Forum Home
Press F1
 
Thread ID: 39163 2003-10-29 06:05:00 Virus problem Mervyn (824) Press F1
Post ID Timestamp Content User
187511 2003-10-29 06:05:00 I use Windows XP home and Outlook Express with PC Cillin as my virus scanner which I keep up to date. For the 4th time I have now had PC Cillin tell me it has found a virus was unable to clean but has quarantined it.

The infected file was c:\systen volume information\_restore\A48B332 and virus is TROJ_STARTPAGE.U

Upon running a check rescan I get an all clear but later, sometimes the next day its back again. In the Quarantine section of PC Cillin I am told A0047850.exe c:\System Volu... etc has been quarantined.

Can anyone tell me how to get rid of this pesky thing please
Mervyn (824)
187512 2003-10-29 06:13:00 If the file is found in c:\systen volume information\_restore\A48B332 and virus is TROJ_STARTPAGE . U then you will need to clear your restore files .
Right click on My Computer then click on Properties . Click on System Restore tab then turn off Restore and reboot . This should purge all files in Restore then you can turn it back on . Beware that you will no longer have a restore point later than the day you perform this .

good luck
sam m
sam m (517)
187513 2003-10-29 06:17:00 As you can see from the path in the file location, the "virus" is located in your system restore files .

Its not a virus either, just a home page hijacker or Internet Explorer .

As its in the restore folder it is not able to be touched by AV programs, to eliminate it .

Simply open up Control Panel - System - System Restore .

Then tick the box "Turn off System Restore"
Reboot
Reverse the operation, and turn on System Restore .

This purges all old restore points, which means you cannot restore to a previous date . Sounds like you wouldn't want to anyway, as that would bring the trojan back .

The stored versions of any problems will be gone, and your system will continue to create new store points .
godfather (25)
187514 2003-10-29 10:09:00 Startpage may also interfere with XP's bootup . XP may blue screen on you on bootup . At least that is what versions A & B (yes they had been infected twice) did to a PC I worked on today .

If your xp machine does blue screen on bootup do a F8 boot (safe mode) as this seems to stop the virus loading, turn off sytem restore reboot in safe mode scan with your virus checker . Reboot (dosnt have to be in safe mode this time) turn your system restore back on if you wish .

BTW AVG will not run in safe mode BUT if you browse to the AVG directory there is what I loosly refer to as DOS version of AVG (sorry cant remember the exe name) that will scan and clean your system of this nastie .
beama (111)
187515 2003-10-29 20:07:00 Thank you all - such prompt replies - brilliant!

Wonder how the thingie got into my machine.Not by email attachment and my virus protection is kept right up to date and I have XP firewall on?
Mervyn (824)
1