Re: trojan in my system restore

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/30/03


Date: Mon, 29 Dec 2003 18:58:33 -0500

Please read the following URL:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

The objective:
------------------
- Turn off the System Restore function
- Reboot the PC
- Using your AV package, perform a full scan of all files on the platform and clean/delete
       infectors found
- Turn on the System Restore function
- Reboot the PC
- Create a new System Restore point.

Please report back your results.

Dave

"ray jordan" <anonymous@discussions.microsoft.com> wrote in message
news:099a01c3ce65$a5ad6990$a001280a@phx.gbl...
| i just ran trendmicro anti-virus scan and came up with a
| trojan.id is c:\_restore\archive\fs319.cab. trendmicro
| says it is in use and uncleanable. how can i remove
| it? help!!!!!!!!



Relevant Pages

  • Re: fs66.cab/generic dialer
    ... Turn off the System Restore function ... Reboot the PC ... The Cabs are archived files and I ...
    (microsoft.public.security.virus)
  • Re: Viruses in C:RestoreTemp*.cpy files that are write protected
    ... Turn off the System Restore function ... Reboot the PC ... | My McAfee antivirus software has isolated multiple viruses ...
    (microsoft.public.security.virus)
  • Re: Trojanhorse problem
    ... Turn off the System Restore function ... Reboot the PC ... Use the WinME floppy boot disk and boot from drive "A:" ...
    (microsoft.public.security.virus)
  • Re: Trojanhorse problem
    ... fix it so thanks. ... >- Turn off the System Restore function ... >- Reboot the PC ...
    (microsoft.public.security.virus)
  • Re: _restore
    ... Reboot the PC ... Turn on the System Restore function, and re-apply any System Restore preferences, ... | This message is virus free as far as I can tell. ...
    (microsoft.public.scripting.virus.discussion)