Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

trojan horse collect.ae


  • Please log in to reply
4 replies to this topic

#1 sjf201

sjf201

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:09 PM

Posted 21 September 2004 - 07:44 AM

HI there
could someone please help me out
AVG starts up telling me : trojan horse collect.ae
run AGV, it puts it into virus vault but it is still present.
I have used AIMfix in safe mode but tells me there are no viruses present.
Many thanks
Steve

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:09 PM

Posted 21 September 2004 - 07:54 AM

Where is it saying it is finding the virus?

#3 sjf201

sjf201
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:09 PM

Posted 22 September 2004 - 04:44 PM

virus Trojan horse Collected.AF
is found in file
C:\System Volume Information\_restore{D4F71785-733C-456B-8513-781FFA9A1A2F}\RP27\A0012594.EXE
TO REMOVE tis virus, please run AVG for windows.


this is the window that pops up.
I run AVG and reports no virus found.
Thanks for the help
Steve

#4 jgweed

jgweed

  • Members
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:09:09 PM

Posted 23 September 2004 - 10:41 AM

The virus is hiding, so it seems, in your system restore file.

I would suggest that you boot in safe mode, temporarily disable system restore, run AVG and remove the trojan. You will then need to re-enable system restore and set a manual restore point (you will loose prior restore points).

Cheers,
John
Whereof one cannot speak, thereof one should be silent.

#5 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:09 PM

Posted 23 September 2004 - 11:19 AM

Disabling system restore and renenabling it should clear the file automatically. Antivirus software cant access the file as it has no permissions to the System Volume Information directory.

You can find instructions on how to enable and reenable system restore here:

Managing Windows Millenium System Restore

or

Windows XP System Restore Guide

Disable and reenable system restore with instructions from tutorial above




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users