Avira detected VBS/Agent.NDH.5 virus on my PC a few days ago and since then my computer was screwed up. No matter what I tried to open on the computer, the mouse started spinning for a while and then it said the program is not responding. Avira keeps scanning, detecting the virus and putting it in quarantine, it just doesn’t go away. How do I get rid of this virus completely?
VBS/Agent.NDH.5 is categorized as a Trojan/Worm virus that may surreptitiously infiltrate a user’s system via contaminate e-mail attachments or links. As similar as other Trojan viruses, this one is capable of downloading malicious files via the internet and executing them on a victim’s computer. If you unfortunately get infected by this virus, you must take immediate measure to get rid of it because VBS/Agent.NDH.5 virus can perform a lot of harmful activities on your machine as soon as it is downloaded. It owns Worm capability that can duplicate itself and infect your files in your computer. Also it may spread itself through one computer system to another by means of Internet or junk mail attachments. Therefore, different computers that share the same network could be infected as well. It puts all your data and your personal information in a high risk.
VBS/Agent.NDH.5 is known to attack computers that run with Windows operating system. That is to say, if you are using a computer with Windows XP, Windows Vista, Windows 7 or even Windows 8 (8.1), you will be the target of this nasty virus. When it sneaks into the compromised PC, it is capable of spying on infected computer, leaking data, downloading and executing other modules from a server. It may display ads and pop-ups on your computer whenever you are online. Crazy pop-ups shown on your computer include misleading information about discount coupon, deals and other offers. In addition, it can open a backdoor that allows an attacker to steal sensitive information including user name and passwords that are stored on the PC. As we all know, Trojan virus can be easily caught by antivirus programs in most cases. But for this paticular one, it can come back again and again after removal. This virus makes PC users frustrated because they will find that any applications installed on the computer keep freezing and show “Not responding” message after infected. In a word, if computer is attacked by this nasty virus, you should immediately remove it at all costs to make sure your computer work as usual and avoid data theft.
Slow down your PC speed notably.
Add other dangerous Trojan or Spyware to your system secretly.
Allow the hacker to access your entire system.
Collect all your personal information and transfer to a remote hacker.
Destroy critical system files and make PC unstable.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Note: No matter how the virus accesses your PC, users should know that there are no tools can remove this pesky Trojan automatically at this moment, it is suggested users not spend much time in downloading or paying any security software which claims can delete this stubborn virus. It is totally useless. To completely get rid of VBS/Agent.NDH.5, professional manual guide is needed.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once VBS/Agent.NDH.5 virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
VBS/Agent.NDH.5 is a high-risk virus that is able to break into target system and open a security loophole on the infected system to allow hacker getting control of the infected computer remotely. Now it becomes a serious threat to your security and privacy. Once installed, it may make system changes by downloading potentially malicious files and making registry modifications. Don’t let it stay on your machine because this virus is able to collect personal information including system information and Credit card related information from the targeted computer, and those collected information could be transmitted to cyber criminals. If you don’t want to lose your data or get your computer screwed up, it is necessary to remove VBS/Agent.NDH.5 from the computer.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by on August 19, 2014 7:35 am, last updated on September 22, 2014 10:32 am
Leave a Reply
You must be logged in to post a comment.