4 replies to this topic

[helplesstoo]

I have lphcaufj0ec93.exe in my start up as C:\WINDOWS\system32\lphcaufj0ec93.exe. I googled the internet and only one site was found that covers it, but its exterminate-it.com and i've read stuff on this forum elsewhere about this site and it gives false positives and rated as a rogue site. That site gives instructions to remove it and includes to End Process in the Processes tab (but I did not find it there) and to delete it from C:\WINDOWS\system32\ (?but I did not find it there). Does anyone know what this is?

[evilfantasy]

You may want to send it to Malwarebytes.org UploadNET™

You can also scan it with an online scanner.

VirSCAN.org
VirusTotal.com

[helplesstoo]

evilfantasy, on Jan 24 2010, 10:19 PM, said:

You may want to send it to Malwarebytes.org UploadNET™

You can also scan it with an online scanner.

VirSCAN.org
VirusTotal.com

Thank you for your help but I can't find the actual file, I can only see it listed in my start ups. It's not where the start up says it should be and I'm unable to use my Search function as that hasn't worked in years. Perhaps I could assume that if it's not in my sytem32 folder that it must be all ok?

[evilfantasy]

helplesstoo, on Jan 24 2010, 05:22 PM, said:

Perhaps I could assume that if it's not in my sytem32 folder that it must be all ok?

No I wouldn't say that.

You might be better off going to the Malware Removal - HijackThis Logs forum and working through the I'm infected - What do I do now? instructions.

[helplesstoo]

evilfantasy, on Jan 24 2010, 11:33 PM, said:

No I wouldn't say that.

You might be better off going to the Malware Removal - HijackThis Logs forum and working through the I'm infected - What do I do now? instructions.

I went to the site you suggested and it found 40 infections. None of them were actually the lphcaufj0ec93.exe file although a similar file called rhceufj9ec93.exe was identified as an infection. Thanks so much for your help.