Hi everybody,
I have done a full scan with a-squared and let it scan all the morning while I was going to work. The report of a-squared is that my PC is infected by Trojan-Dropper.Win32.Agent.acq in the FileZilla ftp client file setup I downloaded from the manufacturer web site ! BUT winlogon.exe is also said infected :
C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : Trojan.Win32.Agent.ha
C:\WINDOWS\system32\winlogon.exe : Trojan.Win32.Agent.ha
Anyway, I just have read on other forums that Trojan.Win32.Agent.ha maybe a false positive found by a-squared.
I have AVAST Home Edition as antivirus, and KERIO Personal Firewall 4.2.2 as firewall. I have also a routeur from Linksys with its firewall activated. I have scanned the PC with Ad-Aware and Spybot 1.4 and they did not find anything suspicious. Only a-squared find these trojans.
The fact is that since 2 weeks my PC can not reboot or shutdown completely. It says it is closing all applications, the closing Windows, but after a while it stays on a blank screen, the HDD not showing any activity. I have to turn it off pushing the button. A problem with winlogon.exe would probably be the reason in this case.
What do you think ?
PS : I have XP PRO SP2 installed, and automatic updates on.
Regards.
obatala,
You could leave it till the next update as in ignore it or you may want to try another Trojan scanner to see if they are FP's I recommend that you give a program like TrojanHunter (http://www.misec.net/) a try (Note TrojanHunter has a 30 day Trial)
after doing that please can you download
HijackThis (http://www.majorgeeks.com/download.php?det=3155)
After you have downloaded it and Unzipped it, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and then can you please post you Logfile in the
HijackThis Logs forum (http://www.landzdown.com/index.php?board=26.0).
Call it some ting like "my HijachThis log" in the Topic Title
and then put "referred by GR@PH;<'S" as the Topic Description
Also Please can you include a link to this post for reference
GR@PH;<'S :breakkie:
This topic has been referred to the HijackThis Logs forum (http://www.landzdown.com/index.php?board=26.0).
GR@PH;<'S :breakkie: