I have Kaspersky 6.0.830 installed on WinXP service Pack 2. There is a virus/or set of a viruses that is though detected by Kaspersky, yet it is not wiped out completely.
Behaviour: When i double click any logical partition C,D,E, F etc, it opens in a new window with kaspersky giving following message
"22/07/2009 9:10:19 AM D:\hkn6k.bat Process D:\hkn6k.bat (PID: 3004) is attempting to invade process G:\WINDOWS\EXPLORER.EXE (PID: 780). This behaviour is typical of some malware.
"
where hkn6k.bat is preceded by whichever partition double clicked.
I deny the access using Kaspersky prompt. However this behaviour is repeated again when i try to access any logical partition by "double clicking"/open by click only.
I have searched "hkn6k.bat" at every logical partition however it is not visible. The only thing that i found is
i) HKN6K.BAT-05A3165F.pf , HKN6K.BAT-0741789C.pf, HKN6K.BAT-0DD75C71.pf, HKN6K.BAT-3AA7FC91.pf files in "G:\WINDOWS\Prefetch"
ii) Dir00 and Dir01 are created on root(G:\)
There is another event that is logged when i login in my system. It does not give any prompt however to stop
"22/07/2009 9:04:28 AM G:\WINDOWS\System32\olhrwef.exe Process G:\WINDOWS\System32\olhrwef.exe (PID: 200) is attempting to invade process G:\WINDOWS\EXPLORER.EXE (PID: 780). This behaviour is typical of some malware.
"
However i cannot find this exe in system 32 as well.
My antivirus Signatures are uptodate
Looking for Help
Ali