My office desktop runs windows 2000 professional, cox security suite spybot (and now also counterspy). About 2 weeks ago I was searching the net for results for "57 chrysler saratoga" for a secret gift exchange for a car group I'm involved with. I clicked on one of the links and immediately pop-ups came up for "ultimate cleaner" which I then closed (of course, without downloading anything). I tried cleaning it with updated Spybot and ran anti-virus from Cox Security Suite. Amongst other things, Spybot listed "win32.agent.pz". I tried the fix thru Spybot and it said it couldn't delete this file but try again on restart. So I hit the restart and then my desktop started looping the start-up again and again, before it finished starting windows, it resatrted back at the first screen (where you can press F8 to enter the bios). I shut the computer down and unplugged my network cable (not wanting anything to get to the server). The computer restarts fine at that point. We looked at the ip address for the network and it was gone. Reentered the ip address and hit restart upon which the looping began again. I downloaded counterspy from the net thru another workstation and loaded it on my desktop (still disconnected from the network). It saw "win32.agent.pz" and deleted it (so it said). Restarted the computer and it worked fine, except it didn't connect to the network (cable still unplugged). Reentered the network ip address, reconnected the network cable, and hit restart, bingo, the loop was back. Did another scan and "win32.agent.pz" was back in my computer. It almost seems to reload this Trojan right at boot.
I've looked at some other threads on other forums, but didn't see anything specific to windows 2000, only XP. I cannot get to the internet on this computer, so downloading any programs to fix must come from another computer, unless you think taking it off the network and just plugging it into my home internet connection is the way to go.
How do I start, I really don't want to have to wipe my harddrive.
Thanks in advance,
Edited by jsrail, 05 December 2007 - 10:55 PM.