Trojan.fakeav.kue

awencel

Hey Everyone:

One of the clients that I have with your program installed on her PC is getting this error:

BitDefender has blocked a virus!

VirusName:

Trojan.FakeAV.KUE

Accessed by:

svchost

Location:

C\windows\Software Distribution\DataStore\Logs\tmp.edb

BitDefender could not disinfect, delete or quarantine this item. Access to this object has been denied.

Now I've tried to fix this the other day and found that it was a variant of Antivirus Suite that made entries in the %USERNAME%/Roaming/Local/<random>issd.exe area. I used CC Cleaner, Malwarebyte, Spybot, Registry Cleaner, and (of course) Bit Defender 2010. BD2010 and MalwareBytes didn't find anything. I had to manually disable--and ultimately delete--a crap load of <random>tssd.exe start-up entries in the msconfig window, and I found this to be very tedious. I saw that svchost is being used in this case and BD can't touch it. After finally thinking I've come close to getting rid of it, I've found that it comes back still. I understand that certain viruses can be notorious for deletion when BD isn't updated to handle this exploit, but I'm at wits end to fixing this. I want to reassure my client that BD is the program to go with in light of what's happening, so could you shed some light on what I should be doing that I'm not.

Also, I can't even run BD in safe mode because the service won't startup--why is this. I tried to manually start the service from services.msc window...but nothing. Please advise on how to approach this.

Find more posts tagged with

Comments

Cristi Raducu

To remove this type of infection you need to go back in services.msc and select Restart for: Windows Update and Windows Search.

Afterward reinstall BitDefender and run a deep system scan.

awencel

To remove this type of infection you need to go back in services.msc and select Restart for: Windows Update and Windows Search.

Afterward reinstall BitDefender and run a deep system scan.

I've done those steps and found that it didn't address the problem at the root. Thanks for the update though. I've found now that my wife has acquired the same malware from somewhere (I've educated her tremendously about the dangers of webpages and spyware/virus/trojans out there). Bitdefender does not block this program from entering your PC, but it blocks the process from occurring. I've used Spy sweeper, doctor, spybot, and many other alternatives and found that sweeper cured the issue. I'm a little disappointed with the malware/spyware protection of this antivirus program. I'll still keep using it for the price that it's offered--and I normally use other programs on top of your program as well, but I'll keep an eye out for those things in the future.