|
|
This may be the wrong news group for this question. If it is, kindly tell me the correct one. I am using OE 6 and IE 7 w/ windows XP SP2. AVG anti-Virus Free Edition performed its regularly scheduled scan of my computer. It found a Trojan Horse named JS/Uniz.B It also provided a file name and path. Upon completion of the scan, it deleted the Trojan. I have confirmed that the Trojan no longer resides on my computer. At least I cannot find it. Is there anything that I should do, other than change my firewall?
Lou
|
|
Most such things are installed, inadvertantly, by the user. It doesnt mean anything has got past your Firewall. Turn off system restore untill you know you are clean
"Lou" <louisr[ at ]copper.net> wrote in message news:466eb224_1[ at ]newsfeed.slurp.net...
[Quoted Text] > This may be the wrong news group for this question. If it is, kindly tell
me > the correct one. > I am using OE 6 and IE 7 w/ windows XP SP2. > AVG anti-Virus Free Edition performed its regularly scheduled scan of my > computer. > It found a Trojan Horse named JS/Uniz.B > It also provided a file name and path. > Upon completion of the scan, it deleted the Trojan. > I have confirmed that the Trojan no longer resides on my computer. At least > I cannot find it. > Is there anything that I should do, other than change my firewall? > > Lou > >
|
|
Why on earth would you want to turn off system restore? You will lose all restore points. Maybe you'll need one a week or so back in time. "DL" <address[ at ]invalid> wrote in message news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl...
[Quoted Text] > Most such things are installed, inadvertantly, by the user. It doesnt mean > anything has got past your Firewall. > Turn off system restore untill you know you are clean > > "Lou" <louisr[ at ]copper.net> wrote in message > news:466eb224_1[ at ]newsfeed.slurp.net... >> This may be the wrong news group for this question. If it is, kindly tell > me >> the correct one. >> I am using OE 6 and IE 7 w/ windows XP SP2. >> AVG anti-Virus Free Edition performed its regularly scheduled scan of my >> computer. >> It found a Trojan Horse named JS/Uniz.B >> It also provided a file name and path. >> Upon completion of the scan, it deleted the Trojan. >> I have confirmed that the Trojan no longer resides on my computer. At > least >> I cannot find it. >> Is there anything that I should do, other than change my firewall? >> >> Lou >> >> > >
|
|
Because if the sys is infected, then cleaned, if you subsequently use sys restore you will be reinfected :( "Unknown" <unknown[ at ]unknown.kom> wrote in message news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net...
[Quoted Text] > Why on earth would you want to turn off system restore? You will lose all > restore points. Maybe you'll need one a week or so back in time. > "DL" <address[ at ]invalid> wrote in message > news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... > > Most such things are installed, inadvertantly, by the user. It doesnt
mean > > anything has got past your Firewall. > > Turn off system restore untill you know you are clean > > > > "Lou" <louisr[ at ]copper.net> wrote in message > > news:466eb224_1[ at ]newsfeed.slurp.net... > >> This may be the wrong news group for this question. If it is, kindly tell > > me > >> the correct one. > >> I am using OE 6 and IE 7 w/ windows XP SP2. > >> AVG anti-Virus Free Edition performed its regularly scheduled scan of my > >> computer. > >> It found a Trojan Horse named JS/Uniz.B > >> It also provided a file name and path. > >> Upon completion of the scan, it deleted the Trojan. > >> I have confirmed that the Trojan no longer resides on my computer. At > > least > >> I cannot find it. > >> Is there anything that I should do, other than change my firewall? > >> > >> Lou > >> > >> > > > > > >
|
|
You are of course assuming the restore data is infected. Bad assumption. If one can go back a few weeks for example that time period may not be infected. Very bad advice turning off system restore. "DL" <address[ at ]invalid> wrote in message news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl...
[Quoted Text] > Because if the sys is infected, then cleaned, if you subsequently use sys > restore you will be reinfected > :( > "Unknown" <unknown[ at ]unknown.kom> wrote in message > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... >> Why on earth would you want to turn off system restore? You will lose all >> restore points. Maybe you'll need one a week or so back in time. >> "DL" <address[ at ]invalid> wrote in message >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... >> > Most such things are installed, inadvertantly, by the user. It doesnt > mean >> > anything has got past your Firewall. >> > Turn off system restore untill you know you are clean >> > >> > "Lou" <louisr[ at ]copper.net> wrote in message >> > news:466eb224_1[ at ]newsfeed.slurp.net... >> >> This may be the wrong news group for this question. If it is, kindly > tell >> > me >> >> the correct one. >> >> I am using OE 6 and IE 7 w/ windows XP SP2. >> >> AVG anti-Virus Free Edition performed its regularly scheduled scan of > my >> >> computer. >> >> It found a Trojan Horse named JS/Uniz.B >> >> It also provided a file name and path. >> >> Upon completion of the scan, it deleted the Trojan. >> >> I have confirmed that the Trojan no longer resides on my computer. At >> > least >> >> I cannot find it. >> >> Is there anything that I should do, other than change my firewall? >> >> >> >> Lou >> >> >> >> >> > >> > >> >> > >
|
|
The AV vendors recommend turning off system restore during the virus/malware removal process in order to keep from having a new restore point created that still contains the virus. After the infection is removed, you turn system restore back on.
You won't lose any restore points. You're turning off the program, not deleting restore points.
Tom "Unknown" <unknown[ at ]unknown.kom> wrote in message news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... | You are of course assuming the restore data is infected. Bad assumption. If | one can go back a few weeks for example that time period may not be | infected. Very bad advice turning off system restore. | "DL" <address[ at ]invalid> wrote in message | news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... | > Because if the sys is infected, then cleaned, if you subsequently use sys | > restore you will be reinfected | > :( | > "Unknown" <unknown[ at ]unknown.kom> wrote in message | > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... | >> Why on earth would you want to turn off system restore? You will lose all | >> restore points. Maybe you'll need one a week or so back in time. | >> "DL" <address[ at ]invalid> wrote in message | >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... | >> > Most such things are installed, inadvertantly, by the user. It doesnt | > mean | >> > anything has got past your Firewall. | >> > Turn off system restore untill you know you are clean | >> > | >> > "Lou" <louisr[ at ]copper.net> wrote in message | >> > news:466eb224_1[ at ]newsfeed.slurp.net... | >> >> This may be the wrong news group for this question. If it is, kindly | > tell | >> > me | >> >> the correct one. | >> >> I am using OE 6 and IE 7 w/ windows XP SP2. | >> >> AVG anti-Virus Free Edition performed its regularly scheduled scan of | > my | >> >> computer. | >> >> It found a Trojan Horse named JS/Uniz.B | >> >> It also provided a file name and path. | >> >> Upon completion of the scan, it deleted the Trojan. | >> >> I have confirmed that the Trojan no longer resides on my computer. At | >> > least | >> >> I cannot find it. | >> >> Is there anything that I should do, other than change my firewall? | >> >> | >> >> Lou | >> >> | >> >> | >> > | >> > | >> | >> | > | > | |
|
|
On Wed, 13 Jun 2007 10:59:42 -0500, "Tom Willett" <tompepper[ at ]mvps.invalid> wrote:
[Quoted Text] >The AV vendors recommend turning off system restore during the virus/malware >removal process in order to keep from having a new restore point created >that still contains the virus. After the infection is removed, you turn >system restore back on. > >You won't lose any restore points. You're turning off the program, not >deleting restore points.
Not true. Turning off System Restore also deletes all existing restore points. The AV vendors may recommend doing it that way, but I disagree. It decreases your options and is a poor choice.
>"Unknown" <unknown[ at ]unknown.kom> wrote in message >news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... >| You are of course assuming the restore data is infected. Bad assumption. >If >| one can go back a few weeks for example that time period may not be >| infected. Very bad advice turning off system restore. >| "DL" <address[ at ]invalid> wrote in message >| news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... >| > Because if the sys is infected, then cleaned, if you subsequently use >sys >| > restore you will be reinfected >| > :( >| > "Unknown" <unknown[ at ]unknown.kom> wrote in message >| > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... >| >> Why on earth would you want to turn off system restore? You will lose >all >| >> restore points. Maybe you'll need one a week or so back in time. >| >> "DL" <address[ at ]invalid> wrote in message >| >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... >| >> > Most such things are installed, inadvertantly, by the user. It doesnt >| > mean >| >> > anything has got past your Firewall. >| >> > Turn off system restore untill you know you are clean >| >> > >| >> > "Lou" <louisr[ at ]copper.net> wrote in message >| >> > news:466eb224_1[ at ]newsfeed.slurp.net... >| >> >> This may be the wrong news group for this question. If it is, kindly >| > tell >| >> > me >| >> >> the correct one. >| >> >> I am using OE 6 and IE 7 w/ windows XP SP2. >| >> >> AVG anti-Virus Free Edition performed its regularly scheduled scan >of >| > my >| >> >> computer. >| >> >> It found a Trojan Horse named JS/Uniz.B >| >> >> It also provided a file name and path. >| >> >> Upon completion of the scan, it deleted the Trojan. >| >> >> I have confirmed that the Trojan no longer resides on my computer. >At >| >> > least >| >> >> I cannot find it. >| >> >> Is there anything that I should do, other than change my firewall? >| >> >> >| >> >> Lou >| >> >> >| >> >> >| >> > >| >> > >| >> >| >> >| > >| > >| >| >
-- Ken Blake, Microsoft MVP Windows - Shell/User Please Reply to the Newsgroup
|
|
When you turn off system restore it automatically deletes all restore points. Try it. Then turn it back on and you'll see. I repeat-----Extremely poor advice. "Tom Willett" <tompepper[ at ]mvps.invalid> wrote in message news:%23fb0CPdrHHA.1380[ at ]TK2MSFTNGP04.phx.gbl...
