Startup program entry details:

NSWosCheck (osCheck.exe)

This page expands upon the information already available for this entry in the Pacman's Portal Windows start-up programs database.

User's choice - depends whether a user deems it necessary

For further information on how to identify and disable startup programs please visit the Introduction page.

Description:

Part of Symantec's now discontinued Norton SystemWorks security and utility suite. Checks at boot-time to see if you are still using the same OS as your last Windows session and terminates if you are. If Windows has been upgraded it will attempt to download the relevant updates for the new OS on the first reboot

Startup information:

Registry (Start → Run → regedit)

• Key(s): HKLM\Run
• Name: NSWosCheck
• Data:
  • C:\Program Files\Norton SystemWorks\osCheck.exe
  • "C:\Program Files\Norton SystemWorks Premier Edition\osCheck.exe"
  • "C:\Program Files\Norton SystemWorks Basic Edition\osCheck.exe"

MSConfig (Start → Run → msconfig → Startup)

• Startup Item (XP): osCheck
• Startup Item (Vista/7): N/A
• Command:
  • C:\Program Files\Norton SystemWorks\osCheck.exe
  • "C:\Program Files\Norton SystemWorks Premier Edition\osCheck.exe"
  • "C:\Program Files\Norton SystemWorks Basic Edition\osCheck.exe"

Windows Defender (Start → All Programs → Windows Defender → Tools → Software Explorer)

• Name: Norton SystemWorks
• Startup Value:
  • C:\Program Files\Norton SystemWorks\osCheck.exe
  • "C:\Program Files\Norton SystemWorks Premier Edition\osCheck.exe"
  • "C:\Program Files\Norton SystemWorks Basic Edition\osCheck.exe"

HijackThis (HJT) log examples:

O4 - HKLM\..\Run: [NSWosCheck] "C:\Program Files\Norton SystemWorks Premier Edition\osCheck.exe"
O4 - HKLM\..\Run: [NSWosCheck] "C:\Program Files\Norton SystemWorks Basic Edition\osCheck.exe"
O4 - HKLM\..\Run: [NSWosCheck] C:\Program Files\Norton SystemWorks\osCheck.exe
O4 - HKLM\..\Run: [NSWosCheck] "C:\Programmi\Norton SystemWorks Premier Edition\osCheck.exe"
O4 - HKLM\..\Run: [NSWosCheck] C:\Programas\Norton SystemWorks\osCheck.exe
O4 - HKLM\..\Run: [osCheck] "C:\Programme\Norton Internet Security\osCheck.exe"

Other information:

• File location:
  • %ProgramFiles%\Norton SystemWorks
  • %ProgramFiles%\Norton SystemWorks Premier Edition
  • %ProgramFiles%\Norton SystemWorks Basic Edition
• File properties "Description": osCheck
• Purpose: OS upgrade check
• Program disable option: None
• Shortcut(s) available: None
• Vendor/Publisher: Symantec Corporation
• Product(s): Norton SystemWorks
• Tested: Yes

Note:

• %ProgramFiles% - refers to the Program Files folder; typically the path is C:\Program Files
• HKLM refers to HKEY_LOCAL_MACHINE

Main index

Copyright © Pacman's Portal, 2001 - 2012
All rights reserved