PDA

View Full Version : win.32.agent.psw question



janie7616
2013-02-03, 08:56
Hi,

Spybot found

janie7616
2013-02-03, 09:19
Let me start again

Can I ask a quick question?

Spybot found win32agent.psw on my computer. I found this link with info for removal: http://forums.spybot.info/showthread.php?t=67504

Spybot removed the trojan and these files:
"<$WINDIR>\a3kebook.ini".
"<$WINDIR>\akebook.ini".
"<$WINDIR>\ANS2000.INI".

The info thread also says:

The following .ini file entries may need corrections. You can open this files in Notepad or any other text editor.

Please remove "DXRCH" from entry "DXRCH" from section "Compatibility16" in file "<$WINDIR>\win.ini".
Please remove "msacm711" from entry "msacm711" from section "vicax" in file "<$WINDIR>\system.ini".
Please remove "msacm811" from entry "msacm811" from section "vicax" in file "<$WINDIR>\system.ini".
Please remove "msacm911" from entry "msacm911" from section "vicax" in file "<$WINDIR>\system.ini".
Please remove "Pattern" from entry "Pattern" from section "Ans2000" in file "<$WINDIR>\win.ini".
Please remove "R1CHMEDIA" from entry "R1CHMEDIA" from section "Compatibility16" in file "<$WINDIR>\win.ini".
Please remove "SEKTVER" from entry "SEKTVER" from section "Compatibility16" in file "<$WINDIR>\win.ini".


My win.ini has this:

[Compatibility 16]
DXRCH=10903
SEKTVER=23077
R1CHMEDIA=42405
[ans2000]
Pattern:9624

and my system.ini has this:

[vicax]
msacm711=32706
msacm811=64133
msacm911=42405

First, do I need to remove these items and when I remove them do I remove the numbers too? (like remove DXRCH=10903)

Thanks for your help