Solved Spyware - never seen before ...

Sony / Vpcsb1x9e
June 8, 2014 at 19:02:51
Specs: Windows XP Home Edition, 2.301 GHz / 4011 MB
Hi there. I recently did one of my annual virus scans, and the only file that came up in my scan is this "Rogue.Agent/Gen-Nullo[BIN]"
It's never come up before..usually my scans come back clean.
My computer also hasn't shown any signs of any type of infected behavior.

Does anyone know of this file? Is it harmful?
I searched for it, but I couldn't find much. Very little came up, and the little bit I read about it, some said that it's not harmful. But I wanted to make sure with more people.

So if anyone has any information, that would be great! Thank you!


See More: Spyware - never seen before ...

Report •

#1
June 8, 2014 at 19:35:45
"o if anyone has any information, that would be great! Thank you!"
Trillions of combinations out there, need to run a series of special programs. Probably take about 7 steps.

Step 1: Download & run Unhide
http://www.bleepingcomputer.com/for...
http://download.bleepingcomputer.co...
To run Unhide, simply download it onto your Desktop If your default download location is not the Desktop, drag it out of it's location onto the Desktop.and then double-click on the Unhide icon. The program will open a black box and start making the files on your fixed disks visible again. Please note, that this program will not unhide removable drives like flash cards and usb drives as the FakeHDD rogues do not target these types of drives. Once it has finished, the program will display a Windows alert stating that your files have been restored. You should then reboot your computer for all of the settings to go into effect.
When Unhide is complete, it will create a logfile on the Windows Desktop called Unhide.txt.
Copy & Paste the contents of the log in your next post please. Let me know if it doesn't produce a log.

Step 2: Reboot

Step 3: Run TDSSKiller. Copy & Paste the contents of the log in your next post please.
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
http://usa.kaspersky.com/downloads/...
http://support.kaspersky.com/faq/?q...
http://support.kaspersky.com/viruse...
Anti-rootkit utility TDSSKiller
http://support.kaspersky.com/faq/?q...
If TDSS doesn't run, use FixTDSS
http://www.symantec.com/content/en/...
Download FixTDSS and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Double click on the FixTDSS.exe icon to run it.
Click the "I Accept" button, then the "Proceed" button to begin
The tool will restart your computer automatically - click OK to allow it to do so
The tool will begin it's scan on reboot > click "run" to begin
It will report if an infected MBR is found > click the "repair" button
If you do not specify a full pathname, TDSSKiller will save the log in the same folder that the executable resides in.


message edited by Johnw


Report •

#2
June 8, 2014 at 20:56:42
✔ Best Answer
Try googling "nullo" virus for a broader range of search responses. Are you trying to find out how to remove it or just looking for information on it? It does seem to be something you'd want removed. I assume if your AV found it, it can remove it too.

message edited by DAVEINCAPS


Report •

#3
June 9, 2014 at 05:50:39
"Rogue.Agent/Gen-Nullo[BIN]"

Thankyou both for your responses ... Anti-Virus did not find this rogue file it was found by my Anti -Spyware ... whilst waiting for a response I ran my SUPERAntiSpyware and it removed this rogue virus,I ran the programme again and all was clean ... So all is well now !!! ...

Thankyou both again for your valuable time and input ...

Newmanbac


Report •

Related Solutions

#4
June 9, 2014 at 19:59:03
We're glad you got if removed. Since you're not sure how you got it you might want to run malware scans more often. Also it wouldn't hurt to run the scans Johnw recommended.

Report •

Ask Question