Author Topic: About this Win32:Trojan-gen. {Other}  (Read 27179 times)

0 Members and 1 Guest are viewing this topic.

Offline BizUnlim

  • Newbie
  • *
  • Posts: 1
  • If you can dream it you can do it.
    • Hit The Search Engines Powerfully
Re:About this Win32:Trojan-gen. {Other}
« Reply #30 on: August 16, 2004, 09:49:15 PM »
Basically, the latest VPS update should resolve all known false positives...

Hello,

I really appreciate Avast AV, but when I tried to install a new software from what appears to be a very reputable site, Avast said I had this particular trojan gen AND this one, as well, in the installation of it:
Win32:SdBot-825[trj]

And I am wondering if it is a 'false positive' or a real danger?  If so, I will have to report it to them immediately.  I want the software (and more from their site, which I seriously doubt is faulty or full of viruses) but I'm scared to execute the program now...  :P

Can you help me?  I have the latest updates of the home version in both the software and the virus database according to my Avast software.

Thank you sooooo much,
Donna
http://donnamaher.com/consumer-protection-information.html "Consumer Protection Info::Stop Identity Theft!  See links to Phishing Samples, How-To's and more :-)

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 41967
  • 59 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:About this Win32:Trojan-gen. {Other}
« Reply #31 on: August 16, 2004, 11:10:34 PM »
BizUnlim
Welcome to the Forums
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
Where exactly is the file located
Whats the name of the Download Site?
etc. etc.
Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1903 64bit, 8 Gig Ram, AvastFree 19.6.xxxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline borolo

  • Newbie
  • *
  • Posts: 2
Re:About this Win32:Trojan-gen. {Other}
« Reply #32 on: August 19, 2004, 07:14:52 AM »
Hi, I'm getting this virus also.

I'm using w98
avast 4.1 home edition
file version 0434-1

When I open the MS explorer or MSN messenger a pop up window appears and immediately the virus warning appears.
It says it's allocated in c:\windows\submit2.exe
I tell it to delete it and it reapears in c:\windows\sdkqh32.dll

I used also the avast virus cleaner with no luck.

Also used CWShredder v1.59.1 and detects: CWS affiliate:Winshow. It cleans it but it is reapearing again.

What should i do??

thanks

Offline tokenjo

  • Newbie
  • *
  • Posts: 2
Re:About this Win32:Trojan-gen. {Other}
« Reply #33 on: August 19, 2004, 09:11:30 AM »
SOLUTION FOUND!


AFTER SCANNING, DELETE THEN RESTART

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31358
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:About this Win32:Trojan-gen. {Other}
« Reply #34 on: August 19, 2004, 09:58:25 AM »
Quote
SOLUTION FOUND!
Not likely. There are likey more things that need to be done. Click on the link in my signature and follow all steps on that page to make sure your system is clean.

Offline borolo

  • Newbie
  • *
  • Posts: 2
Re:About this Win32:Trojan-gen. {Other}
« Reply #35 on: August 19, 2004, 04:13:05 PM »
Thanks Eddie, I have some of these prgrams running. I'll try them in safemode to see what happens.

I'll let you know.

Offline PaulVDV

  • Newbie
  • *
  • Posts: 2
Re:About this Win32:Trojan-gen. {Other}
« Reply #36 on: August 22, 2004, 02:22:16 PM »
Hello,

I got the same virus warning on the file c:\windows\system32\video_s32d.exe.
AVG cannot repair the file.

My AVG version is 4.1 Home Edition
Build Jun 2004 (4.1.418)
VPS 0434-2

Is this a false alarm ?

Thanks,
-Paul

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31358
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:About this Win32:Trojan-gen. {Other}
« Reply #37 on: August 22, 2004, 02:47:03 PM »
Run one or two online scanners and see if they pick that file up. Since google has nothing on it, it sure is a suspicious file.
« Last Edit: August 22, 2004, 02:47:35 PM by Eddy »

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 41967
  • 59 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:About this Win32:Trojan-gen. {Other}
« Reply #38 on: August 22, 2004, 03:01:44 PM »
PaulVDV
Welcome to the Forum.
Quote
My AVG version is 4.1 Home Edition
I didn't know they made that version! ;D
I think you meant Avast! version is 4.1 Home Edition didn't you? :)

Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1903 64bit, 8 Gig Ram, AvastFree 19.6.xxxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline PaulVDV

  • Newbie
  • *
  • Posts: 2
Re:About this Win32:Trojan-gen. {Other}
« Reply #39 on: August 25, 2004, 10:06:34 PM »
Well, yes of course, it was Avast and not AVG ! Sorry for the confusion.

When I try online scanner, I get the following :

- with Computer associates: Win32.Rbot.IF
- with Kaspersky : Backdoor.Rbot.gen
- with Avast : Win32:Trojan-gen. {Other}

Which one is the right one ? None of them can clean it. What should I do ?

PS. Avast signature is now 0435 but still reports the problem.
I will submit the file to  virus@avast.com.

Thanks,
-Paul

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:About this Win32:Trojan-gen. {Other}
« Reply #40 on: August 26, 2004, 12:13:14 AM »

I will submit the file to  virus@avast.com.


Hi Paul,
no need to report the file, if it's a confirmed detection, is there..?

here's some info&removal instructions for it:
VGREP
the red links to Trendmicro, Symantec and mcafee are usually the most helpful..

or just try deleting the file in SafeMode
and APPLY all windowsupdates, and change all your passwords..

plus follow instructions in eddy's signature, or "VirusRemoval" below..

and post a hijackthis-Log
 ;)