Page 1 of 1

Trojan in the Restore

PostPosted: Sat Oct 02, 2004 2:54 am
by Geekgirl
Is this an omen :?:

E:\System Volume Information\_restore{FB069C5C-45DE-4198-9553-1445BFBB7070}\RP35\A0005852.dll - Win32/Spy.BiSpy.C trojan

Found this using NOD32 plus 7 more infected files. Norton and Housecall didn't pick them up.

PostPosted: Sat Oct 02, 2004 11:22 am
by brad
That's why we turn off Restore when fixing Spyware/Virus problems.
I'd turn it off / Reboot / Turn it back on.

brad

PostPosted: Sat Oct 02, 2004 3:16 pm
by Geekgirl
Windows 2000 doesn't have the System Restore option.
This particular h.d.d has 2000 installed on it and was slaved to a XP machine.
The pc wasn't even booting, I kept getting hard disk failure error. So I then set as slave and used scan disk then NOD32. After running those I placed back in pc and it booted right up.
Are you saying it is now in my XP's System Restore ? The XP h.d.d is C: not E:

PostPosted: Mon Oct 04, 2004 7:35 pm
by o0obrian0o0
w2k dosent have restores so if it is a restore file then it must be in xp.