Welcome to SecurityForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log in/Register/PasswordLog in/Register/Password

Trojan in c:windows. I can`t delete and neither can F-prot..

  
   Security Forums (Home) -> F-PROT RSS
Related Topics:
Run F-PROT for DOS from CD? - Can I run F-PROT for DOS from a CD? ISTR that F-PROT for DOS filled 2 diskettes and probably now needs 3 So I would prefer to burn a CD and run it from there. Does anyone know if this works?

F-Prot for Dos on XP - Hi, please forgive a possibly stupid Question. Before switching to WinXP I just got used to F-Prot for Dos. I think it's usefull to scan now and then before starting the OS. Now with WinXP I do miss this Win 98 just for F-Prot..

F-Prot for DOS - what are sign2.def and fssign2.def differ.. - Any F-Prot users out there who might be able to clear up some confusion for me about the files sign2.def and I noticed some time ago that the file sign2.def no longer seemed to be updated on the fsecure site that I use for regular

F-PROT for DOS and WINXP - I WINXP only has a SIMULATED DOS mode. I do not run WINXP so I am asking for a friend who does use XP. Can F_PROT for DOS virus scanner be used on a PC running WINXP? Is F_PROT FOR DOS effective running from WINXP SIMULATED DOS mode? I find it..

NTFS, F-Prot like scanner - Is there a virsus scanner that anyone knows of that scans a NTFS volume before Windows loads?
Author Message
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 1) Posted: Wed Feb 23, 2005 8:41 pm
Post subject: Trojan in c:windows. I can`t delete and neither can F-prot For Windows.
Imported from groups: alt>comp>anti-virus (more info?)
This message is not archived

 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1699



(Msg. 2) Posted: Thu Feb 24, 2005 2:06 am
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Look in the Registry for

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPNPClient

Is it there ?

Look at the WinXP NT Services and stop the service.

You can use MSCONFIG.EXE to find the setrvice "UPNPClient" and then disable the the service.

Reboot your PC into Safe Mode and then clean the OS using F-Prot.

--
Dave




<Buddy B.TakeThisOut@yippy.ti.ye> wrote in message news:ckbq119qt3vebner1md184km4k4ig0r8c5@4ax.com...
| How can I delete this file acrobat.dll that contains W32/backdoor.AOP
| Can`t do it from DOS as I used to do, I guess?
| Maybe try in safe mode?
| The Cleaner couldn`t clean.
| Thanks
| Regards Buddy B

 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 3) Posted: Thu Feb 24, 2005 6:50 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. David [Login to view extended thread Info.]
Imported from groups: per prev. post (more info?)
Back to top
Login to vote
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 4) Posted: Sat Feb 26, 2005 4:54 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. David [Login to view extended thread Info.]
Imported from groups: per prev. post (more info?)
Back to top
Login to vote
Jolly Jumper

External


Since: Feb 27, 2005
Posts: 5



(Msg. 5) Posted: Sun Feb 27, 2005 7:24 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Buddy B.DeleteThis@yippy.ti.ye a écrit :

> On Thu, 24 Feb 2005 23:57:06 GMT, "David H. Lipman"
> <DLipman~nospam~@Verizon.Net> wrote:
>
>
>>Then again reboot your PC into Safe Mode and shutdown as many applications as
>
> possible
>
>>before scanning your platform with F-Prot.
>>
>>--
>>Dave
>
>
> Dave
> Deleted it 2 different times from Safe Mode and it popped back when I ran fprot
> again from windows.
> I did, however, delete it permanently from Windows with no problem.
> It seems to be gone for the moment, anyway.
>
> My experience is that some virus/trojans wind up in the system restore files,
> which I`m guessing is in:
> C:\System Volume Information folder.
> The only way I know of to get rid of a problem there is to turn off System
> Restore, reboot, and then turn Sys Restore back on??? Seems to work.
>
> Comment:
> Fprot seems to be much more sensitive to suspicious files than kaspersky`s AVP
> that I also use.
> Fprot is the monitor and AVP is the on demand.
>
> Appreciate your help,,.
> Regards Buddy B
If you want to see inside the folder *C_System Volume Information* where
you can find the restore files , you can install *scesp4i.exe* available
at Microsoft's site and you'll be able to delete the restore points you
want and keep the others ( So you won't lose all your restore points ) .
I installed it and I could delete a virus in that folder in a restore
point done by the system ( Win XP ) and keep my own restore points .


Regards

JJ
 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
Display posts from previous:   
   Security Forums (Home) -> F-PROT All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]