Trojan.Generic

Threat description

Details

Category: Malware
Type: Trojan
Platform: W32

Summary

A Generic Detection has identified a file or program that has features or behavior similar to a trojan.



Removal

Automatic action

Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.

If you suspect that a file contains harmful code, or that a program is performing harmful actions, you can send a sample of it to F-Secure Labs for analysis:

You may also refer to the following articles for more information:

Or Contact Support for further assistance.

Security programs will sometimes unintentionally identify a clean program or file as malicious if its code or behavior is similar to a known harmful program or file. This is known as a False Alarm or False Positive (FP).

For example, 'tmp.edb' and other '.edb' files stored at the location 'C:\WINDOWS\SoftwareDistribution\DataStore\Logs\' may be unintentionally detected as malicious by various security programs.

Checking for a fix

In most cases, a False Positive is fixed in a subsequent database release; updating your F-Secure security product to use the latest database is enough to resolve the issue. If you suspect a detected file may be a False Positive, you can check by first updating your F-Secure security product to use the latest detection database updates, then rescanning the suspect file.

Send a sample to F-Secure Labs

After checking, if you believe the file or program is still incorrectly detected, you can submit a sample of it to F-Secure Labs for analysis and correction:

Exclude a known safe file from further scanning

If you are positive that the suspect file is safe and you want to continue using it, you can exclude it from further scanning by the F-Secure security product:

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.

Also

Microsoft provides enterprise-level instructions for excluding files from scanning by antivirus software:

More scanning & removal options

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.

Contact Support

F-Secure customers may request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details

A Generic Detection (which uses the name format 'trojan.generic.[variant]', 'trojan.gen.[variant]', or similar) has identified a file or program as having trojan-like features or behavior.

Named after the Trojan Horse of Greek legend, a trojan is a program or file that has, or appears to have, a useful or desirable function to encourage the user to install the program or open the file. For example, it may appear to be a screensaver, a service pack, an application update and so on.

Once installed or opened, the trojan may perform its promised function, or display a decoy document to distract the user. In the background however, it also silently performs unauthorized actions (its payload), without the user's knowledge or consent.

A trojan's payload can range from mildly annoying pranks (like changing desktop icon positions), to serious, user-inhibiting functions (like disabling the keyboard or mouse) to critically destructive actions (like erasing files or stealing data).

Some trojans may mimic or entirely copy the style and branding of popular legitimate programs or files, to fool the user into believing that it is authentic. Some trojans (particularly on the Android platform) are repackaged or trojanized versions of legitimate applications which have had malicious components inserted into them.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Sample

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More