I foolishly opened an email that I should not have. When I ran Malwarebytes but showed one problem in the results: Trojan.Agent.ED. In the Quarantine Log it also showed Trojan.Agent.ED. I am running Windows 7. Any help you can provide me would be greatly appreciated.
Learn More about Trojan.Agent.ED:
Trojan.Agent.ED is a malicious Trojan virus, which is harmful to your computer once it is installed in your computer. It spreads very fast and it has already rooted deeply in your computer until you see the warming popping up from the antivirus programs. What’s more, it bundles with many dangerous virus and applications. In another words, it will automatically install more malicious Trojan, browser hijacker, pop-ups into your computer. Worse still, it is capable of collecting your personal information such as your email address, login passwords and your online traces for marketing. Once you find it, you should remove it as soon as possible before it leads to your computer’s system crash.
Where Trojan.Agent.ED comes from?
Usually, your computer will be attack by Trojan.Agent.ED when you download unfamiliar freeware, visit unsafe websites and open spam email attachments. Therefore, there are three points you need to be aware: Firstly, be cautious when clicking some link, since it can point your browser to download threats or visit malicious web site. Secondly, don't download unknown "free" software. Thirdly, avoid opening unknown e-mail attachments.
Need help to get rid of Trojan.Agent.ED?
To get rid of such a kind of stubborn Trojan virus, manual removal is the most effective way. To protect your computer and data, complete all steps below and you will get your healthy PC back. If you are not familiar with manual removal, you'd better get professional help from Online PC Expert:
How do I get rid of Trojan.Agent.ED?
There are six steps for you to get rid of Trojan.Agent.ED, but this course is just a reference, as Trojan.Agent.ED changes its location and files name all the time, so that it is not strange if you cannot follow some steps when you remove this virus. Please be careful when you delete files, or your PC will go into trouble after you make any mistakes.
Step1: Boot up your computer in Safe Mode with Networking:
On Windows XP, Win 7 / Vista:
•Reboot your infected PC
•Keep pressing F8 key before Windows start-up screen shows
•Use the arrow keys to select “Safe Mode with Networking” and press Enter.
(If your PC’s Safe Mode with Networking has been disabled by this Trojan as well, please contact Online PC Expert to get further solutions.)
On Windows 8 / 8.1
Method One
1: Press “Windows” and “R” keys together to open the Run box
2: Type “msconfig” in the the Run box and click
3: Click the Boot tab, then check the box that says “Safe boot” and “Network” under the Boot options section Click OK.
4: Click Restart when it informs that you need to restart your computer.
Method Two
1: Press the “Windows” + “C” keys, and then click Settings.
2: Click Power, hold down Shift key on your keyboard and click Restart.
3: Click Troubleshoot button
4: Click Advanced options button
5: Click Startup Settings button
6: Click Restart button
7: Press 5 on your keyboard to Enable Safe Mode with Networking.
(If your PC’s Safe Mode with Networking has been disabled by this Trojan virus as well, please contact Online PC Expert to get further solutions.)
Step2: Show all hidden files:
On Windows XP
•Close all programs so that you are at your desktop.
•Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
•Click on the Control Panel menu option.
•When the control panel opens click on the Appearance and Personalization link.
•Under the Folder Options category, click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.
On Windows 7 / Vista
•Click and open Libraries
•Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.
•Click on Windows Explorer ;
•Click on View tab;
•Check the “Hidden Items” box
Step3: Delete Trojan.Agent.ED redirect Virus associated files
%UserProfile%\Application Data\[random digits]\[random digits].exe
%AppData%[trojan name]toolbaruninstallIE.dat
%AppData%[trojan name]toolbarstats.dat
%UserProfile%\Application Data\[random digits]\[random digits].cfg
Step 4: Open Registry Editor:
Method 1
(Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1):
•Call out “Run” box by pressing “Windows” key + “R” key on your keyboard;
•Type “Regedit” into the Run box and click OK to open Registry Editor
Method 2
(Available on Windows 7/ Vista):
•Click on Start button to open Start Menu
•Type “Regedit” into the search box and click on Regedit to open Registry Editor
Step 5: Terminate these Registry Entries created by Trojan.Agent.ED redirect.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Security Pro Virus\UninstallString “%AppData%[RANDOM CHARACTERS][RANDOM CHARACTERS].exe” –u
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\[RANDOM CHARACTERS] %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
Step6: Stop Trojan.Agent.ED redirect processes in the Windows Task Manager
random.exe
On Windows XP
•Press Ctrl+Alt+Del keys together to open Windows Task Manager ;
•Under the Processes tab, right-click on the processes related with the virus and click End Process
On Windows 7 / Windows Vista
•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the virus and click
On Windows 8 / 8.1
•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the virus and click
Please Note Again that if you are not a computer expert, it will be very risky to complete the Trojan.Agent.ED manual removal process. You have to assure that you are equipped with expert-level knowledge and skills on PC before you do anything on the infected system. If you are not experienced enough on manually removing a virus, please get Professional PC Support to help you.
No comments:
Post a Comment