Application called "G" is preventing shutdown or restart
6 replies, posted
(Not my image)
So for about a year I've had some sort of program called nothing but "G" randomly prevent me from shutting down. Most times everything shuts down normally, but occasionally Windows will just tell me "Windows is waiting for the following application to close before proceeding: G", and then you have to either press "shut down anyway" or wait a couple of seconds for it to fuck off on it's own. It freaked me out the first time it happened as an application called nothing but 'G' seems mighty suspicious, especially since it doesn't show up in the task manager or Process Explorer. I ran Bitdefender, Malwarebytes, and Spybot S&D, none of them found anything. The web didn't provide me with any help either, other than "We've no info about this so it's probably malicious". Unsatisfied with this I just went 'fuck it' and reinstalled Windows. It didn't help either, though, just a couple of days later that stupid fucking "G" prevented me from shutting down once again. I've got a GTX 1070 so at this point I basically just came to the conclusion that it's probably a part of Nvidia's drivers or something, G for GeForce and all, and since it doesn't give me any actual problems other than occasionally being a slight annoyance when shutting down or restarting, I've just ignored it since.
Today I got a bit curious though, and did some experimentation. I shut down my PC 10 times in a row, after having it let be powered on for ~15 minutes in between each restart, and G delayed the shutdown 30% of the time. This is with a relatively fresh install of W10, as I reformatted just a couple of weeks ago (for the Fall Creators Update). Now I've also managed to find threads on Reddit and SuperUser about the same phenomena:
So far what it is/does is just speculation, but I find it pretty hard to believe that it's malicious, considering it's followed me through more than three reformats, unless it's one of those really persistent pieces of shit that require a low-level format to go away.
So, has anyone here experienced the same? Does someone perhaps even know what it is?
Just because you've reinstalled Windows doesn't mean you can't end up with the same malware all three times. Especially if it's a Trojan of some kind that you're reinstalling each time, or a drive-by from a site you regularly visit.
Have you tried cancelling the shutdown and seeing if you can locate it then?
[QUOTE=Chubbs;52914580]Just because you've reinstalled Windows doesn't mean you can't end up with the same malware all three times. Especially if it's a Trojan of some kind that you're reinstalling each time, or a drive-by from a site you regularly visit.
Have you tried cancelling the shutdown and seeing if you can locate it then?[/QUOTE]
I've cancelled the shutdown many times, but to no avail.
If it actually is malicious then I honestly have no idea where it keeps coming from. I've got adblock installed, and I never visit any fishy websites. In fact I basically only visit Outlook, YouTube, Facebook, Reddit and FP.
Now that I think about it, this all started around the same time as I got my Huawei Honor 7. I wonder if there's a connection...
I'll reformat again, and this time I won't connect it to my PC, see if that does anything
If it's halting shutdown, it's probably running in the background. You might be able to see it in Task Manger, and you can right click the category titles at the top (Name, CPU, Memory, etc) and choose to show Process Name and Command Line to figure out where it's coming from.
Also run cmd as an admin and use "netstat -nbao | findstr PID", entering the process ID that you found in task manager to see what open connections it has, if any.
Someone said the problem disappeared by disabling backup and sync with google.
And here we are, eight hours later. To ensure that it does not return I've spent the night scrambling the data on all of my network connected HDD's with Killdisk. Before doing this I also made a backup of my most essential files and put them on an external HDD, and then scanned it by running ClamAV from a flashdrive with Linux Mint, and sure enough, it found a worm, it's supposed to be removed, but I won't reconnect it to anything until I've done some further tests. So now everything's wiped completely clean and I've got 6TB of completely empty storage, time to see if G makes a grand return anyway
I have same thing on my computer. I just learned to live with it at this point.
* That's definitely not a virus.
* That's not a geforce-related thing because I had this on AMD card before.
* Not a google cloud/drive thing because I don't have anything related to google cloud/drive installed on my PC. I have Chrome installed through.
Sorry, you need to Log In to post a reply to this thread.