Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
2 replies to this topic

#1 deda_pih


  • Members
  • 1 posts
  • Local time:02:14 AM

Posted 24 February 2007 - 05:22 AM

First of all, hi! I'm a new member, as you can see.
OK the problem is: I can't seem to delete the damn trojan. BitDefender is the only application that actually recognizes it: it reports that the file "C:\WINDOWS\system32\wvold.dll" is infected with trojan.agent.aku. Spybot and Ad-aware don't report it when I run the scan. BitDefender deletes it but it comes back every time I reboot. I've also tried deleting it with Killbox. With the standard file kill I get the message "This file could not be deleted", with delete on reboot I get "PendingFileRenameOperations Data has been removed by external process!" (I've tried deleting it with regedit, maybe that caused the last message). I use windows xp professional. Please help me :thumbsup:

BC AdBot (Login to Remove)


#2 fozzie


    aut viam inveniam aut faciam

  • Members
  • 3,516 posts
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:02:14 AM

Posted 24 February 2007 - 08:13 AM

Posted Image to BC

Have you tried to run Bitdefender in Safemode?

#3 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,069 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:14 PM

Posted 24 February 2007 - 08:14 AM

Have you tried doing your scans and deleting the file in "SAFE MODE"?

Download and scan with SUPERAntiSypware Free for Home Users.
If you encounter any problems while downloading the updates, manually download and unzip them from here.

Download and scan with AVG Anti-Spyware 7.5 in "SAFE MODE".
(This is Ewdio 4.0 renamed. If you already have Ewido installed, please update to this version which has a special "clean driver" for removing persistent malware.) Be sure to print out and follow the AVG Anti-Spyware Install-Scan Instructions.

If the file remains, then download FileASSASSIN.zip and save to your desktop (this tool is compatible with Win 2000/NT/XP only).
  • Create a new folder on your C:\ drive called FileASSASSIN and extract (unzip) the file to that folder. (Click here for information on how to do this if not sure. Win 9x/2000 users click here.)
  • Open the folder and double-click on FileASSASSIN.exe.
  • Select the following file(s) to delete by dragging it onto the text area or select it using the (...) browse button.
    • wvold.dll
  • Select a removal method. Start with "Attempt FileASSASSIN's method of file removal."
  • Click delete and the removal process will begin.
  • If that did not work, start the program again, select the file(s) the same way as before and this time check "Use delete on reboot function from windows."

Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users