TechSpot

Infected with Downloader.Agent.rxd

By shadex
Aug 6, 2008
  1. The file C:\Windows\system32\DRIVERS\avghrsw.sys seems to be infected with Downloader.Agent.rxd. I'm running on Windows XP Home Edition SP2. AVG is detecting it in only my profile, and not the other profiles.

    If I try to delete the file it reappears. Here is a screenshot of my processes running:
    ht.tp://i5.photobucket.com/albums/y166/Shade1001/tm-1.jpg

    Thanks for your help in advance.
     
  2. shadex

    shadex TS Rookie Topic Starter

    After running a virus check with AVG it detected these file as infected too:
    ht.tp://i5.photobucket.com/albums/y166/Shade1001/avg.jpg
     
  3. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    Hi shadex,

    Welcome to Techspot!

    My name is Blind Dragon and I will be helping you with your Malware problem. During the course of our interactions please be sure to follow all instructions carefully, and ask questions if you are unsure of how to proceed at any point.

    Please have a read here-> Is your system infected? Read this before Cleaning or Formatting

    If you decide to clean your system please follow these Viruses/Spyware/Malware, preliminary removal instructions and post back in this thread with the requested logs. There should be at least 3.

    1)MBAM log
    2)SAS log
    3)Hijackthis log (last step)

    This thread is for the use of shadex only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.