| Status | Autorun name | Command | Description |
| X | NiceDownloads | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | NiceMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | Nielsen NetRatings | insight.exe | NetRatings Premeter spyware |
| X | NIEUW | emake2b.exe | Switch-F premium rate adult content dialler. The filename can be random as is located in %System%, but the most frequent example is "emake2b.exe" |
| U | NIHomeAM | LiteClientAM.exe | A managed web based internet security service that provides comprehensive & total protection for laptops/desktops - regardless of how, when or where they connect to the Internet. Made by Netintelligence Ltd |
| X | nikLaus | nikLaus.exe | Added by the NIKLAS WORM! |
| N | Nikon Monitor | nkmonitor.exe | Monitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC |
| N | NInit | NInit.exe | Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required |
| X | NiroFile Updated | NiroFile.exe | Added by a variant of the IRCBOT TROJAN! |
| X | nisdisa | nisdisa.exe | Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example |
| Y | nisserv | NISSERV.EXE | Part of Symantec's now discontinued Norton Personal Firewall - also included in Norton Internet Security. Loads via a registry "RunServices" key in 98/Me and as a service in XP |
| Y | Nisum | NISUM.EXE | Part of Symantec's now discontinued Norton Personal Firewall - also included in Norton Internet Security. Loads via a registry "RunServices" key in 98/Me and as a service in XP |
| U | niSvcLoc | niSvcLoc.exe | Related to National Instruments Corp. LabView |
| U | Nitro PDF Printer Monitor | NitroPDFPrinterMonitor.exe | Printer monitor for Nitro PDF Professional from Nitro PDF, Inc. - "complete, affordable and easy-to-use set of tools to work with PDF documents" |
| X | niu | niu.exe | Added by the SILLYFDC.BCS WORM! |
| X | NJG40 | NJG40.EXE | Added by the BANCOS.D TROJAN! |
| X | NJIL | njil.exe | Added by the DELF-ELF TROJAN! |
| N | NkbMonitor.exe | NkbMonitor.exe | Part of Nikon PictureProject - image management for Nikon digital cameras |
| X | nkurls | alligt.exe | Added by the SLURK.A WORM! |
| N | NkvMon.exe | NkvMon.exe | Nikon View 5 - for transferring pictures from Nikon digital cameras |
| N | NkVwMon.exe | NkVwMon.exe | Nikon View - for transferring pictures from Nikon digital cameras |
| U | NliaClient | Netpia.exe | Netpia NLIA System - "In the existing Internet address system, the Domain Name System (DNS) layer runs on the IP address layer. In the NLIA system, however, the upper layer is implemented on DNS" |
| X | NLS Keyboard | keyboard.exe | Added by a variant of the SPYBOT WORM! |
| X | NLS MonBoard | NSBARD.EXE | Added by the SPYBOT.T BACKDOOR! |
| X | NLS Monitor | nlsmon.exe | Added by the RBOT-AXJ WORM! |
| U | nmapp | nmapp.exe | Pure Networks "Network Magic eliminates common frustrations and saves time by simplifying and automating set up, management and repair of home networks, and makes printer and file sharing effortless" |
| U | NMBgMonitor | NMBgMonitor.exe | Looks for new files which can be included in Nero Scout which is "a database program which indexes and catalogs all media files on your computer and makes the database available to all programs in the Nero product package." Included in version 7 of the Nero digital media suites (CD/DVD burning, authoring, etc). Integrated into a number of Nero applications and is of particular significance for the Nero Home media center - for more information see the link. If you have trouble disabling Nero Scout try here |
| X | NMBgMonitor.exe | NMBgMonitor.exe | Added by the BRAVO-G TROJAN! Note - this is not the legitimate Nero Scout entry, which is normally located in %ProgramFiles%\Common Files\Nero\Lib. This one is located in %System% |
| U | nmctxth | nmctxth.exe | Related to Pure Networks comprehensive home and small business networking software that simplifies network configuration |
| X | nmgr | nnmgr.exe | FFToolBar adware toolbar |
| U | NMIndexStoreSvr | NMIndexStoreSvr.exe | Indexing and storage service for Nero Scout which is "a database program which indexes and catalogs all media files on your computer and makes the database available to all programs in the Nero product package." Included in version 8 of the Nero digital media suites (CD/DVD burning, authoring, etc). Integrated into a number of Nero applications and is of particular significance for the Nero Home media center - for more information see the link |
| U | NMPSystray | NMPSystray.exe | System Tray access to NotesMedic from Cassetica Software Inc. - which "contains a suite of Tools that make life easier when using Lotus Notes" |
| Y | NMSSupport | IntelHCTAgent.exe | Network monitor for Intel® Hub Connect Technology |
| ? | NMSSvc | NMSSVC.EXE | NIC Management Service - diagnostics program for Intel Pro family network cards |
| Y | NMSVC | nmSvc.exe | Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it |
| ? | nMTaskBarService | nMtsk.exe | Taskbar control for ISDN NetMod modem. What does it do and is it required? |
| U | NNADFREE | AdFree.exe | Ad-Free by Net Nanny - "is customizable software for blocking unwanted Internet advertising in your home, small business or school". No longer available |
