System32.exe Agobot-Ku worm
 

Can anyone tell me how to get rid of this virus.

Thanks

It is not a virus. It is a worm/trojan...which is slightly different.

Spybot S&D can get rid of it from safe mode or after you kill the process that starts it.

control, Alt, Del keys at the same time to bring up task manager. Choose processes and look for the

System 32 .exe. file ****NOTE**** the one you want is the one with blank information after the listing.
stop the process and then run spybot.

Unfortunately skybot S&D did not remove the worm in safe mode. I will keep denying the change until I can figure out how to get rid of it. Thanks for the suggestion.

where are you getting this information about change from?

This might be a false possitive as spybot should have gotten rid of it!

Clean out all your temp files!

Run Ccleaner registry cleaner and delete what it finds.

I forgot to disable teatimer the previous time. I also ran all my other security software (avira, spyware, ccleaner, atf cleaner while I was in safe mode). It appears that the worm has been removed. It does not show up in the msconfig start menu anymore.

I did find I had to restart my computer in "last known config" after starting in safe mode though.

I need to read more about spybot, the help menu is pretty generic. There is some info I am not too sure about.

Thanks again for your support lurkswithin. :icon_wink:

I forgot about the teatimer in SpybotS&D. I never download it or use that part.