Hans Saul wrote:
>help please?i ran a scan with mcafee pro.,it found a bunch of files in c:/restore/temp with a .cpy extension.further research said that they were trojans....
>...i also enabled the view all hidden folders option,i could see c:/restore but not the temp folder that should be in there?is there a way to get into it in dos?any help would be appreciated,below is a list that mcafee had of the files in question.
>
>
>9/4/2003,4:21:26,112272,VSCAN,INFECTED,KRAUTBOY,krautboy,C:\_RESTORE\TEMP\A0076575.CPY,1,MultiDropper-BD,4137
>...
>
While viewing c:/restore in an Explorer window, append an "\" to the
end of address and hopefully you'll see the temp folder in the
drop-down. If so, check file & folder properties. Change them
accordingly (if hidden and/or read only). If you still can't delete
offending files from within Windows, go to DOS (select Run from START
menu, and enter command in in Win98 or lesser, or cmd if using Win2k or
above). From there make your way to the folder and delete from there. HTH.
Ian Carmichael
"Hold No Punches.." Rode brings you great shareware/freeware
programs with his honest opinions in this weekly column.
http://freepctech.com/rode
|