Anti-Malware, Anti-Trojan, Anti-Worm, Anti-Dialer, Anti-Rootkit and Anti-Spyware all in one program! Emsisoft Anti-Malware - Malware scanner to remove and delete malicious software.

English Deutsch French

Emsisoft HiJackFree

• HiJackFree Home
• Product Details
• Download
• Online Analysis

Support

• Emsisoft Forum
• Knowledgebase
• Process-List
• Autorun-List

About us

• Link to HiJackFree
• Profile

Autorun List

Keys:

Y	Normally harmless autorun.
N	Not required, but may be started.
U	User's choice. Start if necessary.
X	Definitely not required. Usually Malware.
?	Unknown

Filter:

Status:
All Y - Normally harmless autorun. N - Not required, but may be started. U - User's choice. Start if necessary. X - Definitely not required. Usually Malware. ? - Unknown
Search:

View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 863 autoruns. Autorun 1 to 100:

Status	Autorun name	Command	Description
Y	n/a TpShocks	TpShocks.exe	Part of the Active Protection System found on some IBM/Lenovo Thinkpad models - including the T, W, X and Z series. This provides airbag-like protection for your hard drive as the system has "an integrated motion sensor that continuously monitors the movement of the notebook, and, if a sudden change in motion is detected, it temporarily stops the hard drive to protect it from a potential crash". The user can also temporarily suspend APS via the Start Menu or (optional) System Tray icon and view the real-time status
U	N2PTray	Net2fone.exe	An Internet telephony application. Needed only if you have an account at Net2Phone, Inc
N	NADaemon	NADAEMON.EXE	Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
N	Naggerrunkey	nagger.exe	Packard Bell Free Internet Signup screen
X	nah_Shell	nah_cord.exe	Added by the HANAMBOT TROJAN!
Y	Naimagent_service	EPOAgentnaimas32.exe	Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
Y	Naimagent_UI	EPOAgentnaimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
Y	Naimagent_UI	naimag32.exe	Workstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
X	Name	Iexplorer0.exe	Added by the THREADSYS TROJAN!
X	Name Server	mswins.exe	Added by a variant of the SDBOT WORM!
X	NAMEDPIPE SYSTEM	namedpipe.exe	Added by the MYTOB-FH TROJAN!
X	nana2009	nana2009.exe	Added by the POISON.PG BACKDOOR!
X	nano	svchost.exe	Added by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
X	Nano Antivirus	nanoav.exe	Nano Antivirus rogue security software - not recommended, removal instructions here
X	NAP32	NAP32.exe	Premium rate adult content dialler
X	napv.exe	wupdate.exe	Added by the AGOBOT-JX BACKDOOR!
X	NarmonVirusAnti	smss.exe	Added by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder
X	Narrator	******.exe [* = random char]	Added by the QOOLOGIC TROJAN!
U	Narrator	Narrator.exe	Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
X	Natal	Natal.scr	Added by the OPASERV.AE WORM!
X	NAV	RuxDLL32.exe	Added by the MAPSON.D WORM!
Y	NAV Agent	navapw32.exe	Norton Anti-Virus's background scanning process
X	nAv AGENT	N/A	Added by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
X	NAV Agent	systems.exe	Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name
X	NAV Agent	winsnav.vbs	Added by the ANPES WORM!
X	NAV Agent	wmilib32.exe	Added by the VB-XU TROJAN!
X	NAV Auto Prot	navprot1.exe	Added by the RBOT.ZAC WORM!
X	NAV Auto Protect	msfwe1.exe	Added by a variant of the RBOT WORM!
X	NAV Auto Protect	navprotect.exe	Added by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec
X	NAV Auto Protect	dnsserv.exe	Added by a variant of the SDBOT WORM!
X	NAV Auto Protect	mcafee32.exe	Added by a variant of the SPYBOT WORM!
X	NAV Auto Update	[random filename]	Added by the SPYBOT-E WORM!
X	NAV Auto Update	iamsad.exe	Added by the SPYBOT-CE BACKDOOR!
X	NAV Auto Update	Sadness.exe	Added by the SPYBOT-E WORM!
X	NAV Auto Updates	csrssp.exe	Added by a variant of the SDBOT WORM!
X	NAV Auto Updates	navwindows.exe	Added by a variant of the SDBOT WORM!
X	NAV Auto Updates	slserves.exe	Added by the RBOT.COI BACKDOOR!
X	NAV Auto Updates	navupdaterx.exe	Added by a variant of the RBOT WORM!
N	NAV CfgWiz	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
N	NAV Configuration Wizard	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
U	NAV DefAlert	DefAlert.exe	Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X	NAV Live Update	[path to worm]	Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
X	NAV Scan Service	NAVSCAN32.EXE	Added by the SDBOT.VG WORM!
