Trojan Horse Downloader.Generic3.MIT

By havoc123123
Feb 2, 2007
Topic Status:
Not open for further replies.
  1. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    First, try deleting it from safe mode.

    If that doesn`t work, try deleting it using this utility HERE.

    Regards Howard :)

    This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  2. havoc123123

    havoc123123 Newcomer, in training Topic Starter Posts: 32

    still access denied
  3. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    I don`t know why you can`t delete the C:\avenger\backup.zip. However, as long as the files are in that zip file, they can`t do any harm. Whatever you do, don`t unzip the files.

    Try killbox to delete the file.

    Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

    Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.

    This is the filepath you need to enter into killbox.

    C:\avenger\backup.zip

    Once your system has rebooted, rehide your protected OS files.

    Post a fresh HJT log and let me know the outcome.

    Regards Howard :)

    This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  4. havoc123123

    havoc123123 Newcomer, in training Topic Starter Posts: 32

    sorry about it.there is a folder other than backup.zip which is C:\avenger\PCTools.i am able to delete the backup.zip but not that PCtools folder
  5. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    1. Please download The Avenger by Swandog46 from HERE. Save it to your Desktop and extract it.

    2. Download the attached avengerscript.txt and save it to your desktop

    Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

    3. Now, start The Avenger program by double clicking on its icon on your desktop.

    Under "Script file to execute" choose "Load script from file".
    Now click on the folder icon which will open a new window titled "open Script File"
    navigate to the file you have just downloaded, click on it and press open
    Now click on the Green Light to begin execution of the script
    Answer "Yes" twice when prompted.

    4. The Avenger will automatically do the following:

    It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
    On reboot, it will briefly open a black command window on your desktop, this is normal.
    After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
    The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.

    5. Please attach the content of c:\avenger.txt into your reply, as well as a fresh HJT log.

    Regards Howard :)

    This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  6. havoc123123

    havoc123123 Newcomer, in training Topic Starter Posts: 32

    the folder is still there
  7. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    I really don`t know what else to suggest, other than try the instructions again.

    I have changed the avenger script file to try and delete the pctools.dll from inside that folder.

    Run the Avenger again as per the instructions in my post above.

    Attach the Avenger log as well as a fresh HJT log.

    Regards Howard :)

    This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  8. havoc123123

    havoc123123 Newcomer, in training Topic Starter Posts: 32

    the folder is gone.
  9. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    That was hard work lol.

    Now delete the Avenger including it`s backups from your system.

    Your HJT log is still clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  10. havoc123123

    havoc123123 Newcomer, in training Topic Starter Posts: 32

    Agree .Thanks for your help.I would not be able to clear it without your help
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.