Re: Proxy-Agent.g C:\Windows\System32\Spoolsv.exe Trojan???

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/25/05


Date: Mon, 25 Apr 2005 10:10:50 -0400

From: "t.cruise" <t__cruise@[NoSpam]hotmail.com>

| Scanning with Xsoftspy I get a result:
| Proxy-Agent.g Trojan C:\Windows\System32\Spoolsv.exe Threat. I opt to remove, but when I
| reboot and scan again, I get the same results. I looked at the date for the file
| spoolsv.exe and it is date as many of the other files in C:\WINDOWS\SYSTEM32\DLLCACHE
| about 3 years ago). Am I getting a false positive for a Trojan?
|
| T.C.
| t__cruise@[NoSpam]hotmail.com
| Remove [NoSpam] to reply
|
| In memory of my mentor Alex Nichol MVP
| http://aumha.org/alex.htm
|

XoftSpy is junk and has been listed as a Rogue Anti Spyware ! It is know for *numerous*
False Positives and it is very likely that this is a False Positive declaration.

Junk the software and use only software that is NOT listed at SpyWareWarrior.Com
http://www.spywarewarrior.com/rogue_anti-spyware.htm

To be sure...

Please submit "spoolsv.exe" Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Proxy-Agent.g C:WindowsSystem32Spoolsv.exe Trojan???
    ... spoolsv.exe no longer shows as a false positive for a Trojan... ... In memory of my mentor Alex Nichol MVP ... > False Positives and it is very likely that this is a False Positive declaration. ... > Junk the software and use only software that is NOT listed at SpyWareWarrior.Com ...
    (microsoft.public.security.virus)
  • Re: Puper.dll
    ... | I have a trojan on my system. ... Download and execute the following Multi AV scanning tool. ... Reboot the PC" and when the PC begins ... to restart, hit the F8 key and start in Safe Mode. ...
    (microsoft.public.security.virus)
  • Re: Windows unable to run explorer.exe or IE
    ... one point it would be disabled by Trojan.StartPage on subsequent reboot. ... At that time the trojan processes running ... Windows) with my laptop which has current ver of NAV. ... > Repair Install. ...
    (microsoft.public.windowsxp.general)
  • Re: Virus infection help needed
    ... > registry that Symantec says it creates but still the virus is there.... ... you have a trojan, ... Reboot in safe mode and run a scan again. ...
    (alt.sys.pc-clone.dell)
  • Re: Please Help with WINCFG.SCR Infection !
    ... and Norton detected the trojan. ... reboot and they had vanished!! ... >> Followed path to trojan ref in registry as posted many places on internet ...
    (comp.security.misc)

Quantcast