IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Exe folder
kaspersky_noviru...
post 25.06.2009 12:39
Post #1


Advanced Member
***

Group: Members
Posts: 153
Joined: 24.01.2008




Hello,

Does anybody experienced that their File Server (OS:Windows 2000 Server SP4) generated EXE FOLDER?
See the attached file.
My File Server has installed kav6.0.3.837

This post has been edited by kaspersky_novirus: 25.06.2009 12:44
Attached File(s)
Attached File  folder_exe.JPG ( 149.83K ) Number of downloads: 26
 
Go to the top of the page
 
+Quote Post
Lucian Bara
post 25.06.2009 13:23
Post #2


True legend
***************

Group: Moderators
Posts: 52487
Joined: 28.01.2006
From: Timisoara, Romania




Hello
it's a virus, send one of those infected samples to the lab: http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en


--------------------
Go to the top of the page
 
+Quote Post
kaspersky_noviru...
post 25.06.2009 15:12
Post #3


Advanced Member
***

Group: Members
Posts: 153
Joined: 24.01.2008




Hi Lucian Bara,

Pls dont remove this post!Maybe somebody experienced the same as I do.
I need a tool just to minimize the spreading of unwanted .exe folders being generated automatically before sending sample variants to the link you gave.
Does anybody experienced same problem like mine?Please extend your support.
Thanks


QUOTE(Lucian Bara @ 25.06.2009 18:23) *
Hello
it's a virus, send one of those infected samples to the lab: http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en

Go to the top of the page
 
+Quote Post
Lucian Bara
post 25.06.2009 15:46
Post #4


True legend
***************

Group: Moderators
Posts: 52487
Joined: 28.01.2006
From: Timisoara, Romania




those aren't folder, they are executables, they are files. we can't clean them up here as they are too many, and simply double clicking one by mistake would just trigger the whole thing again


--------------------
Go to the top of the page
 
+Quote Post
kaspersky_noviru...
post 25.06.2009 15:57
Post #5


Advanced Member
***

Group: Members
Posts: 153
Joined: 24.01.2008




So whats your best suggestion for this problem?
Im on the client side right now.Please extend your support

QUOTE(Lucian Bara @ 25.06.2009 20:46) *
those aren't folder, they are executables, they are files. we can't clean them up here as they are too many, and simply double clicking one by mistake would just trigger the whole thing again

Go to the top of the page
 
+Quote Post
Lucian Bara
post 25.06.2009 16:09
Post #6


True legend
***************

Group: Moderators
Posts: 52487
Joined: 28.01.2006
From: Timisoara, Romania




like i said, send one of those executables to the lab, they will add detection in a couple of hours. after it's detected boot into safe mode, scan and remove them


--------------------
Go to the top of the page
 
+Quote Post
kaspersky_noviru...
post 1.07.2009 07:32
Post #7


Advanced Member
***

Group: Members
Posts: 153
Joined: 24.01.2008




Hello,

I sent the virus sample to kaspersky lab and they inofrmed me that kaspersky is now capable of deleting those viruses,
just update the dbase.
In my case I updated already my dbase and tried to scan but kav couldnt detect but once I opened the exe folder thats
the time kaspersky could interact the virus behavior.
Ive noticed that kav could detect only but unable to delete the virus.

See the attached file I have.




QUOTE(Lucian Bara @ 25.06.2009 21:09) *
like i said, send one of those executables to the lab, they will add detection in a couple of hours. after it's detected boot into safe mode, scan and remove them


Attached File(s)
Attached File  viruses.JPG ( 141.81K ) Number of downloads: 10
 
Go to the top of the page
 
+Quote Post
Lucian Bara
post 1.07.2009 09:22
Post #8


True legend
***************

Group: Moderators
Posts: 52487
Joined: 28.01.2006
From: Timisoara, Romania




wait a couple of hours from when you get this reply. that last one is a generic pdm verdict, not a signature detection.


--------------------
Go to the top of the page
 
+Quote Post
kaspersky_noviru...
post 1.07.2009 09:51
Post #9


Advanced Member
***

Group: Members
Posts: 153
Joined: 24.01.2008




ok thanks
QUOTE(Lucian Bara @ 1.07.2009 14:22) *
wait a couple of hours from when you get this reply. that last one is a generic pdm verdict, not a signature detection.

Go to the top of the page
 
+Quote Post
Ghadi
post 1.07.2009 19:12
Post #10


Advanced Member
***

Group: Members
Posts: 68
Joined: 24.02.2009




Who deleted my reply !?!?!?
Go to the top of the page
 
+Quote Post
Lucian Bara
post 1.07.2009 19:13
Post #11


True legend
***************

Group: Moderators
Posts: 52487
Joined: 28.01.2006
From: Timisoara, Romania




i did, as per rules, please don't publish unverified (by us) tools or removal procedures.


--------------------
Go to the top of the page
 
+Quote Post
Ghadi
post 1.07.2009 19:53
Post #12


Advanced Member
***

Group: Members
Posts: 68
Joined: 24.02.2009




You think it is a new case ?!? I've faced it 2 months ago !!

And now you want the Labs reply !!!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 22.11.2009 04:13