| Name | Status | Filename | Description |
|---|
| Generic Host Process for Win32 Services | X | winlogon.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System\ Note: Use SDFix under supervision. Not to be confused by the original file in \%WINDIR%\System32\ folder. |
| Gestionnaire des tāches de Windows | X | taskmgr.exe | Detected as Backdoor.Win32.Poison.fat by Kaspersky anti-virus. Note: Do not remove the legitimate file in \%WINDIR%\System32\taskmgr.exe Note: Use SDFix under supervision. |
| GDMgr.exe | U | gdmgr.exe | GuardMon is a commercial spyware program designed to monitor all forms of user activity on a computer |
| GoBack Tray Icon | U | GBTray.exe | System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
|
| g.exe | X | g.exe | Added by the Backdoor.Graybird.Q
TROJAN!
Read the link, rootkit type stealth involved.
|
| GinaDll | X | ntgina.dll | Added by a ANIG.A worm infection |
| Graphic Update | X | openglx.exe | Identified as Backdoor.Win32.IRCBot.ako MSN Worm! Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| GameSpot | N | kontiki.exe | Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops |
| Gainward | U | TBPanel.exe | Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel |
| general ml097e | X | general.exe | RapidBlaster Variant |
| GSISETUP | ? | [path],GsiInst.exe,INSTALL [path],V205Res 13 | BT Voyager ADSL modem related - what does it do and is it required? |
| gigabit.exe | X | gigabit.exe | Added by the BEAGLE.U WORM! |
| Gremlin | X | intrenat.exe | Added by the DOOMJUICE VIRUS! |
| Gator | X | gator.exe | Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here
|
| Gravis Xperience Driver Support | U | Grxp4exe.exe | Driver for Gravis game controllers such as the Eliminator Aftershock. Must be loaded if you run the supplied application software for the controller to be recognized. Start it manually via a shortcut if not used |
| Grokster | N | Grokster.exe | Groster Peer-To-Peer File Sharing program
|
| Generic Host Process326a System Backup | X | scvhost326a.exe | Added by a variant of the W32/SDBOT WORM!
|
| gaim | U | gaim.exe | Gaim is an instant messenger client with capability to connect to AIM, ICQ, MSN Messenger, Yahoo, IRC, Jabber, Gadu-Gadu and Zephyr networks. |
| GenericHostXP | X | WinLoaderXP.exe | Added by the Troj/Bdoor-ACX TROJAN! Note: This trojan is located in C:\%WINDIR%\ |
| gcasDtServ | X | gcasDtServ.exe | Added by an unidentified WORM or TROJAN. - Note - there IS in fact also a Microsoft Antispyware process bearing the same name, but it will not figure among the startup items! |
| gimmysmileys | X | gimmysmileys.exe | Added by the Downloader.VB.xu identified by ewido. Note: More_info |
| GStartup | X | GMT.exe | Gator spyware component - see here. Please note that Claria Corporation no longer support GAIN-Supported software - see here
|
| Generic Service Process | X | serv1ces.exe | Added by the W32/Agobot-JK WORM! |
| Giganews Accelerator | U | GiganewsAccelerator.exe | Related to Giganews_Accelerator A Usenet service. Note: Located in \%Program Files%\Giganews Accelerator\ |
| gcasServ | U | gcasServ.exe | Microsoft, formerly Giant AntiSpyware |
| GhostStartService | N | GhostStartService.exe | Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard |
| Gadwin PrintScreen | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window |
| Gene USB Monitor | U | USBMonit.exe | Monitors USB ports for insertion of Sandisk USB flashdrives. |
| gsv | X | gsv.exe | Added by the ROBAL 1.0 backdoor TROJAN! |
| GoogleDCClient | N | GoogleDCC.exe | Google Compute Client - only present if you installed the Google Toolbar with "Google Compute" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click "Stop Computing". No longer supported
|
| Games Acceleration | X | svshost.exe | EasySearch adware |
| Google Desktop Search | U | GoogleDesktop.exe | Google_Desktop_Search - "a desktop search application that provides full text search over your email, computer files, chats, and the web pages you've viewed. By making your computer searchable, Google Desktop Search puts your information easily within your reach and frees you from having to manually organize your files, emails, and bookmarks." |
| G_Server.exe | X | G_Server.exe | Added by the TROJ/FEUTEL-C
and Troj/Feutel-J
TROJANS!
|
| GhostSurfDelSatellite | Y | DeleteSatellite.exe | Related to SpyCatcher spyware remover from Tenebril.
