IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice

trojan infected file in _RESTORE folder cant be deleted

871 Views 4 Replies 2 Participants Last post by iamstuck, Jan 18, 2003

iamstuck

Discussion Starter · Jan 17, 2003

i ran house call and i found a Backdoor Cabrotor trojan in _RESTORE folder "C:\_RESTORE\TEMP\A0014907.CPY." i cant delete it. And how come Pc-cillin didnt find it on weekly scanning. well im more worried about getting rid of this thing. i dont want ppl going into mah comp. plz help.
thnx to ne replies.

Save

Status: Not open for further replies.

1 - 5 of 5 Posts

· #2 · Jan 17, 2003

You need to disable the _RESTORE folder and then run the scan

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263455

Save

iamstuck

Discussion Starter · #3 · Jan 17, 2003

ok i did what the site said and when i couldnt find the file i did another virus scan on mah comp. And all the .cpy files r gone. is this bad?

Save

Del

· #4 · Jan 17, 2003

If you turn off system restore, then turn it back on, it flushes all the restore files and starts over, this gets rid of the virus that is n the restore files. Normal for win me ane win xp.
You should be good to go now.

Save

iamstuck

Discussion Starter · #5 · Jan 18, 2003

hey thanx alot
u guys r great

Save

1 - 5 of 5 Posts

Status: Not open for further replies.

Top Contributors this Month