I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
accept even the most elemental commands! I can understand when I run
Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
that uses 40% and more? I've simplyfied my disks and desktop by having NO
screensaver, no desktop pictures, no games no programs other than Explorer
(windows & internet), etc. I have the latest version of Norton Antivirus and
my computer is protected from invasions. I've delved into the background
runnings and am completely at a loss for what is going on. Any suggestions?

> ...I have the latest version of Norton Antivirus
> and my computer is protected from invasions.

As if!

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org


Livalone wrote:
> I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> accept even the most elemental commands! I can understand when I run
> Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> that uses 40% and more? I've simplyfied my disks and desktop by having NO
> screensaver, no desktop pictures, no games no programs other than Explorer
> (windows & internet), etc. I have the latest version of Norton Antivirus
> and my computer is protected from invasions. I've delved into the
> background runnings and am completely at a loss for what is going on. Any
> suggestions?

"Livalone" <(E-Mail Removed)> wrote in message
news:E2727D63-76F9-454E-BB10-(E-Mail Removed)...
> I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> accept even the most elemental commands! I can understand when I run
> Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> that uses 40% and more? I've simplyfied my disks and desktop by having NO
> screensaver, no desktop pictures, no games no programs other than Explorer
> (windows & internet), etc. I have the latest version of Norton Antivirus
> and
> my computer is protected from invasions. I've delved into the background
> runnings and am completely at a loss for what is going on. Any
> suggestions?
>

Do a _thorough_ check for malware, following all of the steps at one of
these Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/...moving_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't expect an answer to email.

"Livalone" <(E-Mail Removed)> wrote in message
news:E2727D63-76F9-454E-BB10-(E-Mail Removed)...
> I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> accept even the most elemental commands! I can understand when I run
> Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> that uses 40% and more? I've simplyfied my disks and desktop by having NO
> screensaver, no desktop pictures, no games no programs other than Explorer
> (windows & internet), etc. I have the latest version of Norton Antivirus
> and
> my computer is protected from invasions. I've delved into the background
> runnings and am completely at a loss for what is going on. Any
> suggestions?
>
Searching the internet for "agent.exe" reveals that this name is used by
Acronis True Image, by a MS product, and by virus writers.
Your symptoms indicate a virus which Norton did not catch. This sad
situation is hardly new by the way.

Other posters have given you information about how to remove the malware.

Jim

Thanks Frank! Best post so far!

"Frank Saunders, MS-MVP OE/WM" wrote:

> "Livalone" <(E-Mail Removed)> wrote in message
> news:E2727D63-76F9-454E-BB10-(E-Mail Removed)...
> > I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> > accept even the most elemental commands! I can understand when I run
> > Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> > that uses 40% and more? I've simplyfied my disks and desktop by having NO
> > screensaver, no desktop pictures, no games no programs other than Explorer
> > (windows & internet), etc. I have the latest version of Norton Antivirus
> > and
> > my computer is protected from invasions. I've delved into the background
> > runnings and am completely at a loss for what is going on. Any
> > suggestions?
> >
>
> Do a _thorough_ check for malware, following all of the steps at one of
> these Web pages.
> Help with malware:
> All MS-MVP Sites.
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://www.elephantboycomputers.com/...moving_Malware
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/darnit.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>
> Unexplained computer behavior may be caused by deceptive software.
> http://support.microsoft.com/kb/827315
>
> So How Did I Get Infected Anyway?
> For quite a few people it's by installing Messenger Plus, whose ads for
> malware don't identify the malware as such and try to convince you that you
> owe it to the author. See also:
> http://www.wilderssecurity.com/showthread.php?t=27971
> Don't ever do a "default" install of anything. Always choose Custom and see
> what else is being carried along. Don't install any extras you're not sure
> of.
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
> Answer in newsgroup. Don't expect an answer to email.
>
>

Thanks to you too, PA Bear! What would I do without my "newsies?"
Liv

"PA Bear" wrote:

> > ...I have the latest version of Norton Antivirus
> > and my computer is protected from invasions.
>
> As if!
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v1.99.1
> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
> analysis, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin; DTS-L.org
>
>
> Livalone wrote:
> > I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> > accept even the most elemental commands! I can understand when I run
> > Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> > that uses 40% and more? I've simplyfied my disks and desktop by having NO
> > screensaver, no desktop pictures, no games no programs other than Explorer
> > (windows & internet), etc. I have the latest version of Norton Antivirus
> > and my computer is protected from invasions. I've delved into the
> > background runnings and am completely at a loss for what is going on. Any
> > suggestions?
>
>

Why do you suppose I keep paying for Norton AV and it gives me so much grief?
Duh.
Liv

"Jim" wrote:

>
> "Livalone" <(E-Mail Removed)> wrote in message
> news:E2727D63-76F9-454E-BB10-(E-Mail Removed)...
> > I've been sitting through 10, 15, even 20 minutes of waiting for my CPU to
> > accept even the most elemental commands! I can understand when I run
> > Photoshop that I'm using 40% but what the hey is going on with "agent.exe"
> > that uses 40% and more? I've simplyfied my disks and desktop by having NO
> > screensaver, no desktop pictures, no games no programs other than Explorer
> > (windows & internet), etc. I have the latest version of Norton Antivirus
> > and
> > my computer is protected from invasions. I've delved into the background
> > runnings and am completely at a loss for what is going on. Any
> > suggestions?
> >
> Searching the internet for "agent.exe" reveals that this name is used by
> Acronis True Image, by a MS product, and by virus writers.
> Your symptoms indicate a virus which Norton did not catch. This sad
> situation is hardly new by the way.
>
> Other posters have given you information about how to remove the malware.
>
> Jim
>
>
>

I wouldn't have a Norton app in my house, let alone installed on one of my
machines.

NB: Home versions of NAV may identify but not remove hijackware.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org


Livalone wrote:
> Why do you suppose I keep paying for Norton AV and it gives me so much
> grief? Duh.
> Liv
>
> "Jim" wrote:
>
>>
>> "Livalone" <(E-Mail Removed)> wrote in message
>> news:E2727D63-76F9-454E-BB10-(E-Mail Removed)...
>>> I've been sitting through 10, 15, even 20 minutes of waiting for my CPU
>>> to
>>> accept even the most elemental commands! I can understand when I run
>>> Photoshop that I'm using 40% but what the hey is going on with
>>> "agent.exe"
>>> that uses 40% and more? I've simplyfied my disks and desktop by having
>>> NO
>>> screensaver, no desktop pictures, no games no programs other than
>>> Explorer
>>> (windows & internet), etc. I have the latest version of Norton
>>> Antivirus
>>> and
>>> my computer is protected from invasions. I've delved into the
>>> background
>>> runnings and am completely at a loss for what is going on. Any
>>> suggestions?
>>>
>> Searching the internet for "agent.exe" reveals that this name is used by
>> Acronis True Image, by a MS product, and by virus writers.
>> Your symptoms indicate a virus which Norton did not catch. This sad
>> situation is hardly new by the way.
>>
>> Other posters have given you information about how to remove the malware.
>>
>> Jim

"Livalone" <(E-Mail Removed)> wrote in message
news:13844C6E-A60D-44F2-8F8C-(E-Mail Removed)...
> Thanks Frank! Best post so far!


Can't see how mine was better than Robear's. <G>

--
Frank Saunders, MS-MVP OE/WM
Do not send mail.