downloader.keenval.M - what is this?!

aidyonline

hi everybody. i've looked at this site and there was a forum about a virus removal but that didn't help me.

to summarise, my computer was slowing up so much i would have to wait a few minutes just to open a browser window, so i downloaded AVG anti-virus software. it did a scan of my computer and picked up several viruses and removed them. great! so i thought.

the computer was a good bit better, but not back to normal. one day whilst the computer was sitting idle, an AVG 'window' popped up saying 'Trojan Horse downloader.keenval.M has been detected by AVG at c:\systemvolumeinformation\_restore{6F836C27-D09D-45EE-942E-0EE801DE44E4}\RP125\A0014783.exe
run AVG for windows' or something like that.

so i ran AVG for windows, and it didn't pick up anything. this happens everytime i let the computer go into standbymode.

so having read a few pages of the techie forum i decided to download the Norman virus control programme - i have run it also as well as adaware and spybot search and destroy to no avail, none of them seem able to find this trojan horse.

does anyone have any suggestions? or if this has been covered before, could they send me a link?

i don't know if i should just ignore it, or could this trojan be something to worry about - i have heard that you don't know who has put the trojan on your computer, and what they're doing with the info they take...

thanks for any help

aidyonline

sra

Does this help?

I don't think AVG normaly scans system-restore area and that's why it doesn't find it during a regular scan.

The above worked for me when I had a similar situation

peter_the_piper

In the unlikely event of failure of the above, try a scan of hijackthis (download from to of this thread) save scan and forward it to one of the sites which specialise in removing rubbish. http://www.d-a-l.com/help/forumdisplay.php?s=ce63ef467a5fa4cebe4002a80a96471c&f=8
This is one, there are more on google.
Also read this forum http://pcpitstop.ibforums.com/index.php?showtopic=69280

aidyonline

thanks guys, that looks useful, i'll give them a go

i'll let you know if it worked!

aidyonline