Jump to content


Recommended Posts

I have a resident Trojan in C:\windows\system32\gxvccounter and can find no way of getting rid of the blasted thing! Can anyone give an answer as to how I can remove it permanently please?

I have the purchased version updated of malwarebytes and it finds it ever time and I can remove it from the results list but it keeps coming back over and over again.

Help please!!

Link to post
Share on other sites

Windows XP Home Edition. Malwarebytes up to date, AVG 8.5 up to date.

I have a Trojan DNS Changer gxvxccounter lurking in c:\windows\system32\gxvxccounter which Malwarebytes finds and quaratines from whence I delete it but low and behold, up it pops again and again and again! It is causing my computer to lock up and sometimes fail to turn off also it is playing havoc when I use Google as a search engine. I have tried SuperAnti Spy, Combofix, Autorun Eater and several others to remove this Trojan, all to no avail.

What I fail to understand is why, if Malwarebytes picks it up and quarantines it, will it not delete it permanently?

Does anyone have a solution to this problem, do I need to go after it manually and if so, can anyone send me detailed instructions as to how to go about doing this?

Your help would be very much appreciated.

Thank you.


Link to post
Share on other sites

  • Root Admin

Please take a look at the following posts and see if they help you to resolve this or not.

Potential Malware infection issues to review to get MBAM running

If so then please update and run MBAM and do a Quick Scan.

Update and Scan with Malwarebytes' Anti-Malware

  • Start MalwareBytes AntiMalware (Vista users must Right click and choose RunAs Admin)
  • Please DO NOT run MBAM in Safe Mode unless requested to, you MUST run it in normal Windows mode.
    • Update Malwarebytes' Anti-Malware
    • Select the Update tab
    • Click Update

    [*]When the update is complete, select the Scanner tab

    [*]Select Perform quick scan, then click Scan.

    [*]When the scan is complete, click OK, then Show Results to view the results.

    [*]Be sure that everything is checked, and click Remove Selected.

    [*]When completed, a log will open in Notepad. please copy and paste the log into your next reply

    • If you accidently close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Then post back the MBAM log and a new Hijackthis log.

Then run DDS

and save it to your desktop

Disable any script blocker if your Anti-Virus/Anti-Malware has it.

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click
to run the tool.

When done, the
will open.

Click Yes at the next prompt for Optional Scan.
    When done, DDS will open two (2) logs:

  1. DDS.txt
  2. Attach.txt

  • Save both reports to your desktop
  • Please include the following logs in your next reply:

Link to post
Share on other sites

  • Root Admin

Yes, you have some type of infection. Please run the following.

Please visit this webpage for instructions for downloading ComboFix to your

Please ensure you read this guide carefully and install the Recovery Console first.


You must save and run
on your DESKTOP and not from any other folder.

click the mouse or launch any other applications while this is running or it may stall the program

Additional links to download the tool:


Windows Recovery Console
will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Click
    to allow ComboFix to continue scanning for malware.

  • When the tool is finished, it will produce a report for you.

  • Please post the
    along with a
    new HijackThis log
    so we may continue cleaning the system.

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Link to post
Share on other sites

This topic is now closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.