PLEASE HELP Tojan Backdoor.Agent.BA

BullGuard Antivirus Forum > Virus Removal > Removal Help > PLEASE HELP Tojan Backdoor.Agent.BA

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

INEEDHELP
New Member

Date Joined Jun 2004
Total Posts : 1

Posted 6-20-2004 7:03 (GMT +1)

I have a very bad problem here. I know how to locate files and get rid of them and all that good stuff but it seems as though the file does not want to show up. I have looked hundreds of times and searched for it hundreds of times please help me. AVG gives me this message everytime i open up a program:
___________________________________________________
Virus
Trojan horse BackDoor.Agent.BA

is found in file
C:\WINDOWS\system32\reskbpb.dll

To remove this virus, please run AVG for Windows
___________________________________________________

AVG says it cant be moved into the vault when i try running it. Soybot and ad-aware doesnt remove it and i have also tried using torjan hunter to try and remove it. Online virus removers dont work eather. I have tried goign into safe mode, turning off system restore and everythign but the file does not show up. If someone could please help me. Post it here or e-mail me if you can with the full instructions(cubman2002@aol.com) PLEASE HELP

eagle
Senior Member

Date Joined May 2004
Total Posts : 805

Posted 6-20-2004 10:13 (GMT +1)

You do need help,

first shut off the AVG, download bullguard, and do a scan AVG is good bullguard is better. what you have is a vierus thats wrote as a batch file. thats why it can't touch it with those attributes. after you scan send the logs to support@bullguard.com they will probably be able to help.

Eagle

carlnunes
New Member

Date Joined Jun 2004
Total Posts : 1

Posted 7-19-2004 9:10 (GMT +1)

Remove Backdoor.agent.ba when deteced by AVG antivirus

1. use Notepad to see the file where regular explorer fails to see it.

2. remember to select view all file types

3. once you see the file in the open menu drag it to desktop

4. rename file to whatever (I renamed the infected file to "a" with no file extension)

5. reboot in to Safe mode with dos prompt

6. delete file (del c:\...\a)

Worked for me

Infected computer: Windows XP Home Edition

eagle
Senior Member

Date Joined May 2004
Total Posts : 805

Posted 7-19-2004 4:17 (GMT +1)

That will work but after you change the name delete in the regedit?

Eagle

Forum Information

Currently it is Saturday, January 10, 2009 1:20 AM (GMT +1)
There are a total of 66.010 posts in 16.187 threads.
In the last 3 days there were 18 new threads and 109 reply posts. View Active Threads

Who's Online

This forum has 27805 registered members. Please welcome our newest member, atwitsend.
43 Guest(s), 0 Registered Member(s) are currently online. Details

5 Latest Threads

Getting taken by multiple bad guys (9)	09-01-2009 23:28:11 (Derrack)
Windows antivirus 2009 (4)	09-01-2009 22:25:35 (castleclan)
Google redirect virus help (6)	09-01-2009 20:36:39 (phinfan)
Connection to server timeout (0)	09-01-2009 20:35:36 (revmrf)
Hijackthis (2)	09-01-2009 19:41:14 (fingers101)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard