HELP!! trojan will not go away?????

My pc is infected with the Trojan-Downloader.Win32Agent.ady .
Although it supposedly is deleted by the antivirus program the damn thing keeps been caught. This can only mean that the trojan is still resident.
PLEASE HELP

Voithia hristiani kolisa! ???

:slight_smile: Hi Tanzanos :

 I did NOT see Avast Antivirus listed anywhere in your
 HijackThis log, and since this is an Avast Antivirus Support
 Forum, the only thing I will recommend is that you install
"Ewido" from www.ewido.net/en and run its "Full Scan";
 there is a tutorial at www.greyknight17.com/spy/Tutorials/ewidoQuickGuide.pdf .

Hi tanzanos,

Are your F-Secure subscriptions up to date?

You have two malware infections:

O4 - HKLM..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

O23 - Service: Windows Log - Unknown owner - C:\WINDOWS\system32\nvsvcd.exe Unknown

If your subscriptions are up to date, I suggest you contact F-Secure support. If your subscription has expired, you could always uninstall F-Secure and try avast!

Ewido is also a good idea, as Spiritsongs mentioned.

As Spiritsongs said there is not much we can do since you use F-Secure and not avast! But if you are intrested in trying avast! Home Edition (free for non commercial use) you can download it by clicking the 1st link below. If you are intrested in the Professional version (commercial use but costs money) you can download a trial at the second link below.

http://avast.com/eng/download-avast-home.html

http://avast.com/eng/download-professional.html

;)Thank you all for your support. I used to use AVAST and was very happy with it. I changed to F secure because it came free with my ADSL connection. I thought I’d give it a try. Yes my f-secure is up to date.

Thank you all!!

Just don’t try to install two resident AVs this can cause conflict, which may leave your system vulnerable.

Well I uninstalled F-secure and installed Avast again. So I attached a log of hijack this and could someone please let me know if all is well? The reason is that whenever I go online (without running my browser or any other program associated with the net I notice that my dsl monitor shows that I am downloading constantly

I tried to contact F-secure support and it was like trying to contact Norton’s support. Impossible to say the least. I don’t know if Avast is the best antivirus but the help I get from Avast via the forum far exceeds anything the big guys offer.

Thanks Again!

VOITHIA HRISTIANI KONDEVO NA FLIPARO!!!

I can’t see anything nasty in your log, but you don’t seem to be running a firewall. I suggest your download a firewall like ZA or Sunbelt/Kerio.


Running without a firewall (or running with only the one-way Windows firewall) is just asking for trouble. Please get a good firewall as Frank has suggested. :slight_smile:


I recommend Comodo find more info at the link.

www.personalfirewall.comodo.com

I tried to install ZA but Avast informed me that with service pack 2 there was incompatibility problems. So I downloaded Comodo firewall. Is it any good?

Thank you again guys.

:slight_smile: Hi tanzanos :

 Comodo firewall is "passable"; if you have trouble with it,
 I recommend Sygate Personal firewall, available at 
 www.filehippo.com/download_sygate_personal_firewall/ .
 There was no indication of any antiSPYWARE program(s)
 on your computer; I recommend you download the good &
 FREE Ad-aware Personal from :
 www.majorgeeks.com/download506.html .
 And for anti-trojan/worm protection, I recommend "Ewido";
 this good & FREE program "specializes" in detecting &
 removing trojans, worms, generic dialers, etc that the
 antivirus & antispyware program(s) are not that good at
 doing .
 To "prevent" spyware from getting on your machine, having
"SpywareBlaster" from www.javacoolsoftware.com, would
  be a great addition .
  And lastly, I could not tell if your Adobe was up-to-date;
  their lastly is ver 7.0.7 .

???Something must be wrong! Task manager shows 40 running processes? From experience I know that an average of 32 is normal.
Any help guys? Do I have some hidden malaware chewing up my processing power?

You don’t seem to have any hidden malware. These entries are unnecessary and can be fixed:

O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)

O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D1FB-EF7FB3D5FA7D} - (no file)

O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-C1FB-F86DA487AF38} - (no file)

It’s very easy to have more than the “average” number of running processes if you have utilities installed which run in the background. This seems to be the explanation for the number of running processes you have, not a malware infection.

You can reduce the number of running processes by uninstalling programs that you don’t need, or disabling the startup entry if the program doesn’t really need to be running all the time.

You need to do a web search to get more information about running processes before you disable them. Here is some information about one of your processes, CDANTSRV.EXE:

http://www.liutilities.com/products/wintaskspro/processlibrary/cdantsrv/

A web search will give similar results from LiUtilities or other sites and you can disable startup entries with programs like WinPatrol (Free), TuneUp, and Autoruns (Free).

Disable processes at your own risk!