Win32.Agent.pz - How to kill?

[Moebius]

Spybot S&D detected Win32.Agent.pz malware in my PC at work.
Spybot couldn't repair the infection, (files was in use) and advised to reboot and make a scan after rebooting. But anyway couldnt repair them.
Files are:

video.dll
audio.dll

both sited in "c:/windows/system32/wsnpoem" folder

Rebooting in safe mode I was not able to copy/move/delete the folder or files

Reading other forums, there is something related to a file "ntos.exe" in "C:/Windows/system32", effectively i found the file at that location.

Please, I need a solution (this is work pc, my boss could kill me :S )

Thanks in advance

[pskelley]

Welcome to the forum, please see this information: "BEFORE you POST" Mandatory Steps Before Requesting Assistance
http://forums.spybot.info/showthread.php?t=288

The malware removal forum is set up to help those in need of assistance with their personal computers. This service is free and provided by volunteers.
I am taking the time to post to you because I want to advise you that you should involve your "Boss" in this situation right away. This could be a serious security breach, see this:
http://www.google.com/search?hl=en&q=ntos.exe&btnG=Google+Search
http://research.sunbelt-software.com/threatdisplay.aspx?name=Trojan-Spy.Win32.Agent.pz&threatid=118491

I suggest the plug should be pulled, the computer should be removed from any network (may already have infected it), and the "Boss" should contact the IT people right away.

Thanks

[tashi]

This topic has been archived.

If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.