This file prevents rogue programs from sending personal information to a remote user via the Internet. If you use Spy Catcher with real time scanning, you'll want to leave this file in place. Note: See here |
| Guardian | N | CMGrdian.exe | McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic |
| G00123 | X | (worm filename) | Added by the BUGBROS VIRUS! |
| Greetings Workshop | N | GWREMIND.EXE | You really want to be reminded about somebody's birthday at the expense of resources? |
| Guardian PC Security Tools | U | Pfft.exe | Related to PeerGuardian PC Security Tools. An Open Source Program. Note: located in C:\Program Files\Boomerang Software\Guardian PC Security Tools\ |
| GreasyPalmUpdate | ? | GreasyPalmUpdate.exe | Added by SearchFast adware redirects mistyped urls in the browser to a custom search engine. Note: located in \%WINDIR%\ |
| good | X | badvir.exe | W32/Silov-B Read the link, overwrites exe files with copies of itself |
| GrpConv | Y | grpconv.exe | Microsoft Windows Program Group Converter - used by installers (ONLY in the RunOnce keys) - provides the translation of groups and group items to folders and links. Also see this MS Knowledge Base article,
|
| gwiz | X | arpl.exe | Detected as Spyware/Virtumonde by panda |
| GuruNet | U | GuruNet.exe | GuruNet lets you click on any word on your screen to get the relevant information you want.
|
| Google Earth Viewer | N | GOOGLEMAPS.EXE | Google_Earth "combines satellite imagery, maps and the power of Google Search to put the world's geographic information at your fingertips." |
| GhostSecuritySuite | U | gss.exe | Related to Ghost_Security_Suite Protect the registry from unauthorized reading and modification and other tools. |
| GRA | N | gra.exe | Looks at system resources at startup and warns you if they have dropped. Contains links to the Disk Clean Up, Defrag and Start Up Menu. It does have a link to a startup configuration utility. Similar to msconfig but can keep a list of disabled apps. Not really necessary. Only appears if you load the Gateway Startup Utility |
| Generic Host Process for Win Services | X | mscvs.exe | Added by a variant of the SDBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| GBMLite7Agent | Y | GBMAgent.exe | Genie_Backup_Manager_Professional - "total system and data protection solution that combines ease-of-use and robust performance. It allows users to perform fast backup and recovery jobs reliably, and protects all MS Windows based desktops, laptops, and networked systems against various types of threats such as system failure, human error, and disaster." |
| getwin | X | IE\winB_.exe | Added by the Troj/Banker-HS TROJAN! |
| gremier | X | wscript.exe,gpremier.vbs | Added by the GPREMIER VIRUS! |
| gtydf | X | iisca.exe | Troj/Clagger-BB |
| gwiz | X | ntsystem.exe | Added by the Win32/Nitwiz.A TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) It has a component that hijacks the securityproviders key Fix here |
| Gestionnaire de disques universel | X | sysoobe.exe | Added by the Troj/Toader-A
TROJAN!
Note: This trojan file is found in the System\oobe (95/98/Me) or System32\oobe (Nt/2000/XP) folder.
|
| Go!Zilla Monster Downloads | X | Go.exe | Download manager for resuming downloads and choosing multiple download locations. Advertising spyware |
| gcasServ | X | realsched.exe | Added by a variant of the WIN32.TACTSLAY.A TROJAN! - NOTE - do NOT confuse with the Real Player executable as described here
|
