Tech Support > Computers & Technology > Virus & Worms > Removing Trojan Horse & Safe Mode
Removing Trojan Horse & Safe Mode
Posted by Buckwheat on February 26th, 2005


I need to remove Trojan Horse Downloader Agent.al from my computer
(WINXP),but I have been unable to find a tool that will do this.Is there a
tool available that will remove this pest?..if so,where can I find it?
I have located manual removal instructions on the Internet that seem simple
to follow,but it
does involve making changes to the registry which I have never done and do
not feel comfortable doing.

Thefirst step in the manual removal instructions is to boot into Safe Mode
and
run various spyware/addware removal programs before proceeding on to the
actual removal,however,when I boot into Safe Mode I am unable to do
anything.The only addware/spyware removal program (among the 5 that I have
installed)
that shows up on my desktop in Safe Mode is Spybot and when I click it
nothing happens;the computer just slogs along doing nothing:I've let it run
on for up to 10 minutes with no results.When I do an Alt+Ctrl+Del in Safe
Mode nothing appears in the Applications pane of the Windows Task Manager.
Also,there are multiple Task Manager Windows after an Alt+Crtl+Del.

I've also been getting a popup window (although I have a popup blocker
running) that claims it is from Microsoft and is advising me to go to their
website to d/l spyware protection...uh-huh.

Any constructive advice is welcome.


Posted by David H. Lipman on February 26th, 2005


"Buckwheat" <bucktheduck2000@hotmail.com> wrote in message
news:OcidnSQ5ctgdL73fRVn-uQ@bright.net
| I need to remove Trojan Horse Downloader Agent.al from my computer
| (WINXP),but I have been unable to find a tool that will do this.Is there a
| tool available that will remove this pest?..if so,where can I find it?
| I have located manual removal instructions on the Internet that seem simple
| to follow,but it
| does involve making changes to the registry which I have never done and do
| not feel comfortable doing.
|
| Thefirst step in the manual removal instructions is to boot into Safe Mode
| and
| run various spyware/addware removal programs before proceeding on to the
| actual removal,however,when I boot into Safe Mode I am unable to do
| anything.The only addware/spyware removal program (among the 5 that I have
| installed)
| that shows up on my desktop in Safe Mode is Spybot and when I click it
| nothing happens;the computer just slogs along doing nothing:I've let it run
| on for up to 10 minutes with no results.When I do an Alt+Ctrl+Del in Safe
| Mode nothing appears in the Applications pane of the Windows Task Manager.
| Also,there are multiple Task Manager Windows after an Alt+Crtl+Del.
|
| I've also been getting a popup window (although I have a popup blocker
| running) that claims it is from Microsoft and is advising me to go to their
| website to d/l spyware protection...uh-huh.
|
| Any constructive advice is welcome.


1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt448.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
3) Reboot your PC into Safe Mode and shutdown as many applications as possible
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *



--
Dave








Similar Posts