Trojan called 'Trojan.Generic.2582177' on my system

[seanysean]

Hi,

I have Window7 Ultimate 64 bit on my system. I use Bitfender as my antivirus software. This morning it informed me that it has found a file infected with a virus called 'Trojan.Generic.2582177' which it cannot clean. I've contacted Bitfender to see if they know what I should do but haven't heard back. I did this through the Bitfender Support panel in the software itself but now I'm worried that (because of the virus) the info from my machine may have been sent to some hacker somewhere.

I've found the infected file. It's in my Mozilla profiles folder and is called 'permissions.sqlite'.

Does anyone know what this virus is? Can I just delete the file? Will that solve it or make it worse? If I do delete it will it affect my system in any other ways?

Thanks.

SJ.

 

[maxie]

Hi .... How big is the File ? .... Could you upload it to Virus Total ? ....

I would do a Scan with Malwarebytes ....


http://www.sevenforums.com/tutorials/338716-malwarebytes-anti-malware-free.html

 

[seanysean]

Hi,

Thanks for your reply. I'm currently running a full system check with Bitfender to make certain it's the only infected file.

I've downloaded the Malware Bytes software you recommended but I'm waiting for Bitfender to finish before I run it.

The file in question is 64kb. What is Virus Total?

Thanks again.

SJ.

 

[maxie]

VirusTotal is a website that provides free checking of files for viruses. It uses up to 54 different antivirus products and scan engines to check for viruses that the user's own antivirus solution may have missed, or to verify against any false positives.


https://www.virustotal.com/

 

[seanysean]

Hi,

I tried Total Virus and it found nothing (even with Bitfender). I ran MalwareBytes and that also found nothing.

I looked at the original alert message from Bitfender on my system and the file name actually reads 'permissions.sqlite-journal'. This could be a file name but it might just refer to a specific facet of the file 'permissions.sqlite'. I don't know. If there is a file called 'permissions.sqlite-journal' in that folder then it must be hidden somehow and I don't know how to find out.

Right now Bitfender is telling me there's a virus on my machine that it can't remove and I seem to have no way of doing anything about it.

That's quite worrying.

SJ.

 

[seanysean]

I found a site with a free download that claims to remove this type of virus.

Remove Trojan Generic - Solution

Has anyone used this? Does it work?

I've been doing some research on this virus and it seems to be pretty bad so I really want to get it off my system as soon as I can.

 

[Layback Bear]

Advance System Care is by IObit.
I recommend using nothing by that company.
Have you ever had anything by IObit on your computer before? It just might be where the infection came from.

 

[seanysean]

OK, thanks for the advice. I'll avoid it.

 

[jonnyhillow]

I am no security expert but i must say be very very careful with what comes up on Google about fixes for a particular Trojan /virus etc..

Some of these fixes are not fixes at all and are put there by the malware authors themselves, no joke . They are very very creative these days.

If you had not already checked with Virus total i would say use an on demand scan, Kaspersky's free virus scan is excellent as is Eset's on demand scanner . Emsisoft is also a great one .

If all else fails use Bitdefenders rescue disk .

 

[seanysean]

OK so there is advice here and a number of packages recommended:

I need to get rid of a Trojan Horse virus from my Windows 7 PC. Is - Microsoft Community

I've already tried MalwareBytes and it found nothing. Does anyone know the other software recommended by this user? Good or bad?

Thanks.

 

[maxie]

You can not have any faith in one Antivirus Program ... You have had it checked with over 50 and found nothing ? ...

 

[seanysean]

Well I uploaded the suspect file to Total Virus and I got a long list of anti virus software each with a green circle containing a white tick inside it. I assume that means that all the software has found no problems with the file. The 'Detection rate' states: 0/52 which presumably means 0 infections detected in 52 checks. If I hover over the green circles with my cursor, however' I get a pop-up message stating 'File not detected'. Not sure if that's normal.

SJ.

 

[maxie]

Yes it means nothing Detected .... Any news from Bitdefender ? ...

 

[Slartybart]

It's a generic name, so the AV program found it using heuristics.

Aliases: trojan.generic.[variant], gen:trojan.[variant]
Category: Malware
Type: Trojan
Platform: W32

Summary: A file or program that appears to have trojan-like features or behavior.
....
A trojan that is identified by a detection using the format 'trojan.generic.[variant]', 'trojan.gen.[variant]' or similar indicates that the program was identified by a Generic Detection. Unlike single-file detections which identify unique files, a Generic Detection looks for broadly applicable code or behavior characteristics to evaluate a file's potential for causing harm ...

These are often false positive detections - the file you submitted to Virus Total passed (0/52)

---

Try following this guide:
How to easily clean an infected computer (Malware Removal Guide)

There have been issues reported against RogueKiller (step 5) - it seems to be system dependant, each machine is different. Given that, I suggest skipping Step 5 Rogue Killer.

The scanners are well trusted. You should plan on running through the guide in one session (malware tends to root itself again if left to it's own devices).

Most of the scanners run in less than 1/2 an hour, but there are 8 or 9 of them - so do the math (4.5 hours). ESET online scanner is the longest and might take a few hours by itself.
Be patient and let the scanners do their job.

The only time you should override the scanner's decision is if you are absolutely certain that the program is NOT malware.

