Discussion Locked

unwanted program

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I keep getting pop ups that say C:\WINDOWS\SYSTEM32\qxgzbue.exe wants to connect to the interent. I keep blocking this pop up but it happens constantly. I tried to remove this program from my computer, but could not.

4 replies

by zlitocook

It sounds like a virus or spyware, do you have an antivirus program and is it updated? I use Symantec's antivirus with window washer, spybot search and distroy and adaware to keep my system clean. If you remove a program and it comes back, it could be loading in other places like the registry or in the start menu.

by willcomp

You've got a case of the ol' adware/spyware misery. Appears to be adware trying to call home.D

ownload, install, update, and run Ad-Aware SE and Spybot S&D. Both are available at download.com.

If you have Win2K or XP, download and install Microsoft Anti-Spyware beta. Link below.

http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en

If problem persists after using these tools, add a comment with results of scans.

Dalton

by glyall

yes it does look like you have a virus, adware, or spyware.

the above answers are right

if you like to know which files they are and the registry entry look at the following site for the info
http://www.actualresearch.com/
I would use a registry cleaner like
EasyCleaner from toniarts.com
it does more than cleaning the registry

it does clean the registry that Ad-Aware and Spy-Bots miss

you need to keep your virus scanner updated weekly
update Ad-Ware weekly too
Spy-Bots only update once or twice a month

I run my virus checker, Ad-Ware, Spy-Bots, and EasyCleaner twice a week at home and once a week at work

Since doing this I have not had any problems with my PCs

good luck

by p.j.hutchison

A quick way is to open REGEDIT, browse to HKLM\Software\Microsoft\Windows\CurrentVersion\Run and look for qxgzbue.exe in list and delete it.

This discussion is closed to new replies.