1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

DOS AGOBOT. HM non cleanable

Discussion in 'Virus & Other Malware Removal' started by Melodi, Apr 18, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. Melodi

    Melodi Thread Starter

    Joined:
    Dec 19, 2003
    Messages:
    1,314
    After following the instructions in this thread
    http://forums.techguy.org/t220791.html and finally finding and deleting netscvs.exe then running housecall.microtrend.com the scan came up with DOS_AGOBOT.HM non cleanable. Houscall says it's an infected file in
    C:Windows\system32\drivers\etc\hosts

    Anyone have a suggestion to get rid of this? Is this what is preventing the symantec sites from coming up? Norton cannot run live update because it cannot connect to symantec and I cannot bring symatec up either, not by typing it in nor by clicking on links provided by google (or any other search engine). Nothing symantec will come up. I can access the rest of the internet fine.

    Windows XP home, all critical updates are current.
     
  2. funky_munky

    funky_munky

    Joined:
    May 21, 2003
    Messages:
    66
    Try rebooting into safe mode Melodi and navigate to that folder through windows explorer then delete the entire contents of the hosts file.
     
  3. Melodi

    Melodi Thread Starter

    Joined:
    Dec 19, 2003
    Messages:
    1,314
    There is hosts and Imhosts. Delete all or just hosts?
     
  4. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    Melodi,

    I got your PM. What OS is the machine running? We can just replace the host file with a new one, but I need to know the OS to get the right one.
     
  5. Melodi

    Melodi Thread Starter

    Joined:
    Dec 19, 2003
    Messages:
    1,314
    Oh crumbs. I just deleted it, the hosts one. It's windows xp home
     
  6. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
  7. Melodi

    Melodi Thread Starter

    Joined:
    Dec 19, 2003
    Messages:
    1,314
    Thanks guys, it's able to access symantec once again. I have a few questions (as I always do) Is that the sole purpose of that virus to keep people out of symantec? How does one prevent reinfection (it's not my pc, so I want to maybe explain to the owner how to prevent it) and prior to housecall, I ran Panda and that didn't pick anything up, it said it was virus free. If I had not run housecall, I don't think I would have found it. Thanks again!!

    Floorman your link worked great and um...it's hard for me to remember yesterday much less what host file will work where and when , so I would say you are doing pretty good:)
     
  8. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    Keep up to date on the virus definitions. Do regular full sytem virus scans.

    Also I highly recommend that you go to Windows update and install all "Critical Updates and Service Packs". This will patch numerous security holes in IE and Windows.
     
  9. Meangean

    Meangean

    Joined:
    Apr 18, 2004
    Messages:
    216
    fix these

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/221719

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice