S
sebio
hi to all viewer,
i'm not sure if these is the right place to post virus problems, but i'm
sure based upon previous reading some questions posted here, i got an idea
and some tips how to do if such thing may happened.
anyway, i have only a free AV installed on my PC but normally i do online
scanning on AV, i use onecare online scan, norton online scan and kaspersky
online scan on my PC, then last week I have infected buy a Trojan. on my
partition volume F.
cropped report:
F:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
F:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP36\A0004733.inf
Infected: Trojan.Win32.Agent.ad skipped
Scan process completed.
Then I start removing the virus using kaspersky trial version but as i
scanned it does not found the virus located on System volume, I also used
ather removing software but to frustration got the same result as virus still
on volume F.
so I decided to reformat drive F, now resolved the issue but lost all data
installed.
then lately I scanned again using online kaspersky scanner & found out being
infected by backdoor these time on volume C. system restore.
as previous option reformatting drive, I don't think i should do that, if
any suggestions how to delete these files located on system restore or how to
access system restore, that would be very helpful to me.
I'm trying to locate this file but i think it is hidden, even if i show all
hidden files, i can't track the location.
here's the scan result:
C:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab/DbgSvc.exe Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab/Svchost.exe Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe
Rsrc-Package: infected - 3 skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP84\change.log
Object is locked skipped
Thanks & Best Regards
i'm not sure if these is the right place to post virus problems, but i'm
sure based upon previous reading some questions posted here, i got an idea
and some tips how to do if such thing may happened.
anyway, i have only a free AV installed on my PC but normally i do online
scanning on AV, i use onecare online scan, norton online scan and kaspersky
online scan on my PC, then last week I have infected buy a Trojan. on my
partition volume F.
cropped report:
F:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
F:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP36\A0004733.inf
Infected: Trojan.Win32.Agent.ad skipped
Scan process completed.
Then I start removing the virus using kaspersky trial version but as i
scanned it does not found the virus located on System volume, I also used
ather removing software but to frustration got the same result as virus still
on volume F.
so I decided to reformat drive F, now resolved the issue but lost all data
installed.
then lately I scanned again using online kaspersky scanner & found out being
infected by backdoor these time on volume C. system restore.
as previous option reformatting drive, I don't think i should do that, if
any suggestions how to delete these files located on system restore or how to
access system restore, that would be very helpful to me.
I'm trying to locate this file but i think it is hidden, even if i show all
hidden files, i can't track the location.
here's the scan result:
C:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab/DbgSvc.exe Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab/Svchost.exe Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe/data0000.cab Infected: Backdoor.Win32.Rbot.fzp skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP66\A0020006.exe
Rsrc-Package: infected - 3 skipped
C:\System Volume
Information\_restore{293F2884-3D03-4F2C-813E-C74886B8ABE4}\RP84\change.log
Object is locked skipped
Thanks & Best Regards