Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
I WI W 

AVG can't remove "Trojan horse Inject3.AUPR"

My AVG anti-virus has been detecting as of today a "Trojan horse Inject3.AUPR" every 5 minutes in my Windows/Temp folder. Each detected file is an EXE with some random name. I click to remove it, AVG says it has been removed successfully, and then exactly 5 minutes later AVG finds one again.

This is the said Trojan: 

http://www.avgthreatlabs.com/gb-en/virus-and-malware-in...

When I run a system scan or a scan of the Windows/Temp it doesn't show up. I've cleared the Temp folder, removed any recent installation that could have caused this, still keeps popping up.

Help! How do I remove this thing?!
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello I W,
We regret for the inconvenience caused. Do you use a paid or free version of AVG? We request you to make sure if you have installed a new version of AVG program by following these instructions. Please remove conflicting antivirus products if any (http://avgread.me/1K1IqEh) and then remove AVG traces using remover tool( http://aa-download.avg.com/filedir/util/AVG_Remover.exe ). Please restart to complete the uninstalling process. After running AVG Remover, you may need to manually uninstall any remaining AVG files and also 'search' for a folder "AVG Remover"(usually in 'C' drive) and please delete it manually. And then install your AVG program by downloading from http://www.avg.com/us-en/download .After successful installation, we suggest you to scan your computer (http://avgread.me/1KBqgGO). If you still receive the threat pop-up, provide screen-shot (http://avgread.me/1aZxsAV) for better assistance. Thank you.
Phil GreenwoodPhil Greenwood
I have got the same problem and uninstalled AVG PRO and -reinstalled it but still get the Trojan Horse Inject3.AUPR coming back every 5 minutes after the threat has been resolved!!

Why cant AVG locate it and remove it permanently?

Thanks

Phil
Aravind GnanamurthyAravind Gnanamurthy (Avast)
Hello Phil,
We apologize for the difficulties you are currently experiencing.
I have sent you an email with further instructions to be followed to get our additional support. Please check for the email on spam or junk folders if it is not present in the inbox.
Feel free to contact us for any further assistance. Thank you.
Lorenzo CappellettiLorenzo Cappelletti
 also have the exact same problem. I have the free version of avg
AvinashAvinash (Avast) 
Lorenzo,
Is it a different file every time AVG pops up with a detection? Please try to clear your temp folder, restart your PC and check if the issue is resolved. Please, feel free to let us know if you require any further assistance. Thank you.
Lorenzo CappellettiLorenzo Cappelletti
yes, its always a different random exe. file
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Lorenzo,
We request you to provide screen-shot (http://avgread.me/1aZxsAV) of the detection pop-up for us to identify the issue. As suggested by our technician "Avinash Seshaiah", did you try to fix the issue by deleting your temporary files? Did you try to locate the path of the detected file by clicking on 'more details' in the detection pop-up? Did you reinstall your AVG program by following the instructions in this 'thread'? Thank you.
I WI W
Hello all

I think I have gotten to the bottom of this! The culprit in my case was a process called "pdfdefault", which I believe is called "web optimum", a known malware. I managed to remove it with Malawarebyte free anti-malware, and once removed it stopped producing those suspect exe's every 5 minutes and AVG stopped its alarms.

Interestingly, I uploaded several of these exe's to VirusTotal.Com, a very reliable source to verify if a file is really a virus. Only 4 out of 55 softwares identified them as a virus. So you would think it's probably a false-positive, but it actually IS a type of malware, so AVG was actually one of the VERY few who got it right. So KUDOS to AVG here I guess, despite the discomfort.

Here is the file:

https://www.virustotal.com/en/file/a0ab0527e91510d4fe1a84552b0a048a81e66b8dbe48997077901c2987e50ba3/analysis/1466888832/
AvinashAvinash (Avast) 
I W,
We would like to appreciate you sharing the valuable information which might help others on this thread.
Error FourOFourError FourOFour
Where can you find infected files like pdfdefault?  and how do you know it is infected?
AvinashAvinash (Avast) 
Hello Error,
You can find answer to your question together with your another post here https://support.avg.com/answers?id=906b0000000LSRi .
Please try keep whole conversation in one question/thread to speed up resolution. Thank you.
Alan BinchAlan Binch
@ Error FourOFour
Error, In future please refrain from carrying out multiple postings on basically the same subject! You won't obtain an answer to your query any faster!. 
AVG Guru
Ask a question
Struggling with non-AVG technology? We can fix that, too!