How to remove gphone virus from computer
Nov 11th, 2008 | By theworldwinner | Category: computerGot infected by Gphone.exe virus?
gphone.exe is nowadays one of the most dangerous virus spreading very fastly.Its a trojan and changes your IE homepage and sends tries to open gtalk and yahoo messenger.It even sends messages to gtalk contacts.Its icon is just like that of folder icon and people thinking of folder click on it get infected by the virus.
Gphone virus basically is a 260 kb .exe file which looks like a folder and it can take any name of any other folder if you have clicked on the virus folder which looks like a folder but it isnt.If you have a folder name “comptalks” in your D drive it will make a exe file in the folder named comptalks.exe and if you click on that exe file it too work as a virus.It makes .exe files in all the folders you have with the name of the folder.
To remove the gphone.exe virus you just need to follow simple steps:
Go to Task Manager ->Processes and then click on gphone.exe and click on end process.
After that manually go to folder where gphone.exe is present and simply delete it.
Or simply search for the exe file clicking which started sending messages through gtalk. If you clicked on 1.exe search for that file on task manager and then delete it.
Or simply use the Glary Utilities freeware to remove the exe files.
After installing the Glary Utilities.Open it and go to the modules tab -> Files and Folders-> Duplicate files finder. Then search for .exe files of same size and delete all the files with size 260 kb.
To get further updates reagrding various computer and virus problems subscribe to Computer talks.
If you have any kind of computer problem then use our Computer Forums!
Related posts:
- How to remove “Safely Remove Hardware” Notification You might have got annoyed by the notification “Safely...
- Technical Preview Kaspersky Anti-Virus for Windows 7 Few days back we wrote about the Free Antiviruses...
- How to tackle fake security softwares With the number of fake security software rising each day,...
- Access favourite folders,applications and URLs by FolderMenu Folder Menu is a free utility that can display a...
- Find and Remove Similar Music Files Similarity is a free program that helps you to find...
Related posts brought to you by Yet Another Related Posts Plugin.
It is not allowing me to open task manager .
varinder´s last blog post..How to remove gphone virus from computer
restart your system and then again try and check if task manager
is opening or not.
Or you ca try to open msconfig from run to see if it is there in the statup
programs if it is there then remove it from startup.
to enable the task manager you need to do the following:-
Click Start, Run and type this command exactly as given below: (better – Copy and paste)
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f
then
remove %SysDir%\gphone.exe from your computer as soon as possible.
%SysDir%\gphone.exe is Trojan/Backdoor.
Kill the process %SysDir%\gphone.exe and remove %SysDir%\gphone.exe from Windows startup.
Removal: %sysdir%\gphone.exe is removed by RegRun.
mac´s last blog post..How to remove gphone virus from computer
It has maade a folder in each folder present on the computer . i am using
vista and no antivirus can u suggest a method to remove all the folders
because the no of those folders in in 1000. the folder that is makes has the
name of the folder in which it is present
varinder´s last blog post..How to remove gphone virus from computer
Check the size of the folder which was made by the virus its around 160 or
260 kb .Then go to search ->Advanced Search then choose the file size equals
to the size of the folder created then search for .exe then delete
all the exe folders
Removing gphone.exe from your comp/lappy…
First you must know what does gphone virus looks like. It is a 260KB exe file. Can take the name of any folder it is in.
Example: If gphone is in a folder named share. IT will take name share.exe in that folder.
There might me many exe files like this you cannot delete them manually.
Install Glary Utilities.Start this Utility. Go to modules Option. Select Files and Folder option. Now choose Duplicate Files Finder.Select all the drives. Remember to uncheck “Ignore files of size less than”. It will find all duplicate files. Select all the files with size 260KB. Delete the checked file.Now you have removed all the gphone exe files. If any file remains undeleted you have to use file shredder or deleter software
plz sugges me which antivirus we use for this “gphone” viruse…
Use nod 32 antivirus to delete the gphone virus . Use advanced search in windows for file size atmost 260 kb leaving file name blank . Now after search has finished delete all application of size 260kb
i remove the gphone virus manually but still the virus is being seen on restarting. please help
The Virus also creates a task in task scheduler which makes it run once daily.. Once you remove that task aslo..then you will be totally free from the virus.
plzz help..how to remove that task from task scheduler?
[...] How to remove gphone virus from computer | Computer Talks [...]
to remove gphone.exe virus use bitdefender total security 2009 antivirus or Norton total security 2009 antivirus. It detects gphone.exe and simply delete it…..
you can use glarry utility to remove gphone.exe virus….
process for glarry utility is as follows….
