Hi. I'm having problems with a new trojan called Scagent.A which is in windows\digfilt.dll. AVG (newest updates installed) finds it but won't delete it. Several AVG runs find it again (it's also residing in Temp\OE folder) but despite 'moving' it to the virus vault the AVG resident-shield nag screen just keeps popping up telling me to "run AVG" to delete it.

Have also run adaware, spybot, A2, cw shredder and spyguard to try to find it but they haven't helped.

The AVG nag screen is popping up every few seconds incessently - what do I do now?

ps also tried deleting digfilt.dll but it came back - presume it's in registry?

gazza

Reboot into safe mode.

You have the coolsearch hijacker.

Very hard to get rid of.

Then run adaware, spybot, cwshredder.

search for scagent.exe and digfilt.dll and see if they are still there and delete them.

When you get back into windows run avg again.

well listen up gazzy, avg has whats called rescue disk that runs in ms-dos just for non removable infections.....so i suggest u make them.

1. insert 1 floppy disk into drive..click on my computer....right click on drive A:,,click format..and checkbox creat ms-dos.

2. once step 1. is done open avg and click service, and create rescue disk ...let it go thru process and it takes 3 1.44mb floppys.

3. once step 2 is done....insert disk 1 and restart computer.....then follow instructions avg with boot up in ms-dos mode and do a scan..this should fix your problem.

if by chance u still haveing problems just repost and i will tell u another way to delete the infection thru ms-dos prompt.

goodluck.

thanks robbie and vk101 - i had to uninstall AVG itself as it seem had become corrupted by the scagent.A file - perhaps that what was intended. Once AVG was gone I could delete the scagent files (3 of). Anyway, I cannot now reinstall AVG from the download - even a new download of AVG won't install as I'm getting a screen prompt telling me that the "sytem file c:\windows\system32\autoexec.nt. file isn't suitable for running ms-dos or windows applications". Now I'm unprotected. Any ideas?
gazza

i suggest u make a rescue disk asap, but now since u removed avg u need to try to install another brand of antivirus, the virus is still on your system and has reconized avg as an antivirus software, therefore u cant install it again until u remove the infection....so try this antivirus software hopefully u will get it removed.

www.nod32.com

download it and install it, update and run in safe mode.

VERY IMPORTANT THAT U RUN TEST IN SAFE MODE.

any questions just ask.

HI,
I have tried to follow the above advice in removing Scagent.A but still having issues.
Tried creating rescue disks but hit a barrier when asked to insert disk 2 in msdos mode and it would not recognise.
Also tried to do something in safe mode but not sure i am truly in safe mode.
Would appreciate any further tips.
Cheers
Smazen

well 1 of 2 things u can do..

1. u made rescue disks incorrectly..after 1st disk is made ms-dos bootable...leave it in run avg click services,,make rescue disk..click next..once disk1 is full it will say "not enough space insert disk",, so keep putting in disks until it says "completed" will take more than 3 1.44mb. after rescue disk are done ..insert disk1 and restart computer.

2....try another antivirus software that will run in safe mode........best on market is nod32..its free 30day trail.........
www.nod32.com..........once downloaded update and restart computer press f8 before windows splash screen to get a menu..select safe mode and run nod32.

goodluck

can u make a rescue disc on a cd disc or just floppy ? if so how?

Grisoft has a page with instructions on how to remove the virus manually. It seems to have worked for me.

http://free.grisoft.com/freeweb.php/doc/7/lng/us/tpl/v5/idn/0b36adb65f740000

IC

Grisoft page works for me too on my Win2000 with scagent trojan. It came up on a routine scan by Norton. Norton could not isolate it, but grisoft instruction worked (.5 hour work).

Small edit on the grisoft page is that I found 2 digfilt.dll files and did not locate the scagent.exe file in locations mentioned.

Rescanned my pc and there are no more warnings.