Expert: Brian Benosky - 2/18/2009

Question
Hi Brian,
Thanks for getting back to me and with the good news that my HJT log indicates that my pc is infection-free.  I do have another issue now, all of a sudden, that came up just today on my other pc.  My other pc is separate and not in any way networked with the other pc we have been dealing with, just for your initial info.  But first before I describe that, I would like to ask you about the your last response in which you mention that a few trojans had managed to get installed into my pc and that the ComboFix had now deleted them.  After that there is a list of links to three web addresses.  I have not yet clicked on these links because I wanted to ask you first what happens if I do.  I assume perhaps that these are links to an explanation or description of those trojans?  Not sure though, so just wanted to ask you first, before clicking on them to find out.

Okay, on the other pc today after Trend Micro did its regular scanning, it notified me (actually my wife, who happened to be using the pc at that time) immediatly after it finished something to the effect that it had detected "30 possible or unresolved threats" and then after that said that it had resolved all of them but that it would "need my help" in determining what to do with one threat that it apparently did not resolve.  It gave the option to "Fix" apparently, so my wife selected to fix.  She said after she clicked on the Fix button, nothing seemed to happen and no indication or message beyond that.  She closed things out and then closed the online connection.  In the Trend virus log for today it shows about 30 identical items in the list, all of which are listed as TROJ_Generic.DIT.  When you highlight these to see details of file(s) affected, it shows C:\Program Files\Acer GameZone\Bricks of Egypt\audio.   Additionally on that log page for these items  it describes the "action taken" and has a "First Action" as well as a "Second Action".  Under "First Action" it says "Ignored Sucess" with each of these items, and "Second Action" is blank.  As well, the "Status" for each of these items listed is shown as "Ignored Success."   Since all this happened, so far there has been no obvious sign of unusual behavior by that pc.  

I ran a scan with newly updated Malewarebytes antimalware program, and the result was nothing bad found (or however it specifically indicates such).  Brian, could you please comment/advise on this particular trojan and/or any further steps I should take with the pc in relation to the occurance I just described?  Thank you again.

Answer
Hi Steve

You are correct in that the links I gave you are descriptions of the infections.  I thought that you may wish to see what was on the computer.  
According to several forums and newsgroups I have read, the TROJ_generic.DIT is a known false detection. Ignore the findings. Trend Micro is aware of the problem and is working on a solution.  Keep Trend updated regularly and you will get the fix in one of the updates.

Brian