General discussion

Avast found Win32: trojan-gen

One of my computers found three instances of Win32: trojan-gen. I have no idea how it got there. In 15 years of computing, I've never got a hint of a virus except an attempted trojan 3 years ago.

Avast found them and there's not much of a clue as to what to do. Delete, Repair, and Send to Chest are the options with a VERY brief description. Any more input about this?

Discussion is locked

Follow
Reply to: Avast found Win32: trojan-gen
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: Avast found Win32: trojan-gen
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
Avast Logs

Hi,

The logs created by Avast should have more information on which .exe or file it detects as Win32: trojan-gen.
Please check the logs of Avast.
For example:
"Sign of "Win32:Trojan-gen. {VC}" has been found in "C:\WINDOWS\system32\killapps.exe" file."

If you have the location of the 'detected' file by Avast and have access to it, please send it to any of the following single file online scanner:
http://www.virutotal.com
http://www.virscan.org
http://virusscan.jotti.org

See if other malware scanner will find it as infected also. If not, it is maybe false positive especially if Heuristic is enabled.

Also you can try to scan using another antimalware scanners to check if Avast is correct or not:
Malwarebytes Antimalware: http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
SUPERAntispyware: http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html
A-squared Free: http://www.download.com/A-squared-Free/3000-2239_4-10262215.html

- Collapse -
False Positive?
- Collapse -
How do I upload virus?

Thank you all!

A few folks have recommended that I upload it (the virus, or the path - location?) to virustotal. I moved them to the Avast Chest. How exactly do I do this?

- Collapse -
You need to restore the suspect fle Chris

If it's in the 'chest' of avast and want to upload for further scanning by 35 malware scanners... you will need to restore the file. Be careful about this because it is maybe false positive or maybe not.

- Collapse -
To restore from Avast's Chest

Open Avast program
Click on the "Chest" then locate the file that you want to restore.
Right-click the file then select "restore"

- Collapse -
Avast found the same Win32: trojan-gen on my computer also .

It found mine in C:\ program Files\music-now\inetchk.exe ("is infected by Win32: Neptunia-Kh (Trojan) So i deleted it...No problems so far, it's been 3 days now.

- Collapse -
music-now\inetchk.exe
- Collapse -
I found same infection with newly installed Avast

I just installed Avast, set it to highest sensitivity and did a thorough scan. It took 10hrs 34 minutes to complete my 3 hard drives of 730GB combined, probably about 3/4 full.

It found two infections. One was Win32:Trojan-gen {other} in C:\WINDOWS\Mailswitch.ocx. I put it in the chest. Will see what happens.

- Collapse -
I would suggest running an on-line scan......

Run an online scan with Kaspersky WebScanner.

Note: You must use Internet Explorer to run this scan, and you must disable your Anti Virus program during the scan.

Click the Accept button.

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
o Scan using the following Anti-Virus database:
Extended (if available otherwise Standard)
o Scan Options:
Scan Archives
Scan Mail Bases
* Click OK
* Now under select a target to scan:
Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display the results if your system has been infected.
o Now click on the View scan report link:
* Click the Save report as button
* Under Save as type, choose Text file (*.txt)
* Save the file to your desktop as Kaspersky.txt
* Copy and paste that information in your next post.

CNET Forums

Forum Info