Agobot.spoolsrv32 (Trojan)

[Ken Ludvigson]

Does anyone out there have a suggestion on how to get rid
of Agobot.spoolsrv32 Spyware?
It keeps coming back.

 

[plun]

Does anyone out there have a suggestion on how to get rid
of Agobot.spoolsrv32 Spyware?
It keeps coming back.

Hi

Try Trendmicros Housecall

http://housecall.trendmicro.com/

You must permit Trendmicros activex module

Choose new scan and both spyware and virus.

//
plun

 

[Robear Dyer, MS MVP]

Symantec Security Response - W32.HLLW.Gaobot.AG:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ag.html

Win32.Agobot.W:
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?ID=37169

Sophos virus analysis: Troj/Spyre-B:
http://www.sophos.com/virusinfo/analyses/trojspyreb.html

Scanning with Sysclean: http://aumha.net/viewtopic.php?t=10610

 

[Ken Ludvigson]

I have tried Trendmicro's new Housecalls product but can't
get by the ActiveX requirement. Have change settings in
MS Explorer but nothing I do gets me by the ActiveX so
that I can see all of Housecalls screen.

 

[plun]

I have tried Trendmicro's new Housecalls product but can't
get by the ActiveX requirement. Have change settings in
MS Explorer but nothing I do gets me by the ActiveX so
that I can see all of Housecalls screen.

Try this instead which Robert Dyer recommends:

TrendMicros Sysclean
http://aumha.net/viewtopic.php?t=10610

 

[Bill Sanderson]

That should work--you must download the sysclean package, and then the zip
file of the current patterns, and unzip in the same folder as sysclean, and
then run sysclean. This is a command-line process, as I recall, and should
detect and clean whatever the current definitions are capable of, as I
understand it.

(and it's Robear Dyer)