[Merged] False Positive...explorer.exe?, Worm.Win32.Huhk.c Options

[sammyiii]

What is a "false positive"?

[Timodinho]

updated and scanned... no worm virus32 huhk.c but still my taskbar is gone
But i think it should be over if i restart the computer

[Baz^^]

Sorry for the tech-speak.

False positive = A file that is mistakenly flagged as "infected"

This post has been edited by MAPKOBKA^^: 20.12.2007 02:16

[Baz^^]

updated and scanned... no worm virus32 huhk.c but still my taskbar is gone
But i think it should be over if i restart the computer

If you can open the Kaspersky interface, restore the explorer.exe file from the backup tab. If you have already done so, reboot and you should be back to normal.



This post has been edited by MAPKOBKA^^: 20.12.2007 02:17

[Odelette]

i use my window XP cd to repair my windows to restore my explorer. and now you are telling me it a false positive?
zzzzz
can i restore my old explorer even after my used windows XP cd to repair my windows?

[Timodinho]

I restarted my pc... no more stupid huhk.c
I didn't restore the backup, I just rebooted my pc, no probs
Anyway thankyou!

[Baz^^]

Things like this are not supposed to happen, but on rare occasions they do.

Please accept my apologies for the inconvenience this has caused.


If you perform an update now, the fixed detections will be applied.

This post has been edited by MAPKOBKA^^: 20.12.2007 02:27

[Timodinho]

Things like this are not supposed to happen, but on rare occasions they do.

Please accept my apologies for the inconvenience this has caused.

Hey no problem^^
You guys here are doing all what you can do to help us...
A lot better than my previous scanner

[sammyiii]

(sorry about the preious blank post.. new to this...screwed up)

Anyway, what I wanted to ask is:
1. How do I know if I already deleted Explorer.exe or not. I did what Kaspersky software told me to and asked it to delete the threat (4 times!)...don't know if that means I have deleted explorer.exe. It told me each time that both it had deleted the threat and that it couldn't delete it.

2. If I have, will getting my KAV update fix that? I am kinda afraid to turn on the "infected" computer again...wondering what I've destroyed by following KAV instructions.

Plus, I have to worry about my elderly parents' computer in another city...I bought them KAV too!

3. To update...will it automatically update as usual or do I need to ask it to do it this time.

I like this forum...I do get a bit confused about all the different sets of instructions for seemingly the same problem.

Thanks

[sproket]

Same problems here.

Still trying to get things working after 2 hours.

This "false positive" has done more damage to my PC than any virus has in the 20 years i've been using computers.

[Baz^^]

1. Check if explorer.exe is present in c:\windows

2. The update will stop the file being detected in future, you should restore those "deleted" files from the backup tab of the kaspersky interface

3. It will update as per automatic schedule, but you can peform a manual update now.

[JasonX]

Thank you MAPKOBKA^^ for quick solution to this problem , and good night....

[Altitude]

Hey MAPKOBKA^^

Thanks for all the info you have given in this thread, has helped me out a heap with this issue.

Just to let you know that I have the latest updates and when I scan an archive that has explorer.exe in it, Kaspersky 7 is still telling me it is infected with the Worm.Win32.Huhk.c

Not sure if this needs to be fixed in a following update or not, but would just like to let you know that this issue still needs to be addressed.

Cheers

[Timodinho]

My scanner doesn't detect it anymore

[Stoffer]

Greetings.

I had the same problem about 10 minutes ago so I thought I'd look it up and successfully found a thread about this issue.
Luckily I didn't delete Explorer.exe, that would have been a hassle.

I updated Kaspersky and it found a new update version so I guess this has been fixed.
The message doesn't appear anymore and it said it has been successfully disinfected.

I hope it's fixed for all of you!

Best regards,

Stoffer

[Baz^^]

Glad it has helped you guys


I am afraid that I will have to disappear for a while, although all questions will be answered by myself or my forum colleagues as soon as we can. Thanks for your understanding!

[MarciSoCa]

This caused me a little extra grief as it may with other people running XP with an Nvidia RAID. Simply starting from the Windows XP install doesn't work (at least very easily) since without the Sata and RAID drivers Install won't even see the raid. I did try the F6, install 3rd party drivers thingie but drive letters were all wacko. I then remember that windows DID boot even with the explorer.exe deleted. After booting hit Alt,Cnt/Del to get the task manager. Then within the task manager hit File/New task and type CMD. This brings up the command prompt window where you can get explorer from the windows installation disk. expand E: *explorer.ex_ C:\windows\explorer.exe. When I first did it I didn't put the extracted file name in full and although it expanded explorer.ex_ to windows directory, it didn't rename it. I had to CD C:\windows then RN explorer.ex_ C:\windows\explorer.exe.

All in all this was a bit of a freak out because doing a reinstall of windows has always been a pain with this damned RAID. I end up having to disconnect all over drives or Windows tries to put the NTLDR and other crap on a regular drive and I don't want that in case I want to change out the extra drives.

Ya Freaked Me Out...but it wasn't as bad as I thought it was. It would be good if you guys could someone let everyone know somehow that this IS a false positive to save a lot of freakin and workin. I called everyone I know that's running Kaspersky and told them to ignore any referance to Worm.Win32.Huhk.c.

Getting a spam email to that effect from you guys wouldn't bother me in the least :-)

All in All...great product

[Rhyssa]

Hi guys, please try to update now, the fix should have been pushed out through the updater.

Clear your "detected" tab entries, and it shouldn't bug you about those files again.

Where is the "detected items"tab?

[MarciSoCa]

Addendum to above...

don't know the relevance of this but it was also located here

deleted: virus Worm.Win32.Huhk.c File: C:\windows\system32\dllcache\OLD1A1.tmp

Also...I noticed on myspace today that someone that was asking to be a friend's profile had a strange thing

when I click on the "Pics" link the URL showing on the taskbar was not the usual viewmorepics yadda yadda but

http://okprofile.info

not sure if this is the source of this or not but...might wanna look into it

[Flags]

I have Defender Pro 5.0 and I got the error that my explorer.exe was infected with the Worm.Win32.Huhk.c virus. I did a google of the virus and it brought me here. I have tried doin the update but it just updates a master.xml but it doesn't solve the problem that my computer is still detecting it.

How do I fix it using Defender Pro 5 in 1???

Any information and replies will be greatly appreciated and thanks.