Win32/TrojanDropper.Agent.DGO

Highflyer_GP

Honorary Master
Joined
Jul 2, 2005
Messages
10,123
Reaction score
6
Location
GP
Please be aware of this nasty little bug doing the rounds. It's a real bitch to remove, no matter how good you think your AV may be :)

It causes your AV to think that legitimate files are viruses, causing it to quarantine/delete them. It also prevents certain (possibly essential) apps from starting up. Be safe guys.
 
Ok after battling with this thing for a few days, I've finally managed to have cleaned up most of the mess that it left behind. I have arguably the best AV installed (NOD32), and it managed to infect NOD32's startup file causing it to quarantine itself!

If anyone runs into this, post here and I'll try my best to help, seeing that it affects each machine uniquely.
 
If NOD can be disabled by a worm then surely its not the best AV.

A good HIPS system prevents such. You 'immunise' your AV from deletions, modification and also termination. :)
I've got System Safety Monitor running over here :).
 
Top
Sign up to the MyBroadband newsletter
X