Welcome to SecurityForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Trojan in c:windows. I can`t delete and neither can F-prot..

  
   Security Forums (Home) -> F-PROT RSS
Next:  F-prot  
Author Message
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 1) Posted: Wed Feb 23, 2005 8:41 pm
Post subject: Trojan in c:windows. I can`t delete and neither can F-prot For Windows.
Imported from groups: alt>comp>anti-virus (more info?)
This message is not archived

 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1752



(Msg. 2) Posted: Thu Feb 24, 2005 2:06 am
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Look in the Registry for

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPNPClient

Is it there ?

Look at the WinXP NT Services and stop the service.

You can use MSCONFIG.EXE to find the setrvice "UPNPClient" and then disable the the service.

Reboot your PC into Safe Mode and then clean the OS using F-Prot.

--
Dave




wrote in message
| How can I delete this file acrobat.dll that contains W32/backdoor.AOP
| Can`t do it from DOS as I used to do, I guess?
| Maybe try in safe mode?
| The Cleaner couldn`t clean.
| Thanks
| Regards Buddy B

 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 3) Posted: Thu Feb 24, 2005 6:50 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. David [Login to view extended thread Info.]
Imported from groups: per prev. post (more info?)
Back to top
Login to vote
Buddy B

External


Since: Mar 02, 2005
Posts: 8



(Msg. 4) Posted: Sat Feb 26, 2005 4:54 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot For Windows. David [Login to view extended thread Info.]
Imported from groups: per prev. post (more info?)
Back to top
Login to vote
Jolly Jumper

External


Since: Feb 27, 2005
Posts: 5



(Msg. 5) Posted: Sun Feb 27, 2005 7:24 pm
Post subject: Re: Trojan in c:windows. I can`t delete and neither can F-prot [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Buddy B RemoveThis @yippy.ti.ye a écrit :

> On Thu, 24 Feb 2005 23:57:06 GMT, "David H. Lipman"
> wrote:
>
>
>>Then again reboot your PC into Safe Mode and shutdown as many applications as
>
> possible
>
>>before scanning your platform with F-Prot.
>>
>>--
>>Dave
>
>
> Dave
> Deleted it 2 different times from Safe Mode and it popped back when I ran fprot
> again from windows.
> I did, however, delete it permanently from Windows with no problem.
> It seems to be gone for the moment, anyway.
>
> My experience is that some virus/trojans wind up in the system restore files,
> which I`m guessing is in:
> C:\System Volume Information folder.
> The only way I know of to get rid of a problem there is to turn off System
> Restore, reboot, and then turn Sys Restore back on??? Seems to work.
>
> Comment:
> Fprot seems to be much more sensitive to suspicious files than kaspersky`s AVP
> that I also use.
> Fprot is the monitor and AVP is the on demand.
>
> Appreciate your help,,.
> Regards Buddy B
If you want to see inside the folder *C_System Volume Information* where
you can find the restore files , you can install *scesp4i.exe* available
at Microsoft's site and you'll be able to delete the restore points you
want and keep the others ( So you won't lose all your restore points ) .
I installed it and I could delete a virus in that folder in a restore
point done by the system ( Win XP ) and keep my own restore points .


Regards

JJ
 >> Stay informed about: Trojan in c:windows. I can`t delete and neither can F-prot.. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Dave re upnpclient.exe being w32/backdoor.SO and acrobat.d.. - I am still getting the f-prot for windows warning about upnpclient.exe being w32/backdoor.SO. Restore is OFF. upnpclient.exe is unchecked in msconfig. Zone alarm firewall alerted that Process 1508; upnpclient.exe was trying to contact:..

F-Prot Windows 3.16 and 3.16a Buggy - I've been using F-Prot for Windows on Win98, NT4, Win2k and XP systems for a number of years with almost no problems. I had problems trying to update F-Prot for Windows 3.15b the other day on a Win98SE system so I installed the latest version 3.16. I'v...

F-Prot Windows 3.15b Taking Liberties - My NAV Subscription expired on Nov 2nd (along with our republic I fear). Last night I disabled NAV and did a Custom install of F-Prot Windows 3.15b on this system. I ran Updater and everything was fine. I've been using F-Prot for a number of years and....

f-prot for linux and windows viruses - I have a question. Does anyone use F-Prot for Linux? And if so, do you happen to know if it protects from all viruses, or just the linux viruses? -- " ... and are endowed by their Creator with certain unalienable rights ... " -- Preamble, D...

F-Prot for Windows development stoped? - Does anyone know if F-Prot for Windows gets still developed? I think version three came out the last millenium and now they are still at 3.14b? What will be the next big Windows release? 3.14c at the end of this year? It seems the only F-Prot versions..
   Security Forums (Home) -> F-PROT All times are: Pacific Time (US & Canada)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]