my system is infected by gphone.exe virus. when i saw currently running system processes i found gphone.exe process. i am using avast 4.7 version. i installed latest update and i have done boot time scanning but no virus was reported to be found. all folders in my local drives have another folder with same name. plz help…
The latest version of avast is 4.8.1335 so your copy was way out of date, so I don’t know if that also means your virus signatures are also way out of date (latest VPS 090331-0) do you now have both at that version number ?
Where is the gphone.exe file located ?
You should check the gphone.exe at VirusTotal, Send a sample to avast if multiple detections at VT and Fix in HJT (see below)
Check the suspect file/s at: VirusTotal - Multi engine on-line virus scanner and report the findings here in the topic, the URL in the Address bar of the VT results page.
Send the sample to virus@avast.com zipped and password protected with the password in email body, a reference to this topic (give URL) and undetected malware in the subject.
well i got rid of gphone now. i ended the gphone.exe process and using glary utilities software i deleted all duplicate ‘*.exe’ files of 261kb from my local drives. after restarting the system no gphone.exe process was found running.
Well uploading to virustotal would have confirmed it one way or an other and sending the sample to avast would have helped improve detections for all avast users.
next time my system gets infected by gphone i will certainly do that.