Once again AV2002 is harrassing me

[Sinster]

I keep getting these virus warnings

C:\System Volume Information\_restore{27702862-A66D-4CBB-A57F-52B246C6367B}\RP52\A0027225.exe
is infected with the W32.DlDer.Trojan virus.
Unable to repair this file.


Date: 1/4/2002, Time: 17:49:44, SYSTEM on JNAB
The file
C:\System Volume Information\_restore{27702862-A66D-4CBB-A57F-52B246C6367B}\RP52\A0027225.exe
is infected with the W32.DlDer.Trojan virus.
Access to the file was denied.

My computer is idle at this point. But when I try to manually scan
C:\System Volume Information
I get a clean bill of health.

 

[noah472]

Ypou will have to repair the file manually... try this link below for help in doing this.

N.b. couldnt find this on nortons site so have posted trends fix for it... should be fine though



http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DLDER.A

 

[Sinster]

Thanks

 

[Sinster]

That didn't work. I am still gettting

Date: 1/5/2002, Time: 6:53:34, SYSTEM on JNAB
The file
C:\System Volume Information\_restore{27702862-A66D-4CBB-A57F-52B246C6367B}\RP52\A0027225.exe
is infected with the W32.DlDer.Trojan virus.
Access to the file was denied.

I am also getting this error.


Event Type: Error
Event Source: Norton AntiVirus
Event Category: (1)
Event ID: 4097
Date: 1/5/2002
Time: 6:53:34 AM
User: NT AUTHORITY\SYSTEM
Computer: JNAB
Description:
The description for Event ID ( 4097 ) in Source ( Norton AntiVirus ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The file
C:\System Volume Information\_restore{27702862-A66D-4CBB-A57F-52B246C6367B}\RP52\A0027225.exe
is infected with the W32.DlDer.Trojan virus., Unable to repair this file..

 

[wassup_ken]

Turn off the system restore, delete the infected files, turn on system restore

from mcafees site:

Disabling the Restore Utility

1. Right click the My Computer icon on the Desktop, and choose Properties.
2. Click on the Performance Tab.
3. Click on the File System button.
4. Click on the Troubleshooting Tab.
5. Put a check mark next to "Disable System Restore".
6. Click the Apply button.
7. Click the Close button.
8. Click the Close button again.
NOTE: The Restore Utility will now be disabled.
9. Run a scan with VirusScan to delete all infected files, or browse the file's folder and remove the file's.
10. After removing the desired files, restart the computer normally.
NOTE: To re-enable the Restore Utility, follow steps 1-8 and on step 5 remove the check mark next to "Disable System Restore". The infected file's are removed and the System Restore is once again active.