[Quoted Text] > The AV vendors recommend turning off system restore during the > virus/malware > removal process in order to keep from having a new restore point created > that still contains the virus. After the infection is removed, you turn > system restore back on. > > You won't lose any restore points. You're turning off the program, not > deleting restore points. > > Tom > "Unknown" <unknown[ at ]unknown.kom> wrote in message > news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... > | You are of course assuming the restore data is infected. Bad assumption. > If > | one can go back a few weeks for example that time period may not be > | infected. Very bad advice turning off system restore. > | "DL" <address[ at ]invalid> wrote in message > | news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... > | > Because if the sys is infected, then cleaned, if you subsequently use > sys > | > restore you will be reinfected > | > :( > | > "Unknown" <unknown[ at ]unknown.kom> wrote in message > | > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... > | >> Why on earth would you want to turn off system restore? You will lose > all > | >> restore points. Maybe you'll need one a week or so back in time. > | >> "DL" <address[ at ]invalid> wrote in message > | >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... > | >> > Most such things are installed, inadvertantly, by the user. It > doesnt > | > mean > | >> > anything has got past your Firewall. > | >> > Turn off system restore untill you know you are clean > | >> > > | >> > "Lou" <louisr[ at ]copper.net> wrote in message > | >> > news:466eb224_1[ at ]newsfeed.slurp.net... > | >> >> This may be the wrong news group for this question. If it is, > kindly > | > tell > | >> > me > | >> >> the correct one. > | >> >> I am using OE 6 and IE 7 w/ windows XP SP2. > | >> >> AVG anti-Virus Free Edition performed its regularly scheduled scan > of > | > my > | >> >> computer. > | >> >> It found a Trojan Horse named JS/Uniz.B > | >> >> It also provided a file name and path. > | >> >> Upon completion of the scan, it deleted the Trojan. > | >> >> I have confirmed that the Trojan no longer resides on my computer. > At > | >> > least > | >> >> I cannot find it. > | >> >> Is there anything that I should do, other than change my firewall? > | >> >> > | >> >> Lou > | >> >> > | >> >> > | >> > > | >> > > | >> > | >> > | > > | > > | > | > >
|
|
Thanks, Ken. My error.
Tom
"Ken Blake, MVP" <kblake[ at ]this.is.am.invalid.domain> wrote in message news:vk70731109tu59p67947kfamg8c6950t57[ at ]4ax.com... | On Wed, 13 Jun 2007 10:59:42 -0500, "Tom Willett" | <tompepper[ at ]mvps.invalid> wrote: | | >The AV vendors recommend turning off system restore during the virus/malware | >removal process in order to keep from having a new restore point created | >that still contains the virus. After the infection is removed, you turn | >system restore back on. | > | >You won't lose any restore points. You're turning off the program, not | >deleting restore points. | | | Not true. Turning off System Restore also deletes all existing restore | points. The AV vendors may recommend doing it that way, but I | disagree. It decreases your options and is a poor choice. | | | | | | | >"Unknown" <unknown[ at ]unknown.kom> wrote in message | >news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... | >| You are of course assuming the restore data is infected. Bad assumption. | >If | >| one can go back a few weeks for example that time period may not be | >| infected. Very bad advice turning off system restore. | >| "DL" <address[ at ]invalid> wrote in message | >| news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... | >| > Because if the sys is infected, then cleaned, if you subsequently use | >sys | >| > restore you will be reinfected | >| > :( | >| > "Unknown" <unknown[ at ]unknown.kom> wrote in message | >| > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... | >| >> Why on earth would you want to turn off system restore? You will lose | >all | >| >> restore points. Maybe you'll need one a week or so back in time. | >| >> "DL" <address[ at ]invalid> wrote