Author Topic: [Referred] Trojan-Dropper.Win32.Agent.acq and Trojan.Win32.Agent.ha  (Read 4013 times)

0 Members and 1 Guest are viewing this topic.

Offline obatala

  • Newbie
  • *
  • Posts: 1
    • View Profile
Hi everybody,
I have done a full scan with a-squared and let it scan all the morning while I was going to work. The report of a-squared is that my PC is infected by Trojan-Dropper.Win32.Agent.acq in the FileZilla ftp client file setup I downloaded from the manufacturer web site ! BUT winlogon.exe is also said infected :
C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : Trojan.Win32.Agent.ha
C:\WINDOWS\system32\winlogon.exe : Trojan.Win32.Agent.ha
Anyway, I just have read on other forums that Trojan.Win32.Agent.ha maybe a false positive found by a-squared.
I have AVAST Home Edition as antivirus, and KERIO Personal Firewall 4.2.2 as firewall. I have also a routeur from Linksys with its firewall activated. I have scanned the PC with Ad-Aware and Spybot 1.4 and they did not find anything suspicious. Only a-squared find these trojans.
The fact is that since 2 weeks my PC can not reboot or shutdown completely. It says it is closing all applications, the closing Windows, but after a while it stays on a blank screen, the HDD not showing any activity. I have to turn it off pushing the button. A problem with winlogon.exe would probably be the reason in this case.
What do you think ?
PS : I have XP PRO SP2 installed, and automatic updates on.
Regards.

Offline GR@PH;<'S

  • Administrator
  • Hero Member
  • *****
  • Posts: 20125
    • View Profile
    • http://www.taktmobiles.co.uk
Re: Trojan-Dropper.Win32.Agent.acq and Trojan.Win32.Agent.ha
« Reply #1 on: December 20, 2005, 07:39:50 PM »
obatala,
You could leave it till the next update as in ignore it or you may want to try another Trojan scanner to see if they are FP's I recommend that you give a program like TrojanHunter a try (Note TrojanHunter has a 30 day Trial)
after doing that please can you download
HijackThis
 After you have downloaded  it and Unzipped it, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and then can you please post you Logfile in the
HijackThis Logs  forum.
Call it some ting like "my HijachThis log" in the Topic Title
and then put "referred by GR@PH;<'S" as the Topic Description
Also Please can you include a link to this post for reference

GR@PH;<'S   :breakkie:
press Enter then have a Brandy then if the problem is still there have another Brandy
Q: does it work
A: It does seem to for a few hours at least.

Offline GR@PH;<'S

  • Administrator
  • Hero Member
  • *****
  • Posts: 20125
    • View Profile
    • http://www.taktmobiles.co.uk
Re: Trojan-Dropper.Win32.Agent.acq and Trojan.Win32.Agent.ha
« Reply #2 on: December 20, 2005, 07:48:07 PM »
This topic has been referred to the HijackThis Logs  forum.

GR@PH;<'S   :breakkie:
press Enter then have a Brandy then if the problem is still there have another Brandy
Q: does it work
A: It does seem to for a few hours at least.