I’ve got the same issue someone else mentioned today. As suggested in the previous thread, I ran it through Virus Total and the results are below:
http://www.virustotal.com/analisis/7caf2d14f5ac92c8ed78137e6cd42f91
Any thoughts on how to get rid of this? I’m all thumbs with the computer, so please speak slowly. ;D
TIA!
[list]
Hi beatriz1477
This is Your Scan :3
Antivirus Version Last Update Result AhnLab-V3 2008.9.2.0 2008.09.02 - AntiVir 7.8.1.23 2008.09.01 TR/Agent.aaqk.4 Authentium 5.1.0.4 2008.09.02 - Avast 4.8.1195.0 2008.09.01 Win32:Trojan-gen {Other} AVG 8.0.0.161 2008.09.01 Downloader.Small.DNS BitDefender 7.2 2008.09.02 Trojan.Agent.AAQK CAT-QuickHeal 9.50 2008.08.29 FraudTool.VistaAntivirus.b (Not a Virus) ClamAV 0.93.1 2008.09.02 - DrWeb 4.44.0.09170 2008.09.01 Trojan.Fakealert.1260 eSafe 7.0.17.0 2008.09.01 Suspicious File eTrust-Vet 31.6.6062 2008.09.01 Win32/Vundo.AVP Ewido 4.0 2008.09.01 - F-Prot 4.4.4.56 2008.09.02 - F-Secure 7.60.13501.0 2008.09.02 FraudTool.Win32.VistaAntivirus.b Fortinet 3.14.0.0 2008.09.02 W32/FakeAV.CC!tr GData 19 2008.09.02 Win32:Trojan-gen Ikarus T3.1.1.34.0 2008.09.02 - K7AntiVirus 7.10.435 2008.09.01 - Kaspersky 7.0.0.125 2008.09.02 not-a-virus:FraudTool.Win32.VistaAntivirus.b McAfee 5374 2008.09.01 Generic FakeAlert.a Microsoft 1.3807 2008.09.02 Trojan:Win32/Vundo.BR NOD32v2 3406 2008.09.02 Win32/TrojanDownloader.Agent.NZH Norman 5.80.02 2008.09.01 Tibs.gen222 Panda 9.0.0.4 2008.09.02 Adware/VistaAntivirus PCTools 4.4.2.0 2008.09.01 - Prevx1 V2 2008.09.02 Fraudulent Security Program Rising 20.60.10.00 2008.09.02 Packer.Win32.Mian007.a Sophos 4.33.0 2008.09.02 Troj/FakeAV-CC Sunbelt 3.1.1592.1 2008.08.30 - Symantec 10 2008.09.02 Trojan Horse TheHacker 6.3.0.8.069 2008.09.01 - TrendMicro 8.700.0.1004 2008.09.02 TROJ_VUNDO.JHZ VBA32 3.12.8.4 2008.09.01 - ViRobot 2008.9.1.1359 2008.09.01 Adware.VistaAntivirus.25088 VirusBuster 4.5.11.0 2008.09.01 - Webwasher-Gateway 6.6.2 2008.09.01 Trojan.Agent.aaqk.4 Additional information File size: 25088 bytes MD5...: 224959513351983e2f45c8e6fc9779a4 SHA1..: 15bca55203f1a2ef4f7a44035c349a46d782cb8e SHA256: 451ee01b9a03f30fe3d2d5f90d16c43562289cff3df904c5a4085f825dddb095 SHA512: 5ffafcb95a9d62d843385411c0a16ee89e54d061e70ddbcd0f695bbcfcfb1a9c f3b13aa43a645ac3465dd913d43073f4de775688cd77cead22aa243829d30ad9 PEiD..: - TrID..: File type identification Win64 Executable Generic (88.0%) Win32 Dynamic Link Library (generic) (7.8%) Generic Win/DOS Executable (2.0%) DOS Executable Generic (2.0%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) PEInfo: PE Structure information( base data )
entrypointaddress.: 0x100011ef
timedatestamp…: 0x0 (Thu Jan 01 00:00:00 1970)
machinetype…: 0x14c (I386)( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x17dd 0x1800 7.57 95a351e5cdb0ae6c563d6ff52a537227
.data 0x3000 0x6f99 0x3c00 7.92 b1bb3241d90748cef18d85b69c06922d
.rsrc 0xa000 0x9e9 0xa00 3.22 4e58efd803727c428d1a9623fb7425a7( 2 imports )
KERNEL32.dll: EnumResourceNamesA, FreeResource, LocalAlloc, MapViewOfFile, UnmapViewOfFile, VirtualAlloc, EnumResourceLanguagesW
msvcrt.dll: _stricmp, fwprintf, rand, srand, time, wcscmp, wcslen( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=73F151BB00F52C5A626600612647880074B8F423
ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=224959513351983e2f45c8e6fc9779a4
As You Said it is a trojan that’s effecting your PC
I Suggest
you use the ffl. program to try to remove the malicious software from your system
1st We have SuperAntiSpyware
Download link
http://downloads2.superantispyware.com/downloads/SUPERAntiSpyware.exe
Instruction:
Download the software then install after wards update to current version then go to setting then check the Full System Scan ( this is very important )
when the program detect the spyware/trojan/malware delete it after deletion it would require a system
Restart then scan again if the malicious software came back (just for double check^_^ )
2nd We Have Malwarebytes’
If you follow these instructions, everything should go smoothly.
Please download [url=http://www.besttechie.net/tools/mbam-setup.exe][b]Malwarebytes' Anti-Malware[/b][/url] and save it to a convenient location.
[*]Double click on [b]mbam-setup.exe[/b] to install it.
[*]Before clicking the [b]Finish[/b] button, make sure that these 2 boxes are checked (ticked): [list][b]Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware[/b][*]Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the [b]Update[/b] tab. Under [b]Update Mirror[/b], select one of the websites and click on [b]Check for Updates[/b].
[*]Select the [b]Scanner[/b] tab. Click on [b]Perform full scan[/b], then click on [b]Scan[/b].
[*]Leave the default options as it is and click on [b]Start Scan[/b].
[*]When done, you will be prompted. Click [b]OK[/b], then click on [b]Show Results[/b].
[*]Checked (ticked) all items and click on [b]Remove Selected[/b].
[*]After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the [b]Logs[/b] tab. The bottom most log is the latest.
Next,
[*]Download random’s system information tool (RSIT) by random/random from here and save it to your desktop.
[*]Double click on RSIT.exe to run RSIT.
[*]Click Continue at the disclaimer screen.
[*]Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)
Please post the following:
[]The Malwarebyte’s Anti-Malware log
[]The contents of log.txt
[*]The contents of info.txt
Hope This Help :3
http://i272.photobucket.com/albums/jj179/Saber6699/5.gif
Reminder:
You can use Avast to remove the trojan u can only use the ffl. program if avast is unable to remove the malicious software from your PC You can Use 30 days trial of Avast Pro it’s a very good device :3 promise