Computing.Net > Forums > Security and Virus > Trojan virus detected but wont go

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan virus detected but wont go

Reply to Message Icon

Name: Wifler
Date: June 4, 2005 at 06:15:14 Pacific
OS: Win Xp
CPU/Ram: P4 2.8 256mb
Comment:

Hello
I have Trend Micro PC-Cillin Interent Security 2005 and it keeps detecting virus infected files as I use my pc. It says the files have been quarantined but it keeps telling me its found them constantly.

The main ones it seems to find are khvuui.exe infected with Troj_Dloader.kp and kluivocyc.exe infected with Troj_Buddy.f The latter file I can never find but I can locate the other one in windows\system32 should I delete it? I just can't seem to stop this happening and Im constantly scanning the pc and using ad-aware and microsoft spyware scan too.



Sponsored Link
Ads by Google

Response Number 1
Name: apackolipsnow
Date: June 4, 2005 at 10:04:45 Pacific
Reply:

Why not try a
Free On-line Spyware Scan
I wouldn't recomend d/l ing the trial software, just use the free scan on the webpage.
It may find and help fix your problem.


0

Response Number 2
Name: Josephs1
Date: June 4, 2005 at 10:50:52 Pacific
Reply:

About your virus problem, maybe you should give the free version of AVG 7.0 a try - it is found at


http://www.grisoft.com/doc/71/lng/us/tpl/tpl01


You may find it to be useful, I use it myself and it had succesfully cleaned many viruses - including about three trojan horses - without actually deleting the file it was attached to, rather "cleaning" it and removing just the virus and leaving the actual meaningful file intact

Thanks for reading,

Joseph Seemiller



0

Response Number 3
Name: Dirty_Sanchez
Date: June 4, 2005 at 11:22:54 Pacific
Reply:

it is having problems getting rid of it because it is resdent in memory (hopefully this isnt one that randomley changes its name as those are a real pain). Stop the process and delete it from the registry (you might have to do this in safe mode as it may not load by defaut there), whatever windows directory it is in, the prefetch folder, and doc and settings/you username/local settings/temp. get a copy of hijackthis as well if you cannot stop the process to get rid of it as the new version has a delete running process/serivce feature.

also, you can change your trend settings from quarantine to delete virus if it cannot be cleaned for a little more cleanup.


0

Response Number 4
Name: smifff
Date: June 4, 2005 at 12:23:12 Pacific
Reply:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BUDDY.F&VSect=Sn

The above tells you to use the Damage Cleanup Template/Engine

And on the top of the list of the new Virus Pattern Files for the cleanup engine TROJ_DLOADER.KP

http://nl.trendmicro-europe.com/enterprise/support/pattern.php

khvuui.exe appears to be the malware program responsible for the trojan and needs to be terminated in Task manager before you scan, dont forget to turn off system restore as there might be a copy here as well.

If any advice helps, please post back as it might help others.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Trojan virus detected but wont go

Download.Trojan virus detected www.computing.net/answers/security/downloadtrojan-virus-detected/16028.html

Trojan Virus www.computing.net/answers/security/trojan-virus/11814.html

!help PWsteal.trojan virus www.computing.net/answers/security/help-pwstealtrojan-virus/7139.html