Hi , need some help with Trojan horse Downloader.Agent.BR

Discussion in 'adware, spyware & hijack cleaning' started by GriffJsy, Jul 7, 2004.

Thread Status:
Not open for further replies.
  1. GriffJsy

    GriffJsy Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    1
    Hi there, Need some help!
    My computer has been infected with a virus called Trojan Horse Downloader.Agent.BR. I have run AVG 7 in safe mode and it states that the infected files have been moved to the virus vault yet everytime I reboot the virus reappears. Everytime I open explorer my homepage is reset to: res://gokuq.dll/index.html#37794
    Also I keep recieving spyware removal pop-ups as well as being redirected when trying to run a search on any of the search engines to:
    http://search-to-find.com/

    This is a log of the last search I did with Avg7:

    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042920.EXE";"07/07/2004 16:26:49";"A0042920.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042921.EXE";"07/07/2004 16:26:49";"A0042921.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042922.EXE";"07/07/2004 16:26:50";"A0042922.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042923.EXE";"07/07/2004 16:26:50";"A0042923.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042924.EXE";"07/07/2004 16:26:50";"A0042924.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042925.EXE";"07/07/2004 16:26:50";"A0042925.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042926.EXE";"07/07/2004 16:26:50";"A0042926.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042927.EXE";"07/07/2004 16:26:51";"A0042927.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042928.EXE";"07/07/2004 16:26:51";"A0042928.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042929.EXE";"07/07/2004 16:26:51";"A0042929.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042930.EXE";"07/07/2004 16:26:51";"A0042930.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042931.EXE";"07/07/2004 16:26:51";"A0042931.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042932.EXE";"07/07/2004 16:26:51";"A0042932.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BF";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042977.exe";"07/07/2004 16:26:52";"A0042977.exe";"9 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\addpk.exe";"07/07/2004 16:26:48";"addpk.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\mfcma.exe";"07/07/2004 16:26:49";"mfcma.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\msox.exe";"07/07/2004 16:26:48";"msox.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\iemo.exe";"07/07/2004 16:26:49";"iemo.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\ieqr.exe";"07/07/2004 16:26:49";"ieqr.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\mswa.exe";"07/07/2004 16:26:49";"mswa.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\sdkrt.exe";"07/07/2004 16:26:49";"sdkrt.exe";"26 KB"

    Thanks for your help i'm a bit stuck as what to do!
    Cheers again,
    Oh P.S. Could you tell me how to ry and prevent this from happening again? Thanks loads
     
Thread Status:
Not open for further replies.