trojan.win32.agent.akk

[miamiscott]

I begin receiving the following message recently:

Your browser has been hijacked by trojan.win32.agent.akk, You need to clean your system immediately, in other case it can be crashed soon! Click OK to download the hight tech spyware protection software (recomended)

I believe that I removed the virus, but not before it hosed up the screen on my laptop.  The right hand side of my screen (about 4 inches) now has vertical lines on it (mostly white lines) and appears to be broken like a piece of glass.  When I take a screenshot of it the screen appears to be fine, but something it over writing everything else on the right side of my screen.

Any help would be greatly appreciated!!

[file cleanup - saving space - attachment deleted by admin]

[CBMatt]

Once we start, you won't have access to this post anymore, so I recommend that you print out this post or save it to a Notepad file.  Open HijackThis and scan again.  Check the following entries, but don't do anything to them yet...

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

O2 - BHO: (no name) - {2FA3B736-1AC7-454D-8E94-8BA8158BF064} - (no file)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)

O4 - HKLM\..\Run: [SpywareRemover] C:\Program Files\SpywareRemover\SpywareRemover.exe -boot
O4 - HKCU\..\Run: [SpywareRemover] C:\Program Files\SpywareRemover\SpywareRemover.exe -boot

O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -

O4 - HKLM\..\Run: [ErrorSmart] C:\Program Files\ErrorSmart\ErrorSmart.exe
(I'm not familiar with this ErrorSmart program.  Based on what I've found, I would remove it, but it could be legitimate.  Is this a program you normally use?  Don't check this yet.)

Now, close all windows (including this one) besides HijackThis, then click Fix Checked.  Close HijackThis and reboot into Safe Mode and enable hidden files and folders.

Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following (if present)...

MyWebSearch
SpywareRemover  (This looks legitimate, but it's considered rogue anti-spyware, which means it shouldn't be trusted.)

Please note any other programs that you dont recognize in that list in your next response.

Navigate to and delete the following folder(s) if present...

C:\Program Files\SpywareRemover

Once you've done all of this, reboot into Normal Mode and post a new HijackThis log so we can see if there's any other junk we need to clean up.  Let me know how everything's running now and if you had any problems following my steps.

[CBMatt]

Also...  You're vulnerable without a firewall, so you should look into getting either ZoneAlarm, Kerio Personal Firewall, or Comodo.  They're all good free firewalls.  Just be sure you only have one installed at a time!  Download the firewall of your choice, disconnect from the internet, disable Windows Firewall, and install your new firewall.




Another thing...although you do have some infected files showing up, I don't think your monitor problem is related.  It sounds like a hardware issue to me, and it may just be a rather unfortunate coincidence.  If it is indeed a hardware problem, you will most likely need to go to a shop.  Out of curiosity...do you still have the problem in Safe Mode?

[miamiscott]

I followed your instructions and nothing has changed.  I've been thinking that the virus probably wrote over some code involved with the display.  I'm not sure how or even if that's the case, but that's what I've figured is going on.

I've attached the latest hijack this log as you requested.

[file cleanup - saving space - attachment deleted by admin]

[CBMatt]

Your log looks clean to me.  You still need a firewall, however.

To be honest, I don't think your problem is virus-related.  I've never heard of a virus that does any such thing to a computer's display.  And the one you mentioned does no more than create fake pop-up alerts designed to scam people.  The fact that screenshots aren't affected leads me to believe it is a hardware issue.  It sounds like your screen just happened to fail around the same time you encountered your infection.  If your display is still wonky in Safe Mode, that would support this further.

With that said...just in case traces of the infection might still exist, I would suggest taking a look here...
http://forums.whatthetech.com/How_to_remove_trojan_win32_agent_akk_Critical_System_Error_t86102.html