Jump to content

help removing Trojan.Agent.E.Generic


Recommended Posts

ran malwarebytes scan, and it returned four hits for Trojan.Agent.E.Generic. quarantined, restarted, rescanned, same hits again. 

attempted system restore to an earlier date, but this fails to complete successfully. 

it places a file name Lime.JS in c:\users\username\appdata\roaming.  and an associated registry key. 

recently downloaded and ran the FRST64 utility and have the FRST.txt and Addition.txt output files if needed. 

Link to post
Share on other sites

Hi,  @Rayco     :welcome:

My name is Maurice. I will be helping and guiding you, going forward on this case.


We need to get information from this machine in order to have the proper detail to help you forward.
 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

    Download Malwarebytes Support Tool
    
    
    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-1.4.0.615.exe to run the report
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !
    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Please attach the ZIP file in your next reply.

 

Thank you.

 

Link to post
Share on other sites

update on this issue. I deleted the user\app data\roaming\temp folder contents, and and windows\temp contents.

also searched on the filename reported by malwarebytes scan 'lime.js'  this was found in the windows startup folder. deleted from this folder. 

ran a HitmanPro scan as well, this just found some additional cookies and a couple pup objects which were removed, but don't think this helped with the trojan removal. 

then restarted, reran the malwarebytes scan, this now completes clean. 

thank you Maurice for the timely response, but this thread can now be closed. 

Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.