Re: Win32/Agent.ONB Trojan virus built into an mp3 player rom




Pjdura's fix worked for me.

It's not a virus, it's a feature that behaves like a virus might (tries
to make things happen in your PC). I flipped the switch shown in the 3rd
box above this one -- thanks, much pjdura.

Before, I got 2 new drive letters when I connected up. F: had the same
3 files GJ listed, and G: was my music, voice recordings, etc. (and the
PDF user manual - pretty slick). Now I only get a G: drive. Disabling
the 'system' feature makes my oversize postage-stamp-looking iVO-Sound
m220 4G MP3 player ($20 at Micro Center) a simple USB device, not a
complicated one.

Before making the switch, I got a popup asking if I wanted WinAmp to
control the music on my 'new' CD-ROM drive (Auto M*u*s*i*c Transfer
never seemed to work, but it did spawn a nasty trojan message) and then
a second popup with a Windows Explorer option (and a variety of other
choices). Now I just get the second popup. The faux CD is gone, and I
only see the jumpdrive partition. I don't care. I don't get any more
trojan virus scary popups, either. (FWIW, trojans are a completely
different breed of pest, and no product finds even most of them. Nearly
all antivirus products catch and try to kill essentially every virus, as
long as you let them update every day. Windows Update should be on auto
or handled properly.)

The reason I can't find any more info on psw.Agent.YOM is because it's
not harmful, it's not really a trojan; it's just an action that's
recognized by Avast! antivirus (free version) as hooking into my PC. I'm
being alerted to potentially dangerous activity, but I understand that
it's harmless. Now it's "gone."

And, frankly, I don't think I follow aimie077's issue at all. I don't
understand how this feature could cause a file write failure to the
drive.
Unless that issue is different from mine, I'm going with 'reboot' on
this one . . .


--
cgosh
------------------------------------------------------------------------
cgosh's Profile: http://forums.techarena.in/members/97639.htm
View this thread: http://forums.techarena.in/antivirus-software/1095733.htm

http://forums.techarena.in

.



Relevant Pages

  • Re: Possible Trojan/Virus preventing dial up?
    ... I don't think this is a virus or trojan, but I'm having trouble recalling the name of the "feature" which is biting you. ... > yesterday started having problems dialing to my ISP in one computer. ...
    (microsoft.public.security)
  • >>>> REMOVE MANUALLY <<<<
    ... Remove Virus Manually ... How To Remove Spyware Manually ... Manually Remove Trojan Horse ... Manually Remove Symantec Antivirus ...
    (sci.math.num-analysis)
  • Re: trojan virus PLEASE HELP!
    ... There are anti virus News Groups specifically for this type of discussion. ... How do you know you have a Trojan on your PC? ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (microsoft.public.windowsupdate)
  • Re: Vicious Vundo Infection
    ... Spybot) but cannot get rid of it. ... The virus puts a new entry in the startup command every time I re- boot. ... The Active Boot Disk has a 10 day trial, ... that the trojan created. ...
    (alt.comp.anti-virus)
  • RE: Possible Virus or Trojan?
    ... It states that the Trojan ... virus came from Windows Update. ... I have tried installing the UPnP Client and then ...
    (microsoft.public.windowsxp.security_admin)