cannot delete trojan - access is denied

G

Guest

My eZtrustFirewall detected a trojan in a file. I have downloaded suspicious files lately, so naturally I believe my antivirus program. The trojan is NetDevil 1.5 and the file was:

C:\System Volume Information\_restore{23C157CD-F001-4C9A-B599-DF5BE879C30003}\RP225\A0068021.exe

I tried to open C:\System Volume Information, but an "access denied" alert box came up. I am an admin user, and I use Windows XP SP1a.

My antivirus cannot delete the file either. Does anyone know what the file is or how I can delete it?
 
J

Jupiter Jones [MVP]

System Volume Information is the system Restore data.
Turn off/on System Restore to delete corrupted files:
Start/All Programs/Accessories/System Tools/System Restore.
Click System Restore Settings on left side.
Check "Turn off System Restore", click OK, follow prompts and reboot.
This deletes ALL Restore Points including corruption.
Then go back and turn on system Restore and create a Restore Point.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


AzErT said:
My eZtrustFirewall detected a trojan in a file. I have downloaded
suspicious files lately, so naturally I believe my antivirus program.
The trojan is NetDevil 1.5 and the file was:
C:\System Volume Information\_restore{23C157CD-F001-4C9A-B599-DF5BE879C30003}\RP225\A00
68021.exe

I tried to open C:\System Volume Information, but an "access denied"
alert box came up. I am an admin user, and I use Windows XP SP1a.
My antivirus cannot delete the file either. Does anyone know what
the file is or how I can delete it?
 
S

Shenan Stanley

AzErT said:
My eZtrustFirewall detected a trojan in a file. I have downloaded
suspicious files lately, so naturally I believe my antivirus program.
The trojan is NetDevil 1.5 and the file was:

C:\System Volume
Information\_restore{23C157CD-F001-4C9A-B599-DF5BE879C30003}\RP225\A0068021.
exe

I tried to open C:\System Volume Information, but an "access denied"
alert box came up. I am an admin user, and I use Windows XP SP1a.

My antivirus cannot delete the file either. Does anyone know what the
file is or how I can delete it?

Turn off System Restore.
http://support.microsoft.com/?kbid=310405
Reboot.
Turn on System Restore.
http://support.microsoft.com/?kbid=310405
Make a Manual Restoration Point.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top