Spy.Agent Trojan

Removing Spy.Agent
Categories: Trojan,Adware
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

Spy.Agent Also known as:

[Kaspersky]Trojan-Spy.Win32.Small.ak;
[McAfee]Spy-Agent;
[Other]Wab-Stealer,TSPY_SMALL.DVD

---

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\sphlp32.exe
[%SYSTEM%]\{A2CECC73-4E74-4236-ADDC-B9C7B41741CA}.exe
[%SYSTEM%]\sphlp32.exe
[%SYSTEM%]\{A2CECC73-4E74-4236-ADDC-B9C7B41741CA}.exe

How to detect Spy.Agent:

Files:
[%SYSTEM%]\sphlp32.exe
[%SYSTEM%]\{A2CECC73-4E74-4236-ADDC-B9C7B41741CA}.exe
[%SYSTEM%]\sphlp32.exe
[%SYSTEM%]\{A2CECC73-4E74-4236-ADDC-B9C7B41741CA}.exe

Registry Keys:
HKEY_CURRENT_USER\software\nirsoft\activexhelper
HKEY_CURRENT_USER\software\nirsoft\adapterwatch
HKEY_CURRENT_USER\software\nirsoft\asterisklogger
HKEY_CURRENT_USER\software\nirsoft\currports
HKEY_CURRENT_USER\software\nirsoft\dialupass
HKEY_CURRENT_USER\software\nirsoft\iehistoryview
HKEY_CURRENT_USER\software\nirsoft\ipnetinfo
HKEY_CURRENT_USER\software\nirsoft\messenpass
HKEY_CURRENT_USER\software\nirsoft\netpass
HKEY_CURRENT_USER\software\nirsoft\produkey
HKEY_CURRENT_USER\software\nirsoft\pspv
HKEY_CURRENT_USER\software\nirsoft\regscanner
HKEY_CURRENT_USER\software\nirsoft\sysexporter

Removing Spy.Agent:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats: