Frooty Loops and trojan?

[JerseygirlCT]

Suddenly AVG is telling me that there's a trojan in the Frooty Loops my son installed. Some sites are saying it's a false positive, others are full of complex instructions for getting it gone.

Anyone here know what's what with this?

Said son will be home tomorrow, and I'm hopeful he's good with me getting it gone, but will that even do the job? AVG identifies it, but says it's too big to remove, and just points me to the file itself. (I guess to remove manually? You can't just delete it like that, though, right?)

Any light to be shed on this would be much appreciated!

[Why Syzygy]

1. Do you have a name for it? nt

[JerseygirlCT]

2. PSW.Generic7.FUB

Last night, there were 4 of the same. Says too big to remove, no room in the archives.

[Why Syzygy]

4. I only find a couple

of threads. There is one on the AVG forum that didn't go anywhere. AVG does post that they recommend Malwarebytes and Spybot to remove baddies.
http://freeforum.avg.com/read.php?4,27725,backpage=

Do you have either of those? Malwarebytes is the best, imo.

Another forum, which isn't moderated up to the standards I want to see, gives advice to use ComboFix, a tool written by and for bleepingcomputer.com (not the original forum). You have the option of using bleepingcomputer.com forums for instructions for that process.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

[JerseygirlCT]

5. So I can assume that malwarebytes plays nicely with AVG?

I've got spybot at work, and it seems ok - but if you think the other is better, I'll go try that.

I've gotten the one in the recycling bin deleted - now it's just the stuff hanging out on the restore that's too big to get gone.

[Why Syzygy]

7. Oops.

Should remind you to disable AVG while you install Malwarebytes. Probably no issues, but it's the best policy. After that, Malwarebytes doesn't run in the background and so shouldn't interfere with AVG.

[JerseygirlCT]

3. I deleted the programs, but now it's still picking things up

in the recycling bin (guess I should empty that) and in the restore function of the computer.

AVG will point me to the file in the restore part - but can I safely just delete it there? It's appearing now as 6 separate infections - getting worse!

[Why Syzygy]

6. Try the

thorough process ... Install Malwarebytes, be sure to run the UPDATE. Boot into Safe Mode (restart pc and tap F8 while starting . select "start in Safe Mode"), run the thorough scan with Malwarebytes. Have it delete anything it finds. Start in normal mode.

Did AVG find these on a routine scan? Or pop up and flag them? I think the different instances you are seeing are related to the same file having been copied in the restore. Some would say turn Restore Off during the above process. If you do, all restore points are erased, but if they are infected, they are no good to you anyway. That setting is in the Control Panel > System > System Restore tab.

[JerseygirlCT]

8. Routine scan...

though only in the last few days.

I had already jumped the gun and installed Malwarebytes. It did find a number of things- but not, I think, this one. And yes, I agree, I think these are the same two files from Fruity Loops that are now sitting in the restore. They no longer seem to appear anywhere else. Guess I should have thought to turn off the system restore before deleting the programs, huh?

I'm running AVG one more time to see what's still hanging about.

[Why Syzygy]

9. Maybe you're fine.

I never had any conflicts with Malwarebytes and Avira. Avira did mess up an Avast install, evidently. It's not universal.

See what you've got now. :hi: