Troj_agent.L

  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

i got a computer where trend micro found a virus called Troj_Agent.L.
i did a google on it and trend is the only company that has any information on the virus. But none of it is in english. Trend log has a file called sysupd.exe and its repeated about 7 million times followed by what looks like encrypted file names.

it has the computer slowing down and kicks off network, shuts down IE and doesn't allow me to delete or fix quarantine file it shuts down trend.

if it helps ill try to post up the log later.

** trend is PCCILLIN
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Type sysupd.exe into google and click the first link re: pest patrol. It will redirect you here:

http://www.pestpatrol.com/pestinfo/t/tscash.asp

That is probably the solution.
  • Vladdrac
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2136
  • Loc: Louisville, Ky

Post 3+ Months Ago

hmmm my wife just got the virus agent.h, apparently it was a key logger.

I am not sure if this was the proper way to do it, but i deleted sysupd.exe in C:/windows, turned off system restore and ran my antivirus, then it healed it.

I hope that I havent caused any issues by deleting that file though.
  • plc_spec
  • Born
  • Born
  • plc_spec
  • Posts: 4

Post 3+ Months Ago

I have also encountered the same problem except the file logged is named _update.exe. Did you find a solution to deleting this file?
  • Vladdrac
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2136
  • Loc: Louisville, Ky

Post 3+ Months Ago

well I hadn't found any other issues since I deleted said files
  • plc_spec
  • Born
  • Born
  • plc_spec
  • Posts: 4

Post 3+ Months Ago

I am unable to delete this file at all....it just keeps coming back as soon as it's deleted.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

You have to disable system restore first if you are on XP or ME.
  • plc_spec
  • Born
  • Born
  • plc_spec
  • Posts: 4

Post 3+ Months Ago

thanks for the reply...I am using 98SE...does anything need to be disabled for this?
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

No, not with 98. Have you run virus scan on it and let that catch it?
  • plc_spec
  • Born
  • Born
  • plc_spec
  • Posts: 4

Post 3+ Months Ago

Yes...I'm using PC-cillin. It quarantines the file and as soon as I clean it the file comes right back. Pretty frustrating.

Post Information

  • Total Posts in this topic: 10 posts
  • Users browsing this forum: No registered users and 71 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.