Please Help me get rid of TROJ AGENT.L

Yes it's driving me crazy, as I've been researching it for two days now. My Norton didn't catch it. Trend Micro's House Calls for free online scan found it. But it won't clean or delete it. It's attached to my boot up. A separate blank screen comes up with my Internet Explorer and it laughs at me. Ok so they got me, but how do I get rid of it?
I read in one thread in Major Geeks with trojans to disable my system restore I did that. It also said use Ad Aware I have that and run it alot. I also have registry first aide and run that alot. I did go into my registry to find the only two things I found I am supposed to remove from some post on a SOPHOS thread (what ever SOPHOS is).

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SysUpd
HKCU\Software\Microsoft\SysUpd.

But guess what? They are not even in my registry, so could not delete them but definitely do have the trojan (virus).
I do know how to go into safe mode but don't know if that will help to find the files in the registry any more so and delete them.
Can you tell I'm lost at this point and need some help? Yes you are right.
thank you for anyone's help in this matter as I really appreciate it.
Antoinette
islandantoinette@earthlink.net

Here are my system specs:
Windows XP Home Edition Version 2002
Service Pack 1
512 RAM
Intel Pentium 4 1400MHz
1.40 GHz
1.00 GB RAM

 

Thats a nasty piece of spyware there takes some wiping out, have a read of this thread containg other users experience of this problem and how they removed it

http://www.dslreports.com/forum/remark,10091594~mode=flat

You will need to remove sysupd.exe in safe mode, to access safe mode reboot your machine and keep pressing the F8 key before you see the windows loading screen and then select start in safe mode from the options presented

 

Firstly welcome to MajorGeeks
Instructions are here to remove--One more point bigisle - if you don't want spamn do not post your e-mail address
http://www.sophos.com/virus info/analyses/trojagentl.html

 

Good link Jujet
However unless i misread the original post, the removal links from Sophos were unable to solve the problem

 

Thank you General Lee and JuJet84 for responding

Thank you to General Lee and JuJet84 for the promp replies!
Yes you were right I had NO SUCCESS with Sophos remedy to delete these
in my registry as I could not find them in my registry in the search under "find".

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SysUpd
HKCU\Software\Microsoft\SysUpd.

I will now go to this suggested URL:
http://www.dslreports.com/forum/rem...91594~mode=flat

I hope this email gets to you BOTH. This is my first time on this site to post.
Really appreciate the help.
I will go to these URL's and read about what to do and do it.
Thank you for the tip on not posting my email addy also.

Interesting to note this is nasty piece of spyware. Hum spyware. So much for my AdAware huh? And I run that thing every week or more.
I guess I need to keep my Ad Watch on all the time too.

Again thanks for replying at least I can go try something more.

Will keep you informed.
Aloha
Antoinette

 

Thanks for the feedback bigisle, hopefully one of the solutions in the link i gave you will solve your problem

As for Jujets advice about your E-mail address, what you need to do is go to your first post and click the edit button at the bottom right corner then remove your e-mail addy and save the changes

BTW welcome to Majorgeeks, and if you have any more problems just ask

 

Going to go work on it in a few. . .

Aloha I thought about that but too late there is a time element in the edit use tool. Oh well I am not worried about one more piece of SPAM; if I let that bother me I'd be a basket case. I work with Alzheimers Patients enought make you bonkers for sure. So gotta let some things go and lighten up. But thanks for the advice.

I am going to go check out your URL for advice as soon as I can get this migraine under control to stay on, I get seizures from being on computers too long too. So have to go take a break and do this later. But thank you, I will definitely let you know if I have success I sure HOPE SO!
The trojan is more annoying than anything else doesn't seem to be hurting anything, however I do notice that my Internet Explorer will just close out in the middle of what I am researching, and give me the report error. So I guess it IS hurting my putter.
Who ever makes these things up anyway? Kids?

 

Sorry about that man,---You say you have adware installed--you should add also Spybot and Spyblaster in you arsenal against virus and trojan's which both are free.
Spybot 1.3 Final http://www.majorgeeks.com/download2471.html

SpywareBlaster 3.1 http://www.majorgeeks.com/download2859.html

 

Apparently there are different AGENT.L trojans...

Since Housecall (Trendmicro) identified it as such, then this info and removal guide might do the trick, but you will have to use it together with the path/filenames that Housecall said were the infected files, since they're not specified here:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_AGENT.L

Also PestPatrol has some info, don't know if this is the same nasty or not:
http://www.pestpatrol.com/PestInfo/t/trojanproxy_win32_agent_l.asp

It might help if you post back with the actual filenames of the culprit.