![]() ![]() |
25.06.2009 12:39
Post
#1
|
|
![]() Advanced Member ![]() ![]() ![]() Group: Members Posts: 153 Joined: 24.01.2008 |
Hello,
Does anybody experienced that their File Server (OS:Windows 2000 Server SP4) generated EXE FOLDER? See the attached file. My File Server has installed kav6.0.3.837 This post has been edited by kaspersky_novirus: 25.06.2009 12:44
Attached File(s)
|
|
|
|
25.06.2009 13:23
Post
#2
|
|
![]() True legend ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 52487 Joined: 28.01.2006 From: Timisoara, Romania |
Hello
it's a virus, send one of those infected samples to the lab: http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en -------------------- |
|
|
|
25.06.2009 15:12
Post
#3
|
|
![]() Advanced Member ![]() ![]() ![]() Group: Members Posts: 153 Joined: 24.01.2008 |
Hi Lucian Bara,
Pls dont remove this post!Maybe somebody experienced the same as I do. I need a tool just to minimize the spreading of unwanted .exe folders being generated automatically before sending sample variants to the link you gave. Does anybody experienced same problem like mine?Please extend your support. Thanks Hello it's a virus, send one of those infected samples to the lab: http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en |
|
|
|
25.06.2009 15:46
Post
#4
|
|
![]() True legend ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 52487 Joined: 28.01.2006 From: Timisoara, Romania |
those aren't folder, they are executables, they are files. we can't clean them up here as they are too many, and simply double clicking one by mistake would just trigger the whole thing again
-------------------- |
|
|
|
25.06.2009 15:57
Post
#5
|
|
![]() Advanced Member ![]() ![]() ![]() Group: Members Posts: 153 Joined: 24.01.2008 |
So whats your best suggestion for this problem?
Im on the client side right now.Please extend your support those aren't folder, they are executables, they are files. we can't clean them up here as they are too many, and simply double clicking one by mistake would just trigger the whole thing again |
|
|
|
25.06.2009 16:09
Post
#6
|
|
![]() True legend ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 52487 Joined: 28.01.2006 From: Timisoara, Romania |
like i said, send one of those executables to the lab, they will add detection in a couple of hours. after it's detected boot into safe mode, scan and remove them
-------------------- |
|
|
|
1.07.2009 07:32
Post
#7
|
|
![]() Advanced Member ![]() ![]() ![]() Group: Members Posts: 153 Joined: 24.01.2008 |
Hello,
I sent the virus sample to kaspersky lab and they inofrmed me that kaspersky is now capable of deleting those viruses, just update the dbase. In my case I updated already my dbase and tried to scan but kav couldnt detect but once I opened the exe folder thats the time kaspersky could interact the virus behavior. Ive noticed that kav could detect only but unable to delete the virus. See the attached file I have. like i said, send one of those executables to the lab, they will add detection in a couple of hours. after it's detected boot into safe mode, scan and remove them
Attached File(s)
|
|
|
|
1.07.2009 09:22
Post
#8
|
|
![]() True legend ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 52487 Joined: 28.01.2006 From: Timisoara, Romania |
wait a couple of hours from when you get this reply. that last one is a generic pdm verdict, not a signature detection.
-------------------- |
|
|
|
1.07.2009 09:51
Post
#9
|
|
![]() Advanced Member ![]() ![]() ![]() Group: Members Posts: 153 Joined: 24.01.2008 |
|
|
|
|
1.07.2009 19:12
Post
#10
|
|
|
Advanced Member ![]() ![]() ![]() Group: Members Posts: 68 Joined: 24.02.2009 |
Who deleted my reply !?!?!?
|
|
|
|
1.07.2009 19:13
Post
#11
|
|
![]() True legend ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 52487 Joined: 28.01.2006 From: Timisoara, Romania |
i did, as per rules, please don't publish unverified (by us) tools or removal procedures.
-------------------- |
|
|
|
1.07.2009 19:53
Post
#12
|
|
|
Advanced Member ![]() ![]() ![]() Group: Members Posts: 68 Joined: 24.02.2009 |
You think it is a new case ?!? I've faced it 2 months ago !!
And now you want the Labs reply !!! |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 22.11.2009 04:13 |