Win32:Trojan-gen

[AZGal]

Great! I have this permanant screen stareing at me that calmly indicates that "there is no reason to panic, however..." lol easier said than done.  It seems that I have contracted a Trojan virus  :'(  Well, have to say after 20+ years this is the first experience for me    I ran avast and I thought that everything was fine, but it still seems to be here.  First, should I "move to chest" as an available action?  I tried "repair" said that is was unsuccessful at that.  Would someone please take this "blonde" by the hand and get me thru this... A million thanks in advance.  I'll just be sitting here refreshing my screen to see if there is a brave soul out there who would like to take on this challenge  

[Eddy]

Please tell us the exact name of the virus. What file (and location) is infected and what version of windows you are using.

[AZGal]

Virus Name: Win32: Trojan-gen {Other}
File name: C:\Documents and Settings\DefaultUser\MyDocuments\Data\MemWatcher2.exe
VPS Version: 0403-11, 03/16/2004

My OS is WinXP Home

Let me know if you need anything else.  Thank you sooo much!!

P.S. Should I choose "Move to chest" and cancel the balance of my disk scan?

[AZGal]

Whoops, hang on - More Info:

Java bytever.a
Not cleanable
C:\Doc&settings.......ApplicationData\Sun\Java\Deployment\cache\java......

Is this better info?  So far 3 infected files (all with the same name/info)

[whocares]

Should I choose "Move to chest"

yes

[AZGal]

OK, the prior info on the 3 files is the balance of the virus attack.  Now what do I do? :'(

[AZGal]

........and for some additional good news! It's now saying after attempt to clean that it can not access the files    Sunday I thought to myself, "you better go back to bed, this may not be your day"  Well, now, Wednesday, I'm beginning to think that that is not going to be my WEEK,  

[whocares]

Hi,

- please also read the other posts on trojan-gen: lots of advice there !!!

close all programs/browsers when you're trying to delete infected files

- clean your java-cache: control panel -> java-plugin -> Cache -> empty/delete files -> OK
- delete any remaining files manually, maybe with avast shield paused

[AZGal]

Woooohooooo!!!   It's gone! Thanks so much to all who advised/suggested steps to take.  I have read the prior posts and you are correct, there is a lot of GOOD information there and actually all over the site. Hats off to the originator of the site, Good idea - Great Job!  It's comforting knowing that IF and SHOULD you feel threatened by what a roughly 2 1/2' X 2 1/2' metal box can do to your life, lol, there's always someone here that will come to your rescue! I'm sure we all appreicate it (I know I do) Thanks again!  Have a great day everyone!

[pareto]

 
I got  trojan win32:Trojan-gen {VC}.
already disabled system restore and let run avast, but it could not delete it.
system: XP home edition 2002
infected file: c\programme\save\save.exe

thanx for help! regard me as a software rookie!

[RejZoR]

Open task manager and terminate save.exe process. Now delete this file Also go to Start\Run... ,type in msconfig and uncheck save.exe file on Startup tab.

[aremang82]

hi
i'm really need help for my problem
i use windows xp
when Win32:Trojan-gen {other} attack my *doc file,
everything with microsoft word (*doc) became size 638 k.bit
when i use avast, it recommendly to move to chest. it succesfull but the original *doc file become missing/hidden
but the file always right there just i cannot find.
 can some one help my problem? Pleaseeeee
p/s sorry, my english language are poor.
 thank.

[fedya]

Hello!
I don't sure, but, may be when I start downloading file on this page
"http://freeware.ru/program_prog_id_19769.html", my resident scanner Avast! was turned off by this virus. After that, I reboot this servise, it informed me, that this file is infected. Do you know about this?

[polonus]

Hi fedya,

First try to make this link you give non-clickable so the curious won't get infected, by either putting hxtp:// or wXw. Did you upload the file to virustotal.com and what results did you get there?
DrWeb give this: Error

Can't fetch file pointed by your url. This may be caused by several reasons:

    * Remote file is not available (not found, requires authentication, permission denied)
    * Remote site is down, or very slow, or busy
    * No network connectivity between Dr.Web online server and remote web-site
    * File too big

polonus