SysChat

SysChat (http://www.syschat.com/forum.php)
-   Computer Security (http://www.syschat.com/software-support/computer-security/)
-   -   System32.exe Agobot-Ku worm (http://www.syschat.com/system32-exe-agobot-ku-worm-3855.html)

Herman1 09-12-2008 10:00 AM

System32.exe Agobot-Ku worm
 
Can anyone tell me how to get rid of this virus.

Thanks

lurkswithin 09-12-2008 12:09 PM

Quote:

Originally Posted by Herman1 (Post 12426)
Can anyone tell me how to get rid of this virus.

Thanks

It is not a virus. It is a worm/trojan...which is slightly different.

Spybot S&D can get rid of it from safe mode or after you kill the process that starts it.

control, Alt, Del keys at the same time to bring up task manager. Choose processes and look for the

System 32 .exe. file ****NOTE**** the one you want is the one with blank information after the listing.
stop the process and then run spybot.

Herman1 09-13-2008 01:08 AM

Unfortunately skybot S&D did not remove the worm in safe mode. I will keep denying the change until I can figure out how to get rid of it. Thanks for the suggestion.

lurkswithin 09-13-2008 03:54 AM

where are you getting this information about change from?

This might be a false possitive as spybot should have gotten rid of it!

Clean out all your temp files!

Run Ccleaner registry cleaner and delete what it finds.

Herman1 09-14-2008 11:27 PM

I forgot to disable teatimer the previous time. I also ran all my other security software (avira, spyware, ccleaner, atf cleaner while I was in safe mode). It appears that the worm has been removed. It does not show up in the msconfig start menu anymore.

I did find I had to restart my computer in "last known config" after starting in safe mode though.

I need to read more about spybot, the help menu is pretty generic. There is some info I am not too sure about.

Thanks again for your support lurkswithin. :icon_wink:

lurkswithin 09-15-2008 01:54 AM

I forgot about the teatimer in SpybotS&D. I never download it or use that part.


All times are GMT -4. The time now is 11:00 PM.


Copyright © 2005-2013 SysChat.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54