Re: Trojanhorse problem

From: Don (anonymous_at_discussions.microsoft.com)
Date: 11/21/03


Date: Fri, 21 Nov 2003 05:26:05 -0800

Dave Figured out how to do it and it did work. The AV did
fix it so thanks.
Don
>-----Original Message-----
>Please read the following URL:
>http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.ht
m
>
>The objective:
>------------------
>- Turn off the System Restore function
>- Reboot the PC
>- Using your AV package, perform a full scan of all files
on the platform and clean/delete
> infectors found
>- Turn on the System Restore function
>- Reboot the PC
>- Create a new System Restore point.
>
>If you have problems, it can be done manually....
>
>Use the WinME floppy boot disk and boot from drive "A:"
>When you get to a DOS prompt enter the following command
>
>attrib -r -s -h c:\_RESTORE
>rename c:\_RESTORE c:\RESTORE.old
>
>Reboot the PC.
>
>In Windows delete the folder; c:\RESTORE.old
>
>Please report back your results.
>
>Dave
>
>
>"Don" <anonymous@discussions.microsoft.com> wrote in
message
>news:00d301c3aec3$c73cc450$a401280a@phx.gbl...
>| I'm running ME and I have a Trojanhorse Downloader
>| Winshow.b on several of my _Restore\Temp files and I
can't
>| get it cleaned out. How can I delete these files?
>
>
>.
>



Relevant Pages

  • Re: fs66.cab/generic dialer
    ... Turn off the System Restore function ... Reboot the PC ... The Cabs are archived files and I ...
    (microsoft.public.security.virus)
  • Re: Viruses in C:RestoreTemp*.cpy files that are write protected
    ... Turn off the System Restore function ... Reboot the PC ... | My McAfee antivirus software has isolated multiple viruses ...
    (microsoft.public.security.virus)
  • Re: Trojanhorse problem
    ... Turn off the System Restore function ... Reboot the PC ... Use the WinME floppy boot disk and boot from drive "A:" ...
    (microsoft.public.security.virus)
  • Re: _restore
    ... Reboot the PC ... Turn on the System Restore function, and re-apply any System Restore preferences, ... | This message is virus free as far as I can tell. ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Single click acting like double click
    ... Try setting back to a double click, reboot and then change back to a single ... try a system restore at a date prior to the ... cursor there. ... How do I fix this? ...
    (microsoft.public.windowsxp.general)