Good way to get rid of Win32:Trojan-gen

[Hornus Continuum]

From the help file:

Quick Scan. Only the possibly dangerous files are scanned, according to their extension.  It means that the files with extensions EXE, SCR, COM, DOC, etc. are scanned.  Within the file, avast! looks only for those viruses that infect the corresponding type of file.  It means that macroviruses are not searched for in EXE files etc.

Standard Scan. Only the possibly dangerous files are scanned, according to their content.  The file extension is ignored.  Again, only the viruses corresponding the the particular file type are searched for.

Thorough Scan. All files are tested, against all viruses.

Regards,
Hornus

[Freeman]

Igor,

Well, I deleted the contents of the .rar file so I was just left with the 'solid SFX RAR archive', and I still received the virus warning. The site from which I downloaded the file from is here (or here for a direct download).

Hope that helps.

Cheers!

[igor]

Thanks for the links. I'll pass the file to be checked.

[seancoles]

I have the same notification of Win32:Trojen-gen it was found at c:\winnt\winlogon.exe
c:\winnt\explorer.exe  

[seancoles]

also at

C:\WINNT\system32\rep.EXE
C:\WINNT\system32\rmtcfg\files\secure.exe

any suggestions?

[igor]

Well, you can also send the files to virus(at)avast.com to be checked.
However, in your case - the winlogon.exe file really looks suspicious to me... (in my opinion, the winlogon.exe file should be inside the system32 directory, not in the windows root).