online search found virus unable to remove

[quest_mania]

i made a antivirus scan fr my comp using trendsmicro av product and found five viruses on my comp. the av removed 4 out of 5 but coudnt remove the 5th coz it said dat the infected file was being used by comp. the virus reported is a worm- agobot.aml and it has infected c:\winnt\system32\svchosta.exe. i have win 2000. plz help me...

[Christina]

Give this a shot:

http://www.sophos.com/support/disinfection/agobot.html

[Und3ertak3r]

You have a problem.. DONT BE A SHOT GUN.. Just create one thread for your problem....

So do you want answers here on in the other thread?

BTW: Do a search on the symantec - Security response site.. look for Agobot or Gaobot..
and the message the AV scan gave you would have given you a version number ie gaobot.ag or sim.. You need that to correctly remove..

[yuris]

well you can use System Cleaner from trendMicro

Download this http://www.trendmicro.com/download/dcs.asp , this is the Damage Clean UP

The download the Latest Pattern file http://www.trendmicro.com/download/pattern.asp

This will clean up your system, and its free

Don't forget to desactivate your System Restore

[©opy®ight]

Scan in Safe Mode perhaps

[Und3ertak3r]

well you can use System Cleaner from trendMicro

Download this http://www.trendmicro.com/download/dcs.asp , this is the Damage Clean UP

The download the Latest Pattern file http://www.trendmicro.com/download/pattern.asp

This will clean up your system, and its free

Don't forget to desactivate your System Restor

yes good call.. I must check if there is a plug in for Bartpe.. or I make my own.... and if not useing the Remote scann approach.. Safemode when ever doing a virus scann is good advice..

cheers

[quest_mania]

thank u very much ppl ...i was able to correct the virus by using my av norton 2003 in safe mode.