worm & trojan

Discussion in 'All other topics' started by gruel, Jul 14, 2004.

  1. gruel

    gruel Member

    Joined:
    Nov 30, 2003
    Messages:
    80
    Likes Received:
    0
    Trophy Points:
    16
    I have got worm/Agbot.25.w and trojan downloader purityscan.e on my system i have run AVG and adaware but cant get rid of them, tried search the net for more info but my net conection is realy bad.
    anyone help please.
     
    gruel, Jul 14, 2004
    #1
  2. cozza1987

    cozza1987 Guest

    Hey

    Purityscan is Ad-aware, and Agbot is a worm.

    To get rid of Agbot
    - Update your AVG program.
    - Disable System Restore and restart your computer.
    - Run a full System Scan.
    - Then enable System Restore again.

    4 Programs to Download, which are handy.
    I used them at work on customer's comptuers all the time, and its supprising how much crap people have.

    - Adaware - http://www.download.com/Ad-aware/3000-8022-10214379.html?tag=lst-0-2

    - Spybot - http://www.download.com/Spybot-Search-Destroy/3000-8022-10289035.html?tag=lst-0-2

    - Spy Sweeper - http://www.download.com/Webroot-Spy-Sweeper/3000-8022-10301356.html?tag=lst-0-3

    - Window Washer - http://www.download.com/Webroot-Window-Washer/3000-2144-10289982.html?tag=lst-0-1


    To manually get rid of Purityscan:

    Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
    Browse to the key:
    'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
    In the right pane, delete the value called 'ContentService', if it exists.
    Exit the registry editor.
    Restart your computer.
    Delete the following files and folders:
    %SystemDir%\winservn.exe
    %ProgramsDir%\PurityScan\
    Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
    Note: %ProgramsDir% is a variable (?). By default, this is C:\Program Files.
    -

    Regards
    CoZZa
     
    cozza1987, Jul 14, 2004
    #2
  3. Jay05

    Jay05 Regular member

    Joined:
    Apr 23, 2004
    Messages:
    732
    Likes Received:
    0
    Trophy Points:
    26
    My advice is that you update your virus definition...
    It could possibly be that your virus definition is out of date and can't recognize it...
    Hope everything works out...
    :)
     
    Jay05, Jul 14, 2004
    #3
  4. gruel

    gruel Member

    Joined:
    Nov 30, 2003
    Messages:
    80
    Likes Received:
    0
    Trophy Points:
    16
    all gone now, cheers guys
     
    gruel, Jul 14, 2004
    #4
  5. becker4

    becker4 Member

    Joined:
    Jul 27, 2004
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    11
    i am having the same problem i tried what cozza1987 suggested and it was ok until
    'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'

    when i tried to open the Microsoft part it said "Cannot open Microsoft: Error while opening key"

    any advice on getting rid of this virus?
     
    becker4, Jul 27, 2004
    #5
  6. gruel

    gruel Member

    Joined:
    Nov 30, 2003
    Messages:
    80
    Likes Received:
    0
    Trophy Points:
    16
    hi becker4, dont know if youve got AVG antivirus but its what i use and seems to do the trick, plus its free :) http://free.grisoft.com/freeweb.php
    I used to have norton but thought it was crap i ran norton then avg and avg picked up 3 nastys that norton missed, its no longer on my pc.

    update AVG run it then restart pc run AVG again, that worked for me. Hope this helps, if it dont work theres plenty of people here that can and will help.
    you might need to start a new thread to get more people to see it.
     
    gruel, Jul 27, 2004
    #6

Share This Page