trojan in xp restore

Avast Free Antivirus / Premium Security
1

Hi,
I recently ran a boot scan and it came up with a win:32 trojan in my Windows XP system volume information_restore.
The boot scan said it deleted the trojan but I’ve run the boot scan twice since that first time and it finds the same trojan each scan.
Can someone tell me if Avast has actually deleted this trojan or am I reinfecting this file somehow or how can I truly delete it from my computer?
Thank you.

2

About the only way to remove a file from system restore is to disable system restore and reboot. This will remove all restore points. Re-enable aftewards.

You should check the file a virustotal http://www.virustotal.com/en/indexf.html first to make sure it is actually infected and not a false positive.

3

Thank you very much.
I’ll try this and hope for the best.

4

You’re welcome. I should have also mentioned, you definately should do a system scan also before reenabling system restore.

5

i appreciate this.
thank you again.

6

For recurring infection, when a virus is replicant (coming and coming again), I recommend, besides disabling system restore (enabling it later):

  1. Clean your temporary files. You can use [ur=http://www.stevengould.org/downloads/cleanup/]CleanUp[/url] or the Windows Advanced Care features for that.

  2. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  3. It will be good if you download, install, update and run other trojan remover tools: a-squared and/or Free AVG Antispyware (trojan removers). Some users recommend SUPERantispyware or Spyware Terminator.

  4. Use the immunization of [ur=http://www.javacoolsoftware.com/spywareblaster.html]SpywareBlaste[/ur]r or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.