Wpepro.b

thermus · 10-13-2007, 10:40 PM

Real-time Scan

Trend Micro PC-cillin Internet Security has detected a virus,
spyware application, or other Internet threat, and performed
the action specified.

Infected file:
C:\System Volume Information\_restore{9F121E62-7B30-41AF-8EDB-BB5772863EEE}\RP157\A0017275.dll

Virus name:
HKTL_WPEPRO.B

User name:
"My name here"

Scan action result:
Denied Access.

Note:
If Search for and clean Trojans is enabled and is executed after scanning,
you can click Next to view final scan result information.

Can someone PLEASE help me. E-mail me at

Mods note: Removed email addy. Spambots lurk the forums

THANK YOU

tetonbob · 10-14-2007, 01:38 AM

System Volume Information is System Restore.

You can remove that by flushing out the old points, and setting a new one.

CLEAR & RESET SYSTEM RESTORE'S CACHE

Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 & press Enter

* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply

Turn it back 'On' by unticking the same checkbox & click Apply, and then OK

---------------------------------------------------------------------------------------------

You may want to consider having your system checked out by our Security team.

Please follow MicroBell's 5 Step process outlined here:

http://www.techsupportforum.com/secu...tml#post342651

After running through all the steps, please post the requested logs in the HijackThis Log Help forum, not here.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Note that the Security section is always very busy, and it may take a while to get a reply.

10-13-2007, 10:40 PM	#1 (permalink)
thermus Registered User Join Date: Jul 2007 Posts: 12 OS: windows xp media center 2	Wpepro.b Real-time Scan Trend Micro PC-cillin Internet Security has detected a virus, spyware application, or other Internet threat, and performed the action specified. Infected file: C:\System Volume Information\_restore{9F121E62-7B30-41AF-8EDB-BB5772863EEE}\RP157\A0017275.dll Virus name: HKTL_WPEPRO.B User name: "My name here" Scan action result: Denied Access. Note: If Search for and clean Trojans is enabled and is executed after scanning, you can click Next to view final scan result information. Can someone PLEASE help me. E-mail me at Mods note: Removed email addy. Spambots lurk the forums THANK YOU Last edited by tetonbob; 10-14-2007 at 01:34 AM. Reason: removed live email address; spambots lurk all forums

10-14-2007, 01:38 AM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,601 OS: 2000 Pro; XP Pro; XP Home	Re: Wpepro.b System Volume Information is System Restore. You can remove that by flushing out the old points, and setting a new one. CLEAR & RESET SYSTEM RESTORE'S CACHE Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 & press Enter * Tick on the checkbox - Turn off System Restore on all drives * Click Apply Turn it back 'On' by unticking the same checkbox & click Apply, and then OK --------------------------------------------------------------------------------------------- You may want to consider having your system checked out by our Security team. Please follow MicroBell's 5 Step process outlined here: http://www.techsupportforum.com/secu...tml#post342651 After running through *all* the steps, please post the requested logs in the HijackThis Log Help forum, not here. If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. Note that the Security section is always very busy, and it may take a while to get a reply. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009