Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


uncleanable virus help

  • Please log in to reply
3 replies to this topic

#1 rowena75


  • Members
  • 1 posts
  • Local time:07:48 PM

Posted 11 September 2005 - 01:10 PM

I'm a new new member and I've been using the tutorial on removing malware to try and get rid of a virus.......I noticed a virus warning when I sent a word attachment from my pc to my hotmail address and it wouldn't open, said there was an uncleanable virus. I scanned my system with norton, showed nothing, then tried Housecall which shows 1 file sysem\32\e49b73.exe infected with troj_kg.a
Not very much info about the virus on trendmicro site and its not showing up anywhere else. I used the autorun download from the tutorial to find the problem, its disguised as a windows help file (no microsift signature). When I disabled it and then deleted it in safe mode , I couldn't access the web when I restarted. I used system restore to get my internet back and the went back to auto run. I deleted it from the startup, but not my computer. Internet now works, but the virus is still on my system...HELP....WHAT CAN i DO, does anyone know what this thing is??
Also, when I click on file info it says the original file name was web.exe,
thanks :thumbsup:

BC AdBot (Login to Remove)


#2 pacman123


  • Members
  • 63 posts
  • Local time:07:48 PM

Posted 11 September 2005 - 03:32 PM

Hi you could try this it has a 30 day trial,update before using...............


#3 Scarlett


    Bleeping Diva

  • Members
  • 7,479 posts
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:07:48 PM

Posted 11 September 2005 - 05:49 PM

You could try A -Squared Free.


a-squared (a-squared) is a complementary product to antivirus software and desktop firewalls on MS Windows computers. Antivirus software specializes in detecting classic viruses. Many available products have weaknesses in detecting other malicious software (Malware) like Trojans, Dialers, Worms and Spyware (Adware). a-squared fills the gap that malware writers exploit.

Posted Image

#4 stidyup


  • Members
  • 641 posts
  • Gender:Male
  • Local time:07:48 PM

Posted 12 September 2005 - 02:32 AM

If you think you are infected submit a hijackthis log here.

How to submit a hijackthis log

Download Hijackthis

Try running the following from safe mode (Getting to safe-mode) Sysclean you'll also need the virus template file from here lpt***.zip


DrWeb CureIT

If your good with the command line also try Sophos Command Line scanner

Also try installing and running A2 Free and Ewido

I'd also run Spybot and Adaware

If your using Win2K/XP run adaware/spybot from "safe mode with command prompt"

At the C:\ prompt type the following:-

C:\progra~1\spybot~1\spybotsd.exe /autocheck /autofix

To find out more about the virus you have upload the infected file to here you should get some more names to go on.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users