Computing.Net > Forums > Security and Virus > Agobot keeps coming back

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Agobot keeps coming back

Reply to Message Icon

Original Message
Name: Nil_IQ
Date: May 13, 2004 at 14:09:27 Pacific
Subject: Agobot keeps coming back
OS: Win XP
CPU/Ram: 800mhz 256mb ram
Comment:

Whilst browsing the internet, I keep getting alerts from AVG telling me I have a virus in C:\Documents and Settings\All Users\wuact.exe

I can heal it, I can delete it, and I can move it to the virus vault, but it keeps coming back! I assume there is a registry key I need to delete to stop it coming back, could someone please tell me which one it is, along with complete removal instructions if possible.

The exact variant is Worm/Agobot.17.C, although this changes with almost every alert.

*edit* The popup now says "requested action is not available for that object" when I try to delete, move or heal it. This time the variant is Agobot.17.C.


Report Offensive Message For Removal


Response Number 1
Name: mr_x1988
Date: May 13, 2004 at 14:18:02 Pacific
Reply: (edit)

hi,

i got this virus and got rid of it 2 days ago with a virus scanner called Hauri ViRobot found and deleted the virus within 10 secs of me starting the scan i cant remember the web site address now but if you search on google for 'Hauri' then their site should be found quick enough

hope u find and delete this virus

Chris


Report Offensive Follow Up For Removal

Response Number 2
Name: Tufenuf
Date: May 13, 2004 at 14:23:28 Pacific
Reply: (edit)

Try following the removal instructions at the link below. Even though the file name you have is different and the location of the file is different it may be of help. There's so many variations of this virus that it's hard to pinpoint the exact one you have. I had the version at the link below and it drove me half nuts till I finally got rid of it.

W32.Gaobot.AFJ Removal Instructions

HTH,
Tufenuf


Report Offensive Follow Up For Removal

Response Number 3
Name: murve
Date: May 13, 2004 at 19:51:46 Pacific
Reply: (edit)

hi nil,
the address for hauri is www.hauriusa.net and yes it will delete and repair all files unlike norton, which i am begining to believe is a big waste of time. i've tried to fix this trojan with the norton fix and it failed along with the norton version 2003, so try hauri, it works. at least it did for me. i am not trying to besmirch norton but i think its living on its reputation. results are everything. i know i'm going to get heat for this, but what the heck.
all the best,
murve


Report Offensive Follow Up For Removal

Response Number 4
Name: aosclay
Date: May 14, 2004 at 10:24:38 Pacific
Reply: (edit)

LOL!

hey MURVE,

well at least you have all the key ingredients of a good person: a sense of humor, an understanding of what you are bringing down on yourself, and the courage and whimsy to do it anyway. LOL

I can respect that, even if I disagree with you.

Based on the above criteria, all anti-virus software is a waste of time, because each one of them finds/fixes things that the others do not. Doesn't make much sense does it? Yeah, Norton has its failings...So does everything else. I see Norton work like a champ everyday. I see other AV software peform wonderfully too. Murve, you sound sharp (your complaints are at least logical and realistic).

You know what the real world is all about:

They playing field is full of viruses/variants and other nasty things. They can't all be knocked-out of the park homeruns in the first few hours they hit the Net. Some of them "mutate" so fast that there is no way to get ahead of them...you can only play catch up. Norton does a good job. So does almost every other AV software. But they can't be perfect. And some jobs are tougher than others. Lets all remember that.

This is going to get worse before it gets better. If anyone in the business has noticed, things began spiralling out of control months ago. The last six months have been worse than the last six years in the security world.

Hold on to your pantyhose, kids.

We ain't seen nothing yet.

And Murve...that's all the more "heat" you deserve to get for your statement. I may not agree whole-heartedly with you, but at least you were sane and logical about it.

So there...suffer the heat. :)

keep up the good work.

AOSCLAY
Monkies Can't Do This


Report Offensive Follow Up For Removal

Response Number 5
Name: murve
Date: May 14, 2004 at 11:04:55 Pacific
Reply: (edit)

hi aosclay,
i have this burning sensation all over, lol.
thanks for the understanding comments, and you are absolutely right about av's and the www (wild wild west)it seems that this whole situation is getting out of control. what started out to be a good thing (www-world wild web)at the begining is becoming a nightmare for quite a lot of innocent people.
i welcome your remarks and so do a lot of other people i would imagine that hang out here. bravo!
all the best,
murve


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software