Win32: Trojan-Gen Is Ruining My Life -- Help Me Please!

[system]

@mauserme post:19

The trojan alerts have stopped, right? SP2 won’t install on an infected computer.

Yeah, so far everything looks fine. I’ve scanned my laptop a few times this weekend and Avast finds no infected files. Yay!

Those McAfee files won’t seem to go away though. Weird. My computer is weird; likes its owner.

[system]

@DavidR post:20

@xfilesfangirl post:14

Okay, I just read that turning off System Restore deletes all old restore points. I think I’ll just leave it turned off if that’s not a bad idea.

Unless you have something to replace the system restore function, an effective back-up and restore strategy, then NO you shouldn’t leave system restore disabled.

I have SR disabled, but I do a weekly image of my hard drive using an imaging program that makes an exact copy of your partition/drive and saves a copy to a second hard drive (or partition, a bad idea IMHO) or to a DVD. I also make daily or more frequent back-up of my data files or things that I don’t want to lose, emails, address book, favourites/bookmarks, registration keys/information, etc.

So if the worst comes to the worst I restore the last weekly image and last daily back-up any loss is minimal.

Okay, I turned System Restore back on per your advice. Thanks!

[system]

@xfilesfangirl post:21

Those McAfee files won’t seem to go away though.

Your could try this:

Open HijackThis again and click Open the Misc Tools Section. Then click Delete and NT Service. In the empty field type (or copy and paste) each of these lines individually, clicking OK after each of them

McAfee E-mail Proxy McAfee Redirector Service McAfee Real-time Scanner McAfee SystemGuards

[DavidR]

@xfilesfangirl post:21

Those McAfee files won’t seem to go away though. Weird. My computer is weird; likes its owner.

McAfee has an uninstall tool that you could run to ensure any possible remnants are removed.
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe

[system]

@mauserme post:23

@xfilesfangirl post:21

Those McAfee files won’t seem to go away though.

Your could try this:

Open HijackThis again and click Open the Misc Tools Section. Then click Delete and NT Service. In the empty field type (or copy and paste) each of these lines individually, clicking OK after each of them

McAfee E-mail Proxy McAfee Redirector Service McAfee Real-time Scanner McAfee SystemGuards

Hmm, that didn’t work for some reason.

Also, maybe you might know but whenever I try to create a restore point with System Restore it stops responding. I’ve restarted and restarted my computer but it still stops responding after a few seconds.

[system]

@DavidR post:24

@xfilesfangirl post:21

Those McAfee files won’t seem to go away though. Weird. My computer is weird; likes its owner.

McAfee has an uninstall tool that you could run to ensure any possible remnants are removed.
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe

Aw, it says it can’t install some of the files after I download it.

[DavidR]

What files is it saying it can’t install and just as importantly why ?

We thrive on information without it we can’t even guess.

What McAfee application did you have ?

[system]

Try this - click Start>Run

In the empty filed type services.msc and click OK.

Locate each of the four McAfee services and on each right click and then click Properties. Set the Start Up type to Disabled. Reboot and post a new HJT log.

[system]

I got same problem, but under different folder, how to delete it?

Malware name: Win32:Trojan-gen. {Other}

file name: C:\WINDOWS\Installer\591bf.msi\Binary.NewBinary23%MAINDIR%\assist\xpstyle.dll

[system]

Try AdAware SE (free version)

http://www.lavasoftusa.com/download_and_buy/product_comparison_chart.php

Then start a new thread if further help is needed.

[FreewheelinFrank]

Hi lychee,

It could be this:

http://www.emsisoft.com/en/malware/?Adware.Win32.3721+Chinese+Keywords

Try the free version of a-Squared, but first look in Start>Control Panel>Add/Remove Programs for

3721 Technology Co
Chinese Keywords
CNSMin

or similar and uninstall from there if found.

Also run scans with AVG Anti-Spyware and Spybot Search & Destroy:

http://free.grisoft.com/doc/20/lng/us/tpl/v5
http://www.safer-networking.org/

[DavidR]

Ad-Aware SE Personal Edition (Free)