fga.exe ?

[SniperDaws]

Hello gents got this annoying prob, when i start windows i get the dreaded error sound and sign saying fga.exe cannot be found blah blah blah, ive typed in google fga.exe and most of the sites say its spyware, so as it cant be found ive now declared myself spyware free yippeee, anyway does anyone know how to stop this annoying error message from coming on everytime i start up?

Cheers gents

 

[KeyserSoze]

Originally posted by: SniperDaws
Hello gents got this annoying prob, when i start windows i get the dreaded error sound and sign saying fga.exe cannot be found blah blah blah, ive typed in google fga.exe and most of the sites say its spyware, so as it cant be found ive now declared myself spyware free yippeee, anyway does anyone know how to stop this annoying error message from coming on everytime i start up?

Cheers gents

I would guess that maybe a Spyware Cleaner might have removed it, and Windows is still being told to load it up at startup maybe? Either way, you need to find that entry that is referencing that path. A few ways, you could try using msconfig (Start / Run / Type in "msconfig" without the quotes, and hit the "Startup" tab, scroll down and see if that path is being referenced anywhere. If so, uncheck it.) Also, the Advanced Mode of SpyBot has tools to uncheck these as well.





KS

 

[SniperDaws]

Cheers Keyser, but its not listed in msconfig.


Grrr and its not listed using advanced mode in Spybot.

ok i just ran regedit and searched for fga.exe and its found an entry

EDIT: this is the full path.

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/currentversion/winlogon/Shell/explorer.exe C:\DOCUME~1\Andy\LOCALS~1\Temp\fga.exe

should i just delete it ?

 

[KeyserSoze]

Originally posted by: SniperDaws
Cheers Keyser, but its not listed in msconfig.


Grrr and its not listed using advanced mode in Spybot.

ok i just ran regedit and searched for fga.exe and its found an entry

explorer.exe C:\DOCUME~1\Andy\LOCALS~1\Temp\fga.exe

should i just delete it ?

Yes, I would personally delete. You've already verified it's spyware, and no legitimate process would hide itself in that directory.

That entry in regedit, is probably in "Windows\CurrentVesion\Run" or "RunOnce" or some path similar to that, right? That's also another place these rouge entries like to hide. Damn things.

Did you try "HijackThis?"

But yes, to answer your question - I would delete that entry.




KS

 

[SniperDaws]

Thanks for your help mate its fixed it.

 

[KeyserSoze]

Originally posted by: SniperDaws
Thanks for your help mate its fixed it.

Coolio, np.




KS