Trojan.Agent.Gen Attacks Svchost.exe, How to Remove

computer is not good with Trojan.Agent.Gen

OUTLINE

• What is Trojan.Agent.Gen?
• How dangerous is Trojan.Agent.Gen?
• Note
• Follow steps to remove Trojan.Agent.Gen
• Final
• Other related posts

What Is Trojan.Agent.Gen

Trojan.Agent.Gen is categorized as Trojan horse that is designed to steal victims’ accounts information without knowledge. “Agent” indicates that the Trojan doesn’t occupy typical virulent features so that it can lurk in your system without your knowledge and do preparations. Usually, Trojan.Agent.Gen spreads through websites and external devices mainly. When in, such Trojan cannot be removed automatically by even reputable anti-virus programs due to UPX technique and SHA1. The two predominant techniques enable the Trojan to inject vicious codes into key processes such as Startup, secure section and the like. As a consequence, some undesirable issues will emerge to surface and make you suffer:

• Computer become much slowly in operations due to highly consumed CPU usage.
• Search redirect happens from time to time unreasonably.
• Countless unknown items are piling up in several places of the target computer.
• Some more infections are detected by installed anti-virus programs.

How Dangerous Is Trojan.Agent.Gen

Trojan.Agent.Gen is a collective name, there are many more variants with other letters added like Trojan.Agent.Gen.C generated under its category. They do good job in modifying system configurations to cling to target computer and open up backdoor to transfer collected information to its remote server.

Also, the Trojan horse is capable of attacking and cloning C:/Windows/Temp/svchost.exe (a key background process file that coordinates several services for better performance) to control the pivotal services like security center in a system and confuse both computer users and man-made security utilities against easy removal.

Such random and ill-purpose modification will give rise to vulnerability and alleviate installation of additional infections. What’s more evil is that Trojan.Agent.Gen numerates build-in items to read and collect valuable information. Once such information being resold to other spammers or stolen, your hard-earn money, level of your game will be gone for good.
One more attention required to information theft is that the exposed information will let spammers know which sites are mostly visited by PC users and thus enable them put their vicious codes there to aim at large number of potential victims.

It is clear that Trojan.Agent.Gen needs to be removed in a quick manner to stop additional infections from possible influx and prevent from being affected by virus when even accessing popular sites like Facebook. Since anti-virus programs are not able to remove Trojan.Agent.Gen completely, it is recommended to adopt the latest solution offered below to help yourself. No delay or more problems may be incurred.

Technical Steps to Remove Trojan.Agent.Gen

1. Reset browsers.


Internet Explorer: Tools menu > Internet Options > Advanced tab > Restore Defaults button > OK.



Mozilla Firefox: Firefox button > Help > Troubleshooting information > ‘Reset Firefox’ button.


Google Chrome:‘Customize and Control Google Chrome’ menu > ‘Options’ > ‘Under the Hood’ > ‘Reset to Defaults’ button.


Opera: Show hidden files and folders (see Step 3) > navigate to "C:\Users\user_name\AppData\Roaming\Opera\Opera\" > remove Operapref.ini.




2. Access Task Manager to remove the items with the path directing to Trojan.Agent.Gen according to the installed anti-virus program.

Win+R key combination > Run box > type "CMD" > Enter key > type “taskkill.exe /im msblast.exe” or “taskkill.exe /im teekids.exe” or “taskkill.exe /im penis32.exe” > Enter key > access Task Manager > View >select columns > tick "PID" and "Path name" > go to open up System Information > end the process with path name directing to Trojan.Agent.Gen's path(according to the threat alert) or the path that doesn't belong to system.


(tip: if some vicious processes reappear, one could find the PPID through PID functionality; please then remove the parent process(es) with the command “taskkill /im system.exe /f” through DOS window.)

3. Unveil hidden files and folders to remove the ones created by Trojan.Agent.Gen.

Windows 7/XP/Vista
‘Control Panel’ > 'user accounts and family safety' > 'Folder Options’ > View tab > tick ‘Show hidden files and folders' and non-tick 'Hide protected operating system files (Recommended)’ > ‘OK’.

Windows 8
Start screen > Windows Explorer > View tab > tick ‘File name extensions’ and ‘Hidden items’ options > OK button.

a.when done, remove the given items:
C:\WINDOWS\Temp
C:\Users\[user name]\AppData\Local\Temp\
C:\Documents and Settings\[user name]\Local Settings\Temp
C:\Documents and Settings\[user name]\Local Settings\Temporary Internet File

b. navigate to the following directories and remove the items generated on and after the date when Trojan.Agent.Gen was firstly detected:

(tip: if one owns Windows XP, it is suggested to execute the following steps after closing down System Restore function: right click on “My Computer”/”Computer” > Property > navigate to System Restore tab > tick “Turn off System Restore”)

turn off system restore to prevent from Trojan.Agent.Gen's reimage

C:\Windows
%SystemDriver%\
C:\Program Files\
C:\windows\system32\
C:\users\user\appdata\local\
C:\Users\[your username]\Documents\
C:\users\[username]\appdata\locallow\

You are not able to remove the virus because you are so confused about svchost.exe process or you don’t know how to implement the CMD line? You may want professionals that has engaged in computer security support industry for a decade. Simply click on the below pic and you'll be directed to experts from Global PC Support Center.

Other Related Post

Remove Trojan.Agent/Gen.Backdoor (Trojan backdoor.agent.gen) [Effective Removal Thread]