How do you remove Trojan horse Downloader Keenval b virus?

Answer 1

The file the virus was in on my system was updmgr.exe and all I had to do was locate the file on my harddisk then delete it. If it says the file is in use, do "crtl+alt+delete" and go into task manager, in the processes section find the name of the .exe file it has infected then end the task, you should then be able to delete the infected file. If the file isn't in an .exe file you should be able to delete with no problem, if it doesn't work you need to find a process with a similar name to the file and end it. Hope this helped!

I too have Keenval.b virus. I ran spybot and found it was KeenValue Perfect Nav, which is a site that suddenly appeared after I downloaded Kazaa (free music) so I uninstalled Kazaa and so far so good, 6 hours since pop ups telling me about Keenval. Maybe Kazaa is the problem. Hope that's a help for someone

P.S. also was advised to disable system restore, and then run (well my AVG) and spybot, just an option, hope it works, fingers crossed, seems ok with me

After you remove this from your system, and it goes to the system restore file, for Windows XP, you have to go in and delete all your old system restore files, or do a total system restore, which is the one that will remove all your data and start over. Unless you have your data backed up, deleting your old system restore files seems like a good idea, but may not get rid of the problem entirely. So this is how you delete all the old system restore files for Windows XP:1. Click Sart and go to all Programs2. Click on Accessories then system tools and Disk Clean Up.3. Click ok to start clean up on drive c.4. Wait for it to scan old compressed files, then click the tab that says more options.5. At th bottom of this next screen is the system restore area, that you would click clean up. It will ask you to confirm your decision, click yes, only if you are sure this is what you want to do.

You Do Not have to do another system restore to get rid of the file in System Volume Information. The file in System Volume Information is a result of Windows'default constant system monitoring for System Restore. So you must turn the System Restore Option off. Scan the drive. And then turn it back on.

For XP (might work for 2000, I haven't tried it):1. Control Panel>System2. Click on the System Restore Tab3. Check the box saying "Turn Off System Restore On All Drives" (This will Unhide the System Volume Information Folder so your virus scanner can scan it.) 4. Use a virus scanner to scan for and remove the virus.5. Uncheck the previously checked Box

You should be good to go.

I recommend not doing a System Restore unless you have to because along with the files you don't want , you could lose those that you do.

My Prof Avg antivirus dealt with this one OK. The Trojan horse PSW.Bispy.B was another story. Picked up that it was in my system but just left if there. Ran Search and Destroy on Spybot and that fixed it.

What worked for me is the following:

disabled System Restore in control panel|system

I installed and ran ad-aware and spybot. you can download both of these spyware programs free from: www.tucows.com

On my computer, I deleted updatestats.exe and that got rid of it.

Wow!! What a stubborn ole' Trojan this is!!! I don't know how I got it but my AVG 6.0 alerted me of it but could not isolate it in it's security vault so I found a shareware program titled "SSGold.exe" (Anti-Virus and Trojan) & downlowed for a temp. install to rid my PC of this malicious Trojan that began as 1 Trojan & winded up having 9 by the time I was able to isolate it (them). FYI: The Keenval.A means it's in your "A" drive the Keenval.B means it's in your "B" drive & the Keenval.C means it's located in your "C" drive. I've read where it's recommanded to turn off my "System Restore"? I don't know if it's necessary to do now or not now that I've isolated these trojans, Any comments would greatly be appreciated.

For your information.

virus.A, virus.B, virus.C

do NOT mean that it has infected your A, B, or C drive.the letters on viruses can go right through to Z.

All the different letters are mean it is variants of the virus.

Just like in real life a virus can spread. Then it can be deformed and spread again throughout the same people or whatever because it it not exactly the same, it is a variant.

Understand!if not ask more