Re: cannot delete trojan - access is denied

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 06/27/04


Date: Sun, 27 Jun 2004 00:24:18 -0500

AzErT wrote:
> My eZtrustFirewall detected a trojan in a file. I have downloaded
> suspicious files lately, so naturally I believe my antivirus program.
> The trojan is NetDevil 1.5 and the file was:
>
> C:\System Volume
>
Information\_restore{23C157CD-F001-4C9A-B599-DF5BE879C30003}\RP225\A0068021.
exe
>
> I tried to open C:\System Volume Information, but an "access denied"
> alert box came up. I am an admin user, and I use Windows XP SP1a.
>
> My antivirus cannot delete the file either. Does anyone know what the
> file is or how I can delete it?

Turn off System Restore.
http://support.microsoft.com/?kbid=310405
Reboot.
Turn on System Restore.
http://support.microsoft.com/?kbid=310405
Make a Manual Restoration Point.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx

-- 
<- Shenan ->
-- 
The information is provided "as is", with no guarantees of
completeness, accuracy or timeliness, and without warranties of any
kind, express or implied.  In other words, read up before you take any
advice - you are the one ultimately responsible for your actions.


Relevant Pages

  • Re: GONE! Trojan Horse Downloader.agent.2.BK
    ... I think the trojan is gone! ... disabled system restore according to the instructions, ... Lo and behold, AVG ... >updated antivirus, in safe mode if you want, you ...
    (microsoft.public.security.virus)
  • Re: Torjan and Virus
    ... But how do I know if its in that one folder? ... So If I do a disk cleanup on system restore, will it just get rid of that ... > A trojan is a specific type of virus - a program that pretends to be ... If you want to speed up this process use Disk Cleanup on the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: MT CHAT - Anyone know what happened?
    ... | It's a trojan bot that's been around on a number of websites - I ... Before the computer went completely down, Ad-Aware said at ... least part of the trojan was in the system restore files, ... which enables me to run IE "natively" in Firefox. ...
    (sci.med.transcription)
  • Re: Trojan virus
    ... The User already has an Antivirus program that ... | alerted him to the presence of a Trojan on his system, ... I wrote the Multi AV scanning tool. ... in DOS using NTFS4DOS. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem with winlohonhook trojan!!
    ... I had aproblem with this trojan winlogonhook on my computer. ... I have the windows XP home eddition instaled on my comp. ... getting reinfested because you failed to flush System Restore. ... We need to know _where_ your antimalware product finds the malware, ...
    (alt.comp.anti-virus)