http://www.bleepingcomputer.com/startups/GUI.exe-5218.html

it is not identified..

But if you look here:
http://www.liutilities.com/products/wintas...esslibrary/gui/

gui.exe is a process belonging to an advertising program by searchnugget.com. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This process is a security risk and should be removed from your system.

# To actually delete the security risk:

* Click its file name (under the Filename column).
* In the Item Information box that displays, write down the full path and file name.
* Then use Windows Explorer to locate and delete the file.

If Windows reports that it cannot delete the file, this indicates that the file is in use. In this situation, complete the rest of the instructions on this page, restart the computer in Safe mode, and then delete the file using Windows Explorer. Restart the computer in Normal mode.

# Delete: This option will attempt to delete the detected files. In some cases, the scanner will not be able to do this.

* If you see a message, "Delete Failed" (or similar message), manually delete the file.
* Click the file name of the risk that is under the Filename column.
* In the Item Information box that displays, write down the full path and file name.
* Then use Windows Explorer to locate and delete the file.

If Windows reports that it cannot delete the file, this indicates that the file is in use. In this situation, complete the rest of the instructions on this page, restart the computer in Safe mode, and then delete the file using Windows Explorer. Restart the computer in Normal mode.

The above info was found on Symantec site for removal of the Adware.

http://www.symantec.com/security_response/...-99&tabid=3

Nice to see how its removed for the members who is infected with this

But I thought if we maybe could add this file as adware to the startup list?

I would need more information about where its located, what registry entry it uses, etc before we can add it to the database.

If you get that info I would be happy to add it.

Hi Grinler :

http://www.symantec.com/security_response/...-99&tabid=2

The gui.exe file does not appear to be a startup program though. According to the above link the only startup is:

"DNS" = "%CommonProgramFiles%\[FILE NAME].exe"

to the registry subkey:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

oh okay