Sunday, August 23, 2009

What happens when my anti-virus scanner quarantines a Trojan virus?

Three were found and detected in the file below and two others similar to it:



C:\System Volume Information\_restore (has a string of numbers/letters after it)



File was infected with "W32/Trojan.FTM" virus and was unable to be disinfected. File was quarantined instead.



File was infected with "W32/Trojan.HPX" virus and was unable to be disinfected. File was quarantined instead.



File was infected with "W32/Trojan.FTM" virus and was unable to be disinfected. File was quarantined instead.



Is my computer ok since they were quarantined? What do these Trojans do and how did I get them on my system?



What happens when my anti-virus scanner quarantines a Trojan virus?anti virus protection



Those trojan files are in your System Volume Information which is where you System Restore points are saved.



The best and easiest way to completely remove the trojans is to simply delete all your restore points.



System Volume Information is where your System Restore files are located. Therefore, the malware is in your System Restore files which are basically locked by Windows so your security software cannot touch it, to remove the infected file.



The solution is easy. You simply need to delete all your old system restore points. To do so:



go to control panel %26gt; system %26gt; system restore %26gt; check mark "Turn off system restore on all drives" %26gt; apply %26gt; answer "yes" %26gt; OK %26gt; reboot. Then turn System Restore back on again.

No comments:

Post a Comment