| Status | Autorun name | Command | Description |
| ? | GCC Reminder | gccrem.exe | Associated with AcraMax Greeting Card Creator. Is it a registration reminder? |
| N | GCS | GrabClipSave.exe | GrabClipSave screen capture tool |
| X | gcw | gcw.exe | Part of BestsellerAntivirus, PCSecureSystem and other members of the AVSystemCare family of rogue security software suites. See here for more examples |
| X | gdagdgajs | bbsbw.exe | Added by the SDBOT-QX WORM! |
| X | GDAX | [path to backdoor] | Added by the RANKY.K TROJAN! |
| X | gdcw | GDCW.exe | Part of ContentEraser, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | Gddlib | rundll32.exe gddlib.dll,start | Added by the AKBOT.EG WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "gddlib.dll" file is found in %System% |
| Y | GDFirewallTray | GDFirewallTray.exe | Part of the firewall included with the NotebookSecurity, TotalSecurity and InternetSecurity internet security products from G Data Software AG. Access to the firewall options is included in the main "G Data AntiVirus Tray Application" (AVKTray.exe) entry and although the name would suggest this adds a further tray icon it doesn't. Although the exact purpose is therefore unknown it's recommended you leave it running. Also used by versions of Lavasoft's Ad-Aware Total Security |
| X | gdien32 | gdien32.exe | Added by the SINGU-P TROJAN! |
| X | gdimx | gdimx.exe | MPB-D dialer. Note - provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "gdimx" |
| U | GDMgr.exe | gdmgr.exe | GuardMon is a commercial surveillance software program designed to monitor all forms of user activity on a computer |
| N | GDrive | GDriver.exe | Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager |
| N | Gearbox | confsvr.exe | NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here |
| N | GEARsec | gearsec.exe | Installed by Apple Quicktime package - iPod®/iTunes® CDRW support. Can be disabled if you only require Quicktime player |
| X | GEDZAC | GEDZAC.exe | Added by the GEMEL WORM! |
| X | Gekio Startups | gnksvc32.exe | Added by the AGOBOT.AFJ WORM! |
| N | GemStRmW | GemStRmW.exe | For a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually |
| X | gencroot | gencroot.exe | Added by the SDBOT-AED WORM! |
| U | Gene USB Monitor | USBMonit.exe | Monitors USB ports for insertion of Sandisk USB flashdrives |
| U | Gene USB Monitor | UMonit2K.exe | Monitoring tool for USB ports, card readers and flash drives |
| X | General Antivirus | GenAvir.exe | General Antivirus rogue security software - not recommended, removal instructions here |
| X | general lptt01 | general.exe | RapidBlaster variant (in a "general" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| X | general ml097e | general.exe | RapidBlaster variant (in a "general" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| U | Generic ChkMail | ChkMail.exe | Mail-checking utility supplied with some ASUS notebooks that uses an LED to notify the user when an E-mail has arrived. The models supported are AS62FM945GM1, AS62JM945PM1 and AS62JM945PM2 - see here |
| X | Generic Host | wauclt.exe | Added by the SDBOT-DNL WORM! |
| X | Generic host proccess for windows | SVCHOSTS.EXE | Added by the SPYBOT-GQ WORM! |
| X | Generic Host Process | SCHOST.EXE | Added by the RBOT-NC WORM! |
| X | Generic Host Process | svchost.exe | Added by the DLOADER-NX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Generic Host Process | camacttiv.exe | Detected by AVG as the CIADOOR.13 TROJAN! |
| X | Generic Host Process | lsassw.exe | Added by the AGOBOT-N WORM! |
| X | Generic Host Process for Win Services | mscvs.exe | Added by a variant of the SDBOT WORM! |
| X | Generic Host Process for Win32 Service | svlhost.exe | Added by the WOOTBOT.EX WORM! |
| X | Generic Host Process for Win32 Service | rpchost.exe | Added by the IRCBOT.DCN WORM! |
| X | Generic Host Process for Win32 Services | ntspcv.exe | Added by the SDBOT.S TROJAN! |
| X | Generic Host Process for Win32 Services | intspvc.exe | Added by the DINFOR.D WORM! |
| X | Generic Host Process for Win32 Services | winsvc.exe | Added by the SDBOT-O WORM! |
| X | Generic Host Process for Win32 Services | bazzi.exe | Added by the AHKER.E WORM! |
| X | Generic Host Process for Win32 Services | winsvc32.exe | Added by the SDBOT-P WORM! |
| X | Generic Host Process for Win32 Services | lspsvc.exe | Added by the MUMU.C WORM! |
| X | Generic Host Process for Win32 Services | SPSVC.EXE | Added by the SDBOT.DA WORM! |
| X | Generic Host Process for Win32 Services | svchost32.exe | Added by the AGOBOT.ALH WORM! |
| X | Generic Host Process for Win32 Services | svñhîst.exe | Added by the DLOADER.AK TROJAN! |
| X | Generic Host Process for Win32 Services | winlogon.exe | Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! |
| X | Generic Host Process For Win32 Services | mtsc32.exe | Added by the VB-CPL TROJAN! |
| X | Generic Host Process for WinXP Services | mshelp.exe | Added by the AGENT-GQP TROJAN! |
| X | Generic Host Process2 System Backup | scvhost2.exe | Added by the RBOT-BAH WORM! |
| X | Generic Host Process326a System Backup | scvhost326a.exe | Added by a variant of the SDBOT WORM! |
| X | Generic Host Service | lshost.exe | Added by the RBOT.LU WORM! |
| X | Generic Service Process | regsvc32.exe | Added by the GAOBOT.UJ or GAOBOT.UL WORMS! |
