2 days ago, my wife clicked on a link from a “friend’s” Facebook page (Said it was a youtube video) without first verifying the link…You guessed it. We now have a trojan that throws up a pretty legit looking virus warning screen. When she clicked on the “Remove virus” block, IE immediately opened 2-3 download boxes. I snatched the computer from her and disconnected from the home network. Subsequent scans by Avast reveal a trojan, and whether or not I delete the file or put it on the vault…It comes back after a reboot, usually as soon as it’s reconnected to the network. The info that I have gotten off Avast is as follows…rdr_1267466597.exe…and…win:Agent-AJCQ[rtk]. I need some help here!!! I’m assuming somthing is in a startup file or sys register that reloads the trojan again on boot up. Avast doesn’t seem to help…I searched both those terms (rdr_1267466597.exe/win:Agent-AJCQ[rtk]) on the web and got no where. HELP!
We now have a trojan that throws up a pretty legit looking virus warning screen.Does this rogue/fake program have a name ? If so we can probably fiend the exact removal guide
Check your computer for Malware with
Malwarebytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/
after install click UPDATE and run cuick scan, click on REMOVE SELECTED to quarantine anything found
SUPERAntiSpyware http://filehippo.com/download_superantispyware/
Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26
If anything is found come back and post the scan logs here