AVG - Trojan.Obfuscated.mu

[Laurence]

I just scanned with the most recent version AVG Anti-Spyware.
It said I had: Trojan.Obfuscated.mu.
It said that the Trojan was in my "System Volume Information_Restore"
and listed numerous exe files.
It also listed numerous PC Mag utilities exe's .

Could this be real?

I have googled and looked at AVG's website but didn't find much.

Thanks in Advance,
Laurence

[David H. Lipman]

From: "Laurence" <LSomething@Something.com>

| I just scanned with the most recent version AVG Anti-Spyware.
| It said I had: Trojan.Obfuscated.mu.
| It said that the Trojan was in my "System Volume Information_Restore"
| and listed numerous exe files.
| It also listed numerous PC Mag utilities exe's .
|
| Could this be real?
|
| I have googled and looked at AVG's website but didn't find much.
|
| Thanks in Advance,
| Laurence

Yes. It was found in the System Restore cache.

Interestingly, if it was found in the cache, it was at one located in the working operating
system.

The file is safe there as long as you don't restore to a previous restore point. Otherwise
you can purge the System Restore cache by disabling it and then rebooting the system Then
re-enable the System Restore cache and I suggest then manually creating a new Restore Point.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Laurence]

What about the PC Magazine utilities that it said
had the trojan?
That cannot be right.

Laurence

David H. Lipman wrote:
> From: "Laurence" <LSomething@Something.com>
>
> | I just scanned with the most recent version AVG Anti-Spyware.
> | It said I had: Trojan.Obfuscated.mu.
> | It said that the Trojan was in my "System Volume Information_Restore"
> | and listed numerous exe files.
> | It also listed numerous PC Mag utilities exe's .
> |
> | Could this be real?
> |
> | I have googled and looked at AVG's website but didn't find much.
> |
> | Thanks in Advance,
> | Laurence
>
> Yes. It was found in the System Restore cache.
>
> Interestingly, if it was found in the cache, it was at one located in the working operating
> system.
>
> The file is safe there as long as you don't restore to a previous restore point. Otherwise
> you can purge the System Restore cache by disabling it and then rebooting the system Then
> re-enable the System Restore cache and I suggest then manually creating a new Restore Point.
>

[David H. Lipman]

From: "Laurence" <LSomething@Something.com>

| What about the PC Magazine utilities that it said
| had the trojan?
| That cannot be right.
|
| Laurence
|

You would need to specifically provide what files they are and what they were deemed to be
infected with.

Your post did not have pertinent information in this area. Please provide full details.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Charani]

On Sun, 09 Mar 2008 00:51:33 GMT, Laurence wrote:

> What about the PC Magazine utilities that it said
> had the trojan?
> That cannot be right.

If you mean that AVG is finding the trojan in programs you've
downloaded from a PC mag cover disc, then, yes, it can be right.

[Judicandus]

On Mar 10, 10:08 am, Charani <SGBNOSPAM@ mail2genes.invalid> wrote:
> On Sun, 09 Mar 2008 00:51:33 GMT, Laurence wrote:
> > What about the PC Magazine utilities that it said
> > had the trojan?
> > That cannot be right.
>
> If you mean that AVG is finding the trojan in programs you've
> downloaded from a PC mag cover disc, then, yes, it can be right.

I agree with Charani.
In any case, if the files are small you can send them to
virus@grisoft.cz and they'll check if it's a false positive or will
confirm if it's a virus. (Not to mention http://www.virustotal.com)