Author Topic: Clicked without thinking....help!  (Read 2524 times)

0 Members and 1 Guest are viewing this topic.

nc.paulb

  • Guest
Clicked without thinking....help!
« on: March 03, 2010, 10:25:35 PM »
2 days ago, my wife clicked on a link from a "friend's" Facebook page (Said it was a youtube video) without first verifying the link.....You guessed it.  We now have a trojan that throws up a pretty legit looking virus warning screen.  When she clicked on the "Remove virus" block, IE immediately opened 2-3 download boxes.  I snatched the computer from her and disconnected from the home network.  Subsequent scans by Avast reveal a trojan, and whether or not I delete the file or put it on the vault....It comes back after a reboot, usually as soon as it's reconnected to the network.  The info that I have gotten off Avast is as follows.....rdr_1267466597.exe....and....win:Agent-AJCQ[rtk].  I need some help here!!!!!!!!!!! I'm assuming somthing is in a startup file or sys register that reloads the trojan again on boot up.  Avast doesn't seem to help...I searched both those terms (rdr_1267466597.exe/win:Agent-AJCQ[rtk]) on the web and got no where.  HELP!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37644
  • F-Secure user
Re: Clicked without thinking....help!
« Reply #1 on: March 03, 2010, 10:28:53 PM »
Quote
We now have a trojan that throws up a pretty legit looking virus warning screen.
Does this rogue/fake program have a name ?
If so we can probably fiend the exact removal guide


Check your computer for Malware with

Malwarebytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/
after install click UPDATE and run cuick scan, click on REMOVE SELECTED to quarantine anything found

SUPERAntiSpyware http://filehippo.com/download_superantispyware/
Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26

If anything is found come back and post the scan logs here