Trojan infection

[Richard Champlin]

I am not sure where to turn. I was involved in a chat session with Comcast
to correct a setting on my DVR....suddenly, at the end, I starting getting a
Critical System Warning, saying my "...system is infected with a version of
Trojan.Win32.Agent.azsy. It is a Windows PE EXE...." Clicking on the
warning balloon brings up Personal Antivirus, which lists a series of
infections. Then, of course, there is a button to clean it. But you can't
do that without buying a license, which I don't currently have the money for.


Any ideas? This is really getting me angry.
If someone can e-mail me, I can send a screen print.

 

[Milly Staples [MVP - Outlook]]

Do you have a current AV solution that you either downloaded for free (AVG
or other free AV)? If yes, ignore the warning and immediately run your AV on
your machine.

If you don't have a current AV, go to the Internet and run a free online
scanner like Housecall to scan your machine.

You are a victim of a scam AV advertisement that has somehow been allowed by
your browser. Do NOT download or install it, it will give you more grief
than you need.

Once you have run Housecall, clean everything and in the name of all that is
holy, get AVG, or Avast, or Grisoft or another REPUTABLE AV and install it,
run it, update it daily and stay away from THOSE sites.

By the way, not an Office problem.

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact.
ALWAYS post your Outlook version.
How to ask a question: http://support.microsoft.com/KB/555375


After furious head scratching, Richard Champlin asked:

| I am not sure where to turn. I was involved in a chat session with
| Comcast to correct a setting on my DVR....suddenly, at the end, I
| starting getting a Critical System Warning, saying my "...system is
| infected with a version of Trojan.Win32.Agent.azsy. It is a Windows
| PE EXE...." Clicking on the warning balloon brings up Personal
| Antivirus, which lists a series of infections. Then, of course,
| there is a button to clean it. But you can't do that without buying
| a license, which I don't currently have the money for.
|
|
| Any ideas? This is really getting me angry.
| If someone can e-mail me, I can send a screen print.

 

[Richard Champlin]

I did not think this was an Office problem, but I figured you guys would have
more understanding than I would, as my browser is Internet Explorer 8. I
have Advanced System Care 3 and Windows Live OneCare. I ran ASC3, it says it
cleaned everything, but that warning keeps popping up. Windows Live OneCare
says my PC status is "Fair"

Do I need to spend the extra money for an AV to get this thing off my
computer?

 

[Richard Champlin]

Milly,

I just began to run Housecall, it says "Updating and starting Housecall",
yet it says Idle for its status. I've read the part about being patient, but
I would think it would at least be showing that it's reading or loading
files.

I don't want to be a pest, I just want to know how best to approach this
issue without angering a professional forum such as yours.

 

[DL]

A win group would have been a better place to post

Your PC is infected, with malaware

Download, install, run, update and perform a full scan (separately) with the
following two applications (freeware versions are the ones to use for this):

SuperAntiSpyware
http://www.superantispyware.com/

MalwareBytes
http://www.malwarebytes.com/

After performing a full scan with one and then the other and removing
whatever they both find completely, you may uninstall these products,
if you wish

Milly,

I just began to run Housecall, it says "Updating and starting Housecall",
yet it says Idle for its status. I've read the part about being patient,
but
I would think it would at least be showing that it's reading or loading
files.

I don't want to be a pest, I just want to know how best to approach this
issue without angering a professional forum such as yours.
--
Richard Champlin

Do you have a current AV solution that you either downloaded for free
(AVG
or other free AV)? If yes, ignore the warning and immediately run your AV
on
your machine.

If you don't have a current AV, go to the Internet and run a free online
scanner like Housecall to scan your machine.

You are a victim of a scam AV advertisement that has somehow been allowed
by
your browser. Do NOT download or install it, it will give you more grief
than you need.

Once you have run Housecall, clean everything and in the name of all that
is
holy, get AVG, or Avast, or Grisoft or another REPUTABLE AV and install
it,
run it, update it daily and stay away from THOSE sites.

