Trojan Horse Downloader : Dyfica.2.BA inflected - need help

1

123

Dear All,

My friend's computer inflected by following Torjan Horse !
(scanned by Ad-Aware)

Trojan Horse Downloader : Dyfica.2.BA

inflect files :

C:\System Volume Information\_restore{.....}.....\A1604249.dll
C:\System Volume Information\_restore{.....}.....\A1604330.dll
C:\System Volume Information\_restore{.....}.....\A1604404.dll
C:\System Volume Information\_restore{.....}.....\A1604455.dll
C:\System Volume Information\_restore{.....}.....\A1604456.dll

Trojan Horse Downloader : Small.20.U

Can you please advise how to clean it ?

Many thx for your advise
 
C

Carey Frisch [MVP]

You'll need to turn-off System Restore, reboot, then turn it back on.
The virus has infected your System Restore folder (system volume information).

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

:

| Dear All,
|
| My friend's computer inflected by following Torjan Horse !
| (scanned by Ad-Aware)
|
| Trojan Horse Downloader : Dyfica.2.BA
|
| inflect files :
|
| C:\System Volume Information\_restore{.....}.....\A1604249.dll
| C:\System Volume Information\_restore{.....}.....\A1604330.dll
| C:\System Volume Information\_restore{.....}.....\A1604404.dll
| C:\System Volume Information\_restore{.....}.....\A1604455.dll
| C:\System Volume Information\_restore{.....}.....\A1604456.dll
|
| Trojan Horse Downloader : Small.20.U
|
| Can you please advise how to clean it ?
|
| Many thx for your advise
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top