Having trouble with a Trojan

[Rozzanger]

Trojan horse PSW.Generic7.AFBR
C:\System Volume Information\_restore{A8393674-085C-4723-B63E-39928C5F4C89}\RP63\A0072365.exe

Trojan horse PSW.Generic7.AFBR
C:\System Volume Information\_restore{A8393674-085C-4723-B63E-39928C5F4C89}\RP63\A0072365.exe

 

[Osiris]

Thats an easy fix

Disable System Restore, this will delete them files. If you want System Restore enabled, when we are finished and sure the system is clean, you can turn it back on.

So disable, run AVG, see if it finds anything and let me know

 

[Rozzanger]

Disabled system restore, did a full scan using AVG and found 2 threats:

Trojan horse SHeur2.BXNY
C:\Qoobox\Quarantine\C\WINDOWS\system32\_sdra64_.exe.zip:\sdra64.exe

Trojan horse SHeur2.BXNY
C:\Qoobox\Quarantine\C\WINDOWS\system32\_sdra64_.exe.zip

 

[Osiris]

Those are ok, its from what Combofix found. You can delete that folder if you like.

 

[Rozzanger]

Ok. Thank you for all the help, everything seems to be ok now. Is it alright if I re-enable system restore now?

 

[Osiris]

Sure is, as long as you see no activity of spyware, etc.