i have 3 virus... help me

Viruses and worms
1

hi…

I have 3 virus in quarantine. How do I clean the files without having to delete them?

log:

Sign of “Win32:Trojan-gen {Other}” has been found in “C:\WINDOWS\system32\PV92Tray.exe” file.
Sign of “Win32:Trojan-gen {Other}” has been found in “C:\WINDOWS\PCTEL\PV92TRAY.EXE” file.
Sign of “Win32:Trojan-gen {Other}” has been found in “C:\WINDOWS\system32\trz3.tmp” file.

thanks…

2

You can have the choice to move the chest and let them for few weeks and to delete them :slight_smile:

3

Does this ring any bells (excuse the pun) PCtel HSP V.92 modem Configuration Utility, e.g. are you on dial-up and is your modem type ?

If so it is possible that the detection on pv29tray.exe could be a false positive and needs to be confirmed, see below ####.

I believe the detection on trz3.tmp is good as a google search on that file name returns many hits some giving associations with malware. The other point is what is a .tmp file doing in the system32 folder, that to me is also suspect. Because of this association with malware I would suggest scans with other tools, see below ~~~~.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If you haven't already got this software (freeware), download, install, update and run it, [i]preferably in safe mode[/i] and report the findings (it should product a log file). 

- 1. [url=http://www.superantispyware.com][b]SUPERantispyware[/b][/url] On-Demand only in free version. - 2. MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.
4

ok, thank you very much DavidR. :wink:

5

You’re welcome, is that your modem ?0

Let us know the results URL of the virustotal scan and we can give further advice as required.

6

i have cable-modem

7

If from that Company it may be legit (or if you had it before) ?

Otherwise the detection might well be good on a file using a legit file name to hide its purpose. That is why we suggest using VT.