[solved] How To Get Rid Of Trojan Heur?

Hi everyone,

I kinda have some problem regarding on how to delete the Gen:Trojan.Heur.eG0@refG9Zmi as there are no possible action could be taken after deep system scan. Hereby, I attach the following bitdefender's log file for your reference and maybe can seek an insight on how to delete this trojan. Advices and helps would be kindly appreciated.Thanks.

BitDefender Log File

Product : BitDefender Free Edition 2009

Version : BitDefender UIScanner v.12

Scanning task : Deep System Scan

Log date : 07-May-10 00:30:13

Log path : C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1273163413_1_02.xml

Scan Paths:Path 0000: C:\

Path 0001: \

Path 0002: F:\

Path 0003: G:\

Scan Options:Scan for viruses : Yes

Scan for adware : Yes

Scan for spyware : Yes

Scan for applications : Yes

Scan for dialers : Yes

Scan for rootkits : Yes

Target Selection Options:Scan registry keys : Yes

Scan cookies : Yes

Scan boot sectors : Yes

Scan memory processes : Yes

Scan archives : Yes

Scan runtime packers : Yes

Scan emails : No

Scan all files : Yes

Heuristic Scan : Yes

Scanned extensions :

Excluded extensions :

Target Processing:Default action for infected objects : Disinfect

Default action for suspicious objects : None

Default action for hidden objects : None

Default action for encrypted infected objects : None

Default action for encrypted suspicious objects : None

Default action for password-protected objects : Log as not scanned

Scan engines summaryNumber of virus signatures : 5802281

Archive plugins : 43

Email plugins : 6

Scan plugins : 13

System plugins : 5

Unpack plugins : 10

Overall scan summaryScanned items : 645214

Infected items : 6

Suspicious items : 0

Resolved items : 5

Unresolved items : 36

Password-protected items : 33

Overcompressed items : 2

Individual viruses found : 6

Scanned directories : 11923

Scanned boot sectors : 5

Scanned archives : 10327

Input-output errors : 1

Scan time : 02:40:28

Files per second : 66

Scanned processes summaryScanned : 43

Infected : 0

Scanned registry keys summaryScanned : 1042

Infected : 0

Scanned cookies summaryScanned : 52

Infected : 5

Remaining issues:Object Name Threat Name Final Status

C:\System Volume Information\_restore{C8D8A38B-4EFD-40E5-9764-003DAB033669}\RP50\A0007474.exe=](RAR Sfx o)=]MGASetup.exe Gen:Trojan.Heur.eG0@refG9Zmi Infected (no action was possible, file was in an archive)

Resolved issues:Object Name Threat Name Final Status

[system]=]C:\Documents and Settings\3rd Reich\Cookies\3rd reich@bs.serving-sys[2].txt Cookie.BS.Serving-Sys Deleted

[system]=]C:\Documents and Settings\3rd Reich\Cookies\3rd reich@doubleclick[1].txt Cookie.DoubleClick Deleted

[system]=]C:\Documents and Settings\3rd Reich\Cookies\3rd reich@mediaplex[1].txt Cookie.Mediaplex Deleted

[system]=]C:\Documents and Settings\3rd Reich\Cookies\3rd reich@m.webtrends[2].txt Cookie.WebTrends Deleted

[system]=]C:\Documents and Settings\3rd Reich\Cookies\3rd reich@www.windowsmedia[2].txt Cookie.WindowsMedia Deleted

Objects that were not scanned:Object Name Reason Final Status

C:\Documents and Settings\3rd Reich\Local Settings\Temp\NERO13349\Cab\E4060BF5.cab=]rootFEAA0A71.img=]root.img Overcompressed Not scanned

\Program Files\Nero 7\Nero BackItUp\BackItUp_ImageTool\root.img=]root.img Overcompressed Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040110160909.zip=]1 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040310174816.zip=]3 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040310174816.zip=]4 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040310174816.zip=]5 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040310174816.zip=]6 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040310174816.zip=]7 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040610183212.zip=]9 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040610183212.zip=]10 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040610183212.zip=]11 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040610183212.zip=]12 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040610183212.zip=]13 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040810140716.zip=]15 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040810140716.zip=]16 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\040810140716.zip=]17 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041010174954.zip=]19 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041010174954.zip=]20 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041010174954.zip=]21 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041010174954.zip=]22 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041310184620.zip=]24 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041310184620.zip=]25 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041310184620.zip=]26 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041310184620.zip=]27 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041510165717.zip=]29 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041510165717.zip=]30 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041510165717.zip=]31 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041510165717.zip=]32 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041510165717.zip=]33 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041710182134.zip=]35 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041710182134.zip=]36 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041710182134.zip=]37 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\041710182134.zip=]38 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\042410174831.zip=]40 Password-protected Not scanned

C:\Documents and Settings\All Users\Application Data\XoftSpySE\6\Quarantine Archives\042410174831.zip=]41 Password-protected Not scanned

/applications/core/interface/file/attachment.php?id=6315" data-fileid="6315" rel="">1273163413_1_02.xml

Find more posts tagged with

Comments

alexcrist

Hello Justintsai911,

Please read the following How-To and follow the steps described: http://forum.bitdefender.com/index.php?showtopic=3575

Cris.

Justintsai911

Dear Cris,

I'm a newbie in using this Bitdefender 2009. As u had directed me to the forum http://forum.bitdefender.com/index.php?showtopic=3575 to delete the malware, I didn't manage to do it because I cannot find the Bitdefender Realtime Protection to disable it and also didn't manage to find System Volume Information to delete the trojan heur. Maybe if you can specifically describe step-by-step on how to do it.......

Thanks

Cristi Raducu

You can skip the part where you have to disable the real time protection and follow these easy steps:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, and then double-click System. (if you can't find Performance and Maintenance go directly to System)

3. Click the System Restore tab, and then click to select the Turn off System Restore for all drives check box.

4. Click OK, and then click Yes to initiate the restore point deletion.

To turn on System Restore again after the restore point deletion has completed, repeat these steps, but click to clear the Turn off System Restore for all drives check box.

Justintsai911

Dear Cris and Cristi,

thx anyway for the advice and help........somewhat the bitdefender had not detected the trojan........mayb it's oredi deleted by itself............thx anyway

alexcrist

OK, Justintsai911.

If you have other questions, you are welcome to post. Have a nice day.

Cris.

== CLOSED ==

== Issue solved ==