Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I just ran avg and it says i have Trojan horse downloader.Keenval.j but i cant find any info on it or any thing
and its on the file c:\program files\common files\updater\wupdater.exe

Go to Dietk.com and install and run the program. It uninstalls the wupdater.exe which is responsible for Trojan horse downloader.Keenval.j

Thankyou so much Raynor.
You deserve to be Sainted for this fix, it had me completely stymied all morning.
Message to anybody else with this problem ..use Raynors solution, it works blindingly well. Now how do we attack these buggers that insist on infecting our pc`s by stealth?
Thanks again dude!

My AVG just found the Downloader.keenval.j in:
C:\System Volume Information\_Restore . . .
When I tried to delete it, AVG apparently failed, but whe I ran AVG a second time, it couldn't find the Trojan Horse.Is my system secured?

that's avg for ya... same problem with me....used avg and it moved it to system vol info... now dietk can't find it and my avg after running says it's not there...!!! HELP!!

just found this and it works....
If its in system vol info...
Turn system control off
reboot
Turn system control on
reboot.Gone....
Superb.!!!

Where is system control? I looked in My Computer and the Control Panel and couldn't find it. Am I missing something? I tried DietK and SpyBot and neither of them got rid of it. So now to try this.

i got the trojan in the wupdater file and used dietk. it sed it has been removed and when i go 2 where it eas in the c drive it aint there. does this mean it has definatly gone?

I did what you said, and the little bugger looks to be gone. Unfortunately, I cannot access anything on my desktop (when I click on an icon it doesn't even get that blue box around it to show it's selected) and windows Media Player doesn't work. These may not be related to Keenval.J, but there aren't any readily apparent other causes. Please help me. I don't like using winamp, and i liked my desktop when it worked.

The same virus is found in my computer in C:\_restore\temp. Raynor's method doesn't work...what should I do?

Go to "My Computer, right click and go to properties. Then go to system restore. Check the box that says "turn off system restore". Reboot. Make sure you go back and re-enable system restore. That should get rid of it. Good luck.

I'm very sorry - I went to "properties" but can't find the box to turn off system restore. Under what tab / page is it? I'm running windows ME. Thank you!

Thanks guys just found that I had the virus and did a google search and luckly got this page. Just wondering do I know delete DietK or is it ok to keep it and run it again if I get the virus again.

hi, i have the virus, too, at c:\program files\common files\updater\wupdater.exe but i don't have kazaa... so i can't use diet k. how do i get rid of keeval.j? should i install kazaa or what?

Hey Adam,
I dont have Kazaa either and DietK still worked for me, so I cant see why it wont for you as well - when it told me it could not find kazaa and did I want it downloaded I said no but it still cleared the virus
Give it a go

I too got this d**n thing. But I didn't get mine from Kazaa instead I got mine from a File that I downloaded and SAVED to my drive. Only to see that it was an install program. So I scanned it with AVG and it said that it was clean and then when I went to install it, some point into the install AVG then pops up and tells me it has detected this trojan and run the AVG program. AVG has been good to me but I don't understand why it didn't catch this before I ran the install file.
Honey X 030811
k7S5a Pro rev. 5
XP 2400+ @2200ghz Thoroughbred-B
Crucial PC2100 ddr 768
Radeon 9000 64 mb
Maxtor 40g (32g)
Coolmax "Taurus" 450w PS
Asus QT CD/RW
Samsung DVD<br

This isn't actually a virus; it's a program that is installed by AltNet products for purposes of downloading and displaying ads on your computer.
However, because it constitutes as 'SpyWare' the anti-virus agents pick it up and remove it. Try doing a search for keenvalue.exe.
The best method of removing it is to remove all AltNet products from your PC.Your choice; SpyWare on your computer, or MP3/Free Software Downloaders.

Disable system restore in Win Me:
Win Me Sys Rest:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?Open&src=sec_doc_nam&docid=2001111912274039&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvlIt's hiding in your system-restore files which cannot be vaulted or cleansed except by dumping them. Do not re-enable system restore until you are 100% sure you are clean. You should also dump %TEMP% files > double click My Computer, put %TEMP% in address bar, enter, highlight and delete all. To dump TIF click tools >
In Xp:
Disabling system restore in Win Xp
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?Open&src=sec_doc_nam&docid=2001111912274039&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl
Only in me and Xp.Thresher

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |