Re: Downloader.Keenval.J

From: mdt6288 (mdt6288_at_yahoo.com)
Date: 05/16/04

  • Next message: Grant: "NVCPL .dll error mouse & keyboard lock up" 
    Date: 15 May 2004 20:30:01 -0700

    I wanted to post this message just in case there are some people out
    there who have had this Trojan Horse trot it's way into thier
    C:\Program Files\Common Files\updater\wupdater.exe It's name is Trojan
    Horse Downloader.Keenval.J

    Althought the AVG virus detector wouldn't heal or remove this virus
    (if you want to call it that) manually removing the entire 'updater'
    file works, after you stop using the application... What I mean by
    'stop using the application' is: hitting Ctrl, Alt and Delete, (if
    your using XP)choosing the Processes tab and clicking the wupdater.exe
    and clicking 'End Process'. After which you should be able to delete
    the actual file and it's contents.

    So far, I have had no problems with this Trojan Horse or symptoms of
    it's presence save for the initial warning of it's being on the
    computer. I know nothing about it except for the assumption that it's
    spyware and possibly a cause of trouble while shutting down your
    computer.

    If there is anything else I should know about this, or some other
    suggestions for me concerning this little guy or it's removal please
    post and let us all know. Thanks a ton!

    ....................................

    To follow up a little bit, I should tell you all that the Drama
    continues...

    According to AVG the virus no longer exists on the computer, HOWEVER
    windows has detected the exact same Trojan elsewhere on my PC. AVG
    does not detect it yet in it's scans. Windows frequently pops up to
    say it's there and tells me where it is.

    Now it is moved to a folder I cannot access manually on my PC.
    C:\System Volume Information\_restore{2AD2B242-1E70-421B-A858-436AF21-ADA96}\RP93\A0006065.exe
     AVG sees the folder when I run my scans, but doesn't find anything
    wrong with it. The folder can't be accessed or seen by any usual means
    in Windows Explorer or even by showing hidden and system files.

    And so... I welcome any more advice on how to dispose of it,
    downloading a whole bunch of programs in 'unapealing' but I will if I
    can't figure it out on my own. It annoys me to have it on my machine
    still, though it's temporarily relocated.

  • Next message: Grant: "NVCPL .dll error mouse & keyboard lock up"

    Relevant Pages

    • Stupid, know nothing, should stick to watching football, begginer
      ... Dyfica AO and to do AVG for windows. ... I know I have a trojan horse because:- ... me that I could not get rid of these "things" because ...
      (microsoft.public.scripting.virus.discussion)
    • Recycle Bin - Cannot Delete Folder
      ... This looks like a virus or a trojan horse. ... what files are those) it says do you want to delete "Windows". ... Error Deleting File or Folder ...
      (microsoft.public.windowsxp.general)
    • Re: Recycle Bin - Cannot Delete Folder
      ... Not a a virus or a trojan horse This is a common problem. ... MS-MVP Windows Shell/User ... Error Deleting File or Folder ...
      (microsoft.public.windowsxp.general)
    • Re: Trojan horse Downloader.Rvp.D in system info folder
      ... Windows XP - Shell/User ... truned off restore, I have gone in and made the folder viewable, I have tried going through safe mode. ... AVG resident shield keeps warning me about Trojan horse ...
      (microsoft.public.windowsxp.security_admin)
    • Re: MSN My Photos virus
      ... | it was a rar file that was called My Photos, ... I might have been stupid but when AVG scanned and said it was OK ... | Virus Vault) and it has now found all of these trojans and worms. ... | Trojan horse Backdoor.Ircbot.AK ...
      (alt.comp.anti-virus)