Travel Fans
Go Back   Computer Juice Computer Software Virus, Spyware & Security

Register

 Default 

Help! - Win32/agent trojan




Reply
 
Thread Tools
  #21  
Old 27th Jan 2008, 15:18
Full Member
Posts: 16
 
Hi

Yes it's still there

What do you want me to do?

mumskiii

  #22  
Old 27th Jan 2008, 15:21
Moderator
Posts: 7,561
 
Now download The Avenger By Swandog46, and save it to your Desktop.
  • Extract avenger.exe from the Zip file and save it to your desktop
  • Run avenger.exe by double-clicking on it.
  • Check the Input script manually box.
  • Click on the Magnifying Glass Icon which will open a new window titled View/edit script
  • Copy everything in the code box below, and paste it in the box that opens:
Code:
Folders to delete:
C:\Program Files\Kontiki
Note: the above instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system
  • Now click the 'Done' button.
  • Click on the Green Light and OK the prompt.
  • You will be prompted to restart, click OK at the prompt and your PC should reboot, if not, reboot it yourself.
  • A log file from Avenger will be produced at C:\avenger.txt
The Avenger will automatically do the following:
  • It will Restart your computer. (In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger's actions.
  • This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
  • Please attach the C:\avenger.txt in your next post.
__________________

  #23  
Old 27th Jan 2008, 15:32
Full Member
Posts: 16
 
Hi,

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\undfbgup
*******************
Script file located at: \??\C:\WINDOWS\blgruhxn.txt
Script file opened successfully.
Script file read successfully
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Folder C:\Program Files\Kontiki deleted successfully.
Completed script processing.
*******************
Finished! Terminate.
  #24  
Old 27th Jan 2008, 15:48
Moderator
Posts: 7,561
 
OK, that looks like it worked.

Download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop.

1. Double click OTMoveIt2.exe to launch it.
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
  • When finished exit out of OTMoveIt2
__________________

  #25  
Old 28th Jan 2008, 08:57
Full Member
Posts: 16
 
Hello!

A big thank you for helping me sort my computer, all seems really good again!

Will definately be recommending you!

Jack Daniels all round!!


mumskiii
  #26  
Old 28th Jan 2008, 09:06
Moderator
Posts: 7,561
 
No problem. I'm glad we finally got it.

Check out Keeping Yourself safe On The Web for tips and free tools to keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

Safe surfing.............
__________________

Reply

Register

Similar Threads
Thread Thread Starter Forum Replies Last Post
Win32 Trojan. Problems with Rootkit. After Termination It Still Reappears. dekadanceyeh Virus, Spyware & Security 1 24th Aug 2009 07:19
Trojan.vundo.h , trojan.agent , adware.mirar + MORE! :( sillyarfer Virus, Spyware & Security 1 14th Dec 2008 09:59
Re: c:\program files\common files\dllhost.exe infrected with Win32/Hupigon.MN trojan cjd666 Virus, Spyware & Security 3 21st Nov 2007 14:14
C:\program files\common files\dllhost.exe infrected with Win32/Hupigon.MN trojan Ancodi Virus, Spyware & Security 13 17th Nov 2007 02:49
Win32.Poison.k Trojan casselle Virus, Spyware & Security 7 22nd Oct 2007 01:28
Thread Tools



Translations Powered by Powered by Google
Arabic Bulgarian Chinese Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Taiwanese Thai Turkish Ukrainian

Copyright ©2006 - 2010 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2010 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.