AGENT.EXE OpenTextFile

[jfguerra]

I am getting a 'Malicious script detected' pop-up message from Norton Antivirus with the following info:

Malicious script detected
High Risk

Your computer is halted and needs to do something about this.

Object - FileSystem Object
Activity - OpenTextFile
File - agent.exe

I tell it to block the script of course, but it keeps coming up perdiocally.

I have Norton Antivirus version 10.0.1.13 with Windows XP Service Pack 1 (I have not installed Svc Pack 2 beause my PC wouldcome to a crawl).

I have run all the updates for Norton, have done onlknes scans through TrendMicro, Pandsoftware, and McAfeebut none of thos scans found anything. I have run an full antivurs scan and that found nothing as well.

I would appreciate anhy suggestions. Thanks!

 

[pechenegs]

well , if you have a Dell computer your probably ok as it's linked to Dell.

http://www.auditmypc.com/process/agent.asp

This next link has it limked to a dating agency.

http://www.bleepingcomputer.com/startups/Agent.exe-2621.html

however it might be mailicious?


try this run a few scans!



* Download the trial version of Ewido Security Suite here

http://www.ewido.net/en/

* Install ewido.
* During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
* Launch ewido
* It will prompt you to update click the OK button and it will go to the main screen
* On the left side of the main screen click update
* Click on Start and let it update.
* DO NOT run a scan yet. You will do that later in safe mode.


*Download Cleanup from Here

http://www.stevengould.org/software/cleanup/download.html

* A window will open and choose SAVE, then DESKTOP as the destination.
* On your Desktop, click on Cleanup40.exe icon.
* Then, click RUN and place a checkmark beside "I Agree"
* Then click NEXT followed by START and OK.
* A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
* Click OK
* DO NOT RUN IT YET



* Click here for info on how to boot to safe mode if you don't already know
how.

http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam

* Now copy these instructions to notepad and save them to your desktop. You
will need them to refer to in safe mode.


* Restart your computer into safe mode now. Perform the following steps in
safe mode:



* Run Ewido:

* Click on scanner
* Click Complete System Scan and the scan will begin.
* During the scan it will prompt you to clean files, click OK
* When the scan is finished, look at the bottom of the screen and click the Save report button.
* Save the report to your desktop


* Run Cleanup:

* Click on the "Cleanup" button and let it run.
* Once its done, close the program.


boot to normal mode and run a scan at Kaspersky!



Run an online antivirus check from

http://www.kaspersky.com/virusscanner

Download hijack this from the link below.Please do this. Click here:

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

to download HijackThis. Click scan and save a logfile, then post it here so
we can take a look at it for you. Don't click fix on anything in hijack this
as most of the files are legitimate.



post another hijack this log, the ewido and kaspersky logs