Comments on: Agent_r.CX trojan horse solution – AVG false positive

By: Martha Farker

Martha Farker — Sat, 18 Oct 2008 10:11:51 +0000

AVG has been deleted from my computer. AVG Sucks!!! Utterly wasted my time. Avast is back as trusted as usual…… bye bye AVG… I won’t touch ten foot barge pool

By: klas

klas — Fri, 17 Oct 2008 00:20:10 +0000

Hi,woke up sunday moring and turned on my computer and the screen was wasted and blown up,Resulution on screen where gone from 1420X900 to 640X400 and there where not possible to bring it back to normal (1420X900) . + My Microsoft Word and Microsoft EXCEL where Hit and stoped working.
I got the message popping up on my screen from AVG that i was hit by the Trojan horse agent_r.cx.
I runned Avg to clean up , but this didnt work .
Then i tryed to bring back the computer to normal by run a RECOWERY.
Recowery started but when it was finished …i got told that ..Windows cant bring back the computer in this spesific
date….. so i chosed a new date (Like 30 days back in time) but same result…… Made Almost tear of my hear.

Here is what i Found out to solwe the problem on my computer:

Start up the computer while i pressed F6 to go to safe mode.
I Choosed “safe mode” and saw then my screen was back to normal….”"With 1420X900 resulution again”" WOLLA.
I shuted down the comp again.
Start up the computer again while i pressed F6 to go to safe mode .From there i started to bring back the computer to normal by run a RECOWERY….

THIS WORKED …………..But the recowery Used 3 Hours…..

Klas from Norway

By: cleo decker

cleo decker — Thu, 16 Oct 2008 02:08:46 +0000

avg was not at fault in my case! Had to uninstal zone alarm and reinstall before system was back to normal. only then was i able to delete agent r.cx from avg.

By: tac_meister2000

tac_meister2000 — Thu, 16 Oct 2008 00:36:46 +0000

Hey John – The “trojan” that AVG found was a FALSE POSITIVE. You need to do an update for your AVG virus database & everything should be fine. Get the update then run an AVG scan again. The reason that you cannot re-install ZA is because you have sent those particular files to the virus vault & AVG will not let the full install happen. As a practice, when installing anything, you should not have ANY applications running. To re-install ZA & have it function as it should, you need to “restore” the ZA files that you “quarantined.” They are not “trojan viruses” They are actually key files that ZA need to run properly & AVG improperly flagged as “trojan’s”. +

***IMPORTANT- By following this option – “Open the AVG User Interface, Select Resident Shield, Select Manage exceptions, and add the directory \windows\system32\ZoneLabs to the exception list,” you are asking for a problem in the future. It is just 1 solution, but a dangerous one at that, you are leaving a vunerable window open.

By: Jon

Jon — Wed, 15 Oct 2008 22:32:10 +0000

Hello,
Well when all this started I sent the files to AGT virus vault. Since then I have uninstalled Zonealarm Free from my computer and have tried to reinstall and it just won’t install. I really don’t trust windows firewall and want ZA back. HELP!!!!
Thanks, Jon

By: Jason

Jason — Wed, 15 Oct 2008 21:37:52 +0000

Evidently Grisoft does not test with Zone Labs software. They have also added a check for zl* and flag the files as trojan horse agents.

Open the AVG User Interface, Select Resident Shield, Select Manage exceptions, and add the directory \windows\system32\ZoneLabs to the exception list. Don’t forget to select apply and then on the next page press save changes.

The scan should now ignore the Zone Labs files.

Have a good day!

By: Jon

Jon — Wed, 15 Oct 2008 00:14:44 +0000

Thakyou, I had Avg send the affected files to virus fault , turned on windows firewall and scanned the computer with AVG. Nothing showed, but I rather have Zone alarm running than Windows, Look forward to your update

By: Jason Reavsby

Jason Reavsby — Tue, 14 Oct 2008 23:05:37 +0000

Thanks for explaining what’s going on. This helped me a lot.