Jump to content


Generic3.USX (rttw.dll) - cant do system restore nor connect to inet

  • Please log in to reply
1 reply to this topic

#1 Jeda



  • New Member
  • Pip
  • 1 posts

Posted 22 April 2007 - 10:31 AM

Help, I am using a Compaq notebook with a Windows XP Media Center OS. When I booted it up this evening, my AVG alerted me that my machine had a Trojan virus Generic3.USX (path is in C:\Windows\system32\rttw.dll). I had it moved to the virus vault. I could not connect to the internet, and whenever I attempt to repair connection to wireless network, it said the address type is an an invalid IP address. I deleted the dll, then tried to do a system restore on several restore points but I was getting Restoration Incomplete after reboot, saying no files were changed. I searched the internet for "generic3.usx" and "rttw.dll" but found no results on either. I searched "generic3" and found this thread: http://forums.spywar...showtopic=81287. I thought the solutions presented would help me, but when I ran haxfix, I only got the following:


HAXFIX logfile - by Marckie

version 4.39
Sun 04/22/2007 23:16:03.10

--- Checking for Haxdoor ---

checking for a3d files
a3d files not found

checking for matching notify keys
no matching notify keys found

checking for matching services
matching services found

checking for matching safeboot services
no matching safeboot services found

checking for other Haxdoor-files
no other Haxdoor-files found

--- Checking for Goldun ---

checking for SSODL keys
no ssodl keys found

checking for notify keys
no notify keys found

checking for services
no services found

checking for other Goldun-files
no other Goldun-files found

checking iexplore.exe
iexplore.exe is not infected



Seems clean :( Maybe this is a new version of the virus? I checked the event logs and I have this error:

ERROR: Device Service Listener - UDP networking failed. Error code 0x8007277A.

Maybe that was why I couldnt connect to the internet? Before I got the virus alert, earlier in the day I was able to download my emails and found nothing suspicious. I'm not sure where I got this and I'm getting frustrated :( It affected my machine's ability to complete a system restore and to connect to wireless network.

Please read our Forum FAQ in order to find out what info we need (HijackThislog) so we can help you.

Edited by miekiemoes, 22 April 2007 - 01:50 PM.

#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,530 posts

Posted 25 April 2007 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of

Support SpywareInfo Forum - click the button
PayPal - The safer, easier way to pay online!