Results 1 to 9 of 9

Thread: Trojan.Win32.Agent.acj

  1. #1
    jenaguru Guest

    Default Trojan.Win32.Agent.acj

    KAV 6.0 detects this in my computer but kaspersky home site, viruslist page on the same site, grisoft, norton home shows no search result for this trojan. Is it a false detection? Is there really a trojan named this? Any information on this please?

    jenaguru.

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan.Win32.Agent.acj

    Have you tried to upload the file to www.virustotal.com to see what other AV engine says?
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Trojan.Win32.Agent.acj

    Where is the trojan located or what file is it? It could be a false positive.

    http://www.malwarelist.org/startup/scheda.asp?num=3075

    Does the KAV see the IE dll as a threat? The new KAV does pick out many things as a false positive. Even the Opera .dlls and the Word .dlls.

    Oldsod
    Best regards.
    oldsod

  4. #4
    jenaguru Guest

    Default Re: Trojan.Win32.Agent.acj

    detected: Trojan program Trojan.Win32.Agent.acj File: X:\XXX\XXX\WindowsXP-KB835935-SP2-ENU.exe/i386/win9xmig/eastman/migrate.dll

    Here is the trojan. XP SP2 file size 270MB or so, cannot be uploaded. What can I do now? Tell me one thing: can I scan only this file using online virus scanners?

    Thanks for the reply. Enjoy the weekend. jenaguru

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan.Win32.Agent.acj

    That sounds like a false positive... but, something I have not understood is
    the size of "migrate.dll"... that to my knowledge should not be more than 30KB and not almost 300 MB.
    You could try to scan it at:
    http://www.pandasoftware.com/products/ActiveScan.htmorhttp://housecall.trendmicro.com/
    Please come back with your results and please confirm that DLL is of 270MB
    Fax


    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Trojan.Win32.Agent.acj

    Sounds like a false positive.

    The latest version of KAV is presenting FP's almost everytime I run the desktop. Seems as though one half of the OS and software is set as Trusted, just to keep life bearable.

    Oddly enough the laptop has NOD32 with the heuristics set on high and I have yet to find a false positive. And it is notorious for false positives.

    Oldsod

    Message Edited by Oldsod on 12-08-2006 03:26 PM
    Best regards.
    oldsod

  7. #7
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan.Win32.Agent.acj

    Aaah, well .... now I have understood.... that file is actually the Service Pack 2 for
    windows XP.In this case, if you are sure that you have downloaded it from microsoft (link) than is just a false positive...
    Please report it to Kaspersky (newvirus at kaspersky dot com) with subject "false positive"
    Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #8
    jenaguru Guest

    Default Re: Trojan.Win32.Agent.acj

    The service pack is downloaded from http://www.softwarepatch.com/windows/xpsp2.html and of size 272 MB. Can it be infected? Should I delete it?
    Regards. jenaguru.

  9. #9
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan.Win32.Agent.acj


    <blockquote><hr>jenaguru wrote:
    The service pack is downloaded from http://www.softwarepatch.com/windows/xpsp2.html and of size 272 MB. Can it be infected? Should I delete it?
    Regards. jenaguru.
    <hr></blockquote>
    Just checked, the download link goes directly to Microsoft. So it is a false positive.Please report to kaspersky (newvirus at kaspersky dot com) providing the link that is actually this one:
    http://download.microsoft.com/downlo...35-SP2-ENU.exe
    Regards,FaxEDIT: you may want to download it again and scan it, just to be sure...

    Message Edited by fax on 12-09-200602:51 AM

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •