I have some kind of strange un-deletable virus!

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have run Norton and Trend-Micro anti-virus programs and they have not
detected it. I have run many spyware programs and they don't detect it. I
have a virus that creates itself and changes its name every time I delete the
two files that it consists of (I delete them in safemode). Anyway, so right
now I am not in safemode, and I open up TaskManager. There it is, and this
time its filename is kbdtst3g.exe in C:\WINDOWS\system32 and
KBDTST3G.EXE-04E0A106.pf in C:\WINDOWS\Prefetch. I would now go into safemode
and search for these two files and delete them. When I restart, the files
will show up again, but with different file names. Could someone please help
me? Thanks!

-Erik
 
I have run Norton and Trend-Micro anti-virus programs and they have not
detected it. I have run many spyware programs and they don't detect it. I
have a virus that creates itself and changes its name every time I delete the
two files that it consists of (I delete them in safemode). Anyway, so right
now I am not in safemode, and I open up TaskManager. There it is, and this
time its filename is kbdtst3g.exe in C:\WINDOWS\system32 and
KBDTST3G.EXE-04E0A106.pf in C:\WINDOWS\Prefetch. I would now go into safemode
and search for these two files and delete them. When I restart, the files
will show up again, but with different file names. Could someone please help
me? Thanks!

-Erik
Click to expand...

Download and install the Microsoft Windows AntiSpyware (Beta) program.
go to Safe mode and run it repeatedly until it doesn't find anything
new. It's available from:

http://www.microsoft.com/athome/security/spyware/software/default.mspx

There are ways that malicious programs can hide from normal antivirus
and antispyware tools. To detect them:

1. Download and run the F-Secure Blacklight Rootkit Revealer, and have
it rename any files that it detects:

http://www.f-secure.com/blacklight/

2. Run an antivirus program that can remove viruses in alternate data
streams attached to normal files. One example is Avast 4:

http://www.avast.com/eng/avast_4_home.html
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Back
Top