ns.exe

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AmazingTens	AmazingTens.exe	Premium rate adult content dialler
U	Anonymizer Total Net Shield	AnonTns.exe	"Anonymizer Total Net Shield - ID protection and privacy software"
X	AntiVermeans	AntiVermeans.exe	"Variant of the Antivermins rogue security software - not recommended
X	AntiVermins	AntiVermins.exe	"Antivermins rogue security software - not recommended
X	bargains	bargains.exe	"BargainBuddy adware"
X	BullsEye	bargains.exe	"BargainBuddy adware"
X	BullsEye Network	bargains.exe	"BargainBuddy adware"
Y	CleanUp	mcappins.exe	Used by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
N	Compaq Connections	Compaq Connections.exe	"See here - ""messaging service that automatically sends you support information
X	Configuration Servecie	sewins.exe	"Added by the SDBOT-COH WORM!"
X	Counterstrike Service Agent	czrzns.exe	"Added by the MEDBOT.AR WORM!"
X	Dm Hr	lpns.exe	"Added by the IRCBOT.WORM.61673 WORM!"
X	downs	downs.exe	"Added by the BCKDR-MNR TROJAN!"
?	DSSSGENS	dssagens.exe	"??"
X	Duwee wong Cerbon	Cirebons.exe	"Added by the BHARAT.A WORM!"
U	DynDNS Updater	DynDNS.exe	"Dynamic DNS IP address updater tool
U	ExtraDNS	ExtraDNS.exe	"ExtraDNS - DNS configuration tool"
Y	frxmxins	frxmxins.exe	ATI 3D Studio MAX/VIZ driver
U	HSTrans	hstrans.exe	"Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen"
X	Internet	wins.exe	"Added by the RBOT.AAYF WORM!"
X	IpWins	ipwins.exe	"IPWins adware"
X	Live-Help	lmns.exe	"Added by the RBOT-GHE WORM!"
Y	McAfee Application Installer	mcappins.exe	Used by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
Y	mcappins	mcappins.exe	Used by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted
X	MDN	MDNS.exe	"Added by the SPYBOT.JPB WORM!"
U	MediaButtons	MediaButtons.exe	"Supports the eject button on the front on the Dell Studio Hybrid desktop. If disabled
U	MegaPanel	HSTrans.exe	"Homescan Internet Transporter - part of ACNielson Homescan. Recognizes when the ACNielsen Homescan Scanner is attached to the computer and allows it to transmit scanner information to ACNielsen"
X	Microsoft DLL Verifier	wns.exe	"Added by the SPYBOT-LA WORM!"
X	Microsoft DNS Query	msdns.exe	"Added by the AGENT-BS TROJAN!"
X	Microsoft Logins	winlogins.exe	"Added by the SPYBOT.BCZ WORM!"
X	Microsoft Office	msoicons.exe	"Added by the RBOT-ZI WORM! - NOTE - do no confuse with the legitimate Msoicons.exe file described here. The latter wil not be listed among your startups!"
X	Microsoft Update Machine	windns.exe	"Added by the RBOT.EF WORM!"
X	Microsoft Update Machine	MSOICONS.EXE	"Added by the RBOT.AWS WORM! Note - do no confuse with the legitimate Msoicons.exe file described here. The latter should not normally figure in Msconfig/Startup!"
X	mnklins	mnklins.exe	"VX2.Transponder parasite updater/installer related"
U	MNS	MNS.exe	"Mobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the correct drive mappings
X	msconfig	wins.exe	"Added by the RBOT.PF WORM!"
X	MSN	ctfmoons.exe	"Added by the SPYBOT.HI WORM!"
X	Msn Messeng	windns.exe	"Added by a variant of the RBOT WORM!"
X	Msn Updater	msnplugins.exe	"Added by the RBOT-HS WORM!"
U	MyEmoticons	MYEMOTICONS.EXE	"MyEmoticons from Persona Ltd - add icons (emoticons) to your E-mail"
X	Name Server	mswins.exe	"Added by a variant of the SDBOT WORM!"
X	Netbeans	netbeans.exe	"Added by the DELBOT-R WORM!"
X	NoDNS	NoDNS.exe	"Added by the CLICKER.WI TROJAN!"
X	NS	ns.exe	"Added by the AGOBOT-HS WORM!"
X	odnex	odbns.exe	"Added by the AGENT-MPM TROJAN!"
U	QWS3270 Sessions	sessions.exe	QWS3270 Secure terminal emulation software
X	Rapdatybs	ravseteyns.exe	"Added by the PWS-ACP TROJAN!"
X	Real-Tens	Real-Tens.exe	"DownloadWare adware"
X	Regptmens	REGPTMENS.EXE	"Added by the BANCOS-ED TROJAN!"
X	Services	windns.exe	"Added by a variant of the RBOT WORM!"
N	Smileycons	smileycons.exe	"Smileycons - free smileys
X	Sygate Personal Firewall	wins.exe	"Added by the RBOT.AOB WORM!"
X	Symantec Antivirus professional	dyndns.exe	"Added by a variant of the FORBOT WORM!"
X	Symantec Antivirus professional	f0dns.exe	"Added by the FORBOT-GT WORM!"
X	Symantec Antivirus professional	flushdns.exe	"Added by a variant of the FORBOT WORM!"
X	System Document Application	wins.exe	"Added by the SDBOT.AUB WORM!"
X	System Security Updaters	vsmons.exe	"Added by the RBOT-OW WORM!"
X	Win32 Drivers	winlogons.exe	"Added by the FORBOT-FG WORM!"
X	WindowRegKey update	wins.exe	"Added by the SPYBOT.I WORM!"
X	Windows Config	wins.exe	"Added by the SPYBOT.JR WORM!"
X	Windows DNS	windns.exe	"Added by the SDBOT-XU WORM!"
X	Windows Domain Name Drivers	windns.exe	"Added by the FORBOT-EP WORM!"
X	Windows Service Agent	win32wins.exe	"Added by the RBOT-LOL WORM!"
X	WINDOWS SYSTEM	mswins.exe	"Added by the MYTOB.DP WORM!"
X	WINDOWS SYSTEM Dns	windsns.exe	"Added by the MYTOB.EY WORM!"
X	Windows System Guard	msns.exe	"Added by the DWNLDR-IGD TROJAN!"
X	Windows Update 32	winlogons.exe	"Added by the FORBOT-FI WORM!"
X	Windows Update System	mswins.exe	"Added by the IRCBOT.DN WORM!"
X	Windows Updates	w32dns.exe	"Added by the SDBOT-BFW WORM!"
X	Windows xp	Wins.exe	"Added by the RBOT.VH BACKDOOR!"
X	WindowsRegKey update	windns.exe	"Added by the RBOT.IE WORM!"
X	WindowsUpdatev4	w32gins.exe	"Added by an unidentified WORM or TROJAN! Located in the Root folder (C:\)
X	winlogins.exe	winlogins.exe	"Added by the OPTIX.H BACKDOOR!"
X	WINTASK	yahooicons.exe	"Added by the MYTOB-HM WORM!"
X	wntlgns	wntlgns.exe	"CoolWebSearch parasite variant"
X	XMLmedia 10.0	wmsdkns.exe	"Added by the FAKEALERT TROJAN!"
X	xpstat	winlogins.exe	"Added by the RBOT-AAR WORM!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.