| U | NNLL | nnll.exe | Net Nanny internet filter |
| X | nnmb4w | fisnmn.exe | Added by the VB-FDF TROJAN! |
| X | nnqcouu | nnqcouu.exe | The Abi Network adware |
| U | NNSvc | nnsvc.exe | Net Nanny internet filter. Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| X | No Credit Card | plugin-[random].exe | Adult content pop-up dialler |
| U | No-IP DUC | DUC20.exe | Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available |
| U | NoAds | NoAds.exe | Blocks advertisement banners in Internet Explorer |
| X | NoAdware | NoAdware.exe | NoAdware - spyware remover. This version is not recommended - see here |
| U | NoAdware3 | NoAdware3.exe | NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here |
| U | NoAdware4 | NoAdware4.exe | NoAdware - spyware remover. Initially not recommended due to false positives and aggressive advertising but the later versions have since improved - see here |
| U | NOBuClient | NOBuClient.exe | System Tray access to and notifications for Symantec's Norton Online Backup online storage utility |
| X | Nocana | [path to worm] | Added by the ANACON-B WORM! |
| X | NoCompromaat | GDC.exe | NoCompromaat Dutch rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| X | Nod23 Service | nod23.exe | Added by the RBOT-GMK WORM! |
| X | Nod29 Service | nodwr.exe | Added by a variant of the RBOT WORM! |
| X | nod32 | nodqq.exe | Added by the AUTORUN-BBV WORM! |
| X | nod32 antivirus | nod32.exe | Added by the VB-FFT TROJAN! Note - this is not Eset's NOD32 antivirus |
| X | NOD32 FiX | regedt32.exe | NodFix cannot be recommended and is given an (X) status because we do not and will not support Cracks or Warez. Do not delete the regedt32.exe as it is a legitimate Windows application. NodFix interferes with the default settings of the NOD32 AV application allowing users to bypass its free use period and changes the default update server allowing to update NOD32 without password. Note - to avoid interfering with the NOD32 application original settings no full cleanup can be provided |
| X | Nod32 Free antivirus | nod32krn.exe | Added by the RBOT-AAO WORM! Note - this is not Eset's NOD32 antivirus which shares the same filename and is normally found in %ProgramFiles%\Eset. This one is located in %System% |
| X | Nod32 Runtime | sysregi.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Nod32 Service | nod64.exe | Added by the RBOT.ESJ WORM! |
| X | Nod32 Service | alserv32.exe | Added by the RBOT.DHN WORM! |
| X | Nod32 Service | AutoUpdateWin32.exe | Added by the SDBOT-DJG WORM! |
| X | Nod32 Service | nod6.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| U | Nod32CC | nod32cc.exe | Control Center part of Eset's NOD32 antivirus. Leave this enabled if you want to update your virus data files via the click of a button |
| Y | NOD32kernel | nod32krn.exe | Eset's NOD32 antivirus. Loads via a registry "RunServices" key in 98/Me and as a service in Windows 7/Vista/XP/2K |
| Y | nod32kui | nod32kui.exe | Eset's NOD32 antivirus |
| Y | NOD32POP3 | Pop3scan.exe | POP3 E-mail part of Eset's NOD32 antivirus |
| X | Nod3d2 Free antivirus | N0D32KRN.EXE | Added by the RBOT-ABQ WORM! |
| ? | NodeMnger | Nodemngr.exe | Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon? |
| X | NoDNS | NoDNS.exe | Added by the CLICKER.WI TROJAN! |
| X | nodriver | AUEKXRZ.EXE | Added by a variant of the SPYBOT WORM! |
| X | nodriver | SVCHOST.EXE | Added by the SPYBOT-Z BACKDOOR! Note - this is not the legitimate svchost.exe process which should normally figure in Msconfig/Startup! |
| X | NoDriveTypeAutoRun | dllcache32.exe | Added by the SPUNST TROJAN! |
| X | nodsos | nodabc.exe | Added by the PWS-BLE TROJAN! |
| X | NOFIIN.EXE | NOFIIN.EXE | Added by the HAXDOOR-DP TROJAN! |
| X | Noha | aasd.exe | PurityScan adware |
| X | Nokia | nsu_ui_client.exe | Added by the BANKER-FAQ TROJAN! Note - this is not the legitimate Nokia Software Updater which shares the same filename and is located in %ProgramFiles%\Nokia\Nokia Software Updater. This one is located in %Windir% |
| X | Nokia Check | nokiacheck.exe | Added by the RBOT.CDC WORM! |
| N | Nokia Connection Monitor | NclConf.exe | Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required |
| N | Nokia FastStart | NokiaMusic.exe | Part of the Nokia Music music manager - which has now been replaced by Ovi Player. "With Nokia Music, you can play music, discover and buy new music, transfer music between your compatible PC and your compatible Nokia mobile devices, and rip and burn audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| X | Nokia Launch Application | PCSuite.exe | Added by the AUTORUN-BHX WORM! Note - this is not legitimate Nokia or SAMSUNG file of the same name which is normally located in a %ProgramFiles%\Nokia or %ProgramFiles%\Samsung sub-directory. This one is located in %System% |
| U | Nokia M Platform | NokiaMServer | Part of Nokia Ovi Player (and the older Nokia Music) music manager, Nokia Photos photo and video manager or Nokia Ovi Suite mobile device manager. Used to watch for any new file types that have been associated with these utilities |
