Re: SOPHOS found...

As I remember, in your Multi-AV that you so often promoting here you
suggested as the first option Sophos. So, I tried it (without involving
whole Multi-AV. Second, instruction in Sophos is clear enough - no mark, no
suggested deleting. However, computers still can't (fortunately) replace
human brains and no program can do everything automatically. So, I was
hoping that someone, more knowledgeably with the deeps of Windows can give
me some idea what those items in System Volume Information are and what
their meaning/function might be.
Just this.
Besides - Sophos support is only for their customers. I used its free tool
(part of YOUR "Multi") so - no Sophos support available.
Marek Kalisz
PS. I understand. Often I have a bad day too...
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:uXopdZo4GHA.4352@xxxxxxxxxxxxxxxxxxxxxxx
From: "Marek Kalisz" <kalisz_m@xxxxxxxxxxxxx>

| I did check with Sophos Anti-Root in both, Safe and Normal modes. It
| pointed 3 suspicious objects:
|
| \System Volume Information\Catalog\CiFLffd.000
| \System Volume Information\Catalog\CiFLffd.001
| \System Volume Information\Catalog\CiFLffd.002
|
| It suggested, however, to not to remove those. Is Sophos correct? What
| hose objects might be? Is this safe to leave them alone?
| Marek Kalisz
|

Ask Sophos.
You really shouldn't be using an Anti-RootKit utility if you don't
understand what they
report.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




.