Trojan.Win32.Agent

Hi Folks.....

I discovered this trojan using a-Squared.....EZ Trust, Spybot and
AdAware (among a few I ran) did not alert on it. A-Squared called it
"Trojan.Win32.Autoit.b"

I fired the infected files off to Virus Total and got the following
analysis. I have been running with just XP's firewall for 2 weeks,
which is not my usual thing.....but heck, none of us are perfect!! (G)

I got on the trail of this when I lost all sound with both Firefox and
IE browsers about midnight last night. I have done many things to
figure this sound problem out with no joy, I might add. But I will now
remove these files.

Any other suggestions before I remove them?? I was sure it was a false
alarm!!

Heather
Results of a file scan
This is a report processed by VirusTotal on 01/27/2006 at 20:24:55 (CET)
after scanning the file "set5200.exe" file.
Antivirus Version Update Result
AntiVir 6.33.0.77 01.27.2006 TR/AutoItroj.A
Avast 4.6.695.0 01.27.2006 no virus found
AVG 718 01.27.2006 no virus found
Avira 6.33.0.81 01.27.2006 TR/AutoItroj.A
BitDefender 7.2 01.27.2006 no virus found
CAT-QuickHeal 8.00 01.27.2006 no virus found
ClamAV devel-20051123 01.27.2006 no virus found
DrWeb 4.33 01.27.2006 no virus found
eTrust-InoculateIT 23.71.61 01.27.2006 no virus found
eTrust-Vet 12.4.2058 01.27.2006 no virus found
Ewido 3.5 01.27.2006 no virus found
Fortinet 2.54.0.0 01.27.2006 suspicious
F-Prot 3.16c 01.26.2006 no virus found
Ikarus 0.2.59.0 01.27.2006 no virus found
Kaspersky 4.0.2.24 01.27.2006 no virus found
McAfee 4684 01.27.2006 no virus found
NOD32v2 1.1383 01.27.2006 no virus found
Norman 5.70.10 01.27.2006 no virus found
Panda 9.0.0.4 01.27.2006 no virus found
Sophos 4.02.0 01.27.2006 no virus found
Symantec 8.0 01.27.2006 no virus found
TheHacker 5.9.3.082 01.27.2006 no virus found
UNA 1.83 01.27.2006 Trojan.Win32.Agent
VBA32 3.10.5 01.27.2006 no virus found

"Art" wrote in message

> On Fri, 27 Jan 2006 15:42:08 -0500, "Heather"
> wrote:
>
>>> Hey Figgs, do you have a \Net Assistant folder under Program Files?
>>> If
>>> so, inder \bin do you have several of these xxx5200.exe files? Do
>>> you
>>> now or did you once use Bell Symatico as your ISP?
>>
>>Yes, all of the aboved. I suspected they were part of the software
>>for
>>Sympatico. You ain't just a pretty face, lol.
>
> Peg thinks I'm handsome anyway. Or so she says. When she's in a good
> mood. Or wants help with her PC. Or wants to go out for dinner.

ROFL!! I do the same to Ron, for dinner, etc. He is clueless about
computers.
>
> Doesn't ring any bells here. I'd restore from backup myself. I suppose
> you ever did clone a backup drive? It can really save your butt when
> Windows gets screwed up. Saves a lot of time and effort.

No...never got into cloning, but it is not a bad idea. I have thought
of getting an external HD and using that.

Sound is now back. And Willy is still howling after I did the reinstall
of the sound drivers and finally figured out what the problem was. I am
too embarrassed to tell you.....but I am still laughing myself!! Spent
bloody hours trying to figure it out and I said it would turn out to be
something DUMB!!!! IT WAS!! (I will tell you off List, grin)

Thanks, old guy.....takes the senior citizens to run the world, and
computers too, chuckle.

Figgs