Help Removing: Trojan Agent Tdss

January 17, 2009 at 21:21:19
Specs: Windows Vista, 3.00 GB
Okay, my main protection has been Webroot AntiVirus with Spysweeper and it has worked great. Recently it has been finding and Quarantining and Trojan horse: Trojan Agent Tdss. I quarantine it and it comes back and do the process again and again. I am worried at this point. I am not experiencing any hardware issues, boot up, software/ other changes or differences. I have tried using:

Webroot Antivirus
Kaspersky 7
Malwarebytes anti malware
spyware doctor

Anyone have any tips to remove this?

I am about to Reformat if necessary.

See More: Help Removing: Trojan Agent Tdss

Report •

January 18, 2009 at 11:10:19
Please download Malwarebytes' Anti-Malware from one of these sites:



Rename the setup file, mbam-setup.exe, before you download it. To do that once the "enter name of file to save to" box appears as the download begins in the filename box rename mbam-setup.exe to tool.exe> click save.

1. Double Click tool.exe to install the application.
2. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
3. If an update is found, it will download and install the latest version.
4. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient.
5. When the scan is complete, click OK, then Show Results to view the results.
6. Make sure that everything found is checked, and click Remove Selected.
7. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
8. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
9. Copy&Paste the entire report in your next reply.

Please download and install the latest version of HijackThis v2.0.2:

Download the "HijackThis" Installer from this link:
Hijack This

Rename the setup file, HJTInstall.exe, before you download it. To do that once the "enter name of file to save to" box appears as the download begins in the filename box rename HJTInstall.exe to tools.exe> click save.
1. Save " tools.exe" to your desktop.
2. Double click on tools.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Report •

January 18, 2009 at 11:24:10
Hey thanks for the response.

I reformatted my Hard Drive and everything was fine until I downloaded CCleaner!!!

Then Webroot found and quarantined the trojan again!

Is it thinking CCleaner is a Trojan? Or does CCleaner have a trojan?

I just uninstalled CCleaner. It's the latest version by the way.

Report •

January 18, 2009 at 14:40:31
I doubt that ccleaner has a trojan in it. It would be more likely to me that Spyware Doctor is reporting a false positive.

We can only guess without the requested info from the scans we have ask you to run.

One thing for sure is that tdssxxx.sys did not come from ccleaner.

Report •

Related Solutions

January 29, 2009 at 01:23:48
Trojan TDSS is a backdoor trojan that is also known as Trojan tidserv or trojan TDSSServ, here are manual removal instructions for removing trojan tdss from ur pc

Report •

Ask Question