trying to remove TR/trash.gen trojan

Discussion in 'Malware Help (A Specialist Will Reply)' started by jlawnt, May 25, 2010.

  1. jlawnt

    jlawnt Private E-2

    Hi
    I am trying to remove this trojan. It was suggested that I scan with malwarebytes. I did a quick scan and no infections were found. I then did a full scan and an infected file was found. Before malwarebytes finished the scan an avira message came up saying there was a trojan( the one above) every time I go to delee or move it to quarantine it reappears and malwarebytes is not able to finish scanning. Could you suggest how I should proceed. I am not aware as to where this trojan is

    thanks in advance
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Well where does your anti virus report the file?

    Welcome to Major Geeks!

    Please read ALL of this message including the notes before doing anything.

    Pleases follow the instructions in the below link:

    READ & RUN ME FIRST. Malware Removal Guide


    and attach the requested logs when you finish these instructions.
    • **** If something does not run, write down the info to explain to us later but keep on going. ****
    • Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
     
  3. jlawnt

    jlawnt Private E-2

    Hi

    Thank you for responding to my dilemma. I had begun the things that you suggested and did a superspyware scan and a malwarebytes scan the other 2 stalled on me and it wasn't till later I read the hints where it said do not use a flash drive to put the 4 programs on the infected computer. However in saying all that here are the reports form the 2 that worked. I have attached them as txt files.
    I await your response.

    jlawnt
     

    Attached Files:

  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    What do you mean by stalled? Tell me what exactly happens when you try to run combofix or MGTools.exe?

    Answer the below questions:

    Do you have MGTools.exe directly in the root folder of your Windows Boot drive? (usually this would mean saved here C:\ )

    Do you have combofix directly on your desktop?
    No it mentioned that you could use a flashdrive or CD to transfer tools to the sick PC.

    You didn't answer my question about this either. Where does avira report that the threat exists?

    If you have MGTools.exe and combofix.exe in the correct locations and STILL have trouble running them then you will have to try running them in safemode as without those logs there is not much I can do to pick out any malware that remains after the other scans.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds