Trojan not removed

AikevanderH · February 2014

My F-secure scanner finds regularly the following virus:
GEN:Trojan.Heur.JP.wzZ@au. (and some more letters)

F-secure does not remove the virus (if it is one), but goes on detecting it.

My computer runs on Windows 8.1

I am an F-secure user via the Dutch provider www.xs4all.nl

Regards, Aike van der Hoeff

Simon · February 2014

Have you tried scanning with Malwarebytes?

http://www.malwarebytes.org/free/

NikK · February 2014

A generic Trojan detection is a detection of a file that appears to have trojan-like features or behavior.

Trojans are not Viruses, but I assume the reasons for not sometimes being able to automatically clean them are the same:

http://community.f-secure.com/t5/Security-for-PC/Viruses-were-found-but-were-not/ta-p/31309

Rusli · February 2014

There are many methods to solve this problems. In sequence...

Namely...

Firstly, I suggesting if you can download free version of malwarebytes and do a Full Scan from this link.

http://www.malwarebytes.org/

If malwarebytes found nothing, the next option is to download Hitman Pro.

From the link below.

http://www.surfright.nl/en/downloads/

If the above still did not detect any you can download. DrWeb Cure it. Free Download And do a Full Scan.

http://www.freedrweb.com/cureit/?lng=en

There are others... which you can try out.

Bitdefender Online Scanner.

http://www.bitdefender.com/scanner/online/free.html

Otherwise, if any of the above methods did not detect any.

I recommend that you download the AVIRA Rescue System ISO. From this link. And burn it to a CD-R blank Disc to your DVD Burner.

http://www.avira.com/en/download/product/avira-rescue-system

or

You can use a Kaspersky Rescue CD. Download and Burn it to a CD-R or DVD-R.

http://support.kaspersky.com/viruses/rescuedisk#downloads

And Do a Full Scan.

Note:-

Click on Kudos button to the person who have solve your problems.

AikevanderH · February 2014

I did the full computer scan, and the online scan. No results.

Rusli · February 2014

See the link above.

Tell you what, download the AVIRA Rescue Disc and copy it to a thumb drive and reboot your computer and do a full scan. Make sure you download the antivirus engine to keep it updated.

or Kaspersky Rescue Disc

Another thing is that make sure your f-secure qurantine file is empty.

And do a full scan again.

Rusli · February 2014

To create a bpotable rescue disk on a Thumb Drive.

What you have to do is to download the ISO file of AVIRA Rescue Disk or Kaspersky Rescue Disk.

Next Download, Linux Pendrive.

http://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/

And follow the methods here.

http://www.ubuntu.com/download/desktop/create-a-usb-stick-on-windows

Or if this is too troublesome for you.

The quick and easy way is to download the ISO and burn it to an empty CD-R disc.

http://www.ubuntu.com/download/desktop/burn-a-dvd-on-windows

Insert the BURN ISO AVira or Kaspersky Rescue Disc and reboot the computer and make sure select the DVD option rom bios setting.

Read the documents below ...

http://www.avira.com/documents/products/pdf/en/man_avira_rescue_system_en.pdf

AikevanderH · February 2014

I tried Malwarebyte, started 1 our ago, found nothing

Simon · February 2014

When F-Secure find this 'trojan', does it tell you where it is on your computer, ie, a path to the file?

NikK · February 2014

To see the full path to the file:

From the scan results window, try right click on the "infection" and then select Properties...

Simon · February 2014

I was wondering if the simplest solution might be to find it and delete it manually, providing it doesn't look like it's in a system folder?

Simon · February 2014

Just another random thought - if an infected file is archived or zipped, and F-Secure cannot deal with it for that reason, if the zip file were to be opened and the rogue file extracted, would F-Secure instantly zap it before it got a chance to execute?

NikK · February 2014

Yes, the real-time scan will detect it.

"By default, compressed or archive files, such as ZIP files, are not scanned in real time. F-Secure's antivirus products scan the archive files automatically once you attempt to extract or execute their content."

From http://community.f-secure.com/t5/Security-for-PC/Testing-your-virus-protection/ta-p/18294

Simon · February 2014

So then, it should, in theory, be safe to open a known infected archived file, for F-Secure to dispose of it. Anyone want to try? Smiley Very Happy

NikK · February 2014

If you're unsure, first test with the Eicar files mentioned in the link I posted. You can test an executable file "eicar.com", a zip file including the eicar file, nested archives(a zip file including another zip file that includes eicar.com).

Or the coolest: you can create an eicar file yourself using a text editor.

AikevanderH · February 2014

@Simon wrote:
When F-Secure find this 'trojan', does it tell you where it is on your computer, ie, a path to the file?

no it does not

AikevanderH · February 2014

@NikK wrote:
To see the full path to the file:
From the scan results window, try right click on the "infection" and then select Properties...

I'll try this, the next time F-secure finds the virus

NikK · February 2014

You could try this: http://community.f-secure.com/t5/Security/F-Secure-Online-Scanner-All-You/m-p/42449

It has a "DeepClean" function.

Or maybe: http://www.microsoft.com/Security/Scanner/en-us/default.aspx

AikevanderH · February 2014

Thanks to everyone who wrote messages and tried to find answers.
I tried a couple of solutions, but none of them worked, and others were too complicated (in my opinion).
Yesterday I decided to re-install Windows 8.1. First 8.0, then updates and then on to 8.1. All is clean now.

Regards, Aike van der Hoeff

Trojan not removed

Hello, guest!

Comments

Hello, guest!

Quick Links

Categories