trojan will not go

morgan2476
Posts: 171

« on 11/11/2009, 11:05 »

I have just run Avast home edition and it has detected a number of trojans. They cannot be deleted or moved to the chest. The result is as follows NAME OF FILE - C:\ system volume information\binary.vista.vbs RESULT - Infection. VBS:Agent-CM [Tri] OPERATION Error occurred moving file to chest.

Could someone explain how to deal with this.

Donald

Logged

HPsauce
Bright Spark
Posts: 2720

« Reply #1 on 11/11/2009, 12:57 »

System Volume Information is "super-protected" as well as being hidden and a System folder.
It's used mainly by System Restore so chances are those Trojans are there as a "legacy" of previous installation versions and are just "archived" copies.
Just ignore them unless you're planning to use System Restore to bring them back.

Logged

dgwebb
Posts: 827

« Reply #2 on 11/11/2009, 15:51 »

This link tells you how to disable system restore which should delete all the files in that folder, you can then run your virus scan again which *should* detect nothing there, you can then turn system restore back on (but you'll lose all your previous system restore points in the process)

Logged

morgan2476
Posts: 171

« Reply #3 on 11/11/2009, 23:58 »

Sorry, I should have stated that I am using xp.

Thanks

Logged

dgwebb
Posts: 827

« Reply #4 on 12/11/2009, 00:05 »

Okily, I'll look for an XP guide for you. Simply put when you turn off System Restore it deletes all your previous restore points (and it looks like one of your restore points has the virus in it, and it can't be removed) when you switch it Off, the points are deleted, when you switch it back on again it *should* create a new system restore point for you.

http://support.microsoft.com/kb/310405

Thats the way to turn it on/off in Windows XP

Logged

Peter Vaughan
Usergroup Member
Posts: 13702
Unofficial ledgendary bright spark bod!

« Reply #5 on 12/11/2009, 00:22 »

Turning on system restore does not create a restore point, you must do that manually.

plusnet ADSL Customer (PlusNet Pro)
PlusNet Usergroup | PUG Forums | Usertools | PUG Issue Tracker - Please vote!!
Volunteer at the National Museum of Computing @ Bletchley Park - Looking for donations of old games consoles, PCs and software. Contact me for details

Logged

morgan2476
Posts: 171

« Reply #6 on 12/11/2009, 13:46 »

I followed the instructions above and it worked except for one file which could not be deleted.

Thanks for the help in this matter

Logged

ReedRichards
Posts: 291

« Reply #7 on 13/11/2009, 07:57 »

Avast isn't all that good with spyware so it may not have removed all the malware on your computer. I suggest you download and run SuperAntiSpyware (free edition), update it, run the Quick Scan and remove anything found. Or you could try using Malwarebytes Anti-Malware (free version) which some people prefer.

Logged

morgan2476
Posts: 171

« Reply #8 on 16/11/2009, 09:51 »

I have run superantispyware and it found and deleted a number of files, however, when i ran avast again the same files were detected but I could not delete them.

Logged

Site Links

Related Sites

Community Apps

About Plusnet