Vista shows WIN32-PWS-LINEAGE virus detected

Hello, I´ve the problem as shown above. Thr search didn´t show me any useful help. So I started this topic. After starting via shortcut-button on desktop the game AirConflicts (bought an original CD and sucessfully installed - and played for several times/weeks !!!!!!), now the system is announcing a virus: win32 PWS lineage is detected. Installed antivirus is: Kaspersky Personal Sec Suite, always up-to-date and Norton Antibot, I was wondering. No alert, nothing. No firewall instead of a router (WLAN, WEP2 crypted). Microsoft shows Bearshare (P2P) as a source. I uninstalled immediately bearshare (prob. not all). I checked Google for help. There they told me to make some online-virus checks. OK, running sucessfully, detected some adware, deleted. Nothing special. Then - tested the game AFTER UNINSTALLING and re-installing. NOTHING has changed. Ever Symantec, who offered a special removal tool, didn´t found anything. ????? Actually DrWeb is still running for nearly 4 hours, detected some adware and one Trojan.downloader 62623 (a few minutes ago). Thats all. Strange: The detected virus from Microsoft is only infecting Win2000 up to XP, even the date of issue is 2005. What must I do, so you can help me? Thanks, Michael

Wecome to the WTT Forums…
What you are describing may well be a malware issue.

I suggest you download Trendmicro's Hijackthis to your desktop.

• Double click it to install
• Follow the prompts and by default it will install in C:\Program Files\Trendmicro\Hijackthis\Highjackthis.exe
• Open HJT Scan and Save a Log File, it will open in Notepad
• Go to Format and make sure Wordwrap is Unchecked
• Go to Edit> Select All…..Edit > Copy and Paste a new log into the HijackThis™ Logs and Infections Removal Forum here

and have a Malware Expert look over your log for you.

DO NOT have HijackThis fix anything until you get advise from an expert.

Good Luck

Hello Alpha2m1,

[external image: Posted Image]

We hope you enjoy the forum. You will get the best of assistance here to be sure.

Hi Catbyte,

Good post for Alpha2m1 to follow, but the link in your last bulleted instruction is dead, so I suggest this link for New Members would be a good alternative. It covers all you suggested and more with Erunt registry backyup which is very important.

kind regards,

Thanks Tallin….

OOps….not sure why the link didn't work??

Thanks for having my back Tallin…

sorry about the bad link Alpha2m1

http://forums.whatthetech.com/HijackThis_L…emoval_f27.html

This is the proper forum link

That's fine Catbye, as Digerati said lately, there should be a law against links breaking like that. I have a habit of always testing mine as soon as I post the preview of my posts, as I got caught many times leaving the OP wondering! or

Best regards,

Hello, thanks to CATBYTE and TALLIN. I will follow your advice asap. Here in Germany its now time to go to work. So I can start this, but prob. I could not finish it at once. I´ll be back soon. So long, Michael

Hello Michael,

I see you have successfully posted your HJT log in the correct forum. Good job. The Malware fighters are very busy, in fact over worked really as there is a shortage of accredited fighters on the internet.

Please be patient and do not be tempted to answer your own log as they look for unanswered posts.

If you have not had a reply to your log in 5 days, please send a gentle reminder here.

kind regards,

Hello tallin, yes, I´ll wait, of course. By the way, I retried the game (-> ac.exe ), but still appears this error/warning from vista: virus detecetd, win32 psw lineage …… So, I´m glad, that somebody could help me, even in 1 week or later. Thank you, best regards, Michael

Michael, You will get help before one week I would bet money on that……Just that they are all volunteers and have real jobs, just like you. It is the end of my busy day here, so I bid you goodnight. I have subscribed to your post over on the Malware forum, so will watch with interest. Best regards,