Need Help:trojan horse backdoor virus

[Guest]

For a few days I 've had this virus in My computer that won't go. I've tried
using McAfee vius scan and even Spyware Doctor to no avail. The message reads:

Trojan horse BackDoor.Agent.BA is found in file
C:\windows\system32\logg.dll

How do I ake it go?

Yann.

 

[Rick \Nutcase\ Rogers]

Hi,

Restart in Safe mode, delete the file from these folders and in this order:

C:\Windows\system32\dllcache
C:\Windows\system32

Then stop System Restore by disabling it on its tab of system properties in
the control panel. Then restart normally and restart System Restore.

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe mode

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Kelly]

Hi,

In addition to Rick's expert advice......

This is generally accompanied by having your IE search engine hijacked with
a .TV extension. More info here: You are needing to rid of this from your
System32 folder:
http://www.faqfarm.com/Computer/Virus/Backdoor/41846

Added note, most users claim that AVG rectifies the issue quickly. Either
way and in the meantime, run this combo and hope all goes well. If not,
feel free to repost:

Remove Backdoor.agent.ba when detected

1. use Notepad to see the file where regular explorer fails to see it.

2. remember to select view all file types

3. once you see the file in the open menu drag it to desktop

4. rename file to whatever (I renamed the infected file to "a" with no file
extension)

5. reboot in to Safe mode with dos prompt

6. delete file (del c:\...\a)

Run Ad-Aware SE, Spybot and HijackThis:
http://www.majorgeeks.com/downloads31.html

Note: Update each program, once installed, before running.

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com