[hogndog]

I have this in my AVG Virus Vault, I haven't deleted because I've heard some of these
strains are difficult to remove manually. Here is an overview..

Trojan Downloader.Agent.UZM

A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.
November 10, 2007

Any suggestions would be much appreciated

AVG says they offer no tech support unless you pay for it, I guess what I need to know is,
is it or isn't it safe to delete?

Thanks,
hogndog

[hogndog]

Ask a stupid question right, I came here because the sign said you knew your stuff Pfft!

[lunarlander]

It wont do any harm to empty your quarantine vault. From the description it seems it only does harm when xgame.exe is executed. So I hope you never double clicked it.

It's best to do online scan with ALL the online scanners listed in the sticky 'Security Help Tools', since none can pick out all the malware alone.

[hogndog]

O.k., thank you very much