Computing.Net > Forums > Security and Virus > Trojan PSW.Briss.A

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan PSW.Briss.A

Reply to Message Icon

Name: mwarsell
Date: March 25, 2004 at 09:00:18 Pacific
OS: Win XP
CPU/Ram: 1.6 Duron / 1gb
Comment:

The AVG free edition found that there's a trojan PSW.Briss.A virus in the file

C:\System Volume Information\_restore{EE91A5DC-153F-4FFA-BE64-A37F82576208}\RPR4\A0017991.exe

The problem with AVG is, that the AVG Shield finds the virus, but the actual program doesn't. I've also tried multiple anti-trojan software (TDS, Digital, Pest Patrol...), to no avail, none finds it. The problem is, I think, that I can't even open the System Volume Information -folder, neither can I delete it.

Please, help me with getting rid of this virus.
Thanks.



Sponsored Link
Ads by Google

Response Number 1
Name: capt
Date: March 25, 2004 at 09:10:08 Pacific
Reply:

From the information you provided, the tojan file is in "system restore". You need to turn off "system restore" and restart the computer. Then run AVG to make sure the system is clean. You can turn "system restore" back on if you want to continue to use it. Files in "system restore" are protected and no antivirus program can clean/delete them. Take care and all the best!


0

Response Number 2
Name: mwarsell
Date: March 25, 2004 at 09:17:47 Pacific
Reply:

Ok, thanks, but how do I turn off "system restore" ?



0

Response Number 3
Name: mwarsell
Date: March 25, 2004 at 09:34:37 Pacific
Reply:

Ok I think I found out how to do that. Still, AVG didn't find the virus, neither did any of the other progs.

Interestingly, when I hover my mouse pointer on top of that "System Volume Information" -folder it says "folder is empty". Still, there seems to be a virus in it.

It might be this same thing that is fooling all these anti-virus software.

How to unravel this one, anyone..?


0

Response Number 4
Name: capt
Date: March 25, 2004 at 09:53:39 Pacific
Reply:

Go to http://www.computing.net/security/wwwboard/forum/10647.html The registry removal instructions for this password stealing trojan is listed there.


0

Response Number 5
Name: mwarsell
Date: March 25, 2004 at 11:04:07 Pacific
Reply:

I used TuneUP Utilities' Registry Editor to go to the path informed in the link that you provided, but there's no "systray" in that reg directory ("Run").


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Trojan PSW.Briss.A

trojan (psw.briss.c) www.computing.net/answers/security/trojan-pswbrissc/12043.html

Trojan PSW www.computing.net/answers/security/trojan-psw/10647.html

How to remove Trojan.NSIS.Voter.a www.computing.net/answers/security/how-to-remove-trojannsisvotera/21612.html