possible trojen?

system · 2006-08-15T15:06:45.000Z

have just run boot time scan with avast and found the same virus in the following locations,
A0035 189.dll
win32:dialer-669 {TrJ}
C:\system volume information_ restore_ {46DE8921-1D39-44D2-A9E9-6411 9261F211} RP…

btwebcontrol.dll
C:\program files\ internet explorer\ BTO

I have stored them in the virus chest for now, what is best to do with these, can i delete them

Eddy · 2006-08-15T15:11:53.000Z

Please follow the instructions on my website. (see my signature)
Click on one of the flags to select your prefered language there.

DavidR · 2006-08-15T16:48:06.000Z

The only way to remove the one in “C:\system volume information_ restore_ {46DE8921-1D39-44D2-A9E9-6411 9261F211} RP…” is to disable system restore and reboot.

The c:\System Volume Information folder is a part of the system restore function and as such is protected by windows, the only way to clean infected _restore points is to disable system restore and reboot. This will clear ALL _restore points. Once you have disabled system restore, reboot, scan your PC again and if clear enable system restore.

Win XP-ME - How to disable System Restore

Announcements