I keep getting this Trojan on my Computer

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510
I've been scanning my computer and ANITSpyware keeps picking up this Trojan on my computer and I don't know what it is. I removed it last time, but it's back again.

I scanned with Malwarebytes Anti-malware, but it can't pick anything on my computer.

I don't know what's going on because it's really bugging and I'm really paranoid about this persistent problem.

It says it's located in (x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121

I can't seem to know what it is and I can't seem to get rid of it. I need help D:
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


This is all it says

CRITICAL THREAT
It just says Trojan.Agent/Gen
(x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


This started happening when I updated Avast. Will this go away if I switch to a different Antivirus?

I'm sort of anxious about this being there.
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


That sounds exactly like my problem right now. So it's just the AVAST update then.
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


Yes I'm reading it right now. It's just only a false positive then?
 

tigerg

Honorable
Feb 24, 2013
1,013
0
11,660
What does the forum say? The Avast message board would know more information about this than anyone here. If they think it's a false positive, I would go with that for now. The alert is so new I bet that place has the most up to date info.
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


While not a satisfactory explanation --- it is devoid of specific detail --- we at least have an official response from avast:

"While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" [avast] a couple of times..."

For anyone using SAS as well as avast, be advised that SAS is detecting today's avast "emergency" update as a CRITICAL threat in one's registry area:

Trojan.Agent/Gen
(x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121

[Stress this is a Gen = GENERIC detection on SAS' part.]

Unless/until avast advises us to remove the startup entry (after running it at least once), I would suggest people NOT allow SAS to remove it.

So it could just be a bug in the new update.

I'm assuming that I should just leave this alone then.
 

Aeonocean

Honorable
Oct 9, 2013
22
0
10,510


Some people are believing it's a false positive and that it's only a recent update. Some people are saying they checked the registry and arrive at the AVAST program thing. Some are assuming it's a bug and are awaiting answer fro AVAST.

I'm thinking it's a false positive so I'll probably just leave it for now.
 

TRENDING THREADS