Trojan Horse Downloader.Generic3.MIT

Status
Not open for further replies.
First, try deleting it from safe mode.

If that doesn`t work, try deleting it using this utility HERE.

Regards Howard :)

This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
I don`t know why you can`t delete the C:\avenger\backup.zip. However, as long as the files are in that zip file, they can`t do any harm. Whatever you do, don`t unzip the files.

Try killbox to delete the file.

Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.

This is the filepath you need to enter into killbox.

C:\avenger\backup.zip

Once your system has rebooted, rehide your protected OS files.

Post a fresh HJT log and let me know the outcome.

Regards Howard :)

This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
sorry about it.there is a folder other than backup.zip which is C:\avenger\PCTools.i am able to delete the backup.zip but not that PCtools folder
 
1. Please download The Avenger by Swandog46 from HERE. Save it to your Desktop and extract it.

2. Download the attached avengerscript.txt and save it to your desktop

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by double clicking on its icon on your desktop.

Under "Script file to execute" choose "Load script from file".
Now click on the folder icon which will open a new window titled "open Script File"
navigate to the file you have just downloaded, click on it and press open
Now click on the Green Light to begin execution of the script
Answer "Yes" twice when prompted.

4. The Avenger will automatically do the following:

It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
On reboot, it will briefly open a black command window on your desktop, this is normal.
After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.

5. Please attach the content of c:\avenger.txt into your reply, as well as a fresh HJT log.

Regards Howard :)

This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
I really don`t know what else to suggest, other than try the instructions again.

I have changed the avenger script file to try and delete the pctools.dll from inside that folder.

Run the Avenger again as per the instructions in my post above.

Attach the Avenger log as well as a fresh HJT log.

Regards Howard :)

This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
That was hard work lol.

Now delete the Avenger including it`s backups from your system.

Your HJT log is still clean.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard :)

This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
Status
Not open for further replies.
Back