Troj won't let programs open regedit included - how do I proceed?

BullGuard Antivirus Forum > Virus Removal > Removal Tools > Troj won't let programs open regedit included - how do I proceed?

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9-21-2004 11:14 (GMT +1)

I have AVG resident sheild - found 12 trojans -all variants of Troj Horse proxy.x.etc and healed them, but can't heal or remove Troj Horse Proxy.5.F I also believe I have I-Worm/klez.h. The trojan is preventing me from opening any programs including regedit. I have been able to open AVG to run a scan by right clicking and clicking on 'Run As' this somehow gets around the virus and opens - I havn't be able to open any other program. How do I get rid of this if I can't go into regedit? Is there an online removal tool that can dispatch this critter without downloading an executable file? Anything I download will not open as well... cheers, Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 9-21-2004 11:35 (GMT +1)

Hey Jake

Try Trend: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H

And use their onlinescan: http://housecall.trendmicro.com/housecall/start_corp.asp

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9-21-2004 5:00 (GMT +1)

Thanks for the tip - I ran the scan and it found Troj Agnet.BA but didn't remove it. It says that I should download the program PCilln? I can't download anything cuz it will not open... Do you have any other ideas... Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 9-21-2004 5:15 (GMT +1)

It is really a bad one, you´ve got there smhair

http://www.sophos.com/virusinfo/analyses/trojagentba.html

Try fix it manual.

!it will not open"....what will not open?

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9-21-2004 5:22 (GMT +1)

Any program I try to open, an error message pops up that says 'Windows cannont find "name of the program trying to open" Make sure you typed in the name correctly, etc.' So I cannot open regedit, cmd prompt, etc, I cannot open any program. I can surf the net and run asps but anything that says download or run from disk is unavailable. I tried in safe mode and have the same problem. So, it seems that all remedies are not working for me... Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 9-21-2004 5:47 (GMT +1)

I don´t like to say it, but i am pretty sure, someone has hacked your computer.

This is from Sophos link:
Troj/Agent-BA is a backdoor Trojan for the Windows platform.
Troj/Agent-BA functions as a proxy server, allowing a malicious user to redirect internet traffic through the infected computer. !!

Disconnect to the net, and see if you can open programs now, or maybe do a system restore

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9-22-2004 5:53 (GMT +1)

Okay, I managed to open regedit by searching for the file name (still works) and then copying it to the desktop then I can right click and open with 'run as' - i figured out most programs can be opened this way... Now that I can get to regedit - is there anything I can do? rolleyes

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 9-22-2004 5:59 (GMT +1)

If you can download and run this scanner: http://www.mwti.net/antivirus/free_utilities.asp
do it.

Are you running XP. or?

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9-22-2004 6:18 (GMT +1)

yes xp home - thanks

Forum Information

Currently it is Saturday, November 22, 2008 1:24 PM (GMT +1)
There are a total of 64.046 posts in 15.836 threads.
In the last 3 days there were 26 new threads and 155 reply posts. View Active Threads