Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


How can I remove kpcgrhynko.vbs?

  • Please log in to reply
1 reply to this topic

#1 jaicajen


  • Members
  • 1 posts
  • Local time:01:09 PM

Posted 04 December 2013 - 06:31 AM

I connected to a computer with this trojan/worm/virus and my memory card and phone memory were affected. All the main folder in my memory card and Blackberry Bold storage are shortcuts. AVG detected a threat and removed it but, all the folders are still shortcuts. When I open a folder, the message "Windows cannot find "kpcgrhynko..vbs'. Make sure your typed the name correctly, and then try again." is shown. I tried scanning with Kaspersky but it does not detect anything. How can I get rid of this?

BC AdBot (Login to Remove)


#2 Aaflac


    Doin' Dis 'n Dat...

  • Malware Response Team
  • 2,307 posts
  • Gender:Not Telling
  • Location:USA
  • Local time:12:09 AM

Posted 04 December 2013 - 03:07 PM

:welcome: to the BC forums, jaicajen!

Please do the following...

:step1: Please click on the Windows 7 Start button and then on Control Panel
In Control Panel, select the Folder Options link.
Click on the View tab in the Folder Options window.

In the Advanced settings: area, locate the Hidden files and folders category.
Check: Show hidden files, folders, and drives
Uncheck: Hide protected operating system files (Recommended)
Click Apply and OK at the bottom of the Folder Options window.

:step2: Next, download UsbFix:
Save to the Desktop.
Right-click the downloaded USBFix file and select: Run as Administrator
Connect any problem USB drive!
Press: Research
When done, the program closes on its own, and a report appears.
(The report file is also found at C:\UsbFix.txt)

>> Please post the UsbFix.txt (Research Mode) report in your reply.

:step3: Once again, run USBFix as Administrator, but, this time, press: Listing
>> Also post the UsbFix.txt (Listing Mode) report in your reply.

Note 1: If USBFix does not run in normal Windows, please run in Safe Mode:
Restart your computer.
When the computer starts, tap the F8 key on the keyboard repeatedly until presented with the Advanced Boot Options menu
Using the arrow keys, select: Safe Mode
Press the Enter key on your keyboard to boot into the selected mode.

Note 2: If your AntiVirus program detects USB as malware, either let the AV program allow USBFix to run, or, temporarily disable your AntiVirus program:
Info - http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/
When done with USBFix, re-enable your AV!

:step4: Last, please download the Farbar Recovery Scan Tool
Download: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Select the version that applies to your system.
Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to the disclaimer.

Press the Scan button.

The tool makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).
>> Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
>> Also post the Addition.txt in your reply.

Old duck...

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users