Software
Houzz Logo Print
mxyplx

Trojan.Agent/Gen-killfiles

13 years ago

Scan day today. SuperAntiSpyware found this which has now been quarantined and gone. MSE missed it. I have 2 questions:

Trojan.Agent/Gen=killfiles

C:\PROGRAM FILES\1CLICKDOWNLOAD\1CLICKSETTINGSMANAGER.EXE

1) What does this do? All I can get with Google is 4711 ways to get rid of it but not what it does.

2) Looks like it is associated with One Click Download which is an extension in Firefox (13.0.1) now disabled (the extension not FF). Any reason I should not remove it?

Comments (7)

  • 13 years ago

    You can get more information about your infection at Symantec's Threat Explorer.

    Symantec defines a Trojan Horse as:

    Trojan horses are impostors. The files claim to be desirable programs, but they are malicious. A very important distinction from true viruses is that they do not replicate themselves, as viruses do. Trojan horses contain a malicious code which, when triggered, causes loss or theft of data. For a Trojan horse to spread, you must invite these programs onto your computer; for example, by opening an email attachment. Trojan horses are also known to create a back door on a computer. The back door gives another user access to a system, and possibly allows confidential or personal information to be compromised. Unlike viruses and worms, Trojan horses neither reproduce by infecting other files, nor do they self-replicate.

    A program that claims to be a desirable program but is malicious. A very important distinction from true viruses is that they do not replicate themselves, as viruses do. Trojan horses contain malicious code, which causes loss or theft of data. For a Trojan horse to spread, you must invite these programs onto your computer; for example, by opening an email attachment. Trojan horses are also known to create a backdoor on a computer. The backdoor gives another user access to a system and possibly allows confidential or personal information to be compromised. Unlike viruses and worms, Trojan horses do not reproduce by infecting other files, nor do they self-replicate.

  • 13 years ago

    Well thanx.

    I found that Symantec recommended to turn System Restore off then on; Superantispyware did not. So I did that too just now which wiped out all restore points and any possibility of getting the infection back. At least from that angle. That's easier than trying to just delete the latest point.

    It was on the comp less than 24 hrs cause I figured out know how and when it happened. I just flat got faked out trying to download something (film from a book I read several years ago). It must have also installed the extension -now removed- in FF.

    So now all my problems are over. :-)

  • 13 years ago

    Hmmm... wonder why MSE didn't catch it ?????????

  • 13 years ago

    because it is not a virus and many AV programs don't stop those which is why it is so important to have programs like malwarebytes and superantispyware.

    But let me caution you about clearing out restore points, we no longer recommend doing that and the reason why is should something drastic happen you now have no restore points to use, even an infected restore point is better than none, plus restore points fall off with time, the old ones drop off as each new one is added. When we do a clean up in the help forums the very very very last step we do when we are absolutely sure there is no trace left of the infection after many many various scans and logs is then clear restore points. But it is not always done.
    It was learned the hard way by many that quickly clearing restore points left you with nothing, an infected one can be cleaned but none leaves you with a reinstall more than likely.

    so please keep that in mind!
    I personally would like you to go to LzD and run some scans and logs to make sure every bit is gone because in most cases there are remains that need to be cleared out.
    Analysis and Malware Removal
    If you register and post there the team will be happy to help you check

  • 13 years ago

    Ok. Good point about backup points and I did consider all that before acting. I wasn't to concerned about wiping off all the points because I've only had this comp a short time and everything is backed up or have copies. In fact a lot has not been copied to this new comp yet, maybe never will be. Not much to lose xcpt time if a complete reinstall was required. In 20 years I've only did one restore that I can recall.

    Running Super Anti Spy I did their deepest scan which supposesdly cleaned out the registry. I just now searched the registry and found some apparently related entries. Didn't check em out tho.

    Will check in at LZD tomorrow.

  • 13 years ago

    But Raven, I thought MSE was also a malware checker. Isn't it ??

  • 13 years ago

    Hello,
    big al 41

    That does not mean it's going to catch everything, it depends on the Anti Virus Definition files, the files you up-Date with. It's impossible for every Anti Virus to keep up with all the Malware.

    Anti Virus programs all of them, are insurance policies, not brick walls.

    Joe

0