Author Topic: How do I remove the Win32: Trojan-gen {VB} virus?  (Read 13386 times)

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
How do I remove the Win32: Trojan-gen {VB} virus?
« on: August 16, 2004, 02:17:25 PM »
Hello,

I'm new at this so hopefully this post will find an answer here. I'm trying to help a friend to find out how to remove the Win32: Trojan-gen {VB} virus. The Avast anti-virus protection program was installed just yesterday and it detected the "gen VB" virus. The Avast program cannot delete, repair, etc. the problem for some reason. I went to Google to get information and it took me to this place. Any experts out there that can inform me as to how to delete this Trojan virus would be greatly appreciated.

Thank you,
Frustrated

Offline bob3160

  • avast! √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 23939
  • Gender: Male
  • 53 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #1 on: August 16, 2004, 02:32:48 PM »
megaman04
Welcome to the forum.
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
etc. etc.
Free avast! Security Seminar: http://www.authorstream.com/Presentation/bob3160-1425909-protecting-yourself/    -  Important: http://www.organdonor.gov/
My Blog: http://bob3160.blogspot.com/ - Win 8.1 Pro 64bit, 4 Gig Ram, avast!2014.9.0.2015 Free, MBAM, WinPatrol -- How to Successfully Install avast! http://goo.gl/VLXde
                     - It's nice to be Important. - It's more important to be Nice. -

Offline maotze

  • Newbie
  • *
  • Posts: 1
  • I'm a llama!
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #2 on: August 16, 2004, 02:41:09 PM »
Hi,
I have the same problem
Virus name: Win32:Trojan-gen. {VC}
File name : C:\Program Files\Common Files\updmgr\updmgr.exe
VPS version : 0433-3, 13/08/2004
I'm using Win XP pro.
 Please advice.

Thanks.

Offline Eddy

  • avast! Evangelist
  • Serious Graphoman
  • ***
  • Posts: 9855
  • Gender: Male
  • Watching (over?) you
    • Malware removal, Biljart and other things.
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #3 on: August 16, 2004, 02:55:46 PM »
Click on the link in my signature and follow the instructions.

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #4 on: August 16, 2004, 03:46:59 PM »
Hello again,

I just got on to check for responses on how to remove the Trojan-gen {VB} virus. I noticed "Eddy" responded with "Click on the link in my signature and follow the instructions." Where is the link in your signature that I click on? I'm new to this so, please clarify. Thanks...

Offline bob3160

  • avast! √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 23939
  • Gender: Male
  • 53 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #5 on: August 16, 2004, 03:51:00 PM »
megaman04
Quote
Where is the link in your signature that I click on? I'm new to this so, please clarify. Thanks...
All the way on the bottom of his post. Next to the flag. ;D
« Last Edit: August 16, 2004, 03:55:05 PM by bob3160 »
Free avast! Security Seminar: http://www.authorstream.com/Presentation/bob3160-1425909-protecting-yourself/    -  Important: http://www.organdonor.gov/
My Blog: http://bob3160.blogspot.com/ - Win 8.1 Pro 64bit, 4 Gig Ram, avast!2014.9.0.2015 Free, MBAM, WinPatrol -- How to Successfully Install avast! http://goo.gl/VLXde
                     - It's nice to be Important. - It's more important to be Nice. -

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #6 on: August 16, 2004, 03:59:37 PM »
megaman04
Welcome to the forum.
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
etc. etc.

Hello,

This is a friend's computer so hopefully this is the correct info to your questions. The Avast version is 4, the vps version is 0434-0, the OS is Microsoft Windows Me, and these are some of the "error" messages: The files was not repaired - cannot process c:\windows\system\3drefd.exe file; another is Access denied - cannot process c:\windows\system\sexch40m.exe file; another is Access denied - cannot process c:\windows\system\ysinv.exe file. There seems to be a new file with an ".exe" name that comes up whenever I try to repair or delete. I don't know what is going on with the problem. Thanks...

Offline Eddy

  • avast! Evangelist
  • Serious Graphoman
  • ***
  • Posts: 9855
  • Gender: Male
  • Watching (over?) you
    • Malware removal, Biljart and other things.
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #7 on: August 16, 2004, 04:07:38 PM »
The problem is that the process is running when you try to remove the infected files as explaind on the page in my link. If you follow the instructions there, the system will be as clean as can be when you are done.

