| Status | Autorun name | Command | Description |
| U | NOMAD Detector | ctnmrun.exe | Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected |
| N | NomdCheck | nomdchek.exe | Part of Intel's Native Audio |
| U | nomtray | nomtray.exe | System Tray access to NetMotion Wireless options - including connectivity status (see here) |
| X | non | easyurl.exe | Ezurl spyware |
| X | none | pmsngr.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details. The most popular for this example appears to be "Video ActiveX Object" |
| X | none | AUTOEXEC.BAT | Added by the AGENT-MOV TROJAN! |
| X | nonep | [path to trojan] | Added by the AGENT-MOV TROJAN! |
| N | Nonoh | Nonoh.exe | Nonoh - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| X | NoooH | sys.exe | Added by the ALNUH WORM! |
| X | NOPDBS | NOPDBS.exe | Added by the BANCBAN-AS TROJAN! |
| X | Nord | nordsys.exe | Added by the DREF-S WORM! |
| X | NordBull | msa.exe | Added by the DLOADR-CSV TROJAN! |
| X | Norman Worl System Ability | nwcss32.exe | Added by the DELF.IO TROJAN! |
| U | Norman ZANDA | ZLH.EXE | System Tray icon for Norman Antivirus |
| X | NortE Antivirus | norte.exe | Added by the RBOT.BQQ WORM! |
| X | NortE Antivirus | norten.exe | Added by the RBOT-AFF WORM! |
| X | norten Software Intrenet | norten.pif | Added by the RBOT-AWA WORM! |
| Y | Norton AntiBot | NortonAntiBot.exe | Control Center for Norton Antibot from Symantec - which "provides advanced, real-time protection against emerging threats, including bots that are used to perpetrate identity theft and other online crimes" and "protects your PC from unauthorized access and tampering, detects and stops attempts by hackers to take remote control of your computer, and delivers extra protection against emerging 'zero-day' threats." Designed to work with existing antivirus software but now discontinued |
| X | Norton Antiviral Scanner | navscnr.exe | Added by the DELBOT-K WORM! |
| X | Norton Antivirus | nortonav.exe | Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV! |
| X | Norton Antivirus 2004 | SYMANTECAV2.EXE | Added by the SPYBOT-DY WORM! Note - this is not the real Norton AV! |
| X | Norton Antivirus 7.0a | [path to file] | Added by the PERDA-B or RANCK-CT TROJANS! |
| Y | Norton AntiVirus AutoProtect | navapw32.exe | Background scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware |
| X | Norton Antivirus AV | FVProtect.exe | Added by the NETSKY.P WORM! Note - this is not the popular AV software! |
| X | Norton Antivirus CCDebug | CCSEVRT.exe | Added by the SDBOT.ACJ WORM! |
| X | Norton AntiVirus Sys | NAVsys32.exe | Added by a variant of the WOOTBOT WORM! |
| X | Norton Antivirus Updater | nortonav.exe | Added by the DELBOT-T WORM! Note - this is not the real Norton AV! |
| X | Norton Auto Protect | nava.exe | Added by an unidentified WORM or TROJAN! |
| X | Norton Auto Protect | crss32.exe | Added by the SDBOT.ATF WORM! |
| Y | Norton Auto-Protect | navapw32.exe | Background scanning process for older versions of Norton AntiVirus which continuously detects and repairs viruses and other malware |
| X | Norton Auto-Protect | ccApp.exe | Added by the AKHER.D WORM! Note - for the valid Norton AV entry the filename is "navapexe". This is also not the valid Norton AV file with the same filename |
| X | Norton Auto-Protect | SERVICES.exe | Added by the AHKER.B WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%. Also, this is not part of Norton AV |
| X | Norton Auto-Protect | ffbaqe.exe | Added by the SLINBOT.RF BACKDOOR! Note - this is not a valid Norton product |
| X | Norton AutoProtect | navprot32.exe | Added by the RBOT-UX WORM! Note - this is not a valid Symantec/Norton entry |
| ? | Norton AV Preload | Premend.exe | Norton Antivirus related. What does it do and is it required |
| X | Norton AV Protection Startup | Ati2xxx.exe | Added by a variant of the RBOT WORM! |
| N | Norton Crashguard Monitor | cgmenu.exe | Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001 |
| N | Norton Disk Doctor | NDD32.EXE | Norton Disk Doctor from older versions of Norton Utilities (either as a standalone product or as part of Norton SystemWorks) - which "diagnoses and repairs a variety of disk problems. It performs several tests, checking everything from the disk's partition table to its physical surface. If Norton Disk Doctor finds a problem, it notifies you before making repairs. If you check Automatically Fix Errors, Norton Disk Doctor makes the necessary repairs automatically" |
