an annoying trojan I cant get rid of

Viruses and worms
1

Hey all I have been up all night trying to get rid of this trojan and I really cant seem to get it. I actually figured out I got it from logging on to the game world of warcraft, and when I open it up I get the msg Alert! The trojan “Trojan-Downloaded.Win32.Agentvariant” has been found on your computer. Please remove it before continuing to play. This trojan may be used to steal your personal account information. I looked up the trojan on there support site link, and read it. I then did 1 Norton Anti Virus scan and found some mini things but nothing along the lines of a trojan. Then I did 2 Avast anti virus scans(one average scan, the 2nd a very sensative scan scanning my hold computure even my Itunes song files and still did not get it. I am not too XPd with Avast and was wondering if any1 could please help me figure this out. I really don’t know anything about it other then I get the msg that I have it :cry: thx in advance

2

What detected it, this doesn’t seem to be an avast alert ?

I get the msg Alert! The trojan "Trojan-Downloaded.Win32.Agentvariant" has been found on your computer. Please remove it before continuing to play.
3

no it isn’t an Avast alert, problem is Avast wont detect it. What detected it was some program from the company blizzard. To get on the game world of warcraft a window pops up with like updated news and stuff. And instead of any news or links to any news I have the ALERT! MSG. Because it is advising me not to log on my account since they found the Trojan on my system and didnt want me to get my account stolen

4

Hi blazeyadead,

Have you got Norton and avast! installed on your computer? Not a good idea: they will conflict and cause problems.

Try DrWeb CureIT! and/or AVG Anti-Spyware (formerly ewido).

http://download.drweb.com/drweb+cureit/

http://www.ewido.net/en/

You could also try doing some online scans and see if anything picks up the Trojan.

The F-Secure, Bitdefender and Trend Micro Housecall scanners are all good, and remove any malware found.

The Kaspersky scanner has a good detection rate, but you’ll have to remove any malware found yourself.

Links here:

http://www.geocities.com/dontsurfinthenude/antivir2.htm

5

Im actually running the F secure one atm. And no atm i only have Avast. I had avast, then do a normal scan, got nothing, so I loaded norton, then didnt get the trojan, so then I did another Avast scan, only I made it very sensative

6

You can’t have only avast on your system as you have said something from Blizzard detected it (what is it?), which could conflict with avast which may leave you less well protected.

Having installed Norton, you are likely to have issues with avast even if you have uninstalled Norton as it is notorious for leaving remnants that avast detects and believes it to be still installed. avast may disable elements to avoid conflict. Norton is absolutely the last program I would want on my system it is frequently harder to get rid of than a virus.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

7

unfort. I don’t know. I know nothing about it except that I have it, and that it is Trojan-Downloaded.Win32.Agent variant I can’t get Avast to find it so I don’t know anything about it :-[

8

the AVG scanner I DLd is detecting some malware. It is still scanning and it has found 223 malware so far

9
Automatic Trojan/Cheat-Program Scan

If a Trojan or third-party World of Warcraft cheat program is detected on the system on which the Blizzard Launcher is running, a message will appear with additional helpful information. Trojans are hidden programs designed for a number of malicious purposes, such as spreading computer viruses and stealing World of Warcraft account and password information. The Blizzard Launcher is intended as an additional level of security against these programs, but we strongly recommend that players also install dedicated anti-virus software on their computers.

Third-party cheat programs are designed to give players an unfair advantage in World of Warcraft. The scan that the Blizzard Launcher performs is provided solely for your protection and to give you an opportunity to remove any detected cheat program before you play World of Warcraft. It does not report any information back to Blizzard. If you choose to bypass the Blizzard Launcher (see below) and run World of Warcraft without removing any cheat program it might have identified for you, you risk having your World of Warcraft account closed if the cheat is detected while you’re in game, regardless of who was responsible for installing it.

We’ve often found that players whose account information had been compromised by a Trojan program or whose World of Warcraft accounts were banned for using a third-party cheat program while playing were unaware that these programs existed on the computer they used to play the game. This scan will be particularly helpful to those players who share computer access with multiple users, as is the case in Internet gaming cafes and single-computer households.

http://www.worldofwarcraft.com/misc/launcher.html

10

o yes thank you free. There we are. the wow launcher

11
the AVG scanner I DLd is detecting some malware. It is still scanning and it has found 223 malware so far

Anything described as a tracking cookie is a very minor privacy concern and nothing to worry about- AVG Anti-Spyware may find hundreds of these, but they do not mean your security has been compromised. They are just a way for advertisers to track which websites you visit- you can safely delete any cookies found.

12

o alright. Well I have the avast virus cleaner, an AVG scan, and a f-secure scan running. So i hope one of them will find something. So far no luck though :-\

13

Based on what Frank has found about the Blizzard Launcher, it is checking for 3rd party cheat-programs for world-of-warcraft and basically it is saying it has found one on your system. If it is the detection of a cheat-program then it is unlikely that another AV or anti-spyware would find something like this.

Automatic Trojan/Cheat-Program Scan

If a Trojan or third-party World of Warcraft cheat program is detected on the system on which the Blizzard Launcher is running, a message will appear with additional helpful information.

I also doubt that the launcher check is very sophisticated and the detection of Trojan-Downloaded.Win32.Agentvariant may well be bad. Any anti-spyware scan as you are probably noticing (with AVG-AS) takes a long time, so I would have some doubts over a pre-launch scan if it took virtually no time at all.

So if you start the launcher again then I would hope the ‘additional helpful information’ it refers to would give the location of the trojan/cheat-program it has found.

An on-line anti-spyware scanner, http://www.spywareguide.com/onlinescan.php also worth a run.

14

The World Warcraft site is recommending a Kaspersky on line scan + FixWareout

http://forums.worldofwarcraft.com/thread.html?topicId=81960523&sid=1

There are also some French threads where FixWareout seems to be the solution.

EDIT: assuming no cheater programs are invloved.