BleepingComputer.com: Windows Driver Package - Kaspersky Lab KLIF ActivityMonitor (05/15/2007 7.0.0.122) - suspect?

In the process of doing some routine maintenance on my PC I was looking through the 'Add/Remove programs' list to see what programs I could remove when I noticed an entry that I didn't recognize, ie, "Windows Driver Package - Kaspersky Lab KLIF ActivityMonitor (05/15/2007 7.0.0.122)." I did a quick Google search to try to find out what it is and many of the links found related to 'Hijack This' type logs concerning something called */Klif.* At this stage alarm bells started ringing!

I have scanned my computer using Malwarebytes Anti-malware, rkill and combofix as per this thread My link, realising after that I probably shouldn't have used the last one - oops!

It occured to me that this may have something to do with me taking advantage of a GAOTD opportunity to aquire the Kaspersky security suite via this link, My link

Any help greatly appreciated.

Hello... As you have already run ConboFix we need to work with that info. You need to make a new topic.

Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
Skip the GMER step and instead post the ConboFix log you have.

Let me know if that went well.

Hi, it just occurred to me that even though I followed your instructions, I should probably acknowledge your reply in this forum. Thanks for your swift reply and I have carried out your instructions as stipulated. I posted in the relevant forum four days ago and was wondering why I haven't had a reply yet. I appreciate that sometimes it's not possible to answer due to the sheer number of help requests. I did notice at the top of the forum there is a warning to those that post with a combo-fix log the first time will be ignored, do you think this is what has happened?

Thanks
David

Hello,I just looked and you are 18 in line so i'd guess later on today or tomorrow the latest.
We did get really busy and you will be answered. Appreciate your patience.


EDIT that rules applies to the first forum you posted in.

This post has been edited by boopme: 24 January 2011 - 03:10 PM

Ok, that's a relief. When I scroll down the Virus, Trojan, Spyware, and Malware Removal Logs forum it appears that some posters get answered straight away with multiple postings, I guess that your system is based on priority as well as first come, first served? Thanks for replying btw.

Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large, as are other comparable sites that help members with malware issues. Athough our HJT Team staff work on hundreds of requests each day, they are all volunteers who contribute to helping members as time permits. No one is paid by Bleeping Computer for their assistance to our members.

New and more devious malware infections are released almost daily. It then takes time for our Team to to investigate, analyze and test removal techniques before we can help members like yourself. Doing that means that we sacrifice speed of response for a quality response that will help remove the malware more effectively.

Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, you wouldn't want someone to assist you who is not familiar with your issue and attempt to fix it, would you?

Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.

Thank you for understanding.