swapna alice

Join Date 05/2008

Help!!! Infected by virus

I do trading from my pc. A few days earlier I had downloaded and installed a trading software called TradeAnywhere.
Today when I scanned my system for viruses in boot time mode using Avast antivirus, it said a file in system folder is infected by a virus. I chose to delete. This is the report part:

08/26/2008 19:01
Scan of all local drives

File C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\N3QV0XUW\partner[1].exe is infected by Win32:Rootkit-gen [Rtk], Deleted

Scanning aborted
Number of searched folders: 2132
Number of tested files: 63683
Number of infected files: 1

Was it a system file?
Thanx

Locked Post

Advanced Search

Watch this post

Do not email me updates for this post Email me updates for this post

Successfully updated karma reason!

Don't think so, it looks like something a website loaded into your Internet Explorer's filecache.
As long as you didn't/don't run that file, and your Anti-Virus got rid of it, you should be ok

Successfully updated karma reason!

Philly0381

Join Date 11/2004

+844

swapna alice unfortunately AV programs do come up with false postivies. I'm not saying this is the case here.

You may need do a little research. First you might go to Avast and try to verify that there is a known problem with the software you downloaded. Second go to the home page of the maker of the software and get them to verify whether there is a problem. Then you can search the web and see if there is a know problem that may have been identified and posted.

Was this freeware, shareware, free version of a paid program or a paid for program?

Successfully updated karma reason!

Island Dog

Join Date 06/2003

+1048

Try this.

http://housecall.trendmicro.com/

Successfully updated karma reason!

File C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\N3QV0XUW\partner[1].exe is infected by Win32:Rootkit-gen [Rtk], Deleted

While I'm not certain what this file is or does, you can be certain that it's not a system file. Anything located in the Temporary Internet Files\Content.IE5\ directory is something that was downloaded by the user or a website the user visited. It may be an application installer, but with a name like that, it could be virtually anything.

Successfully updated karma reason!

You might want to try discussing at this link.

http://forum.avast.com/index.php?topic=34661.0;prev_next=next#new

Successfully updated karma reason!

Its a freeware recommended by a reputed company.
The only reason i fear is its main directory c:\windows
though I have backup of all my data yet i wished to be certain it wasnt a system file.
Thanks

Successfully updated karma reason!

Was it a system file?
Avast deleted it.
Will it deletion cause any instability?

Successfully updated karma reason!

swapna: try to get CCleaner, it will help you to get ride of any "Temporary Internet File", this files aren't part of the main system, they are more like part of your IE history aka cookies'; also, CCleaner can help you fix any registry issues (NOTE: CCleaner may show any problem when you do a Registry scan, if it show more than ten, dont panic! take the time and Google them, each one to see what it is

Successfully updated karma reason!

Anyone plz

Successfully updated karma reason!

Philly0381

Join Date 11/2004

+844

Was it a system file?

I think reply #4 answers that.

Will it deletion cause any instability?

Nope.

Have you tried to research the problem yet? The program very well be okay.

Successfully updated karma reason!

starkers

Join Date 05/2004

+1153

Was it a system file?
Avast deleted it.
Will it deletion cause any instability?

You should be just fine.... often nasties will give the appearance of being a system file to blend in/hide themselves but are they NOT system files and can be safely deleted.

According to the Avast report, the 'offending' file was in your temporary internet cache so you should not experience any system instability due to its deletion. You may find, however, that it may have been an ActiveX type component to assist the downloaded program, in which case it should tell you, but if it works OK without it don't worry about it.

PS, if the program says the file is required, do a check on its properties/abilities, etc , to be on the safe side before reinstalling.

Successfully updated karma reason!

I should trust Avast. I will see in next days what happens. Hopefully nothing. Thanx all.

Successfully updated karma reason!

Was it a system file?

Anytime you are concerned you have deleted a system file, it can easily be replaced by typing
SFC /Scannow as a Run command it will require your Windows CD unless you have a Utility Partition of Windows.
also helpful if your computer starts acting weird for any reason. It simply makes sure all your Windows Protected foles are intact and replaces your DLL cache.

Successfully updated karma reason!