Malware Discussions

[sparky296]

HELP! I have various Trojan_Gen infections from Trend Micro. They all seem to have infected the following folder:  C:\windows\system32\saiadt with various files inside the folder being listed. Is this a necessary file or should I delete it? Not sure if there's anything I would have to save.

[arteec]

Hi sparky296, 

Can you please send us a Virus log so we can identify if these detections are malicious or not.

Please refer to the links below on how to generate them:

If your using Trend Micro Internet Security program family:

http://esupport.trendmicro.com/Pages/How-to-view-and-export-virus-scan-logs-using-Trend-Micro-Intern...

Or, if you are using Titanium versions:

http://esupport.trendmicro.com/Pages/How-to-generate-virus-logs-for-Trend-Micro-Titanium-2011-progra...

Best regards, 

Artee

[RobM]

I continue to get the message "Security Threats Found on Hard Drive."  The threat name is:  TROJ_GEN.RC1C2GD.  Trend Micro cannot resolve the threat and I tried deleting the file but it does not delete.  Can anyone assist?

[arteec]

Hi RobM,

Can you attached the Virus log on your reply so we can check for the exact location of the detected trojan.

Thanks,

Artee

[gmonkey]

hi there,

i'm running into the same problem as the OP. I ran TwinFix and it didn't help. Essentially whenever i enter a search into google and I click a link, I'm directed to some random site.

Here's my logs

C:\PROGRAMDATA\API-MS-WIN-CORE-MISC-L1-1-032.EXE
C:\WINDOWS\SYSWOW64\ICMUI32.EXE
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\Windows\SysWOW64\icmui32.exe
C:\ProgramData\api-ms-win-core-misc-l1-1-032.exe
C:\Windows\SysWOW64\icmui32.exe

Please help!

[arteec]

Hi gmonkey,

If you are redirected to different websites, your computer might have a rootkit.

You may try running a Rootkit Buster scan to resolve this issue.

Hope this helps.

Artee