This page aims to help you remove Trojan-Downloader.Script.Generic. These Trojan-Downloader.Script.Generic removal instructions work for every version of Windows.
If you are reading this article then you are probably worried that your computer has been infected with Trojan-Downloader.Script.Generic. Well you should – this is a nasty computer virus that belongs to the family of Trojan Horses. These things can be incredibly dangerous, as they are very difficult to find and remove and they often can install ransomware on your computer, spy on your data or provide root access to the hacker who created them
Trojan horses rely on exploiting system vulnerabilities and Trojan-Downloader.Script.Generic is no different
What sets apart Trojan horses from other viruses is the fact that they can employ all kinds of little known system vulnerabilities to infect a computer. Most other online threats usually need to be downloaded and installed in order to infect the computer, with a Trojan clicking the wrong link can sometimes be enough. They will also use these system vulnerabilities to give some degree of remote access to the person that created them. This can be used as a means to spy on you, steal your identity and install various unwanted programs and other viruses on your computer.
Tell-tale signs of a Trojan Horse Infection
As a rule of the thumb Trojan Horses try to keep a low profile and to remain undetected for as possible. One of the ways to know that you have a Trojan Horse is because you’ve recently been infected with a ransomware agent. Trojan horses often serve as the “dropper” for ransomware viruses and they can blind your anti-virus program to the presence of the virus.
A Trojan horse like Trojan-Downloader.Script.Generic will typically masquerade as another legitimate windows process, service or program. Just looking at the name of the process is usually not enough, as this can be easily manipulated. You will have a much better shot when looking for the developer of the program process while you are in Windows Task Manager – the Trojan will have a manufacturer of unknown or another fake company. Trojan horses are usually set to start on Windows startup, so checking your MsConfig boot settings for any programs that shouldn’t be there is also a good idea.
Distribution methods used by Trojan-Downloader.Script.Generic
A Trojan, much like a worm, can be distributed offline via USB drives – exercise caution when plugging unfamiliar devices into your computer. However, it is much more likely that the Trojan-Downloader.Script.Generic was installed directly – from a corrupted installation file.
Corrupted installation files are actually .EXE files that can be distributed in many ways, but most commonly with the help of Email spam, malicious hosting sites and torrent/download platforms.
- Do NOT underestimate spam emails. Only the least effective spam emails are written in broken English. The most successful (and dangerous) spam emails use good rhetoric’s and are usually related to work, as it is easier to explain the presence of an attached file. Usually the text of the email will subtly manipulate the user into downloading and installing the Trojan horse onto his computer. Once that happens only trouble will follow.
Torrent and online download platforms are a very convenient and easy way to obtain software, but many of these are illegal for a reason. There is virtually no control exercised over the content on what gets uploaded on these sites. A single corrupted file can infect thousands of computers before its nature is identified and it’s taken down. It gets even worse with download sites that use search engine optimization to lure unsuspecting victims. A malicious website may promise you a download containing exactly the file in need, but in reality you’ll be getting a nasty virus present.
- Avoid clicking on random links posted by people in forums, chat boards and other social media. Very often these comments are not even made by real people, but by bots. Clicking on a malicious link can get your computer infected in no time!
|Danger Level||High (Could install ransomware, spy on you and other kinds of really nasty stuff)
|Symptoms||Usually none, but a sudden virus infection may indicate a trojan present.|
|Distribution Method||Infected executable files from spam emails, torrents and online free distribution software sites.
|Detection Tool||Malware and Adware are notoriously difficult to track down, since they actively try to deceive you. Use this professional parasite scanner to make sure you find all files related to the infection.Sponsored|
If you are looking for a way to remove Trojan-Downloader.Script.Generic you can try this:
- Click on the Start button in the bottom left corner of your Windows OS.
- Go to Control Panel -> Programs and Features -> Uninstall a Program.
- Search for Trojan-Downloader.Script.Generic and any other unfamiliar programs.
- Uninstall Trojan-Downloader.Script.Generic as well as other suspicious programs.
Note that this might not get rid of Trojan-Downloader.Script.Generic completely. For more detailed removal instructions follow the guide below.
If you have a Windows virus, continue with the guide below.
If you have a Mac virus, please use our How to remove Ads on Mac guide.
If you have an Android virus, please use our Android Malware Removal guide.
If you have an iPhone virus, please use our iPhone Virus Removal guide
Some of the steps will likely require you to exit the page. Bookmark it for later reference.
Reboot in Safe Mode (use this guide if you don’t know how to do it).
WARNING! READ CAREFULLY BEFORE PROCEEDING!
Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous.
Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:
After you open their folder, end the processes that are infected, then delete their folders.
Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections.
Hold together the Start Key and R. Type appwiz.cpl –> OK.
You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:
Type msconfig in the search field and hit enter. A window will pop-up:
Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.
- Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.
Hold the Start Key and R – copy + paste the following and click OK:
A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:
If there are suspicious IPs below “Localhost” – write to us in the comments.
Type Regedit in the windows search field and press Enter.
Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:
- HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random
If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!