Trojan.Agent/Gen-OnlineGames [Wilao]

[dranman]

Hi there,

I found Trojan.Agent/Gen-OnlineGames [Wilao] in C:\Windows\SETUP\SCRIPTS\START.EXE and when I quarantine andremove it andreboot, it still appearson quickscan. I am running Windows Vista Ultimate 32-bit.

Thanks for any help you can provide.

Dranman

[siliconman01]

Hi there,

I found Trojan.Agent/Gen-OnlineGames [Wilao] in C:\Windows\SETUP\SCRIPTS\START.EXE and when I quarantine andremove it andreboot, it still appearson quickscan. I am running Windows Vista Ultimate 32-bit.

Thanks for any help you can provide.

Dranman

Please post your SAS scan log. Also state what Windows operating system you are using and whether it is 32-bit or 64-bit.

[dranman]

Please post your SAS scan log. Also state what Windows operating system you are using and whether it is 32-bit or 64-bit.

I am running Vista Ultimate 32-bit.

Here is the log:

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 10/27/2010 at 02:50 PM

Application Version : 4.44.1000

Core Rules Database Version : 5766

Trace Rules Database Version: 3578

Scan type : Quick Scan

Total Scan Time : 00:16:19

Memory items scanned : 401

Memory threats detected : 0

Registry items scanned : 1654

Registry threats detected : 0

File items scanned : 27803

File threats detected : 1

Trojan.Agent/Gen-OnlineGames[Wilao]

C:\WINDOWS\SETUP\SCRIPTS\START.EXE

[siliconman01]

Start.exe is one of those files that may or may not be a security threat. I recommend that you create a Customer Support Request ticket and let the SAS gurus take a look at this. It may be a false positive.

https://www.superantispyware.com/precreateticket.html

Before you do this, submit the file START.EXE to VirusTotal and see if the long list of AVs are calling this a trojan.

http://www.virustotal.com/