JS/downloader.agent

[the staring frogs of Southern Iberia]

My son just called from college stating he had picked up a virus called
JS/downloader.agent. AVG keeps popping up telling him a threat has been
detected but won't heal the infection, just move it to the vault. I had him
run a Trend Online scan but he said it just told him he had some cookies. Is
Smitfraud a viable fix or does he need better removal tools? Smitfraud
sounds a little complex possibly for him since I guess from looking quickly
at it, it needs to be run in safe mode. Laptop is an HP with Vista for the
OS. He was home for the weekend and I suspect he might have picked up the
virus here as opposed to school because of their firewall protections.

 

[Synapse Syndrome]

My son just called from college stating he had picked up a virus called
JS/downloader.agent. AVG keeps popping up telling him a threat has been
detected but won't heal the infection, just move it to the vault. I had
him run a Trend Online scan but he said it just told him he had some
cookies. Is Smitfraud a viable fix or does he need better removal tools?
Smitfraud sounds a little complex possibly for him since I guess from
looking quickly at it, it needs to be run in safe mode. Laptop is an HP
with Vista for the OS. He was home for the weekend and I suspect he might
have picked up the virus here as opposed to school because of their
firewall protections.

This should sort it out. You might need to make sure that IE7 is not run in
Protected Mode.

http://www.eset.com/onlinescan/

ss.

 

[Synapse Syndrome]

My son just called from college stating he had picked up a virus called
JS/downloader.agent. AVG keeps popping up telling him a threat has been
detected but won't heal the infection, just move it to the vault. I had
him run a Trend Online scan but he said it just told him he had some
cookies. Is Smitfraud a viable fix or does he need better removal tools?
Smitfraud sounds a little complex possibly for him since I guess from
looking quickly at it, it needs to be run in safe mode. Laptop is an HP
with Vista for the OS. He was home for the weekend and I suspect he might
have picked up the virus here as opposed to school because of their
firewall protections.

Try this as well.

http://www.ewido.net/en/onlinescan/

I just run NOD32 on my machines, and use that the ewido online scan once in
a while, but I never get malware, due to the way I have everything set-up.

ss.

 

[Richard G. Harper]

Most of the JavaScript download/injection infections cannot be cleaned since
it's the hostile code on the web page or in the IE cache that's triggering
the warning. Best bet is to empty all files from the IE cache, reboot
immediately, then run a full scan to be sure you've cleaned it.