Hi every one, ran a scan this morning picked up, PPSDK activexscanner.inf . virus name win32:inf , which i believe is a trojan dropper. I put it in the chest , and did another scan and came up clean… Is it safe to delete this file without messing up othe programs… Thank You DANCO135. Running windows xp , avast , ZAP pro.
What was the file name, where was it found example (C:\windows\system32\infected-file-name.xxx) ?
You have done the right thing, ‘first do no harm’ don’t delete, send virus to the chest and investigate.
There is no rush to delete anything from the chest, they can’t do any harm there. Anything that you send to the chest you should leave there for a week or two. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.
You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner
Hi dance135,
Below you find a nice cleansing routine for this malware:
http://www.tech-forums.net/archive/topic/79513.html
polonus
Hi DavidR , the name of the file that was infected was c:\windows\downloaded program files…DANCO135
Thanks, I was just wondering if it might be in a folder protected by system restore and when moved/deleted a copy would be saved if you didn’t disable system restore. Hopefully polonous’s link will guide you through that if required.
Yes DavidR i disabled system restore and updated Avast defininitions and ran scan and it seems clean. I took it for spin through Trend Micro Pc-Cillin House call it seems clean…I want to thank you and Polonus for all your help…Danco135
Your welcome, glad we could help.