Posted 06 July 2011 - 07:58 PM
I have been working all day trying to get my system free of trojans, especially TrojWare.JS.TrojanDownloader. Agent.~EWH@226922441
I thought the problem started today around 10:30 AM (EDT) when I clicked on a link in an email from a trusted friend in Opera's mail client. This is just the Opera POP/IMAP client, not their actual mail service. (They are really confusing people with not having more distinctive names for each product, IMO...but I digress...) My email account is with GMX. Comodo Internet Security Premium (latest free version) produced a popup stating it found 2 trojans. That's the only time the real-time protection activated this whole time. I blocked/quarantined/deleted these. On running a full scan with Comodo, it found more instances. I quarantined and then deleted them. I ran another full scan and everything seemed clean. I started browsing with Opera (11.50) again and it was sluggish and sites weren't loading right, so I ran Comodo again and it found more instances of trojans. Basically, I've repeated the same cycle several times. I ran Malwarebytes free version in full scan mode one time and it didn't find anything. I DL'd HijackThis and ran a report, but I don't know how to analyze it.
When I looked at the Comodo log, it looks like the problem actually started earlier, around 5 AM. (Yeah, I was up too late last night...) I'm not sure what might have triggered it, although possibly it was spam in my inbox accessed via the Opera client. Whatever it was, it happened right before I shut down the computer and went to bed.
BTW, if I may also mention another brief aside, GMX has been annoying lately with obvious spam showing up in my inbox, yet they suddenly marked some newsletters I've been receiving for a while as spam.
I can upload a rtf document of the Comodo log and a HijackThis log on request.
I'm using Windows XP Home, SP3; Comodo ISP 5.5.195786.1383 virus database 9300; Malwarebytes 220.127.116.110 DB version 7033 at time of previous scan, just updated to 7037; and Opera 11.50 as stated, Build 1074.
Thanks for any help you can give.