View original (French)

Win64:Malware-générateur

ptb35 -  
MisteryBean Posted messages 8948 Registration date   Status Moderator Last intervention   -
Hello, after scanning my computer with Avast I notice that I must have been infected by a virus called Win64:Malware-gen. I had to quarantine several files:

- Windows update > C:\Windows\SysWOW64
- unp141595076.tmp > C:\Windows\Temp\_Avast_
- unp225285852.tmp > C:\Windows\Temp\_Avast_
- unp121636899.tmp > C:\Windows\Temp\_Avast_
- wuault.exe > C:\Windows\SysWOW64

For now these files are in quarantine, however every time I run a scan on the computer it always finds these same infected files, what do you recommend?

Thank you for your help and see you soon!

Configuration: Windows / Edge 92.0.902.62

3 answers

  1.
    MisteryBean Posted messages 8948 Registration date   Status Moderator Last intervention   1 292
     
    Hello,

    We will start with a PC diagnostic:

    Read the entire procedure before posting the reports

    AVAST: disable the protection before the analysis
    https://www.windows8facile.fr/avast-desactiver-antivirus/

    -----------------------

    Reports FRST.txt and Addition.txt are expected

    All reports must be hosted on https://security-x.fr/up/ and you should indicate the obtained links in your response

    ---------------------------------------------------------------------------------------------

    --> The SmartScreen filter may trigger an alert. Click on Actions or More information then on Run anyway

    ---------------------------------------------------------------------------------------------

    --> Download the FRST version of Farbar, compatible with your system and save the file to your Desktop

    --> For a 32-bit system
    --> For a 64-bit system

    How to know which version 32-bit or 64-bit is running on my system?

    --> Wait for your browser to offer you the download to save, without clicking anywhere, especially not on the sponsors of the page.
    --> Close all applications, including your browser
    --> Double-click on FRST.exe and click Yes to accept the Disclaimer
    --> Under Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
    --> Wait until it states The tool is ready to work
    --> In the main menu, click on Scan and wait for the analysis to complete
    --> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
    --> The reports are saved in the same location as the tool and under C:\FRST\Logs

    0
  2. ptb35
     
    Hello and thank you for your quick response!

    Here are the files you requested:

    - FRST > https://up.security-x.fr/file.php?h=R29b4346fee6bcf561527df012aa3c170

    - Addition > https://up.security-x.fr/file.php?h=R4449fd332bc95311707c480a02bd1139

    See you soon!
    0