hmm.. what to do...

We have a community machine, which is used by all staff for doing client meetings, sign-offs on web sites, training etc, and I have a strange entry in it's NOD32 AMON log...

Time Module Object Name Virus Action User Info
2/5/2005 11:18:51 AM AMON file C:\System Volume Information\_restore{A7492ACC-0754-494A-A46C-7D59D0F35C8D}\RP76\A0005765.exe Win32/TrojanDownloader.Esepor.Y trojan error while cleaning - operation unavailable for this type of object CM1\Administrator

What would be the recommended fix for this particular infestation?

cheers

Greg

 

Turn off System Restore, run a scan (clean) with Nod32 in Safe Mode, make sure all settings are tweaked to the max before you run the scan...

Let us know how you go.

Cheers

 

system restore was/is off on this machine - booted into safe mode, maxed out detection and ran the scanner in clean mode - nothing found.

The 3 entries in the logs were 3rd and 5th of Feb. Perhaps a false positive that was corrected in an update between then and now?

Anyway - problem appear to have gone away - which is always a little unsettling...

regards

Greg