GT

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Startup Name	Process Name	Details
X	AmazingTens	AmazingTens.exe	Premium rate adult content dialler
X	Application Layer Scheduler	agtsvc.exe	"Added by the IRCBOT.BJJ BACKDOOR!"
U	AVG Internet Security	avgtray.exe	"System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security
U	AVG8_TRAY	avgtray.exe	"System Tray access to and notifications for the 8.* series of internet security products from AVG Technologies - including Internet Security
U	AVG9_TRAY	avgtray.exe	"System Tray access to and notifications for the 9.* series of internet security products from AVG Technologies - including Internet Security
U	avgtray	avgtray.exe	"System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security
X	Avimgt	Avimgt.exe	"Added by the GEMA TROJAN!"
X	Avimgt32	Avimgt32.exe	"Added by the GEMA TROJAN!"
U	Care2GTU	Care2GTU.exe	"Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is
X	Cgtask Services	cgtask.exe	"Added by the LALA.B TROJAN!"
X	cpntmgc	winmgts.exe	"Added by the WINTRIM-B TROJAN!"
U	DefragTaskBar	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	defragTaskBar.exe	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X	dgtstart	dgtstart.exe	"DigitalNames.g adware"
Y	DLCGCATS	"rundll32 [path] DLCGtime.dll	_RunDLLEntry@16"
N	Drag-to-Disc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
N	DrgToDsc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
U	dRMON SmartAgent	SmartAgt.exe	"Part of the network monitoring program group for 3Com NIC cards. See here for more info"
U	ECenter	gtb.exe	Dell E-Center/Google Toolbar related
U	eFax 4.1	J2GTray.exe	"System Tray access to version 4.1 of eFax Messenger from j2 Global Communications
U	eFax 4.2	J2GTray.exe	"System Tray access to version 4.2 of eFax Messenger from j2 Global Communications
U	eFax 4.3	J2GTray.exe	"System Tray access to version 4.3 of eFax Messenger from j2 Global Communications
U	eFax 4.4	J2GTray.exe	"System Tray access to version 4.4 of eFax Messenger from j2 Global Communications
U	eFax Tray Menu	J2GTray.exe	"System Tray access to eFax Messenger from j2 Global Communications
U	eFax Tray Menu 3.3	J2GTray.exe	"System Tray access to version 3.3 of eFax Messenger from j2 Global Communications
U	eFax Tray Menu 3.5	J2GTray.exe	"System Tray access to version 3.5 of eFax Messenger from j2 Global Communications
U	eFax Tray Menu 4.0	J2GTray.exe	"System Tray access to version 4.0 of eFax Messenger from j2 Global Communications
?	EmpoweringTechnology	Framework.Launcher.exe	"Part of Acer Empowering Technology. What does it do and is it required?"
N	Encoder Agent	WMENCAGT.EXE	"MS Windows Media Encoder
X	fGQEGqHOME	gwwgtp.exe	"Added by the RANKY.J TROJAN!"
N	GameTracker	GTLite.exe	"GameTracker - ""Keep track of and launch all your games from one application with the Game Tracker Client. Instantly announce on your profile and to your friends what game and on which server you are playing!"""
X	google toolbar	ggtb32.exe	"Added by the AGOBOT-RR WORM!"
X	grgtgvgb.exe	[random].exe	"Added by the AGENT-EBF TROJAN!"
X	GT	GT.EXE	"Added by the SDBOT-AJ WORM!"
X	GT15J4R49V	cpuserv.exe	Identified as a variant of the Trojan.Win32.Radi.gu malware
U	GTVEpg	GTVEpg.exe	"Part of Got All Media - control your TV tuner and other utilities from your PC"
U	GTVRec	GTVRec.exe	"Part of Got All Media - control your TV tuner and other utilities from your PC"
N	Gtwatch	gtwatch.exe	Associated with a Mustec scanner and not required
X	gtydf	iisca.exe	"Added by the CLAGGER-BB TROJAN!"
X	gtydf	iscca.exe	"Added by the DWNLDR-GTK TROJAN!"
X	gtydf	ggrrgg.exe	"Added by the DLOADR-AZK TROJAN!"
N	HGTXPEI	FirstReboot.exe	Herucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
Y	HorngTech4D	bally4d.exe	HorngTech 4D mouse driver
U	IFXSPMGT	ifxspmgt.exe	"Part of the Infineon Security Platform Software - which supports the on-board TPM security device included with some laptops from suppliers such as Acer
X	Imagemgt32	Imagemgt32.exe	"Added by the GEMA TROJAN!"
N	ImgTask	Imgtask.exe	"Related to the WalletPix digital photo album. ""On some computers
X	instant messengers	instantmsgtr.exe	"Added by the AGOBOT-PC BACKDOOR!"
U	Job-oversigt	taskmon.exe	"Task Monitor (on Danish language versions of Windows) - checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users
?	Launch LgDeviceAgent	LgDevAgt.exe	"Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. What does it do and is it required?"
?	LgDevAgt	LgDevAgt.exe	"Part of the GamePanel Software for the Logitech G-Series of gaming keyboards. What does it do and is it required?"
