Win32:Trojan gen {VC} and Win32:Renos-CS [Adw]

Viruses and worms
1

I scanned my computer with the new Avast home edition and it found Win32:Trojan gen {VC} in
C:\WINDOWS\SYSTEM32\sys32.exe , i moved it to the chest as repair option was not available , is it safe to delete it ? If not then what should I do . ???

And I am constantly finding Win32:Renos-CS [Adw] in my scans specially in C:\System Volume Information_restore files and C:\Program Files\NetProject\scm.exe . What to do ??

2

You can let the file into Chest. It’s safe there and can’t harm.
I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
3

thanx for replying i will try doing what you said . :slight_smile:

4

Please, post back the results or if you need further help.

5

I just wanted to know what to do of that sys32.exe file can I safely delete it , or will it be cleaned by the procedure you mentioned ??

6

If you moved it to the chest, it will stay there until you delete it. It is safe there and can do no harm to your computer. Usually, we suggest leaving it there for about 2 weeks and re-scan it by right clicking the file while in the chest & selecting “Scan with avast…” to see if it is still infected. If by this time you do not notice anything unusual with the operation of you computer, then you can safely delete it or continue to leave it in the chest.