X	NAV_Update	NAV_Update.exe	Unidentified WORM or TROJAN!
X	NavAgent32	lasvr32.exe	Added by the FEMOT.D WORM!
X	NavAgent32	SCardSvr32.Exe	Added by the MOFEI.B WORM!
X	navapp	navapp.exe	NavExcel adware variant
Y	navapw32	navapw32.exe	Norton Anti-Virus's background scanning process
X	NAVCheck	navchk.exe	Premium rate adult content dialer
X	NAVCheck	shman.exe	Premium rate adult content dialer
X	Navegate	iiexplorer.exe	Added by the BANCBAN-OP TROJAN!
X	Navegate	wisterd.exe	Added by the BANKER-BOS TROJAN!
U	NaverPCGreen	NPCGreenUpgrader.exe	Related to Naver_Anti-virus Realtime Monitor From NHNCorp
U	Naviscope	naviscope.exe	Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
X	NaviSearch	nls.exe	NaviSearch, eXact Advertising variant
N	NavLoad	NAVBrowser.exe	Registration reminder for CorelDRAW 10
X	navman_20	sysnav32.exe	Hijacker, possibly a CoolWebSearch parasite variant
?	NAVMD25	UpdtNv28.exe	Added by Symantec for updating the MicroDefs for their AV products - is it required?
X	NAVMon32	NAVMon32.exE	Added by the WINKO.AO WORM!
X	NAVNet	***.tmp [* = random digit]	Unidentified adware
X	navp.exe	navp.exe	Added by the AGOBOT-OE WORM!
X	NavPass	NavPass.exe	Free system for gaining access to and downloading from adult content web-sites
X	NavProtect32	[path to trojan]	Added by the BANCOS-BA TROJAN!
X	NavScan	[filename]	Added by the OBSORB TROJAN!
X	NAVSCAN32.EXE	NAVSCAN32.exe	Added by the SDBOT-DO WORM!
X	NAVSCANNER32	NAVSCANNER32.EXE	Added by the RBOT.QC WORM!
X	NAVtask	NAVtask.exe	Added by the REMBOT-A BACKDOOR!
X	NAVUpd	rundll32.exe navupd.dll, Startup	Added by the NAVU TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
X	NAVWatch	NAVWatcher.exe	VX2.Transponder parasite updater/installer related
X	nawadll32	nawadll32.exe	Added by the SDBOT-ZI WORM!
X	nawdll32	nawdll32.exe	Added by the SDBOT-ZM WORM!
N	NB Common Dialog Enhancements	COMDLGEX.EXE	Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
U	NB Probe	NBProbe.exe	Monitors the status of notebooks from ASUS - including CPU (speed, temperature and fan), disk and system information
N	NB Start Menu	STARTM.EXE	Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
N	NB Windows Patterns	WINDBKGND.EXE	Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
X	NBInstall	MBDownloader_876919.exe	Added by the MIRAR_D TROJAN!
U	NBJ	NBJ.exe	Ahead Nero BackItUp - backup program. Only required for if you have scheduled back-ups
U	NbkCtrl	NbkCtrl.exe	Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
U	NBKeyScan	NBKeyScan.exe	This tool comes with a special version of Nero BackItUp for some external harddisks. Controls two buttons on the drive - one button power off the drive and the other directly calls Nero BackItUp to make a quick backup
X	NBT System alias	[path] repcale.exe [path] beird.exe	Added by a variant of the RANDON.AN WORM!
?	nbustrce1D	nbustrce1D.exe	Device driver, possibly CD/DVD - what exactly is it and is it required in startup?
X	NC1565	winntsrv -l -p10001 -d -e cmd.exe -L	Added by the NEWLEY-A WORM!
X	Ncao	osoa.exe	PurityScan adware
X	Ncao	urpo.exe	PurityScan adware
?	NCClient	N/A	??
N	NCD	ncd.exe	Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
N	NCLAUNCH	NCLAUNCH.exe	Part of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP
X	nClient	cnen.exe	Added by the DELBOT-AL WORM!
N	NclTray	NclTray.exe	Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager"
?	NcpBudget	ncpbudgt.exe	Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
?	NcpMonitor	ncpmon.exe	Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
?	NcpPopup	ncppopup.exe	Related to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
U	Ncr3	ncrcore3.exe	Network camera recording software for home/office security systems using wired or wireless Panasonic cameras that enables you to locally view, record and adjust the settings for the cameras - see here
N	NCS_SS	Csinsm32.exe	Same as CleanSweep Smart Sweep-Internet Sweep
Y	NCSW Server	NcsW.exe	LockLink access control management software. LockLink 7.0 lets users seamlessly manage both offline and online access control solutions available from IR Security & Safety
X	Ncua	ihoo.exe	PurityScan adware
X	NDAv	csnss.exe	Added by the SERFLOG.C WORM!
X	NDAv	svhost.exe	Added by the SERFLOG.C WORM!
?	NDDEAGNT	NDDEAGNT.EXE	WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
X	NDIS Adapter	ndis.exe	Added by the SDBOT.VF WORM!

The autorun list is presented in association with Sysinfo.org

Our Tip: a-squared Anti-Malware - Best In Test!