A0203331.exe Help please

Discussion in 'Malware Help (A Specialist Will Reply)' started by msmelle, Apr 30, 2007.

  1. msmelle

    msmelle Private E-2

    Hi. This is one of the 4 trojans I've been getting over and over again this week. I scan, remove them and they're back the next day. Sorry but I accidently removed the 3 other ones before I could write them down. It shows it as being in C:/System Volume Information/_restore (and a bunch of numbers after it). I deleted all the restore points before that the day before yesterday when I first found the 4 and now they are back again. I'm not sure what to do at this point. Helppppppppp please.

    Oh by the way......I'm a newbie and this is my first post. I'm a retired secretary living near Montreal Canada. It's nice to be here and I'm sure I will find a bunch of qualified techies to help me along my way.

    Thanks again
    Melle :)
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Files in System Restore (the C:\System Volume Information is system restore) cannot be cleaned up by any scanner. You must disable system restore. Then while it is disable. Run a new scan. You should not detect them now. Afterwards you can renable System Restore to create a new restore point.

    If you do not know how to disable and enable system restore, it is explained in the below link:

    Disable And Enable System Restore
     
  3. msmelle

    msmelle Private E-2

    Ah thank you. Wilil disable restore, scan, and then re-enable. Thanks very much. :)
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  5. msmelle

    msmelle Private E-2

    Thank you. Was on that site yesterday and have saved it in my favorites. I notice that when I did my scan after your last post that some stuff is password protected and can't be scanned like the recovery disk, certain parts, and *adaware* files. Is this normal? THanks again for your reply
    PS. darn I should have taken a screenshot of my scan to show you. Nothing showed up after disabling system restore.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It's not another site. It is just a another sticky thread in this forum.


    Are you sure you mean "password protected"? Many files can be locked which prevent scanning and this is normal. It all depends on exactly where/what you are referring too. What do you mean by recovery disk? Do you mean a CD? Or did you really mean to say a recovery partition?

    As you see from my replies, choice of words is important. ;)
     
  7. msmelle

    msmelle Private E-2

    Yes you are right about choise of words. My mistake. Yes it did say password protection and it is the recovery partition D:/Recovery

    Also as for the site.....(blush blush), I meant post..I don't know why I said site. Boy that trojan thingy is pi...ng me off. I did a complete virus scan again and nothing showed up. I hope this is the last I'll see of that nasty trojan. It it comes up again, I'll be sure to post.

    Also I visited a few of the posts here and I notice a ton of useful information. I'm glad I found this forum......even if it was by mistake in searching for help with trojans. :)

    Thank you again
    Melle :)
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds