Windows/Services.exe Trojan (can't delete - need help)

sweetdaisy

I use AVG anti-virus (free edition) and I keep on getting alerts saying that I have a trojan virus C:Windows.services.exe?

I have no idea what this is (I do know that trojan's can damage computers ect) but don't know how I got it and can't find a way to delete it as AVG just says 'ignore it'? There is no heal/delete message on the alert.

I am using Windows 7 and have in the last week been using Google Chrome instead of IE9 for my internet.

Any advice is welcome .

waddler_8

Do this - it should take 2-3 mins.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

sweetdaisy

waddler_8 wrote: »

Do this - it should take 2-3 mins.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

I tried clicking on the link but there is an untitled blank page.

waddler_8

What browser are you using?

Use IE9, right click the link and click "save target as". Then save it to your desktop.

sweetdaisy

waddler_8 wrote: »

What browser are you using?

Use IE9, right click the link and click "save target as". Then save it to your desktop.

Thanks, I am using Google Chrome. Here is the DDS.txt

sweetdaisy

(Deleted as now fixed)

waddler_8

Thanks.

Run aswMBR as below & post that log. Download it from the link below and save it to your desktop.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it...

• Double click aswMBR.exe to run it.
• If prompted, click YES to scan with Avast! virus definitions.
• Set the AVscan to Quick Scan & click the Scan button.

• After the scan reports "Scan finished successfully", click Save log & save the log to your desktop.

• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt here.

Should it report something, don't try to fix anything with it yet, just post the log

sweetdaisy

(deleted as now fixed)

waddler_8

Post the contents of attach.txt from when you ran DDS.

I can't see anything wrong in those scans - Is AVG still detecting the file?

waddler_8

Threads on it here at the AVG forums.

http://forums.avg.com/gb-en/avg-forums?sec=thread&act=show&id=209835

Looks like a possible false positive.

sweetdaisy

waddler_8 wrote: »

Post the contents of attach.txt from when you ran DDS.

I can't see anything wrong in those scans - Is AVG still detecting the file?

Yes, it's popping up all the time with AVG.

(deleted as this has now been fixed)