How do you remove Trojan horse BackDoor Agent BA when AVG resident shield says it cannot be deleted cleaned or removed?

Answer 1

You need to run these 5 essential steps to remove all the spyware on your computer.

1. Run Deckard's System Scanner (DSS)

2. Run Malwarebytes Anti-Malware

3. Run the anti spyware removal programs spybot

4 Run Superantispyware

5. Run a complete scan with free curing utility Dr.Web CureIt!

Install threat fire which will enhance your antivirus protection

For most Trojan horses, all you have to do is note the path to the infected file(s), find them, and delete them.

Be sure to empty the recycle bin.

After that, try this great online virus scanner/remover: http://housecall.trendmicro.com It's so good. And it's free.

Other tips from FAQ Farmers:

• AVG gave me the name of the infected file.dll. I moved this file to the desktop and renamed it file.old. I restarted system and deleted the file seems to have worked.

• If AVG identifies the infected file ctlce.dll in System32, but when you goto rename it, it does not show up: The reason that AVG can't remove it is that the virus has scrambled the permissions of the file. You need to open a command window and use the move command to take it out of the system32 folder, and rename it to something other than .dll (so that you can play with it safely.)Then (you need to be logged in as Administrator to do this), right click on the file and go to advance, permissions and use the Take Ownership feature to grab the file back. Hit OK, got back into the properties and grant the Administrator user Full Control. You may then delete the file.

• I got rid of the Trojan by moving the infected dll to the desktop. Turn off System Restore. Reboot in safe mode. Delete the dll. Restart in normal mode. Turn safe mode back on. This works!

• If you don't want to spend a lot of time searching for the dll and finding out what is called and all of that: I just reformatted my hard drive and reinstalled everything. I know that is a bit extreme but it definitely works without a doubt.

• If whenever you try to touch the infected .dll file it says it's being used by another person: The file uses very special NTFS file system permissions to make its read-only property unchangeable! To delete it:-Create a temp directory. Move the file into the temp directory. Change the properties of the temp directory (remove read-only) and select apply. When prompted, select Apply changes to this folder, subfolders and files. Delete the file!

wow - thanks everyone I tried each one of these suggestions (apart from the reformatting and new setup of windows!) everything working great again.

AVG gave me the name of the infected com.dll for the virus BackDoor.Agent.BA

I moved this file to C:\ and renamed it to file.old using a command prompt (Start > Run > CMD.exe > OK)

Typed: move c:\windows\system32\com.dll c:\com.dll

The virus has corrupted the permissions of the file so you cannot yet delete it. In order to grab the file permissions back, create a temporary folder (eg: temp) and drag/drop (move) the file into the temporary folder.

Right click on the temporary folder that you have just made (which now has the offending file in) and uncheck the READ ONLY box so that it is empty/blank.

Click on APPLY and when prompted, select: Apply changes to this folder, subfolders and files.

When done click on OK and then delete the temporary folder that you created.

When you delete the folder it will delete the offending file aswell.

Questionwhat if i can delete the dll file easily but it always comes back to folder system32? i did all of the above (except the reformatting, of course).