Pay attention to the restart prompts and directions (do NOT restart after step 2: RKill - don't let the names confuse you, there are two pgms that sound similar).

Post the logs here if you want SevenForum members to assist you.

After you've finished running through all of the scanners - check that your system files are valid:
Please follow the instructions in OPTION TWO of http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Copy C:\Windows\Logs\CBS\CBS.log to your Desktop (it is a protected file so you cannot attach the original)

Attach the copy of the entire CBS.log to a new post.

Thanks

 

[seanysean]

OK, confused now. I ran the Kaspersky System Scan and the TDSSKiller and both say there are no infections found on my machine. TDSSKiller took about 17 seconds to complete, not 30 minutes. MalwareBytes and Total Virus also say my system is clean but Bitfender still says the file ('permissions.sqlite' or 'permissions.sqlite-journal') is infected and can't be cleaned. I've heard nothing from Bitfender so far despite contacting them twice today.

I haven't noticed any unusual behaviour by my machine. Despite the fact that a number of recommended packages all say my machine is ok there's an unpleasant nagging doubt in my mind because of what Bitfender is saying. I've researched what these generic trojans can do and it seems they're pretty nasty so I'd love to be certain there's nothing wrong. Is the only way I can find out for sure just to wait to see if things go wrong? Should I go through all the processes on that list even though TDSSKiller didn't find anything?

Thanks.

SJ.

 

[Slartybart]

17 seconds is less than 30 minutes - correct? I said Most of the scanners run in less than 1/2 an hour

BitDefender might be reporting a false positive - I also said that. Why are you confused?

You only mention two of the scanners in the guide - run the rest.

I'm not sure you're following the guide - the only Kaspersky mention is TDSSkiller (no mention of Kaspersky System Scan)

I'll repeat: if you want help from SevenForum members, follow the directions and post information. It's ok to ask questions, but Despite the fact that a number of recommended packages all say my machine is ok there's an unpleasant nagging doubt in my mind because of what Bitfender is saying. I've researched what these generic trojans can do and it seems they're pretty nasty so I'd love to be certain there's nothing wrong. Is the only way I can find out for sure just to wait to see if things go wrong? is the wrong question.

Run through the guide if you want to be as sure as possible of a clean system. Or you can rely solely on Bitdefender and ignore the other scanners, Virus Total, and SF member's help.

Your call. I don't have anything else to offer.

 

[Jacee]

Let's see if it's "adware" ... Please download AdwCleaner by Xplode and save to your Desktop.
Step 1.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder


******Post both .txt logs

 

[seanysean]

Hello Slartybart,


Thanks for your help.


The response you quote was in reply to a recommendation from another member. The attitude you express is unwelcome, and wholly uncalled for. It’s the kind of attitude normally reserved solely for people on the internet who don’t have to be looked at in the eye when being spoken down to. I doubt very much that you’d use that tone when directly addressing your spouse, a friend, a client, your boss, a colleague or even a child. You may find my lack of experience and understanding frustrating but the fact that I know less that you in your field does not make me stupid and it certainly doesn’t give you any right to speak to me as such. If you’re having a bad day then consider the possibility that I am too as are most other people in the world, probably.


I ran all the software in the list and still found nothing so it looks like the problem may be with Bitfender and not my machine.



Thanks again.


SJ.

 

[Slartybart]

Hello Slartybart,

Thanks for your help.

The response you quote was in reply to a recommendation from another member. The attitude you express is unwelcome, and wholly uncalled for. It’s the kind of attitude normally reserved solely for people on the internet who don’t have to be looked at in the eye when being spoken down to. I doubt very much that you’d use that tone when directly addressing your spouse, a friend, a client, your boss, a colleague or even a child. You may find my lack of experience and understanding frustrating but the fact that I know less that you in your field does not make me stupid and it certainly doesn’t give you any right to speak to me as such. If you’re having a bad day then consider the possibility that I am too as are most other people in the world, probably.

I ran all the software in the list and still found nothing so it looks like the problem may be with Bitfender and not my machine.

Thanks again.

SJ.

Sorry you took offense, nothing ill-willed was intended.

I did not know you were responding to someone else - you weren't explicit.

For the record, I speak directly to most people - some people take it the wrong way ... then I have to explain. C'est la vie!

I don't consider the level of another member's computer literacy when suggesting something and I make a concerted effort to provide details in the steps I offer.

When It appears that the other member is not following the suggestion or might be self medicating on other boards or Google, I am a bit more assertive. I also try to allay any fears and am quite honest about there being no guarantees.

When I can't offer any more help, I say so.

Thought you deserved an explanation, but I will not be following this thread ... because it's solved.
Seek first to understand and then to be understood

You should probably keep the pressure up on BitDefender for an answer.

Glad you feel more comfortable after running the scanners.

 

[DonnaB]

Hello Slartybart,


I ran all the software in the list and still found nothing so it looks like the problem may be with Bitfender and not my machine.



Thanks again.


SJ.

I agree. If only BitDefender found it, and Virus Total came out clean, I wouldn't worry about it. I'm almost sure it is a False Positive and will be fixed in an upcoming update in BitDefender.

Still, I would follow Jacee's instructions found here and scan with AdwCleaner. I'm curious to see what else it finds that needs to be removed as well.

Donna