Troj won't let programs open regedit included - how do I proceed?

Free Antivirus Forum - Learn about antivirus, firewalls and personal security

BullGuard Antivirus Forum > Virus Removal > Removal Tools > Troj won't let programs open regedit included - how do I proceed?

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9/21/2004 1:14 PM (GMT +3)

I have AVG resident sheild - found 12 trojans -all variants of Troj Horse proxy.x.etc and healed them, but can't heal or remove Troj Horse Proxy.5.F I also believe I have I-Worm/klez.h. The trojan is preventing me from opening any programs including regedit. I have been able to open AVG to run a scan by right clicking and clicking on 'Run As' this somehow gets around the virus and opens - I havn't be able to open any other program. How do I get rid of this if I can't go into regedit? Is there an online removal tool that can dispatch this critter without downloading an executable file? Anything I download will not open as well... cheers, Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 12862

Posted 9/21/2004 1:35 PM (GMT +3)

Hey Jake

Try Trend: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H

And use their onlinescan: http://housecall.trendmicro.com/housecall/start_corp.asp

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9/21/2004 7:00 PM (GMT +3)

Thanks for the tip - I ran the scan and it found Troj Agnet.BA but didn't remove it. It says that I should download the program PCilln? I can't download anything cuz it will not open... Do you have any other ideas... Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 12862

Posted 9/21/2004 7:15 PM (GMT +3)

It is really a bad one, you´ve got there smhair

http://www.sophos.com/virusinfo/analyses/trojagentba.html

Try fix it manual.

!it will not open"....what will not open?

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9/21/2004 7:22 PM (GMT +3)

Any program I try to open, an error message pops up that says 'Windows cannont find "name of the program trying to open" Make sure you typed in the name correctly, etc.' So I cannot open regedit, cmd prompt, etc, I cannot open any program. I can surf the net and run asps but anything that says download or run from disk is unavailable. I tried in safe mode and have the same problem. So, it seems that all remedies are not working for me... Jake

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 12862

Posted 9/21/2004 7:47 PM (GMT +3)

I don´t like to say it, but i am pretty sure, someone has hacked your computer.

This is from Sophos link:
Troj/Agent-BA is a backdoor Trojan for the Windows platform.
Troj/Agent-BA functions as a proxy server, allowing a malicious user to redirect internet traffic through the infected computer. !!

Disconnect to the net, and see if you can open programs now, or maybe do a system restore

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9/22/2004 7:53 PM (GMT +3)

Okay, I managed to open regedit by searching for the file name (still works) and then copying it to the desktop then I can right click and open with 'run as' - i figured out most programs can be opened this way... Now that I can get to regedit - is there anything I can do? rolleyes

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 12862

Posted 9/22/2004 7:59 PM (GMT +3)

If you can download and run this scanner: http://www.mwti.net/antivirus/free_utilities.asp
do it.

Are you running XP. or?

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Jake
New Member

Date Joined Sep 2004
Total Posts : 5

Posted 9/22/2004 8:18 PM (GMT +3)

yes xp home - thanks

Bobford
New Member

Date Joined Mar 2011
Total Posts : 1

Posted 3/26/2011 6:13 AM (GMT +3)

The fact that you could right click and run as to start programs was golden info for me. I had the same problem on a friend's computer and through a combination of Glary Utilities and Malware Bytes was able to repair the system. Thank You for the insight guys!

kmiranda09
New Member

Date Joined Mar 2011
Total Posts : 1

Posted 3/28/2011 10:28 AM (GMT +3)

If you still experience the same problem, you better try other antivirus software to remove trojan.

as_the_maniax
New Member

Date Joined May 2011
Total Posts : 2

Posted 5/7/2011 5:24 PM (GMT +3)

I used to clean (infiltrate) any malware (virus,trojan, etc) with ESS Rescue CD (go-thip.com/2011/04/29/eset-rescue-cddvd.html), or, if it still cannot clean the malware, I use mini XP from Hiren's (go-thip.com/2011/04/29/hirens-boot-cd.html). Just try it :D, nothing to lose..

regard

Post Edited (as_the_maniax) : 07-05-2011 14:27:39 GMT

natsuto
New Member

Date Joined Jan 2012
Total Posts : 3

Posted 2/1/2012 8:52 AM (GMT +3)

My friend's computer the same problem, and Glary utilities and malicious by a combination of bytes to repair the system.

Party Dresses

Forum Information

Currently it is Sunday, May 26, 2013 11:39 AM (GMT +3)
There are a total of 59,544 posts in 13,143 threads.
In the last 3 days there were 3 new threads and 19 reply posts. View Active Threads