Exploit.pdf-payload.gen Cannot Locate To Manually Remove.

I scanned twice and it came up that no action could be taken. I searched my computer for the file, the virus, and just can't seem to locate it.

C:\Users\Jen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5

Exploit.PDF-Payload.Gen

Delete Failed (file was in an archive)

How do I get rid of it.......how do I find it to get rid of it? I am a dunce when it comes to this stuff so explain it like I am five. :huh: Thanks

Find more posts tagged with

Comments

alexcrist

Hello Jeffiner,

Open Internet Explorer, go to Tools -> Internet Options -> General. Under the category Browsing history click on Delete, select Temporary Internet files and click Delete.

Rescan with BitDefender to make sure the infection is gone.

Please post the result.

Cris.

Jeffiner

Thank you, I actually did try that in between the two scans. I will give it another shot. I typically delete the temporary internet files so I am not sure why it was stored in the first place.

alexcrist

If it doesn't work, please attach the latest scan log.

Jeffiner

If it doesn't work, please attach the latest scan log.

Okay, I won't be back for a long time though. The scans have been taking all day. They used to take an hour or two, now they take up to eleven. I don't have a lot of stuff saved on the computer so I am not sure why it started taking so long. Thanks for your help.

alexcrist

To speed up the process, you can only scan that location. Go to C:\Users\, right click on Jen and select Scan with BitDefender.

Jeffiner

To speed up the process, you can only scan that location. Go to C:\Users\, right click on Jen and select Scan with BitDefender.

It did not delete. Here is the log.

BitDefender Log File

Product : BitDefender Antivirus 2009

Version : BitDefender UIScanner v.12

Scanning task : Contextual Scan

Log date : 2/15/2010 7:55:55 PM

Log path : C:\Users\Jen\AppData\Roaming\BitDefender\Desktop\Profiles\Logs\contextual\1266281755_1_02.xml

Scan Paths:Path 0000: C:\Users\Jen

Scan Options:Scan for viruses : Yes

Scan for adware : Yes

Scan for spyware : Yes

Scan for applications : Yes

Scan for dialers : Yes

Scan for rootkits : No

Target Selection Options:Scan registry keys : No

Scan cookies : No

Scan boot sectors : No

Scan memory processes : No

Scan archives : Yes

Scan runtime packers : Yes

Scan emails : Yes

Scan all files : Yes

Heuristic Scan : Yes

Scanned extensions :

Excluded extensions :

Target Processing:Default action for infected objects : Disinfect

Default action for suspicious objects : None

Default action for hidden objects : None

Default action for encrypted infected objects : None

Default action for encrypted suspicious objects : None

Default action for password-protected objects : Prompt for password

Scan engines summaryNumber of virus signatures : 5077064

Archive plugins : 44

Email plugins : 6

Scan plugins : 13

System plugins : 5

Unpack plugins : 8

Overall scan summaryScanned items : 0

Infected items : 0

Suspicious items : 0

Resolved items : 0

Unresolved items : 1

Password-protected items : 0

Overcompressed items : 0

Individual viruses found : 0

Scanned directories : 0

Scanned boot sectors : 0

Scanned archives : 0

Input-output errors : 0

Scan time : 10:56:40

Files per second : 0

Scanned processes summaryScanned : 0

Infected : 0

Scanned registry keys summaryScanned : 0

Infected : 0

Scanned cookies summaryScanned : 0

Infected : 0

Remaining issues:Object Name Threat Name Final Status

C:\Users\Jen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BJ6RR8OU\oHf770e4f1V0100f080006R6e466e69108Tbc0167d5201l0409K5332743c317[1].pdf=](FI

ELD) Exploit.PDF-Payload.Gen Delete Failed (file was in an archive)

LPC

Jeffiner, I had the same problem recently. Deleting temporary internet files manually is difficult; often they are hidden. The best way to delete ALL temp internet files is to use a program specially designed to do that - and delete them permanently, so that they cannot be reinstalled by anyone malicious. Go to Piriform - they have a FREE program called "CCleaner". Download, make sure that you put the settings to "secure delete" and then let the program do it for you. Or another one is "Advanced System Care" from iobit. That has a free version, too! That should clear out the offending item from your temp int files. Good luck!

LPC

PS Don't forget to come back and let us know if it worked!

Nathanxx

I got the same virus yesterday. Same problem: my virus protection couldn't delete it. Couldn't find it to manually delete it. Found this forum. Downloaded CCleaner from here:

http://www.filehippo.com/download_ccleaner

Installed and ran CCleaner and my virus protection now tells me that virus is gone!

Thank you et merci beaucoup to LPC for the suggestion!

LPC

Glad to have been of service! It's a very useful program.