Can't remove Trojan

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Some how I've got the W32.Trojandownloader Agent on my PC and I'm using AVG
(Updated daily), Windows Defender and it makes 4 Registry entries and is
constantly running in the background. I've run Ad-Aware and delete them but
they come back. I've run a scan from the Symantec site and it tells me that
C:\Windows\osa9.exe is infected with above Trojan. I've run a scan also
from the Microsoft Site and it to found it but can't fix it. Each time the
PC starts the 4 entries come back into the Registry as evidenced by numerous
Ad-Aware scans. From my understanding osa9.exe is an Office 2000/XP file
which I've not had on this PC. I currently have Office 2003.
The Trojan really slows down my PC as evidenced by program loads and System
Resource meter some times shows that 100% of my CPU is being used. I've
gone into MSCONFI Startup Tab and unchecked C:\Windows\osa9.exe and click
Apply, PC freezes. I've tried to delete osa9.exe but it won't let me. No
Office 2003 Programs are running.
Any suggestions or help?
--
Thanks, Bill
Post replies back to News Group


.

Relevant Pages

  • Re: HELP: Three unknown services K.EXE, GXF.EXE and FRLCT.EXE - anyone
    ... registry entries were listed as associated to k.exe. ... my temp folder called k.exe but it had already been deleted. ... > It looks like you might have a keylogger or trojan on your system. ... >> Carol Haynes ...
    (microsoft.public.windowsxp.general)
  • Re: New Trojan
    ... > has two registry entries in my Run, ... The trojan is apparently similar to Coreflood (and may even share some ... I haven't looked at the UDP ports yet, ... infection. ...
    (Incidents)
  • Re: Trojan svchost.exe in created folder windows/syst32 caught by Norton
    ... Be sure to clean this trojan as best you can. ... installed/made. ... automated tool to delete all files and registry entries that the trojan ... >> Norton firewall caught a trojan trying to send out info over internet. ...
    (comp.security.firewalls)
  • Re: Nortons message
    ... some malware is incorrectly detected by AV programs ... download another av proggy & install & scan the HD ... manual virus removal (ie registry entries etc). ... how to do this (The symantec site is very good) ...
    (microsoft.public.windowsxp.security_admin)