Agobot Spoolsrv32 trojan keeps returning

  • Thread starter Thread starter vbhatt
  • Start date Start date
V

vbhatt

After running AntiSpyware and deleting the trojan Agobot
Spoolsrv32, the trojan retuns back. Any clue as what I
need to do.

Thanks
VJ
 
Try the trick of running AntiSpy twice in a row from Safe
Mode (start tapping F8 during a boot right after the PC
Maker's screen shows up until it tells you Safe Mode then
select the first option). If that doesn't help then:

Get CWShredder (free standalone version) from:

http://www.intermute.com/spysubtract/cwshredder_download.ht
ml

If that doesn't help then:

Get HijackThis from

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

and let it Scan your system and Save Log. (Save it where
you can find it again.) then send me the log. I will tell
you what to do next.

Ron Kinner MVP

(e-mail address removed)
 
You may want to read up on this one:

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ag.html

One way in which it infects is due to unpatched security
vulnerabilities--which you should fix.

Symantec has an automated removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.removal.tool.html

Although it is my opinion that Microsoft antispyware should be able to
remove this bug --probably in safe mode--you may well want to use the
Symantec tool since you've had trouble getting Microsoft Antispyware to do
the job already.

I don't know for certain whether Ad-aware will do this job or not--but I
trust antivirus vendors to get it right with the bugs they cover.
 
Back
Top