keenval.e - system damaged now

Discussion in 'other software & services' started by Kitt, Aug 28, 2004.

Thread Status:
Not open for further replies.
  1. Kitt

    Kitt Registered Member

    Joined:
    Jun 2, 2004
    Posts:
    4
    keenval.e hijackthis log

    I brought my PC into safe mode yesterday, deleted infected files, brought back up and now window pops up telling me that I'm not running in the proper configuration and that I should go back and undo all changes? I ran AVG and Norton yesterday and neither one picked up anything. Today I get message that keenval.e is is a restore file. Attached is hijackthis log. Please help if you can...... o_O
     

    Attached Files:

    Kitt, Aug 28, 2004
    #1
  2. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,278
    Location:
    New England
    Hi Kitt,

    Please be aware that we do not do HijackThis Log analysis here any more per this announcement:

    https://www.wilderssecurity.com/showthread.php?t=42148

    However, the main problem you seem to be having now is not a spyware infection, but rather damage caused to your system when you delete those files...

    So, let's see if people can advise you regarding that problem, hopefully including ways to get your system restored back to a usable state. Then you can follow-up with a Hijack cleaning request at a forum that provides those services. (After all, if your system is not usable then spyware is the least of your problems.)
     
    LowWaterMark, Aug 29, 2004
    #2
  3. Kitt

    Kitt Registered Member

    Joined:
    Jun 2, 2004
    Posts:
    4
    I don't quite understand how my system could have been damaged when I deleted those files, I followed the directions step by step I had been given from this forum?
    When you say my system is unusable, what exactly does that mean? It seems to be functioning fine, other than the message window.
    Please advise.
    Thank you in advance for all your help
     
    Kitt, Aug 29, 2004
    #3
  4. snapdragin

    snapdragin Registered Member

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi Kitt,

    I believe what LowWaterMark was referring to with regard to your system being damaged, is because you said you received a window that popped up telling you that your system was not running in the proper configuration and that you should go back and undo the changes.

    I'm a bit confused though since you said you followed the steps yesterday given to you from this forum. The only fix instructions I've been able to find is from back in June when you posted your Hijackthis log and Pieter gave you the instructions of what needed to be fixed.

    That thread can be found here: https://www.wilderssecurity.com/showthread.php?t=35478

    The Hijackthis log you posted in that forum has the scan time of 6/7/2004.
    The Hijackthis log you attached to this thread has the same scan time. In other words, you've attached the same HijackThis log as in the other thread. :doubt:

    Can you explain what kind of pop-up you received that told you to undo the changes you made?

    Regards,

    snap
     
    snapdragin, Aug 29, 2004
    #4
  5. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,278
    Location:
    New England
    Yes, exactly. Kitt, I thought you meant that your system was unusable, as if Windows was telling you that you had deleted key files...

    But, obviously that is not what you meant since now you say it's functioning fine.

    Snap - good catch on the old date from the HijackThis Log, I didn't notice how out of date it was.

    Kitt, I think Snap's question is important. Can you describe in more detail the popup window you got and tell us if you are still getting it, or did it appear only one time?
     
    LowWaterMark, Aug 29, 2004
    #5
  6. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,278
    Location:
    New England
    Wondering... o_O

    Is this the popup you are seeing? (below)

    If so, then that is a normal reminder that you previously changed the way your XP system boots up. I think Pieter had you go into a Safe Mode reboot, so that might account for it.

    You can click the "Don't show this message..." checkbox and hit OK to stop that from being displayed again.

    If that isn't it, can you show us an image of it?
     

    Attached Files:

    LowWaterMark, Aug 29, 2004
    #6
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...