1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Removal of Win32.Qozah.3361 virus

Discussion in 'Malware and Virus Removal Archive' started by amberdog, 2006/05/24.

  1. 2006/05/24
    amberdog

    amberdog Inactive Thread Starter

    Joined:
    2006/05/24
    Messages:
    1
    Likes Received:
    0
    Out of the blue, my computer seemed to be running slow, didn't want to 'recognise' my HP printer and ZoneAlarm seemed definitely odd ! (ZA didn't want to load up automatically at start up) This seemed to improve somewhat the following day, as did printer operation. This may or may not be a coincidence.

    A normal ZA virus scan found nothing so I repeated the scan at the much slower 'byte level' option. This time it found Win32.Qozah.3361 ( "high risk ") but reported that there was no treatment available (quote) "not yet a way to automatically remove the virus without risking the integrity of the computer or other files" and suggested looking on the internet for a solution.

    Are you familiar with this virus ? If so what does it do, wpould it cause slow operation and is there a known solution ?

    On the ZA report, the path (presumably for the virus location) was given as C:\System Volume inf......

    Any advice appreciated
     
  2. 2006/05/24
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    amberdog - Welcome to the Board :)

    Hi Malcolm :D

    For the benefit of others this was my response to Malcolm ....

    My take on this is that the virus has been detected in System Volume Information - this is the folder in which the System Restore Points are kept and I suggest you turn off System Restore - this will delete all the restore points - reboot and turn on System Restore.

    This is an old virus and should have been cleaned by ZA - and presumably it was, but a normal scan probably does not look in the System Volume folder.
     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.