Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Jim JensenJim Jensen 

Blue Screen Agent 5 Trojan

I'm running XP. Today my virus check started crashing after a few minutes into the scan, to a blue screen fatal error.  Restarted in safe mode and ran a "run command " scan, 3 hours later it reported 34 errors  / infections. Trojan horse Agent5.AETS in many C:\Windows\system32 \ xxxx. exe files and also in several C: \program files\ AVG\AGV2015\ avgui.exe and avgscanx.exe in the avg.txt report.  the scan screen reports them as unresolved, when I use the remove selected or remove all the system eventually crashes.  I then did a Windows restore to a known good date, tried to rescan, same problem, Then deleted AVG from the computer and re installed it. Again no improvement. Any Ideas on how to get rid of these identified but unresolved files?
 
Sreedevi PadmakumarSreedevi Padmakumar (Avast)
Hello Jim, sorry to know that. Please follow these steps to send us diagnostic information from your computer. This information will allow us to analyze the situation and provide you with solution:
Click this link http://www.avg.com/filedir/util/AVG_SysInfo.exe to download the AVG SysInfo tool.
Run the downloaded tool.
Click Accept to confirm the license agreement, and then click Continue.
Once the screen Output created is shown, fill in any additional details, or click Attach if you want to attach any additional files, such as screenshots.
Click Send, fill in your email address, and then click Send again.
We will analyze the received files and provide you with further information.
Chris OttChris Ott
I am having a similar problem.  I run AVG in normal mode and it detects 9 threats and reboots the computer at 19% complete.  I then ran AVG in Safe mode and it detected 9 files infected with Trojan Horse Agent 5.AETS but alos reboots the computer at a certain point.  I have been hours trying to remove this with IT professionals but we have given up.  Any ideas short of reformating the hard drive?
Ian HarveyIan Harvey
I have the same problem started happening today! Did the same as Jim Jensen to no avail. What is the solution?
Hikoichi AidaHikoichi Aida
To stop the rebooting process, uncheck the "Heal / remove virus infections without asking me". I think it reboots because some of the files that AVG try to remove are Windows files.

Regarding this detection, can we atleast have an answer if the said files being detected are really infected or it's just a false alarm. Removing the detected files would have an effect on our PC because like I said they're all Windows files (winlogon.exe, services, svchost, etc...) and some files on the Program Files, notably some AVG executable files. I tried searching about Agent5.AETS but nothing's coming up, I only found one, and on that forum they say that it's just a false detection.

Hope this issue gets fix soon because it's a bit frustrating to see detections that you can't deal at the moment and it stresses you for thinking on it over and over again.

 
Komal Sathish KumarKomal Sathish Kumar (Avast)
Hello Ian. We apologize for the inconvenience caused. We are working on this issue and we will fix it as soon as possible. We need some diagnostic information sot that we can help you better.
Hence, please follow these steps to send us diagnostic information from your computer. This information will allow us to analyze the situation and provide you with a solution:
Click on this link http://www.avg.com/filedir/util/AVG_SysInfo.exe to download the AVG SysInfo tool.
Run the downloaded tool.
Click Continue to agree with AVG’s license agreement and privacy policy. AVG SysInfo will now gather the data.
Once the diagnostic output is ready, you may add comments, or click Attach file or Screenshot to provide us with extra information.
Fill in your email address, and then click Send output.
We will analyze the received files and provide you with further information. Thank you.
Komal Sathish KumarKomal Sathish Kumar (Avast)
Hi Hikoichi,  
We apologize for the inconvenience caused. We are working on this PC restart issue. We will fix it as soon as possible. Please submit the requested diagnostic information so that we can analyze it and help you better.
Please do not hesitate to get back to us for further assistance. Thank you.
Dave DraperDave Draper
Same problem here - serves me right for still being on XP sp3? Just wanted to add that disabling automatic healing does enable a scan, though doesn't tell me what to do with the 24 infections found :(

Curiously, Malwarebytes finds nothing wrong! Ditto Spybot.

I've done the AVG sysinfo thing & sent off last night's safe mode scan result with it. Thanks in anticipation...

Dave Draper
andrew andrewandrew andrew
I have the same issue with Trojan horse agent5, AVG scan telling me i have over 70 infected files, How can we solve this ASAP
 
Ess GrubbEss Grubb
Having the same issue on spare XP machine...As PC starts ,  AVG start and crash to blue screen...I started it in Safemode and run AVG  get following infections show up-
AVG 2015 AntiVirus command line scanner Copyright (c) 1992 - 2015 AVG Technologies Program version 2015.0.6086, engine 2015.0.4392 Virus Database: Version 4392/10504 2015-08-24
c:\WINDOWS\system32\winlogon.exe (252) Trojan horse Agent5.AETS
c:\WINDOWS\system32\services.exe (296) Trojan horse Agent5.AETS
c:\WINDOWS\system32\lsass.exe (308) Trojan horse Agent5.AETS
c:\WINDOWS\system32\svchost.exe (464) Trojan horse Agent5.AETS
c:\WINDOWS\system32\svchost.exe (584) Trojan horse Agent5.AETS
c:\WINDOWS\explorer.exe (832) Trojan horse Agent5.AETS
c:\Program Files\AVG\AVG2015\avgui.exe (1016) Trojan horse Agent5.AETS
c:\Program Files\AVG\AVG2015\avgscanx.exe (1144) Trojan horse Agent5.AETS

Still in safe mode - Ran TDSSKiller, Malwarebytes Anti-Malware, RogueKiller, HitmanPr & AdwCleaner ..nothing shows up on any of them.  I have now turned of the auto scanner (setting it to once a mnt ) and so far it hasnt crashed but now Thubderbird and Firfox wont open (internet explorer does)
Hikoichi AidaHikoichi Aida
By the looks of it, this seems like an issue with AVG, because other anti-virus programs don't detect anything. And the threats are being detected when AVG scans the Processes.
Simon BSimon B
I am getting this error too and same infections as Ess Grubb when I run AVG Free 2015 in Safe Mode with Win XP SP3.
Michael SalleyMichael Salley
Same issue here on Windows Embedded Point of Service 1.0 (built around XP) on AVG 2015 build 6125. Blue screen of death at 19% when doing full computer scan; got past this using the above advice to turn off the automatic heal option. Many "trojan horse Agent5.AETS" threats detected, but not having much luck with protecting against them. Original file popping up warnings was c:\windows\system32\WS2_32.dll.

Currently waiting on this heal-less scan to complete; not sure I expect any good results after it finishes, though.
Becky RobinsonBecky Robinson
My scan started about an hour ago and I have paused it pending a response from AVG. If it helps any, my system is also WinXP, SP3 (happy to see I'm not the only diehard XP user!). Just curious... is this situation isolated to to us dinosaurs still running WinXP? AVG, do you recommend stopping/pausing scans until you get this situation resolved? Please & Thanks for any guidance!! 
Rajendra SekarRajendra Sekar (Avast)
Hello Dave. I do understand your concern. I am sorry to hear this. I kindly request you to update the product and try to scan. In case if issue persist.  Please follow these steps to send us diagnostic information from your computer. This information will allow us to analyze the situation and provide you with a solution:
Click on this link http://www.avg.com/filedir/util/AVG_SysInfo.exe to download the AVG SysInfo tool.
Run the downloaded tool.
Click Continue to agree with AVG’s license agreement and privacy policy. AVG SysInfo will now gather the data.
Once the diagnostic output is ready, you may add comments, or click Attach file or Screenshot to provide us with extra information.
Fill in your email address, and then click Send output.
We will analyze the received files and provide you with further information. Thank you.
Hikoichi AidaHikoichi Aida
Seems fine now after the update. No threats detected so far (no detections after AVG scanned Processes). I'm running whole computer scan at the moment and waiting for it to finish.
Helen WorgerHelen Worger
Hello - I had the same problem of the scan hitting twenty percent then rebooting the computer.  I contacted avg and two different people took remote control and tried to fix it but when that didn't work they escalated the case and said someone would be in touch.  That was two days ago.  Two sleepless nights later I've heard nothing, but the scan this morning was fine...phew...but I'm still worried that the five threats the scans detected are still hiding in the system somewhere as it doesn't say it's got rid of them.  Is that possible or was it just part of the problem update?  I'm not at all techie and this has been a complete nightmare.  I even started to worry that I'd inadvertently given my sysem over to scammers as I hadn't heard anything back from avg!  Thank God I thought to look on the forum and saw other people have the same problem.  Please can someone from avg contact me about this so I can be sure it's OK now?
Dave DraperDave Draper
After today's update full scan - no threats detected, Yay! Thanks for fixing it guys; nice to find my instincts winning out over my paranoia :)
I did submit the SysInfo download Rajendra (case 01744196), but no need to take it any further it seems.
Personally Helen, I wouldn't worry; I've had a similar incident some years ago with Kaspersky - iffy update, everything froze! They got it fixed in the end.
Dave
 
KishoreKishore (Avast) 
Hello Dave. That's great to hear your issue has been resolved now. Please feel free to contact us back for further assistance. Thank you.
Helen WorgerHelen Worger
Thanks Dave - I've realised from reading the many posts on here about the same thing that it's not just me and it does seem to have been an avg self-induced glitch.  But it would be good if someone ...Kishore perhaps?.. could confirm it's fine now.  They could have saved everyone a lot of worry and hassle if they'd told us it was a problem of their making.  Still haven't received the promised verdict on the info gleaned from my systerm  (two days ago) or response to my email asking about it (over 24 hours ago).  Yes, very relieved scans have been fine today, but not happy to have been set adrift.  Any problems in the future and this forum is my first port of call!
Gulam Shaik MohammedGulam Shaik Mohammed (Avast)
Hello Helen,
I apologize for the inconvenience caused.  I request you to please update your AVG program to latest virus definition and check whether your issue is fixed. Please feel free to get back to us for any issues with AVG. Thank you.
Marguerite EarhartMarguerite Earhart
Hi all ... My AVG Internet Security 2015 updated today and it appears that my issue has been corrected.  I was able to run a successful virus scan today without any issues.  Thank you AVG.
Gulam Shaik MohammedGulam Shaik Mohammed (Avast)
Hello Marguerite,
Its nice to hear from you that your issue is sorted out. Thank you.
Ask a question
Struggling with non-AVG technology? We can fix that, too!