15 Trojan horse Agent3.ATLI Can't deletethem {PLease Help}

[Coolaidd]

OK so I used EVG to detect them which it wont delete... There are 15 of them....
I dont know what to do... Disk clean up in safe mode? or Wipe the whole system?
Anything that may work I'd rather try than give up...
If there isnt anything I can do that will help is erasing everything going too...

Ill attach the screen shot from EVG...

 

[derekimo]

What is EVG?

 

[Coolaidd]

sorry AVG anti virus free version... Im panicking.... lol
Ive also used Malwarebytes and Microsoft security ess too Non will delete them
AvG is the only one that acutally detects them... is it wise to manually delete them??

 

[derekimo]

AVG is reporting it's own program files as a Trojan?

This is a curious statement,

AvG is the only one that acutally detects them

What did Malwarebytes and MSE find?

 

[Layback Bear]

First don't panic. Google them and see if AVG is giving false positives. If only one programs finds them they could be false positives. It is very unusual for MSE and MAM to miss such things both at the same time.
Use this program free from Microsoft.
Microsoft Safety Scanner - Antivirus | Remove Spyware, Malware, Viruses Free
Once again stay calm. Does you computer act up in strange ways? How are things working? Can you update your security programs? Can you update Windows? It is late so are experts on such things, so it might be a while for them to help you. While waiting do your Google, Run that Microsoft scan and then post the results and answer those questions.
REASONS: Most trojans won't let you update security programs or access the internet. Many won't let you run security scans in the normal fashion. All these little pieces of information help others help you.
Once stay calm you will win.

 

[Coolaidd]

yea i noticed that too... Malwarebytes detected 77 adware.Mywebsearch ... microsoft security detected one trojan and a few java exploits...AVG detected a ton of stuff and deleted all but those trojans.
I had mcafree which didnt do nothing it seems....

 

[Coolaidd]

Well I'm getting blue screen of death, internet is giving me pop-ups, Web browser is SOOOO.... slow, Explorer sends me to false sites,email says I have it admin lockedbut dont "can read and view emails but cant click any links at all" ... And Ive noticed when I leave my computer idle it runs the RAM up to 84% a few weeks ago it never got above 60% ram... right now its 78% with just explorer running and some taskbar stuff...

I've been able to update all security programs but still no luck in detecting them... "except for AVG"

 

[Layback Bear]

Your post # 3 states that AVG was the only program that found them. I recommend staying calm and being very precise and complete with information.
What security programs do you have install now and which ones are active? Good night all.

 

[Coolaidd]

Im calm, Im downloading the Microsoft safety scanner, umm well as my default right now It should be AVG. My RAM finally dropped to 49%... no more lag... Ill post the scanner result here soon. I'll also upload my taskbar memory usage I have 3 "explorer" ones and one "iexplorer" makes no sense. plus everything that showed up on that trojan list shows up there.

 

[Layback Bear]

I notice also that McAfee is also in the first post report.
Please make sure the only anti virus program on you computer is MSE. I think you have or had more than one anti virus at a time and they are arguing with each other.

 

[Jacee]

Download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB). Before running, it will stop Explorer and all other running apps. When finished, if a reboot is required the user must reboot to finish clearing any in-use temp files.

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.
Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 7.
  http://www.oracle.com/technetwork/java/javase/downloads/index.html
• Scroll down to where it says "Java Runtime Environment (JRE) 7u2 allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-7u2-windows-i586-p.exe to install the newest version.

Rescan with AVG and see if it still reports malware.

 

[Layback Bear]

Thanks for dropping by Jacee, I will just watch.

 

[Coolaidd]

Mcafree was still installed ... thought i deleted it. its gone now
MSE is now my security program.

Deleted all Java's installed Java(TM) 7 update 2 (64-bit) is that correct?

I did the TFC and it got rid of 3of the 15 Trojan horses that made me pretty happy just 12 more to go lol

Ran AVG to double check and 12 left

 

[Jacee]

If MSE is your new anti-virus program, then uninstall AVG.

Download DDS from one of these links:
Mirror 1 Mirror 2 Mirror 3

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[Coolaidd]

Can't .. Won't allow me to boot up windows... :/ I'm talking to the boot up and recover people about it.. Idk what happen either...

 

[Jacee]

I'm pretty sure that you have an "MBR Rootkit" involved with this Trojan.

You can never be sure that your computer will be stable again, even after trying to remove it.

My best advice would be to wipe the HDD and do a clean install ... sorry about the bad news

 

[Coolaidd]

Yea I found out it was that :/ evil Trojan I knew it was a bad one... I'm taking it in, in the morning and having them wipe the whole thing. Than install the OS and do a system scan just to make sure. I'm sure the wipe will take care of everything tho. Just sad that I'm losing all my stuff lol dirty evil Trojan lol

 

[Layback Bear]

Wish you well. Let us know how things work when you get your computer back. Please remember one anti virus and one firewall at a time.

 

[Coolaidd]

Yea I usually do that should I just stick to MSE or get the trend micro paid?

 

[Jacee]

Either one is fine. Just be sure you have one!!