Tech and Gizmo dot Com

beware of the GPHONE virus i was attack if you got problem with this just post here maybe i can help….

Gphones behavior
* The Process is packed and/or encrypted using a software packing process
* Disables the built in Windows File Protection System
* Adds a Registry Key (RUN) to auto start Programs on system start up
* Disables Access to the Task Manager built into Windows
* Changes the Internet Explorer Home Page Settings
* Changes the Internet Explorer Search Page
* Modifies Windows Security Policies to restrict/expand User Privileges on the machine
* Disables Access to the Windows Registry Editior
* This process creates other processes on disk
* This Process Deletes Other Processes From Disk
* Executes a Process
* Can communicate with other computer systems using HTTP protocols
* Writes to another Process’s Virtual Memory (Process Hijacking)
* Downloads hidden code from covert web sites
* Checks for the use of debuggers
* Creates a new Background Service on the machine
* Looks at the contents of the autoexec.bat file
* Reads email address and phone book details
* Includes file creation code which could be used to test for interception by security products
* Visits web sites on your PC without you knowing
* Creates, modifies or schedules batch jobs
* Found on infected systems and resists interrogation by security products
* Uses low level functions to hide itself from the user and from system/security processes
* Terminates Processes
* Copies files
GPHONE.EXE has been the subject of the following behavior:

* Added as a Registry auto start to load Program on Boot up
* Created as a process on disk
* Has code inserted into its Virtual Memory space by other programs
* Executed as a Process
* Copied to multiple locations on the system
* Created by processes which appear to be checking for interception by security products
* Deleted as a process from disk
* Terminated as a Process