-
August 26th, 2001, 02:58 PM
#1
Junior Member
I can't delete a trojan
os: win me, virus software: mcaffee, problem: i have a trojan that i can't delete. the file is _restore\temp\a0127475.cpy. when i go to dos and try to delete it i get access denied. when i try attrib, i get file not found. this sucks. i'm not very computer literate, i had to break out my dos for dummies book to try to figure it out. my son (age 19) turned me on to this site. i hope i can get some help. thanks alot, Sam
-
August 26th, 2001, 05:24 PM
#2
Junior Member
Trojan problem
Go to DOS and try typing the filename followed by -h -r. Then try deleting it.
-
August 26th, 2001, 05:52 PM
#3
Senior Member
The Cleaner
Moosoft has a program called "the cleaner" which is made specifically to remove trojans.
http://www.moosoft.com/download.php
\"If you torture the data enough, it will confess.\" --Ronald Coase
-
August 26th, 2001, 11:23 PM
#4
Junior Member
Thanks alot Ghost & Ivan
I really appreciate the help, it's cool of you both. Thank you
-
August 27th, 2001, 12:02 AM
#5
Greetings:
Did this take care of your problem?
-
August 27th, 2001, 03:24 AM
#6
Go to DOS and try typing the filename followed by -h -r. Then try deleting it.
The command actually is: ATTRIB -h -r filename
This won't help, though. Files in the _RESTORE directory are in use by the OS. That's why access to those files is denied. (It's like your son preventing you from sawing off a branch you're actually sitting on: not a god idea).
The only solution - besides of the good old format-command : disinfection. If you could name the trojan, that would actually help.
-
August 27th, 2001, 06:59 PM
#7
Junior Member
Check out this link from microsoft about the _restore folder:
http://support.microsoft.com/support.../Q263/4/55.ASP
Hope this helps.
-
August 27th, 2001, 07:37 PM
#8
Hey try this out:
Format c: /a /s will rid you of most virs.
-
August 28th, 2001, 04:11 AM
#9
Format c: /a /s will rid you of most virs.
I bet format is the only DOS-command you know, Mr. know-it-all.
What's with the /a parameter anyway? And why should you use the /s parameter? Won't help if your system source is infected.
Being very constructive again, Mr. NoNecktoHoldmySuperBrain.
-
August 28th, 2001, 07:16 PM
#10
Senior Member
Good grief. This is a computer security site - We are supposed to be dispelling crap like "format C:" and "rm -rf /". Thank goodness DOS gives you a warning unlike *nix, but it is still bad that stuff like that is mentioned.
And don't even start on that "if they did it, then they deserve it" crap.
\"If you torture the data enough, it will confess.\" --Ronald Coase
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|