Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
General Security
Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop driver drivers dvd email error excel firefox hard drive hardware hijackthis internet keyboard laptop malware monitor motherboard network networking outlook problem ram recovery router safe mode screen slow sound spyware trojan upgrade vba video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Anti-Virus Unable to remove Infection

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

Closed Thread
 
Thread Tools
Lew2's Avatar
Computer Specs
Junior Member with 1 posts.
 
Join Date: Jan 2008
Experience: Intermediate
01-Jan-2008, 12:48 PM #1
Question Anti-Virus Unable to remove Infection
We are curently running Windows XP and using SBC as our primary email provider. In using SBC we utilized their lack luster online protection service (Coputer Associates).

Last week the anti-virus detected an infection Win32/Kvol!generic that I have been unable to remove. SBC / AT&T said that it had embedded irself into my operationg system and that they could not assist any further.

ANy thoughts on how to remove this POS?
blues_harp28's Avatar
Distinguished Member with 8,354 posts.
 
Join Date: Jan 2005
Location: London England
01-Jan-2008, 06:23 PM #2
Hi and welcome to TSG.
Try an online scan.
Trendmicro
maddisont05's Avatar
Junior Member with 1 posts.
 
Join Date: Jan 2008
Experience: Beginner
18-Jan-2008, 10:57 PM #3
Quote:
Originally Posted by blues_harp28 View Post
Hi and welcome to TSG.
Try an online scan.
Trendmicro
did you find a way to get rid of this yet? Im in the same boat. Same file and I cant get rid of it. Email me if you know a solution. Thanks!

{I posted for you to Edit your email addy from your post, but seems you went offline...read my reply as to why we don't want you to post email addresses in public- thanks! Byteman}

Last edited by Byteman : 19-Jan-2008 12:06 AM.
Byteman's Avatar
Moderator with 14,997 posts.
 
Join Date: Jan 2002
Location: NY
Experience: Junkware Jouster
18-Jan-2008, 11:10 PM #4
Hi Maddisont05

Not a good idea to post any email address in public forums, you might be picked up and start getting a lot of spam mail....can you please Edit your email address from your post?

We also do not help through Private Messages or email, only here in the forums.

Thanks!
Byteman's Avatar
Moderator with 14,997 posts.
 
Join Date: Jan 2002
Location: NY
Experience: Junkware Jouster
18-Jan-2008, 11:13 PM #5
Hi - Both of you that have a virus:

Advise that you post a Hijackthis log here, and I will check it for you to see if we can spot anything....

go to Click here to download HJTsetup.exe
  • Click "Download the Hijackthis Installer" link in blue.
  • Save HJTsetup.exe to your desktop.
  • Double click on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Paste the log in your next reply.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
Please also do this:
  • Open Hijack This and click on the "Open the Misc Tools section" button.
  • Click on the "Open Uninstall Manager" button.
  • Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
  • Copy and paste that list here in your reply


An online scan is also a good way to check, so do one, if HOusecall will not work, I have some here that might:

HERE to run Panda's ActiveScan
  • Once you are on the Panda site click the Scan your PC button
  • A new window will open...click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on My Computer to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report


Or this one: Kaspersky online full scan
  • Please go HERE and click Free Online Scanner
  • Read and Accept the Agreement
  • You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • If you see a Windows dialog asking if you want to install this software, click the Install button.
  • The program will launch and then begin downloading the latest definition files,
  • When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
  • Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
  • Under "Please select a target to scan:", click My Computer to start the scan.
  • When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
  • Copy and Paste the contents of the on line scanner results into a Reply here in your thread, along with a new HJT log and log from any other scans you run.
Closed Thread Bookmark and Share

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Smart Search

Find your solution!



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 06:51 PM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
Powered by Cermak Technologies, Inc.