Help! I'm infected with a Win32 Malware-gen

Viruses and worms
1

I scanned my PC laptop (Windows XP) last night and it appears that C:\WINDOWS\Options\office_2k_premium_fr\SQL\x86\Binn\DTSWIZ.EXE is infected by a Win32:Malware-gen.

Avast has placed the file in quarantine. What do I do now?

This is the first time I am faced with the detection of a virus (or in this case a malware) so I am not familiar with the appropriate steps to take. Please bear this in mind when offering advice so I can understand exactly the steps I should take.

Thank you in advance!

2

Double Check with

MBAM http://filehippo.com/download_malwarebytes_anti_malware/
update run quick scan and click on “remove selected” to quarantine enything found, restart

SAS http://filehippo.com/download_superantispyware/

Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26

if anythig is found you can post the scan logs here for more advice

3

I ran MBAM. Only two things showed up. I don’t think they have anything to do with the Malware-gen. Since the infected Malware-gen file is in the Avast quarantine, would it even show up? Here’s the MBAM log file:

Malwarebytes’ Anti-Malware 1.41
Version de la base de données: 3249
Windows 5.1.2600 Service Pack 3

28-11-2009 12:27:44
mbam-log-2009-11-28 (12-27-21).txt

Type de recherche: Examen rapide
Eléments examinés: 110438
Temps écoulé: 3 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) → Bad: (1) Good: (0) → No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) → Bad: (1) Good: (0) → No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

4

Your log says “No Action Taken”
Scan again and when finish you click the button “Remove Selected” to quarantine the infection and restart

It will not detect files in Avast quarantine/chest

Continue with SAS

5

It seems to be a False Positive.

Please see this topic.