Home Malware Programs Keyloggers Trojan-Keylogger.WIN32.Agent

Trojan-Keylogger.WIN32.Agent

Posted: July 6, 2009

Trojan-Keylogger.WIN32.Agent is a fake keylogger detection that rogue security programs use to scare you into thinking that you have a keylogger on your PC. These rogue security applications have no way to detect real threats to your computer and will continue to display Trojan-Keylogger.WIN32.Agent warnings even if your system is otherwise completely clean. To stop these Trojan-Keylogger.WIN32.Agent messages, you should remove the rogue security program that causes them by using the best available anti-malware software. Rogue security programs known for causing the Trojan-Keylogger.WIN32.Agent false positive may also hijack your web browser and shut down security programs, which makes them serious security threats.

Trojan-Keylogger.WIN32.Agent is Just a False Scare from Countless Threats

Trojan-Keylogger.WIN32.Agent is part of a fake alert used by many different rogue security programs that have much of their code in common with slightly different names and interfaces slapped on top. Some known rogue security programs that use the Trojan-Keylogger.WIN32.Agent alert include XP Deluxe Protector, Antivirus System Pro, XP Police Antivirus, Antivirus .NET and Green AV.

These rogue security applications will rarely stop at just threatening you with a fake Trojan-Keylogger.WIN32.Agent infection. In most cases, malware threats only use Trojan-Keylogger.WIN32.Agent alerts in combination with many other alerts and warnings. Some of the other fake warnings you see may include such supposed threats as:

  • Zlob.PornAdvertiser.ba
  • Infostealer.Banker.E
  • Win32.Rbot.fm
  • SecurePCCleaner
  • Spyware.007SpySoftware
  • Spyware.KnownBadSites
  • Spyware.IEMoster.d
  • Trojan.MailGrabber.s
  • Trojan.Alg.t
  • Trojan.BAT.Adduser.t

These alerts can be displayed in fake system scans or in pop-ups that imitate Windows notifications. If you're getting Trojan-Keylogger.WIN32.Agent warnings that raise the possibility of a rogue security program being on your PC, you should avoid trusting any unusual error message until you've verified the source.

The Other Challenges that Accompany the Trojan-Keylogger.WIN32.Agent Mirage

Rogue security programs are also known to hijack web browsers for two reasons: firstly to force you to visit malicious websites, and secondly to stop you from visiting websites that could provide anti-malware help. They may even block you from visiting websites with a fake error message like the one below:

This website has been reported as unsafe
We strongly recommend to discontinue the use of this website.
Register your computer's security software
This website has been report to Microsoft for containing threats that might steal personal or financial information from your computer.

If you try to run an application while a Trojan-Keylogger.WIN32.Agent-spewing infection is active you may only get an error as the program crashes. Don't be fooled by any supposed infection warnings the rogue security program gives you – these warnings are just as fake as everything else the infection tells you.

Ultimately, getting rid of Trojan-Keylogger.WIN32.Agent messages can't happen until you get rid of the threat causing them. This requires that you stop the rogue security program from launching by using Safe Mode or a similar boot-up option, and then purge all Trojan-Keylogger.WIN32.Agent-related malware by using a full system scan.

It's not suggested that you try to delete hostile software related to the Trojan-Keylogger.WIN32.Agent warning manually, since most such rogue security programs will register .dll files, hide their components in sensitive folders and add entries to your Registry. Deleting the wrong file or line in the Registry could result in serious damage to your PC, and so you should handle Trojan-Keylogger.WIN32.Agent problems with software-based assistance.

3 Comments

  • carmene says:

    how do you manually delete thses fimes.

    Finally, to completely get rid of Trojan-Keylogger.WIN32.Agent, you must manually remove other Trojan-Keylogger.WIN32.Agent files. These Trojan-Keylogger.WIN32.Agent files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Trojan-Keylogger.WIN32.Agent might create a file like
    %PROGRAM_FILES%\Trojan-Keylogger.WIN32.Agent\Trojan-Keylogger.WIN32.Agent.exe. Locate and remove these files.

  • kamawey62 says:

    It looks like I have several infections in my laptop and tow of them are:
    --------Trojan:DOS/Alure.A
    ---------BNK.win32.Keylogger.gen

    So I hope my fedback will help.

    Thanks

  • Mike Phillips says:

    Hi My Laptop is so infected by Keylogger that I cannot get on-line to download. Can I copy this system to a disc and load it in to my laptop?

Loading...