| N | Norton Disk Doctor | SrtStub.exe NDD32.EXE | Part of the version of Norton Utilities included with the 2008/9 of the now discontinued Norton SystemWorks suite. This entry appears when Norton Utilities is installed on XP (2009 version) or Vista (2008/9) and is the launcher for Norton Disk Doctor - which "diagnoses and repairs a variety of disk problems. It performs several tests, checking everything from the disk's partition table to its physical surface. If Norton Disk Doctor finds a problem, it notifies you before making repairs. If you check Automatically Fix Errors, Norton Disk Doctor makes the necessary repairs automatically" |
| X | Norton Drive Protection | msdt32.exe | Added by the FORBOT-GB WORM! Note - this not a valid Norton program! |
| Y | Norton eMail Protect | POPROXY.EXE | Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it |
| X | Norton Firewall | [path to trojan] | Added by the BANKER-ET TROJAN! |
| U | Norton Ghost | VProTray.exe | System Tray access to and notifications for versions 12.0 to 15.0 of Symantec's Norton Ghost backup software |
| N | Norton Ghost 10.0 | GhostTray.exe | System Tray access to version 10.0 of Symantec's Norton Ghost backup software (either as a standalone product or as part of Norton SystemWorks 2006 Premier) |
| U | Norton Ghost 12.0 | VProTray.exe | System Tray access to and notifications for version 12.0 of Symantec's Norton Ghost backup software |
| U | Norton Ghost 14.0 | VProTray.exe | System Tray access to and notifications for version 14.0 of Symantec's Norton Ghost backup software |
| U | Norton Ghost 15.0 | VProTray.exe | System Tray access to and notifications for version 15.0 of Symantec's Norton Ghost backup software |
| N | Norton Ghost 9.0 | GhostTray.exe | System Tray access to version 9.0 of Symantec's Norton Ghost backup software (either as a standalone product or as part of Norton SystemWorks 2005 Premier) |
| U | Norton GoBack | GBTray.exe | System Tray access to Symantec's Norton GoBack system restoration software - which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty, performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag and not required for WinMe/XP users - but recommended for Win9x/NT/2K users. Previously released by Roxio, Adaptec and Wild File |
| X | Norton GProtect | ngrfn.exe | Added by a variant of the RBOT WORM! |
| X | Norton Guard 32 | ntguard32.exe | Added by a variant of the RBOT WORM! |
| X | Norton Live Update Server | cpsdv.exe | Added by the AGOBOT.EW TROJAN! |
| X | Norton Live Updater | Cavapsvc.exe | Added by the GAOBOT.AO WORM! |
| X | Norton Live Updater | Sochost.exe | Added by the GAOBOT.AO WORM! |
| X | Norton Live Updater | Avapsvc.exe | Added by the AGOBOT-BG BACKDOOR! |
| N | Norton Navigator Loader | nnloader.exe | An older Norton utility for file management under Windows 95. More information here |
| U | Norton Online Backup | NOBuClient.exe | System Tray access to and notifications for Symantec's Norton Online Backup online storage utility |
| U | Norton PasswordManager | cfgwiz.exe | Configuration wizard for Symantec's now discontinued Norton Password Manager security product. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate) and confirms the default configuration settings |
| X | Norton Personal Firewall | jah.exe | Added by a variant of the SDBOT WORM! |
| X | Norton Personal Firewall | npfw.exe | Added by the RBOT-UI WORM! |
| X | Norton Personal Firewall | lah.exe | Added by a variant of the RBOT WORM! |
| X | Norton Personal Firewall | npfw32.exe | Added by the RBOT-UQ WORM! |
| Y | Norton Personal Firewall | IntroWiz.exe | Part of Norton Personal Firewall or Norton Internet Security |
| X | Norton Personal Firewall | winmpts.exe | Added by the RBOT.ANT WORM! |
| X | Norton Personal Firewall | npmsys.exe | Added by the RBOT-ALO WORM! |
| U | Norton Program Scheduler | nsched32.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| U | Norton Program Scheduler | NPSsvc.exe | Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans |
| ? | Norton Program Scheduler Event Checker | npscheck.exe | Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker |
| X | Norton Protect | npprotect.exe | Added by the RBOT-WW WORM! |
| X | Norton protect | nvsvc.exe | Added by a variant of the RBOT WORM! |
| X | Norton Protect Activies | csrss.exe | Added by the BANKER-CZ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder |
| U | Norton Save & Restore | VProTray.exe | System Tray access to and notifications for Symantec's Norton Save and Restore 2.0 backup software (either as a standalone product or as part of Norton SystemWorks 2009 Premier) - which is a renamed version of Norton Ghost |
| U | Norton Save and Restore | NSRTray.exe | System Tray access to and notifications for Symantec's Norton Save and Restore 1.0 backup software (either as a standalone product or as part of Norton SystemWorks Premier) - which is a renamed version of Norton Ghost |
