|
Search Tech-Forums - link takes you to our Forum's search page. Note: The following is only a text archive! To view the actual forum discussion, please visit our website at http://www.tech-forums.net Pages:1 Could Someone have a look at this HJT log.(Click here to view the original thread with full colors/images)Posted by: Grimlock43 I have run all the required Scans before I generated this log file. But I need some help I really don't know what I am looking at. Thanks. Posted by: MicroBell Please post the logs in the thread....not as an attachment. Anyway...your log is clean. Are you having a specfic issue...or just checking? Posted by: Grimlock43 Yes my Vcom keeps telling me that I have a "TROJ_LOADER.LR" that has been detected in "C:\System Volume Information\_Restore{47E7717B-18F3-4A10-B47C-105BED1BFF9}" File but I can't find this file anywhere. I think that it may be a hidden file. But I am not that familiar with what the HJT scans or if it even scans hidden files. Actually theres two troj.s one was a TROJ_DLOADER.KM and from what I have read they may have spawned copies of them selves in various areas of my hard drive. The DLOADER drops a copy of itself in IE everytime it detects an open internet port. But I suspect that both reside in the information\_Restore area as a hidden file but I don't know how to reach them. I tried the regedit in windows, and the VCom regestry editor to no avail. I apologize for the attachment but it was the only way that I could figure out how to send it. As you might be able to tell I am not that skilled in this arena. Thanks for your help. Capt A. T. Omes Posted by: MicroBell [b]C:\System Volume Information\_Restore{47E7717B-18F3-4A10-B47C-105BED1BFF9}[/b] This is a system restore point folder. Most antivirus programs can not clean or remove files from this folder..as windows as this folder protected as it's holds the info required for the system if you restore to a earlier point. To get rid of the file...you will need to remove the restore points and recreate a new restore point. This is the procedure... [COLOR=Red][B]Windows XP ===============[/B][/COLOR] [list][*] Click Start >> Run - type [I][B]SYSDM.CPL[/B][/I] & press [B]Enter[/B] [*] Select the [B]System Restore[/B] Tab [*] Tick on the checkbox - [b]"Turn off System Restore on all drives"[/b] [*] Click [B]Apply[/B] [*]Then [B]untick[/B] the same checkbox & click [B]OK[/B] [/list] This will delete ALL restore points and make a new one. Posted by: Grimlock43 Just to let you know, once I reset the restore point file mentioned it took care of the problem. I no longer have a troj. alert. Thanks for the advice. Capt. Ted Omes Posted by: Lobos Since this issue appears to be resolved ... this Topic has been closed. Lobos vBulletin Copyright ©2000 - 2003, Jelsoft Enterprises Limited. PPC Management vB Easy Archive Final - Created by Xenon |