Autorun List

Keys:

Y Normally harmless autorun.
N Not required, but may be started.
U User's choice. Start if necessary.
X Definitely not required. Usually Malware.
? Unknown

Filter:





View: All # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Show all

Found 1012 autoruns. Autorun 1 to 100:

StatusAutorun nameCommandDescription
Yn/a TpShocksTpShocks.exePart of the Active Protection System found on some IBM/Lenovo Thinkpad models - including the T, W, X and Z series. This provides airbag-like protection for your hard drive as the system has "an integrated motion sensor that continuously monitors the movement of the notebook, and, if a sudden change in motion is detected, it temporarily stops the hard drive to protect it from a potential crash". The user can also temporarily suspend APS via the Start Menu or (optional) System Tray icon and view the real-time status
UN2PTrayNet2fone.exeAn Internet telephony application. Needed only if you have an account at Net2Phone, Inc
NNADaemonNADAEMON.EXEProgram by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
NNaggerrunkeynagger.exePackard Bell Free Internet Signup screen
Xnah_Shellnah_cord.exeAdded by the HANAMBOT TROJAN!
YNaimagent_serviceEPOAgentnaimas32.exeNetworked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
YNaimagent_UIEPOAgentnaimag32.exeWorkstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
YNaimagent_UInaimag32.exeWorkstation background program for Network Associates McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
XNameIexplorer0.exeAdded by the THREADSYS TROJAN!
XName Servermswins.exeAdded by a variant of the SDBOT WORM!
XNAMEDPIPE SYSTEMnamedpipe.exeAdded by the MYTOB-FH TROJAN!
Xnana2009nana2009.exeAdded by the POISON.PG BACKDOOR!
Xnanosvchost.exeAdded by the NANO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%
XNano Antivirusnanoav.exeNano Antivirus rogue security software - not recommended, removal instructions here
XNAP32NAP32.exePremium rate adult content dialler
Xnapv.exewupdate.exeAdded by the AGOBOT-JX BACKDOOR!
XNarmonVirusAntismss.exeAdded by the AUTORUN-DV WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder
XNarrator[random].exeAdded by the QOOLOGIC TROJAN!
UNarratorNarrator.exeAssociated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
UNasnas.exeClearx adware
XNatalNatal.scrAdded by the OPASERV.AE WORM!
UNatural DesktopNatural Desktop.exeAnimated desktop gadget included with the Natural Desktop theme for MyColors from Stardock Corporation
XNAVRuxDLL32.exeAdded by the MAPSON.D WORM!
YNAV Agentnavapw32.exeBackground scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware
XnAv AGENTN/AAdded by the RIOSYS MACRO! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
XNAV Agentsystems.exeAdded by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name
XNAV Agentwinsnav.vbsAdded by the ANPES WORM!
XNAV Agentwmilib32.exeAdded by the VB-XU TROJAN!
XNAV Auto Protnavprot1.exeAdded by the RBOT.ZAC WORM!
XNAV Auto Protectmsfwe1.exeAdded by a variant of the RBOT WORM!
XNAV Auto Protectnavprotect.exeAdded by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec
XNAV Auto Protectdnsserv.exeAdded by a variant of the SDBOT WORM!
XNAV Auto Protectmcafee32.exeAdded by a variant of the SPYBOT WORM!
XNAV Auto Update[random filename]Added by the SPYBOT-E WORM!
XNAV Auto Updateiamsad.exeAdded by the SPYBOT-CE BACKDOOR!
XNAV Auto UpdateSadness.exeAdded by the SPYBOT-E WORM!
XNAV Auto Updatescsrssp.exeAdded by a variant of the SDBOT WORM!
XNAV Auto Updatesnavwindows.exeAdded by a variant of the SDBOT WORM!
XNAV Auto Updatesslserves.exeAdded by the RBOT.COI BACKDOOR!
XNAV Auto Updatesnavupdaterx.exeAdded by a variant of the RBOT WORM!
XNAV Auto Updatesnavupdaters.exeAdded by the RBOT-UN WORM!
UNAV CfgWizCfgWiz.exeConfiguration wizard for older versions of Symantec's Norton AntiVirus. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton AntiVirus is launched via the Start Menu
UNAV DefAlertDefAlert.exeNorton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
XNAV Live Update[path to worm]Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
XNAV Scan ServiceNAVSCAN32.EXEAdded by the SDBOT.VG WORM!
XNAV_UpdateNAV_Update.exeUnidentified WORM or TROJAN!
XNavAgent32lasvr32.exeAdded by the FEMOT.D WORM!
XNavAgent32SCardSvr32.ExeAdded by the MOFEI.B WORM!
Xnavappnavapp.exeNavExcel adware variant
Ynavapw32navapw32.exeBackground scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware
Xnavautoprotect[path to trojan]Added by the RANKY.CY TROJAN! The most common filename is MsJ32.exe, located in %System%
UNAVCFGCfgWiz.exeConfiguration wizard for older versions of Symantec's Norton AntiVirus. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings. If this entry is disabled, the configuration wizard will run the next time Norton AntiVirus is launched via the Start Menu
XNAVChecknavchk.exePremium rate adult content dialer
XNAVCheckshman.exePremium rate adult content dialer
XNavegateiiexplorer.exeAdded by the BANCBAN-OP TROJAN!
XNavegatewisterd.exeAdded by the BANKER-BOS TROJAN!
UNaverPCGreenNPCGreenUpgrader.exeRelated to Naver_Anti-virus Realtime Monitor From NHNCorp
