Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

trojan horse Agent_r.OT Fixed


  • Please log in to reply

#1
iMossy

iMossy

    New Member

  • Member
  • Pip
  • 1 posts
Yesterday at around 11am Sydney, Aus time, I can't be sure but thinking back, I beleive a java update got hijacked and of course I allowed ZoneAlarm (free) to let it happen coz it looked like a java thing. Well then ZoneAlarm went nuts, asking for all sorts of permissions, mostly "net.net", "run", "rr", repeatedly and another I have forgotten, it was opening an IE window (I use firefox) and trying to get to a site (again, I'm sorry I forgot... something like "getmeto.com" but not that... it was a long day).

Being a little above stupid, I knew something wasn't right so I unplugged from the net and ran AVG, also free, yes I am going to buy a decent AV/FW program now :-), it picked up Trojan horse Agent_r.OT in about 5 running processes. AVG said it fixed them, but a reboot was necessary. Rebooted, ran AVG again, this time 62 hits for Trojan horse Agent_r.OT... tried to boot into safe mode with F8 on startup... it loaded some files then rebooted.

After about 6 hours of downloading new Spybots SnD, and Malwarebytes' anti-malware, and HiJackThis on another computer, burning them to CD and running them on mine and trying every setting in AVG Free (I now know how long it takes to run AVG "scan every file" and I was wondering about that...) While searching, I came across a post on here detailing Combo-Fix.

IT WORKED!

Not exactly as it should have, I couldn't remove AVG like it warned, I think it was infected and just kept coming back, also it warned about not having Windows Recovery Console, but it continued... and by crikey, it worked...

Huge thanks to Rorschach112 for posting that!

Edited by iMossy, 07 November 2009 - 07:07 PM.

  • 0

Advertisements


#2
Troy

Troy

    Tech Staff

  • Technician
  • 8,839 posts
Hi and welcome,

Go ahead and follow the complete instructions and post your own logs to ensure that all the baddies are completely gone.

Instructions:
http://www.geekstogo...uide-t2852.html

It is likely there are still some infections or parts of infections left over on the machine.

Cheers

Troy
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP