1 reply to this topic

[Nazgul]

Well, I was doing a search on Google (LotR) when I was hit by a browser hijacker and a few Trojans. Well I got on and did a scan with AVG, found them, but could not delete them. So I did an on line search and this is what I got:

Troj SIBOCO.A and the file this was in is: C:\_RESTORE\TEMP\A0057688.CPY

Troj SMALL.XC and the file it's in: C:\_RESTORE\ARCHIVE\FS350.CAB *A0056586.CPY*

Troj WINTRIM.AU and the file: C:\_RESTORE\ARCHIVE\FS358.CAB *A0056638.CPY*

It told me this when I went to delete them: "Unable to clean the file because it is currently in use". And I cannot delete the browser Hijacker either. If anybody wants me to, I can post the HijackThis log. Oh, and I'm running on WinMe. Please help .

[lion7718]

All you need to do is turn off System Restore, than turn it back on again...it will delete all of those...you will lose all Restore Points...so make a new one.



The following procedure disables the System Restore feature:

For Windows ME

1: Right-click the My Computer icon on the Desktop and click Properties.
2: Click the Performance tab.
3: Click the File System button.
4: Click the Troubleshooting tab.
5: Select Disable System Restore.
6: Click Apply > Close > Close.
7: When prompted to restart, click Yes.
8: Press F8 while the system restarts.
9: Choose Safe Mode then hit the Enter key.
10: After your system has restarted, continue with the scan/clean process. Files under the _Restore folder can now be deleted.
11: Re-enable System Restore by clearing Disable System Restore and restarting your system normally.

For Windows XP

1: Log on as Administrator.
2: Right-click the My Computer icon on the desktop and click Properties.
3: Click the System Restore tab.
4: Select Turn off System Restore.
5: Click Apply > Yes > OK.
6: Continue with the scan/clean process. Files under the _Restore folder can now be deleted.
7: Re-enable System Restore by clearing Turn off System Restore.

Edited by lion7718, 07 June 2004 - 06:51 PM.