trojan

[daz]

avg has found a virus? BackDoor.Agent.BA, the file is
found in C:\Windows\system32\winngjc.dll
ive tried removing it with avg in safemode, but its still
there, if i do a search for it nothing comes up, ive even
visually searched for it to no avail, any sugestions to
remove this trojan will be much appreciated, as every
mouse click or keypress avg resident shield pops up to
tell me about this virus
thnx daz

 

[Carey Frisch [MVP]]

There is a very helpful virus removal newsgroup you should post to:
news://msnews.microsoft.com/microsoft.public.security.virus

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

You may wish to try the Panda ActiveScan Free Online Scanner.
Just click on the "Scan your PC" box.
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Download Ad-Aware 6.0 and scan your PC for spyware:
http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

3 Steps to Help Insure Your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------


| avg has found a virus? BackDoor.Agent.BA, the file is
| found in C:\Windows\system32\winngjc.dll
| ive tried removing it with avg in safemode, but its still
| there, if i do a search for it nothing comes up, ive even
| visually searched for it to no avail, any sugestions to
| remove this trojan will be much appreciated, as every
| mouse click or keypress avg resident shield pops up to
| tell me about this virus
| thnx daz

 

[Wesley Vogel]

Virus Removal utilities

[[BackDoor.Agent, I-Worm/Bagle.A-Z, AA-AD, I-Worm/Bugbear.C-D,
I-Worm/Netsky.A-Z, AA-AC, I-Worm/Sasser.A-F, PSW.Bispy.A-C
Download the remover vcleaner.exe. Restart your computer in Safe mode and
run the remover on the infected computer.

Note: Some viruses can stop the action during the removing process. In this
case rename the vcleaner.exe to some different exe file (e.g.
something.exe). Restart your computer in Safe mode (recommended) and run the
remover on the infected computer.]]
http://www.grisoft.com/us/us_remtext.php?id=bagbugnet

Download the remover vcleaner.exe
http://www.grisoft.com/softw/removers/vcleaner.exe

 

[Alex Nichol]

avg has found a virus? BackDoor.Agent.BA, the file is
found in C:\Windows\system32\winngjc.dll
ive tried removing it with avg in safemode, but its still
there,

A useful trick in such cases where the file is in use (so can't delete)
but you know just where to find it, is to rename it with a different
extension, eg as winngjc.dlx

If it is a system file a clean copy will be restored immediately, but in
any case you then reboot and can delete the renamed file. This one I
think is itself the trojan, and you will probably get a 'cannot find'
message at startup, from the entry trying to run it. If so, Start - Run
and run MSConfig.exe. Look on Startup page for the line that runs it;
likely
rundll32.exe winngjc.dll

Uncheck the line. Exit - do not bother to reboot, but next time you do
there will be a message about 'System Configuration'. Check the 'Do not
show again' box and exit