Possible Malware threat.

[Adrian McNair]

Hello,

I recently ran a routine set of scans with Malware Bytes Anti-Malware, AVG 2015 and Spybot SD 1.6.2.46. MBAM and AVG came up clean. Unfortunately, Spybot did pick up something - Win32.downloader.gen.

I tried to remove it but got the following message.

"Unexpected error in fixing problems.
(Cannot create file "C:\Windows\wininit.ini". Access is denied)"

I followed your instructions to remove it here. Most of the listed programs didn't pick up anything. And what few results did come up were in RogueKiller. They were listed as BHOs. I removed them. But other than that nothing came up that qualified as a true Trojan/Malware.

I ran another scan with Spybot but it was the same story. Win32.downloader.gen reared its ugly red head once more. Despite this I haven't experienced any symptoms. The only glaring thing about all of this is the fact that Spybot picked it up.

Should I be concerned about this or is this merely a false positive on Spybot's part?

 

[TwinHeadedEagle]

Hello,

Can you give me a picture or report what exactly Spybot detected.

This program is outdated and it is not used as before so you shouldn't believe its scan results.

 

[Adrian McNair]

Hello,

Can you give me a picture or report what exactly Spybot detected.

This program is outdated and it is not used as before so you shouldn't believe its scan results.

I can give you both. Here's the text version in case the image I've uploaded doesn't work:

Win32.Downloader.gen 1 Entries Malware-C
(SBI $82F4FAFD) Data

C:\end

So it's outdated? That version of Spybot was the most recent one I could find on the Safer Networking site. Anyway, I hope this helps.

 

[TwinHeadedEagle]

No, this is false detection. I reviewed your reports and PC seems clean.

 

[Adrian McNair]

No, this is false detection. I reviewed your reports and PC seems clean.

I see. So if that's the case is there any way to prevent that false positive from appearing in future scans (add an exception like one would with AVG)?

 

[TwinHeadedEagle]

I do not recommend usage of Spybot at all. MalwareBytes will be enough.

 

[Adrian McNair]

I do not recommend usage of Spybot at all. MalwareBytes will be enough.

So I should uninstall it then? That's fine by me if so.

 

[TwinHeadedEagle]

Correct.