unknown infected file - kalgz.sys

Viruses and worms
1

Hi,
I have the 4.8 home edition and since yesterday I have an alert. After a scan, it finds that the C:\WINDOWS\system32\drivers_kalgz.sys file is infected. It’s a 680 k file, always at the computer’s time.
I can’t find anything about this file on the web.
I choosed to erase it, but after a reboot it was always here. And still considered “infected”.

Does anybody know something about “kalgz”?

2

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.
3

Thank you Tech
I’ll come back with news after all that

4

You’re welcome. Specially boot time scanning could do the job.