Shoutbox

I have this process running in the background, is it necessary? If not, how to get rid of it? Thanks

bgsvcgen.exe file information

The process B's Recorder GOLD Service Library belongs to the software B's Recorder GOLD by B.H.A Corporation (www.bhacorp.com).

Description: bgsvcgen.exe is located in the folder C:\Windows\System32. The file size on Windows XP is 86016 bytes.
The program is not visible. File bgsvcgen.exe is located in the Windows folder, but it is not a Windows core file. bgsvcgen.exe is not a Windows core file. Therefore the technical security rating is 51% dangerous.

Important: Some malware camouflage themselves as bgsvcgen.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the bgsvcgen.exe process on your pc whether it is pest.

I checked the file and it's located in the c:\windows\system32  folder. I scanned it with NIS2005, NOD32, Spyware Doctor and Spysweeper and none of them report it as malware.
What concerns me is that I don't have any B.H.A. software products installed, so I don't know how this process sneaked in my system. I guess then that I can remove it. What would be the proper removal method?

Make sure you stop the process, and then delete the file.

Before deleting the file or renaming it to bgsvcgen.exe.BAK I would like to be able to stop the process from starting each time I reboot. I tried msconfig but there is no reference to such a file in the startup.
Making a quick look at the registry with regedit I found this line:
HKEY_LOCAL_MACHINE\SOFTWARE\B.H.A
I also found several other lines that make reference to the process.

I think do a search in registry, remove all mention after stopping and deleting the process.

Playing with the registry is not for the feint of heart. Besides, it's pretty hard to navigate. I've found a tool called Regcleaner handy, it's free to download and there's no malware that comes with it, at least, from memory. It groups automatic start options all in the one list, which is pretty nifty. Still, kill signals can be denied in Windows, so there's no definite way that you know you can kill it without booting to something else [like a live cd]. If you're getting "access denied", I'd recommend that option.

quote:

---

Originally posted by Verte
Playing with the registry is not for the feint of heart. Besides, it's pretty hard to navigate.

---

Pfft. I'm almost 13, and I know how to manipulate the registry easily.

quote:

---

Originally posted by Ryxpia

quote:

---

Originally posted by Verte
Playing with the registry is not for the feint of heart. Besides, it's pretty hard to navigate.

---

Pfft. I'm almost 13, and I know how to manipulate the registry easily.

---

Haha- I find mine large and unwieldy- some programs make it a complete pigsty. I assume I'm not the only one who isn't prepared to go searching for references to rude daemons in there.