CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

TROJ_AGENT.AC C:\WINNT\system32\com.dll

 
Post new topic   Reply to topic       All -> FavForums -> Unknown Files [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
colin4

Cadet
Cadet


Joined: Jul 01, 2004
Posts: 1
Location: Japan

PostPosted: Thu Jul 01, 2004 2:34 pm    Post subject: TROJ_AGENT.AC C:\WINNT\system32\com.dll
Reply with quote

Hi,

I recently got hit by a virus called TROJ_AGENT.AC can someone tell me how to remove it?

I read in one of the forums that I should first delete the exe command line for th virus in the win.ini fill and then delete the delete the com.dll file. I have opened the win.ini file but I'm not sure which string I need to delete. It looks like this:

[mci extensions]
[files]
[Mail]
MAPI=1
CMC=1
CMCDLLNAME32=mapi32.dll
CMCDLLNAME=mapi.dll
MAPIX=1
MAPIXVER=1.0.0.1
OLEMessaging=1
[MCI Extensions.BAK]
asf=MPEGVideo
asx=MPEGVideo
ivf=MPEGVideo
m3u=MPEGVideo
mp2v=MPEGVideo
mp3=MPEGVideo
mpv2=MPEGVideo
wax=MPEGVideo
wm=MPEGVideo
wma=MPEGVideo
wmv=MPEGVideo
wvx=MPEGVideo
wmp=MPEGVideo2
wmx=MPEGVideo2
[netsock]
netapi.dll-N2ZUN5ER-cdd=5440285
netapi.dll-JXYNT7JVB6V1708G-107a=8651564
netapi.dll-J0YF-c65=4915989
netapi.dll-X0EYIOU3I2ZWH2N-e65=4915989
netapi.dll-9A9-B83Z736FMFMW9KDC9-114b=156305939
netapi.dll-9GYFVWT23O9ITEY4-f06=7144247
netapi.dll-BQ0XONKGR8M2EU-f8c=5178129
netapi.dll-04AO8K088X5ITMDGIAM-11c4=8782638
netapi.dll-W06KZBRSYV2-ebc=4915989
netapi.dll-ILJVDQ6KW8OLHS-f42=6423298

Any suggestions?

Thanks,

Colin.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Unknown Files All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer