JS: Agent - DIE [Trj] Infection

Viruses and worms
1

Hi-
I’ve also been hit with JS: Agent - DIE [Trj]. It showed up in an AVAST 2015 FREE scan last night, and Avast put it in the Chest. I’ve been searching the web for info on it and have only found it here on AVAST. It seems both new and nefarious, so I’d like any help I can get in verifying the computer is now clean (and, if not, what to do). This is the sole infection found in all the scans I’ve run (Malwarebytes, Avast, Spy Bot 2). Attached are the log files…

Thank You IA

2

It may well be in the temp folders

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION Toolbar: HKU\S-1-5-21-2139804757-2743755002-1485905433-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File C:\ProgramData\SetStretch.exe EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

3

Thanks for the speedy response!

4

How is the computer behaving now ?

5

Thanks- I wasn’t certain if there was going to be another set of instructions like there is on the other Agent - DIE thread, so I’ve been keeping usage to a minimum until I was sure the threat is gone, because I’m not even certain what this Trojan does. It seems pretty new, with no documentation on it. I’ll play around with the computer today and give you an update.

Thank you so much for the speedy response and all the techno-wizardry. It’s been a huge relief to get some assistance!