XKahn Posted August 13, 2011 ID:465269 Share Posted August 13, 2011 All these files listed entered my system on 7/16/2011. I was looking at processes running in task manager when I saw 2 applications I never noticed before using a lot of memory. I found no mention of them under services and when I tried to shut them down they reopened. I entered through safe mode and boxed them up into a zip file (aka imprisoned) then restarted the system. The system shows no signs of running different. These were NOT detected by any anti-virus or malware apps.AvsRecursion32.dll AvsRecursion32.exeCollectedData_2027.xmlCollectedData_2037.xmlkbdpash32.exekbdpl132.exenvrses32.exeAlso right clicking on most of these files relates them to something called CKConfig by CrypKey (Canada) Inc. The 2 xml files contain data related to my network drives and the other has my network connections. I will keep these until I can find something not working without them. I won't delete them until someone can identify them as viral.Thanks! Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 13, 2011 Staff ID:465271 Share Posted August 13, 2011 Can you please pm me the zip file and i will take a look at them?Thanks! Link to post Share on other sites More sharing options...
XKahn Posted August 16, 2011 Author ID:466091 Share Posted August 16, 2011 I PM'd the link a few days ago. Any luck? Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 16, 2011 Staff ID:466157 Share Posted August 16, 2011 Sorry taking a look now. Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 16, 2011 Staff ID:466160 Share Posted August 16, 2011 These are all a tracur variant. Will be added to defs shortly. Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 16, 2011 Staff ID:466177 Share Posted August 16, 2011 I recommend you unzip the files and with mbam updated run a quick scan. They should all be removed with the registry keys that need to be. Thanks for submitting. Sorry for the delay. Link to post Share on other sites More sharing options...
XKahn Posted August 16, 2011 Author ID:466245 Share Posted August 16, 2011 Thanks, detected and removed. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now