Trojan Horse

[MJB]

My pc was infected with Downloader.updsys trojan horse.
I used AVG antivirus to get rid of it. Now my pc is
working o.k. but I get a periodic popup message that says
the trojan horse file is found in a subdirectory of
c:\System Volume Information. That is a protected system
directory and the AVG scan doesn't find the file when I
run it. How can I eliminate file or stop the popup
message?

[Amethyst]

MJB wrote:
> My pc was infected with Downloader.updsys trojan horse.
> I used AVG antivirus to get rid of it. Now my pc is
> working o.k. but I get a periodic popup message that says
> the trojan horse file is found in a subdirectory of
> c:\System Volume Information. That is a protected system
> directory and the AVG scan doesn't find the file when I
> run it. How can I eliminate file or stop the popup
> message?

The answer is the same for both. The trojan was backed up in a restore
point. The only way to remove it is to purge your restore point cache -
which would mean, of course, that you lose all saved points. To do this
right click on My Computer and select 'Properties' then click the system
restore tab. Check the 'Turn off System Restore' box and OK out. Reboot.
Once you have done this you can turn SR back on the same way.

--
Cassandra
Card carrying member of the Fresh Start Club 'The Undead Are People Too!'

Reply address is fake. Please send all praise, abuse, insults, bequests
of £1million to cassandra (at) craigy34 (dot) freeserve (dot) co (dot)
uk. Change the obvious to the obvious.
Private requests for assistance will not be acknowledged. Please post all
correspondence to the group so that all may benefit. Thank you.

[GK]

Wow, there are some smart people in here. Who
woulda thunk it?

Greg K

Amethyst wrote:
> MJB wrote:
>
>>My pc was infected with Downloader.updsys trojan horse.
>>I used AVG antivirus to get rid of it. Now my pc is
>>working o.k. but I get a periodic popup message that says
>>the trojan horse file is found in a subdirectory of
>>c:\System Volume Information. That is a protected system
>>directory and the AVG scan doesn't find the file when I
>>run it. How can I eliminate file or stop the popup
>>message?
>
>
> The answer is the same for both. The trojan was backed up in a restore
> point. The only way to remove it is to purge your restore point cache -
> which would mean, of course, that you lose all saved points. To do this
> right click on My Computer and select 'Properties' then click the system
> restore tab. Check the 'Turn off System Restore' box and OK out. Reboot.
> Once you have done this you can turn SR back on the same way.
>