Win32: Trojan-gen.UPX

system · November 10, 2004, 10:28pm

Hey guys…probably another simple problem for you to fix but its beating me. Firstly i’d like to say thanks for providing excellent free antivirus software…i seem to be infected by this virus trojan thingy

Cant seem to find out much about it…didnt think i had it untill yesterday when just after Avast had updated. The alert then popped up…so is this a new trojan or is it old? When i pops up ive just pressed deleat in the past…is this good? Ive never seemed to have had much luck with repairing or moving to chest…the viruses just seem to come back!

Thanks for you help.

C Vallender

Eddy · November 10, 2004, 10:36pm

What file is infected and what is its location?

system · November 10, 2004, 11:24pm

Hey…how do you find out where it is infected?

Thanks

Eddy · November 10, 2004, 11:50pm

Avast tells you when it is detected. You can also check Avast’s log file.

system · November 11, 2004, 1:40pm

Hey…found it.

The file name is a0082348.exe

Its in c:\System\ Volume\ Information_restore{then a load of numbers}RP420

If you need the numbers please let me know. So is this serious? What are the measures i need to take to erradicate the trojan?

Thanks

C Vallender

Eddy · November 11, 2004, 1:44pm

1] Disable system restore
2] Reboot
3] That’s all. Problem solved

system · November 11, 2004, 5:05pm

Can i re enable system restore afterwards?

Thanks for the advice

DavidR · November 11, 2004, 9:35pm

If you have run a scan to confirm your computer is clear, yes.

system · November 11, 2004, 10:05pm

okay this is REALLY bad you guys, I signed up to ask you all a question. I have the same virus the guy who made this thred has but its in c:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\wjm3urj <that being the trojan. I have tried deleating it, super deleating it, deleating it with avast, the last option i have is to encrypt it (wich I believe locks it like moving it to a quarentien) I SERIOUSLY need some help on this you guys. If the encrypting/deleating don’t work I’m out of options. (fyi i even used a hidden process viewer, im in win98 btw, to check hidden process. now either that virus is smart enough to hide from that or its got some NICE protection.) but another thing is i noticed there was a problem when kerio personal firewall AND avast antivirus failed to load on bootup (even AFTER I specifially checked run\msconfig\startup to prove it was checked for it) so I’m guessing it disabled both. so I have one word to say. HEEEEELLLLLPPPPPP!!! O_O

Win32: Trojan-gen.UPX

Announcements