Jump to content

Welcome to Geeks to Go - Register now for FREE
Geeks To Go is a helpful hub, where thousands of friendly volunteers serve up answers and support. Get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message and all ads will be removed once you have signed in.
Create an Account Login to Account

How to remove trojan.win32.agent.akk


  • Please log in to reply

#1
admin

admin

    Founder Geek

  • Administrator
  • 24,102 posts
  • MVP
How to remove trojan.win32.agent.akk, and "Critical System Error!" warnings.

"Your browser was hijacked by Trojan.Win32.Agent.akk..." Critical System Error popup:
Posted Image

This infection is usually installed by installing a fake codec:
Posted Image

It will serve relentless popups advertising for IEDefender. If you have installed IEDefender, you may have noticed it doesn't easily go away. These instructions should remove that as well. The motive of the infection is to get you to buy IEDefender. Presumably the malware author gets a referral fee for every copy sold. It works like this: Infect your system, display warning popups, install a rogue antispyware application, and then charge you to buy the program that claims to remove the infection they installed.

Trojan.Win32.Agent.akk Removal Instructions:
ShadowPuterDude has authored an automated tool for removal of Trojan.Win32.Agent.akk. You can find the download and instructions here.
  • NOTE: You will need to temporarily disable any programs you have running that will block attempts to edit the registry. As FixIEDef calls REGEDIT to delete registry keys added by Zlob, Trojan.Downloader.Delf, AntiSpyPro, and IE Defender.
  • Download FixIEDef.exe by ShadowPuterDude to the Desktop.
    Note: FixIEDef now supports Non-English Language Systems

  • Double-click FixIEDef.exe:
    Posted Image

  • That will open the About FixIEDef screen. Click OK to continue:
    Posted Image

  • Next, press the Scan! button:
    Posted Image

  • FixIEDef needs to run as Administrator to perform correctly. This message simply confirms it was able to run with admin privileges. Click OK to continue:
    Posted Image

  • Wait for the scan to finish. It shouldn't take very long:
    Posted Image

  • After the !!! All Finished !!! message is displayed, click Exit:
    Posted Image

  • That's it! You're done, and the infection should be removed.

    Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. See: http://www.beyondlog...processutil.htm
If after running this tool the Trojan.Win32.Obfuscated.gx infection is still present, post a HiJackThis log in the Malware Removal Forum.

Mirrors: Alternate official download locations for FixIEDef.exe

http://it-mate.co.uk...ef/fixiedef.exe
http://hosts-file.ne...ef/fixiedef.exe
http://avant.it-mate...=Tools/FixIEDef
http://archives.myst...pyware/FixIEDef

=====================================================================
This is a self-help guide. Use at your own risk.

Important Note: If you need assistance, please start a new topic in our Malware Removal Forum. This topic is also open for comments, but not all will receive a reply.

Edited by ScHwErV, 01 May 2008 - 06:39 AM.
support for non-English

  • 0

Advertisement


#2
MongoliaMike

MongoliaMike

    New Member

  • Member
  • Pip
  • 3 posts
Hi

I am not sure if this is the right place to put this - but I am having some Tojan virus issues. Office Scan did not find any, but an online search found the following problems:

C:\WINDOWS\system\programas\hex.exe is infected with Hacktool.HideWindow
C:\WINDOWS\system\programas\nt.dll is infected with IRC Trojan
C:\WINDOWS\system\programas\svchost.exe is infected with IRC Trojan
C:\WINDOWS\system\programas\svchost2.exe is infected with IRC Trojan

I am in the dark as to best completely get rid of these viruses.

Any advice would be appreciated

M
  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • GeekU Moderator
  • 64,647 posts
Please follow all of the steps in this section of the Malware Forum. These self-help tools will help you clean up 70% of problems on your own. If you are still having problems after doing the steps, then please post a HiJackThis Log in the Malware Forum. If you are unable to run and/or post a HJT log, then post that in your initial post in the topic you create in that forum. Should you post in that forum please do not respond to your own topic. Our Malware Staff look for topics to help out in that have no responses. The Malware Forum is very busy with many more requests for help than we have volunteer helpers, so please be patient. If you have not had a response to a topic after 3 days then please go to the Waiting Room and read the pinned topic for instructions.
  • 0

Advertisement



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured