Here is the Fix
I had the same Trojan on my computer, booting the OS in safe mode, and disabling system restore did not work for me. I also tried almost every Anti-Virus, Ad-ware, and Trojan software out there but nothing did it. The way to remove this PSW.Agent.H is simple, the only catch is there is a process running called sysupd.exe running witch protects the Trojan source file in Documents and Settings (_UPDATE.DAT ) from being removed. So here is what you do.
Read all the steps below before you start.
1. Run a search on the computer for a file called sysupd.exe .
2. Open My Computer, and browse to the folder that contains the file.
3. Press Ctrl+Alt+Del, and click on Task Manager.
4. Look on the bottom of the Task Manager window to see how many process are running, ex (Process:15)
5. Find sysupd.exe and stop it. most likely it will keep starting it self over.
4. Keep looking for it and stopping it, until the number of process' go down by one. Once you reach this point you only have a few second until it restarts, so be quick.
5. Switch to the window where sysupd.exe is located and quickly remove it.
6. Once sysupd.exe have been removed, then you can remove the main file _UPDATE.DAT which will be found somewhere in Documents and Settings. (If you cannot find it run a search for it)
7. Run AVG again to make sure the Trojan is gone.
I do not use this web site at all, i only found it while I was searching on Google for what people are saying about this Trojan. So if you need any help, or if you do not understand any of the steps, the best way to contact me is though my email address (princeofegypt03@yahoo.com). Feel free to email me if you need to.
|