[Merged] False Positive...explorer.exe?, Worm.Win32.Huhk.c Options

[Whizard]

You can discard the warnings safely.

[Flags]

>>How do I update the signatures????
You will need to consult the settings of your program, as I was unable to locate the main website of your particular utility, which is a Kaspersky clone by the way.

Hi and i did the up date and restarted and scaned again and it was fixed and yes Defender Pro does work with Kaspersky Labs or should say go's thru Kaspersky Labs and i have been useing Defender Pro for years and so in that case you should look more better guess i know alittle more about Defender Pro so i hope anybody useing Defender Pro just let the Virus update "update" it's self and it will be fixed and then reboot your computer and it is fixed and the websit to Defender Pro is http://defender-pro.com/ so anybody that wants to go see there it is and check it out.

Sincerely,Flags

[Whizard]

Hello Flags,

Defender-Pro is based on a very old version of Kaspersky 5.xx product just simply rebranded. Please note that that product has reached end of life and is no longer supported. You can find more information here:
http://support.kaspersky.com/supported_home

Therefore, all support queries will have to be forwarded to Defender-Pro. I would encourage you to install full Kaspersky product. You can find comparison here http://kaspersky.com/compare

This post has been edited by Whizard: 20.12.2007 04:47

[sproket]

You need an original disk not an OEM, which customized by the manufacturer.
Media Center Edition, usually has XP Professional as the base install.

All of my disks are original WMCE straight from microsoft for the full price. Basically the system keeps asking for my original discs, but it doesn't like them. They are 100% microsoft ONLY not OEM. Whatever happened during repair, hosed a bunch of DLLs.


Thanks for trying to help but i'm out of alternatives. Just going to wipe and start over. It's the only way I can be assured I'm back to a 100% stable system.

[Whizard]

Sorry to hear that sproket. I hope you have backups handy

[Sniper Elliott]

Hi guys,

Will raise this with viruslab as a matter of urgency.... it would help if someone could grab a copy of explorer.exe, and send it to newvirus@kaspersky.com with "false positive" in the title.

Try to update, because my defs are not flagging.

Have tried to send you an e-mail with explorer.exe attatched. Hope it gets through ok. Sent it to add as above.

Swampy

[Whizard]

Hello Swampy,

There is no need for any additional samples. Please update your signatures manually and you should be set!

[death.by.huhk.c.]

Hi, my first post so please bear with me!

I can’t do anything on my affected computer. No programs will start. I can’t even backup anything. Windows recommended I run CHKDSK, but that didn’t help.

When I follow Markovka's instructions I get the error message: "The application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

What can I do?

My OS is Windows XP Home Edition SP2

[Baz^^]

Worm.Win32.Huhk.c virus

Here is how you clear this shitty bug out. Hopefully the KAV updates will fix this bullshit.

1. Start Windows. When it “loads” do a CTRL + ALT + DEL to open task manager.
2. In task manager, click FILE , New Task (Run) , Go to ( C ): Kaspersky , AVP.exe and click OPEN.
3. Close task manager and go to the now open Kaspersky. (I had to do this twice before KAV opened)
4. In KAV, go to Service,Data Files,Backup,Files and restore the “explorer.exe” in C;/Windows/
5. Restart your PC


Voila! When I restored, it automatically put the file in the correct place, but keep your eyes open anyway.

Hope this helps somebody!

UPDATES SHOULD BE IN!!! CROSS YOUR FINGERS!!!

1) Watch your language, we prefer to talk in a civilised way here, even if there is a problem.

2) That is exactly the same "fix" I posted on page #2 of this thread

3) The signature was corrected a few hours ago.



Please also bear in mind the time differences. It is 2AM here, and things are a bit slow... you haven't been abandoned, I am sure support will help every user who is still having problems.

This post has been edited by MAPKOBKA^^: 20.12.2007 04:59

[Whizard]

Hi, my first post so please bear with me!

I can’t do anything on my affected computer. No programs will start. I can’t even backup anything. Windows recommended I run CHKDSK, but that didn’t help.

When I follow Markovka's instructions I get the error message: "The application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

What can I do?

My OS is Windows XP Home Edition SP2

Please open a ticket a with TechSupport http://kaspersky.com/helpdesk

This post has been edited by Whizard: 20.12.2007 05:00

[Flags]

Hello Flags,

Defender-Pro is based on a very old version of Kaspersky 5.xx product just simply rebranded. Please note that that product has reached end of life and is no longer supported. You can find more information here:
http://support.kaspersky.com/supported_home

Therefore, all support queries will have to be forwarded to Defender-Pro. I would encourage you to install full Kaspersky product. You can find comparison here http://kaspersky.com/compare

i am sorry but i have a 2007 copy and they just got a 2008 version out so it can not be that old and it fixed my problem so on that note it is not as old as you think it is it may have been a version of yours but it is up and working now and you can still buy it out of stores and it works very well and does what your all's virus protection does and it don't cost me as much as your all's do it cost more and less 60$ your one year which that is alittle much not saying your's is not good just saying mine does everything your's does so in that matter i think i stick with it. Have a nice day!

[death.by.huhk.c.]

What is the exact product build you have installed?

Er...not sure what you mean by product build.

[Whizard]

Sure, if the price is a definate factor I would not argue with you here. I am just saying that since you do have the product, you might actually try the original creators, instead of clones. No pun intended 2008/2007, but still based on the same old core

This post has been edited by Whizard: 20.12.2007 05:08

[vproman]

Even after I updated, the KAV GUI still said I had threats detected. Wasn't sure what to do, so I went to Statistics > Detected, right clicked on the detected files, selected "Disinfect" and the detected files switched to "not found: virus" files. Hope that helps others.

[death.by.huhk.c.]

Please open a ticket a with TechSupport http://kaspersky.com/helpdesk

Opening a ticket involves entering a customer number. In order to get a customer number you need to enter your activation code to download the licence key . The instructions for installing a licence key for version 6 lead you to the instructions for version 7.

Even if I did get the correct instructions for installing the licence key, would it be of any use as the machine I'm currently working on is not protected by Kaspersky but by F-Secure? I can't go through the process of opening a ticket on my computer with Kaspersky because it won't work any more.

Now what do I do?

[JohnGA]

Looks like the false positive is only on explorer.exe\Explorer.EXE - if I manually scan my copy of Explorer.exe in C:\WINDOWS (WINNT in my case), it doesn't complain. I temporarily added explorer.exe\Explorer.EXE to the Trusted Zone...

This post has been edited by JohnGA: 20.12.2007 05:43

[Rhyssa]

Just right click K in tray and select Update. Why not upgrade to v7? Its free to all active key holders.

Re-read my previous post - I HAVE updated, several times in fact, and restarted my computer. I'm still getting the virus pop up every time I try to do anything at all that involves explorer.
I've sent off an application to upgrade from version 5 to version 7 and got a canned response, waiting on another reply now.

Is there any way at all to delete the detection in version 5? I run a business from my computer and can't afford to have it out of action for 24 hours while support decides to actually read my emails.

[helpmeplz]

i got a kaspersky po-up for this same worm.. "worm.win32.huhk.c".. except mine says the infected object is A0245744.exe...

should i delete this????

[Rhyssa]

i got a kaspersky po-up for this same worm.. "worm.win32.huhk.c".. except mine says the infected object is A0245744.exe...

should i delete this????

Don't delete anything, the alert is a false alarm. Read back through this thread to find out how to fix it.

[JohnGA]

i got a kaspersky po-up for this same worm.. "worm.win32.huhk.c".. except mine says the infected object is A0245744.exe...

should i delete this????

The latest database update should have fixed this... no need to delete...