MalAgent.E_301 (trojan)

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by copycatr, Jul 1, 2011.

  1. copycatr

    copycatr Private E-2

    Hello,


    In my network I am using Sonicwall as firewall for intenet access

    There is a website which is hosted on internet

    When users try to access some of the links in that site

    firewall is sending error message that its a "MalAgent.E_301 (trojan)"

    In logfile I see both the url request and url reply from the server are marked as this trojan

    please give me information about this trojan how I can remove it
     
    copycatr, Jul 1, 2011
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Based on your message, there is nothing for you to remove on your end. The problem is with the site on the internet that is being accessed. Your firewall is telling you that it suspects malware in a link you are clicking on.
     
    chaslang, Jul 1, 2011
    #2
  3. copycatr

    copycatr Private E-2

    Then why my firewall is blocking the request that is going to server. saying the request msg has this trojan.

    also please give me info about this trojan

    thank you
     
    copycatr, Jul 6, 2011
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Are you saying the problem is originating on your end. That is use your firewall is blocking out going attempts to access the website and what website are you referring too and is it only this one website?

    Or are you saying your firewall is blocking incoming attempts coming from the website?

    It is just a useless name invented by a particular security company. It is just one of thousands of random trojans. There is no supporting documentation about it. It is likely just a randomly named file. Either an executable or an html or some other script file.
     
    chaslang, Jul 6, 2011
    #4
  5. copycatr

    copycatr Private E-2

    That is our company site which is hosted outside
    The firewall logfile show that both the both the sides are infected with this virus. I mean the users side and the webserver side

    Is there anyway to find the description to find the trojan details

    please help
     
    copycatr, Jul 14, 2011
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No because there is nothing documented on it. Especially not on that exact name. It is just an name coined by your firewall and possibly some other protection software that may have something to do with a generic infection of some sort. Possibly just an HTML or other script type infection. Could just be something in a browser cache. Could also not even be valid. However it could be that it is a member of the Mal/Agent-E family and with that you could find some info but not necesarily specifics. Like below:

    http://www.sophos.com/en-us//threat-center/threat-analyses/viruses-and-spyware/Mal~Agent-E.aspx


    What I can suggest is that you run our cleaning process ( below ) which I would say to start with on one your client PCs rather than the server.



    READ & RUN ME FIRST. Malware Removal Guide
     
    Last edited: Jul 15, 2011
    chaslang, Jul 15, 2011
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds