Trojan.Agent or False Positive

[TrDo]

Hi all,

Today, as I do everyday, I scanned my pc with MBAM and got an alert about a Trojan.Agent-registry key. I have quarantied the item.

The question is if this was a true alert or a false positive, since I haven't installed anything on my pc, since yesterday.

I would appreciate your help.

Here is the nfo:

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\e0200804 (Trojan.Agent) -> Quarantined and deleted successfully.

Thanks alot.

TrDo

[nosirrah]

Have you removed any malware from your system within the last 6 months ?

[TrDo]

Hi,

No. This is a new laptop. New, meaning I bought it 20 days ago. But last week, MBAM produced the following:

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Do you think that it's related?

Thanks.

TrDo.

PS. Why did you move my post? I'm not sure if this a false positive or not.

[nosirrah]

Not related no , I am trying to track down something legit that could drop that key and I think I found it . I will fix this in the next update .

[TrDo]

Should I restore the item back to its position please? Is it safe?

Thanks.

TrDo.

======================================================

EDIT:

--------

Hey Bruce,

Could youplease let me know. I would appreciate it.

======================================================

[TrDo]

Please let me know if I can restore the registry key.

Thanks.

TrDo.

[TrDo]

Please someone inform me on that. Why is it so difficult?

Thanks.

TrDo.

[nosirrah]

Yes you can restore the key , it was not a problem to begin with so it would not be a problem after you restore it .

[TrDo]

Thanks Bruce. I do appreciate your reply.

Thanks again.

TrDo.

[Guest chrisssteeven]

Trojan.Agent is not a threat in itself, it is a fake threat displayed by rogue anti-spyware programs. These programs use this and other scare tactics to get the user to buy the full version of the fake spyware removal programs.

Programs related to Trojan.Agent should not be trusted under any circumstances and should be removed upon detection.