Troj_agent.L

i got a computer where trend micro found a virus called Troj_Agent.L.
i did a google on it and trend is the only company that has any information on the virus. But none of it is in english. Trend log has a file called sysupd.exe and its repeated about 7 million times followed by what looks like encrypted file names.

it has the computer slowing down and kicks off network, shuts down IE and doesn't allow me to delete or fix quarantine file it shuts down trend.

if it helps ill try to post up the log later.

** trend is PCCILLIN

Type sysupd.exe into google and click the first link re: pest patrol. It will redirect you here:

http://www.pestpatrol.com/pestinfo/t/tscash.asp

That is probably the solution.

hmmm my wife just got the virus agent.h, apparently it was a key logger.

I am not sure if this was the proper way to do it, but i deleted sysupd.exe in C:/windows, turned off system restore and ran my antivirus, then it healed it.

I hope that I havent caused any issues by deleting that file though.

I have also encountered the same problem except the file logged is named _update.exe. Did you find a solution to deleting this file?

well I hadn't found any other issues since I deleted said files

I am unable to delete this file at all....it just keeps coming back as soon as it's deleted.

You have to disable system restore first if you are on XP or ME.

thanks for the reply...I am using 98SE...does anything need to be disabled for this?

No, not with 98. Have you run virus scan on it and let that catch it?

Yes...I'm using PC-cillin. It quarantines the file and as soon as I clean it the file comes right back. Pretty frustrating.