Generic trojan 18.APWB

[jrdias]

It seems I have a Generic Trojan 18.APWB with reported crypt_ca8.exe in C.\windows\temp directory. It has resisted cleanup by all other major anti-virus programs and removal tools.

Report file is attached.

Greetings from Lisbon, Portugal

[Rene-gad]

- Execute following script in Manual Healing

begin
 QuarantineFile('C:\WINDOWS\system32\drivers\extit.sys','');
end.

- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=83863

[jrdias]

Tried to upload quarantine.zip. System tells me that file had already been uploaded. File is attached here. File crypt_ca8.exe still appears active (is picked up by AVG)

[Rene-gad]

- Make a log file of Malwarebytes Antimalware: http://www.malwarebytes.org/mbam.php