Trojan Horse

  • Thread starter Thread starter Tickd
  • Start date Start date
T

Tickd

McAfee has told me that I also have a TJ in my System
Volume Information folder. McAfee can't delete it,
quarantine it, or exclude it. It says that it is
resident in my system volume information folder. I would
like to delte it but I have searched and found that that
folder is very deep and very critical and very hard to
get into. How did the virus get there then? And how do
I get rid of it? I'm afraid that it is going to come
back and haunt me. Help.

TD
 
Hi TD

You will need to stop/start System Restore - this will also delete all existing checkpoints:

Right click on My Computer, select Properties and then the System Restore tab. Enable 'Turn off System Restore on all drives' and click Apply>OK. Then reboot your PC. After that first reboot go back into System Restore, disable 'Turn off System Restore on all drives' and click Apply>OK. Then reboot your PC again. After this second reboot the virus would have been deleted and you will have a newly created checkpoint.

--

Will Denny
MS-MVP Windows - Shell/User


| McAfee has told me that I also have a TJ in my System
| Volume Information folder. McAfee can't delete it,
| quarantine it, or exclude it. It says that it is
| resident in my system volume information folder. I would
| like to delte it but I have searched and found that that
| folder is very deep and very critical and very hard to
| get into. How did the virus get there then? And how do
| I get rid of it? I'm afraid that it is going to come
| back and haunt me. Help.
|
| TD
 
Thanks, Will, but now I have another problem/question. I
followed MS instructions to open or see the system volume
info folder and it appeared. I set the mouse on it and
it tells me that the folder is empty?!? and access is
denied?!? How can the folder be empty and contain the
virus? Can I possibly do any damage to my system if I do
what you suggest? MS seems to imply that this folder is
hidden for a reason--so neophytes like me can't do
damage. Thanks
-----Original Message-----
Hi TD

You will need to stop/start System Restore - this will
also delete all existing checkpoints:
Right click on My Computer, select Properties and then
the System Restore tab. Enable 'Turn off System Restore
on all drives' and click Apply>OK. Then reboot your PC.
After that first reboot go back into System Restore,
disable 'Turn off System Restore on all drives' and
click Apply>OK. Then reboot your PC again. After this
second reboot the virus would have been deleted and you
will have a newly created checkpoint.
--

Will Denny
MS-MVP Windows - Shell/User


"Tickd" <[email protected]> wrote in
message news:[email protected]...
 
Hi

It is hidden for a very good reason. Any file in there that is deleted/moved/renamed can cause System Restore to malfunction. If you follow my posting the virus will be deleted and you will be left with one new checkpoint. There is no reason to access that folder really.

Try typing the following from a command prompt in the System Volume Information folder to see if there are any files in it:

dir /a/s

--

Will Denny
MS-MVP Windows - Shell/User


| Thanks, Will, but now I have another problem/question. I
| followed MS instructions to open or see the system volume
| info folder and it appeared. I set the mouse on it and
| it tells me that the folder is empty?!? and access is
| denied?!? How can the folder be empty and contain the
| virus? Can I possibly do any damage to my system if I do
| what you suggest? MS seems to imply that this folder is
| hidden for a reason--so neophytes like me can't do
| damage. Thanks
| >-----Original Message-----
| >Hi TD
| >
| >You will need to stop/start System Restore - this will
| also delete all existing checkpoints:
| >
| >Right click on My Computer, select Properties and then
| the System Restore tab. Enable 'Turn off System Restore
| on all drives' and click Apply>OK. Then reboot your PC.
| After that first reboot go back into System Restore,
| disable 'Turn off System Restore on all drives' and
| click Apply>OK. Then reboot your PC again. After this
| second reboot the virus would have been deleted and you
| will have a newly created checkpoint.
| >
| >--
| >
| >Will Denny
| >MS-MVP Windows - Shell/User
| >
| >
| message | >| McAfee has told me that I also have a TJ in my System
| >| Volume Information folder. McAfee can't delete it,
| >| quarantine it, or exclude it. It says that it is
| >| resident in my system volume information folder. I
| would
| >| like to delte it but I have searched and found that
| that
| >| folder is very deep and very critical and very hard to
| >| get into. How did the virus get there then? And how
| do
| >| I get rid of it? I'm afraid that it is going to come
| >| back and haunt me. Help.
| >|
| >| TD
| >
| >
| >---
| >Outgoing mail is certified Virus Free.
| >Checked by AVG anti-virus system
| (http://www.grisoft.com).
| >Version: 6.0.659 / Virus Database: 423 - Release Date:
| 15/04/2004
| >.
| >
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

trojan horse downloader agent.ac 3
trojan horse 2
trojan horse 3
Trojan horse Downloader.Rvp.D in system info folder 2
How to get rid of Trojan Horse 5
TROJAN HORSE help 1
cant remove trojan 2
Mcafee and MFC71.DLL 10

Back
Top