WIN32: Trojan-gen {other}

Viruses and worms
1

Hello everyone,

Whilst visiting a web site I got an alert through avast regarding a Trojan, so I instantly shut IE down and done a virus check. During the memory check I got a trojan which i couldnt remove or move to chest so I done a boot scan which revealled

C:\system volume information-restore{20409EED-2503-4FBB-BEDS-5FFA5EA0-6261}\RP26\A0006861.dll

1st i tried to delete it and the scan carried on and then I realised i shudnt of done that so I stopped the scan at 40% and continued to boot, on finding it was still there I done another boot scan and this time tried to clean and after that failed i tried to move it to vault which failed, after booting up again whilst doing another scan it brought this up

File name - c:\windows\services.exe
Malaware name - Win32:Rootkit-gen[Rtk]
Malaware type - Rootkit
VPS ver - 090525-0, 25/05/2009

Unfortunatly I dont know what to do now as ive tried to move to chest and get an error "Virus chest server is not running. RPC comminication failed

If anyone knows what i can do nxt plz post

Many Thx
Robbie

P.S its on a notebook so i have no DVD drive but have USB sticks, I also have plenty more computers in the house.

2

Right,

Ive now used Malwarebytes Antimalware and it has removed all the infections but it has left all the errors on my computer it had when the virus was active, my windows firewall is greyed out so cant be switched on, my Avast online protection is not in the system tray and is not running and my IE will not goto any websites whereas when the virus was active no mater where i tried to go on IE it always took me to the same website ive never heard of.

So now im abit happier but think my puters had it.

I cant use system restore as I have a funny feeling the virus will reappear.

Can someone please advise on what I can do

Many Thx

Robbie

3

Me i can say to do a boot time scan of Avast! and if u want another respond of other user then they will respond. If i was you i will do that :slight_smile:

Maybe Avast! will see some virus or something.

Mr.Agent

4

Umm the error occured when MBAM cured ur PC, right?

So…u must bet on the SYSTEM RESORE OPTION^^

If ever the virus reappears, the guys here in the forum will most likely help u^^e.g. polonus, MR.Agent, chronoboi^^

My best of luck^^

-AnimeLover^^

5

Yeah, my pc is free of viruses but whatever the virus done it, it has stayed the same.

Not sure whether to restore or not.

Robbie

6

I doubt that very much. First post the log of MBAM you already ran.
Then run the following and post the results from them. ( with HJT, choose scan and save a log file, then copy/paste the notepad txt log )

http://www.free-av.com/en/tools/4/avira_antirootkit_tool.html

http://filehippo.com/download_hijackthis/

http://filehippo.com/download_superantispyware/