Sign in to follow this  
Followers 0
marcello618

Packed.Win32.Krap.hc

16 posts in this topic

Hi!

 

I have a problem with a recently bought Kaspersky Antivirus 2012. After I bought the program, it have found a trojan called "Packed.Win32.Krap.hc" in Spybot.exe, I let the program delete it, I also removed Spybot. But 1 day later Kaspersky have found it again. I had to restart the computer, i got an error message complaining about "bad images". Okey, I let the program delete it again. One day later, my computer, around 10 minutes after switching on, suddenly the Web protection switched off by itself, I was not able to switch it on, also I got warning from Windows that my antivirus is inactive, but I couldn't switch it on. Kaspersky's protection was shut off completely, complaining about not valid license. I restarted again, and now Kaspersky working properly but I don't know for how long. I do update Kaspersky in every hour, is this some kind of new infection Kaspersky cannot handle?

 

http://www.getsysteminfo.com/read.php?file...08e476738688c09 here's my analisation of the system

Edited by marcello12

Share this post


Link to post
Share on other sites

Okey... I had 37 gigabytes of free space on the C drive, which have changed after I started the system. Now it's only 26 gigabytes. The computer still shows a lot of CPU activity. Kaspersky can not find anything, and updating itself in every minute. I would say it became infected too.

Edited by marcello12

Share this post


Link to post
Share on other sites

Personally I have given up hope, but I do write here ask Kaspersky related people, please, for the sake of those people who COULD have this problem in the future... Make an update, to avoid any more unnecessary ecounter with this trojan / malware. It is truly a nasty, evil one if it ruined my brand new antivirus program :unsure:

Share this post


Link to post
Share on other sites
Personally I have given up hope...
four hours after your first post? newconfus.gif I hope that your hope reserves can be extended to a larger capacity to provide 24 hours worth.

 

Please post the full, complete detection details. Post screenshot of Reports > Detailed Report > Detected threats.

Right click the Detected bar, and select Path. Right click the Detected bar again and select File.

Then post the screenshot with columns widened to show full detected and name and object and path/location details.

 

How to take and post screenshot: PrtSc (Print screen) key (upper right part of keyboard)> open Paint (Start > All programs > Accessories) > Edit > Paste, File > Save as (jpeg or

png, Not bmp). When replying, Browse > click once to select file > Open > Upload > add reply.

 

Reports > Detailed Report > lower left > Save button > please attach the saved text.

 

 

Share this post


Link to post
Share on other sites

Okey, here is the first screenshot... I'll post the others too.

 

Reports > Detailed Report > lower left > Save button > please attach the saved text.

 

Sorry, the language of my Kaspersky is not english, I didn't found this one... However, I could use english Kaspersky if it's necessary, is there a way to change the language of the program?

 

post-398205-1328256169_thumb.jpg

Share this post


Link to post
Share on other sites

Fourth one too.

 

I attached my screenshot from Safe Mode too, I wonder, where more than 10 gigabytes of the C: drive has gone? When I started the computer the CPU worked very hard I was losing disc space really fast. I didn't think Kaspersky would need this much disc space, and I also disabled system recovery.

post-398205-1328256613_thumb.jpg

post-398205-1328256756_thumb.jpg

Share this post


Link to post
Share on other sites

Thank you. I will do as you requested, I really do not want other users to ecounter with my problem.

 

Here's the detailed reports text file.

 

Only one more problem, can you imagine that Malwarebytes Anti-Malware could shut off Kaspersky's Web Protection, and the whole protection itself? The reason was my license appeared to be not valid. Here's the screenshot.

 

If I have to I will post a screen of the paper, where's my license key, or I will send the license to you in PM... my software is legit.

Detailed_reports.txt

post-398205-1328257455_thumb.png

Share this post


Link to post
Share on other sites

You're welcome. No need to post or send license information. Instead, please click the blue details link, press Shift-F12, and post the screenshot, or tell me what it says in English.

 

You can Allow driver installation for programs that you know are from the official source.

 

Detailed reports: We need full, complete details for any questionable detection. File name, object, and path/location.

 

 

Share this post


Link to post
Share on other sites

The screenshot,and what it is in english:

 

"Can not verify the compliance of the current data base for the license."

 

Below:

 

One possibility is the not valid update. The protection is turned off.

post-398205-1328258571_thumb.jpg

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0