| N | Nokia Music | NokiaMusic.exe | Part of the Nokia Music music manager - which has now been replaced by Ovi Player. "With Nokia Music, you can play music, discover and buy new music, transfer music between your compatible PC and your compatible Nokia mobile devices, and rip and burn audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| N | Nokia Ovi Player | NokiaOviPlayer.exe | Part of the Nokia Ovi Player - which is "a free PC application for playing and organising your music, discovering and downloading new music on Ovi, transferring songs and playlists between your compatible PC and compatible Nokia mobile devices, and ripping and burning your audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| N | Nokia Ovi Suite | NokiaOviSuite.exe | First generation of Nokia Ovi Suite for managing Nokia mobile devices - "gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer, and experience a new way of browsing your photos, videos and music. Furthermore, you can share photos quickly and safely through the Share on Ovi service" |
| N | Nokia Ovi Suite 2 | NokiaOviSuite.exe | Second generation of Nokia Ovi Suite for managing Nokia mobile devices - which "gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer, and experience a new way of browsing your photos, videos and music. Furthermore, you can share photos quickly and safely through the Share on Ovi service" |
| Y | Nokia PC Suite | DataLayer.exe | Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Required by the Nokia status/connection monitor (NclTray.exe) |
| N | Nokia PC Sync | PcSync2.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface |
| Y | Nokia Software Updater | nsu_ui_client.exe | Utility that only runs once after installing the Nokia Software Updater which is used to update the operating system (or firmware) for selected Nokia mobile devices |
| N | Nokia Status Monitor | NclTray.exe | Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager" |
| N | Nokia Tray Application | NclTray.exe | Part of Nokia PC Suite version 5 - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." Monitors ports to see if a phone has been connected and provides System Tray access to the Connection Manager (and other PC Suite components if a phone is connected). Available via the Control Panel as "Nokia Connection Manager" |
| N | Nokia.PCSync | PcSync2.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface |
| U | NokiaMServer | NokiaMServer | Part of Nokia Ovi Player (and the older Nokia Music) music manager, Nokia Photos photo and video manager or Nokia Ovi Suite mobile device manager. Used to watch for any new file types that have been associated with these utilities |
| N | NokiaMusic | NokiaMusic.exe | Part of the Nokia Music music manager - which has now been replaced by Ovi Player. "With Nokia Music, you can play music, discover and buy new music, transfer music between your compatible PC and your compatible Nokia mobile devices, and rip and burn audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| N | NokiaMusic FastStart | NokiaOviPlayer.exe | Part of the Nokia Ovi Player - which is "a free PC application for playing and organising your music, discovering and downloading new music on Ovi, transferring songs and playlists between your compatible PC and compatible Nokia mobile devices, and ripping and burning your audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| N | NokiaOviPlayer | NokiaOviPlayer.exe | Part of the Nokia Ovi Player - which is "a free PC application for playing and organising your music, discovering and downloading new music on Ovi, transferring songs and playlists between your compatible PC and compatible Nokia mobile devices, and ripping and burning your audio CDs". If enabled, this entry will reduce the time taken for Nokia Music to run by a few seconds for the first time after Windows has loaded |
| N | NokiaOviSuite | NokiaOviSuite.exe | Nokia Ovi Suite for managing Nokia mobile devices - "gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer, and experience a new way of browsing your photos, videos and music. Furthermore, you can share photos quickly and safely through the Share on Ovi service" |
| N | NokiaOviSuite.exe | NokiaOviSuite.exe | First generation of Nokia Ovi Suite for managing Nokia mobile devices - "gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer, and experience a new way of browsing your photos, videos and music. Furthermore, you can share photos quickly and safely through the Share on Ovi service" |
| N | NokiaOviSuite2 | NokiaOviSuite.exe | Second generation of Nokia Ovi Suite for managing Nokia mobile devices - which "gives you an easy access to the contents of your Nokia device. Transfer files and information effortlessly between your device and your computer, and experience a new way of browsing your photos, videos and music. Furthermore, you can share photos quickly and safely through the Share on Ovi service" |
| N | NokiaPCSuiteTray | LaunchApplication.exe | System Tray access to Nokia PC Suite - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu |
| N | NokiaPCSyncTray | PCSync.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface |
| U | NokKernel install | Nok_install.exe | Installer for the NokNet Workstation Monitor surveillance software. Uninstall this software unless you put it there yourself |
