Jump to content

TROJAN INFO


Recommended Posts

Guest IgNiTE
Posted

Hey,

I was just running a AV scan thru my ESET's NOD32. I just got a new update

from online with more signatures and stuff. So I wanted to do the scan see if

something pops up. I do this scans about every 2 or 3 days. I did have Vundo

trojan before like a 3 to 4 weeks ago. Thanks to Microsoft MVPS, Fourms like

this & Aumha Fourms that problem was taken care of.

Here is the Error popped just few min. ago.

 

Threat :- Win32/Agent.OBH Trojan.

Anyone know what that means or what type of trojan are we talking about here.

 

Thanks for your input.

  • Replies 3
  • Created
  • Last Reply
Guest Maurice N  ~ MVP
Posted

Q: Did NOD32 indicate the name of the file(s) involved ?

 

--

Maurice Naggar

MS-MVP

-----

 

"IgNiTE" <IgNiTE@discussions.microsoft.com> wrote in message news:129C0B08-1BEB-4736-B4DE-CD8769B3268B@microsoft.com...<span style="color:blue">

> Hey,

> I was just running a AV scan thru my ESET's NOD32. I just got a new update

> from online with more signatures and stuff. So I wanted to do the scan see if

> something pops up. I do this scans about every 2 or 3 days. I did have Vundo

> trojan before like a 3 to 4 weeks ago. Thanks to Microsoft MVPS, Fourms like

> this & Aumha Fourms that problem was taken care of.

> Here is the Error popped just few min. ago.

>

> Threat :- Win32/Agent.OBH Trojan.

> Anyone know what that means or what type of trojan are we talking about here.

>

> Thanks for your input.</span>

Guest Maurice N  ~ MVP
Posted

Re: TROJAN INFO Win32/Agent.OBH

 

P.S.

ref http://research.sunbelt-software.com/threa...&threatid=44209

"Trojan.Win32.Agent.oh is a trojan downloader that contacts remote servers to download and install additional malware."

"Trojan.Win32.Agent.oh infects Windows files winlogon.exe and iexplore.exe. It modifies the registry and may lower system security."

"File Traces

1303.exe

arm32.dll

c:\documents and settings\all users\documents\settings\2006.dll

C:\Documents and Settings\All Users\Documents\Settings\ur32mega.dll

ver2.exe

veter15.exe

veter16.exe

"

Let me suggest you have NOD32 put the tagged files in quarantine, at least.

 

--

Maurice Naggar

MS-MVP

-----

 

"IgNiTE" <IgNiTE@discussions.microsoft.com> wrote in message news:129C0B08-1BEB-4736-B4DE-CD8769B3268B@microsoft.com...<span style="color:blue">

> Hey,

> I was just running a AV scan thru my ESET's NOD32. I just got a new update

> from online with more signatures and stuff. So I wanted to do the scan see if

> something pops up. I do this scans about every 2 or 3 days. I did have Vundo

> trojan before like a 3 to 4 weeks ago. Thanks to Microsoft MVPS, Fourms like

> this & Aumha Fourms that problem was taken care of.

> Here is the Error popped just few min. ago.

>

> Threat :- Win32/Agent.OBH Trojan.

> Anyone know what that means or what type of trojan are we talking about here.

>

> Thanks for your input.</span>

  • 2 weeks later...
Posted

Re: TROJAN INFO Win32/Agent.OBH

 

Exactly, Maurice, it is important to let NOD32 put the tagged files in

quarantine and then the tagged files need to be fully analyzed for a threat

or to see if the issue was a false positive on NOD32's part. There are too

many false positives in the industry these days.

 

"Maurice N ~ MVP" wrote:

<span style="color:blue">

> P.S.

> ref http://research.sunbelt-software.com/threa...&threatid=44209

> "Trojan.Win32.Agent.oh is a trojan downloader that contacts remote servers to download and install additional malware."

> "Trojan.Win32.Agent.oh infects Windows files winlogon.exe and iexplore.exe. It modifies the registry and may lower system security."

> "File Traces

> 1303.exe

> arm32.dll

> c:documents and settingsall usersdocumentssettings2006.dll

> C:Documents and SettingsAll UsersDocumentsSettingsur32mega.dll

> ver2.exe

> veter15.exe

> veter16.exe

> "

> Let me suggest you have NOD32 put the tagged files in quarantine, at least.

>

> --

> Maurice Naggar

> MS-MVP

> -----

>

> "IgNiTE" <IgNiTE@discussions.microsoft.com> wrote in message news:129C0B08-1BEB-4736-B4DE-CD8769B3268B@microsoft.com...<span style="color:green">

> > Hey,

> > I was just running a AV scan thru my ESET's NOD32. I just got a new update

> > from online with more signatures and stuff. So I wanted to do the scan see if

> > something pops up. I do this scans about every 2 or 3 days. I did have Vundo

> > trojan before like a 3 to 4 weeks ago. Thanks to Microsoft MVPS, Fourms like

> > this & Aumha Fourms that problem was taken care of.

> > Here is the Error popped just few min. ago.

> >

> > Threat :- Win32/Agent.OBH Trojan.

> > Anyone know what that means or what type of trojan are we talking about here.

> >

> > Thanks for your input.</span>

> </span>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...