Trojan Downloader Virus

[Guest]

I have a Trojan Downloader Virus, keenval or KeenValue, which I cannot get rid of. I have tried using System Restore, it will not allow me to go back. I have run my AVG anti-virus as well as ad-aware and elminated and/or quarantined everything that it has found. It will not allow my anti-virus to scan certain files, which is probably where the little bugger is lurking. It found and "healed" certain viruses in the past week, but I am still getting the messages

My Temp Internet File folder is huge,(by clicking on properties) however, when I open it, it is very small (just the places I've been the past few days). I have also downloaded some type of spyware eliminator, which did virtually nothing. I need help - please---anyone know what to do. I have scoured the internet about this virus and can't even find any information on it. Any suggestions?

 

[Will Denny]

Hi

try here:

http://groups.google.com/groups?hl=...2coff=1&q=Trojan+Downloader+Virus&btnG=Search

--

Will Denny
MS-MVP Windows - Shell/User


| I have a Trojan Downloader Virus, keenval or KeenValue, which I cannot get rid of. I have tried using System Restore, it will not allow me to go back. I have run my AVG anti-virus as well as ad-aware and elminated and/or quarantined everything that it has found. It will not allow my anti-virus to scan certain files, which is probably where the little bugger is lurking. It found and "healed" certain viruses in the past week, but I am still getting the messages.
|
| My Temp Internet File folder is huge,(by clicking on properties) however, when I open it, it is very small (just the places I've been the past few days). I have also downloaded some type of spyware eliminator, which did virtually nothing. I need help - please---anyone know what to do. I have scoured the internet about this virus and can't even find any information on it. Any suggestions?

 

[Guest]

I second this question. I have some insidious porno trojan on my computer, and it won't leave. I can not figure out how to get rid of it, and it constantly loads porno on explorer even if I am not running explorer. I can not play any games (they crash instantly or lag out), and all my other programs are nearly impossible to use due to the constant interuptions. I have scowered my system, and can find nothing

Help! I don't want porno!

 

[roger]

Hi Glenn,

I second this question. I have some insidious porno trojan on my computer, and it won't leave. I can not figure out how to get rid of it, and it constantly loads porno on explorer even if I am not running explorer. I can not play any games (they crash instantly or lag out), and all my other programs are nearly impossible to use due to the constant interuptions. I have scowered my system, and can find nothing.

Help! I don't want porno!

More info about parasites:
http://www.aumha.org/a/parasite.htm

Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Unzip - close *all* instances of IE & OE, hit the executable and
follow
the prompts.

You can also download Hijack This from here:

http://www.mjc1.com/files/merijn/hijackthis.exe

Go here:
http://mjc1.com/mirror/hjt/

For instructions on how to use it; you have to post the log it
produces

so experts tell you what is good and what is malware


Try downloading, installing and updating the
spyware removers from the links below. Run both of them.

Ad-aware
http://www.lavasoftusa.com/support/download/

Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download


If these don't correct the problem, then get yourself a copy of

BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .

It does not need installing - simply unzip and run the EXE program. It

is easy to use. It will find the hijackware DLL files, and give you

the ability to disable them.

Hope this helps.

 

[Galadriel]

Trend Micro has a free virus scanner at:
http://housecall.trendmicro.com/
You must first temporarily turn off system restore, wich will delete all your previous restore points. This is to ensure that you are not re-infected if you try to use a previous restore point.
If this doesn't work, try scanning in safe mode.
HTH