Virus.DOS.MemLapse.465

gaming_guy

every time i boot into windows lately, kaspersky seems to think that i have the above virus.

i neutralise the virus every time KIS pops up with the notice but it reappears at the next windows boot.

i have run MBAM, but it didnt find anything suspicious.

i have also run HJT and removed a no file entry (this was about a week before KIS2009 1st found it)

i can only think that its a false positive as i uploaded the file to virustotal and it came back clean.

any advise?

g_g

ps. At least i dont get these problems in ubuntu!

aliEnRIK

Run COMBOFIX mate
Ill check the log out
(Can you also tell me where the suspicious file is?)

gaming_guy

i'll run combofix if it pops up again tomorrow as kaspersky seems to have quarantined it now and it didnt pop up last time i rebooted my computer.

i uploaded a clean file by mistake to virustotal. it was only after i was looking through the KIS logs that i noticed that it quarantined the file, so i restored the file and copied it into one of my many VMs and uploaded it to virus total again. kaspersky was the only one that flagged it up with the same name.

the file is located in C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709 and its called .subcache

i have looked at the viruslist page that KIS linked to and found out that alwil call the virus Golgi-Testicles-465 :rotfl:

aliEnRIK

ok doki

gaming_guy

i think kaspersky has taken care of this threat now as i havn't had a popup after the last few reboots into windows.


thanks anyway!