how do I nuke downloader.agent

  • Thread starter Thread starter Alexander Baron
  • Start date Start date
A

Alexander Baron

I've see some discussion of this Trojan here but no real solutions; I
picked this up the other day and although AVG identifies it and lets
me move it to the Virus Vault, it keeps coming back. Does anyone know
where I'm picking this up and how to stop it? As well as AVG I have
Spybot but this doesn't seem to have the solution to it. Also, what
does this thing do?

Thanks
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Dowload the Trend Pattern File by obtaining the ZIP file.
For example; lpt238.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

You can also try some of the below online scanners.

BitDefender:
http://www.bitdefender.com/scan/license.php

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

Freedom Online scanner:
http://www.freedom.net/viruscenter/index.html

Kaspersky:
http://www.kaspersky.com/de/scanforvirus

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp

Panda:
http://www.pandasoftware.com/activescan/

RAV
http://www.ravantivirus.com/scan/

Symantec:
http://security.symantec.com/

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com


* * * Please report your results ! * * *

Dave




| I've see some discussion of this Trojan here but no real solutions; I
| picked this up the other day and although AVG identifies it and lets
| me move it to the Virus Vault, it keeps coming back. Does anyone know
| where I'm picking this up and how to stop it? As well as AVG I have
| Spybot but this doesn't seem to have the solution to it. Also, what
| does this thing do?
|
| Thanks
 
David H. Lipman said:
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Wow, talk about comprehensive, thanks.

I'm running Windows 98 with DOS 4.01; my ideal interface is DOS v5 -
yeah I know, but change doesn't mean progress.

Can I get away with this on my apparently archaic set up.
 
Yes.

Dave



| > 1) Download the following three items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend Pattern File.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| > http://www.lavasoftusa.com/
| >
|
| Wow, talk about comprehensive, thanks.
|
| I'm running Windows 98 with DOS 4.01; my ideal interface is DOS v5 -
| yeah I know, but change doesn't mean progress.
|
| Can I get away with this on my apparently archaic set up.
 
Back
Top