Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hello
I have Trend Micro PC-Cillin Interent Security 2005 and it keeps detecting virus infected files as I use my pc. It says the files have been quarantined but it keeps telling me its found them constantly.The main ones it seems to find are khvuui.exe infected with Troj_Dloader.kp and kluivocyc.exe infected with Troj_Buddy.f The latter file I can never find but I can locate the other one in windows\system32 should I delete it? I just can't seem to stop this happening and Im constantly scanning the pc and using ad-aware and microsoft spyware scan too.

Why not try a
Free On-line Spyware Scan
I wouldn't recomend d/l ing the trial software, just use the free scan on the webpage.
It may find and help fix your problem.

About your virus problem, maybe you should give the free version of AVG 7.0 a try - it is found at
http://www.grisoft.com/doc/71/lng/us/tpl/tpl01
You may find it to be useful, I use it myself and it had succesfully cleaned many viruses - including about three trojan horses - without actually deleting the file it was attached to, rather "cleaning" it and removing just the virus and leaving the actual meaningful file intactThanks for reading,
Joseph Seemiller

it is having problems getting rid of it because it is resdent in memory (hopefully this isnt one that randomley changes its name as those are a real pain). Stop the process and delete it from the registry (you might have to do this in safe mode as it may not load by defaut there), whatever windows directory it is in, the prefetch folder, and doc and settings/you username/local settings/temp. get a copy of hijackthis as well if you cannot stop the process to get rid of it as the new version has a delete running process/serivce feature.
also, you can change your trend settings from quarantine to delete virus if it cannot be cleaned for a little more cleanup.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BUDDY.F&VSect=Sn
The above tells you to use the Damage Cleanup Template/Engine
And on the top of the list of the new Virus Pattern Files for the cleanup engine TROJ_DLOADER.KP
http://nl.trendmicro-europe.com/enterprise/support/pattern.php
khvuui.exe appears to be the malware program responsible for the trojan and needs to be terminated in Task manager before you scan, dont forget to turn off system restore as there might be a copy here as well.
If any advice helps, please post back as it might help others.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |