Trojans are in C:\_RESTORE

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by rdsw1965, Feb 28, 2006.

  1. rdsw1965

    rdsw1965 Private E-2

    Hello,

    I am attempting to fix a friends PC (Windows Me). I have installed AVG Free and several trojans are located in the C:\_RESTORE\TEMP and C:\_RESTORE\ARCHIVE. Unfortunately, they trojans are seen , but AVG will not heal them due to their location. I tried other programs, too. My initial thought was to simply shut off the system restore to get rid of them. All access to system restore is gone, even in control panel.

    The trojans are (19 files): Downloader.onenet.A (2x), Generic.Dxx (4x), Backdoor.Subserver, Startpage.L (6x), Downloader.Realtens.B, Downloader.Dyfica.2.P (2x), Dialer.9.S, Downloader.Istbar.3.AC and Generic.KFT.

    I have loaded Spybot, Spywareblaster, Spy Sweeper (paid, but it just sits there when running and doesn't check any files), Ad-aware SE, XoftSpySE.

    Any ideas on what to do? Bad news is that my friends son threw away the restore cd's that came with the PC.

    Thanks in advance!!!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to MGs!

    Problems in System Restore cannot be removed. The procedure is to disable system restore, run your scans, and then enable system restore when you are clean. Disabling system restore basically removes all restore points.

    This is covered in the READ & RUN ME sticky but we do not typically toggle system restore until after we fix all malware issues.

    You may be able to get to system Restore from MSconfig.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds