Malware Removal Forums

[#1]

Hello
Sadly it appears that my PC has become infected with a rather persistant trojan called W32/AgentBypass.gen!K  that is defying removal by my antispyware/anti-malware programs.  Only Windows Defender detects it when my desktop loads up, but like the other programs, it doesn't see it on a full system scan.
I am aware of the existence of support forums who can help me through a process of removing this. However, please can people advise me which ones are the best for this.
Many thanks and kind regards, wanderyonder

[#2]

trend Micro is a reputed virus info http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_AGENT.DZQ&VSect=Sn how to detect and remove
a lot of other people are saying win defender doesnt work, the reason why are in the above Trend link, there reasons might get defender to do it

[#3]

Malwarebytes is always a good possibility for getting rid of nasty trojans http://www.malwarebytes.org/
Can you advise your present antimalware system

[#4]

Hi Oldjim

Quote from: Oldjim

Malwarebytes is always a good possibility for getting rid of nasty trojans http://www.malwarebytes.org/ Can you advise your present antimalware system

At the time that infection was first detected, my anti-malware system consisted (in addition to Windows Defender) of Spybot - Search & Destroy, Lavasoft Ad-Aware and Zone Alarm Pro (with its Anti-Spyware element activated).  My anti-virus program Avast 4.8 Home also has some anti-malware capability I understand.
Since I was alerted to the infection I have downloaded both SuperAntiSpyware and Malwarebytes' Anti-Malware.
With each of these (both the above existing and newly installed ones) I carried out a full system scan.  None of them pick up anything other than the odd tracking cookie.
The alert only comes up when the desktop loads within my admin log-in.  (I try to do most of my web browsing from within XP's limited account log-in.)
Hi pierre_pierre

Quote from: pierre_pierre

trend Micro is a reputed virus info http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_AGENT.DZQ&VSect=Sn how to detect and remove a lot of other people are saying win defender doesnt work, the reason why are in the above Trend link, there reasons might get defender to do it

Thanks for the link.  That's useful.  However, neither of the registry entries listed there are showing up on my system.
This is puzzling.

[#5]

Possibly a false alarm from Windows defender - are there any other symptoms
You could try this http://www.kaspersky.com/virusscanner

[#6]

http://www.malwareremoval.com/
Regards,
Neil

[#7]

Quote from: Oldjim

Possibly a false alarm from Windows defender - are there any other symptoms You could try this http://www.kaspersky.com/virusscanner

Oldjim, I've not had any other alerts appear and I haven't noticed an affect on the performance or operation of the computer.
Kaspersky's online scanner picks up nothing too.

Quote from: Njal

http://www.malwareremoval.com/ Regards, Neil

Neil.  Thanks for that link. I'll look into that.
Has anyone heard of http://www.bleepingcomputer.com? They appear to have a comprehensive forum there.  Are they reputable?

[#8]

Looks like ldjim cold be right - false alarm.

[#9]

there dont appear to be any negative comments on Google for bleepingcomputor.com

[#10]

Well, it looks like I have resolved the issue of the apparent trojan infection.  As Oldjim and artmo said, it appeared to be a false alarm.  Bleepingcomputer.com has received a number of postings describing these symptons, such as this one:
http://www.bleepingcomputer.com/forums/index.php?s=&showtopic=193342&view=findpost&p=1084283
and
http://www.bleepingcomputer.com/forums/index.php?s=&showtopic=193167&view=findpost&p=1094381
It seems that a Windows Defender definitions update is seeing a part of Free Download Manager, called Free Uploader OE Integration, as a trojan.  As far as I am aware, Free Download Manager is reputable and safe.  I had a look at the start-up tab within my System Configuration Utility (MSConfig) and this Free Uploader was indeed listed.  So within System Configuration, I disabled the Free Uploader from starting up and the Windows Defender warnings no longer appeared on boot-up.
I've uninstalled Free Dowload Manager version 2.5 which was causing this.  I've since noticed that there is a more recent version available (v3) which I've installed.  This new version appears to not add Free Uploader OE Installation to the start-up, when looking in System Configuration/Startup.  A subsequent full system scan with all my anti-virus/anti-malware utilities gives me the all clear. And no more Windows Defender warning boxes so far.
So, hopefully, problem solved.