Archive Trojans

robmcrock
robmcrock ✭
in Malware talk

Hey all,


My virus scan has detected four trojans which cant be deleted because they are contained in the archive.


Ive tried rebooting my comp into safe mode and running another scan, but the same result happens!


Im desperate to get rid of these, so any help would be much appreciated!


Below are the locations of the trojans


Cheers


Object Name Threat Name Final Status


C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]moyea.exe Trojan.Crypt.FD Infected (no action was possible, file was in an archive)


C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]txt.exe Trojan.Downloader.Small.AARD Infected (no action was possible, file was in an archive)


C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]number.exe Trojan.Generic.505426 Infected (no action was possible, file was in an archive)


C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]guitar.exe Trojan.Peed.Gen Infected (no action was possible, file was in an archive)

Comments

  • icr
    icr

    Goto start--->Accessories--->system tools--->disk clean up


    select ur drive a box will appear goto More options--->click on system restore clean up button


    it works try it out good luck ;););)

  • Sm3K3R
    Sm3K3R ✭✭✭
    Hey all,


    My virus scan has detected four trojans which cant be deleted because they are contained in the archive.


    Ive tried rebooting my comp into safe mode and running another scan, but the same result happens!


    Im desperate to get rid of these, so any help would be much appreciated!


    Below are the locations of the trojans


    Cheers


    Object Name Threat Name Final Status


    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]moyea.exe Trojan.Crypt.FD Infected (no action was possible, file was in an archive)


    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]txt.exe Trojan.Downloader.Small.AARD Infected (no action was possible, file was in an archive)


    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]number.exe Trojan.Generic.505426 Infected (no action was possible, file was in an archive)


    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP58\A0016731.exe=](RAR Sfx o)=]guitar.exe Trojan.Peed.Gen Infected (no action was possible, file was in an archive)


    Disable also System Restore , Control Panel > System >System Restore tab>Turn off System Restore on all drives ,restart computer then reactivate.When the trojan is removed reactivate.Use also the Disk Clean up utility to remove temporary files, like icr recomended(you can also delete them manually).

  • robmcrock
    robmcrock ✭

    Thanks guys, il get on it and let you know how i go

  • rootkit
    rootkit ✭✭✭

    Please read this: http://forum.bitdefender.com/index.php?showtopic=3575

  • AndreiASM
    AndreiASM

    Trojans contained inside archives cannot be deleted.


    One way to do it si to extract all the files from the archive, delete the ones infected, and re-compress the clean files again.


    Kind regards!

  • robmcrock
    robmcrock ✭

    Thanks guys,


    I disabled the system restore point, and when i enabled and scanned again, all virus's where gone!!


    Cheers for you help, much appreciated

All Time Leaders

Categories

Defenders of the month