Trojan Dropper Agent 8 B Help

Trojan Dropper Agent 8 B Help

Secure Home | Search | About

Microsoft Antivirus Discussions - Anti-virus discussions related to Microsoft products 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Trojan Dropper Agent 8 B Help georgie22 08-09-2005
Posted by georgie22 on August 9, 2005, 9:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yesterday I got a Trojan, Dropper.Agent.8.B. I *thought*, *think* I got
rid of it, as I have scanned with AVG, Spybot, Adaware, Microsoft's Beta
Program, and Semantec's Online scan and it is not to be found anymore.
BUT...when I run sfc/scannow with my XP disc, I still get a pop-up from
AVG saying it has been detected, so each time I heal it, then delete it
from the vault. This is the only time I get a message that it has been
detected. Is it really still on my system? I have run scannow because I
did receive a message that some of my files had been replaced. And then
ran it again, just to see if I got the message again. I have disabled
system restore during all this, and I have run AVG in safemode. I don't
know if I really have gotten rid of it as my scans say, or if it is
still there because of that one message in scannow.
Thank you for any help!

Posted by Bigbruva on August 9, 2005, 9:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Have you tried running the scan from Windows Safe Mode?
If not you should try that and see if AVG manages to clean the trojan then.

Let us know how you get on

BB

> Yesterday I got a Trojan, Dropper.Agent.8.B. I *thought*, *think* I got
> rid of it, as I have scanned with AVG, Spybot, Adaware, Microsoft's Beta
> Program, and Semantec's Online scan and it is not to be found anymore.
> BUT...when I run sfc/scannow with my XP disc, I still get a pop-up from
> AVG saying it has been detected, so each time I heal it, then delete it
> from the vault. This is the only time I get a message that it has been
> detected. Is it really still on my system? I have run scannow because I
> did receive a message that some of my files had been replaced. And then
> ran it again, just to see if I got the message again. I have disabled
> system restore during all this, and I have run AVG in safemode. I don't
> know if I really have gotten rid of it as my scans say, or if it is still
> there because of that one message in scannow.
> Thank you for any help!



Posted by David H. Lipman on August 10, 2005, 9:28 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Yesterday I got a Trojan, Dropper.Agent.8.B. I *thought*, *think* I got
| rid of it, as I have scanned with AVG, Spybot, Adaware, Microsoft's Beta
| Program, and Semantec's Online scan and it is not to be found anymore.
| BUT...when I run sfc/scannow with my XP disc, I still get a pop-up from
| AVG saying it has been detected, so each time I heal it, then delete it
| from the vault. This is the only time I get a message that it has been
| detected. Is it really still on my system? I have run scannow because I
| did receive a message that some of my files had been replaced. And then
| ran it again, just to see if I got the message again. I have disabled
| system restore during all this, and I have run AVG in safemode. I don't
| know if I really have gotten rid of it as my scans say, or if it is
| still there because of that one message in scannow.
| Thank you for any help!


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart
scripts, one Link
(.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and
WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line
Scanners to
remove
viruses and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Re: Trojan Dropper Agent 8 B Help August 9, 2005, 10:44 pm
Re: Trojan Dropper Agent 8 B Help August 10, 2005, 12:39 pm
Trojan.dropper April 14, 2010, 2:40 am
Re: Trojan.Dropper: tempms.exe January 9, 2007, 4:28 am
Re: Trojan.Dropper: tempms.exe January 9, 2007, 4:08 pm
Re: Trojan Horse Dropper.small.28.AU virus May 20, 2006, 12:13 am
Trojan Horse downloader.Agent.6.Trojan March 17, 2005, 1:34 pm
trojan.win32.agent.xud August 11, 2008, 4:18 pm
Trojan Horse Downloader.Agent.ETP August 9, 2006, 11:16 am
Where does Trojan-downloader.win32.Agent.bkd start up? June 17, 2007, 9:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy