Previous in Forum: Microsoft Excel Workbooks   Next in Forum: Excel Macro
Close
Close
Close
10 comments
Rate Comments: Nested
Commentator

Join Date: Oct 2006
Posts: 88

Trojan Located in System Restore Information

05/20/2009 11:31 PM

My virus scan reveals a Trojan file name A0081058.exe located in System Volume Information.

I assume it is not removed because Restore Information is protected.

How does one remove it?

Can one delete all System Restore Information and how to do this?

Thank you

My antivirus is Rising Antivirus from Tshingwa University in Beijing

Register to Reply
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

Good Answers:

These comments received enough positive votes to make them "good answers".

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
2
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#1

Re: Trojan Located in System Restore Information

05/22/2009 12:01 AM

Hello cirreb217,

Download save to Documents / downloads / 'anti-viral removal tool' an run the tool, reboot.

Go to start, right click on computer, select properties, select advanced system settings, select the advanced tab and under performance click the settings button. Select the advanced tab advanced and under virtual memory click change, select 'no page file' then okay, restart.

Go to start, computer, right click on C:\ drive or the main drive in your system. Select properties, under the general tab click Disk Cleanup, select all accounts and okay, put a check in each box in the drop down file menu, the select the more options tab, under system restore (in XP close system restore) select delete all but most recent restore point, okay, delete, okay and delete and okay. Close out computer, restart.

Defragment, follow the first set of directions and reset the virtual memory to at least match the size of RAM, then send us another note

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply Good Answer (Score 2)
Commentator

Join Date: Oct 2006
Posts: 88
#2
In reply to #1

Re: Trojan Located in System Restore Information

05/22/2009 6:32 AM

Hello Bwire,

I followed your proceedure, the antiviral removal tool returned nil result as shown below

scan results:

scanned directories: 7041

scanned files: 88810

scanned streams: 0

scanned processes: 42

scanned modules: 514

infected files: 0

infected processes: 0

repaired/removed files: 0

renamed files: 0

terminated processes: 0

elapsed time for memory scan: 9.81 seconds

average memory scanner throughput: 16928.77 KB/s

elapsed time for file scan: 544.91 seconds

average file scanner throughput: 2727.67 KB/s

Thank you for using AntiVir Removal Tool.

I completed the rest of the procedure and am some hours into the Defrag, which I "paused" in order to reply to you, having first done a complete virus scan - this returned nil result, so indicates the Trojan has been removed from the Restore System.

I do not know how to set the Virtual Memory, as you suggest as a conclusion, so perhaps you would not mind telling me how to do this.

In conclusion, may I express my thanks for your reply and the instruction, therein.

GC

Register to Reply
Anonymous Poster
#4
In reply to #2

Re: Trojan Located in System Restore Information

05/22/2009 12:01 PM

Right click My Computer click Poperties. Click the Advanced tab. in that tab click performance. You will see were to adjust your pagefile.

Steve

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#5
In reply to #2

Re: Trojan Located in System Restore Information

05/22/2009 2:01 PM

That's great cirreb217,

After defrag is completed go to start, right click on computer, select properties, select advanced system settings, select the advanced tab and under performance click the settings button. Select the advanced tab advanced and under virtual memory click change, select 'custom' then in the open boxes type the size in MB's; if your system is 32-bit the size should be 4092-4094; 64-bit you may extend the virtual memory to at least equal of the installed RAM:

(2GB RAM = 4092-4096 virtual mem)

(4GB RAM = 8106-8108 virtual mem)

these are settings you will find suitable for general computing, then select 'set' then apply or okay, restart.

UBETCHA!

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Commentator

Join Date: Oct 2006
Posts: 88
#8
In reply to #5

Re: Trojan Located in System Restore Information

05/22/2009 8:19 PM

Goodmorning Bwire,

My installed RAM is 1Gb and the Virtual Memory is 2GB - this according to System Information.

Would I need to reduce my Virtual Memory to 1Gb from the existing 2Gb?

thank you

GC

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#9
In reply to #8

Re: Trojan Located in System Restore Information

05/22/2009 8:43 PM

Hi cirreb217,

2GB is fine.

Glad the fix was so easy, virus's can be the pits if not caught. As another poster mentioned the process could have been simpler but you got a tune-up too

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
United Kingdom - Member - Old New Member

Join Date: Jul 2005
Location: South east U.K.
Posts: 3695
Good Answers: 93
#3

Re: Trojan Located in System Restore Information

05/22/2009 7:03 AM

If you go to 'start, accessories, system tools, system restore' & turn off system restore it will delete all of the restore points. You can then re-run the trojan scan to remove the infected file & turn system restore back on.

__________________
I didn't have a really important life, but at least it's been funny (Lemmy Kilminster 1945-2015)
Register to Reply Score 1 for Good Answer
Power-User

Join Date: Mar 2006
Location: Valdosta, GA
Posts: 361
Good Answers: 8
#6
In reply to #3

Re: Trojan Located in System Restore Information

05/22/2009 2:01 PM

You get a good answer from me. This is the much simpler way.

__________________
Always use protection.
Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#7
In reply to #3

Re: Trojan Located in System Restore Information

05/22/2009 2:08 PM

Hi Nigh,

After installation the 'anti-viral tool' will continue to monitor and isolate virus's when they reoccur and generate an alert of their presence.

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Hobbies - Musician - Tube Amps Only Please!

Join Date: Apr 2009
Location: Los Angeles, California USA
Posts: 553
Good Answers: 1
#10

Re: Trojan Located in System Restore Information

10/28/2009 10:49 PM

You can delete all the stored restore points manually.

__________________
Regards, Maveric Manic - 'Knowledge is Power and Wisdom is knowing how to use it'
Register to Reply
Register to Reply 10 comments

Good Answers:

These comments received enough positive votes to make them "good answers".

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Copy to Clipboard

Users who posted comments:

Anonymous Poster (1); bwire (4); cirreb217 (2); Keywalker (1); maveric_manic (1); Nigh (1)

Previous in Forum: Microsoft Excel Workbooks   Next in Forum: Excel Macro

Advertisement