| Status | Autorun name | Aufruf | Beschreibung |
| U | N2PTray | Net2fone.exe | An Internet telephony application. Needed only if you have an account at Net2Phone, Inc |
| N | NADaemon | NADAEMON.EXE | Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required |
| N | Naggerrunkey | nagger.exe | Packard Bell Free Internet Signup screen |
| X | nah_Shell | nah_cord.exe | Added by the HANAMBOT TROJAN! |
| Y | Naimagent_service | EPOAgentnaimas32.exe | Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages |
| Y | Naimagent_UI | EPOAgentnaimag32.exe | Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| Y | Naimagent_UI | naimag32.exe | Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan |
| X | Name | Iexplorer0.exe | Added by the THREADSYS TROJAN! |
| X | Name Server | mswins.exe | Added by a variant of the SDBOT WORM! |
| X | NAMEDPIPE SYSTEM | namedpipe.exe | Added by the MYTOB-FH TROJAN! |
| X | nana2009 | nana2009.exe | Added by the POISON.PG BACKDOOR! |
| X | nano | svchost.exe | Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Nano Antivirus | nanoav.exe | Nano Antivirus rogue security software - not recommended, removal instructions here |
| X | NAP32 | NAP32.exe | Premium rate adult content dialler |
| X | napv.exe | wupdate.exe | Added by the AGOBOT-JX BACKDOOR! |
| X | NarmonVirusAnti | smss.exe | Added by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder |
| X | Narrator | [random].exe | Added by the QOOLOGIC TROJAN! |
| U | Narrator | Narrator.exe | Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech |
| U | Nas | nas.exe | Clearx adware |
| X | Natal | Natal.scr | Added by the OPASERV.AE WORM! |
| U | Natural Desktop | Natural Desktop.exe | Animated desktop gadget included with the Natural Desktop theme for MyColors from Stardock Corporation |
| X | NAV | RuxDLL32.exe | Added by the MAPSON.D WORM! |
| Y | NAV Agent | navapw32.exe | Background scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware |
| X | nAv AGENT | N/A | Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes |
| X | NAV Agent | systems.exe | Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name |
| X | NAV Agent | winsnav.vbs | Added by the ANPES WORM! |
| X | NAV Agent | wmilib32.exe | Added by the VB-XU TROJAN! |
| X | NAV Auto Prot | navprot1.exe | Added by the RBOT.ZAC WORM! |
| X | NAV Auto Protect | msfwe1.exe | Added by a variant of the RBOT WORM! |
| X | NAV Auto Protect | navprotect.exe | Added by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec |
| X | NAV Auto Protect | dnsserv.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Protect | mcafee32.exe | Added by a variant of the SPYBOT WORM! |
| X | NAV Auto Update | [random filename] | Added by the SPYBOT-E WORM! |
| X | NAV Auto Update | iamsad.exe | Added by the SPYBOT-CE BACKDOOR! |
| X | NAV Auto Update | Sadness.exe | Added by the SPYBOT-E WORM! |
| X | NAV Auto Updates | csrssp.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Updates | navwindows.exe | Added by a variant of the SDBOT WORM! |
| X | NAV Auto Updates | slserves.exe | Added by the RBOT.COI BACKDOOR! |
| X | NAV Auto Updates | navupdaterx.exe | Added by a variant of the RBOT WORM! |
| X | NAV Auto Updates | navupdaters.exe | Added by the RBOT-UN WORM! |
| U | NAV CfgWiz | CfgWiz.exe | Configuration wizard for older versions of Symantec's Norton AntiVirus. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton AntiVirus is launched via the Start Menu |
| U | NAV DefAlert | DefAlert.exe | Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis |
| X | NAV Live Update | [path to worm] | Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec |
| X | NAV Scan Service | NAVSCAN32.EXE | Added by the SDBOT.VG WORM! |
| X | NAV_Update | NAV_Update.exe | Unidentified WORM or TROJAN! |
| X | NavAgent32 | lasvr32.exe | Added by the FEMOT.D WORM! |
| X | NavAgent32 | SCardSvr32.Exe | Added by the MOFEI.B WORM! |
| X | navapp | navapp.exe | NavExcel adware variant |
| Y | navapw32 | navapw32.exe | Background scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware |
| X | navautoprotect | [path to trojan] | Added by the RANKY.CY TROJAN! The most common filename is MsJ32.exe, located in %System% |
| U | NAVCFG | CfgWiz.exe | Configuration wizard for older versions of Symantec's Norton AntiVirus. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton AntiVirus is launched via the Start Menu |
| X | NAVCheck | navchk.exe | Premium rate adult content dialer |
| X | NAVCheck | shman.exe | Premium rate adult content dialer |
| X | Navegate | iiexplorer.exe | Added by the BANCBAN-OP TROJAN! |
| X | Navegate | wisterd.exe | Added by the BANKER-BOS TROJAN! |
| U | NaverPCGreen | NPCGreenUpgrader.exe | Related to Naver_Anti-virus Realtime Monitor From NHNCorp |
| U | Naviscope | naviscope.exe | Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more |
| X | NaviSearch | nls.exe | NaviSearch adware |
| N | NavLoad | NAVBrowser.exe | Registration reminder for CorelDRAW 10 |
| X | navman_20 | sysnav32.exe | Hijacker, possibly a CoolWebSearch parasite variant |
