Forum Discussion

Beaker's avatar
Beaker
Explorer
Jun 29, 2013

all downloads are viruses

I have been trying to download a few manuals and I get a message after downloading there they are virus. This happens with all downloads and they are deleted. And I am sure they are not.
If I click on the link that says "LEARN MORE" it leads to "Windows.Mircrosoft... which I think is a legit site.

Has anyone else run into this?
  • mchero wrote:
    I have been in the PC support end of things at a large insurance company for the last 25 years.

    I'd suggest you first go to www.superantispyware.com and download\install the free version. Do a COMPLETE scan. This is one of the best antispyware programs around! It has found "bad" that both McAffee and Norton can't. The free version will have to be run manually, about avery other day.

    For an antivirus program, if you don't already have one would be AVG Free Antivirus. You can download/install the free trial version at;
    http://www.avg.com/us-en/trustav_bt_ppc?ECID=ad:go:se:US-EN-SCH_AVG-Free&utm_source=google&utm_medium=cpc&utm_term=avg%20free&utm_content=&utm_campaign=US-EN-SCH_AVG%20Free&gclid=CIOVsaiMjLgCFcOh4AodIV0AJw

    I strongly suggest others give it a try as well.

    Thanks


    Do this and get Malware Bytes (MBam).
  • I have Malware, AVG, Spybot, forget what the other one is. Spybot showed the WIN32Downloader.exe but could not get rid of it. I've tried a bunch of things manually that I've seen on the internet but there is not a trace of this thing anywhere and I don't mind playing in the registry but have not seen anything like this.
    Will have to find a way to try the Mozilla thing. Other than not letting me download, I have seen no other damage from this(yet). Would really like to know how this thing works.
  • You might try the PC Mech Forum. Go to the Networking & Online Security section of the forum. They have always been real helpful for me.
  • The PC wasn't the problem, the problem was IE, I think Ver 10.When time allows for him, I'll work on correcting IE.I'm a believer in the KISS method.
  • Beaker wrote:
    Spybot showed the WIN32Downloader.exe but could not get rid of it. I've tried a bunch of things manually that I've seen on the internet but there is not a trace of this thing anywhere and I don't mind playing in the registry but have not seen anything like this.

    Spybot likely can't remove it because it doesn't know what it is? That's just a generic Trojan identifier, but doesn't specify which one, or if there really is a virus at all.

    You did run Malwarebytes in Safe Mode I assume? If it didn't detect anything, than I would consider using Kaspersky Rescue Disk 10. This will take the OS out of the equation, so can't be used to thwart AV detection or removal. You'll need to download the ISO file(236M), and burn to a CD/DVD. Just right click the file in Windows 7, and select burn ISO to disk.

    You'll need to set the boot order in your computer to CD/DVD drive first. It's different depending on what computer model or Bios you have. Will then self boot into Kaspersky Rescue environment.
  • I had this exact problem last week... However, it was NOT due to any virus, or other malware.

    I use Avast as my anti-virus software and one of their "definition updates" did not like working with Chrome or Firefox, and kept giving me the same message as the OP when I tried downloading manuals and other PDF files. I know my PC was clean. So, I waited a few hours for Avast's next update, installed it, and the problem went away.
  • I had this exact problem last week... However, it was NOT due to any virus, or other malware.


    Two things lead me to believe it is a virus.
    1. Saw Win32downloader.gen on Spybot scan.
    2. Acts as I seen described on Internet sites.

    Four things lead me to believe it is NOT a virus.
    1. Win32downloader.gen has disappeared from Spybot scan. I have read that it will reappear but hasn't.
    2. Have seen no other activity other than the download thing.
    3. Have checked files and registry keys described various places and can find nothing.
    4. At the end of "download is virus" warning, the LEARN MORE link leads to a Microsoft help site telling one how to avoid viruses.

    WayneLee,

    Does #4 sound like happened to yours.
    This whole thing looks to me more like a Microsoft message than virus.
    If it is, it is still a PIA!!
  • Beaker wrote:
    I had this exact problem last week... However, it was NOT due to any virus, or other malware.


    Two things lead me to believe it is a virus.
    1. Saw Win32downloader.gen on Spybot scan.
    2. Acts as I seen described on Internet sites.

    Four things lead me to believe it is NOT a virus.
    1. Win32downloader.gen has disappeared from Spybot scan. I have read that it will reappear but hasn't.
    2. Have seen no other activity other than the download thing.
    3. Have checked files and registry keys described various places and can find nothing.
    4. At the end of "download is virus" warning, the LEARN MORE link leads to a Microsoft help site telling one how to avoid viruses.

    WayneLee,

    Does #4 sound like happened to yours.
    This whole thing looks to me more like a Microsoft message than virus.
    If it is, it is still a PIA!!


    You do have a virus.

    HERE is a search using Win32downloader.gen

    Seams that only the AV you are using is picking up on it but it does not or can not remove the infection.

    Take your pick of the search results in the above link...
  • Beaker: In my particular case, Avast stopped the download and an Avast message popped up and said that the file I was attempting was contained a virus and then gave me the virus name (which I do not recall). One of the "attempted" downloads was a manual from the Samsung web site. I was able to download the manual Friday morning without any problems and without any messages. That's why I believe my particular problem was related to either a browser/antivirus conflict, or a bad virus definition set from Avast.