X	logonUiInit	Rundll32.exe rgtndz.dll	"Identified as a variant of the Trojan-Clicker.Win32.Agent.bqy malware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The ""rgtndz.dll"" file is found in %System%"
Y	LXCGCATS	"rundll32 [path] LXCGtime.dll	_RunDLLEntry@16"
Y	McAfee Managed Desktop Agent	MYAGTSVC.EXE	"Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
U	McAfee Managed Services Tray	StartMyagtTry.exe	System tray notification for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
X	MICROSOFT UPDATE	WUAGTRD.EXE	"Added by the RBOT-CJ WORM!"
X	Microsoft Windows WKS Service	gt.exe	"Added by the SDBOT.IR BACKDOOR!"
X	MicrosoftCorp	regtray.exe	"Added by the POISON.AHNW BACKDOOR!"
X	MicrosoftNAPC	regtray.exe	"Added by the POISON.AHNW BACKDOOR!"
X	Microsofts media	wingtp.exe	"Added by the RBOT-VO WORM!"
X	Monitormgt	Monitormgt.exe	"Added by the GEMA TROJAN!"
U	MSGTAG	MSGTAG.exe	"MSGTAG is an application that tells you when your emails have been received and opened"
X	Msgtray	sys16.exe	Added by an unknown VIRUS!
X	Msmgt	msmgt.exe	"Total Velocity adware/hijacker"
X	msngta32	msngta32.exe	"Added by a variant of the RBOT WORM!"
U	myagttry	myagttry.exe	System tray notification for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
Y	MyCIO Agent Service	myagtsvc.exe	"Part of the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Starts via a registry ""RunServices"" key on Windows 98/Me and as a service on Windows NT/2K/XP"
U	myCIO.com ASaP	myagttry.exe	System tray notification for the now obsolete McAfee VirusScan ASaP online anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications
X	NviDiaGT	lsass.exe	"Added by the AUTORUN-DV WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder"
U	OODefragTray	oodtray.exe	"System Tray access to O&O Defrag disk defragmentation software"
U	OStivityInvAgt	ostivity.exe	"OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network
?	Palm MultiUser Config	Configtool.exe	"MultiUser configuration for a Palm PDA device?. Is it required?"
U	pcAnywhere Agent	pcamgt.exe	"Part of pcAnywhere 9.0 or later. This process listens for incoming PC Anywhere connections if your PC is configured as a PC Anywhere host"
X	pgtaff	pgtaff.exe	AdRotator adware variant
X	PingTimeout Institution	pingchek.exe	"Added by the SDBOT-VY WORM!"
X	PingTimeout Institution	internal.exe	"Added by the SDBOT.BMH WORM!"
X	prgtect	prgtect.exe	"Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications
X	ProtectingTool	SysRep.exe	"ProtectingTool rogue system error and cleaning utility - not recommended
X	Pwr32mgt	Pwr32mgt.exe	"Added by the GEMA TROJAN!"
X	Raptelt	ravspegtl.exe	"Added by the QQPASS-AB TROJAN!"
N	Registration-Studio 8	RegTool.exe	"Registration for Pinnacle Studio Version 8 home video software from Pinnacle Systems"
?	regtmlp	N/A	"??"
U	RegTweak	RegTwk.exe	"Rage3d Tweak - ATI Radeon tweaker which allows access to registry tweak options
N	RoxioDragToDisc	DrgToDsc.exe	"System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. ""Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically"". Not required for Roxio to work properly and available via the Start menu"
?	SGTBox	SGTBox.exe	"Canon scanner driver. Is it required?"
U	sgtray	sgtray.exe	"StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop)
U	Snippet	SnippingTool.exe	"The Snipping Tool (part of the Experience Pack for Tablet PC) allows you to easily ""cut out"" anything on screen and share it with other people. The whole screen becomes an ""inkable"" surface that you can add comments to and mark up however you like. You can then save that annotated image to use later
U	StorageGuard	sgtray.exe	"StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop)
N	SxgTkBar	sxgtkbar.exe	Yamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration
X	taengtae	AutoRun.bat	"Added by the GATINA-B WORM!"
U	UpdateManager	sgtray.exe	"StorageGuard from Veritas (this version by Sonic). Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop)
X	usrgtway.exe	syswrun4x.exe	"Added by the MITGLIEDER.E TROJAN!"
U	WebExRemoteAccessAgent	raagtapp.exe	"Related to Web Meetings from WebEx Communications
X	Windows Nivedia Driver	sysMGT.exe	"Added by a variant of the RBOT WORM!"
X	Winds Sers Agts	[5 random letters].exe	"Added by a variant of the RBOT WORM!"
X	Winds Sersc Agts	rzrzncrtz.exe	"Added by the RBOT-GTV WORM!"
X	Zstart	cxdxregt.exe	"ZenoSearch adware"
X	{1C-CC-C5-54-ZN}	dwdsregt.exe	"ZenoSearch adware"
X	{8C-C4-4A-A4-ZN}	dwdsregt.exe	"ZenoSearch adware"
X	{B7-7D-D0-08-ZN}	dwdsregt.exe	"Added by the AGENT-GBC TROJAN!"

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.