| ? | NAVMD25 | UpdtNv28.exe | Added by Symantec for updating the MicroDefs for their AV products - is it required? |
| X | NAVMon32 | NAVMon32.exE | Added by the WINKO.AO WORM! |
| X | NAVNet | ***.tmp [* = random digit] | Unidentified adware |
| X | navp.exe | navp.exe | Added by the AGOBOT-OE WORM! |
| X | NavPass | NavPass.exe | Free system for gaining access to and downloading from adult content web-sites |
| X | NavProtect32 | [path to trojan] | Added by the BANCOS-BA TROJAN! |
| X | NavScan | [filename] | Added by the OBSORB TROJAN! |
| X | NAVSCAN32.EXE | NAVSCAN32.exe | Added by the SDBOT-DO WORM! |
| X | NAVSCANNER32 | NAVSCANNER32.EXE | Added by the RBOT.QC WORM! |
| X | NAVtask | NAVtask.exe | Added by the REMBOT-A BACKDOOR! |
| X | NAVUpd | rundll32.exe navupd.dll, Startup | Added by the NAVU TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | NAVWatch | NAVWatcher.exe | VX2.Transponder parasite updater/installer related |
| X | nawadll32 | nawadll32.exe | Added by the SDBOT-ZI WORM! |
| X | nawdll32 | nawdll32.exe | Added by the SDBOT-ZM WORM! |
| N | NB Common Dialog Enhancements | COMDLGEX.EXE | Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs |
| U | NB Probe | NBProbe.exe | Monitors the status of notebooks from ASUS - including CPU (speed, temperature and fan), disk and system information |
| N | NB Start Menu | STARTM.EXE | Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B |
| N | NB Windows Patterns | WINDBKGND.EXE | Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows |
| U | NBAgent | NBAgent.exe | Core task for Nero BackItUp version 4 which provides System Tray access and runs all backup jobs (to hard disk, Network, FTP, CD/DVD) for the files and folders that you specify to either a local folder or Nero Online Backup. Required if you have have any scheduled backups or use the Autobackup feature. Installed as part of both Nero BackItUp & Burn and Nero Multimedia Suite 10 |
| U | NBCore | NBCore.exe | Autobackup feature of Nero BackItUp version 4 which runs in the background and backs up the files and folders that you specify to either a local folder or Nero Online Backup. If there are modifications or new files, Autobackup carries out a backup update automatically, replacing the existing backup with the current one. Installed as part of both the stand alone product and Nero 9 digital media suites (CD/DVD burning, authoring, etc) |
| U | NBHGui | NBHGui.exe | SecurDisc support for the Nero InCD packet writing utility. "SecureDisc includes special protection properties, such as data integrity, rebuilding, encryption and duplication protection". If you don't use InCD or your optical drive doesn't support SecureDisc you can disable this |
| X | NBInstall | MBDownloader_876919.exe | Added by the MIRAR_D TROJAN! |
| U | NBJ | NBJ.exe | Scheduler for backup jobs using Nero BackItUp in earlier versions of Nero digital media suites (CD/DVD burning, authoring, etc). If no backup jobs are scheduled this entry will remain but it will not run at start-up. If you have any scheduled backup jobs and try disabling it by a means other than the program's own option (right-click on tray icon → Settings) it will re-instate itself on the next run of Nero BackItUp |
| U | NbkCtrl | NbkCtrl.exe | Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here |
| U | NBKeyScan | NBKeyScan.exe | Nero BackItUp versions 2 thru 4 support the "Push for backup" feature that's implemented on some external hard disks - which enables the user to start a predefined backup by pushing a button on the drive. NBKeyScan is used to scan the peripherals for compatible devices and - if such devices have been found - to communicate between Nero BackItUp and the external hard drive. Installed as part of both stand alone products and Nero digital media suites (CD/DVD burning, authoring, etc) |
| X | NBT System alias | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| ? | nbustrce1D | nbustrce1D.exe | Device driver, possibly CD/DVD - what exactly is it and is it required in startup? |
| X | NC1565 | winntsrv -l -p10001 -d -e cmd.exe -L | Added by the NEWLEY-A WORM! |
| X | Ncao | osoa.exe | PurityScan adware |
| X | Ncao | urpo.exe | PurityScan adware |
| ? | NCClient | N/A | ?? |
| N | NCD | ncd.exe | Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path |
| N | NCLAUNCH | NCLAUNCH.exe | Part of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP |
| X | nClient | cnen.exe | Added by the DELBOT-AL WORM! |
| N | NclTray | NclTray.exe | Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager" |
| ? | NcpBudget | ncpbudgt.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| ? | NcpMonitor | ncpmon.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| ? | NcpPopup | ncppopup.exe | Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required? |
| U | Ncr3 | ncrcore3.exe | Network camera recording software for home/office security systems using wired or wireless Panasonic cameras that enables you to locally view, record and adjust the settings for the cameras - see here |
| Y | NCSW Server | NcsW.exe | LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety |
