netw

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	BullsEye Network	bargains.exe	"BargainBuddy adware"
X	Client for Microsoft Networks	msclient32.exe	"Added by the SDBOT-BXQ WORM!"
X	Comcast Network	ribiva.exe	"Added by a variant of the IRC TROJAN!"
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
X	CRP386 Networking	crp386.exe	"Added by the IRCBOT.N TROJAN!"
X	DialUp Network Application	Rnaap.exe	"Added by a variant of the SDBOT WORM!"
X	drvnetw	drvnetw.exe	"Added by the BROGGER-B TROJAN!"
N	EasyNetwork	McENUI.exe	"McAfee's EasyNetwork user interface - ""enables secure file sharing
U	Eicon NetworksLAN_DAEMON	watch.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually"
X	GLF Network Lan Monitor	NPFMNTOR.exe	"Added by the RBOT-AGY WORM!"
X	Homeland Network	HomelandNetwork.exe	Homeland Network Notifier - pops ads
?	HP Network Registry Agent	hpnra.exe	"??"
U	IJNetworkScanUtility	CNMNSUT.EXE	Network utility available for some Canon scanners and multifunction devices. Allows the device to see computers on a network and those computers running the utility to control scanning via the Control Panel on the scanner - which saves you having to run back and forth between the scanner and your computer
X	InternetWasherPro	iw.exe	"Internet Washer manages temporary browser files
X	IpNetwork	ipnetwork.exe	Maxifiles adware
U	Jv16pt Network Resident	jv16pt_network.exe	"jv16 PowerTools network resident program. Only needed if you are using the program's network features"
X	Local Area Network	OpenGL.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft (R) Windows Network Latency Controller	1.tmp	"Added by a generic password stealer TROJAN - see here"
X	Microsoft (R) Windows Network Latency Controller	nlc.exe	"Added by a generic password stealer TROJAN - see here"
X	Microsoft (R) Windows Network Latency Controller	sp2vc.exe	"Added by a generic password stealer TROJAN - see here"
X	Microsoft (R) Windows Network Security Management Service	nsms.exe	"Added by the RANKY.LC TROJAN!"
U	Microsoft Broadband Networking	MSBNTray.exe	Microsoft Broadband Networking Tray Application
X	Microsoft Network	msnet.exe	"Added by the MOCKBOT.A WORM!"
X	Microsoft Network	Networksystem.exe	"Added by the SDBOT-AAI WORM!"
X	Microsoft Network Daemon for Win32	Netd32.exe	"Added by the SDBOT.R TROJAN!"
X	Microsoft Network Host	svc0host.exe	"Added by the SDBOT-AEN WORM!"
X	Microsoft Network Neighbourhood	networknbh.exe	"Added by the RBOT.DMN WORM!"
X	Microsoft Network Services Controller	mmsvc32.exe	"Added by the NANPY-A WORM!"
X	Microsoft Networking Agent For SP2	msnac32.exe	"Added by the SPYBOT.PEN WORM!"
X	Microsoft Update 32	network.exe	"Added by the RBOT-ARZ WORM!"
U	Microsoft Windows Media Player Network Sharing Service Configuration Application	WMPNSCFG.exe	"Network sharing tool for Windows Media Player 11 for XP & Vista. When using WMP 11 on home network you can choose to share your favorite music
X	Microsoft xpsp2	Networksystem.exe	"Added by a variant of the SDBOT WORM!"
X	MicrosoftNetwork Daemon for Win32	NETD32.EXE	"Added by the RANDEX.F WORM!"
U	ModemOnHold	netWaiting.exe	"NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information"
X	MovieNetworks	MovieNetworks.exe	MovieNetworks will connect you by a domestic premium rate telephone number 900-xxx-xxxx - so you get xxx rated pictures and junk and high internet costs. Remove the %ProgramFiles%\MovieNetworks directory
X	MS Network Control	mswin.exe	"Added by the DUMBA TROJAN!"
X	MS Win32 Network Services	windriver.exe	"Added by the AGOBOT.ADH WORM!"
U	myNetWatchman	nwclient.exe	"Sends your firewall alerts to a website
X	netw	svw.exe	"Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware"
X	NetWatch32	netwatch.exe	"Added by the MIMAIL.C WORM!"
N	Netword Agent	nwant33.exe	An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
X	NetWork	csrs.exe	"Added by the AGOBOT.JJ WORM!"
X	Network	netwin.exe	"Added by the SILLYFDC-CG WORM!"
X	Network Access	winssh.exe	"Added by a variant of the SDBOT WORM!"
X	Network Administration	NAS.exe	"Added by the ANTILAM.20.Q TROJAN!"
X	Network Administration Service	rsvc32.exe	"Added by the RBOT.ABH WORM!"
U	Network Associates Error Reporting Service	TBMon.exe	Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
X	Network Connections	internat.exe	"Added by the VB-ZD TROJAN!"
X	network device driver	msfirewall.exe	"Added by the DELF-LB TROJAN!"
U	NetWork Device Switch	NetDevSW.exe	Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X	Network Host Controller	[path to trojan]	"Added by the WHISPER TROJAN!"
X	Network Host Service	msmnart32.exe	"Added by the RBOT-CJV WORM!"
X	Network Host Service	[random]32.exe	"Added by the RBOT-BAB WORM!"
X	Network maneger	svchost.exe	"Added by the AGENT.BX BACKDOOR! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
X	Network Protocol Service	wuamgrd.exe	"Added by the RBOT.EA WORM!"
X	Network protocol service	wintcp.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Provisioning Service	WinNPS.exe	Added by an unidentified WORM/TROJAN!
X	Network Security	secsvc.exe	"Added by the RBOT-ALX WORM!"
X	Network Security	NSecurity.exe	"Added by the IRCBOT.AAV WORM!"
X	Network Security Guard	*********.exe [ = random char]	"CoolWebSearch parasite variant"
X	Network Security Guard	[path to trojan]	"Added by the COLEM-A TROJAN!"
X	Network Security XP	nvsvc86.exe	"Added by the RBOT-GUI WORM!"
X	Network Service	svchost.exe	"Added by the STARTPA-CC TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	Network Service	svhost.exe	"Added by the HACDEF-K TROJAN!"
X	Network Service	MccTrayApp.exe	Added by an unidentified WORM or TROJAN!
X	NETWORK SERVICE	SV�HOST.exe	"Added by the DELF-EW BACKDOOR!"
X	Network Service Manager	netsvc.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Network Services	netsvacs.exe	"Added by the GAOBOT.AIS WORM!"
X	Network Translation System Service	ntss.exe	"Added by the UNPDOOR TROJAN!"
X	NETWORK.EXE	NETWORK.EXE	"Added by the DELF-GM TROJAN!"
X	NetworkAssociates Inc	internet.exe	"Added by the LOVGATE.AB WORM!"
X	NetworkClient	NetworkClient.exe	"Added by the LEMUR WORM!"
X	NetworkKey	netkey.exe	"Added by the IRCBOT-AJ TROJAN!"
X	Networks Configurator	NetConfs.exe	"Added by the RBOT-OX WORM!"
X	Networks Controler	Netsis.exe	"Added by the RBOT-NG WORM!"
N	NetworkSetup	dlink.exe	"D-Link System Tray icon"
N	P2P NETWORKING	P2P Networking.exe	Peer to Peer (P2P) sharing of files on the internet
N	P2P Networking	P2P	Peer to Peer (P2P) sharing of files on the internet
X	p2p networking	p2pnetworking.exe	"Added by the RBOT-ECP WORM!"
X	P2P Networking2	P2P Networking2.exe	P2P Networking2.exe is an advertising program by Joltid. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately
N	P2P Networking3	P2P Networking3.exe	"P2P Networking
X	p2pnetwork	p2pnetwork.exe	"Added by the ALCAN.A WORM!"