| U | Norton Save and Restore 2.0 | VProTray.exe | System Tray access to and notifications for Symantec's Norton Save and Restore 2.0 backup software (either as a standalone product or as part of Norton SystemWorks 2009 Premier) - which is a renamed version of Norton Ghost |
| X | Norton Service Driver | wsul.exe | Added by the RBOT-ABI WORM! |
| X | Norton Service Process | navapvc.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Norton Service Process | navapsvc.exe | Added by the AGOBOT-GV WORM! Note - this is not the valid Norton Anti-Virus service which has the same file and is located in %ProgramFiles%\Norton AntiVirus. This one is located in %System% |
| X | Norton SpySweeper AutoUpdate | navsw.exe | Added by the FORBOT-AS WORM! |
| X | Norton Start | ccStart.exe | Added by the SDBOT-OX WORM! |
| X | Norton System | csrs.scr | Added by the BANLOA-AFM TROJAN! |
| N | Norton System Doctor | SYSDOC32.EXE | Norton System Doctor from older versions of Norton Utilities (either as a standalone product or as part of Norton SystemWorks) - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| N | Norton System Doctor | SrtStub.exe sysdoc32.exe | Part of the version of Norton Utilities included with the 2008/9 versions of the now discontinued Norton SystemWorks suite. This entry appears when Norton Utilities is installed on XP (2009 version) or Vista (2008/9) and is the launcher for Norton System Doctor - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| U | Norton SystemWorks | CfgWiz.exe | Configuration wizard for Symantec's now discontinued Norton SystemWorks security product. On the first run after installation or a significant software update via LiveUpdate this entry looks after registration, subscription and post-installation tasks (such as LiveUpdate, full scan and scheduling) and confirms the default configuration settings |
| N | Norton SystemWorks | NswUiTray.exe | System Tray access to Symantec's now discontinued Norton SystemWorks 2009 security and utility suite |
| N | Norton SystemWorks | SrtStub.exe NDD32.EXE | Part of the version of Norton Utilities included with the now discontinued Norton SystemWorks 2009 (12.0) suite. This is the Vista MSConfig/Windows Defender entry for the launcher for Norton System Doctor - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| N | Norton SystemWorks | SrtStub.exe sysdoc32.exe | Part of the version of Norton Utilities included with the now discontinued Norton SystemWorks 2009 (12.0) suite. This is the Vista MSConfig/Windows Defender entry for the launcher for Norton System Doctor - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| X | Norton Update | ccUpdate.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Norton Update | winsvc.exe | Added by the AGOBOT.ALP WORM! |
| X | Norton Update | cUpdate.exe | Added by the AGOBOT.APP BACKDOOR! |
| X | Norton updated | NVSV32.EXE | Added by the SDBOT.ABH WORM! |
| X | Norton Updater | winset.exe | Added by a variant of the SPYBOT WORM! |
| X | Norton Updater | lsa.exe | Added by a variant of the RBOT WORM! |
| X | Norton Updater | NortonUpdate.exe | Added by an unidentified WORM or TROJAN! |
| X | Norton Updater | ccUpdate.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | Norton Updater | navupdtr.exe | Added by the SDBOT.AXV WORM! |
| N | Norton Utilities | nu.exe | Part of version 14.* of Symantec's Norton Utilities PC tune up suite. This entry will be present if you optionally select any of the following startup options (via Administer → Settings): "Custom Scan", "Privacy Clean & Full Scan" or "Send to tray" |
| N | Norton Utilities | SrtStub.exe NDD32.EXE | Part of the version of Norton Utilities included with the now discontinued Norton SystemWorks 2008 (11.0) suite. This is the Vista MSConfig/Windows Defender entry for the launcher for Norton System Doctor - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| N | Norton Utilities | SrtStub.exe sysdoc32.exe | Part of the version of Norton Utilities included with the now discontinued Norton SystemWorks 2008 (11.0) suite. This is the Vista MSConfig/Windows Defender entry for the launcher for Norton System Doctor - which "continuously monitors your computer to keep it free of problems and running at peak efficiency. It can alert you immediately when conditions require attention, and can fix many problems automatically, without interrupting your work" |
| X | Norton Wizzard | nwiz.exe | Added by the GAOBOT.ADV WORM! Note - this is not the valid nVidia application that shares the same name |
| X | norton32 | norton32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
