PDA

View Full Version : ATRAPS.Gen Active & Everywhere



Hyphen
2012-05-13, 17:30
I use Avira as my AV and regularly run their quick scan. Just this morning I ran a full scan and nearly every single active process on my machine (including winlogon.exe, svchost.exe, etc.) is claimed to be detected with "TR/ATRAPS.Gen". I have no idea how I got this. With so many files being infected, I can assume these are not false positives? As it's affecting core system files, I also assume I can't quarantine anything. How can I go about removing this infection?

I've attached Combofix, DDS, and HJT logs. Please let me know what else I can possibly do.

tashi
2012-05-13, 19:24
Hello Hyphen,

So that everyone is on the same track please see the FAQ which includes guidelines for this forum and instructions in post #2.

http://forums.spybot.info/showthread.php?t=288

FYI for future reference: Please DO NOT RUN ComboFix without being asked (http://forums.spybot.info/showthread.php?t=16806) ;)

Then start a new topic providing the DDS logs as shown in the sticky with a link back to this thread. A volunteer analyst will advise you when available. :)

Best regards.

tashi
2012-05-13, 20:36
New topic: http://forums.spybot.info/showthread.php?t=65903