Trojan-Downloader.Win32.Agent Removal

Status
Not open for further replies.
Welcome to TS. More progress is needed. Your logs show found but unanswered items.

Observations & Recommended Action:
  • ‘Delete on Reboot’ are appearing in the log, requires that you react to the message & restart the computer after exit from the scan.

  • ‘Trojan.DNSChanger’ are appearing in the log . Protect from contamination of unknown origin -
    • Disconnect all computers from the router (local network).
    • Power cycle the router (remove power, restore power).
    • Power cycle the infected computer.
    • Connect only the infected computer to the router.

  • Sequence for actions
    • Scan with MBAM followed with restart
    • Repeat scan with MBAM followed with protecting from contamination

Proceeding along a typical path.
  • Update both MBAM & SAS. Rerun them both.
  • This effort is complete when logs report NO infections/threats, or reporting something it can not clean.
  • Restart the computer. Scan with HJT.
  • Posts logs. Report progress & what changes are observed.
 
Status
Not open for further replies.
Back