Hi! I just ran a virus scan, avira, spybot, and ad-aware. Ad-aware found a trojan in the system volume folder---it designated it TR/Agent.bgd. The option it recommended was to deny access. I clicked ok, and ad-aware seemed to lock up. I pressed alt-ctl-delete, and it said it was running. After about 5 minutes of doing nothing, I clicked cancel. Ran it again, and it found it again. I clicked on delete, and it seemed to lock again. Said the program was running, but nothing happened for about 5 minutes again, so I cancelled again. I googled the trojan name, and got a German link, clicked on translate, and followed the microsoft link to the English microsoft to show the system volume folder. A lot of files not seen before appeared, but in the root file(not sure if they mean system or system32, checked both) no system volume---directory or file. Not sure what I'd do if I found it, but it's well hidden. Now the crux-of-the-biscuit, how do I remove this file? Any and all responses will be greatly appreciated. Thanks.

I'd try rebooting in Safe Mode by pressing F8 just before the Windows logo appears and selecting "Safe Mode." Once you're in safe mode, run Ad-aware or your virus scanner and select "Clean" or "Fix" and see if it can purge the virus from the infected file. If that fails, try the "Remove" or "delete" option.

AMD Athlon 62 X2 5000+ OC
2 GB DDR2 4200 RAM
nVidia GeForce 7900GS 256 MB DDR3
400 GB 7200 RPM HDD
Windows Vista Ultimate Edition
22" LCD widescreen monitor
5 Mbps connection

The term 'root file' refers to the lowest level of the directory tree - for example:

C:\

"not sure if they mean system or system32"

There's actually a folder called system volume information, but it's hidden and protected

You can try cleaning from Safe Mode, sure, but it may be more expedient just to disable System Restore which will remove all restore points (including the infected one) - then re enable if desired, and you're certain you're trojan free

I'm not one of those who think Bill Gates is the devil. I simply suspect that if Microsoft ever met up with the devil, it wouldn't need an interpreter.

Report Offensive Follow Up For Removal

What version of Ad-Aware do you run and what definitions file do you use?