Never ending Win32: Malware e-gen detection of Avast

Viruses and worms
1

I probably got this on my friend’s flash disk. :frowning:
Since then, everytime I open Uniblue SpeedUpMyPC, my Avast blocks 5 Win32: Malware e-gen and it looks like they have the same folder location. I tried a boot time scanning and it detected one on some random installer and I moved it to chest and deleted it. I tried running SpeedUpMyPC again but 5 warnings always show up. The same virus name.
I also tried using Malwarebytes but it didn’t detect any infection.

Please help me.
Thank you so much sir/ma’am.

2

Hi, Welcome to forum!

You may try This:
Download Hitman Pro (or Hitman Pro 64 Bit) to your desktop, Hold the Left Ctrl Key on your keyboard and double click on Hitman Pro to run it, keep Ctrl key holding until Hitman Pro screen appear. then click on next and let it scan your computer, let it remove the malwares it find, if it ask you for license active the 30 Days trial version. after removal, restart your computer.

If it did not help, follow this: http://www.omidfarhang.com/computer/security/virus-removing

Come back let us know this result.

3

In the future, it is best to leave anything that goes into the Avast Virus Chest (VC) in there and do NOT delete it for at least several weeks. It is safe being quarantined in the the Chest. Besides, if the file(s) happened to be something essential for your system to run and you now deleted it, your machine would not work. Sometimes you can get a false positive (FP) and Avast will do an update and you can rescan items in the VC at a later date by right clicking on it > rescan to see if it is still infected or not. If is turns out to be clean at a later time, then you can restore it. But it is always wise to keep things in the VC for several weeks.

You can also check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0.

To attach a file to the forum: (Additional Options > Attach > Browse (the logs will be on your desktop > Post).

Please let us know if you have any questions. Thank you.

4

Our malware removal expert recommends using OTL over Hitman Pro. That is why I gave you that link in my post and again in the quote above. Depending on the type of infection, Hitman Pro has been known to remove important system files. So I would update and run MBAM, then OTL as suggested in the link…attach all the files. If needed, we can refer you to our malware removal expert.

5

This is called Hitman Pro force breach, it will close All running processes and will let it detect and remove running malwares too.

6

Hitman Pro didn’t work for me. It just deleted tracking cookies and a random trojan found somewhere in my notebook. :frowning:

Attached are the notepads which are the results of the scans of OTL.
Thank you so much.

7

What is the file name and location ?

Registry cleaners do have some functions that could be interpreted as malware activity by antivirus programmes due to the way that they work

One alternative at this stage would be to uninstal uniblue totally using revo uninstaller and then if you still need it re-install

8

Here’s a screenshot.
Hope this helps.

http://i52.tinypic.com/2yosbih.jpg

I’ve been using that software for months now. And after I borrowed my friend’s flash disk and inserted it without scanning first, Avast started to block 5 malwares everytime I run it.
Do I really have to reinstall it?

9

OK lets flush all temp files first and see if that works… There is no indication of a USB infection as that would normally add a mountpoint

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:Files ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

.
Then flush all restore points

To manually create a new Restore Point
[*]Go to Control Panel and select System and Maintenance
[*]Select System
[*]On the left select Advance System Settings and accept the warning if you get one
[*]Select System Protection Tab
[*]Select Create at the bottom
[*]Type in a name i.e. Clean
[*]Select Create
Now we can purge the infected ones

[*]Go back to the System and Maintenance page
[*]Select Performance Information and Tools
[*]On the left select Open Disk Cleanup
[*]Select Files from all users and accept the warning if you get one
[*]In the drop down box select your main drive i.e. C
[*]For a few moments the system will make some calculations
[*]Select the More Options tab
[*]In the System Restore and Shadow Backups select Clean up
[*]Select Delete on the pop up
[]Select OK
[]Select Delete
You are now done

10

I tried the directions above. The notepad is attached here.
When I tried running SpeedUpMyPC after that, Avast didn’t detect a malware anymore.
Is it fixed now?

Thank you so much.

11

Let it run for 24 hours and then report back ;D

12

No more detections! Yay!
Thank you so much!

13

Run OTL and hit the cleanup button to remove it ;D

14

try the best protection: http://wormblaster.net

its free good luck…

15

@ emantoyaks,

Thank you for your input, but the OP is working with a Certified Malware Expert and is in the process of completing malware removal.

@ leafstorm07,

Please complete the instructions given to you by Essexboy for the clean up process of your malware removal. Thank you.