Jump to content

Another potential G.exe infection


Recommended Posts

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.

Let me know if the problem persists.


Link to post
Share on other sites

Hi Nasdaq, thanks for the continued support.

How would I know if one of the running programs is causing the issue? I only see an occasionally issue when shutting down.

Also, how would I determine what programs are running while shutting down, run task manager?

Link to post
Share on other sites


Do you not see the running programs as Icon on the bottom toolbar?

Right click on the Icon one at time and select close Windows.
When all done Power of the computer. There should not be an error.

Next time leave let them running and power down.
Before you do make a note of the programs that are running.
If all is well then these programs are good.
If one of them is the culprit then you now have the list of programs to investigate.

Run them one at a time and power down.
By trial and error you may be able to find the culprit.

Link to post
Share on other sites

  • 2 weeks later...

It was there again tonight, first time I've seen it since i first contacted you. I had only run firefox, thunderbird, steam and football manager, and all closed down before shutting down. I cancelled shutdown to post here. Is there anything I can do when I see it? I opened task manager, but nothing was called 'G', but lots of processes, etc., that mean nothing to me.

Link to post
Share on other sites


Stream is installed on your computer and this registry key is called to run it at startup.

HKU\S-1-5-21-120305035-1963969382-2588572523-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3131680 2018-11-26] 

However you have disabled it.
==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKU\S-1-5-21-120305035-1963969382-2588572523-1001\...\StartupApproved\Run: => "Steam"

If you wish to stop the program from running at startup then run this fix.
When you want to run the program you will have to execute the steam.exe.

If you want to remove it completely.

Remove this program in bold via the Control Panel > Programs > Programs and Features.
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)

Hope that helps.


Link to post
Share on other sites


Looks like the  football manager and/or Steam is the cause.

Next time  they are open and you want to power off close them.
Immediately after do an CTRL+ALT+DEL and open the task manager.

Is one or both processes still running?

If yes then close the process(es) and power down.

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.