Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
XAcroreadGoogleUpdate.exe"Added by the AGENT-JGI TROJAN! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in %Temp%"
Xgooglegoogle.exe"Added by the RBOT-AMW WORM!"
UGoogle DesktopGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
UGoogle Desktop SearchGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
XGoogle Earth[random filename]"Added by the RBOT-AXK TROJAN!"
NGoogle Earth ViewerGOOGLEMAPS.EXE"Google Earth ""combines satellite imagery
UGoogle IME AutoupdaterGooglePinyinDaemon.exe"Google Pinyin Input Method Editor (IME) - allows a user to input Chinese characters by entering the pinyin of a Chinese character (with or without tone
Xgoogle Intrenet Explorergoogle.pif"Added by the RBOT-ARA WORM!"
UGoogle Quick Search BoxGoogleQuickSearchBox.exe"Part of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the ""Start"" button and Quick Launch toolbar and ""lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"""
XGoogle serviceGooglesetup.exe"Added by the IRCBOT-RJ WORM!"
XGoogle Service FRGO0GLEFREE.EXE"Added by a variant of the SPYBOT WORM!"
Xgoogle toolbarggtb32.exe"Added by the AGOBOT-RR WORM!"
NGoogle UpdateGoogleUpdate.exe"Update manager for the range of tools available from Google - such as the Chrome web browser and Picasa photo manager. Located in %AppData%\Google\Update"
XGoogle UpdateGoogleUpdate.exe"Added by the BUZUS.DBFM TROJAN! Note - this is not the valid Google program which is normally located in %AppData%\Google\Update. This version resides in %System%"
NGoogle UpdaterGOOGLE~1.EXE"Downloads and installs updates for Google applications (Google Earth
NGoogle UpdaterGoogleUpdater.exe"Downloads and installs updates for Google applications (Google Earth
XGoogleBot.exeGoogleBot.exe"Added by the GB TROJAN!"
NGoogleDCClientGoogleDCC.exe"Google Compute Client - only present if you installed the Google Toolbar with ""Google Compute"" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser
UGoogleDesktopGoogleDesktop.exe"Google Desktop - ""a desktop search application that provides full text search over your email
UGoogleQuickSearchBoxGoogleQuickSearchBox.exe"Part of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the ""Start"" button and Quick Launch toolbar and ""lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"""
Ugoogletalkgoogletalk.exe"Google Talk ""enables you to call or send instant messages to your friends for free-anytime
UGoogleToolbarNotifierGoogleToolbarNotifier.exe"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
XGoogleUpdater3GoogleMapper.exe"Added by the ROUTROBOT WORM!"
XOffice MonitorsGoogleUpdater.exe"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
URun Google Web AcceleratorGoogleWebAccWarden.exe"Google Web Accelerator"
UswgGoogleToolbarNotifier.exe"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
UWinamp to Google Talkwinamptogoogletalk.exe"Winamp to Google Talk


DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.