Thread: critical system error win32.agent.azsy.

My brother got this message on his computer this morning and clicked on the virus protection software that followed the message, personal Anti-virus, which wasn't his own virus protection I googled the message and it looks like it's ad/mal/spyware "hoax". From what I've read, Just by getting the pop up means you've got the spyware. The pages I read said to use this removal program that would work relly well. The problem is that he tried opening Internet explorer and keeps getting the same messaeg. He tried running his virus protection but it won't start up. Absolutely nothing will work on his computer. I am not a computer expert, nor do I play one on TV. But I did tell him to unplug the ethernet cable and shut down. Does it sound like it's a complete loss? Any ideas?

SuperAntiSpyware for the removal

or this

Removal Tool - Remove Trojan.Win32.Agent,Azsy

both are free

From what he says, he can't even open IE to access any website.

Originally Posted by kingkrazy

From what he says, he can't even open IE to access any website.

download it and e-mail it to him or have his install firefox

firefox is amazing, until something better comes out i'm hooked.

I had a similar (though not the same) issue the other day too and I've decided that occasionally (once a month or so), I want to just wipe the hard drive and start over from scratch.

If all else fails for the OP, he may have to go this route too.

What precautions should one take before proceeding with such a task?

Thanks.

I've had to fix a very similar problem on a friend's computer a while back. The main problem is that the spyware/virus pretty much locks down your computer. These are my suggestions:

1. Boot Windows in "Safe-Mode." (Keep pressing F8 before Windows starts loading.) This should prevent any unnecessary processes from running. Now try running the real anti-virus software from there. Also try running the removal tool that you found. You should be able to get it on to the computer with a USB flash drive. After scanning and hopefully removal, restart and see if it worked.

2. If that didn't work then you might have a rootkit infection and those might be a little more trickier. I ended up pulling the hard drive out and connecting it to another computer as a secondary drive. By doing so, you can do a complete scan of the drive without the virus/trojan interfering. Make sure the anti-virus software on the other computer is fully updated with the latest definitions and that the real-time scanner is on. You don't want to accidentally infect the other computer too. Make sure you do a complete/full scan instead of a "quick" scan. After its done, put the other hard drive back, and see if its back to normal. If you don't feel comfortable opening computers and such, then skip this suggestion. You can do a lot more damage if not handled properly.

3. If all else fails, then you probably have to do what Bogey suggested and wipe the hard drive clean. You can do that with the System Restore discs or Windows installation discs that came with the computer. Choose the option in which the entire drive is formatted. If possible try backing up any important files on a flash drive or external hard drive before wiping the hard drive clean.

A lot of people unknowingly have expired or outdated anti-virus software, which is one of the downsides to commercial anti-virus software. There's some excellent free anti-virus software out there too; Avast, AVG, and AntiVir. I recommend any of those three for those who don't want to spend money on anti-virus software.

He started in safe mode, but norton won't run in safe mode tried system restore to an earlier point but calendar won't even go back to aug. still can't open internet at all. when starting in regular or safe mode, he gets message that says "the application or ELL globalroot \systemroot\system32\UACwdiyruilve.dll is not a valid windows image. He hits ok button and gets more messages similar, but diffrent content ( help center and all toolbars and dexktop icons)

At my work we have had this infection on 3 different systems, every program we tried to run would get blocked by the infection. Programs such as sdfix or combofix which run off of batch files would get blocked as well. As for Malwarebytes, as soon as we would install the program, the infection would delete the program executable from the install folder even when running in safe mode. After hours of trying every program available, we decided to reimage all the computers. Good luck that's all I have to say.