| Name | Status | Filename | Description |
|---|
| NTSecure | O | srvany1234.exe | Unknown owner: Location C:\WINDOWS\system32\srvany1234.exe |
| NTSVCMGR | X | winlogon.exe | Identified as Win32.Iroffer.b by Kasperksy. Note: Located in \%WINDIR%\System32\dllcache\win32\ Note: This is not the legitimate Windows Process which is found in \%WINDIR%\System32\ folder. |
| NTSVCMGR | X | ntsrv.exe | Identified as Win32.Iroffer.b by Kasperksy. Note: Located in \%WINDIR%\System32\dllcache\win32\ |
| NTsyslog | L | ntsyslog.exe | Related to Open_Source_Technology Group. An application logging functionality. |
| nTune Service (nTuneService) | L | nTuneService.exe | Related to NVIDIA Access Manager. Note: Located in C:\Program Files\NVIDIA Corporation\nTune\ |
| NTVDM | X | ntvdm.exe | W32/Tilebot-JZ
Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR%(XP/WinNT/2K) Used in DOS attacks, Allows others to access the computer Please read information on link |
| NuTCRACKER Kernel | L | nutkserv.exe | Related to openUTM from Fujitsu Siemens Computers |
| NuTCRACKER Service | L | nutsrv4.exe | Related to Rational Rose, MKS Toolkit for Enterprise Developers |
| NuTCRACKERService | L | nutsrv4.exe | Related to MKS from DataFocus Inc. Toolkit for Enterprise Developers. |
| NvCplScan | X | msc32.exe | Related to the W32/FORBOT-DD |
| NvCplScan | X | nvsc32.exe | another example, added by Forbot_ET. |
| Nvedavt | L | ousbehci.sys | Related to OrangeWare Corp. |
| nvidGUIv (nvidGUIv2) | X | NVIDGUIV.EXE | Added by the SDBOT.CTQ
WORM!
Read the link, rootkit type stealth involved. |
| NVIDIA Display Driver Service (NVSvc) | L | nvsvc32.exe | Related to NVIDIA drivers. |
NVIDIA Display Driver Service (Omega 1.6693) (P)
(NVSvc) | L | nvsvc32.exe | Related to NVIDIA, http://www.nvidia.com/ drivers. |
| NVIDIA Display Service (NVIDIA Display Driver Service) | X | Nvds.exe | Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\%WINDIR%\ folder |
| NVIDIA Driver Helper Service (NVSvc) | L | nvsvc32.exe | Related to NVIDIA drivers. Note: Located in \%WINDIR%\System32\ |
| NVIDIA Driver Serviceˇˇ (NVSv ) | X | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ |
| Nvidia Graphic Displacement (nvideoGUI) | X | nvideogui.exe | Added by the SDBOT.CQD
WORM!
Read the link, rootkit type stealth involved.
|
| NVIDIA PVR Schedule Monitor (nvpvrmon) | L | nvpvrmon.exe | Related to NVIDIA ForceWare driver. Note: Located in C:\Program Files\NVIDIA Corporation\ForceWare\Multimedia\NVPVR\ |
| nvsec(nvsec) (NvSec) | X | nvsec.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More here |
| nvsvc32.exe | X | wmisp.exe | Added by the Backdoor_Win32_SdBot_aad WORM! - Reported by KASPERSKY ON-LINE SCANNER |
| O&O CleverCache Agent (OOCleverCacheAgent) | L | ooccag.exe | Related to O&O_Software Products. Located in folder: \OO Software\CleverCache\ |
| O&O ComponentInstaller Agent | L | oocinst.exe | Related to O&O software Protection Software |
| O&O Defrag | L | oodag.exe | www.oo-software.com |
| O&O Defrag 2000 (OOD2000) | L | OOD2000.exe | Part of O&O Defrag |
O23 - Service: AOL Anti-Spyware Service
(AOL_SpywareServ) | X | aolspy.exe | Added by a variant of the Backdoor.Win32.Rbot.cgu TROJAN! Note: This worm\trojan is located in C:\WINDOWS\web\ |
O23 - Service: OradevReports [localrepserver]
(OracleReportServer-localrepserver) | L | rwserver.exe | Related to Oracle products |
| O2Micro Flash Memory (O2Flash) | L | o2flash.exe | Related to O2Micro_Flash Memory Card. Note: Located in C:\WINDOWS\system32\ |
Odyssey Client for Fujitsu Siemens Computers
(odClientService) | L | odClientService.exe | Related to Odyssey_Client for Fujitsu Siemens Computers. Note: Located in C:\Program\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\ |
| OESH (Office Source Engine Help) | X | Program.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C: folder. |
Office Server Extensions Notification Service
(OWSTimer) | L | OWSTIMER.EXE | Related to Microsoft_SharePoint Note: Located in C:\Program Files\icrosoft Office\Office\ Files\ |
| Office Source Engine (ose) | L | OSE.EXE | Microsoft Office Source Engine |
| OfficeScan NT Listener (tmlisten) | L | tmlisten.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScan NT Proxy Service (TmProxy) | L | tmproxy.exe | Related to Trend Micro Inc. |
| OfficeScanNT Listener (tmlisten) | L | tmlisten.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScanNT Personal Firewall (OfcPfwSvc) | L | OfcPfwSvc.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScanNT RealTime Scan (ntrtscan) | L | ntrtscan.exe | l
Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OlCamSrv | L | OlCamSrv.exe | Related to: Olympus_America Inc. Imaging services |
| OM Common Services (omsad) | L | omsad32.exe | Related to Dell Open Management system. |
| Omni-NFS Server | L | nfsd.exe | Related to Omni-NFS Server from XLink Technology. Note: Located in \%ROOT%\OmniX\ |
| OmniForm Printer | L | ofps.exe | Related to Nuance_Communications Inc., (Peviously Scansoft Inc.) A leading supplier of imaging, speech and language solutions |
| OmniFormat from Pdf995 | L | ntservice.exe | Related to OmniFormat from Software995 allows dynamic conversion and image manipulation of over 75 file formats. Note: Located in C:\Program Files\omniformat\ |
| Omniquad MyPrivacy | L | mpsvc.exe | Related to Omniquad Security's MyPrivacy
Internet tracks cleaning tool. |
| On Screen Display (TPHKSVC) | L | TPHKSVC.exe | Related to On_Screen_Display on LENOVO ThinkPad computers. Note: Located in \%Program Files%\LENOVO\HOTKEY\ |
| ONC/RPC Portmapper (portmapper) | L | PORTMAP.EXE | Related to Bell_and_Howell |
| OneStep Search Service | X | onestep.exe | OneStepSearch or OneStep_Search |
| OneTouch 4.0 Monitor | L | OtService.exe | Related to OneTouch monitor from Visioneer Inc. OneTouch is an easy-to-use utility that connects the buttons on your Visioneer or Xerox scanner with a powerful set of scanner settings so that with one touch. Note: Located in \%Program Files%\Visioneer\OneTouch 4.0\ |
| Online Armor (SvcOnlineArmor) | L | oasrv.exe | Related to Online_Armor from Tall Emu. Personal Firewall. Note: Located in \%Program Files%\Tall Emu\Online Armor\ |
| Online Backup Service | L | nts.exe | Related to Online_Backup_Service From Acpana Business Systems. Note: Located in C:\Program Files\Acpana Business Systems\Data Deposit Box\ |
