1. Join Now

    AVForums.com uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Infected by virus Help!!

Discussion in 'General Chat' started by thamesider, May 22, 2005.

  1. thamesider

    thamesider
    Guest

    Products Owned:
    0
    Products Wanted:
    0
    Ratings:
    +0
    I have a virus lurking in Restore.

    I know what it is but can't find it.

    The antivirus I used to detect it can't remove it.

    How can I remove it myself is the question ?

    It Is listed as :-


    C:\restore\temp\A0135552.CPY

    Thanks
     
  2. mcfarfs

    mcfarfs
    Banned

    Joined:
    Mar 11, 2005
    Messages:
    1,367
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    41
    Location:
    Tunbridge Wells
    Ratings:
    +12
    Erm not really sure what you mean.

    Can you not manually go to that folder and delete the file? If it won't let you becuase it is in use, then try starting windows in safe mode (keep tapping F5 whilst your computer is starting up).

    If that doesn't work, download a program called killbox. Apparantly that deletes files which are in use. Never tried it myself though, so I cant confirm if it actually works!

    Sorry if i have got the wrong end of the stick.
     
  3. thamesider

    thamesider
    Guest

    Products Owned:
    0
    Products Wanted:
    0
    Ratings:
    +0
    The anti-virus that found it, wouldn't remove it, because its in use.
    I tried to find it manually, but couldn't !

    I will try killbox
    Thanks
     
  4. Ian J

    Ian J
    Banned

    Joined:
    Aug 6, 2001
    Messages:
    25,529
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    166
    Ratings:
    +4,906
    What is the virus's name - website like Symantec will normally tell you how to get rid of specific virus's and will let you download fixes if necessary.
     
  5. HMHB

    HMHB
    Distinguished Member

    Joined:
    Nov 11, 2001
    Messages:
    25,444
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    166
    Location:
    Nottinghamshire
    Ratings:
    +3,745
    If you are using Windows ME or Windows XP you can switch off sytem restore and then do another virus scan. It's good practice every month or so to do this as virus checkers quite often can't access stuff in the system restore folder.
     
  6. Reiner

    Reiner
    Active Member

    Joined:
    Jul 16, 2000
    Messages:
    3,315
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    61
    Location:
    Germany
    Ratings:
    +13
    Tried a different virus software to remove it? I use AVG Free Edition from www.grisoft.com , updates automatically and never had any problems (it does detect a virus from time to time but so far prevented them from causing any harm).
     
  7. SanPedro

    SanPedro
    Well-known Member

    Joined:
    Jan 11, 2001
    Messages:
    4,497
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    136
    Ratings:
    +503
    If you call up the Windows Task Manager can you see it running in processes? Close it from there and perhaps you can delete it then.

    I've also had success running HiJack This (do a search for the download). It spots potentially rogue files on your system and allows you to delete them.


    Chris
     
  8. w3dal

    w3dal
    Well-known Member

    Joined:
    Aug 4, 2002
    Messages:
    4,794
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    136
    Location:
    Chelmsford, Essex
    Ratings:
    +507
    might be worth running the PC in safe mode then going to the folder dir and try to remove it.

    Dal
     
  9. thamesider

    thamesider
    Guest

    Products Owned:
    0
    Products Wanted:
    0
    Ratings:
    +0
    I'm using windows ME

    I don't know where this virus came from.

    Its got something to do with :- www.norad.fr/c
    This suddenly popped up in the address bar yesterday afternoon, while I was on queenonline.com. (this was on my home pc, I'm now at work)

    I ran adaware 6, spybot and anity ghostbuster but none of them could find it.
    I then went on trend micro and ran a scan using their housecall, this picked up the virus in the restore section, but couldn't delete it.

    I will try a few of your suggestions when I get home this afternoon.

    Thanks chaps
     

Share This Page

Loading...