Help - Search - Members - Calendar
Full Version: Removing The Last Remnants Of Win32.trojandownloader.agent
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive HijackThis Logs
Steiner
I have just downloaded and run Ad Aware 2007 (free version) in order to rid my computer of Win32.TrojanDownloader.Agent. I selected all the trojandownloader files in the scan results window and pressed the "Remove" button.

However, six registry entries are still there and seem impervious to all my clicking on the Remove button.
They are:
Root: HKLM Path: system\controlset001\services\ccevtmgr
Root: HKLM Path: system\controlset001\services\symevent
Root: HKLM Path: system\controlset001\services\symtdi
Root: HKLM Path: system\currentcontrolset\services\ccevtmgr
Root: HKLM Path: system\currentcontrolset\services\symevent
Root: HKLM Path: system\currentcontrolset\services\symtdi

How do I remove or fix these?

LS CalamityJane
Hello Steiner,

Apologies for the late reply as we have been swamped with help requests as you can probably see. I'm now subscribed to this topic and will get an email notice from the board each time you reply here so that I can be here much more quickly now that we are working on this thread.

First of all, could please post the entire Ad-Aware logs for review?

Those keys are not "bad" per se and it could be that Ad-Aware is detecting an invalid setting. They belong to Symantec. Do you run Symantec software or Norton AV? If you had a trojan it could be your Symantec software was disabled and that could be the case here. I can't really tell from the small amount of info I see in your post so the entire log may help determine what the problem is.

I would also like to see a log from this free tool called HijackThis to get some further diagnostics on your computer.

Instructions on creating a HijackThis Log
http://www.lavasoftsupport.com/index.php?showtopic=216
LS CalamityJane
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Thank You !
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.