Im desperate. I have a laptop 1.6MHz with "XP home edition". I have virus on it:

"WORM AGOBOT.BQ" in winhlpp.exe
"WORM AGOBOT.GEN" in wintemp.exe

Only TREND MICRO磗 "Housecall" (online virus scan) can detect it but not remove or repair it since the programs are running.

I have tried:
Antivir - (updated but couldnt detect it)
AVG - (updated but couldnt detect it)
Norton antivirus 2004 - (as soon as I had it installed it disabled automatically and I couldnt start it again - seems like it was the virus that did it in order to protect it self).

The Virus shuts down my computer from time to time with a 1 min. warning "Remote Proceedure call".

Can someone help me?

Basically, you need to remove the WORM manually, or with a stand-alone tool designed for this purpose.

Sophos has these instructions for this worm
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

and Symantec/Norton has this informationl:
http://www.sophos.com/virusinfo/analyses/w32agobotbq.html

One of these methods should get you back up and running, but be sure to immediately apply ALL Windows Updates (http://windowsupdate.microsoft.com) to insure that you don't get re-infected.

Let us know if this helps or if you need further assistance.

Douglas
http://welchwrite.com/blog/

Hello~ I'm Echo from HK.
I also suffered from this worm. Although I've tried to following the instruction that the above site mentioned, and also the instruction mentioned in TREND MICRO磗 "Housecall" (online virus scan), I never suceed.
It mainly because i even can't run the Registry. once i opened it, it will closed immediately......oh, my PC got to shut down..

Edited by author 02-04-2004 08:51 AM
It is possible sometimes that the Registry can become damaged. In these cases, you might have to backup your data, reformat your hard disk and reinstall Windwos and your applications.

Try to find someone knowledgeable in your geographic area, They might be able to help more than I can can via long distance.

It is best to boot from floppy disk or CD when trying to remove a worm like this. You need a program that will run before anything else, including the virus itself.

D

Boot up in "Safe Mode". You can then keep the regedit open long enough to make changes. It also effects msconfig settings that can only be opened in "safe mode"
 Good Luck!

Im desperate. I have a Gateway Desktop machine with "XP home edition". I have virus on it:

"WORM AGOBOT.BQ" C:\Winnt\system32\svcvhostp
"WORM AGOBOT.GEN"
Only TREND MICRO磗 "Housecall" (online virus scan) can detect it but not remove or repair it since the programs are running.

I have tried:
Antivir - (updated but couldnt detect it)
AVG - (updated but couldnt detect it)
Norton antivirus 2003 - it has been disabled automatically and I couldnt start it again - seems like it was the virus that did it in order to protect it self).

The Virus shuts down my computer from time to time with a 1 min. warning "Remote Proceedure call".

Can someone help me?

Edited by author 02-19-2004 07:27 PM
The best solution is to find another computer, a friend or co-worker with a CD-RW drive and Internet access.

Visit :
http://securityresponse.symantec.com/avcen...hllw.gaobot.ag.html

and download the removal tool for the virus. Symantec has a slighty different name for it.

Burn the removal tool to CD.
Boot the infected computer into Safe Mode, using the F8 key during boot.
Run the removal tool from the CD
This should clean up the infection.

Reboot

You will have to re-install Norton Antivirus as it was probably disabled by the virus. Update your anti-virus to the latest definitions.

Be sure to use Spybot (http://www.safer-networking.org/) or some other anti-spyware application to insure that you are not also infected with these bad programs.

Finally, and this could be done first, install all pertinent Windows Updates to protect yourself from other issues.

I hope this helps to get you back on track.

Hi, i am sebastian from Chile, my english is not so good but i need help, I too have this virus in my PC, it say it is in C:/WINDOWS/SYSTEM32/WINHLPP.EXE, but winhlpp.exe don't exists, there's a file with almost the same name that is winhlp.exe but it's not inflected, i need somebody than can tell me where i can find the file to delete it inmediatly and where did this virus appear. THX ;)

It is very possible that if you got a warning from your Anti-Virus program, it removed the virus automatically. If you run your anti-virus software again, and it doesn't find the virus, you are OK.

I too did a scan on housecalls and on panda and it housecalls did not detect it ....panda did and rave did but none would clean it so I manually removed it myself and rebooted.......I am hoping all goes ok....I did another rav scan and it didn't show the so called virus....WINNT\system32\winhlpp.exe is now removed.....but I don't know if it was to run any programs or not and how and where do you think I picked this up.......I didn't get a chance to put in a fire wall...but I have one now.......so I should be ok I hope.....thanks for being here.

Have a nice day!
Judith

黄色电影A片在线观看a级片免费a级片日本a级片欧美a级片下载欧美a级片迅雷a级片免费下载美国a级片韩国a级片日本a级片迅雷下载日本a级片下载日本a级片视频日本a级片在线</a<a href="http://blog.360.yahoo.com/blog-w5u6cdc7cqLugWwbt.vM4A?p=18">免费日本a级片日本a级片图片日本a级片在线观看欧美a级片在线观看国外a级片在线观看观看a级片免费欧美a级片欧美a级片迅雷下载欧美a级片视频欧美a级片bt下载欧美a级片在线欧美a级片电影免费观看欧美a片三级片日本三级片免费三级片韩国三级片欧美三级片黄色电影免费黄色电影韩国黄色电影欧美黄色电影大陆三级片港台三级片18电影AV女优变态电影日本av女优电影黄色图片鹿城娱乐图片性交图片鹿城娱乐熟女乱伦娱乐圈乳沟大战免费黄色电影网站幼女性交台湾18电影网性爱A片下载日本黄色小电影成人剧场18岁成人电影免费做爱电影bb成人小电影性爱视频做爱电影下载韩国黄色网站下载明星走光图色魔论坛迷奸电影淫荡少妇明星合成贴图走光摩洛客强暴电影二奶进入词典风骚少妇视频做爱同性恋成人三级电影少妇自拍性高潮性爱电影免费伦理片韩国伦理片激情免费电影性感美女性交视频日本AV女优写真中国性爱城欲女写真兴奋的动作激情女郎性教育电影美女诱惑护士装少妇频露裙下春光欧美一级片一级片免费一级片在线一级片一级片电影特级片<a href="http://blog.360.yahoo.com/blog-uhpp45U7brUbi6H2Zy0jaQ?p=24">特级片电影<a href="http://blog.360.yahoo.com/blog-uhpp45U7brUbi6H2Zy0jaQ?p=25">免费特级片下载观看<a href="http://blog.360.yahoo.com/blog-uhpp45U7brUbi6H2Zy0jaQ?p=26">欧美免费特级片

replica watches
Replica Watches guide
Rolex Replicas,
Replica Watches
Rolex Air King
Rolex DateJust
Rolex Day Date
Rolex Daytona
Rolex Explorer
Rolex GMT
Rolex Milgauss
Rolex Prince
Rolex Sea Dweller
Rolex Submariner
Rolex Yachtmaster

good site: 网架，流量计，入党申请书；wow gold site: wow gold，wow gold；cheap wow gold site: wow gold，wow gold，wow gold，wow gold，wow gold；cheapest wow gold site: wow gold，wow gold。

Need new Rip DVD to AVI ?
Rip DVD to AVI
Have a nice surfing！