UNaviscopenaviscope.exeNaviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
XNaviSearchnls.exeNaviSearch adware
NNavLoadNAVBrowser.exeRegistration reminder for CorelDRAW 10
Xnavman_20sysnav32.exeHijacker, possibly a CoolWebSearch parasite variant
?NAVMD25UpdtNv28.exeAdded by Symantec for updating the MicroDefs for their AV products - is it required?
XNAVMon32NAVMon32.exEAdded by the WINKO.AO WORM!
XNAVNet***.tmp [* = random digit]Unidentified adware
Xnavp.exenavp.exeAdded by the AGOBOT-OE WORM!
XNavPassNavPass.exeFree system for gaining access to and downloading from adult content web-sites
XNavProtect32[path to trojan]Added by the BANCOS-BA TROJAN!
XNavScan[filename]Added by the OBSORB TROJAN!
XNAVSCAN32.EXENAVSCAN32.exeAdded by the SDBOT-DO WORM!
XNAVSCANNER32NAVSCANNER32.EXEAdded by the RBOT.QC WORM!
XNAVtaskNAVtask.exeAdded by the REMBOT-A BACKDOOR!
XNAVUpdrundll32.exe navupd.dll, StartupAdded by the NAVU TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
XNAVWatchNAVWatcher.exeVX2.Transponder parasite updater/installer related
Xnawadll32nawadll32.exeAdded by the SDBOT-ZI WORM!
Xnawdll32nawdll32.exeAdded by the SDBOT-ZM WORM!
NNB Common Dialog EnhancementsCOMDLGEX.EXEPart of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
UNB ProbeNBProbe.exeMonitors the status of notebooks from ASUS - including CPU (speed, temperature and fan), disk and system information
NNB Start MenuSTARTM.EXEPart of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
NNB Windows PatternsWINDBKGND.EXEPart of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
UNBAgentNBAgent.exeCore task for Nero BackItUp version 4 which provides System Tray access and runs all backup jobs (to hard disk, Network, FTP, CD/DVD) for the files and folders that you specify to either a local folder or Nero Online Backup. Required if you have have any scheduled backups or use the Autobackup feature. Installed as part of both Nero BackItUp & Burn and Nero Multimedia Suite 10
UNBCoreNBCore.exeAutobackup feature of Nero BackItUp version 4 which runs in the background and backs up the files and folders that you specify to either a local folder or Nero Online Backup. If there are modifications or new files, Autobackup carries out a backup update automatically, replacing the existing backup with the current one. Installed as part of both the stand alone product and Nero 9 digital media suites (CD/DVD burning, authoring, etc)
UNBHGuiNBHGui.exeSecurDisc support for the Nero InCD packet writing utility. "SecureDisc includes special protection properties, such as data integrity, rebuilding, encryption and duplication protection". If you don't use InCD or your optical drive doesn't support SecureDisc you can disable this
XNBInstallMBDownloader_876919.exeAdded by the MIRAR_D TROJAN!
UNBJNBJ.exeScheduler for backup jobs using Nero BackItUp in earlier versions of Nero digital media suites (CD/DVD burning, authoring, etc). If no backup jobs are scheduled this entry will remain but it will not run at start-up. If you have any scheduled backup jobs and try disabling it by a means other than the program's own option (right-click on tray icon → Settings) it will re-instate itself on the next run of Nero BackItUp
UNbkCtrlNbkCtrl.exeScheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
UNBKeyScanNBKeyScan.exeNero BackItUp versions 2 thru 4 support the "Push for backup" feature that's implemented on some external hard disks - which enables the user to start a predefined backup by pushing a button on the drive. NBKeyScan is used to scan the peripherals for compatible devices and - if such devices have been found - to communicate between Nero BackItUp and the external hard drive. Installed as part of both stand alone products and Nero digital media suites (CD/DVD burning, authoring, etc)
XNBT System alias[path] repcale.exe [path] beird.exeAdded by a variant of the RANDON.AN WORM!
?nbustrce1Dnbustrce1D.exeDevice driver, possibly CD/DVD - what exactly is it and is it required in startup?
XNC1565winntsrv -l -p10001 -d -e cmd.exe -LAdded by the NEWLEY-A WORM!
XNcaoosoa.exePurityScan adware
XNcaourpo.exePurityScan adware
?NCClientN/A??
NNCDncd.exeNorton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
NNCLAUNCHNCLAUNCH.exePart of SWF Studio from Northcode Inc. - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP
XnClientcnen.exeAdded by the DELBOT-AL WORM!
NNclTrayNclTray.exePart of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager"
?NcpBudgetncpbudgt.exeRelated to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
?NcpMonitorncpmon.exeRelated to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
?NcpPopupncppopup.exeRelated to VPN client software from WatchGuard, Lancom, NCP, Astaro, D-Link and maybe others. What does it do and is it required?
UNcr3ncrcore3.exeNetwork camera recording software for home/office security systems using wired or wireless Panasonic cameras that enables you to locally view, record and adjust the settings for the cameras - see here
Page: 1 2 3 4 5 6 7 8 9 10 11

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner