Trojan Horse

[Patri]

I have a trojan horse (psw.generic6.AQPD) on my macromed\flash
It cannot be healed, AVG says. I am running McAfee right now to find it with them.
What should I do?
TIA

 

[Don]

The first thing to do is to turn off your System Restore. If you don't, the virus gets recopied to your working system from the back up copy stored there after you try to clean it.

 

[Patri]

Where is the system restore?
A message also says the action was interrupted by user (as far as trying to isolate trojan).

 

[TUGBrian]

in situations like that...I always attempt to start up the computer in safe mode and rerun any scan.

worth a shot at least.

some instructions on how to do that

http://support.microsoft.com/kb/315222

 

[26weeker]

i updated avg free 11/15/08 and was able to remove this trojan horse. run avg again after updating. good luck

 

[Don]

Where is the system restore?
A message also says the action was interrupted by user (as far as trying to isolate trojan).

Right click the "my Computer" icon on your desktop. Click on properties on the menu. click the "System Restore" tab and check the "turn off System Restore" box. Click OK.

 

[Mosca]

My latest version of AVG Free found and killed it. More troubling is how I got it; I don't know. I don't visit oddball places and look at strange sites from work.

There isn't a lot of info on psw.generic6.AQPD. There is some confusion as to whether it is really a Trojan, or an updating tool. I did update Adobe Reader and Flash yesterday, and I found the timing of our occurrences interesting. Still, I'm happy it is gone.

Edit: Just from yesterday to today, the number of Google hits for psw.generic6.AQPD have gone from 6 to over 1,000. Every one is reporting it as found by AVG, and every one says it occurred after updating Adobe Flash. It is a false positive. The latest update of AVG fixes the false detection. Update your AVG and rescan, it will be gone.

 

[Patri]

Thanks everyone.
Don, when we had windows My Computer was on my desktop. With Vista I couldn't find it. Found something similar but the options weren't exactly the same.
Brian, I had already gone to the Microsoft site and it wouldn't open.
Everyone, in frustration I finally turned off the computer and went to bed. Maybe AVG ran again while I was trying things.
Today no warnings have popped up, so based on your posts, I would like to think it is gone. I'm trying to remember if I recently updated Adobe Flash. We also don't go to strange websites so no other cause comes to mind.
Many thanks again.

 

[calgarygary]

Thanks everyone.
Don, when we had windows My Computer was on my desktop. With Vista I couldn't find it. Found something similar but the options weren't exactly the same.
Brian, I had already gone to the Microsoft site and it wouldn't open.
Everyone, in frustration I finally turned off the computer and went to bed. Maybe AVG ran again while I was trying things.
Today no warnings have popped up, so based on your posts, I would like to think it is gone. I'm trying to remember if I recently updated Adobe Flash. We also don't go to strange websites so no other cause comes to mind.
Many thanks again.

Patri, I would not assume that the Trojan Horse is gone. It would be well worth doing a search on your antivirus's home site to determine exactly how to be rid of that specific trojan horse. In many cases, it will require more than what your antivirus program can do and often needs editing of your registry.

 

[Mosca]

Patri, I would not assume that the Trojan Horse is gone. It would be well worth doing a search on your antivirus's home site to determine exactly how to be rid of that specific trojan horse. In many cases, it will require more than what your antivirus program can do and often needs editing of your registry.

That particular hit has been confirmed as a false positive generated by an update to Adobe Flash. AVG has released an update to their algorithm that no longer calls it a Trojan.

 

[Don]

That particular hit has been confirmed as a false positive generated by an update to Adobe Flash. AVG has released an update to their algorithm that no longer calls it a Trojan.

I had this happen when I got an upgrade from Embarq (dsl). The free built in virus scanner, from F-Secure, found "UpgradeTool_340ACZ8D0UPG_V01.exe" and called it a virus, even though it was a major part of the upgrade. I'm glad to know there is nothing to worry about.
My wife got all worried several nights ago when one of the news anchors in Ft.Meyers (NBC) told the entire area about the "Postcard from Hallmark" virus warning, how Microsoft is gearing up to stop it, and how it will burn out your hard drive. Yes, its the same email that's been going around for 2 years now and has been blown out of proportion. But the original sender CHECKED it out on Snopes so it must be true! Right! Oh, if only they would read what they say they checked out; or, maybe if they understood what they read....I get so tired of those email virus warning that are usually false alarms,