HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

Key: "Y" - Normally leave to run at start-up "N" - Not required - typically infrequently used tasks that can be started manually if necessary "U" - User's choice - depends whether a user deems it necessary "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs" "?" - Unknown

	Startup Name	Process Name	Details
X	NDAv	csnss.exe	"Added by the SERFLOG.C WORM!"
X	NDAv	svhost.exe	"Added by the SERFLOG.C WORM!"
?	NDDEAGNT	NDDEAGNT.EXE	"WinNT default process. Network Dynamic Data Exchange (DDE) Agent
X	NDIS Adapter	ndis.exe	"Added by the SDBOT.VF WORM!"
X	NDIS Adapter	windows.exe	"Added by the FORBOT-BR WORM!"
X	NDIS Adapter	lsass2.exe	"Added by the WOOTBOT.CW WORM!"
X	NDIS Adapter	servenxpp.exe	"Added by the FORBOT-GP WORM!"
X	Ndpldaemon	[path to trojan]	"Added by the RPCSDBOT-A TROJAN!"
X	NDplDeamon	nstask32.exe	"Added by the RANDEX.E WORM!"
X	NDplDeamon	winlogin.exe	"Added by the RANDEX.E WORM!"
U	NDPS	DPMW32.EXE	"Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature"
X	NDrv	NDrv.exe	"PurityScan/Clickspring adware"
U	NDSTray	NDSTray.exe	"ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required
U	NDSTray.exe	NDSTray.exe	"ConfigFree Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required
N	Necbar	Necbar.exe	"Nec Assistant; Ark's Navigator
Y	NECMFK	necmfk.exe	NEC wireless keyboard driver
U	Necutray	Necutray.exe	"Driver for external USB storage devices (hard drives
?	neqprvfy.exe	neqprvfy.exe	"Appears to be related to the downloading of some application - possibly verifying updates?"
X	Nero	shch.exe	"Added by a variant of the EB TROJAN!"
X	Nero Checker	nerocheck.exe	"Added by the PROXY-X TROJAN! Note - this is not related to ""Nero Burning Rom"" CD writing software"
N	Nero DriveSpeed	DRIVESPEED.EXE	"Ahead Nero DriveSpeed - set the CD reading speed of a CD/DVD drive on-the-fly to reduce the noise on high-speed drives"
X	Nero Updater.6.12	wmp9.exe	"Added by the AGOBOT-AAG WORM!"
X	Nero.ma	***.exe [*** = 2 to 3 digits]	"Added by the JONBARR.D WORM!"
X	NeroAutoStartClient	NeroASM.exe	"Added by the AGOBOT.VG WORM!"
U	NeroCheck	nerocheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
X	NeroCheck	regedit.exe	"Added by the DOOMJUICE.B WORM! Note - this is not the valid Ahead Nero CD/DVD burning program. Also
X	NeroFil	NeroFil.EXE	"Added by the RBOT.EAM TROJAN!"
U	NeroFilterCheck	NeroCheck.exe	Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
X	NeroLoader	NeroLoader.exe	"Added by the BANCBAN-EJ TROJAN!"
N	NeroNETTrayIcon	NNServiceCtrl.exe	"System tray access to NeroNET - Ahead Software's network-capable extension of their CD/DVD burning program. NeroNET allows a burner to be shared across a network"
X	NeroUpdater6.8	winjava.exe	"Added by the AGOBOT.AMK WORM!"
X	Net	WINREG.EXE	"Added by the ASSASIN.D TROJAN!"
U	Net Accelerator	NetAccelerator.exe	"Rizal NetAccelerator - ""Optimizing Dial-Up
U	Net Activity Diagram	nad.exe	"Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs"
X	NET Bios Stats	ntbstats.exe	"Added by the SDBOT-ZX WORM!"
U	Net iD	iid.exe	"""With the Net_iD program
X	Net**.exe [* = random char]	Net**.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
X	Net**32.exe [* = random char]	Net**32.exe [* = random char]	"CoolWebSearch/HomeSearch adware - for examples
N	Net-It Launcher	NILaunch.exe	"Net-It - web publishing software"
U	NetAccelerator	NetAccel.exe	"NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster
X	NetAdm7	NETADM7.EXE	"Added by the BANCOS.F TROJAN!"
