Author Topic: RTKT-AGENT.CTH  (Read 8737 times)

0 Members and 1 Guest are viewing this topic.

Alex45

  • Guest
RTKT-AGENT.CTH
« on: July 08, 2006, 05:58:04 AM »
Hello, I have been using the free version of Avasr! for a few days and it says I do not have any viruses.
I have done 2 boot scans and 3 normal scans.
If I use Trend Micro on line scan service, each day it says I have RTKY-AGENT.CTH.
I delete it and do another scan and it's gone the next scan.
The next days I do another scan and it's back.
Is this a real virus / trojan?  and what should I do as Avast! says I am OK, having removed a few on the initial boot scan.
I'm using Windows 2000 SP4
Many thanks











bearhead001

  • Guest
Re: RTKT-AGENT.CTH
« Reply #1 on: July 08, 2006, 06:04:22 AM »
I think there must be some files which have some to do with the virus .
you should find them out ang kill them at once .
Otherwise,the virus would come back again if you just kill part of them.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: RTKT-AGENT.CTH
« Reply #2 on: July 08, 2006, 06:10:45 AM »
Please submit the infected file to JOTTI and let us know what it says.
Also tell us the location of the file.

bearhead001

  • Guest
Re: RTKT-AGENT.CTH
« Reply #3 on: July 08, 2006, 06:13:48 AM »
Please submit the infected file to JOTTI and let us know what it says.
Also tell us the location of the file.

Eddy hi~~
 JOTTI is an online-scan tool?
do it send back a report to me if i upload a file?

Alex45

  • Guest
Re: RTKT-AGENT.CTH
« Reply #4 on: July 08, 2006, 06:14:51 AM »
Hello,
I have very basic computer skills and have absolutely no idea where and how to find the file...when it reappears each day.
I stand more chance of performing brain surgery than doing what you suggest.  And, who is Jotti?
I am a very old man!
IF  Avast says I do not have a virus, why does Trend Micro say I have one ????  Why do I believe?

bearhead001

  • Guest
Re: RTKT-AGENT.CTH
« Reply #5 on: July 08, 2006, 06:18:15 AM »
Eddy hi~~
 JOTTI is a nice thing

bu if I have a big file , it is hard to upload right?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: RTKT-AGENT.CTH
« Reply #6 on: July 08, 2006, 06:20:32 AM »
Depends all on your upload bandwidth.

Take your time.
Better slow and good then fast and sorry

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89062
  • No support PMs thanks
Re: RTKT-AGENT.CTH
« Reply #7 on: July 08, 2006, 03:19:36 PM »
Eddy hi~~
 JOTTI is a nice thing

bu if I have a big file , it is hard to upload right?
There is a file size limit on both Jotti:
Quote
Virus definitions are updated every hour. There is a 15Mb limit per file. Please refrain from uploading tons of hex-edited or repacked variants of the same sample.

also try VirusTotal - Multi engine on-line virus scanner that I believe also has a file size restriction although I couldn't find any reference to one.
« Last Edit: July 08, 2006, 03:21:46 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: RTKT-AGENT.CTH
« Reply #8 on: July 08, 2006, 04:06:29 PM »
« Last Edit: July 08, 2006, 04:17:55 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mauserme

  • Guest
Re: RTKT-AGENT.CTH
« Reply #9 on: July 08, 2006, 04:29:52 PM »
... who is Jotti?
Hi Alex,

Jotti is an on-line service that scans a file you submit with many antivirus programs.  This gives you multiple opinions about whether the file is infected or not.  It is located here:

http://virusscan.jotti.org/

The problem is you need to locate the file on your computer in order to use Jotti.

IF Avast says I do not have a virus, why does Trend Micro say I have one ????
Different antivirus programs use different detection techniques and different virus signatures.  This often leads to disagreement as to what is and is not malware.

I delete it and do another scan and it's gone the next scan.
The next days I do another scan and it's back.

If you follow Polonus' first link above there is a "Solution" link toward the bottom of the page.   Click on that and see if the information is something you can work with.   When you do the Trend Micro suggested there (yes you will need to do it again) make sure to notate the file name and location (it will look something like C:\windows\filename.ext).

Post again with the file name and path and/or if you need additional help.

Spiritsongs

  • Guest
Re: RTKT-AGENT.CTH
« Reply #10 on: July 08, 2006, 08:57:23 PM »
 :)  Hi Alex :

      If you do have a "rootkit", the BEST place to get help is by
      one or more of the Experts at :

    http://www.castlecops.com/f233-Rootkit_Revelations.html

     They would guide you in a step-by-step procedure ; they
     might recommend and/or you MAY want to try the "Guide" :

   http://www.bleepingcomputer.com/tutorials/tutorial124.html

neal62

  • Guest
Re: RTKT-AGENT.CTH
« Reply #11 on: July 08, 2006, 09:09:49 PM »
Alex45,

If you aren't sure if your machine might have a rootkit type of infection then may I suggest you go HERE and download this free program. This program will tell you if your machine does have a rootkit problem. It's free and easy to use.  :)