I'm new to posting so please excuse me if I do not do everything correctly. Everytime I run Ad-Aware Anniversary Edition it detects the malware Win32Tr\.\ er Agent. I tell it to take the recommended action but it catches it again every time it scans. What do you recommend? Thanks!

I'm having a similar experience that began a few days ago. When online, Ad-Aware continuously sends a message stating that they are blocking a Wn.32 Trojan Downloader Agent. I have used Ad-Aware, pluse three other scan programs, and nothing is found. I'm also looking for an answer. Thanks.

There's a report of false positive Win32TrojanDropperDelf:

http://www.lavasoftsupport.com/index.php?s...c=25859&hl=

Try again after 148.0046 definitions are released. If you still have a problem, I'll move this to the False Positives forum.

I'm also having problems with false win32trojanagent reports, but I think something more severe than a bad definition may be to blame. Often, running a quick scan, I get a report of the file: "C:\WINDOWS\System32\gxvxcjqsrtsoheibgqcubimvtvxdjvbqoocen.dll" being listed as "Win32.Trojan.Agent2". However, THERE IS NO SUCH FILE ON MY COMPUTER. I've changed my Vista "folder and search" options to show hidden and system files, looked at it from a command prompt started with administrator privilege, and NOTHING. A false positive report I can understand. A completely fabricated file is something else again. *** PS: updating to def file 0148.0065 didn't help... --Doug P, USA

I had something similar happen with AVG. Even though I couldn't find the file, I quarantined it anyways since it was Swizzor. Just to be safe, you might want to open a thread in the Hijack This forum (links in my signature) where someone can look over your log to see if they see anything suspicious. Copy/paste or link to your post to describe the problem:



---

Edit: ratnip added this issue as a reply to a similar topic in False Positives rather than a new thread in HJT:

http://www.lavasoftsupport.com/index.php?s...mp;#entry106839

Since the other posts are a month old, I'll close this thread now.