Member Avatar for rtl71

I just downloaded and installed AVG program

Scan resulted in 2 infections

Both listed as:
\WisBar Lite \keygen.exe";"Trojan horse Generic8.SWQ";"Moved to Virus Vault"


WHat is this and what should I do about it?

Thanks for any information you can provide

  • 2 Contributors
  • 2 Replies
  • 70 Views
  • 21 Hours Discussion Span
  • Latest Post Latest Post by rtl71

Dani AI

Generated

Good call bringing this here. As noted, AVG putting the file in quarantine (the Virus Vault) prevents it from running, but the new popups mentions suggest other adware/PUP remnants may still be active. Tools labelled "keygen" are frequently bundled with unwanted software, so do not run or restore any of those downloads.

Recommended next steps you can take now:

  • Leave the file quarantined and, if you did not intentionally need it, delete the original download.
  • Update AVG and run a full system scan; then reboot to Safe Mode and run another scan.
  • Run a dedicated anti-malware scanner (Malwarebytes is a common second-opinion tool) to remove PUPs and adware (https://www.malwarebytes.com/).
  • If you kept a copy of the suspicious file, upload it to VirusTotal to see how multiple engines classify it (https://www.virustotal.com/).
  • Check browser extensions, toolbars and your installed programs; reset browsers if toolbars or redirects persist. Use Autoruns or the browser settings to remove unknown startup items.
  • If problems persist, run a second online scanner or Microsoft Safety Scanner, and consider changing passwords and backing up important data before doing a clean OS reinstall (https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download).

If you want, post the results of a Malwarebytes or AVG full-scan log (redact any personal info) and we can help interpret them and recommend next steps.

Member Avatar for Godsp3ed

It has been moved to the vault, you need not worry about it now. :)

Member Avatar for rtl71

Thank you. I will continue daily scans. Lots of pop ups now that I didn't have before though.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.