One of the latest threats in our pen drives, mobile phones , memory cards and PC is of gphone.exe.
it makes 260 kb files on computer, makes exe files with folder names and icons, hides the actual folder and make them system files.
gets associated with yahoo messenger and googletalk and sends messages to friends list
After spending some time on it, i have found teh following solution.
search for gphone,exe on symantec, it will tell you what all this gphone.exe soes, save the file on notepad.
go to kellyscorner.com and in XP tweaks
save taskmanager manager enavle and folder options enable reg files on PC.
USe hijackthis/ kelly corner tweak to enable registry edit option
Now restart PC in safe mode, use hijack to remove any entries of gphone.exe, check for any running gphone.exe, restore internet explorer home page to blank/ default
in control panel under schedules tasks, delete tasks AT1 and AT2.
start-run-regedit
search for eny gphone.exe entries and delete them.
now under foler options, enable show all hidden files/ show system files.
search for gphone.exe, remove all entries
search for folder.exe, remove all entries
search for *.exe, sort the list by file size and delete all exe files entries who have a folder like icon.
and we are done
remove gphone.exe
Thursday, March 26, 2009
Subscribe to:
Posts (Atom)