It is currently Wed Oct 21, 2026 12:11 am


Trojan in the Restore

All versions of Windows 7, 2008 and Vista including 32 bit and 64 bit

Moderator: icecube

Trojan in the Restore

Postby Geekgirl » Sat Oct 02, 2004 2:54 am

Is this an omen :?:

E:\System Volume Information\_restore{FB069C5C-45DE-4198-9553-1445BFBB7070}\RP35\A0005852.dll - Win32/Spy.BiSpy.C trojan

Found this using NOD32 plus 7 more infected files. Norton and Housecall didn't pick them up.
Geekgirl
Geek Alumni
 
Posts: 1214
Joined: Mon Apr 12, 2004 1:00 am

Thanks given:0
Thanks received:0
Top

Postby brad » Sat Oct 02, 2004 11:22 am

That's why we turn off Restore when fixing Spyware/Virus problems.
I'd turn it off / Reboot / Turn it back on.

brad
brad
Geek Alumni
 
Posts: 2079
Joined: Sat Jul 19, 2003 1:00 am
Location: Charlotte, NC

Thanks given:0
Thanks received:0
Top

Postby Geekgirl » Sat Oct 02, 2004 3:16 pm

Windows 2000 doesn't have the System Restore option.
This particular h.d.d has 2000 installed on it and was slaved to a XP machine.
The pc wasn't even booting, I kept getting hard disk failure error. So I then set as slave and used scan disk then NOD32. After running those I placed back in pc and it booted right up.
Are you saying it is now in my XP's System Restore ? The XP h.d.d is C: not E:
Geekgirl
Geek Alumni
 
Posts: 1214
Joined: Mon Apr 12, 2004 1:00 am

Thanks given:0
Thanks received:0
Top

Postby o0obrian0o0 » Mon Oct 04, 2004 7:35 pm

w2k dosent have restores so if it is a restore file then it must be in xp.
User avatar
o0obrian0o0
Senior Geek
Senior Geek
 
Posts: 247
Joined: Mon Sep 13, 2004 1:00 am

Thanks given:0
Thanks received:0
Top


Return to Windows 7, 2008 and Vista

Who is online

Users browsing this forum: No registered users and 1 guest

cron