By the way, not an Office problem.

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact.
ALWAYS post your Outlook version.
How to ask a question: http://support.microsoft.com/KB/555375


After furious head scratching, Richard Champlin asked:

| I am not sure where to turn. I was involved in a chat session with
| Comcast to correct a setting on my DVR....suddenly, at the end, I
| starting getting a Critical System Warning, saying my "...system is
| infected with a version of Trojan.Win32.Agent.azsy. It is a Windows
| PE EXE...." Clicking on the warning balloon brings up Personal
| Antivirus, which lists a series of infections. Then, of course,
| there is a button to clean it. But you can't do that without buying
| a license, which I don't currently have the money for.
|
|
| Any ideas? This is really getting me angry.
| If someone can e-mail me, I can send a screen print.

 

[Peter Foldes]

Richard

Your system is infected with a rogue antivirus program. It is called "rogue"
because it pretends to be A Good Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you
to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

Also use these 2 free online scanners

Download/execute:
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

If it is XP Antivirus 2008/09, here are removal steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

 

[Spreadsheet question]

I am not sure where to turn. I was involved in a chat session with Comcast
to correct a setting on my DVR....suddenly, at the end, I starting getting a
Critical System Warning, saying my "...system is infected with a version of
Trojan.Win32.Agent.azsy. It is a Windows PE EXE...." Clicking on the
warning balloon brings up Personal Antivirus, which lists a series of
infections. Then, of course, there is a button to clean it. But you can't
do that without buying a license, which I don't currently have the money for.


Any ideas? This is really getting me angry.
If someone can e-mail me, I can send a screen print.

 

[Spreadsheet question]

I am not sure where to turn. I was involved in a chat session with Comcast
to correct a setting on my DVR....suddenly, at the end, I starting getting a
Critical System Warning, saying my "...system is infected with a version of
Trojan.Win32.Agent.azsy. It is a Windows PE EXE...." Clicking on the
warning balloon brings up Personal Antivirus, which lists a series of
infections. Then, of course, there is a button to clean it. But you can't
do that without buying a license, which I don't currently have the money for.


Any ideas? This is really getting me angry.
If someone can e-mail me, I can send a screen print.

 

[Richard Champlin]

Thanks Peter,

I was able to clear it with IOBIT Security 360.
--
Richard Champlin

Richard

Your system is infected with a rogue antivirus program. It is called "rogue"
because it pretends to be A Good Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you
to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

Also use these 2 free online scanners

Download/execute:
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

If it is XP Antivirus 2008/09, here are removal steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

 

[nancyinsearchofheaven]

I am not sure where to turn. I was involved in a chat session with Comcast
to correct a setting on my DVR....suddenly, at the end, I starting getting a
Critical System Warning, saying my "...system is infected with a version of
Trojan.Win32.Agent.azsy. It is a Windows PE EXE...." Clicking on the
warning balloon brings up Personal Antivirus, which lists a series of
infections. Then, of course, there is a button to clean it. But you can't
do that without buying a license, which I don't currently have the money for.


Any ideas? This is really getting me angry.
If someone can e-mail me, I can send a screen print.

Have your computer infected with PSW.Generic_c.AUV trojan infectlion and want to get rid of this then you must have to follow the recommended steps that helps you to protect your PC from further corruptions.

For more information how to remove this infection visit: http://www.virusremovals.org/uninstall-trojan-psw-generic_c-auv-easily-on-windows

 

[Zaidy036]

Have your computer infected with PSW.Generic_c.AUV trojan infectlion and want to get rid of this then you must have to follow the recommended steps that helps you to protect your PC from further corruptions.

For more information how to remove this infection visit: http://www.virusremovals.org/uninstall-trojan-psw-generic_c-auv-easily-on-windows

Malwarebytes has a free version.

Also look at Immunet.