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #8 on: August 16, 2004, 04:14:50 PM »
megaman04
Quote
Where is the link in your signature that I click on? I'm new to this so, please clarify. Thanks...
All the way on the bottom of his post. Next to the flag. ;D


Thank you Bob,

I did click on the link next to Eddy's flag. There's a lot to do and a lot to download. According to the link I need Avast, Ad-Aware, Spybot, Hijackthis, etc.. My friend's computer already has the Avast program. Do I download the rest? Also it suggests to use/get CWShredder, Spyware Blaster and Bazooka. Are these free to download? And are they necessary to delete the "gen VB" virus or are they for future prevention? Near the bottom there are 8 steps to follow. Step 3 advises to install a firewall. Can I delete the virus without installing a firewall? This is my friend's computer and I don't know what a firewall really is. I can guess that a firewall "acts" like a firewall in a car. Can you help me on this? Thanks for your time....

Offline Eddy

  • avast! Evangelist
  • Serious Graphoman
  • ***
  • Posts: 9855
  • Gender: Male
  • Watching (over?) you
    • Malware removal, Biljart and other things.
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #9 on: August 16, 2004, 04:18:05 PM »
Everything (!) on my page is free and fully working :D
Use at least the applications mentioned in the first table.

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #10 on: August 16, 2004, 04:21:57 PM »
The problem is that the process is running when you try to remove the infected files as explaind on the page in my link. If you follow the instructions there, the system will be as clean as can be when you are done.


Hello Bob,

Thanks for your response. I think I understand what you mean by the "process is running when I try to remove the infected files." You wrote, "as explained on the page in my link." Is your link "Shortcuts for all" found on your first response? Do I follow Eddy's or your link to delete the virus? I don't mean to take up your time, but this is my first time trying to delete a virus. Thanks....

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #11 on: August 16, 2004, 04:36:04 PM »
Everything (!) on my page is free and fully working :D
Use at least the applications mentioned in the first table.

Thank you Eddy,

Do I "open" or "save" to computer when I try to download the Ad-Aware, etc.? Thanks...

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #12 on: August 17, 2004, 12:44:16 AM »
Thank you to Eddy and Bob for helping me figure out how to remove the "gen VB" virus. I clicked on Eddy's link and although it took a long time for me to remove the Trojan virus, it was worth it. There are still things I don't know and have to read up on, but it worked. I did receive an error message from the Spybot Search & Destroy program after I ran it. The message was "Spybotsd has caused an error in the KERNEL32.DLL." I am hoping it's not a critical error that needs to be fixed or deleted. I wasn't able to do anything with it. I just closed the error message. But again, thank you for your help. If something else comes up I'll send an S.O.S. on the board to get help. Thanks....

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #13 on: August 17, 2004, 10:17:52 AM »
an error in the KERNEL32.DLL."

This can be caused by lots of things..

sometimes it's too many programs starting with WIN, but
it can also be Ad-/SpyWare

Have you tried running updated SPYBOT & Ad-AWARE in SafeMode (F8-Boot) ?
Are all Windowsupdates applied ?
You might also want to post a hijackthis-log and secure your Browser better
--> See Eddy's sig., or "VirusRemoval" below in my sig for links&info

 ;)

Offline megaman04

  • Full Member
  • ***
  • Posts: 146
    • Personal Message (Offline)
Re:How do I remove the Win32: Trojan-gen {VB} virus?
« Reply #14 on: August 19, 2004, 10:56:10 PM »
an error in the KERNEL32.DLL."

This can be caused by lots of things..

sometimes it's too many programs starting with WIN, but
it can also be Ad-/SpyWare

Have you tried running updated SPYBOT & Ad-AWARE in SafeMode (F8-Boot) ?
Are all Windowsupdates applied ?
You might also want to post a hijackthis-log and secure your Browser better
--> See Eddy's sig., or "VirusRemoval" below in my sig for links&info

 ;)


Thanks for the response "whocares." You mentioned running spybot & ad-aware in safemode. I was in safemode when I ran them. I didn't do any Windows updates though. I didn't know if I was going to mess up anything by trying to do all the updates, plus I didn't know when and how to do it so I skipped that part. Eddy's instructions also included installing a firewall. I didn't do that also because I didn't know where to get one, let alone know how to install one. And I also didn't got the Host file to make deletions. I didn't know how to do that either. Do you any of the above? Thanks...

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now