Houzz Logo Print
sugar_fl

trogan.agent

16 years ago

I just did a pretty dumb thing. I don't remember how I ended up on the site (it wasn't E-mail) It was "April fools day on the Internet". I opened it & instantly realized it was probably a mistake so I went to MWB & scanned. MWB said I have a trojan.agent in

C:\windows\system32\config\systemprofil Thats all it showed. I should have known better.

How do I get out of this? Will simply quarantining it get rid of it?

I remember back about 1988 we had a a very useless computer but thought we really had something. It wouldn't go on the internet but we could download from bulletin boards.. our one & only virus was gotten on April fools day. Somehow we got out of it & survived. I should have known better to do anything on April Fools day.

Dar

Comments (20)

  • 16 years ago

    Hmmmm I put it in the vault & now I scans clean. I sure hope it was that simple...
    Dar

  • 16 years ago

    Once it's in the vault, it will not harm anything. You can decide later whether to delete it altogether. Be sure you will not be deleting a needed file by finding out what this is.

  • 16 years ago

    grandms.. how do I find out what it is? (*Be sure you will not be deleting a needed file by finding out what this is*)

  • 16 years ago

    I Google the name. For a short period of time my scans showed quite a few false positives with Avast. Hasn't happened in a long time now. I had to Google one of them 3 times because I had a gut feeling I should not delete and I was right.

  • 16 years ago

    Maime.. I can restore it if I need to...it is in quarantine. I sure hope I didn't make a mistake. I guess I should have waited.
    Dar

  • 16 years ago

    just let malwarebytes do what it wants to do with it.

    then I would also run an online scan
    ESET Online Scanner

    update and re run malwarebytes daily for a couple days

  • 16 years ago

    Raven,
    I have tried & tried to run ESET...even went into IE to do it. It scans to 18% & stops. This isn't the 1st time I have tried with the same results. Any Ideas?
    I will do the malwarebytes like U said. I wish I could do the ESET scan. Is there any other reliable on line scanners I can try?
    OH YES, I did turn off AVG when I tried.
    Thanks,
    Dar

  • 16 years ago

    Hi,
    Use the Kaspersky Lab Online Scanner download from here click here

    In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.
    Â Click on SCAN NOW
    Â Click Accept.
    Â The program will then begin downloading the latest definition files.
    Â Once the files have been downloaded locate the Scan Settingsand have it scan My Computer.
    Â The scan will take a while, so be patient and let it finish.

    When the scan is done, in the Scan is complete window, any infection is displayed.
    There is no option to clean/disinfect, however, we need to analyze the information on the report.

    To obtain the report:
    Click on Save Report As
    Â Next, in the Save as prompt, Save in area, select: Desktop.
    Â In the File name area use KScan, or something similar.
    Â In Save as type: click the drop arrow and select: Text file [*.txt]
    Â Then, click: Save

    Copy and paste the Kaspersky Online Scanner Report in your next reply.

    Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
    __________________
    .

  • 16 years ago

    I like the ones that will actually clean what they find if you want a couple more of those to try here are some
    Online Scanner
    BitDefender Online Scanner
    HouseCall - Free Online Virus Scan

  • 16 years ago

    I like the ones that will actually clean what they find

    That would probably be ok for you but:

    I like Kaspersky better than ESET for the simple reason that it doesn't have a delete/quarantine feature. Online scanners can have a high number of false positives for some reason. And there are times when they'll list about 40 infections found but they're all in a quarantine folder, and the user comes back all freaked out and thinks there totally infected.

    That's why I use it instead.

  • 16 years ago

    agree good point. Users often don't understand why do a scan where it won't clean it up, like what is the point, that is the point to get the results only then determine the proper tools to implement. And I do check out anything it gives as an infection well before letting it do any cleaning, but then I know to do that and some might not. Good point Zep.

  • 16 years ago

    Zep,
    The only free kaspersky I see is a 30 day trial. Did I miss a link somewhere?
    Dar

  • 16 years ago

    oops, Your right.....

    The current Kaspersky Online Scanner is unavailable - we apologize for the inconvenience.

    From reading your first post and the fact that Malwarebytes comes out clean I truly think your ok. Kaspersky scan is really just a double check.

    I like what raven said before "update and re run malwarebytes daily for a couple days"

  • 16 years ago

    Zep, I also did a scanned with the 1st one Raven listed & also
    SuperAntiSpyware then used MWB again & plan to use MWB again tonite. Hopefully I am now clean.
    Dar

  • 16 years ago

    I hope so too! And I'm pretty sure you are..

  • 16 years ago

    Zep,
    How serious is a trogan agent?

  • 16 years ago

    Trojan.Agent will spy on the browsing habits of users, modify Internet Explorer settings and download malicious files.

    Just make sure you're up-Dating Malwarebytes before scanning with it.

    What's a Trojan:

    A trojan (or Trojan horse) is a small malicious program that pretends to have a particular function, but that only shows its real purpose after execution and that purpose is often destructive. Trojans cannot multiply themselves, which differentiates them from viruses and worms.

    Since Malwarebytes removed it there is nothing to worry about. Would have liked to seen Malwarebytes log though.

  • 16 years ago

    Zep,
    I went back & found the log. Sorry I didn't post it in my 1st post.

    Malwarebytes' Anti-Malware 1.45
    www.malwarebytes.org

    Database version: 3930

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 7.0.5730.13

    4/1/2010 8:46:03 PM
    mbam-log-2010-04-01 (20-46-03).txt

    Scan type: Quick scan
    Objects scanned: 111757
    Time elapsed: 9 minute(s), 58 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 1
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    C:\WINDOWS\system32\config\systemprofile\Application Data\gadcom (Trojan.Agent) -> Quarantined and deleted successfully.

    Files Infected:
    (No malicious items detected)

  • 16 years ago

    C:\WINDOWS\system32\config\systemprofile\Application Data\gadcom (Trojan.Agent)

    This is advertising related, so it is considered adware and may be causing popup windows on your computer.

    Note ApplicationData refers to the current users Application Data folder. By default, this is C:\Documents and Settings\\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\\AppData\Roaming or C:\Users\\AppData\Local.
    As you can see Malwarebytes took care of it. Just providing additional Information.

  • 16 years ago

    Thanks Zep & everyone else..
    Next time I'll know to post the LOG at 1st. Next time I won't quarantine it till I show U. Hope there won't be a next time but probably will be :(
    Dar

0
Sponsored
Daniel Home
Average rating: 4.8 out of 5 stars20 Reviews
Premier Interior Design Team Transforming Spaces in Franklin Co, Ohio