NAV

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AUTOPROTECTU	navapq32.exe	Added by an unidentified WORM or TROJAN!
X	AVScan	winav.exe	Unidentfied rogue security software
X	AVSTRT	navpsrvc.exe	"Added by the FORBOT-EF WORM!"
X	bootsec	NAVSSE.exe	"Added by the FORBOT-CY WORM!"
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	"Cashsurfers CashBar Navigator - ""The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"""
X	Compaq Service Drivers	navapqwa.exe	"Added by the SDBOT.BBQ WORM!"
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBrowser.exe	Registration reminder for CorelDRAW 10
X	cpntmgc	navpmc.exe	"Added by the SIMCSS TROJAN!"
Y	Dpcnav	dpcnav.exe	"DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access"
N	fontnav	FontNav.exe	"Font Navigator from Bitstream Inc. - a font management utility"
X	General Antivirus	GenAvir.exe	"General Antivirus rogue security software - not recommended
X	Microsoft DLL Verifier	winavguard.exe	Added by the SDBOT.AAD WORM!
X	Microsoft Gina V Encryption	MSGINAV.EXE	"Added by an unidentified VIRUS
X	Microsoft Update	navmgrd.exe	"Added by the SDBOT.DP TROJAN!"
X	Microsoft Update	NAV.exe	"Added by the RBOT-IV WORM!"
X	Microsoft Updating	navguard.exe	"Added by the RBOT.HW WORM!"
X	MS UniX	navupdate64.exe	"Added by the RBOT.CRZ BACKDOOR!"
X	MSNavWH	MSWkwrH.exe	"Added by the ANAV-A WORM!"
X	MSOfficeCfg	navchk.exe	Premium rate adult content dialer
X	NAV	RuxDLL32.exe	"Added by the MAPSON.D WORM!"
Y	NAV Agent	navapw32.exe	Norton Anti-Virus's background scanning process
X	nAv AGENT	N/A	"Added by the RIOSYS MACRO! Note the lower-case ""n"" and ""v"" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes"
X	NAV Agent	systems.exe	"Added by the TARNO.C TROJAN! Note - this is not the valid Norton Antivirus entry of the same name"
X	NAV Agent	winsnav.vbs	"Added by the ANPES WORM!"
X	NAV Agent	wmilib32.exe	"Added by the VB-XU TROJAN!"
X	NAV Auto Prot	navprot1.exe	"Added by the RBOT.ZAC WORM!"
X	NAV Auto Protect	msfwe1.exe	"Added by a variant of the RBOT WORM!"
X	NAV Auto Protect	navprotect.exe	"Added by the RBOT.BKW WORM! Note - this is not a valid Norton AntiVirus product from Symantec"
X	NAV Auto Protect	dnsserv.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Protect	mcafee32.exe	"Added by a variant of the SPYBOT WORM!"
X	NAV Auto Update	[random filename]	"Added by the SPYBOT-E WORM!"
X	NAV Auto Update	iamsad.exe	"Added by the SPYBOT-CE BACKDOOR!"
X	NAV Auto Update	Sadness.exe	"Added by the SPYBOT-E WORM!"
X	NAV Auto Updates	csrssp.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Updates	navwindows.exe	"Added by a variant of the SDBOT WORM!"
X	NAV Auto Updates	slserves.exe	"Added by the RBOT.COI BACKDOOR!"
X	NAV Auto Updates	navupdaterx.exe	"Added by a variant of the RBOT WORM!"
N	NAV CfgWiz	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
N	NAV Configuration Wizard	cfgwiz.exe	"Introduced with Norton Anti-Virus 2002
U	NAV DefAlert	DefAlert.exe	Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X	NAV Live Update	[path to worm]	"Added by the DEBORMS.C WORM! Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec"
X	NAV Scan Service	NAVSCAN32.EXE	"Added by the SDBOT.VG WORM!"
X	NavAgent32	lasvr32.exe	"Added by the FEMOT.D WORM!"
X	NavAgent32	SCardSvr32.Exe	"Added by the MOFEI.B WORM!"
X	navapp	navapp.exe	"NavExcel adware variant"
Y	navapw32	navapw32.exe	Norton Anti-Virus's background scanning process
X	NAVCheck	navchk.exe	Premium rate adult content dialer
X	NAVCheck	shman.exe	Premium rate adult content dialer
X	Navegate	iiexplorer.exe	"Added by the BANCBAN-OP TROJAN!"
X	Navegate	wisterd.exe	"Added by the BANKER-BOS TROJAN!"
U	NaverPCGreen	NPCGreenUpgrader.exe	"Related to Naver_Anti-virus Realtime Monitor From NHNCorp"
U	Naviscope	naviscope.exe	"Naviscope is a multipurpose browser enhancement that can speed up Web searches
X	NaviSearch	nls.exe	"NaviSearch
N	NavLoad	NAVBrowser.exe	Registration reminder for CorelDRAW 10
X	navman_20	sysnav32.exe	"Hijacker
?	NAVMD25	UpdtNv28.exe	Added by Symantec for updating the MicroDefs for their AV products - is it required?