in message | >| >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... | >| >> > Most such things are installed, inadvertantly, by the user. It doesnt | >| > mean | >| >> > anything has got past your Firewall. | >| >> > Turn off system restore untill you know you are clean | >| >> > | >| >> > "Lou" <louisr[ at ]copper.net> wrote in message | >| >> > news:466eb224_1[ at ]newsfeed.slurp.net... | >| >> >> This may be the wrong news group for this question. If it is, kindly | >| > tell | >| >> > me | >| >> >> the correct one. | >| >> >> I am using OE 6 and IE 7 w/ windows XP SP2. | >| >> >> AVG anti-Virus Free Edition performed its regularly scheduled scan | >of | >| > my | >| >> >> computer. | >| >> >> It found a Trojan Horse named JS/Uniz.B | >| >> >> It also provided a file name and path. | >| >> >> Upon completion of the scan, it deleted the Trojan. | >| >> >> I have confirmed that the Trojan no longer resides on my computer. | >At | >| >> > least | >| >> >> I cannot find it. | >| >> >> Is there anything that I should do, other than change my firewall? | >| >> >> | >| >> >> Lou | >| >> >> | >| >> >> | >| >> > | >| >> > | >| >> | >| >> | >| > | >| > | >| | >| | > | | -- | Ken Blake, Microsoft MVP Windows - Shell/User | Please Reply to the Newsgroup
|
|
On Wed, 13 Jun 2007 11:53:37 -0500, "Tom Willett" <tompepper[ at ]mvps.invalid> wrote:
[Quoted Text] >Thanks, Ken. My error.
Not a problem, Tom. I just wanted to set the record straight.
>"Ken Blake, MVP" <kblake[ at ]this.is.am.invalid.domain> wrote in message >news:vk70731109tu59p67947kfamg8c6950t57[ at ]4ax.com... >| On Wed, 13 Jun 2007 10:59:42 -0500, "Tom Willett" >| <tompepper[ at ]mvps.invalid> wrote: >| >| >The AV vendors recommend turning off system restore during the >virus/malware >| >removal process in order to keep from having a new restore point created >| >that still contains the virus. After the infection is removed, you turn >| >system restore back on. >| > >| >You won't lose any restore points. You're turning off the program, not >| >deleting restore points. >| >| >| Not true. Turning off System Restore also deletes all existing restore >| points. The AV vendors may recommend doing it that way, but I >| disagree. It decreases your options and is a poor choice. >| >| >| >| >| >| >| >"Unknown" <unknown[ at ]unknown.kom> wrote in message >| >news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... >| >| You are of course assuming the restore data is infected. Bad >assumption. >| >If >| >| one can go back a few weeks for example that time period may not be >| >| infected. Very bad advice turning off system restore. >| >| "DL" <address[ at ]invalid> wrote in message >| >| news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... >| >| > Because if the sys is infected, then cleaned, if you subsequently use >| >sys >| >| > restore you will be reinfected >| >| > :( >| >| > "Unknown" <unknown[ at ]unknown.kom> wrote in message >| >| > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... >| >| >> Why on earth would you want to turn off system restore? You will >lose >| >all >| >| >> restore points. Maybe you'll need one a week or so back in time. >| >| >> "DL" <address[ at ]invalid> wrote in message >| >| >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... >| >| >> > Most such things are installed, inadvertantly, by the user. It >doesnt >| >| > mean >| >| >> > anything has got past your Firewall. >| >| >> > Turn off system restore untill you know you are clean >| >| >> > >| >| >> > "Lou" <louisr[ at ]copper.net> wrote in message >| >| >> > news:466eb224_1[ at ]newsfeed.slurp.net... >| >| >> >> This may be the wrong news group for this question. If it is, >kindly >| >| > tell >| >| >> > me >| >| >> >> the correct one. >| >| >> >> I am using OE 6 and IE 7 w/ windows XP SP2. >| >| >> >> AVG anti-Virus Free Edition performed its regularly scheduled >scan >| >of >| >| > my >| >| >> >> computer. >| >| >> >> It found a Trojan Horse named JS/Uniz.B >| >| >> >> It also provided a file name and path. >| >| >> >> Upon completion of the scan, it deleted the Trojan. >| >| >> >> I have confirmed that the Trojan no longer resides on my >computer. >| >At >| >| >> > least >| >| >> >> I cannot find it. >| >| >> >> Is there anything that I should do, other than change my >firewall? >| >| >> >> >| >| >> >> Lou >| >| >> >> >| >| >> >> >| >| >> > >| >| >> > >| >| >> >| >| >> >| >| > >| >| > >| >| >| >| >| > >| >| -- >| Ken Blake, Microsoft MVP Windows - Shell/User >| Please Reply to the Newsgroup >
