Need Advice On Trojan

Hi my last scan with EZ TRUST V. 6.1 has come up this, what would be my best and savest way to clean this up.:

F:\System Volume Information\_restore{BB416837-90A9-45E1-A3AC-6CE38CDDFF1C}\RP115\A0017542.exe (Win32.Startpage.EV!downloader trojan)

thanks
hawk22

 

Disable system restore. Reboot. Do another scan. Then re-enable system restore.

That should purge it for you.

 

hawk22

At least you know your scanner is working properly.

Having had somewhat the same problem ( not with a Trojan ) I believe that the above procedure should be shown somewhere in some forum as a deffinite procedure after Cleanup of ANY type

I myself disable System Restore IMMEDIAITELY after ANY cleanup or changes.

System Restore is also many times forgotten as a POSSIBLE re-infection spot.

SR is good. But if not used with some thought it can also be a trouble maker.

In the case of hawk22 A possible re-infection was at hand.

BillyBob

 

Hi and thanks Daizy & BillyBob,
after disabling System Restore what option would be best to use in the scan Rename Infected Files or clean, delete. I don't know anything about that Trojan and if EZ can clean it. Your advice would be appreciated.
hawk22

 

Hi,
I have done as you suggested and on the next scan I did get a clean bill of health. I did set the options to report and report and deny access to infected files. Also SR is enabled again.
So I am a happy Vegemite once again.
thanks again
hawk22

 

Another thing to remember after a clean up is to empty your temporary Internet files (on and offline) plus it may be an idea to clean out the prefetch folder.

 

thanks mini B, some good info there. but how and where do I find that prefetch folder.
hawk22

 

Hi hawk22
C:\WINDOWS\Prefetch

Edit: Others you can clean out:
C:\Documents and Settings\username\Local Settings\Temp
C:\WINDOWS\TEMP