trojan Downloader:Win 32/Renos.gen!K

[12jetsexcell]

I have a computer that I let my grandchildren use and it has a trojan
downloader that apparently has take over as the administrator. They have
used avast to remove the infection, with out sucess. I have live one care on
two of my computers and would like to know if I add that computer to my
circle, if it will remove the virus?

 

[Mr Cat]

The simple answer is yes.
http://onecare.live.com/site/en-US/virusenc/virussearch.htm?VirusSearch=win32/renos
However, the Trojan downloads variants of SmithFraud which can not be
removed by Anti-virus programs. So you will need an anti-spyware program. I
have not seen very good success using Windows Defender with SmithFraud. I
recommend using the free version of SuperAntiSpyware at superantispyware.com
Download, install, update definitions and run a full scan. If it doesn't
fully remove everything, try again in safe mode (without networking).
BTW, you don't have to install the paid version of Windows Live One Care on
your machine. You can run a free anti-virus scan:
http://onecare.live.com/site/en-US/default.htm

 

[Ron H]

12jetsexcell, I Googled : Trojan Downloader Win32 /Renos.gen!k and
Win32/Renos.gen!k and there is alot of help with this SmithFraud variant
BUT- DO-NOT Google and click on anything about this Malware without having
Mafee's Site Advisor installed. I read something about Spybot S&D and also
that it could return after cleaning because it can be found in the
System Restore. I would try Mr Cat's advise first with SUPERAntiSpyware
it's good advise and SAS is very good with Trojan Downloaders. Ron

 

[Shoe]

There is a specific fix for SmithFraud and must be run in safe mode, here is
the http://siri.urz.free.fr/Fix/SmitfraudFix_En.php