Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93105 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Closed]Need Help Removing W32/agent.nm


  • This topic is locked This topic is locked
3 replies to this topic

#1 scoe44

scoe44

    New Member

  • New Member
  • Pip
  • 1 posts

Posted 07 August 2007 - 06:26 PM

Hi all some how i ended up getting this nasty little thing on my computer, some of th things it does to mine is it wont let me change my home page it always goes to the same page with out letting me change it. I have did numerous virus scans and it always picks it up this is a copy from my virus log. it always come back at restart. I have tried teh vondo that was mentioned on a previours post but now luck, also i tried to go to my registary but some how i can not find the run program in teh start menu. any help would be great thanks :\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:40:12 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:40:41 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:44:51 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:45:35 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:46:08 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 6:47:00 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:07:45 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:13:45 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:14:43 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:21:10 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:22:11 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:23:09 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:24:55 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:42:41 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:43:52 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 7:57:35 PM C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\WURL.DLL W32/Agent.NM Delete at restart 8/7/2007 8:03:20 PM File generated by AT&T Internet Security Suite AT&T Anti-Virus

    Advertisements

Register to Remove


#2 IndiGenus

IndiGenus

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 5,251 posts
  • Interests:Computer Security, Music, Sports

Posted 08 August 2007 - 06:51 AM

Hi and welcome to the forums.

We need a HijackThis log to analyze your issue. Please read through and follow the instructions in the "Welcome New Members" post here.

http://forums.tomcoy...ers_t34502.html

Also, you will not find the Registry Editor anywhere on the start menu or in your programs. It needs to be run from a command line. You need to be very careful working with the registry as unrecoverable damage can be done editing your registry without knowledge and a good backup.

Edited by IndiGenus, 08 August 2007 - 06:52 AM.

IndiGenus

The help you receive here is free, but if you would like to help me continue the fight against Malware then Posted Image

Logs will be closed if you haven't replied within 5 days



Proud Graduate of TC/WTT Classroom



"To find perfect composure in the midst of change is to find ourselves in nirvana."

Suzuki Roshi


#3 IndiGenus

IndiGenus

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 5,251 posts
  • Interests:Computer Security, Music, Sports

Posted 16 August 2007 - 01:26 PM

Hi, Did you still need help here? Let me know please. Thanks
IndiGenus

The help you receive here is free, but if you would like to help me continue the fight against Malware then Posted Image

Logs will be closed if you haven't replied within 5 days



Proud Graduate of TC/WTT Classroom



"To find perfect composure in the midst of change is to find ourselves in nirvana."

Suzuki Roshi


#4 IndiGenus

IndiGenus

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 5,251 posts
  • Interests:Computer Security, Music, Sports

Posted 21 August 2007 - 02:36 PM

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log
IndiGenus

The help you receive here is free, but if you would like to help me continue the fight against Malware then Posted Image

Logs will be closed if you haven't replied within 5 days



Proud Graduate of TC/WTT Classroom



"To find perfect composure in the midst of change is to find ourselves in nirvana."

Suzuki Roshi

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users