Page 1 of 3 123 LastLast
Results 1 to 10 of 21

Thread: I can't delete a trojan

  1. #1

    I can't delete a trojan

    os: win me, virus software: mcaffee, problem: i have a trojan that i can't delete. the file is _restore\temp\a0127475.cpy. when i go to dos and try to delete it i get access denied. when i try attrib, i get file not found. this sucks. i'm not very computer literate, i had to break out my dos for dummies book to try to figure it out. my son (age 19) turned me on to this site. i hope i can get some help. thanks alot, Sam

  2. #2

    Question Trojan problem

    Go to DOS and try typing the filename followed by -h -r. Then try deleting it.

  3. #3
    Senior Member
    Join Date
    Aug 2001
    Posts
    170

    Lightbulb The Cleaner

    Moosoft has a program called "the cleaner" which is made specifically to remove trojans.
    http://www.moosoft.com/download.php
    \"If you torture the data enough, it will confess.\" --Ronald Coase

  4. #4

    Thanks alot Ghost & Ivan

    I really appreciate the help, it's cool of you both. Thank you

  5. #5
    Banned
    Join Date
    Jul 2001
    Posts
    1,100
    Greetings:

    Did this take care of your problem?

  6. #6
    Banned
    Join Date
    Aug 2001
    Location
    Yes
    Posts
    4,424
    Go to DOS and try typing the filename followed by -h -r. Then try deleting it.
    The command actually is: ATTRIB -h -r filename

    This won't help, though. Files in the _RESTORE directory are in use by the OS. That's why access to those files is denied. (It's like your son preventing you from sawing off a branch you're actually sitting on: not a god idea).

    The only solution - besides of the good old format-command : disinfection. If you could name the trojan, that would actually help.

  7. #7
    Junior Member
    Join Date
    Aug 2001
    Posts
    7
    Check out this link from microsoft about the _restore folder:

    http://support.microsoft.com/support.../Q263/4/55.ASP

    Hope this helps.

  8. #8
    Banned
    Join Date
    Jul 2001
    Posts
    264
    Hey try this out:

    Format c: /a /s will rid you of most virs.

  9. #9
    Banned
    Join Date
    Aug 2001
    Location
    Yes
    Posts
    4,424
    Format c: /a /s will rid you of most virs.
    I bet format is the only DOS-command you know, Mr. know-it-all.
    What's with the /a parameter anyway? And why should you use the /s parameter? Won't help if your system source is infected.

    Being very constructive again, Mr. NoNecktoHoldmySuperBrain.

  10. #10
    Senior Member
    Join Date
    Aug 2001
    Posts
    170

    Angry

    Good grief. This is a computer security site - We are supposed to be dispelling crap like "format C:" and "rm -rf /". Thank goodness DOS gives you a warning unlike *nix, but it is still bad that stuff like that is mentioned.

    And don't even start on that "if they did it, then they deserve it" crap.
    \"If you torture the data enough, it will confess.\" --Ronald Coase

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •