|
|
|
PLEASE HELP ME! I have a Trojan Vir
|
Original Message
|
Name: Danielle
Date: August 30, 2002 at 18:44:47 Pacific
Subject: PLEASE HELP ME! I have a Trojan Vir |
Comment: Somebody please help me...I just got an anti-virus program and it says I have a virus called Trojan Horse Browse EVT... It wouldnt quarantine it or send it to some healing vault :( Can anyone PLEASE tell me what to do to get rid of it? It says it's at
C:\_RESTORE\TEMP\------.CPY
But when I search for the file(I searched because I was going to delete the file) it's not there?!? This makes no sense to me... if anyone can help me I'd be very happy because I dont want to lose my computer :( :( :( :(
PLEASE, PLEASE, somebody! :( :( :( :( :( :( :( :(
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: capt
Date: August 30, 2002 at 20:49:10 Pacific
|
Reply: (edit)Have you ran a second scan to see if it is still there? If not run another scan. It might have been a false detection, which sometimes happens. Run a second scan and then try an on-line scan from Trend Micro, Symantec or Panda, just to make sure there is no virus and to give you some peace of mind. All the bset!
 Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: Tank863
Date: August 30, 2002 at 20:59:40 Pacific
|
Reply: (edit)Danielle, If the virus is in your restore folder, you need to disable the restore feature, run a full scan and then re-enable the retsore feature. Tank863
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: Jaz
Date: August 30, 2002 at 23:10:25 Pacific
|
Reply: (edit)Tank is right. You need to disable system restore and then run another scan to clean the virus. By the way, a virus in the _restore\temp folder is not active. 1. Close all open programs.
2. Right-click My Computer on the Windows desktop, and then click Properties.
3. Click the Performance tab.
4. Click File System.
5. Click the Troubleshooting tab.
6. Check Disable System Restore, click OK, and then click Close.
7. Click Yes to restart. This disables the System Restore feature and will purge the contents of the _RESTORE folder when the system is restarted.
8. After restarting ru another virus scan.
10. After cleaning the infected files, repeat steps 1 through 7, except in step 6, uncheck Disable System Restore. Or see this: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263455
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: something else
Date: August 31, 2002 at 04:53:47 Pacific
|
Reply: (edit)you might also want uncheck *StateMgr in msconfig. most AV software dont look for trojans, so download a dedicated anti trojan program, like moosoft's the cleaner
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: Danielle
Date: August 31, 2002 at 06:38:37 Pacific
|
Reply: (edit)Thanks soooo much to everybody who replied! :) So since it's in the _restore\temp folder the virus isn't even active? That's great to know :D
I'm gonna go disable the system restore right now so I can get rid of the file completely... thanks for telling me how to do that, Jaz :P
And also, I got the Cleaner, AND Trojan Remover and neither of them even found a virus or threat...
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: Jaz
Date: August 31, 2002 at 21:19:34 Pacific
|
Reply: (edit)Yeah it's not active but if you used system restore and rolled your system back then the trojan would become active again. So make sure you remove the trojan from the _restore folder. And you don't want to uncheck *StateMgr in msconfig. It's for system restore and it needs to be checked or it won't work.
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: something else
Date: September 1, 2002 at 07:53:35 Pacific
|
Reply: (edit)hi, what i meant to say was, if you want to disable system restore properly, uncheck *statemgr and disable system restore in control panel too. then when you want it back re check system restore and *statemgr
Report Offensive Follow Up For Removal
|
Use following form to reply to current message:
|
|
|
