help SPYTECT SPYAGENT

need help got spyware SPYTECT SPYAGENT can not delete it keep coming back
tryed nod32 spydocter ad-ware a-2 spy bot spysweeper can not find it the only one is ghostsurf spycatcher
and delete it but still comes back i have tryed to detele it in safe mode in windows registry and turn off windows restore but still no good
do not no witch program its in please help thank you

 

Hi Cyber;

Welcome to Wilders'

Could you post what it is alerting on ... files/reg keys. Copy and paste the log/findings if possible.

You are aware the program in question is a legit commercial monitoring package/software, just to be sure; the effected PC is your property?

Steve

 

thanks in ghostsurf spycatcher it come up with SPYTECT SPYAGENT then software\microsofta\RFC1156agent keep delete it still comes back

 

What other info is contained in the RFC1156agent key....TrapPollTimeMilliSecs ?

Also....and this does not mean it's the only cause for that key....but do you use Spywareblaster ?

 

rfc1156Agent hkey_locAL_MACHINE\sofTWARE\microsoft

thats all spycatcher give me i do not use Spywareblaster
i do use spy doctor,spybot, ad-ware ,xoftspy,tryed spyremover ,spy sweeper,
now trying ewido and pestpatrol and i have reformated hard drive so i do not no how its keep coming back

 

Spyware Doctor does not detect/delete it?

Thanks,

Chris

 

Hey Chris,

Just curious why you feel SD would detect it ? I have always been told many legit programs use or access that key....not to mention the malware guys ?

Any info you can share concerning that key I'm personally all ears since the rfc1156Agent key has come up at Wilders on a few occasions but so far no definitive answer has been shared in regards to what legit programs use this key for

 

I agree with Bubba - it seems that both malware and legit program utilize that key and variations of it. Also if that's the only finding for the keylogger it would seem to be a false positive, as that key on it's own won't do anything - although the files could be hidden if it is 'stealth' keylogger. Strangely enough Tenebril database is sadly lacking in any real details for anything in it's database - they only provide a general written summary of the threat but no reference of files or registry items. Also a bit strange to me would be the detections for this, this month: 1,530. (3 days ) ... and total Detections: 13,729. Spytech SpyAgent

Try contacting their support to clear up this issue. Other than that I'd leave it as is for the moment.

 

I was going by the original post which made me believe he had spytech Spyagen and could not get rid of it. I was wondering since he said he uses spyware doctor if he meant that Spyware Doctor could not delete it. Now I see it looks like he only has one key that Spy Catcher is detecting. Is this the gist of it? He does not really have SpyAgent just a key that could be used by it?

Thanks,

Chris

 

I tried SpyCatcher Express (free version) and it detected Spytech SpyAgent in C:\WINDOWS\unvise32.exe which Pest Patrol also detected this as a rat trojan at one time, but it was found to be a FP, so it is no longer detected by Pest Patrol.

I uploaded unvise32.exe to Jotti's and VirusTotal after SpyCatcher detected it again and all came up clean.

SpyCatcher Express also requires you to be online to do scans. It seems like SpyCatcher is just too FP prone, it found other FPs too, so I just deleted it completely. I feel better now that I don't have that FP monster on my pc.