I've installed KAV on 200 wks over a customer network.

There's a virus which is Worm.Win32.Mabezat.b

It is deleted Automatically by Kasper since its definitions included in the updates.

But there's about 50 ~ 60 workstations have the problem;

Kasper delete the viruese automatically,

But when i open any excutable file it appears again, in the path C:\Documents and Settings\

It restricts many applications from being started, specially Office Applications, it destroys most of the applications.

I tried to delete them in the safe mode but they get back when i open any exe file.

I've took the virus on the flash and test it on another network and they delete it and doesn't get back.

Here's a screenshots for the virus, also uploaded the virus on rapidshare link:



Is there any tool or anyway that i could solve this problem.

Please create a syslog file

Please is there anyway could solve this problem !!

Post the avz log of the infected computer. Review this http://forum.kaspersky.com/index.php?showt...st&p=678334 .

Review the forum rules: http://forum.kaspersky.com/index.php?showtopic=84003


Post image of the detection and route of the detection.

All the computers in the network have kaspersky workstation v6.0.3.837 installed, S.O and Servicepack installed?

Caos,

Seeing the same thing on some of ours, fully patched. I've taken the main one offline and am applying the most recent updates from CD. Will follow up if the new updates help.

(All computers patched fully, XP SP3, with all recent MS patches, + every 2 hour Kasp updates).

AdamRobinson,

Post the avz log of one infected computer for review.

Reboot in safe mode, delete the virus?