Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Robert FaberRobert Faber 

Backdoor.generic_c.akaf

Has anyone had luck removing the trojan horse backdoor.generic_c.akaf? If so, how did you do it? Thanks.
KishoreKishore (Avast) 
Hello Robert,
Could you please let us know about the AVG program installed on your PC and does the AVG program has detected the infection? Please have a look at this link http://bit.ly/1L1jM3k to know more about the Trojan Horse infection.
Thank you.
Robert FaberRobert Faber
Hi Kishore,

I am running AVG AntiVirus Free Edition.

AVG Zen version: 1.31.1.48846
AVG Framework version: 1.52.1.51616
AVG Setup version: 1.52.1.51612

Virus database version: 4522/11554 (2/4/2016, 9:17 AM)

AVG indicates my protection is up to date, and it does detect the trojan horse backdoor.generic_c.akaf at the following path: 

C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\vista2\systemAgeDetect.jse

Every time I run the scan, it tells me it has repaired the file, but it keeps detecting the virus.


Thanks.
KishoreKishore (Avast) 
Hello Robert,
We have sent you an email containing the instructions to have a better assistance in fixing the issue. Please feel free to contact us for further assistance.
Thank you.
Robert FaberRobert Faber

Here's an update, for those wondering:

I followed the instructions contained in AVG's e-mail, and gave remote access to my computer to an AVG tech support representative. They downloaded some additional free AVG components to my computer (I'm not sure if they were necessary, but I suppose I can remove them). They also downloaded something called "PC Doctor for Windows" (again, I suppose I can remove it).

They performed a scan using AVG, and also using "Adware Removal Tool by TSA" (which wasn't on my computer to begin with, so I'm assuming they installed it; however, I cannot find it in my list of programs - perhaps it's the same thing as the "PC Doctor" software that I saw them install?). 

The scans detected the trojan horse backdoor.generic_c.akaf, and both scans indicated that the infected file was healed. However, the trojan horse was detected on subsequent scans.

The tech support representative then checked the Resident Shield log from the initial detection of the trojan horse. The Resident Shield log has a section named "Extended element information", and in this section it lists a process name of "c:\Program Files\Malwarebytes' Anti-Malware\mbam.exe". 

The representative then told me that there isn't actually a trojan horse virus on my computer. He said that AVG is continually detecting a trojan horse due to a conflict between it and Malwarebytes. Since Malwarebytes is trying to take access of my computer settings, he said, AVG detects it as a virus.

Which is all well and good, but I'm left wondering about a few things. Firstly, Malwarebytes isn't new to my computer. It and AVG had co-existed peacefully until today. So why all of a sudden did AVG begin to detect it as a virus? I hadn't even updated Malwarebytes since 2012.

Secondly, if the conflict with Malwarebytes was the cause of the "false trojan horse", why does AVG continue to detect it at C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\vista2\systemAgeDetect.jse? Why wouldn't it detect it in a Malwarebytes file?

Thirdly, after my session with the tech support representative ended, I uninstalled Malwarebytes and ran another AVG scan. It is still detecting and "healing" the infected file. If the cause of the problem was a conflict with Malwarebytes and Malwarebytes is no longer on my computer, why is AVG still detecting the trojan horse?

So ultimately, AVG assured me that there isn't actually a trojan horse on my computer, but I am left somewhat suspicious of that determination.

Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Robert,
We are sorry for the delay in responding. If you suspect that AVG detected an ordinary, non-malicious file as 'threat', we suggest you to report 'false detection' through the form http://www.avg.com/submit-sample .Such detection is unwanted and is usually fixed in the next antivirus update.  In order to identify the issue, we suggest you to follow the instructions in the email I have just sent to your registered email address. Please follow the email instructions to get additional support from our expert technicians. Thank you.
Ask a question
Struggling with non-AVG technology? We can fix that, too!