Hi , need some help with Trojan horse Downloader.Agent.BR

Discussion in 'adware, spyware & hijack cleaning' started by GriffJsy, Jul 7, 2004.

Thread Status:
Not open for further replies.
  1. GriffJsy

    GriffJsy Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    1
    Hi there, Need some help!
    My computer has been infected with a virus called Trojan Horse Downloader.Agent.BR. I have run AVG 7 in safe mode and it states that the infected files have been moved to the virus vault yet everytime I reboot the virus reappears. Everytime I open explorer my homepage is reset to: res://gokuq.dll/index.html#37794
    Also I keep recieving spyware removal pop-ups as well as being redirected when trying to run a search on any of the search engines to:
    http://search-to-find.com/

    This is a log of the last search I did with Avg7:

    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042920.EXE";"07/07/2004 16:26:49";"A0042920.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042921.EXE";"07/07/2004 16:26:49";"A0042921.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042922.EXE";"07/07/2004 16:26:50";"A0042922.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042923.EXE";"07/07/2004 16:26:50";"A0042923.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042924.EXE";"07/07/2004 16:26:50";"A0042924.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042925.EXE";"07/07/2004 16:26:50";"A0042925.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042926.EXE";"07/07/2004 16:26:50";"A0042926.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042927.EXE";"07/07/2004 16:26:51";"A0042927.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042928.EXE";"07/07/2004 16:26:51";"A0042928.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042929.EXE";"07/07/2004 16:26:51";"A0042929.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042930.EXE";"07/07/2004 16:26:51";"A0042930.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042931.EXE";"07/07/2004 16:26:51";"A0042931.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042932.EXE";"07/07/2004 16:26:51";"A0042932.EXE";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BF";"C:\System Volume Information\_restore{2F13D0E0-2AEA-4556-B209-3FA16EEBC484}\RP92\A0042977.exe";"07/07/2004 16:26:52";"A0042977.exe";"9 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\addpk.exe";"07/07/2004 16:26:48";"addpk.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\mfcma.exe";"07/07/2004 16:26:49";"mfcma.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\msox.exe";"07/07/2004 16:26:48";"msox.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\iemo.exe";"07/07/2004 16:26:49";"iemo.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\ieqr.exe";"07/07/2004 16:26:49";"ieqr.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\mswa.exe";"07/07/2004 16:26:49";"mswa.exe";"26 KB"
    "";"";"Trojan horse Downloader.Agent.BR";"C:\WINDOWS\system32\sdkrt.exe";"07/07/2004 16:26:49";"sdkrt.exe";"26 KB"

    Thanks for your help i'm a bit stuck as what to do!
    Cheers again,
    Oh P.S. Could you tell me how to ry and prevent this from happening again? Thanks loads
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.