Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ComboFix deletes Kaspersky driver KL1.sys?


  • Please log in to reply
2 replies to this topic

#1 Knight Captain

Knight Captain

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:44 AM

Posted 24 June 2009 - 08:58 PM

I received emails from a few sources saying the handy ComboFix program now deletes the Kaspersky driver KL1.sys. Is anyone else running into this?

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\kl1.sys

Analysis of the file from the ComboFix Qoobox folder shows it is a Kaspersky Lab copyrighted file.

Edited by Knight Captain, 24 June 2009 - 09:05 PM.


BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,470 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:44 AM

Posted 25 June 2009 - 09:27 AM

Can you submit a sample of this quarantined file to the following url please:

http://www.bleepingcomputer.com/submit-malware.php?channel=3

#3 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,470 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:44 AM

Posted 25 June 2009 - 09:33 AM

Do not need the sample anymore. This has been resolved. Make sure you are using the latest version of combofix. It should be noted that for these reasons, combofix should only be used by trained helpers. Otherwise, unsupervised use could cause problems with the proper operation of your computer.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users