# My anti-virus progam won't get rid of a trojan

**URL:** https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243
**Category:** Factual Questions
**Created:** [September 2, 2006, 9:42pm UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243 "2006-09-02T21:42:10Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Colibri](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/colibri/32/1841_2.png) [@Colibri](https://boards.straightdope.com/u/Colibri)
#### Post date: [September 2, 2006, 9:42pm UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243/1 "2006-09-02T21:42:10Z")

</div>

I am using AVG antivirus and Windows XP. AVG has generally been very good about dealing with viruses, but a few days ago it found a trojan that it seems unable to remove.

The culprit seems to be something called nrcs.exe. Although AVG has identified this and what I assume are some associated programs, when I ask it to heal, delete, or move any of them to the virus vault I get the message “Requested action is not available for this object.”

This is apparently this trojan [W2.Trojan.Ranky.FV](http://www.iss.net/threats/W32.Trojan.Ranky.FV.html)

[This site](http://fileinfo.prevx.com/spyware/qqf0ee33453094-NRCS13564891/NRCS.EXE.html) offers a removal tool. Is this a trustworthy site? Several other sites also offer removal tools. Does anyone have a recommendation for dealing with this?

---

<div class="post-metadata">

### Author: ![yoyodyne](https://avatars.discourse-cdn.com/v4/letter/y/a9a28c/32.png) [@yoyodyne](https://boards.straightdope.com/u/yoyodyne)
#### Post date: [September 2, 2006, 10:43pm UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243/2 "2006-09-02T22:43:33Z")

</div>

No help with the trojan, but I do vouch for the trustworthiness of the Prevx site.

---

<div class="post-metadata">

### Author: ![Nametag](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/nametag/32/406_2.png) [@Nametag](https://boards.straightdope.com/u/Nametag)
#### Post date: [September 3, 2006, 1:08am UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243/3 "2006-09-03T01:08:42Z")

</div>

> [@Colibri](#):
>
> My anti-virus progam won’t get rid of a trojan

Why should it? Trojans, if worn correctly _prevent_ viruses from spreading.

---

<div class="post-metadata">

### Author: ![PatriotX](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@PatriotX](https://boards.straightdope.com/u/PatriotX)
#### Post date: [September 3, 2006, 1:31am UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243/4 "2006-09-03T01:31:42Z")

</div>

Prevx rocks

---

<div class="post-metadata">

### Author: ![xash](https://avatars.discourse-cdn.com/v4/letter/x/c6cbf5/32.png) [@xash](https://boards.straightdope.com/u/xash)
#### Post date: [September 3, 2006, 8:31am UTC](https://boards.straightdope.com/t/my-anti-virus-progam-wont-get-rid-of-a-trojan/371243/5 "2006-09-03T08:31:10Z")

</div>

I’ve recently started using Scandoo ( [http://www.scandoo.com/](http://www.scandoo.com/) ) to determine if a search result is good or bad. So far it seems to tag them correctly.

If the tool from [prevx.com](http://prevx.com) doesn’t fix it, run HijackThis and then post your HijackThis logs on the SpywareInfo Forums. Refer to the sticky on the top of GQ for details.