Removing gphone.exe from your comp/lappy
1.First you must know what does gphone virus looks like. It is a 260KB exe file. Can take the name of any folder it is in.
Example: If gphone is in a folder named share. IT will take name share.exe in that folder.
2.There might me many exe files like this you cannot delete them manually.
3.Install Glary Utilities.
4.Start this Utility. Go to modules Option. Select Files and Folder option. Now choose Duplicate Files Finder.
5.Select all the drives. Remember to uncheck “Ignore files of size less than”.
6.It will find all duplicate files. Select all the files with size 260KB. Delete the checked file.
7.Now you have removed all the gphone exe files. If any file remains undeleted you have to use file shredder or deleter software. I have shared some of these software too. Glary Utilities also has File Shredder.
8.Now you need to check your registries. They might be affected. Run ‘regedit’. And follow the “GPHONE Virus Registry Solutions”
“GPHONE Virus Registry Solutions”
Registry Modifications Done by GPHONE Virus
Run “regedit” and change them to correct settings. If regedit does nor work use some other registry editors (may freeware available on internet).
•The following Registry Keys were created:
oHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer
oHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel
oHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
oHKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
oHKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
•The newly created Registry Values are:
o[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NofolderOptions = 0×00000001
to remove the Folder Options item from all Windows Explorer menus and from Control Panel
o[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
DisableTaskMgr = 0×00000001
DisableRegistryTools = 0×00000001
to prevent users from starting Task Manager (Taskmgr.exe) to disable the Windows registry editors (Regedt32.exe and Regedit.exe)
o[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
Yahoo Messengger = “%System%\gphone.exe”
so that gphone.exe runs every time Windows starts
•The following Registry Values were modified:
o[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
Default_Page_URL = “http://rnd009.googlepages.com/google.html”
Default_Search_URL = “http://rnd009.googlepages.com/google.html”
Search Page = “http://rnd009.googlepages.com/google.html”
Start Page = “http://rnd009.googlepages.com/google.html”
o[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Shell = “Explorer.exe gphone.exe”
so that gphone.exe runs every time Windows starts
o[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = “http://rnd009.googlepages.com/google.html”
the process of removing gphone virus is not working…………………………..can anyone help me out………….
This is the first time I comment here and I should say you share us genuine, and quality information for bloggers! Great job.
p.s. You have a very good template . Where did you find it?
Thank you very much guys!
You are doing a quite nice job keep it up.It is b’cz of u only that I am able to get rid of this stupid gphone virus.
[...] else… i also followed some instructions HERE (downloaded GALARY UTILITIES for free which is a very good must-have software) plus the [...]
Very nice information. Thanks for this.
I have the same problem (well found out just now that its gphone.exe). I had same symptoms:
Symptoms for gphone.exe:
1. Task Manager is disabled
2. Folders contain an .exe file with the folder’s name.
3. On restart of the computer windows loads but only black screen is there and can’t do anything.
My solution:
1. To let me access the taskmgr I used my “recovery disk provided by the supplier of my pc” to restore my pc to an earlier date when i could access taskmgr.
2. Then I found out that gphone.exe in my computer was only on D: drive
3. All the gphone.exe copies had the name of the folder it resided in
4. All their sizes were 260 kb and date created showed 16.10.2008 (these may vary in your case)
5. I did a search for anything “less than” 270 kb and date as “is”16.10.2008
6. Delete all that is listed and clear the recycle bin.
I am still fully not sure if its removed but so far haven’t had any problems. If you do find a more trustworthy and full proof solution please share. (Please note that this is only my experience and this in no way is a sure cure so pls don’t dish me if it doesn’t work)
I think you should set up some top contributers list every month the way im going!
O.K, you got me this is like my 3rd comment here today I cant wait for your next article!
Do you write the articles yourself or do you get somebody to write out your ideas for me? As when i tried blogging I was nowhere near this good!
Viruses really suck.. they really do… ugh
Come on guys theres hardly and comments on this article!
strange question… but when writing articles do you think it looks better if i use complicated punctuation like colons?
I found your blog on google somewhere and im wondering if you could share some seo secrets?
This virus is bad and needs to be removed badly and thanx for the help
Me, I used Dr. Web Cure it! anti-virus.. it removes all gphone.exe folders… and all other viruses also..
Hey very nice blog!! Man .. Beautiful .. Amazing .. I will bookmark your blog and take the feeds also…
my God, i thought you were going to chip in with some decisive insght at the end there, not leave it with
As a Newbie, I am always searching online for articles that can help me. Thank you
To start earning money with your blog, initially use Google Adsense but gradually as your traffic increases, keep adding more and more money making programs to your site.