X	NAVMon32	NAVMon32.exE	"Added by the WINKO.AO WORM!"
X	NAVNet	**.tmp [ = random digit]	Unidentified adware
X	navp.exe	navp.exe	"Added by the AGOBOT-OE WORM!"
X	NavPass	NavPass.exe	Free system for gaining access to and downloading from adult content web-sites
X	NavScan	[filename]	"Added by the OBSORB TROJAN!"
X	NAVSCAN32.EXE	NAVSCAN32.exe	"Added by the SDBOT-DO WORM!"
X	NAVSCANNER32	NAVSCANNER32.EXE	"Added by the RBOT.QC WORM!"
X	NAVtask	NAVtask.exe	"Added by the REMBOT-A BACKDOOR!"
X	NAVUpd	"rundll32.exe navupd.dll	Startup"
X	NAVWatch	NAVWatcher.exe	"VX2.Transponder parasite updater/installer related"
X	NAV_Update	NAV_Update.exe	Unidentified WORM or TROJAN!
X	Norton Antiviral Scanner	navscnr.exe	"Added by the DELBOT-K WORM!"
X	Norton Antivirus	nortonav.exe	"Added by the RBOT-AYE TROJAN! Note - this is not the real Norton AV!"
X	Norton AntiVirus Sys	NAVsys32.exe	"Added by a variant of the WOOTBOT WORM!"
X	Norton Antivirus Updater	nortonav.exe	"Added by the DELBOT-T WORM! Note - this is not the real Norton AV!"
X	Norton Auto Protect	nava.exe	Added by an unidentified WORM or TROJAN!
Y	Norton Auto-Protect	navapw32.exe	Norton Anti-Virus's background scanning process
N	Norton Navigator Loader	nnloader.exe	"An older Norton utility for file management under Windows 95. More information here"
X	Norton Service Process	navapvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Norton Service Process	navapsvc.exe	"Added by the AGOBOT-GV WORM! Note - this is not the valid Norton Anti-Virus service which has the same file and is located in %ProgramFiles%\Norton AntiVirus. This one is located in %System%"
X	Norton SpySweeper AutoUpdate	navsw.exe	"Added by the FORBOT-AS WORM!"
X	Norton Updater	navupdtr.exe	"Added by the SDBOT.AXV WORM!"
X	NortonAV	norton_antivirus.exe	"Added by the NETJOE TROJAN! Note - this is not the legitimate Symantec AV program"
X	nortonav	CCUPD32.EXE	Added by an unidentified WORM or TROJAN!
X	NvCplDmn	NAVSVC.EXE	"Added by an unidentified VIRUS
X	QTSvc	navchk.exe	Premium rate adult content dialler
N	ScanSoft PaperPort 7 Registration Reminder	NAVBrowser.EXE	"Registration reminder for PaperPort 7 from Scansoft (now Nuance)"
X	SchedulerMgr	navchk.exe	Premium rate adult content dialer
X	searchnav	searchnav.exe	SearchNav adware - IEFeatures/Popnav variant
X	SearchNavVersion	searchnavversion.exe	SearchNav adware - IEFeatures/Popnav variant
X	Symantec Security Routine Addon	navpaw.exe	"Added by the AGOBOT-ES BACKDOOR!"
X	Symantec Security Routine Addon for Microsoft Windows	navpxaw32.exe	"Added by the AGOBOT-GJ TROJAN!"
X	sysav	winav.exe	"WinPC Antivirus rogue security software - not recommended
X	System Information Manager	Navcpe.exe	"Added by the SDBOT-QB WORM!"
X	SystemService	navchk.exe	Premium rate adult content dialler
X	Video Process	Navapsvcc.exe	"Added by the SPYBOT-CW WORM!"
U	webscan	stopsignav.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
X	WinAntiVirus Pro 2007	WinAv.exe	"WinAntiVirus Pro 2007 rogue security software - not recommended
X	WinAntiVirusPro2006	WinAV.exe	"WinAntiVirus Pro 2006 rogue security software - not recommended
X	WinAvX	WinAvX.exe	"Added by the VIRANTIX TROJAN!"
X	WinAvX	WinAvXX.exe	"Malware installed by different rogue security software including SpyKillerPro. Also detected as the SPYWAD-AR TROJAN!"
X	Windows Anti Virus Control Center	winavscan.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Print Spooler	NavAgent32.exe	"Added by an unidentified VIRUS
X	ynavmrcd.exe	ynavmrcd.exe	"Added by the DLOADR-AVC TROJAN!"
X	Zonavirus	0	"Added by the KITRO.D (or ARGEN.A) WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.