Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Win32:Agent-AOEG [trj] and weird behavior, HELP!


  • Please log in to reply

#31
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,680 posts
  • MVP
Another request:


C:\Windows\System32\UpdSvc.dll

as shown in:

SRV - [2011/12/26 18:29:26 | 000,114,000 | ---- | M] (Joosoft.com GmbH) [Auto | Running] -- C:\Windows\System32\UpdSvc.dll -- (Update-Service)


May be part of this same infection. Can you upload UpdSvc.dll to http://virustotal.com and see if it comes back 0/43? Did you ever use JooSoft.com to get software? I don't see any mention of JooSoft in the install list. Did you ever get an UpdateChecker program from them?

Ron
  • 0

Advertisements


#32
nept

nept

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Hi

My isp just messed up big time thus I was offline for 5 days. Took them 7 attempts to get me back online :)

Anyway, I submited the file to avast, it said it'll do so "with the next update".
I also ran a check on updsvc.dll. As I couldn't upload it directly from the system32 folder I made a copy of the file to my desktop. Not sure if that has any influence. Anyway the file seems to be clean (0/43): https://www.virustot...sis/1331803576/

I have no idea where this joosoft file comes from. Maybe it was bundled with some download and I've been stupid enough to not uncheck the install option...

Flo
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP