Unable to clean or delete virus infected files

  James-338344 17:05 04 Oct 03
Locked

Trend Micro Pc Cillin 2000 tells me that I have several files in Second Chance corrupted by a virus (TROJ_ISTBAR.A according to Trend Micro. It refuse to clean the affected files or quarantine them. Going by the instructions on the website, I've managed to delete most of the files by removing the programs but I still have those infected files. In addition, it has manged to worm its way into two files called
C:\_RESTORE\ARCHIVE\FS2326.CAB and
C:\_RESTORE\ARCHIVE\FS2326.CAB (A0002638.CPY)

Also, a program called WINLOGIN.exe is infected by what PC Cillin calls BKDR_SMALL.C. PC Cillin cannot clean this program but it has managed to quarantine it.

My problem is this. With TROJ_ISTBAR.A, can I safely ignore these infected files as I have removed all the other bits? If not, how do I remove them?

Secondly, what can I do about the BKDR_SMALL.C virus. Can my PC cope without WINLOGIN.exe or is there another way of removing the virus?

See "click here" for the TROJ_ISTBAR.A virus info.

JATF

  powerless 17:08 04 Oct 03

THere stuck in the system restore protected files.

You need to delete your restore points to remove the infected files.

  TMAn266 17:12 04 Oct 03

jaft trojans are usually harmless virus, they are not destructive at all, i have pc cillin 2003 and have discovered many trojans but have not infected or corrupted any of my files on drive c, th best scanner to use at the moment is avg go to click here, and download a trial version.

  VoG II 17:14 04 Oct 03

Heres how to do what Powerless says click here

Don't forget to turn it back on again!

  johnnyrocker 17:20 04 Oct 03

if you are running xp or ME you will need to disable system restore before cleaning, try an on line virus scan/clean as it may have corrupted your av itself would suggest click here or click here

cheers.

johnny.

  Jester2K II 19:48 04 Oct 03

1) These files are NOT in System Restore but in another program called Second Chance (as sort of early version of System Restore by another company). Its been assumed that you are running ME or XP but you have not confirmed or denied this.

You need to delete all the Second Chance Data. Right click the blue circle icon in the system tray (bottom right of the screen) to get a menu. Somewhere in their you can delete all but the latest backup.

The Trojans and viruses have been backed up by this software and although your (out of date) AV software can detect the viruses in the Second Chance folders it can't delete them as they are protected.

TROJ_ISTBAR.A is a Homepage Hijacker - not much to worry about.

BKDR_SMALL.C will be dealt with by the AV.

Personally i would delete the Second Chance data, download AVG 6 click here for free, uninstall your out of date PC-Cilin and install AVG. Then sweep the entire PC.

Remember anything in C:\_RESTORE\ARCHIVE etc is just a backed up version of the virus made by this software. As long as the file don't exist in C:\windows etc then you are OK.

  James-338344 16:54 05 Oct 03

Firstly an apology, I should have said that I was running Windows ME.

Thanks to all who responded especially Jester as the solution suggested seems to have got rid of all the occurences.

JATF

This thread is now locked and can not be replied to.

What is Amazon Go and will it come to the UK? The store without checkouts or queues

1995-2015: How technology has changed the world in 20 years

Hands-on with the Star Wars fighting drones you can fly yourself

iPhone 9 and beyond: 32 amazing future smartphone developments - graphene, supercapacitor…