Author Topic: Can someone please help me with this problem?  (Read 4347 times)

0 Members and 1 Guest are viewing this topic.

scottk34

  • Guest
Can someone please help me with this problem?
« on: June 07, 2008, 09:07:03 PM »
Hi, I have the Trend micro antivirus program and when i scan for viruses, it says virus "RTKT Agent,ebk" was found. So i delete it. a couple days later, i scan again and it is found again! If i keep it in the quarantine, will the pop ups and virus still be effective? ahh I don't know what to do. Does anybody know how to get rid of this virus all together? How to i delete it? it is in "Windows\system32" Thank you everybody in advance and for taking the time for my problem  :)
-Scott

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34066
  • malware fighter
Re: Can someone please help me with this problem?
« Reply #1 on: June 07, 2008, 09:18:36 PM »
Hi scottk34,

See for extensive details about this malware:
http://www.threatexpert.com/report.aspx?uid=408fc6fa-372b-4b53-9c2d-be3f3318ba68

Perform the following steps to remove this from your computer:
http://74.55.96.66/vb/topic34006.html

By the way we are an avast webforum, but we will help you anyway,

polonus (malware fighter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

scottk34

  • Guest
Re: Can someone please help me with this problem?
« Reply #2 on: June 07, 2008, 09:25:02 PM »
Thank you kindly Polonus

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Can someone please help me with this problem?
« Reply #3 on: June 08, 2008, 01:09:15 AM »
Besides Polonus' suggestions, I'll take a look into these common cleaning procedures:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.
The best things in life are free.