What does this virus message mean ?

Discussion in 'Malware Help (A Specialist Will Reply)' started by mike2op, Dec 19, 2005.

  1. mike2op

    mike2op Private First Class

    Lately I have been getting following message from NOD 32 AV and keeps asking me to delete it.

    File:
    D:\system volume information\_restore\{71E25826-9E6B-4E21-893F--BA8...\A0021481.

    Virus:
    win32/TrojanDownloader.Delf.NCE trojan

    Comment:
    AMON cannot clean this infiltration. Event occured at an attempt to access the file.

    (1) How do I find which file is it before I delete it ? Because if it is an important file then I would like to find it & make another one.

    (2) What kind of virus it is & what is it trying to do ?

    (3) How do I prevent it in future ?

    (4) How do I find out from whom I got it ?

    Thanks
    Mike
     
  2. Clark_Kent

    Clark_Kent MajorGeek

  3. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    You have a System Restore Point that is infected. Which means at one point in time your computer was infected or still is infected.

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis
     
  4. mike2op

    mike2op Private First Class

    How do I delete that restore point ?

    Should I back up the important data first before deleting that system restore point ?

    Could any data files or folders be infected at this point or if I back up now would virus come along the back up data ?
     
  5. btw

    btw Private E-2

    Turn off system restore, then reboot your pc. Scan for virus, then turn system restore back on.
     
  6. Fertyop

    Fertyop Corporal

    Rebooting is the last thing I recommend when you have a virus because many viruses I have encountered mess up your computer so that you cannot start windows so the best thing to do is backup everything if you have a virus that does that.
     
  7. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Go back and to Post #3 of this Thread, I already told you what you need to do.

    Everyone else stop giving advice of how to clean malware off the computer. An MG Authorized Malware Fighter has already posted in this thread.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds