1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Downloader.Keenval.G

Discussion in 'Security and Privacy' started by evetokens, 2004/06/19.

Thread Status:
Not open for further replies.
  1. 2004/06/19
    evetokens

    evetokens Inactive Thread Starter

    Joined:
    2004/06/19
    Messages:
    1
    Likes Received:
    0
    Hi.

    Just been informed by my mum that there is a trojan horse on me dads computer.

    Avg scan shows it as Downloader.Keenval.G and this is the location:
    \_restore\temp\A0194562.cpy

    Avg tried to remove but said file could not be deleted.

    I ran a search with no luck.

    Ran msconfig but could still not find it...

    Can anybody please help get rid of this??

    Thanks
    Eve
     
  2. 2004/06/19
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Assume it's an XP system? Disable system restore. Right click My Computer, select properties. On system restore tab, check the box to turn off SR and click apply.
    You will need to show hidden files and folders.
    Open C:\Windows\Prefetch, select all and delete.
    Open C:\Windows\Temp, select all and delete.
    Open C:\Documents and settings\username\Local Settings\temp, select all and delete. Do this for all usernames.
    Open My Computer, right click Local disk C: and choose properties, then disk cleanup. Check all boxes except compress old files and OK.
    Reboot and enable system restore.

    Should be clean.
     

  3. to hide this advert.

  4. 2004/06/19
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Forgot to mention, Welcome to WindowsBBS! :)
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.