Main Area and Open Discussion > General Software Discussion

System Restore Trojan?

(1/1)

Deozaan:
How is this even possible? These are hidden, protected OS files/folders.



EDIT: Please note that D: is the new drive that has only had the contents of the old drive copied over to it. Though I suppose this quarantine was made before the old drive started failing, and it is just remembering the location the file used to be at.

mouser:
deo it's not clear to me if:
1) you have a serious trojan on your pc which is locking and hiding it's files to avoid detection and removal
or
2) if you have an antivirus program that decided a good way to block a suspected trojan is to delete it and move it somewhere as a hidden locked file in quarantine.
or
3) something else

app103:
If you had something on your system before, it is likely that System Restore made a backup of your infected files and that is what your antivirus is detecting.

The proper way to rid your PC of an infection, should you have one, is to turn off System Restore before removing it, that way it won't make a backup of the infected files...and it also will clean out the restore folder.

Most antiviruses can't clean the Restore folder because Windows locks it and won't let them.

The remedy for you right now to clean it up, is

* turn off System Restore
* reboot
* turn it back on
* reboot again
* set a new restore point (right away!)
Until you do this, I would not trust any of your previous restore points as being clean and trustworthy.

Navigation

[0] Message Index