X	Netapi	Netapi.exe	"Added by the NETDEVIL.14 TROJAN!"
X	netapi32	netapi32.exe	Added by an unidentified TROJAN!
X	NetApp	winserv.exe	"Added by the SHADOWTHIEF TROJAN!"
X	Netbios Helper	nbthlp.exe	"Added by the BANKER.Y TROJAN!"
X	NetBiosSrvc	HPSrvPrt.exe	"Added by the SDBOT-COL WORM!"
X	netconfig	netconfig.exe	"Added by the NETCONF TROJAN!"
U	NetCruiser Dialer	NCDialer.exe	"NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected
X	netdaemon	netdaemon /v	"Malware designed to ""kill"" a number of antispyware applications (SpyBot
X	netdll32	netdll32.exe	"Added by the CRYPTER.A TROJAN!"
X	netdllex	netdllex.Exe	"Added by the CRYPTER.A TROJAN!"
X	NetDy	VisualGuard.exe	"Added by the NETSKY.N or NETSKY.W WORMS!"
X	NETFP32.EXE	NETFP32.EXE	Added by the AGENT.CD TROJAN!
?	netfxupdate	netfxupdate.exe	"Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan?"
?	NetFxUpdate_v1.0.3705	netfxupdate.exe	"Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan?"
U	NetGuard	NetGuard.exe	FBM Software ZeroSpyware 2004 spyware detector and remover - real time monitor
X	nethost.exe	[path to file]	"Added by the PERDA-J TROJAN!"
U	Netlimiter	Netlimiter.exe	"Netlimiter - ""An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."""
N	Netline User	netchk.exe	"Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game
X	NetLink	netlink32.exe	"Added by the GAOBOT.WO WORM!"
X	NetLogon	userint.exe	"Added by the SDBOT-BC WORM!"
U	NetManageImport	nmcpdata.exe	"NetManage business software related"
X	NetManagerService	ntss.exe	"Added by the BESTPICS.A TROJAN!"
X	NetMeter	NetMeter.exe	"NetRatings Premeter spyware"
X	NetMeter	NielsenOnline.exe	"Appears to have possible Malware functions
X	NetMon	netmon.exe	"Added by the MIMAIL.M WORM!"
X	Netmonw	Netmonw.exe	"Added by the BDOOR-FX TROJAN!"
U	netmsg	netmsg.exe	"Net_Message is a small tool to send messages across the network
U	NetPatrol	winclient.exe	"NetPatrol network monitoring software"
X	netpc32.exe	netpc32.exe	"Malware
N	NetPerSec	NetPerSec.exe	"NetPumper	NetPumperIEProxy.exe	"NetPumper download manager - bundles Cydoor and SaveNow adware
X	NetReach	nrcheck.exe	"Added by an unidentified VIRUS
X	Netropa Internet Receiver	Netropa.exe	Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
U	NetRun	NetRun.exe	"NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected
N	Netscape Messenger	NETSCAPE.EXE	"In Netscape 6 (I know for sure with 6.2.1
N	Netscp6	Netscp6.exe	Netscape 6
U	NetScreen-Remote	SafeCfg.exe	"NetScreen Remote VPN client software"
X	NetService	ntsvc.exe	"Added by the QQPASS-DU TROJAN!"
X	netservices	recall.exe	"Added by a variant of the SDBOT WORM!"
X	netservices	svchostn.exe	"Added by the SDBOT.GI WORM!"
X	NETServices	csxrs.exe	"Added by a variant of the SDBOT WORM!"
U	NetShow Powerpoint Helper	NSPPTHLP.EXE	"If disabled
X	NetStart	svchost.exe	"Added by the MKAR-A VIRUS! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a NETSTART subfolder"
N	NetStat Live	Nsl.exe	"AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data"
X	netsv32	netsv32.exe	"Added by the SDBOT-PX WORM!"