| X | Generic Service Process | serv1ces.exe | Added by the AGOBOT-JK WORM! |
| X | Generic Service Process | nvsvc.exe | Added by the AGOBOT.BY WORM! Note - this is not the valid NVIDIA Driver Helper Service and is located in %System% |
| X | Generic Service Process | srvhost.exe | Added by the AGOBOT-FX WORM! |
| X | Generic Service Process | regsvr32.exe | Added by the AGOBOT-AGD WORM! |
| X | Generic Service Process | SRCHOST.EXE | Added by the AGOBOT-DG WORM! |
| X | Generic Service Process | svrhost.exe | Added by the AGOBOT-FB WORM! |
| X | Generic Services Process | regsvc32.exe | Added by the GAOBOT.SY WORM! |
| X | GenericHostXP | WinLoaderXP.exe | Added by the BDOOR-ACX BACKDOOR! |
| U | Genie TimeLine Tray | GSTimeLineAgent.exe | System Tray access to the Genie Timeline backup utility from Genie9 Corporation |
| Y | Genie USB Monitor | USBmonitor.exe | Port monitor for an external USB hard drive. Required to enable access to the drive |
| X | Genius Mose Driver | svghost.exe | Added by a variant of the SPYBOT WORM! See here |
| N | GenMCLauncher | mcLauncher.exe | Genesys Meeting Center - "On-demand integrated audio and web meetings" |
| X | genserv path | sdqdqg.exe | Added by the SDBOT-RF WORM! |
| U | GenSrv | svchost.exe | StealthLogger surveillance software. Uninstall this software unless you put it there yourself |
| U | Genväg till egenskapssida för High Definition Audio | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Swedish version |
| N | Genväg till egenskapssida för High Definition Audio | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. Swedish version |
| U | Genvej til egenskabsside for High Definition Audio | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Danish version |
| X | Geography TX 1.0 NT | CompuSpeed.vbs | Added by the NEWLEY-A WORM! |
| X | Gerenciamento de arquivos do Windows | Winmod32.exe | Added by the DLOADER-WG TROJAN! |
| X | german.exe | winsystems.exe | Added by the BAGLEDl-AE TROJAN! |
| X | german.exe | wintems.exe | Added by the BAGLE-AS TROJAN! |
| X | gescw | gescw.exe | Part of BeschermingsTool, SysDepannage and other members of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| X | Gestionnaire de disques universel | sysoobe.exe | Added by the TOADER-A TROJAN! |
| U | Gestionnaire de lancement d'application fax | faxtray.exe | System Tray access to Internet Fax software by Alliance MCA |
| Y | Gestionnaire de sécurité Sympatico | Rps.exe | Main program for the Bell Security Manager internet security suite for Bell Canada ISP customers - sourced by Radialpoint |
| N | Get Smile | getsmile.exe | Puts smilie faces in your E-mail. Run manually when required |
| X | Get-Torrent Service | wakeservice.exe | Get-Torrent bittorrent client - Installs LOP adware |
| Y | Getca | InfoMyCa.exe | Monitor for a Belkin USB Wireless adapter |
| U | GetIT | GetIT.exe | "HP GET-IT (Graduate Entrepreneurship Training through Information Technologies) empowers under- or unemployed young people with business and IT skills - helping them find a job or start their own businesses" |
| X | GetitAll | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | GetModule18 | GetModule18.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule19 | GetModule19.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule20 | GetModule20.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule21 | GetModule21.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule23 | GetModule23.exe | Internet Speed Monitor adware related |
| X | GetModule24 | GetModule24.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule25 | GetModule25.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule27 | GetModule27.exe | Internet Speed Monitor adware related |
| X | GetModule29 | GetModule29.exe | Internet Speed Monitor adware related - see example here |
| X | GetModule30 | GetModule30.exe | Internet Speed Monitor adware related |
| X | GetMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | GetPack18 | GetPack18.exe | Internet Speed Monitor adware related - see example here |
| X | GetPack19 | GetPack19.exe | Internet Speed Monitor adware related - see example here |
| X | GetPack20 | GetPack20.exe | Internet Speed Monitor adware related - see example here |
| X | GetPack21 | GetPack21.exe | Internet Speed Monitor adware related - see example here |
| X | GetPack22 | GetPack22.exe | Internet Speed Monitor adware related |
| X | GetPack23 | GetPack23.exe | Internet Speed Monitor adware related |
| X | GetPack24 | GetPack24.exe | Internet Speed Monitor adware related - see example here |
| X | GetPack25 | GetPack25.exe | Internet Speed Monitor adware related |
| U | GetRight | GetRight.exe | GetRight from Headlight Software - shareware download manager for resuming downloads and choosing multiple download locations. The Pro version adds uploading and other features. Earlier 4.x versions included ads, which could be disabled if you chose not to install the Aureate/Radiate software in the registered version - see here. Start it manually unless you want to intercept download links from your browser |
| U | GetRight - Tray Icon | getright.exe | Entry added with older versions of the GetRight download manager from Headlight Software, Inc. Start it manually unless you want to intercept download links from your browser |