Can´t remove a virus called Win32:Agent-IVT [Trj]

Viruses and worms
1

[b]It´s a trojan inside the folder windows\system32…

avast! detected a virus in my computer. I got a message stating: “access denied” that didnt let me delete or move to the chest…
than, i´ve been to avast´s FAQ’s (http://www.asw.cz/por/virus_detection_and.html#idt_1547) and followed all the steps but it didnt work… can someone help me with that ??

thanks[/b]

2

If you have XP(it appears you have), you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, Menu, ‘Schedule boot-time scan…’ Or see http://www.digitalred.com/avast-boot-time.php

Files in use or protected like in the system folders may not be able to be dealt with because of windows protection, the boot-time scan should be able to deal with it before windows starts.

3

Besides scanning at boot time, it would be good if you follow the general cleaning procedure:

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.

  2. Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.

  3. It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
    If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

  4. If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.

  5. Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

  6. After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

  7. Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.