Free system for gaining access to and downloading from adult content web-sites |
| X | NavProtect32 | [path to trojan] | Added by the BANCOS-BA TROJAN! |
| X | NavScan | [filename] | Added by the OBSORB TROJAN! |
| X | NAVSCAN32.EXE | NAVSCAN32.exe | Added by the SDBOT-DO WORM! |
| X | NAVSCANNER32 | NAVSCANNER32.EXE | Added by the RBOT.QC WORM! |
| X | NAVtask | NAVtask.exe | Added by the REMBOT-A BACKDOOR! |
| X | NAVUpd | rundll32.exe navupd.dll, Startup | Added by the NAVU TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | NAVWatch | NAVWatcher.exe | VX2.Transponder parasite updater/installer related |
| X | nawadll32 | nawadll32.exe | Added by the SDBOT-ZI WORM! |
| X | nawdll32 | nawdll32.exe | Added by the SDBOT-ZM WORM! |
| N | NB Common Dialog Enhancements | COMDLGEX.EXE | Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs |
| U | NB Probe | NBProbe.exe | Monitors the status of notebooks from ASUS - including CPU (speed, temperature and fan), disk and system information |
| N | NB Start Menu | STARTM.EXE | Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B |
| N | NB Windows Patterns | WINDBKGND.EXE | Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows |
| X | NBInstall | MBDownloader_876919.exe | Added by the MIRAR_D TROJAN! |
| U | NBJ | NBJ.exe | Ahead Nero BackItUp - backup program. Only required for if you have scheduled back-ups |
| U | NbkCtrl | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| U | NBKeyScan | NBKeyScan.exe | This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup |
| X | NBT System alias | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| ? | nbustrce1D | nbustrce1D.exe | Device driver, possibly CD/DVD - what exactly is it and is it required in startup? |
| X | NC1565 | winntsrv -l -p10001 -d -e cmd.exe -L | Added by the NEWLEY-A WORM! |
| X | Ncao | osoa.exe | PurityScan adware |
| X | Ncao | urpo.exe | PurityScan adware |
| ? | NCClient | N/A | ?? |
| N | NCD | ncd.exe | Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path |
| N | NCLAUNCH | NCLAUNCH.exe | Part of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP |
| X | nClient | cnen.exe | Added by the DELBOT-AL WORM! |
| N | NclTray | NclTray.exe | Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager" |
| ? | NcpBudget | ncpbudgt.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| ? | NcpMonitor | ncpmon.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| ? | NcpPopup | ncppopup.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| U | Ncr3 | ncrcore3.exe | Network camera recording software for home/office security systems using wired or wireless Panasonic cameras that enables you to locally view, record and adjust the settings for the cameras - see here |
| N | NCS_SS | Csinsm32.exe | Same as CleanSweep Smart Sweep-Internet Sweep |
| Y | NCSW Server | NcsW.exe | LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety |
| X | Ncua | ihoo.exe | PurityScan adware |
| X | NDAv | csnss.exe | Added by the SERFLOG.C WORM! |
| X | NDAv | svhost.exe | Added by the SERFLOG.C WORM! |
| ? | NDDEAGNT | NDDEAGNT.EXE | WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services |
| X | NDIS Adapter | ndis.exe | Added by the SDBOT.VF WORM! |