X	p2pnetworking	p2pnetworking.exe	"Added by the RBOT-AFL WORM!"
N	Pure Networks Port Magic	PortAOL.exe	"Pure Networks Port Magic
X	Random Interface Network	rst.exe	"Added by the DELBOT-P WORM!"
X	Random Interface Network Manager	rinsv.exe	"Added by the DELBOT-L WORM!"
X	Services Network	Services.exe	"Added by the SWISYN-E WORM! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!"
U	Start Network Scanner Tool	sdFTP.exe	"Part of
X	svchost Netware Manager	svchost.exe	"Added by the EXVID.A WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	SwimSuitNetwork	SwimSuitNetwork.exe	Advertising spyware
X	Symmetrical Network	symmec.exe	"Added by the DELBOT-N WORM!"
X	System Networking	sysnet.exe	"Added by the RBOT.API WORM!"
X	SystemNetwork	NETSERV.EXE	Added by the NETCONTROL VIRUS!
X	SystemNetwork	sysnet.exe	"Added by a variant of the RBOT WORM!"
N	USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	"USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapter. You must uncheck ""Use Windows to configure my wireless settings"" for the program to work properly. Has Site Survey capabilities
X	W3KNetwork	"rundll32.exe w3knet.dll	dllinitrun"
U	Watson Subscriber for SENS Network Notifications	dwtrig20.exe	"Used to launch Microsoft Error Reporting (DW20.exe) - if
X	Win Net Wks32	netwks32.exe	"Added by the RBOT.AA WORM!"
X	Win32 Network Driver	crss.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Windows Network Controller	Mqguard.exe	"Added by the FORBOT-CL WORM!"
X	Windows Network Controller	WinxPupd.exe	"Added by the FORBOT-DK WORM!"
X	Windows Network Controller	winmms32.exe	"Added by the FORBOT-ED WORM!"
X	Windows Network Controller	wingmt.exe	"Added by a variant of the SDBOT WORM!"
X	Windows Network Controller	Win9x.exe	"Added by the WOOTBOT.I WORM!"
X	Windows Network Controller	winmms32.exe.exe	"Added by the FORBOT-ED WORM!"
X	Windows Network Firewall	firewall.exe	"Added by the POEBOT-J WORM! Located in %System%"
X	Windows Network Logon	npesvc.exe	"Added by the AGENT.ERZ TROJAN!"
X	Windows Network Service	winvc32.exe	"Added by the RBOT.RY WORM!"
X	Windows Network Service	Msconf32.exe	"Added by a variant of the RBOT WORM!"
X	Windows Network Service	Realteks.exe	"Added by the RBOT-GTG WORM!"
X	Windows Network Services	winnetwork.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Network Services	winnetwork128.exe	"Added by the SLENFBOT.J WORM!"
X	Windows Network Services	winnetwork32.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Network Services	winnetwork64.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Windows Network Session	nspsvc.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Networking	winsys32.exe	"Added by the GAOBOT.FL WORM!"
X	Windows Networking Monitor	mdm.exe	"Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)"
X	Windows Networking Monitorin	xmdmx.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Networking Monitoring	mdm.exe	"Added by the IRCBOT.AKZ WORM! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is located in %ProgramFiles%\Common Files\Microsoft Shared\VS7Debug (98/Me/XP/Vista) or C:\WINDOWS\SYSTEM (Me only)"
X	Windows Networks	netcog.exe	"Added by the MYTOB.FH WORM!"
X	Windows Services	NetworkDriver32.exe	"Added by the RBOT-ACR WORM!"
X	Windows Services	NetworkDrivers.exe	"Added by the SDBOT-YO WORM!"
U	X10 Device Network Service	x10nets.exe	Belongs to X10 video streaming device(s)
X	Xp	p2pnetworking.exe	"Added by the SDBOT.XA WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.