It seems I have a Generic Trojan 18.APWB with reported crypt_ca8.exe in C.\windows\temp directory. It has resisted cleanup by all other major anti-virus programs and removal tools.
Report file is attached.
Greetings from Lisbon, Portugal
Printable View
It seems I have a Generic Trojan 18.APWB with reported crypt_ca8.exe in C.\windows\temp directory. It has resisted cleanup by all other major anti-virus programs and removal tools.
Report file is attached.
Greetings from Lisbon, Portugal
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
QuarantineFile('C:\WINDOWS\system32\drivers\extit.sys','');
end.
[/CODE]
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.
[/CODE]
- Upload the C:\quarantine.zip here: [url]http://virusinfo.info/upload_virus_eng.php?tid=83863[/url]
Tried to upload quarantine.zip. System tells me that file had already been uploaded. File is attached here. File crypt_ca8.exe still appears active (is picked up by AVG)
- Make a log file of Malwarebytes Antimalware: [url]http://www.malwarebytes.org/mbam.php[/url]