agobot.gen

[drum118]

How do I get rid of this worm as all 3 virus program cannot clean it?

It is in explore.exe. Is there a dll I have to look for? Where in the
registry do I find it. I have look under windows/currentversion/run or
runservice and see no svhost loader there.

Every time I try using taskmanager and trying to end task, it starts
backup.

Funny part, I do not use kazaa or the other share networks.
thanks

 

[Carey Frisch [MVP]]

Essentially, you need to remove the WORM manually, or with a stand-alone tool designed for this purpose.

Sophos has these instructions for this worm
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

and Symantec/Norton has this informational:
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

One of these methods should get you back up and running, but be sure to immediately apply ALL Windows Updates
(http://windowsupdate.microsoft.com) to insure that you don't get re-infected.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


| How do I get rid of this worm as all 3 virus program cannot clean it?
|
| It is in explore.exe. Is there a dll I have to look for? Where in the
| registry do I find it. I have look under windows/currentversion/run or
| runservice and see no svhost loader there.
|
| Every time I try using taskmanager and trying to end task, it starts
| backup.
|
| Funny part, I do not use kazaa or the other share networks.
| thanks
|

 

[drum118]

Essentially, you need to remove the WORM manually, or with a stand-alone tool designed for this purpose.

Sophos has these instructions for this worm
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

and Symantec/Norton has this informational:
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

One of these methods should get you back up and running, but be sure to immediately apply ALL Windows Updates
(http://windowsupdate.microsoft.com) to insure that you don't get re-infected.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


| How do I get rid of this worm as all 3 virus program cannot clean it?
|
| It is in explore.exe. Is there a dll I have to look for? Where in the
| registry do I find it. I have look under windows/currentversion/run or
| runservice and see no svhost loader there.
|
| Every time I try using taskmanager and trying to end task, it starts
| backup.
|
| Funny part, I do not use kazaa or the other share networks.
| thanks
|

I have look there and there is nothing there.

I even did a search of the registry using svchost1.exe and nothing show up

I have to use task manager to get programs to work after it has been sitting idle for some time. The task manger
show the system idle is using 95cpu and I have 756mg of ram.

This problem has only happen this week after I did a rebuilt using winxp pro as. It was there a few days before
the rebuilt.