What is captcha code?, pls provide me captcha code codes or plugin, Thanks in advance.
this solution is not working plz help how can i remove gphone .exe virus help help
U can use Kespersky antivirus..
it will help u a lot..
and as far as task manager go to group policies and in system, go to start manu and if task manager is enabeled from there then do it not configured…
then surely your taskmanager will run…
Enjoy..
I have got new version of virus and its size in now 341kb.It does not allow me to run taskmgr or cmd.When ever I try to delete the virus file,virus starts as program shutting down the already opened taskmgr.
And yes after installing kaspersky(trial version) it got removed
hey..friends rahul’s solution is dere for u ppl……
i was having ghone 360 kb virus in my laptop..i tried many antivirus programs..avast ,avg, norton, kaspersky, avira, ….but all these failed..then i downloaded panda antivirus..first it didnt find any virus even after updating …then i again updated it after some time….and scanned my computer,,,you will nt believe..it detected nearly 2500 virus in my laptop and removed them in only 2 mins……so if u r having ,,..gphone in your pc ..then download panda from the link given below…and protect ur pc…
http://www.pandasecurity.com/
and when d virus will b removed …plz tell me
go to start menu & then run
then type:
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f
Thanks a lot, this post is very useful.
I use Kapersky and Malwarebytes and I have not had a fatal virus for the last year (fingers crossed)
I don’t usually reply to posts but I will in this case. WoW
found your site on del.icio.us today and really liked it.. i bookmarked it and will be back to check it out some more later ..
Great post, i stumbled onto your site and really enjoy the posts. Keep em coming.
~ greg
use alt+crtl+del, u will get task manager
after removing the g.phone virus my task manager still not working. please help me.
It can feel down out there blogging and not having anyone annotate or answer back even if you recognize folks are calling.) I always suppose of commentaries like applause, even if they are negative.
Great post – I was just curious how do you get hold of such a good domain?
I agree, this is a great post.A successful blog needs unique, useful content that interests the readers.
Malware does the work 99% of the time
I agree. THnak you for your post, very helpful
Great post, recommended for low and high end users
Interesting and informative. But will you write about this one more?
cool post, i use avira it’s realy very great antivirus it’s clean all.
i had this gphone problem…i was using avg free version…and windows xp..
i uninstalled avg and downloaded kaspersky 2010 trial version…
ran the scan after updating the anti-virus…everything is clean now…
download link given below
http://www.kaspersky.com/trials
What theme do you use on this blog? Just curious.
Thanks in advance
Sorry if I have duplicate posted this on your blog I was just thinking you dont have any anti spam protection on your site? You really need it or you will get overwhelmed by spam!
I think your a member of digitalpoint, right? Well I saw your link in a signature anyway.
Just wondering if you have blogs on any other niche as i really like this blog?
There is obviously a lot to know about this. I think you made some good points in Features also.
Is this the full article? I think somethings missing…
Nice bit of writing. I thought it was informative. I needed to see just this information less then four weeks ago at the beginning of October. I ended up wiping my whole drive for no reason. Got it up again only to have it stolen from my pickup. Nice work. have a great week!
“Excellent blog with lots of useful information. Are there any forums that you recommend I join?”
I hate rainy days! urgh I’ve been on your blog hours now I need something better to do! ( not that there anything wrong with your blog
)
Do you mean that I have to remove the registry files as in delete them? Because I already found them but I’m afraid of touching it because it my destroy my whole system… :S
By the way.. GREAT POST.. It helped me find it especially with some users comments..
i have this gphone.exe problem
my task manager got disabled and even though i disabled it in msconfig it is still irking me
i have used avira,avg and spyware doctor and they couldnt find any virus
at present am using panda antivirus and even this cant find any virus
can anyone plz suggest a solution plzz
nice post here my friend! I liked this post so much I just bookmarked it on digg. keep up the good work
I’m so glad I stumbled upon your site. This totally saved my computer! thank you!
There is nothing worse than your computer not responding – constant errors and computer crashing make me want to just give up. Check out this site to improve internet speed on your computer today, there is a lot of good information on there. It also cleans your registry and gets rid of dreaded blue screen of death.
Thanks,
Jorge
i have the same problem with gphone virus.
every folder has its own named folder in it.
i am using windows vista and dont have task manager.
plz suggest a good antivirus that can detect gphone and secure my PC.
Kaspersky 2010 works well for gphone.exe virus
ALSO DO A SEARCH GIVEN IN Registry Editor And Just Delete the all registries Of GPHONE.EXE
OPEN REGISTER EDITOR -EDIT-FIND
AND JUST DELETE EVERY REGISTRY LINKED WITH GPHONE.EXE