[SOLVED] Trojan Downlaoder.Obfuskated

terrybeads · 11-30-2007, 07:32 PM

My AVG scan just found a Trojan Horse Downloader.Obfuskated.
here is the report:
C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP1431\A0122846.exe
Backup copy infected.
I could not delete the file as ACCESS DENIED and now I have no idea what to do.
Could someone please help me?

tetonbob · 11-30-2007, 09:57 PM

That item is embedded in a System Restore point. It's safe there unless you restore to that particular date. Since MS doesn't make it easy to tell what restore point it is, exactly....

The best way to get rid of it is to flush all restore points, and then set a new clean one.

CLEAR & RESET SYSTEM RESTORE'S CACHE

Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 & press Enter

* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply

Turn it back 'On' by unticking the same checkbox & click Apply, and then OK

---------------------------------------------------------------------------------------------

terrybeads · 12-01-2007, 12:06 AM

Thank you! I think your solution worked. I rescanned with AVG and this time NO viruses or problems were found. I appreciate the help. Happy Holidays!

11-30-2007, 07:32 PM	#1 (permalink)
terrybeads Registered User Join Date: Jun 2007 Posts: 16 OS: winXP	[SOLVED] Trojan Downlaoder.Obfuskated My AVG scan just found a Trojan Horse Downloader.Obfuskated. here is the report: C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP1431\A0122846.exe Backup copy infected. I could not delete the file as ACCESS DENIED and now I have no idea what to do. Could someone please help me?

11-30-2007, 09:57 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,555 OS: 2000 Pro; XP Pro; XP Home	Re: Trojan Downlaoder.Obfuskated That item is embedded in a System Restore point. It's safe there unless you restore to that particular date. Since MS doesn't make it easy to tell what restore point it is, exactly.... The best way to get rid of it is to flush all restore points, and then set a new clean one. CLEAR & RESET SYSTEM RESTORE'S CACHE Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 & press Enter * Tick on the checkbox - Turn off System Restore on all drives * Click Apply Turn it back 'On' by unticking the same checkbox & click Apply, and then OK --------------------------------------------------------------------------------------------- __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

12-01-2007, 12:06 AM	#3 (permalink)
terrybeads Registered User Join Date: Jun 2007 Posts: 16 OS: winXP	Re: Trojan Downlaoder.Obfuskated Thank you! I think your solution worked. I rescanned with AVG and this time NO viruses or problems were found. I appreciate the help. Happy Holidays!