anybody heard of this virus?

[arinlares]

so, i just spent 5 hours getting rid of a virus in Windows, and figure that some you guys here still use windows. so this might be helpful.

Apparently, there is a virus called Backdoor.Agent.B, a trojan that installs a rootkit if allowed access to the internet. I spent five hours getting rid of this thing, and realized, when looking up how (google), that it is little known, as you can see from these search results on Yahoo answers. I discovered it by happy accident when my computer was trying to do things i didn't like (windows explorer trying to get on the internet, for instance), and decided to do a virus scan, and saw an odd directory: C:\FAUXVIRUS with "carny_ride.exe" in the directory, when i did a quick scan. I found out about a repair kit from symantec. Well, here's a friendly warning, and i'm posting similar on all forums I go to, in order to raise awareness. Also, this IS NOT one of those prank letters, i can't stress that enough.

[Roxoff]

Rootkit, not strictly a virus then. As a Linux user, I find that viruses happen to other people. But even a suggestion of 'rootkit' makes my fingernails itch.

I wasn't aware of this, so thanks.

[arinlares]

well, it's a trojan that installs a rootkit. i think unix users are safe from this particular one, simply because it is run by a windows binary, but i want to tell as many windows users (even people on a dual boot).

[HROAdmin26]

You can go to any major AV vendor and look up virus info - Backdoor.Agent.B

I see no mention of rootkit and it's at least 4 years old. Perhaps this was used to allow something else to be installed...

[arinlares]

crap, i'm always a little behind the curve on these things. i heard it'll install a rootkit, and that's what i said in my first post. i've been posting things about it all over the web, on a couple of blogs, thinking that it was this new, big, bad virus. oddly, my antivirus passed right over the directory the file was in, which i found quite worrying. that symantec page is the one I used to get rid of the virus. i need to check dates more often, don't i.