Y	NettGain2000	WgwMngr.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
Y	NettGain2000 Verifier	NettGain2000 Verifier.exe	Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed
U	NetTime	NETTIME.EXE	"From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols
U	NetTurbo	netturbo.exe	"NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled"
X	Netunit32	wunit32.exe	Added by an unidentified WORM or TROJAN!
X	NETVISIONAdulti	[random filename]	"Trafficadvance dialer"
X	NETVISIONPasse-partout	Passe-partout.exe	"Added by the DIALCAR-M DIALER!"
X	NetWatch32	netwatch.exe	"Added by the MIMAIL.C WORM!"
N	Netword Agent	nwant33.exe	An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
X	NetWork	csrs.exe	"Added by the AGOBOT.JJ WORM!"
X	Network Access	winssh.exe	"Added by a variant of the SDBOT WORM!"
X	Network Administration	NAS.exe	"Added by the ANTILAM.20.Q TROJAN!"
X	Network Administration Service	rsvc32.exe	"Added by the RBOT.ABH WORM!"
U	Network Associates Error Reporting Service	TBMon.exe	Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
X	Network Connections	internat.exe	"Added by the ZD TROJAN!"
X	network device driver	msfirewall.exe	"Added by the DELF-LB TROJAN!"
U	NetWork Device Switch	NetDevSW.exe	Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X	Network Host Controller	[path to trojan]	"Added by the WHISPER TROJAN!"
X	Network Host Service	msmnart32.exe	"Added by the RBOT-CJV WORM!"
X	Network Host Service	[random]32.exe	"Added by the RBOT-BAB WORM!"
X	Network Protocol Service	wuamgrd.exe	"Added by the RBOT.EA WORM!"
X	Network protocol service	wintcp.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Security	secsvc.exe	"Added by the RBOT-ALX WORM!"
X	Network Security Guard	**********.exe [* = random char]	"CoolWebSearch parasite variant"
X	Network Security Guard	[path to trojan]	"Added by the COLEM-A TROJAN!"
X	Network Service	svchost.exe	"Added by the STARTPA-CC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
X	Network Service	svhost.exe	"Added by the HACDEF-K TROJAN!"
X	Network Service Manager	netsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Service Manager	netsvc.exe	"Added by a variant of the GAOBOT/AGOBOT WORM!"
X	NetworkAssociates Inc	internet.exe	"Added by the LOVGATE WORM!"
X	NetworkClient	NetworkClient.exe	"Added by the LEMUR WORM!"
X	NetworkKey	netkey.exe	"Added by the IRCBOT-AJ TROJAN!"
X	Networks Configurator	NetConfs.exe	"Added by the RBOT-OX WORM!"
X	Networks Controler	Netsis.exe	"Added by the RBOT-NG WORM!"
N	NetworkSetup	dlink.exe	"D-Link System Tray icon"
X	Netzip Smart Downloader	npnzdad.exe	Advertising spyware
N	NetZIPFolders	nzfprop.exe	"NeuroMedia(IESpeaker)	NeuroMedia.exe	"Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available"
N	NeuroSpeech OESpeaker	OEMonitor.exe	"Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not"
X	New Csnm Manager	csmn.exe	"Added by the SDBOT.BZS WORM!"
X	New.net	rundll32.exe NewDotNetStartup Newdot~2.exe	"NewDotNet foistware"
X	New.net Startup	"rundll32 [path]	NewDotNetStartup -s"
X	NEWDOT~1	rundll32.exe NewDotNetStartup Newdot~2.exe	"NewDotNet foistware"
X	Newman	playavi.exe	"Added by the LINEAGE-AT TROJAN! Note - This trojan file is found in the Windowsjava or Winntjava folder"
X	newname	[path to trojan]	"Added by the DRSMARTL-S TROJAN!"
?	News Service	ispnews.exe	"F-Secure antivirus related. However
N	Newsalrt	NEWSALRT.EXE	MSNBC News system tray utility to alert you to new news

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Powered By Pac's Startup list