-- Ken Blake, Microsoft MVP Windows - Shell/User Please Reply to the Newsgroup
|
|
I'm glad you did ;-)
Tom "Ken Blake, MVP" <kblake[ at ]this.is.am.invalid.domain> wrote in message news:qt9073dcestq6ga72i27guoi4au5gebjce[ at ]4ax.com... | On Wed, 13 Jun 2007 11:53:37 -0500, "Tom Willett" | <tompepper[ at ]mvps.invalid> wrote: | | >Thanks, Ken. My error. | | | Not a problem, Tom. I just wanted to set the record straight. | | | | >"Ken Blake, MVP" <kblake[ at ]this.is.am.invalid.domain> wrote in message | >news:vk70731109tu59p67947kfamg8c6950t57[ at ]4ax.com... | >| On Wed, 13 Jun 2007 10:59:42 -0500, "Tom Willett" | >| <tompepper[ at ]mvps.invalid> wrote: | >| | >| >The AV vendors recommend turning off system restore during the | >virus/malware | >| >removal process in order to keep from having a new restore point created | >| >that still contains the virus. After the infection is removed, you turn | >| >system restore back on. | >| > | >| >You won't lose any restore points. You're turning off the program, not | >| >deleting restore points. | >| | >| | >| Not true. Turning off System Restore also deletes all existing restore | >| points. The AV vendors may recommend doing it that way, but I | >| disagree. It decreases your options and is a poor choice. | >| | >| | >| | >| | >| | >| | >| >"Unknown" <unknown[ at ]unknown.kom> wrote in message | >| >news:SWTbi.3698$bP5.136[ at ]newssvr19.news.prodigy.net... | >| >| You are of course assuming the restore data is infected. Bad | >assumption. | >| >If | >| >| one can go back a few weeks for example that time period may not be | >| >| infected. Very bad advice turning off system restore. | >| >| "DL" <address[ at ]invalid> wrote in message | >| >| news:OTma7$TrHHA.1172[ at ]TK2MSFTNGP03.phx.gbl... | >| >| > Because if the sys is infected, then cleaned, if you subsequently use | >| >sys | >| >| > restore you will be reinfected | >| >| > :( | >| >| > "Unknown" <unknown[ at ]unknown.kom> wrote in message | >| >| > news:fICbi.18546$C96.7627[ at ]newssvr23.news.prodigy.net... | >| >| >> Why on earth would you want to turn off system restore? You will | >lose | >| >all | >| >| >> restore points. Maybe you'll need one a week or so back in time. | >| >| >> "DL" <address[ at ]invalid> wrote in message | >| >| >> news:OA26iFSrHHA.884[ at ]TK2MSFTNGP02.phx.gbl... | >| >| >> > Most such things are installed, inadvertantly, by the user. It | >doesnt | >| >| > mean | >| >| >> > anything has got past your Firewall. | >| >| >> > Turn off system restore untill you know you are clean | >| >| >> > | >| >| >> > "Lou" <louisr[ at ]copper.net> wrote in message | >| >| >> > news:466eb224_1[ at ]newsfeed.slurp.net... | >| >| >> >> This may be the wrong news group for this question. If it is, | >kindly | >| >| > tell | >| >| >> > me | >| >| >> >> the correct one. | >| >| >> >> I am using OE 6 and IE 7 w/ windows XP SP2. | >| >| >> >> AVG anti-Virus Free Edition performed its regularly scheduled | >scan | >| >of | >| >| > my | >| >| >> >> computer. | >| >| >> >> It found a Trojan Horse named JS/Uniz.B | >| >| >> >> It also provided a file name and path. | >| >| >> >> Upon completion of the scan, it deleted the Trojan. | >| >| >> >> I have confirmed that the Trojan no longer resides on my | >computer. | >| >At | >| >| >> > least | >| >| >> >> I cannot find it. | >| >| >> >> Is there anything that I should do, other than change my | >firewall? | >| >| >> >> | >| >| >> >> Lou | >| >| >> >> | >| >| >> >> | >| >| >> > | >| >| >> > | >| >| >> | >| >| >> | >| >| > | >| >| > | >| >| | >| >| | >| > | >| | >| -- | >| Ken Blake, Microsoft MVP Windows - Shell/User | >| Please Reply to the Newsgroup | > | | -- | Ken Blake, Microsoft MVP Windows - Shell/User | Please Reply to the Newsgroup
|
|
|