TR/Patched.gen found by Avira.Could someone please help?

josha007

Hi all. I've been having a problem with what I think is a virus.

I'm pretty good with deleting viruses and having all the correct programs to deal with anything, but I'm stuck with this one. I was helping a friend with his laptop and swapped his anti virus software to Avira. It immediately found something and the box that came up said:

TR/Patched.gen was found in file c:/windows/system32/wininit.exe.
Access to this file was denied.

I've tried running a full scan of Avira and also a full and quick scan of Malwarebytes but it keeps appearing. It says it moves to quarantine but it just keep coming back. It's not affecting the computer it seems at the moment but it's very annoying that the box keeps appearing.

Does anyone have any idea how I can get rid of it?Is there a program which might help?

Thanks in advance.Josh

closed

you'll have to be careful, because deleting that file might stop you logging in

post a hijackthis log, and malwarebytes log

can it be wiped/factory restored?

texranger

if you have the OS disc you can try7 and search the disc for the file and just upload that file fresh from the disc.

josha007

Hi guys. Thanks for the help. My friend has taken his laptop with him so I can't do the Hijackthis log or Malwarebytes log today. He may be able to do it tomorrow. He doesn't use a log in for the computer. Do you mean can the computer be erased, or the virus? It basically says that it's going into quarrantine.

closed

I meant can the computer be wiped (after backing up data)

waddler_8

c:/windows/system32/wininit.exe

Upload it to VirusTotal & see what other scanners make of it.

http://www.virustotal.com/

Do an online scan.

http://www.eset.co.uk/Antivirus-Utilities/Online-Scanner

GunJack

....or Hitman Pro for a multi-vendor second opinion