Re-occuring Trojans: Trojan horse Downloader Agent2.BZ(x2)

Discussion in 'Malware Help (A Specialist Will Reply)' started by Bigor, Mar 17, 2009.

  1. Bigor

    Bigor Private E-2

    Hello, I’m writing here in hope of getting my laptop cleaned, of what evil malware might be on it.
    I've done as requested, ran the 4 scans in the "Read me first" thread, and these are the logs that the scans provided me with.

    Just to quickly summarize how i think, i got the Trojan/ malware on my computer. I was merely passing time by, on some random website playing another randomly ridiculous game.
    When I by mistake (Though I feel kind of dumb to be honest) downloaded a file, which contained the trojan/virus. And now I’m stuck with a laptop which pops ups messages every 10 seconds, about my computer is in danger and that I need to scan it with this and that. Mostly some malware scanner called MS-Antispyware 2009 pops up, and I think this is the source of the virus

    Any help will be greatly appreciated.

    Best regards
    xxx
     

    Attached Files:

    Bigor, Mar 17, 2009
    #1
  2. Bigor

    Bigor Private E-2

    Additional log..
     

    Attached Files:

    Bigor, Mar 17, 2009
    #2
  3. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Welcome to Majorgeeks, Bigor.

    We are currently reviewing your logs and will get back to you with a set of instructions as soon as possible. Our queue is working the oldest threads first.

    Thanks for your patience.
    dr.m
     
    dr.moriarty, Mar 18, 2009
    #3
  4. Bigor

    Bigor Private E-2

    Thank you, I appreciate it a great deal
    But on top of my little virus problem, there’s come another problem along, which i suspect could be related to the virus.
    When I try to start my computer and type my password, all it does to log in and show my background picture on my desktop, and then log out and asking me for the password again, and this spiral just continues, and so far there’s been nothing that I’ve done myself which have helped.
    I’ve tried to log in as administrator (didn’t help) and then to boot the computer in (don’t know the precise word in English) debugging condition (didn't help as well).
    Anyhow, I’m looking forward to get a reply on what might be able to be done. And thank you once more.

    xxx
     
    Last edited: Mar 20, 2009
    Bigor, Mar 20, 2009
    #4
  5. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, Bigor


    The below fixes are specific to your problem and should only be used for issue(s) on this machine. Also, please do not install any other software while we are still working with you unless instructed. Once we have given you the all clean and final instructions you will be free to install what you want.

    Step 1:
    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Step 2:
    Now we need to use ComboFix .
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. *Remember to re-start them before coming back online.
    • Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the way down in the code box to get all lines selected ):

    Step 3:
    Run Ccleaner and re-boot

    Step 4:
    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, use right click and select Run As Administrator).


    Then attach the below logs to your next reply:
    • C:\MGlogs.zip
    • C:\combofix.txt

    Make sure you tell me if you had any problems running this procedure and give a description of how things are working now!


    dr.m
     
    dr.moriarty, Mar 23, 2009
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds