PDA

View Full Version : hmm.. what to do...


webyourbusiness
February 23rd, 2005, 04:59 PM
We have a community machine, which is used by all staff for doing client meetings, sign-offs on web sites, training etc, and I have a strange entry in it's NOD32 AMON log...

Time Module Object Name Virus Action User Info
2/5/2005 11:18:51 AM AMON file C:\System Volume Information\_restore{A7492ACC-0754-494A-A46C-7D59D0F35C8D}\RP76\A0005765.exe Win32/TrojanDownloader.Esepor.Y trojan error while cleaning - operation unavailable for this type of object CM1\Administrator

What would be the recommended fix for this particular infestation?

cheers

Greg

Blackspear
February 23rd, 2005, 05:01 PM
{QUOTE-> What would be the recommended fix for this particular infestation? <-QUOTE}Turn off System Restore, run a scan (clean) with Nod32 in Safe Mode, make sure all settings are tweaked to the max before you run the scan...

Let us know how you go.

Cheers ;D

webyourbusiness
February 23rd, 2005, 06:40 PM
system restore was/is off on this machine - booted into safe mode, maxed out detection and ran the scanner in clean mode - nothing found.

The 3 entries in the logs were 3rd and 5th of Feb. Perhaps a false positive that was corrected in an update between then and now?

Anyway - problem appear to have gone away - which is always a little unsettling...

regards

Greg