a file that is 'reinserting' itself and wont delete

[paulfranco89]

there is a .exe file on my comp right now "kyvwca.exe" that i can find
in the "system 32" folder, and i have attempted to delete in safe mode,
however simply 5-20 seconds later the file will reappear as if i hadnt
even touched it

i ran numerous spyware, malware, virus scans on my computer during safe
mode and campe up with nothing

i also have done a search for 'kyvwca' on the files on my computer and
only have come up with the one file in the 'system 32' folder


how do i get rid of this executable, im almost positive its spyware, i
think its the reason for my cursor always having the 'timer' or
'waiting' symbol up but still running at full speed

just wondering what to do...?

 

[Guest]

there is a .exe file on my comp right now "kyvwca.exe" that i can find
in the "system 32" folder, and i have attempted to delete in safe mode,
however simply 5-20 seconds later the file will reappear as if i hadnt
even touched it

i ran numerous spyware, malware, virus scans on my computer during safe
mode and campe up with nothing

i also have done a search for 'kyvwca' on the files on my computer and
only have come up with the one file in the 'system 32' folder


how do i get rid of this executable, im almost positive its spyware, i
think its the reason for my cursor always having the 'timer' or
'waiting' symbol up but still running at full speed

just wondering what to do...?

Scan your system with Ad-Aware
Ad-Aware SE - http://www.lavasoftusa.com/software/adaware
Also scan for "ADS" ( alternat data streams)with Ad=Aware in a seprate scan
This ADS is what is recreating kyvwca.exe after you delete it it is a
seprate "hidden" .dll in your system32 folder that is working with kyvwca.exe.

 

[Malke]

there is a .exe file on my comp right now "kyvwca.exe" that i can find
in the "system 32" folder, and i have attempted to delete in safe
mode, however simply 5-20 seconds later the file will reappear as if i
hadnt even touched it

i ran numerous spyware, malware, virus scans on my computer during
safe mode and campe up with nothing

i also have done a search for 'kyvwca' on the files on my computer and
only have come up with the one file in the 'system 32' folder


how do i get rid of this executable, im almost positive its spyware, i
think its the reason for my cursor always having the 'timer' or
'waiting' symbol up but still running at full speed

just wondering what to do...?

The problem is caused by malware that is spawning after removal. This
means that even though you've done scans, you haven't killed the
culprit. Since you didn't specify what antispyware programs you used,
I'm going to suggest you use HijackThis and post your log in one of the
places in the links below. I particularly recommend the AumHa forums as
the regulars there are extremely expert and good to deal with. Make
sure you read the posting FAQ first. You can get HijackThis at
www.majorgeeks.com.

As always, do your scans in Safe Mode.

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/

Malke