Rootkit.Agent.ODG

Hi there

Have just been hit with this trojan - popups have just started. I have read through forums looking for a "fix", but have so far struck out. I'm running NOD32 4 (single machine), S&D wont launch, have run Malwarebytes but the "demon" returns. Any suggested course(s) of action would be appreciated. Some previously suggested software (other forums - Avenger etc.) is ready to run, so logs can be passed on easily.

Regards

Chris S

 

give prevx a try will get good results

 

Re: Rootkit.Agent.ODG Removal Help

I suppose you're doing your cleaning in safe-mode? Download, update and so on in Safe-Mode with Networking, then disconnect from the Internet (if you can, do it through "Network Connections" since it's easiest, otherwise do it physically through disconnecting the cable, etc.) to make sure the malware doesn't have a chance to redownload itself and such and thus reinfecting your system.

I'd test to get rid of it with Hitman Pro. (I expect it to be able to do it, and I've yet to test it against an infected machine, so I'm interested - the homepage can be found by clicking this link.)


Run Hitman Pro through Safe-Mode with Networking, but don't disconnect in this case as its strength is its cloud, thus you need continuous connection to the Internet - most important thing is that it's in Safe-Mode as malware in almost all cases have much harder to do their thing there. When cleaning, select to run it on Trial.




Hope this helps!

Cheers!

 

Re: Rootkit.Agent.ODG Removal Help

Try this (must accept ActiveX):

01)- Microsoft Malicious Software Removal Tool (easier to Run online opposed to downloading)
Features more in-depth customized scanning opposed to the Microsoft Update/Windows Update Site
http://www.microsoft.com/security/malwareremove/default.aspx

02)- Microsoft Live OneCare Safety Scanner (use Protection and Cleanup only)
Protection = Antivirus and Antispyware scan
Cleanup = Registry Cleaner
http://onecare.live.com/site/en-US/default.htm


HKEY1952

 

Does Prevx remove rootkits free? Otherwise maybe Joe will give you a 24 hour license or something to rid you of the infection

You may also like to read: http://forums.pcpitstop.com/index.php?showtopic=170815&st=40

Otherwise you could give Security 360 a try.

 

Hi,
You can try Dr Web Cure.
http://www.freedrweb.com/

 

dr web cure it cd is a good one for removal of bad infections

 

Welcome , Chris S,

Run MBAM in Safe Mode, please. Run also ESET SysInspector: http://www.eset.com/download/sysinspector.php

You have certainly some good antirootkits like GMER, kX-Ray, Root Repeal, Radix ...

Safe Mode, Chris.

PROROOTECT

 

I think maybe you can have a try with F-Secure Blacklight or Sophos Anti-Rootkit .These tools can detect Rootkit and kill it.