REBECCA TENA asked on January 6, 2013. Status: Answered & Closed.
Unable to Remove Infection Kvthost.exe
» Running XP Home SP3 all updates on a Dell 4550, 2Gb ram, P4 3.06Ghz, Nvidia 6800GS AGP, 120Gb HD. I have a recurring problem with a file flagged by Hit Malawre as a Gen trojan horse and spyware. The file is named kvthost.exe and resides in the Windows system32 folder. Does anybody know what kvthost.exe does. Neither NOD32 nor SuperAntiSpyware finds this problem, only Hit Malawre.
EXE files allow users to launch programs without needing additional software on the user's computer special software. The exe file is one of the most useful types of files precisely because it runs programs; however, it can be used as a delivery system for viruses or other malicious programs. Viruses (Trojan:Win32/Enchanim) often reside to .exe files, which are then re-named to resemble common software packages. They can be running in the background, infecting or compromising the computer.
The safest and quickest approach, without reinstalling Windows, is to use a professional repair tool. It is for this purpose that DLL Suite is released. DLL Suite allows our users to get rid of the exe virus infection annoyance once for all, just because it has a special feature of Fix EXE Virus. This feature can do away with exe virus infection related problems mentioned above; you simply do as follows:
Download DLL Suite, install and run > Click Dashboard menu and > Click Scan DLL Errors button > Click Fix DLL Errors button after the scan. And all the problems directly associated .exe files are fixed, because of the built-in feature of Fix EXE Virus in the Dashboard menu.
STEVE LOWE replied on January 13, 2013
- BAKHSHISH SINGH replied on January 7, 2013: » Having more than one real-time anti-malware product installed will compete with other anti-malware product(s), and can cause severe performance problems and system instability issues, and may limit the effectiveness of the products installed. Even if you attempt to have more than one product installed, with one active and another disabled, the disabled product will likely still have active components and/or drivers installed that will conflict with the other installed product.
- REBECCA TENA replied on January 8, 2013: » Prior to doing any of the above recommendations Hit Malawre had already "cleaned" the Trojan after doing a manual scan.
Task Manager no longer shows setup.exe after loading the OS. If I search for "setup.exe" I find 29 instances of files found with that name (not really surprising). Unfortunately Task Manager in XP does not tell you where the running processes are located, just their names.
I am far from certain at the moment. The original infected file "kvthost.exe" has been deleted from my computer. BUT IF it is a rootkit virus then a generating program may have been hiding in the Master Boot Record (MBR).
- MICHAEL HERMAN replied on January 8, 2013: » I believe this infection is part of a rootkit. This would explain why you have not been able to completely get rid of it!
- REBECCA TENA replied on January 9, 2013: » All seems OK at the moment apart from one annoying problem. I cannot shutdown my computer using the Start Menu button. If I do use the Start menu Shutdown expolrer unloads and the screen goes blue and then nothing, no matter how long I wait. I then have to CTRL.ALT.DEL to bring up Task Manager and use the Shutdown option which then works!
DLL Q & A you might like:
- Every Downloaded exe File Being Infected and Deleted »
- Cannot Find Regsvr.exe At Windows Startup »
- SAL.xls.exe Virus and Resulting Damage »
- Why DLL Suite can effectively fix DLL errors »
- SVCHOST.exe Trouble: Using Up 25% of My CPU »
- Unable to Reinstall Missing Rundll32.exe or Open .exe Files »
- How to fix DLL files for Windows PCs »
- Windows 8 Evaluation WerFault exe Application Error »
- How to fix "DLL was not found" errors for Windows PCs »