Hi all, on going trojan problem. No 2

[crow053]

Hi all, on going trojan problem. No one seems to know how to get rid of these. Here is the latest results from an online scan....
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050421.exe infected: Trojan.CDance.A
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050421.exe unable to disinfect
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050422.exe infected: Trojan.CDance.A
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050422.exe unable to disinfect
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050423.exe infected: Trojan.CDance.A
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050423.exe unable to disinfect
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050425.exe infected: Trojan.CDance.A
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050425.exe unable to disinfect
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050426.exe infected: Trojan.CDance.A
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP109\A0050426.exe unable to disinfect
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP65\A0021739_dll.vir infected: Trojan.Win32.Spy.Justin
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP65\A0021739_dll.vir unable to disinfect. any ideas? My Norton Internet security doesn't find anything.

 

[Kento]

They're all in the _Restore folder so you have to disable system restore then you can have the scanner remove them.

1. Close all open programs.
2. Right-click My Computer on the Windows desktop, and then click Properties.
3. Click the Performance tab.
4. Click File System.
5. Click the Troubleshooting tab.
6. Check Disable System Restore, click OK, and then click Close.
7. Click Yes to restart. This disables the System Restore feature and will purge the contents of the _RESTORE folder when the system is restarted.
8. Then scan the computer and remove any trojans or viruses that may be detected.
9. After doing that repeat steps 1 through 7, except in step 6, uncheck Disable System Restore.

Also see this:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263455

 

[crow053]

Kento, thanks, I am finally trojan free!!! you get a gold star :<)

 

[mamatech]

My problem is that Norton isn't finding it, but Bulldog does when I start Kazaa. It won't allow me to delete the file; Access Denied box keeps appearing. I keep my NAV updated regularly, but it doesn't find anything. Someone please help me. This is driving me crazy!!!!!!!!!

 

[crow053]

Try an online virus scan. RAV or Bit defender. Look in google. Be sure to check auto-clean box. Also do what Kento says. Good luck