Nsv

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	1234klsjdc uiar924c af	sxgnsvuxct.exe	"Added by the FAKEALERT-AM TROJAN!"
X	Application Manager	acnsvc.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Application Manager	apnsvc.exe	"Added by the SMALLTRO.FN TROJAN!"
X	Cmpnt	mainsv.exe	"Added by the TOMPAI-C TROJAN!"
X	Compaq Service Drivers	msnsvc.exe	"Added by the RBOT.BKT WORM!"
X	Compaq Service Drivers	winsvc.exe	"Added by the SDBOT-AGD WORM!"
X	dpnsvr32	dpnsvr32.exe	"Added by the AOLPASS-B TROJAN!"
X	Fen Startups	fensvc32.exe	"Added by the RANDEX.CCF WORM!"
X	Generic Host Process for Win32 Services	winsvc.exe	"Added by the SDBOT-O WORM!"
X	Generic Host Process for Win32 Services	winsvc32.exe	"Added by the SDBOT-P WORM!"
X	Hrn_qtv	hrnsvc32.exe	"Added by the SDBOT-AET WORM!"
X	Microsoft Service	winsvc.exe	"Added by the SPYBOT-DB WORM!"
X	Microsoft Service Manager	winsvc.exe	"Added by a variant of the RBOT WORM! See here"
X	Microsoft Update Machine	WINSVC32.EXE	"Added by the RBOT.CU WORM!"
X	Microsoft usnsvc Service	usnsvc.exe	"Added by a variant of the KOBOT-C WORM!"
X	Microsoft Windows System Service Manager	winsvc.exe	"Added by the SPYBOT.LR WORM!"
X	mnsvc	mnsvc.exe	"Added by the AUTOUPDER TROJAN!"
X	mnsvcsp	mnsvcsp.exe	"Added by an unidentified VIRUS
X	msn	msnsvc.exe	"Added by a variant of the SDBOT WORM!"
X	MSN Service	msnsvc.exe	"Added by the SLENFBOT.EG WORM!"
X	MSN User Service	msnsvc.exe	"Added by the SLENFBOT.NS WORM!"
X	MSN User Svc	msnusnsvc.exe	"Added by the IRCBOT.AVV BACKDOOR!"
U	NNSvc	nnsvc.exe	"Net Nanny internet filter. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows 2K/XP/Vista"
X	Norton Update	winsvc.exe	"Added by the AGOBOT.ALP WORM!"
X	Nsv	nsvsvc.exe	"Delfin Promulgate adware"
X	nsvcin	n20050308.exe	"Delfin Media Viewer adware related"
X	Nsvdr	nsvdr.exe	Adult content dialler
X	ntupdate	dnsvc.exe	"Added by the SDBOT-TC WORM!"
Y	PAVFNSVR	PavFnSvr.exe	"Part of Panda Antivirus and Internet Security"
X	Print Scheduler	usnsvc.exe	"Added by a variant of the KOBOT-C WORM!"
N	PSIWin2.3 Connection Server	Psconsv.exe	Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
X	Random Interface Network Manager	rinsv.exe	"Added by the DELBOT-L WORM!"
X	RunServices	runsvc32.exe	"Added by the AGOBOT.QJ WORM!"
X	runsvc	runsvc.exe	"Added by the SMALL-CF TROJAN!"
X	SANS Service	sansv.exe	"Added by the VANEBOT-AH WORM!"
X	Service Client	winsvcli.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Document Application	winsvc32.exe	"Added by the SDBOT-VA WORM!"
X	System Manager Updates	winsvc.exe	"Added by the AGOBOT.AEM WORM!"
X	TCP Monitoring	LanNSvc.exe	"Added by the RANDEX.AAS WORM!"
X	UPNPService	WinSVCservice.exe	"Added by the AGOBOT.UN WORM!"
X	User Sharing Services	usnsvc.exe	"Added by a variant of the KOBOT-C WORM!"
X	usnsvc.exe	usnsvc.exe	"Added by the SPYBOT.AMD WORM!"
X	Windows Audio Control	ppnsvc.exe	"Added by the HAM TROJAN!"
X	Windows Database	wiinsvc.exe	"Added by the AGOBOT-RU WORM!"
X	Windows DLL Services	winsvc32.exe	"Added by the RBOT-ZF WORM!"
X	Windows Generic Services	winsvc32.exe	"Added by the AGOBOT-ZF BACKDOOR!"
X	Windows Logical Connection	wcnsvc.exe	"Added by the VIRUT.AO VIRUS!"
X	Windows Server!	winsvr.exe	"Added by the IRCBOT.AYC BACKDOOR!"
X	Windows Service	WINSVC.EXE	"Added by the SPYBOT-DH TROJAN!"
X	Windows Services	winsvc32.exe	"Added by the MYTOB-CB WORM!"
X	Windows Spools SV	winsv.exe	"Added by the RBOT-AUQ WORM!"
X	WINDOWS SVC	winsvc.exe	"Added by the MYTOB-EY WORM!"
X	WINDOWS SYSTEM	winsvc32.exe	"Added by the MYTOB.HH WORM!"
X	WINDOWS SYSTEM	winsvc.exe	"Added by the MYTOB.LM WORM!"
X	Windows Update	usnsvc.exe	"Added by the KOBOT-C WORM!"
X	WindowsFirewallSvc	winsvcup.exe	"Added by a variant of the SDBOT WORM!"
X	winnsvc	msvc.exe	"Added by the PWS.O TROJAN!"
X	WinSvc16.exe	WinSvc16.exe	"Added by the SDBOT.FQ TROJAN!"
X	winsvc32	winsvc32.exe	"Added by the IRCBOT-AEG WORM!"
X	winsvc32.exe	winsvc32.exe	"Added by the GREPAGE TROJAN!"
X	Winsvr	msupd*****.exe [= random digit]	Added by the INJECT.163 TROJAN!
X	Winsvr	[random filename].exe	"Added by the ADCLICK-DK TROJAN!"
X	Winsvr manager	DDEsvr.exe	"Added by the TIRBOT-C WORM!"
X	Winupdatee	winsvcc.exe	"Added by the AGENT.AN TROJAN!"
X	WN Services	wnsvc.exe	"Added by the KBBOT-A TROJAN!"
X	ZNN	znnsvc.exe	"Added by the SDBOT-DAA WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.