mikeandike22
Nearly a Posting Virtuoso
1,496 posts since May 2004
Reputation Points: 33
Solved Threads: 19
all of these look like viruses
C:\WINDOWS\System32\gcfzzkheujp.exe
C:\WINDOWS\System32\8d2mo5ybwxr4xj.exe
C:\WINDOWS\System32\gcfzzkheujp.exe
C:\WINDOWS\System32\gcfzzkheujp.exe
C:\WINDOWS\System32\gcfzzkheujp.exe
C:\WINDOWS\System32\gcfzzkheujp.exe
set a system restore point and then open up the task manager end those processes(make sure that they dont restart) then delete them.
fix these item (unless you know what the are)
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART *(this means that you probably have illegal p2p software like kazaa intsalled on your pc i would look out for that)*
O4 - HKLM\..\Run: [romahere] C:\WINDOWS\System32\matrixhere.exe *(never heard of it but sounds suspicous)*
O4 - HKLM\..\Run: [pnpsvc_lock] C:\WINDOWS\System32\25587401.exe
O4 - HKLM\..\Run: [TmybfCTiM] C:\documents and settings\corey\local settings\temp\TmybfCTiM.exe
O4 - HKLM\..\Run: [Network Security Guard] C:\WINDOWS\System32\gcfzzkheujp.exe
O4 - HKCU\..\Run: [romahere] C:\WINDOWS\System32\matrixhere.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {B94B4225-E02E-4D3F-BADB-026F1E2F3AD7} (HttpDownloader Control) - http://www.instantplugin.com/SexDownloader.cab
make sure you make a restore point or backup before trying to fix these just in case it doesnt work.
mikeandike22
Nearly a Posting Virtuoso
1,496 posts since May 2004
Reputation Points: 33
Solved Threads: 19
well if you took my advice then u should of created a restore point or backup of files so open system restore and restore back to the place where you performed the scan. Did you also check into having illegal p2p programs on your computer like kazaa, imesh, grokster, andd things like tha because usually those a re back with malware.
mikeandike22
Nearly a Posting Virtuoso
1,496 posts since May 2004
Reputation Points: 33
Solved Threads: 19
Well i have never had a problem with winmx and spyware so that should be alright just i would try and get antivirus software of some kind. In one of my first posts i told you what i thought might be viruses you should check those out at some virus search page.
mikeandike22
Nearly a Posting Virtuoso
1,496 posts since May 2004
Reputation Points: 33
Solved Threads: 19
as I mentioned in an early post I thought some of those entries could be viruses what you should do is boot into safe mode (esc+F8 while rebooting) then go into the folder they are all in C:/WINDOWS/system32 and delete them. If at first you cannot see these files then go up to tools
mikeandike22
Nearly a Posting Virtuoso
1,496 posts since May 2004
Reputation Points: 33
Solved Threads: 19
