Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: 15 Trojan horse Agent3.ATLI Can't deletethem {PLease Help}

07 Feb 2012   #11
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

Quote:
TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB). Before running, it will stop Explorer and all other running apps. When finished, if a reboot is required the user must reboot to finish clearing any in-use temp files.
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.
Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 7.
    http://www.oracle.com/technetwork/ja...ads/index.html
  • Scroll down to where it says "Java Runtime Environment (JRE) 7u2 allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-7u2-windows-i586-p.exe to install the newest version.


Rescan with AVG and see if it still reports malware.


My System SpecsSystem Spec
.
07 Feb 2012   #12
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Thanks for dropping by Jacee, I will just watch.
My System SpecsSystem Spec
07 Feb 2012   #13
Coolaidd

Windows 7 home premium 64bit
 
 

Mcafree was still installed ... thought i deleted it. its gone now
MSE is now my security program.

Deleted all Java's installed Java(TM) 7 update 2 (64-bit) is that correct?

I did the TFC and it got rid of 3of the 15 Trojan horses that made me pretty happy just 12 more to go lol

Ran AVG to double check and 12 left
My System SpecsSystem Spec
.

08 Feb 2012   #14
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

If MSE is your new anti-virus program, then uninstall AVG.

Download DDS from one of these links:
Mirror 1 Mirror 2 Mirror 3
  • Disable any script blocking protection
  • Double click the dds icon to run the tool.
  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt <--- will be minimized in the task tray
  • Save both reports to your desktop.
Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.
My System SpecsSystem Spec
08 Feb 2012   #15
Coolaidd

Windows 7 home premium 64bit
 
 

Can't .. Won't allow me to boot up windows... :/ I'm talking to the boot up and recover people about it.. Idk what happen either...
My System SpecsSystem Spec
09 Feb 2012   #16
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

I'm pretty sure that you have an "MBR Rootkit" involved with this Trojan.

You can never be sure that your computer will be stable again, even after trying to remove it.

My best advice would be to wipe the HDD and do a clean install ... sorry about the bad news
My System SpecsSystem Spec
09 Feb 2012   #17
Coolaidd

Windows 7 home premium 64bit
 
 

Yea I found out it was that :/ evil Trojan I knew it was a bad one... I'm taking it in, in the morning and having them wipe the whole thing. Than install the OS and do a system scan just to make sure. I'm sure the wipe will take care of everything tho. Just sad that I'm losing all my stuff lol dirty evil Trojan lol
My System SpecsSystem Spec
09 Feb 2012   #18
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Wish you well. Let us know how things work when you get your computer back. Please remember one anti virus and one firewall at a time.
My System SpecsSystem Spec
09 Feb 2012   #19
Coolaidd

Windows 7 home premium 64bit
 
 

Yea I usually do that should I just stick to MSE or get the trend micro paid?
My System SpecsSystem Spec
09 Feb 2012   #20
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Either one is fine. Just be sure you have one!!
My System SpecsSystem Spec
Reply

 15 Trojan horse Agent3.ATLI Can't deletethem {PLease Help}




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Trojan Horse and backdoor.poison
How can i remove this trojan Horse?. I am unable to remove it through avast and malwarebytes. Is there any idea to remove without harming the file system. Please help
System Security
Trojan Horse?
Lately my HP 6620 is slow. Ran defrag, chkdsk, McAfee, Malwarebytes, Max Secure Spyware, System Mechanic (will not do a full analyze anymore). Ran Spybot Search & Destroy and it stops for quite awhile on Win32.bicololo. Googled this and it says it's a trojan. I can't find it anywhere in the...
System Security
Trojan Horse
Hello All Norton pick this up and can't Delete it.:mad: a0ee3d65141.Class ( Trojan Horse ) Need "Help" On how to get rid of this!:hot: Thanks for your help:geek:
System Security
Trojan horse in svchost.exe... What?
Hey. I was checking virusses, but then I was something really strange. AVG antivirusscanner 8.5 gave a Trojan horse in 'svchost.exe'... But that's a Windows file, right?
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:22.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App