Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
my AVG 6 scanned a Trojan Downloader.Agent.3.AP in a folder called C:\documents and settings\barry\application data\bpmf?.exe
AVG couldn't remove it so i clicked put it in virus vault. but it couldn't move the file. when i checked the folder to see if i could delete the file myself, it wasnt there. but everytime i start up my computer, it tells me there's a virus in the folder. everytime i scan with AVG, the same thing happens, it cant be removed. i tried to search google for anything simular based on the exe file name but nothing came up. can anyone help?More than you can afford bitches, high five.

when i tried running AVG in safemode, something came up and said Driver(CORE) not found.
and i forgot to mention, i also used panda active scan but it didnt detect anything.
More than you can afford pal, high five.

Have you got an up-to-date set of AVG emergency floppies (4 disks)? If you have, try booting off them and run a scan in DOS. If not you should create a set on a clean PC. Make sure you choose the Scan and Clean option, and not the Restore option.
Alternatively, download the F-Prot Dos scanner and try that:
http://www.f-secure.com/download-purchase/tools.shtml
Make sure you have full back ups of all data before you do any of the above, just in case!
You're right, not much information about this virus on the net, even at AVG's own site.

OK, here's something new. i used the F-prot program and it found the file but it could not scan it because it was in use.
so i went into windows explorer to try and find the exe file through the address the program gave me. the file wasn't there.
then i went to folder options and unchecked the 'hide protected system files (recommeneded)' option and there was the file.
it is a protected system file.
now my question is should i delete it?

No idea if it's a critical Windows file - I don't have it on my own Win2k machine, but mine is not the server version. Back it up to a couple of places (e.g. floppy) before/if you decide to delete it.
I hope that "barry" is not the (only) administrator account. If it is you should temporarily add another admin account in case you can't get into the PC after you delete the file.
But, before you do anything... did you use the F-Prot scanner in Dos? I don't understand how any files on C: drive could be "in use" if you booted from a floppy.
Good luck

not yet, i just tried out the program in windows last night because it was late and i was about to sleep. ill try it later.
thanks a lot for you help. without you guys helping me i probably would have just left it there.

update on the virus:
I'M CURED!!
hurrah. ok here's what i did. i moved the exe file out of the applications data folder and into the recycling bin. then AVG popped up and said there's a virus in the bin. i ran AVG again, it couldn't heal the virus but it did move it into the virus vault.
and now AVG doesn't pop up and tell me to scan for that virus anymore. there doesn't appear to be anything wrong or any programs affected by moving the exe file.i didn't get a chance to use the f-prot program but i'll keep it here and try it out some time. thanks a lot mr. Andy Price. you've been a really big help.

Glad you got it sorted. Deleting any unknown files on a PC is always a bit nerve-wracking!
Andy

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |