Java Error & Unusual Activity, Possible Trojan or Virus

[gonwk]

Hi folks,

I think I might have got zapped with something nasty. It just started today ... I went to a blog and my Avira blocked several attempts of somekind of Trojan or Virus ... I keep saying "Deny" access ... but I think my laptop has gotten zapped. As I am typing this message I am running latest definition of MBAM ... which I downloaded this morning.

Here is what is happening ... when I go to Rapidshare or other File hosting place after I locate the file that friend has uploaded and want to download it ... it pops up and before I can save it it vanishes.

Also, when I try to save a web page which I hasve always been able to do I get Java error says something like "ssagent.exe Error".

Q1: Am I in deep trouble!?!?

Q2: Does anyone know how to clean this crap that I have gotten?

BTW, MBAM is 12 minutes into scanning and Nothing ... and I have a feeling MBAM will find nothing!!!

Thanks,

G!

[Guest victimized]

Hi folks,

I think I might have got zapped with something nasty. It just started today ... I went to a blog and my Avira blocked several attempts of somekind of Trojan or Virus ... I keep saying "Deny" access ... but I think my laptop has gotten zapped. As I am typing this message I am running latest definition of MBAM ... which I downloaded this morning.

Here is what is happening ... when I go to Rapidshare or other File hosting place after I locate the file that friend has uploaded and want to download it ... it pops up and before I can save it it vanishes.

Also, when I try to save a web page which I hasve always been able to do I get Java error says something like "ssagent.exe Error".

Q1: Am I in deep trouble!?!?

Q2: Does anyone know how to clean this crap that I have gotten?

BTW, MBAM is 12 minutes into scanning and Nothing ... and I have a feeling MBAM will find nothing!!!

Thanks,

G!

Well I am not allowed to help people with malware related problems yet, but ssagent.exe is not a required system process on xp.

[AdvancedSetup]

@gonwk

Please follow the directions below and have someone review your system.

@victimized

Please click on the ADDREPLY and not the REPLY button. You don't need to quote every message.

Scan and post logs - read note at bottom in green

If you're having Malware related issues with your computer that you're unable to resolve.

1. Please read and follow the instructions provided here: I'm infected - What do I do now?
2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
   
3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.
   

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review
  

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.
  

[gonwk]

Hi Admin,

Thanks for your reply ... I read your 1st post and as I am typing this I am running MBAM Quick Scan.

Q: If I run MBAM QuickScan & Avira Full Scan and they both come back "Clean" ... should I still go thru Step 2 and post my logs!?!?

Thanks,

G!

[yardbird]

Hi Why don't you update MBAM and run a scan - save the log let us know if your infected? Then do the same for your AV please! post back here if your clean or not. but not the logs here....Follow Step #1 above please.

[gonwk]

Hi Yardbird,

Nice to see you! I updated the MBAM (btw, I update it regularly) ... ran the Quick Scan and A-OK ... not infected ... ran again Full Scan (C & D) again A-OK!

FYI, I am running Vista Home Prem., SP1, 64-bit. I am getting ready to run Avira ... will probably get Clean bill of health on that one also.

Q1: BTW, my Ghost problem has gone away ... so is that possible ... to get like Virus looking activity and then Stops?

Q2: If both of my Scans come back Clean then what ... should I post MBAM QuickScan and HJT logs?

Q3: On the Side Note ... is ther a Function on the Forum to allow someone to Edit their Own Post for some reason Or NOT?

Thanks,

G!

[yardbird]

Hi Yardbird,

Nice to see you! I updated the MBAM (btw, I update it regularly) ... ran the Quick Scan and A-OK ... not infected ... ran again Full Scan (C & D) again A-OK!

FYI, I am running Vista Home Prem., SP1, 64-bit. I am getting ready to run Avira ... will probably get Clean bill of health on that one also.

Q1: BTW, my Ghost problem has gone away ... so is that possible ... to get like Virus looking activity and then Stops?

Q2: If both of my Scans come back Clean then what ... should I post MBAM QuickScan and HJT logs?

Q3: On the Side Note ... is ther a Function on the Forum to allow someone to Edit their Own Post for some reason Or NOT?

Thanks,

G!

Hello again to answer Q1: thats why we need the logs. Don't post a HiJackThis Log HERE! Please do a quick scan of mbam & post back the results of the scan.... Then an AV scan.... If the AV scan shows something. Follow the above steps in the admins post! The Edit button comes after 50 posts... If both your scans are Clean.. no HiJackThis Log should be required.

EDIT: if either scan does not come back clean? Follow the admins instructions above Please.....