Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 1308 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virus Mal/LnkFKAV-f

tedz

Hi,

I incountered a virus "Mal/LnkFKAV-F".

We used a tool sophosbootable_Linux base to delete a virus . When it finished to scan, I restart the computer I have notice that "mal/LnkFKAV-F" stell detected by AV and cannot delete it.


The sample files I upload on this link below.
http://www.ge.tt/#!/8tNvPXD

Any idea how to remove this Virus...

Thanks,

Tedz

:21971


This thread was automatically locked due to age.
Parents
  • 0

    Hello tedz,

    first of all, please always download and use the latest version of a tool. Of the three runs of SBAV two were done with 4.45 (dated 2009 !!!), you see the message Useful life of SWEEP has been exceeded . As you see in the analysis for Mal/LnkFkAV-F  it is quite recent so only a run of the current tool will detect it (as did the last one with 4.74). Furthermore it seems you have used a pretty old version of SDU - always look for the latest version here.

    Now, the last run shows one unresolved threat: Troj/TdlMbr-C. This is a rootkit component and that is has been found in a boot record there's a good chance that this is active and causing the recurring or persistent infections whenever you boot Windows. Rather than going into details here I urge you to contact Support directly (unless you simply want to wipe and reinstall the disk). 

    Christian

    :21975
Reply
  • 0

    Hello tedz,

    first of all, please always download and use the latest version of a tool. Of the three runs of SBAV two were done with 4.45 (dated 2009 !!!), you see the message Useful life of SWEEP has been exceeded . As you see in the analysis for Mal/LnkFkAV-F  it is quite recent so only a run of the current tool will detect it (as did the last one with 4.74). Furthermore it seems you have used a pretty old version of SDU - always look for the latest version here.

    Now, the last run shows one unresolved threat: Troj/TdlMbr-C. This is a rootkit component and that is has been found in a boot record there's a good chance that this is active and causing the recurring or persistent infections whenever you boot Windows. Rather than going into details here I urge you to contact Support directly (unless you simply want to wipe and reinstall the disk). 

    Christian

    :21975
Children
No Data