Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

lphcausj0eg9k.exe ?


  • Please log in to reply
3 replies to this topic

#1 cbjjimmy

cbjjimmy

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 05 February 2011 - 06:39 AM

hello and good day i was wondering if any of you have ever seen this entry?

lphcausj0eg9k.exe

hjts scan: HKCU\..\Run: [lphcausj0eg9k] C:\Windows\system32\lphcausj0eg9k.exe

thx in advance

Jimmy

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,938 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:36 PM

Posted 05 February 2011 - 02:26 PM

Is the physical file lphcausj0eg9k.exe still present and showing in Task Manager?

If not, the HKCU\..\Run registry key showing that file may just be a remnant (orphan) key left behind after a prior cleaning. That key corresponds to programs that load from the registry when Windows starts.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 cbjjimmy

cbjjimmy
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 07 February 2011 - 10:12 AM

Is the physical file lphcausj0eg9k.exe still present and showing in Task Manager?

If not, the HKCU\..\Run registry key showing that file may just be a remnant (orphan) key left behind after a prior cleaning. That key corresponds to programs that load from the registry when Windows starts.


yupper that is what it was, after removal that came up in a scan, but doesn't come up in any new scans thx for the time?

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,938 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:36 PM

Posted 07 February 2011 - 10:41 AM

It's not unusual to find remnants of registry keys related to malware after using anti-virus and other security scanning tools to remove an infection. A safe and easy way to remove them is to download and use Autoruns. After unzipping, launch Autoruns, search for the related entry and delete it if still present.

If you're going to keep and use Autoruns, be sure to read:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users