Hope this helps-I was able to get my issue with trojan.win32.agent.akk fixed

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by mlkywayy, Dec 7, 2007.

  1. mlkywayy

    mlkywayy Private E-2

    Hi everyone,

    I'm not that computer saavy, but i'm hoping my experience can help some of you who are.

    On Wed PM, I clicked on a video link searching for a popular video file that is floating around the net. It prompted me to install an active-x to view the file. I clicked this, and an agreement popped up mentioning they would install popups on my system. I immediately closed this and did not accept the terms. However, shortly after this I started receiving random popups on my screen whenever I was in Internet Explorer stating "your browser was hijacked by trojan.win32.agent.akk. you need to clean your system immediately, in other case it can be crashed soon. click ok to download the high-tech antispyware protection software! (recommended)"

    I downloaded Norton Antivirus 2008 and ran a full system scan. The trojan was not found. I did various other measures suggested, such as updating my virus definitions, deleting my temp files, cookies, etc, and running a full scan in safe mode. Nothing worked.

    I connected to Norton chat and they informed me they would solve my problem - for a fee of $99.95. Fantastic. I paid $40 for software that could not detect my issue. Later, I discovered that Norton would have prevented me from getting the trojan if I had had it installed prior to clicking on that site, but that Norton Antivirus cannot detect the trojan file once on your windows. (Beware-consumers!)

    I paid the $99.95 and they solved the issue. Here is where perhaps this will help you people that are more saavy than me. Here is the thread (chat log) that mentions what they did, and what file they found:

    Norton:We need to disable your computer's System Restore to ensure that no copies of the threat or any malicious registry entries do no remain on the system. However we will have to enable it after the troubleshooting is complete.

    Norton: I need to delete prefetch, cookies, temp, temporary internet files from the Computer.May I?

    Norton: Our tool detected "stream32a.dll" as infected.May I delete this?

    Norton:As a precautionary measure I would backup your registry to c:\regbkp.reg. Incase later there are any issues caused by the computer Registry being corrupted, then we can just restore the registry by double clicking on this file.

    Norton:You have contacted Symantec regarding Spy ware issue.As of troubleshooting,I have deleted temp, temporary internet files,cookies,suspected programmes and nasty entries from your Computer.

    That file was removed and my problem was fixed. Hope this might help some of you.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Last edited by a moderator: Dec 8, 2007

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds