Can anyone help me please?

hoyles10

I seem to have a virus but it wont delete from my system. I'm not very technical minded when it comes to computers so i'm struggling a bit on this one. The message i'm getting from my anti-virus software is: (I'm running the anti-virus software that I get with my Virgin Media subscription which apparently runs off Kaspersky.

• C:\Users\hoyles10\AppData\Roaming\sdra64.exe
  
  • Viruses detected: Packed.Win32.Krap.w
  • Action taken: File was infected with a virus and was unable to be quarantined. No action was taken. It is recommended that you delete this file.
    
    

hoyles10

Any help would be very much appreciated on how to get rid of the thing.

neilwoods

this may help, seems some good advice on this site.

http://www.virusremovalguru.com/?p=1669

macman

hoyles10 wrote: »

I seem to have a virus but it wont delete from my system. I'm not very technical minded when it comes to computers so i'm struggling a bit on this one. The message i'm getting from my anti-virus software is: (I'm running the anti-virus software that I get with my Virgin Media subscription which apparently runs off Kaspersky.

• C:\Users\hoyles10\AppData\Roaming\sdra64.exe
  • Viruses detected: Packed.Win32.Krap.w
  • Action taken: File was infected with a virus and was unable to be quarantined. No action was taken. It is recommended that you delete this file.

So what happens when you try to delete the file manually as recommended by Kaspersky?

hoyles10

It says that the programme is running in another application and can not be deleted.

[Deleted User]

Open task manager by pressing ctrl-shift-esc. If there is a button called "show processes from all users" on the lower left, click it. Now look for the name of the program in the list and try to close it.

If this doesn't work for any reason, restart the computer in safe mode by holding down F8 as soon as the BIOS screen goes away (this is the first screen that appears when your computer starts), then choose safe mode from the menu that appears. The virus hopefully will not start in safe mode and so you should be able to delete it.

dogmaryxx

If above fails, try Hitman Pro 3.5 Its free.

fiddiwebb

Hi hoyles

Have you had a programme called "Total Security 2009" recently pop up in a window on your computer saying you have viruses?

hoyles10

I will try the hitman pro as well I think. I can't find it on the processes when I run task manager.

I've not had anything pop up called Total Security. I have a feeling it may have come from Facebook as I clicked a notification saying someone had commented on a photo but when I got to the next screen there was nothing, then a few days later someone posted not to click notifications about comments on a photo because some people have had virus's.

This all came about this afternoon when I couldn't get onto internet banking, I spoke to Alliance and Leicester who said something about Keystrokes trying to access my banking and I needed to download Rapport from their site. I can't remember the full conversation but i've ended up having to change all my login details and they are sending me out a new password.

tobykim

It looks like it could be a false positive, if you read the posts here it seems to confirm it

http://forum.kaspersky.com/index.php?showtopic=88562

I've also been running spyware terminator on my lappy to see if it's any good and it appears to be ok handy as it has a real time shield and best of all it's free

[Deleted User]

Those posts refer to Packed.Win32.Krap.b, when this thread is about Packed.Win32.Krap.w. I know that they look similar, but they are actually different. A Google search for sdra64.exe confirms that it is a virus.

Did you try safe mode? You can also download Process Monitor from http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

If you search for the file in there, it should be able to find it if it is running under a different process name, but again you may have to do that in safe mode in order to be able to stop it and delete it.