wkcalrem.exe

Discussion in 'other anti-virus software' started by Okanagan, Oct 13, 2007.

Thread Status:
Not open for further replies.
  1. Okanagan

    Okanagan Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    41
    My AV guarantied the "wkcalrem.exe" file from C:\Program Files\Microsoft Shared because of an infection by a Trojan horse "Generic8LDI" (File size 52KB (53217 bytes), which is not healable.
    Some of my programs in Microsoft Works will not work without this file.
    What do I have to do, to reinstall this file?
    Grateful as always to to get your helpful advice.
    Thank you.
     
  2. dawgg

    dawgg Registered Member

    Joined:
    Jun 18, 2006
    Posts:
    817
    Send the file to your Antivirus's Support Team or Virus Lab as a possible False Positive.

    Have a look at this thread for your Antivirus's VirusLab's E-mail address to submit the sample to: https://www.wilderssecurity.com/showthread.php?t=132843
    ... or have a look on your security software's site for it
     
  3. ink

    ink Registered Member

    Joined:
    May 20, 2006
    Posts:
    185
    You can restore it and then check the digital signature by microsoft, then add exceptions on the antivirus settings before you got the reply from your vendor.
     
  4. Niels

    Niels Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    466
    Location:
    Belgium
    It could be a false positive you can see here that it's part of the works suite:
    http://www.liutilities.com/products/wintaskspro/processlibrary/wkcalrem/
    http://www.neuber.com/taskmanager/process/wkcalrem.exe.html
    For me the chance that it's really infected is really low but I don't say that it can't be infected. What you also can do is what ink told you to do and then upload the wkcalrem file to http://www.virustotal.com and see how many scanners detect it. I recommend that you perform a repair installation with the works cd-rom.
     
  5. Okanagan

    Okanagan Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    41
    Thank you all, peoblem solved. Here is the answer from AVG:

    Private support email removed per the TOS. The detection was a false positive.
     
    Last edited by a moderator: Oct 14, 2007
  6. dawgg

    dawgg Registered Member

    Joined:
    Jun 18, 2006
    Posts:
    817
    Good to hear :)
     
  7. Diver

    Diver Registered Member

    Joined:
    Feb 6, 2005
    Posts:
    1,444
    Location:
    Deep Underwater
    Next time someone thinks false positives are OK, they should read this thread.
     
Thread Status:
Not open for further replies.