Computing.Net > Forums > Security and Virus > trojan horse downloader.agent.T

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

trojan horse downloader.agent.T

Reply to Message Icon

Name: bobjeffray
Date: April 12, 2004 at 06:32:30 Pacific
OS: win98SE
CPU/Ram: P133/96MB
Comment:

Old PC due for retirement soon, the new dell is due to arive wednesday, and am going to use this as a test PC. have just found downloader.agent.T infection in C:\windows\system\nslite.dll using AVG 6.0 free edition. AVG refused to heal the file and offered to quarantine. when put in quarantine content advisor in IE 5.0 refused to allow access to anything on the net, even the home page. Currently set to tiscali.co.uk at this point i restored the file and content advisor then worked. have run windows update and taken all the critical updates except IE6 and VM. have also downloaded ADaware 6 and spybot. and ran both of these, they both sparked of AVG during thier scans but did not identify the trojan, or report its presence. Then went to symantec and did an online AV scan and that failed to find the trojan. the only thing that registres this virus is AVG.

AVG, adaware 6 and spy bot have all had the latest updates installed.

think this a new variant as can find nothing about the T strain on the net.

I believe that nslite.dll is installed by moneytree. Not aware of ever having been infected by that one and can find no trace of it now. other than having nslite.dll on the system.

has anyone come across this on and how to get rid of it.

cheers
bob



Sponsored Link
Ads by Google

Response Number 1
Name: Dog
Date: April 12, 2004 at 07:02:07 Pacific
Reply:

Have a look here
http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=nslite.dll

and

http://www.doxdesk.com/parasite/MoneyTree.html

It works for me

D4


0

Response Number 2
Name: Tufenuf
Date: April 12, 2004 at 07:02:41 Pacific
Reply:

Bob, nslite.dll appears to be a viable "Microsoft Windows Media Lite Client" file as noted at the link below. Just type in nslite.dll and click the submit button.

nslite.dll

Here's another link which references it.

Microsoft Knowledge Base Article - 224471

More possibilities at the search link below.

nslite.dll file search

Could AVG be giving you a false positive reading?

Tufenuf



0

Response Number 3
Name: Farside
Date: April 14, 2004 at 12:26:28 Pacific
Reply:

Just had the symptoms as described above. AVG 6 came up with a dialogue box saying there was a virus and to run a scan, which I did. The box appeared whilst off-line and I was in 'My computer'. 3 files infected, 2 were cleaned and the third deleted.

psw.bispy.B was one; trojan horse downloader.Agent.T was next and the nslite.dll was the third. Even if was false positive, more than happy that AVG is doing a good job (as it has done for several years)

No snags with anything else. Thanks AVG!


0

Response Number 4
Name: Nearside
Date: April 18, 2004 at 08:56:08 Pacific
Reply:

Can Farside help me?
Everytime I run AVG now it finds psw.bispy.A & B plus a 'downloader' C and says it cant remove them, so puts them ito the 'Virus Vault'. However they ar back again next time and I cant find where, on my HD, they are coming from? This is the the location given:
C:\_RESTORE\TEMP\A0338815.cpy,A0338816.cpy, and A0338817.cpy - the first 2 are PSW.Bispy.A and B, whilst the 3rd. is a 'downloader' thing.
But I cant find it. Can you help me?


Nearside


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: trojan horse downloader.agent.T

Trojan Horse Downloader Agent GPZ www.computing.net/answers/security/trojan-horse-downloader-agent-gpz/19827.html

Downloader.Agent.T Trojan www.computing.net/answers/security/downloaderagentt-trojan/11738.html

trojan downloader agent www.computing.net/answers/security/trojan-downloader-agent/17150.html